syzkaller syzkaller login: [ 14.971681][ T30] kauditd_printk_skb: 29 callbacks suppressed [ 14.971696][ T30] audit: type=1400 audit(1763617046.606:59): avc: denied { transition } for pid=223 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 14.982877][ T30] audit: type=1400 audit(1763617046.606:60): avc: denied { noatsecure } for pid=223 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 14.990725][ T30] audit: type=1400 audit(1763617046.606:61): avc: denied { write } for pid=223 comm="sh" path="pipe:[14876]" dev="pipefs" ino=14876 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 15.011829][ T30] audit: type=1400 audit(1763617046.606:62): avc: denied { rlimitinh } for pid=223 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 15.030702][ T30] audit: type=1400 audit(1763617046.606:63): avc: denied { siginh } for pid=223 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.1.41' (ED25519) to the list of known hosts. 2025/11/20 05:37:36 parsed 1 programs [ 24.565143][ T30] audit: type=1400 audit(1763617056.196:64): avc: denied { node_bind } for pid=281 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 24.585942][ T30] audit: type=1400 audit(1763617056.196:65): avc: denied { module_request } for pid=281 comm="syz-execprog" kmod="net-pf-2-proto-262-type-1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 25.597183][ T30] audit: type=1400 audit(1763617057.226:66): avc: denied { mounton } for pid=289 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 25.598650][ T289] cgroup: Unknown subsys name 'net' [ 25.620134][ T30] audit: type=1400 audit(1763617057.226:67): avc: denied { mount } for pid=289 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 25.647284][ T30] audit: type=1400 audit(1763617057.256:68): avc: denied { unmount } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 25.647462][ T289] cgroup: Unknown subsys name 'devices' [ 25.851776][ T289] cgroup: Unknown subsys name 'hugetlb' [ 25.857417][ T289] cgroup: Unknown subsys name 'rlimit' [ 26.066676][ T30] audit: type=1400 audit(1763617057.696:69): avc: denied { setattr } for pid=289 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 26.090051][ T30] audit: type=1400 audit(1763617057.696:70): avc: denied { create } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 26.097501][ T292] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 26.110823][ T30] audit: type=1400 audit(1763617057.696:71): avc: denied { write } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.139398][ T30] audit: type=1400 audit(1763617057.696:72): avc: denied { read } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.160437][ T30] audit: type=1400 audit(1763617057.696:73): avc: denied { mounton } for pid=289 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 26.161988][ T289] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 26.631786][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.638890][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.646721][ T294] device bridge_slave_0 entered promiscuous mode [ 26.653888][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.660985][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.668499][ T294] device bridge_slave_1 entered promiscuous mode [ 26.733762][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.740846][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.748146][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.755199][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.774389][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.781726][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.789129][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 26.796876][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 26.805785][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 26.814104][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.821162][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.830537][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 26.838742][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.845808][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.858062][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 26.867640][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 26.881482][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 26.893031][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 26.901225][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 26.908655][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 26.916988][ T294] device veth0_vlan entered promiscuous mode [ 26.927209][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.936321][ T294] device veth1_macvtap entered promiscuous mode [ 26.945662][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.955922][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.973569][ T294] request_module fs-gadgetfs succeeded, but still no fs? [ 27.001291][ T294] syz-executor (294) used greatest stack depth: 20776 bytes left [ 27.380900][ T45] device bridge_slave_1 left promiscuous mode [ 27.387103][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.394765][ T45] device bridge_slave_0 left promiscuous mode [ 27.401013][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.408870][ T45] device veth1_macvtap left promiscuous mode [ 27.415098][ T45] device veth0_vlan left promiscuous mode 2025/11/20 05:37:39 executed programs: 0 [ 27.997527][ T361] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.005004][ T361] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.012647][ T361] device bridge_slave_0 entered promiscuous mode [ 28.019707][ T361] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.026880][ T361] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.034352][ T361] device bridge_slave_1 entered promiscuous mode [ 28.088915][ T361] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.095999][ T361] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.103316][ T361] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.110365][ T361] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.136865][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 28.144629][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.151919][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.166092][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 28.174376][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.181440][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.190378][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 28.198768][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.205847][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.217843][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 28.234086][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 28.247906][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 28.265825][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 28.274107][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 28.281733][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 28.290065][ T361] device veth0_vlan entered promiscuous mode [ 28.299595][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 28.315352][ T361] device veth1_macvtap entered promiscuous mode [ 28.324469][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 28.334534][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 285.559856][ C0] BUG: workqueue lockup - pool cpus=0 node=0 flags=0x0 nice=0 stuck for 257s! [ 285.568846][ C0] Showing busy workqueues and worker pools: [ 285.574800][ C0] workqueue events: flags=0x0 [ 285.579544][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=3/256 refcnt=4 [ 285.579587][ C0] pending: psi_avgs_work [ 285.579617][ T30] kauditd_printk_skb: 36 callbacks suppressed [ 285.579621][ C0] , vmstat_shepherd [ 285.579629][ T30] audit: type=1400 audit(1763617317.206:110): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 285.579641][ C0] , kfree_rcu_monitor [ 285.579663][ C0] workqueue events_power_efficient: flags=0x80 [ 285.587299][ T30] audit: type=1400 audit(1763617317.206:111): avc: denied { search } for pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 285.591892][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 285.591938][ C0] pending: check_lifetime [ 285.591967][ C0] workqueue mm_percpu_wq: flags=0x8 [ 285.672463][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 285.672515][ C0] pending: vmstat_update [ 285.672551][ C0] workqueue kblockd: flags=0x18 [ 285.689688][ C0] pwq 1: cpus=0 node=0 flags=0x0 nice=-20 active=1/256 refcnt=2 [ 285.689821][ C0] pending: blk_mq_timeout_work [ 285.689910][ C0] workqueue dm_bufio_cache: flags=0x8 [ 285.708235][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 285.708283][ C0] pending: work_fn [ 285.708374][ C0] workqueue mld: flags=0x40008 [ 285.724917][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/1 refcnt=27 [ 285.724963][ C0] pending: mld_ifc_work [ 285.724992][ C0] inactive: mld_dad_work, mld_dad_work, mld_ifc_work, mld_ifc_work, mld_ifc_work, mld_ifc_work, mld_dad_work, mld_ifc_work, mld_ifc_work, mld_ifc_work, mld_dad_work, mld_dad_work, mld_dad_work, mld_ifc_work, mld_ifc_work, mld_ifc_work, mld_ifc_work, mld_ifc_work, mld_ifc_work, mld_ifc_work, mld_ifc_work, mld_ifc_work, mld_dad_work, mld_dad_work, mld_ifc_work [ 285.725362][ C0] workqueue ipv6_addrconf: flags=0x40008 [ 285.776857][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/1 refcnt=37 [ 285.776904][ C0] pending: addrconf_dad_work [ 285.776930][ C0] inactive: addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work, addrconf_dad_work [ 285.777483][ C0] workqueue wg-kex-wg0: flags=0x24 [ 285.856413][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 285.856465][ C0] pending: wg_packet_handshake_receive_worker [ 285.856500][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 285.876027][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=3/256 refcnt=4 [ 285.876079][ C0] pending: wg_packet_encrypt_worker, wg_packet_tx_worker, wg_packet_decrypt_worker [ 285.876143][ C0] workqueue wg-kex-wg1: flags=0x24 [ 285.898604][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 285.898672][ C0] pending: wg_packet_handshake_receive_worker [ 285.898706][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 285.909540][ T30] audit: type=1400 audit(1763617317.206:112): avc: denied { write } for pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 285.912811][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=3/256 refcnt=4 [ 285.912857][ C0] pending: wg_packet_decrypt_worker, wg_packet_encrypt_worker, wg_packet_tx_worker [ 285.912921][ C0] workqueue wg-kex-wg2: flags=0x24 [ 285.918088][ T30] audit: type=1400 audit(1763617317.206:113): avc: denied { add_name } for pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 285.939270][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 285.939312][ C0] pending: wg_packet_handshake_receive_worker [ 285.939342][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 286.001580][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=2/256 refcnt=3 [ 286.001632][ C0] pending: wg_packet_encrypt_worker, wg_packet_tx_worker [ 286.001685][ C0] pool 4: cpus=0-1 flags=0x4 nice=0 hung=0s workers=4 idle: 8 371 10 [ 286.869536][ T30] audit: type=1400 audit(1763617317.226:114): avc: denied { create } for pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 287.439540][ T30] audit: type=1400 audit(1763617317.226:115): avc: denied { append open } for pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 288.039542][ T30] audit: type=1400 audit(1763617317.226:116): avc: denied { getattr } for pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1