syzkaller syzkaller login: [ 14.363421][ T28] kauditd_printk_skb: 31 callbacks suppressed [ 14.363437][ T28] audit: type=1400 audit(1765121345.145:59): avc: denied { transition } for pid=225 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 14.367882][ T28] audit: type=1400 audit(1765121345.145:60): avc: denied { noatsecure } for pid=225 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 14.371234][ T28] audit: type=1400 audit(1765121345.145:61): avc: denied { write } for pid=225 comm="sh" path="pipe:[14621]" dev="pipefs" ino=14621 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 14.374521][ T28] audit: type=1400 audit(1765121345.145:62): avc: denied { rlimitinh } for pid=225 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 14.377328][ T28] audit: type=1400 audit(1765121345.145:63): avc: denied { siginh } for pid=225 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 16.065618][ T228] sshd-session (228) used greatest stack depth: 21056 bytes left Warning: Permanently added '10.128.1.99' (ED25519) to the list of known hosts. 2025/12/07 15:29:14 parsed 1 programs [ 23.969470][ T28] audit: type=1400 audit(1765121354.755:64): avc: denied { node_bind } for pid=283 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 23.990183][ T28] audit: type=1400 audit(1765121354.755:65): avc: denied { module_request } for pid=283 comm="syz-execprog" kmod="net-pf-2-proto-262-type-1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 25.124515][ T28] audit: type=1400 audit(1765121355.905:66): avc: denied { mounton } for pid=292 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 25.125930][ T292] cgroup: Unknown subsys name 'net' [ 25.147230][ T28] audit: type=1400 audit(1765121355.905:67): avc: denied { mount } for pid=292 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 25.174549][ T28] audit: type=1400 audit(1765121355.945:68): avc: denied { unmount } for pid=292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 25.174771][ T292] cgroup: Unknown subsys name 'devices' [ 25.321275][ T292] cgroup: Unknown subsys name 'hugetlb' [ 25.327070][ T292] cgroup: Unknown subsys name 'rlimit' [ 25.440991][ T28] audit: type=1400 audit(1765121356.225:69): avc: denied { setattr } for pid=292 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 25.464216][ T28] audit: type=1400 audit(1765121356.225:70): avc: denied { create } for pid=292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.484663][ T28] audit: type=1400 audit(1765121356.225:71): avc: denied { write } for pid=292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.496638][ T294] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 25.505084][ T28] audit: type=1400 audit(1765121356.225:72): avc: denied { read } for pid=292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 25.533782][ T28] audit: type=1400 audit(1765121356.225:73): avc: denied { mounton } for pid=292 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 25.562455][ T292] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 26.372406][ T301] request_module fs-gadgetfs succeeded, but still no fs? [ 26.585087][ T305] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.594351][ T305] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.607540][ T305] device bridge_slave_0 entered promiscuous mode [ 26.639979][ T305] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.647056][ T305] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.659513][ T305] device bridge_slave_1 entered promiscuous mode [ 27.023063][ T305] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.030187][ T305] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.037623][ T305] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.044720][ T305] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.107091][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.118451][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.126307][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 27.134235][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 27.145731][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 27.155856][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.162966][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.170908][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 27.179260][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.186321][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.201967][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 27.210236][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 27.228494][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 27.254227][ T305] device veth0_vlan entered promiscuous mode [ 27.260845][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 27.269920][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 27.277541][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 27.306248][ T305] device veth1_macvtap entered promiscuous mode [ 27.325163][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 27.343033][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready 2025/12/07 15:29:18 executed programs: 0 [ 27.359612][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 27.579396][ T372] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.586479][ T372] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.594092][ T372] device bridge_slave_0 entered promiscuous mode [ 27.602622][ T372] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.609946][ T372] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.617349][ T372] device bridge_slave_1 entered promiscuous mode [ 27.681257][ T375] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.688329][ T375] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.696291][ T375] device bridge_slave_0 entered promiscuous mode [ 27.713459][ T375] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.720731][ T375] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.728202][ T375] device bridge_slave_1 entered promiscuous mode [ 27.798183][ T369] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.805316][ T369] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.812795][ T369] device bridge_slave_0 entered promiscuous mode [ 27.832341][ T369] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.839761][ T369] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.847227][ T369] device bridge_slave_1 entered promiscuous mode [ 27.897980][ T371] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.905305][ T371] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.912845][ T371] device bridge_slave_0 entered promiscuous mode [ 27.923380][ T376] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.930577][ T376] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.937982][ T376] device bridge_slave_0 entered promiscuous mode [ 27.950997][ T376] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.958270][ T376] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.966671][ T376] device bridge_slave_1 entered promiscuous mode [ 27.973314][ T371] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.980464][ T371] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.987880][ T371] device bridge_slave_1 entered promiscuous mode [ 28.153638][ T372] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.160731][ T372] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.168027][ T372] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.175115][ T372] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.203519][ T375] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.210706][ T375] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.217986][ T375] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.225049][ T375] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.248304][ T369] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.255394][ T369] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.262714][ T369] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.269788][ T369] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.307494][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 28.315259][ T318] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.323124][ T318] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.331153][ T318] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.338348][ T318] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.345998][ T318] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.353429][ T318] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.388740][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 28.397004][ T318] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.404096][ T318] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.411509][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 28.421181][ T318] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.428235][ T318] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.450420][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 28.458531][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 28.467220][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 28.502205][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 28.510807][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 28.519412][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 28.527546][ T318] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.534591][ T318] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.542179][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 28.550659][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 28.558763][ T318] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.565810][ T318] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.573343][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 28.580973][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 28.588384][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 28.596812][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 28.605031][ T318] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.612087][ T318] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.619713][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 28.627997][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 28.636343][ T318] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.643392][ T318] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.650883][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 28.658906][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 28.667175][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 28.692944][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 28.701318][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 28.710488][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 28.718581][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 28.726872][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 28.735487][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 28.743884][ T318] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.750933][ T318] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.758321][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 28.766873][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 28.775208][ T318] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.782267][ T318] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.809375][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 28.817897][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 28.826451][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 28.834486][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 28.842929][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 28.851419][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 28.859787][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 28.867630][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 28.875894][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 28.884182][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 28.892326][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 28.899852][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 28.907300][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 28.915009][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 28.922690][ T372] device veth0_vlan entered promiscuous mode [ 28.939387][ T375] device veth0_vlan entered promiscuous mode [ 28.946287][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 28.954785][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 28.963139][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 28.971491][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 28.978984][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 28.986776][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 28.995576][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 29.003859][ T318] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.010909][ T318] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.018395][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 29.047542][ T371] device veth0_vlan entered promiscuous mode [ 29.055856][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 29.064388][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 29.072746][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 29.080852][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 29.088290][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 29.096696][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 29.105104][ T318] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.112183][ T318] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.119749][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 29.127823][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 29.136048][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 29.144776][ T375] device veth1_macvtap entered promiscuous mode [ 29.162964][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 29.171264][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 29.185970][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 29.194491][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 29.203082][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 29.211872][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 29.222171][ T372] device veth1_macvtap entered promiscuous mode [ 29.240211][ T371] device veth1_macvtap entered promiscuous mode [ 29.248541][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 29.256382][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 29.264746][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 29.273813][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 29.288993][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 29.296997][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 29.310188][ T376] device veth0_vlan entered promiscuous mode [ 29.323641][ T376] device veth1_macvtap entered promiscuous mode [ 29.333163][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 29.341412][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 29.348837][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 29.356524][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 29.364825][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 29.372404][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 29.379913][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 29.393463][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 29.401888][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 29.410769][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 29.419019][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 29.428038][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 29.437157][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 29.447675][ T369] device veth0_vlan entered promiscuous mode [ 29.486493][ T345] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 29.510169][ T345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 29.529268][ T345] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 29.547759][ T345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 29.575849][ T369] device veth1_macvtap entered promiscuous mode [ 29.601316][ T345] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 29.610146][ T345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 29.618816][ T345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 29.639787][ T345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 29.658219][ T345] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 29.684155][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 29.702692][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 29.749926][ T423] loop3: detected capacity change from 0 to 40427 [ 29.760102][ T345] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 29.778359][ T423] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504) [ 29.788199][ T345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 29.820546][ T423] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 29.828860][ T423] F2FS-fs (loop3): fault_injection options not supported [ 29.842239][ T425] loop1: detected capacity change from 0 to 40427 [ 29.858157][ T423] F2FS-fs (loop3): fault_type options not supported [ 29.865431][ T425] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504) [ 29.880014][ T425] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 29.888351][ T425] F2FS-fs (loop1): fault_injection options not supported [ 29.897670][ T423] F2FS-fs (loop3): invalid crc value [ 29.909354][ T425] F2FS-fs (loop1): fault_type options not supported [ 29.924703][ T425] F2FS-fs (loop1): invalid crc value [ 29.940365][ T423] F2FS-fs (loop3): Found nat_bits in checkpoint [ 29.973413][ T425] F2FS-fs (loop1): Found nat_bits in checkpoint [ 30.000974][ T43] device bridge_slave_1 left promiscuous mode [ 30.017350][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.035581][ T43] device bridge_slave_0 left promiscuous mode [ 30.056472][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.064342][ T423] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 30.079432][ T423] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 30.080367][ T425] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 30.095173][ T43] device veth1_macvtap left promiscuous mode [ 30.096453][ T428] loop2: detected capacity change from 0 to 40427 [ 30.109314][ T43] device veth0_vlan left promiscuous mode [ 30.115088][ T28] kauditd_printk_skb: 31 callbacks suppressed [ 30.115102][ T28] audit: type=1400 audit(1765121360.895:105): avc: denied { mount } for pid=422 comm="syz.3.20" name="/" dev="loop3" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 30.122783][ T423] F2FS-fs (loop3): switch discard_unit option is not allowed [ 30.142845][ T425] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 30.176095][ T428] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504) [ 30.190534][ T425] F2FS-fs (loop1): switch discard_unit option is not allowed [ 30.213971][ T428] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 30.227112][ T28] audit: type=1400 audit(1765121360.915:106): avc: denied { write } for pid=422 comm="syz.3.20" name="/" dev="loop3" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 30.229176][ T428] F2FS-fs (loop2): fault_injection options not supported [ 30.256934][ T441] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 30.268688][ T441] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 30.277122][ T441] CPU: 1 PID: 441 Comm: syz.3.20 Not tainted syzkaller #0 [ 30.284272][ T441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 30.294381][ T441] RIP: 0010:update_sit_entry+0x4f9/0x15a0 [ 30.299106][ T28] audit: type=1400 audit(1765121360.915:107): avc: denied { add_name } for pid=422 comm="syz.3.20" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 30.300154][ T441] Code: 00 00 fc ff df 80 3c 08 00 74 08 48 89 df e8 fe e5 8c ff 48 8b 1b 4c 01 f3 48 89 d8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <0f> b6 04 08 84 c0 0f 85 55 0f 00 00 44 0f b6 23 44 89 e0 44 08 f8 [ 30.340206][ T441] RSP: 0018:ffffc90000df6fc0 EFLAGS: 00010246 [ 30.346324][ T441] RAX: 0000000000000000 RBX: 0000000000000000 RCX: dffffc0000000000 [ 30.347593][ T430] loop6: detected capacity change from 0 to 40427 [ 30.354315][ T441] RDX: ffff8881194ae540 RSI: 0000000000000000 RDI: 0000000000000000 [ 30.354331][ T441] RBP: ffffc90000df7090 R08: ffff8881194ae540 R09: 0000000000000003 [ 30.354344][ T441] R10: 00000000ffffffff R11: 0000000000000000 R12: 0000000000000000 [ 30.354355][ T441] R13: ffff888116d6c0c8 R14: 0000000000000000 R15: 0000000000000080 [ 30.354368][ T441] FS: 00007f0ee03de6c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 30.354385][ T441] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 30.354399][ T441] CR2: 0000000000000000 CR3: 0000000131869000 CR4: 00000000003506a0 [ 30.354415][ T441] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 30.354427][ T441] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 30.354439][ T441] Call Trace: [ 30.354446][ T441] [ 30.354454][ T441] ? __kasan_check_write+0x14/0x20 [ 30.367893][ T28] audit: type=1400 audit(1765121360.915:108): avc: denied { create } for pid=422 comm="syz.3.20" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 30.368868][ T441] ? ktime_get_coarse_with_offset+0x153/0x1a0 [ 30.469495][ T441] f2fs_allocate_data_block+0x148c/0x3af0 [ 30.475236][ T441] ? __cfi__raw_spin_lock+0x10/0x10 [ 30.480465][ T441] ? _raw_spin_unlock+0x4c/0x70 [ 30.485321][ T441] ? f2fs_inode_dirtied+0x308/0x360 [ 30.490537][ T441] ? __cfi_f2fs_allocate_data_block+0x10/0x10 [ 30.496624][ T441] ? f2fs_mark_inode_dirty_sync+0x13e/0x1c0 [ 30.502535][ T441] ? inc_valid_block_count+0x56d/0x9e0 [ 30.508006][ T441] f2fs_map_blocks+0x11a8/0x3a60 [ 30.512956][ T441] ? __cfi_f2fs_map_blocks+0x10/0x10 [ 30.518249][ T441] f2fs_iomap_begin+0x1f5/0x920 [ 30.523107][ T441] ? __cfi_f2fs_iomap_begin+0x10/0x10 [ 30.528490][ T441] iomap_iter+0x5b7/0xb30 [ 30.532827][ T441] ? __cfi_f2fs_iomap_begin+0x10/0x10 [ 30.538204][ T441] __iomap_dio_rw+0xc34/0x1bd0 [ 30.542978][ T441] ? __cfi___iomap_dio_rw+0x10/0x10 [ 30.548188][ T441] ? down_read_trylock+0x273/0x640 [ 30.553311][ T441] ? fault_in_readable+0xd0/0x150 [ 30.558342][ T441] ? fault_in_readable+0x142/0x150 [ 30.563459][ T441] ? fault_in_iov_iter_readable+0xc3/0x320 [ 30.569272][ T441] f2fs_file_write_iter+0x181e/0x2550 [ 30.574654][ T441] ? __cfi_f2fs_file_write_iter+0x10/0x10 [ 30.580386][ T441] ? __this_cpu_preempt_check+0x13/0x20 [ 30.585945][ T441] ? memcg_rstat_updated+0x56/0x110 [ 30.591157][ T441] ? cgroup_rstat_updated+0xf5/0x370 [ 30.596444][ T441] ? __mod_memcg_lruvec_state+0xd4/0x110 [ 30.602104][ T441] ? avc_policy_seqno+0x1b/0x70 [ 30.606993][ T441] ? fsnotify_perm+0x67/0x5b0 [ 30.611689][ T441] ? security_file_permission+0x8a/0xb0 [ 30.617250][ T441] vfs_write+0x5db/0xca0 [ 30.621506][ T441] ? __cfi_vfs_write+0x10/0x10 [ 30.626286][ T441] ? __cfi_mutex_lock+0x10/0x10 [ 30.631150][ T441] ? __fdget_pos+0x2cd/0x380 [ 30.635744][ T441] ? ksys_write+0x71/0x240 [ 30.640164][ T441] ksys_write+0x140/0x240 [ 30.644499][ T441] ? __cfi_ksys_write+0x10/0x10 [ 30.649350][ T441] ? do_user_addr_fault+0x9ac/0x1050 [ 30.654649][ T441] ? debug_smp_processor_id+0x17/0x20 [ 30.660082][ T441] __x64_sys_write+0x7b/0x90 [ 30.664690][ T441] x64_sys_call+0x27b/0x9a0 [ 30.669213][ T441] do_syscall_64+0x4c/0xa0 [ 30.673642][ T441] ? clear_bhb_loop+0x30/0x80 [ 30.678331][ T441] ? clear_bhb_loop+0x30/0x80 [ 30.683040][ T441] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 30.688950][ T441] RIP: 0033:0x7f0ee058f749 [ 30.693383][ T441] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 30.712993][ T441] RSP: 002b:00007f0ee03de038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 30.721413][ T441] RAX: ffffffffffffffda RBX: 00007f0ee07e6090 RCX: 00007f0ee058f749 [ 30.729392][ T441] RDX: 00000000fffffd62 RSI: 0000000000000000 RDI: 0000000000000004 [ 30.737365][ T441] RBP: 00007f0ee0613f91 R08: 0000000000000000 R09: 0000000000000000 [ 30.745346][ T441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 30.753327][ T441] R13: 00007f0ee07e6128 R14: 00007f0ee07e6090 R15: 00007ffd42484158 [ 30.761396][ T441] [ 30.764417][ T441] Modules linked in: [ 30.770604][ T371] syz-executor: attempt to access beyond end of device [ 30.770604][ T371] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 30.786279][ T28] audit: type=1400 audit(1765121360.915:109): avc: denied { read write open } for pid=422 comm="syz.3.20" path="/0/file4/file1" dev="loop3" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 30.789404][ T428] F2FS-fs (loop2): fault_type options not supported [ 30.827014][ T430] F2FS-fs (loop6): Insane cp_payload (553648128 >= 504) [ 30.844927][ T430] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 30.853712][ T430] F2FS-fs (loop6): fault_injection options not supported [ 30.861089][ T28] audit: type=1400 audit(1765121360.915:110): avc: denied { remount } for pid=422 comm="syz.3.20" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 30.880592][ T430] F2FS-fs (loop6): fault_type options not supported [ 30.888018][ T430] F2FS-fs (loop6): invalid crc value [ 30.893706][ T28] audit: type=1400 audit(1765121361.605:111): avc: denied { read } for pid=85 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 30.915790][ T428] F2FS-fs (loop2): invalid crc value [ 30.916213][ T28] audit: type=1400 audit(1765121361.605:112): avc: denied { search } for pid=85 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 30.928613][ T432] loop5: detected capacity change from 0 to 40427 [ 30.942957][ T28] audit: type=1400 audit(1765121361.605:113): avc: denied { write } for pid=85 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 30.971601][ T430] F2FS-fs (loop6): Found nat_bits in checkpoint [ 30.983699][ T428] F2FS-fs (loop2): Found nat_bits in checkpoint [ 30.990851][ T432] F2FS-fs (loop5): Insane cp_payload (553648128 >= 504) [ 30.998164][ T432] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 30.998244][ T28] audit: type=1400 audit(1765121361.605:114): avc: denied { add_name } for pid=85 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 31.019534][ T432] F2FS-fs (loop5): fault_injection options not supported [ 31.059269][ T432] F2FS-fs (loop5): fault_type options not supported [ 31.066220][ T430] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 31.079189][ T430] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 31.087109][ T432] F2FS-fs (loop5): invalid crc value [ 31.093083][ T430] F2FS-fs (loop6): switch discard_unit option is not allowed [ 31.102142][ T428] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 31.114601][ T428] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 31.122756][ T376] syz-executor: attempt to access beyond end of device [ 31.122756][ T376] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 31.137602][ T428] F2FS-fs (loop2): switch discard_unit option is not allowed [ 31.160832][ T432] F2FS-fs (loop5): Found nat_bits in checkpoint [ 31.167904][ T372] syz-executor: attempt to access beyond end of device [ 31.167904][ T372] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 31.269275][ T441] ---[ end trace 0000000000000000 ]--- [ 31.291383][ T432] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 31.299252][ T441] RIP: 0010:update_sit_entry+0x4f9/0x15a0 [ 31.310991][ T432] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 31.313384][ T441] Code: 00 00 fc ff df 80 3c 08 00 74 08 48 89 df e8 fe e5 8c ff 48 8b 1b 4c 01 f3 48 89 d8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <0f> b6 04 08 84 c0 0f 85 55 0f 00 00 44 0f b6 23 44 89 e0 44 08 f8 [ 31.323114][ T432] F2FS-fs (loop5): switch discard_unit option is not allowed [ 31.355710][ T441] RSP: 0018:ffffc90000df6fc0 EFLAGS: 00010246 [ 31.362362][ T441] RAX: 0000000000000000 RBX: 0000000000000000 RCX: dffffc0000000000 [ 31.380669][ T441] RDX: ffff8881194ae540 RSI: 0000000000000000 RDI: 0000000000000000 [ 31.409163][ T441] RBP: ffffc90000df7090 R08: ffff8881194ae540 R09: 0000000000000003 [ 31.423359][ T441] R10: 00000000ffffffff R11: 0000000000000000 R12: 0000000000000000 [ 31.438964][ T369] syz-executor: attempt to access beyond end of device [ 31.438964][ T369] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 31.463130][ T441] R13: ffff888116d6c0c8 R14: 0000000000000000 R15: 0000000000000080 [ 31.480837][ T441] FS: 00007f0ee03de6c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 31.491802][ T450] loop1: detected capacity change from 0 to 40427 [ 31.499633][ T441] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 31.514390][ T450] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504) [ 31.534696][ T441] CR2: 00005555927e14a8 CR3: 0000000131869000 CR4: 00000000003506b0 [ 31.543475][ T450] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 31.553661][ T441] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 31.563165][ T450] F2FS-fs (loop1): fault_injection options not supported [ 31.570545][ T441] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 31.578606][ T450] F2FS-fs (loop1): fault_type options not supported [ 31.586187][ T441] Kernel panic - not syncing: Fatal exception [ 31.592611][ T441] Kernel Offset: disabled [ 31.596948][ T441] Rebooting in 86400 seconds..