Warning: Permanently added '10.128.1.193' (ED25519) to the list of known hosts. 2026/02/12 18:56:02 parsed 1 programs [ 26.275045][ T36] audit: type=1400 audit(1770922562.940:64): avc: denied { node_bind } for pid=290 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 27.452975][ T36] audit: type=1400 audit(1770922564.120:65): avc: denied { mounton } for pid=296 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 27.454050][ T296] cgroup: Unknown subsys name 'net' [ 27.477294][ T36] audit: type=1400 audit(1770922564.120:66): avc: denied { mount } for pid=296 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.505943][ T36] audit: type=1400 audit(1770922564.160:67): avc: denied { unmount } for pid=296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.506130][ T296] cgroup: Unknown subsys name 'devices' [ 27.703986][ T296] cgroup: Unknown subsys name 'hugetlb' [ 27.710247][ T296] cgroup: Unknown subsys name 'rlimit' [ 27.808601][ T36] audit: type=1400 audit(1770922564.470:68): avc: denied { setattr } for pid=296 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 27.832771][ T36] audit: type=1400 audit(1770922564.470:69): avc: denied { create } for pid=296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.842022][ T300] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 27.853871][ T36] audit: type=1400 audit(1770922564.470:70): avc: denied { write } for pid=296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.886037][ T36] audit: type=1400 audit(1770922564.470:71): avc: denied { read } for pid=296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 27.906899][ T36] audit: type=1400 audit(1770922564.470:72): avc: denied { sys_module } for pid=296 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 27.928450][ T36] audit: type=1400 audit(1770922564.470:73): avc: denied { mounton } for pid=296 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 27.956273][ T296] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 28.990041][ T306] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 29.380660][ T325] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.387992][ T325] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.395496][ T325] bridge_slave_0: entered allmulticast mode [ 29.403483][ T325] bridge_slave_0: entered promiscuous mode [ 29.430265][ T325] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.438521][ T325] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.452780][ T325] bridge_slave_1: entered allmulticast mode [ 29.471294][ T325] bridge_slave_1: entered promiscuous mode [ 29.788111][ T325] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.795223][ T325] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.803062][ T325] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.810294][ T325] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.869191][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.876564][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.908339][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.915628][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.938173][ T369] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.945483][ T369] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.022639][ T325] veth0_vlan: entered promiscuous mode [ 30.046967][ T325] veth1_macvtap: entered promiscuous mode 2026/02/12 18:56:06 executed programs: 0 [ 30.319273][ T377] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.326735][ T377] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.335417][ T377] bridge_slave_0: entered allmulticast mode [ 30.342106][ T377] bridge_slave_0: entered promiscuous mode [ 30.363513][ T377] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.370843][ T377] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.378822][ T377] bridge_slave_1: entered allmulticast mode [ 30.385569][ T377] bridge_slave_1: entered promiscuous mode [ 30.435335][ T381] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.442696][ T381] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.449935][ T381] bridge_slave_0: entered allmulticast mode [ 30.457275][ T381] bridge_slave_0: entered promiscuous mode [ 30.463499][ T378] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.470720][ T378] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.477904][ T378] bridge_slave_0: entered allmulticast mode [ 30.484311][ T378] bridge_slave_0: entered promiscuous mode [ 30.490997][ T378] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.498446][ T378] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.505682][ T378] bridge_slave_1: entered allmulticast mode [ 30.512207][ T378] bridge_slave_1: entered promiscuous mode [ 30.522405][ T381] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.529478][ T381] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.536656][ T381] bridge_slave_1: entered allmulticast mode [ 30.543031][ T381] bridge_slave_1: entered promiscuous mode [ 30.631474][ T379] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.639144][ T379] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.646604][ T379] bridge_slave_0: entered allmulticast mode [ 30.653068][ T379] bridge_slave_0: entered promiscuous mode [ 30.661352][ T379] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.669119][ T379] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.676247][ T379] bridge_slave_1: entered allmulticast mode [ 30.682472][ T379] bridge_slave_1: entered promiscuous mode [ 30.700250][ T13] bridge_slave_1: left allmulticast mode [ 30.706055][ T13] bridge_slave_1: left promiscuous mode [ 30.712036][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.720127][ T13] bridge_slave_0: left allmulticast mode [ 30.725996][ T13] bridge_slave_0: left promiscuous mode [ 30.731706][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.859947][ T377] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.867060][ T377] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.874577][ T377] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.881941][ T377] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.893565][ T13] veth1_macvtap: left promiscuous mode [ 30.899291][ T13] veth0_vlan: left promiscuous mode [ 30.959459][ T381] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.966825][ T381] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.974247][ T381] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.981450][ T381] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.007371][ T379] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.014830][ T379] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.022690][ T379] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.030020][ T379] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.048398][ T378] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.057346][ T378] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.064805][ T378] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.072117][ T378] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.092556][ T370] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.100137][ T370] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.107734][ T370] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.115363][ T370] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.123386][ T370] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.131335][ T370] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.139507][ T370] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.146875][ T370] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.157004][ T370] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.164257][ T370] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.193463][ T370] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.200657][ T370] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.208786][ T370] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.216077][ T370] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.231022][ T370] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.238746][ T370] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.256664][ T370] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.264282][ T370] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.272499][ T370] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.280230][ T370] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.292810][ T370] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.300182][ T370] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.309239][ T369] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.316675][ T369] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.362882][ T377] veth0_vlan: entered promiscuous mode [ 31.377052][ T378] veth0_vlan: entered promiscuous mode [ 31.392573][ T379] veth0_vlan: entered promiscuous mode [ 31.409254][ T377] veth1_macvtap: entered promiscuous mode [ 31.418132][ T378] veth1_macvtap: entered promiscuous mode [ 31.436194][ T379] veth1_macvtap: entered promiscuous mode [ 31.448776][ T381] veth0_vlan: entered promiscuous mode [ 31.493501][ T381] veth1_macvtap: entered promiscuous mode [ 31.516763][ T36] kauditd_printk_skb: 31 callbacks suppressed [ 31.516782][ T36] audit: type=1400 audit(1770922568.180:105): avc: denied { mount } for pid=418 comm="syz.0.17" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 2026/02/12 18:56:11 executed programs: 592 2026/02/12 18:56:16 executed programs: 1585 [ 44.126729][ T369] bridge_slave_1: left allmulticast mode [ 44.136333][ T369] bridge_slave_1: left promiscuous mode [ 44.142520][ T369] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.151683][ T369] bridge_slave_0: left allmulticast mode [ 44.159289][ T369] bridge_slave_0: left promiscuous mode [ 44.173153][ T369] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.290934][ T7069] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.301619][ T7069] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.310971][ T7069] bridge_slave_0: entered allmulticast mode [ 44.318175][ T7069] bridge_slave_0: entered promiscuous mode [ 44.327473][ T369] veth1_macvtap: left promiscuous mode [ 44.336640][ T369] veth0_vlan: left promiscuous mode [ 44.429324][ T7069] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.440637][ T7069] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.449405][ T7069] bridge_slave_1: entered allmulticast mode [ 44.458884][ T7069] bridge_slave_1: entered promiscuous mode [ 44.576702][ T7069] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.583985][ T7069] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.591236][ T7069] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.598412][ T7069] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.641800][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.650990][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.661088][ T370] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.668887][ T370] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.680510][ T370] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.687976][ T370] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.741467][ T7069] veth0_vlan: entered promiscuous mode [ 44.787435][ T7069] veth1_macvtap: entered promiscuous mode [ 44.943133][ T370] bridge_slave_1: left allmulticast mode [ 44.951055][ T370] bridge_slave_1: left promiscuous mode [ 44.957719][ T370] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.968740][ T370] bridge_slave_0: left allmulticast mode [ 44.974938][ T370] bridge_slave_0: left promiscuous mode [ 44.980716][ T370] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.050314][ T7411] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.059231][ T7411] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.068728][ T7411] bridge_slave_0: entered allmulticast mode [ 45.080631][ T7411] bridge_slave_0: entered promiscuous mode [ 45.092885][ T370] veth1_macvtap: left promiscuous mode [ 45.098635][ T370] veth0_vlan: left promiscuous mode [ 45.189457][ T7411] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.211131][ T7411] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.219152][ T7411] bridge_slave_1: entered allmulticast mode [ 45.230113][ T7411] bridge_slave_1: entered promiscuous mode 2026/02/12 18:56:21 executed programs: 2533 [ 45.399524][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.406884][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.428175][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.435717][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.477681][ T7411] veth0_vlan: entered promiscuous mode [ 45.496871][ T7411] veth1_macvtap: entered promiscuous mode [ 45.650904][ T13] bridge_slave_1: left allmulticast mode [ 45.657919][ T13] bridge_slave_1: left promiscuous mode [ 45.664751][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.676223][ T13] bridge_slave_0: left allmulticast mode [ 45.682446][ T13] bridge_slave_0: left promiscuous mode [ 45.691150][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.806854][ T7709] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.814577][ T7709] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.822462][ T7709] bridge_slave_0: entered allmulticast mode [ 45.829558][ T7709] bridge_slave_0: entered promiscuous mode [ 45.842249][ T7709] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.850213][ T7709] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.860210][ T7709] bridge_slave_1: entered allmulticast mode [ 45.869685][ T7709] bridge_slave_1: entered promiscuous mode [ 45.880430][ T13] veth1_macvtap: left promiscuous mode [ 45.886258][ T13] veth0_vlan: left promiscuous mode [ 46.110905][ T7709] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.118166][ T7709] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.125495][ T7709] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.132724][ T7709] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.170581][ T370] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.179427][ T370] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.195102][ T369] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.202648][ T369] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.225487][ T369] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.232703][ T369] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.290976][ T7709] veth0_vlan: entered promiscuous mode [ 46.311445][ T7709] veth1_macvtap: entered promiscuous mode [ 46.447444][ T369] bridge_slave_1: left allmulticast mode [ 46.453638][ T369] bridge_slave_1: left promiscuous mode [ 46.465607][ T369] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.494019][ T369] bridge_slave_0: left allmulticast mode [ 46.502693][ T369] bridge_slave_0: left promiscuous mode [ 46.511867][ T369] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.672579][ T369] veth1_macvtap: left promiscuous mode [ 46.678154][ T369] veth0_vlan: left promiscuous mode [ 46.767083][ T8053] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.776060][ T8053] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.787015][ T8053] bridge_slave_0: entered allmulticast mode [ 46.796517][ T8053] bridge_slave_0: entered promiscuous mode [ 46.807798][ T8053] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.815327][ T8053] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.845740][ T8053] bridge_slave_1: entered allmulticast mode [ 46.853616][ T8053] bridge_slave_1: entered promiscuous mode [ 46.952597][ T8053] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.960558][ T8053] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.968116][ T8053] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.975415][ T8053] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.026534][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.041330][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.057713][ T370] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.065017][ T370] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.099955][ T370] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.107617][ T370] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.146648][ T8053] veth0_vlan: entered promiscuous mode [ 47.164475][ T8053] veth1_macvtap: entered promiscuous mode 2026/02/12 18:56:26 executed programs: 3437 [ 50.770858][T10471] ================================================================== [ 50.779853][T10471] BUG: KASAN: slab-use-after-free in atime_needs_update+0x41f/0x9a0 [ 50.788723][T10471] Read of size 8 at addr ffff88811ec96728 by task syz.5.3552/10471 [ 50.797516][T10471] [ 50.799849][T10471] CPU: 1 UID: 0 PID: 10471 Comm: syz.5.3552 Not tainted syzkaller #0 ecbc8af4db0b1e168e71992ad8df1de57efedc45 [ 50.799870][T10471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 50.799877][T10471] Call Trace: [ 50.799883][T10471] [ 50.799888][T10471] __dump_stack+0x21/0x30 [ 50.799908][T10471] dump_stack_lvl+0x140/0x1c0 [ 50.799923][T10471] ? __cfi_dump_stack_lvl+0x10/0x10 [ 50.799939][T10471] ? __cfi__printk+0x10/0x10 [ 50.799952][T10471] print_address_description+0x71/0x210 [ 50.799967][T10471] print_report+0x4a/0x70 [ 50.799981][T10471] kasan_report+0x162/0x1a0 [ 50.800009][T10471] ? atime_needs_update+0x41f/0x9a0 [ 50.800029][T10471] ? ktime_get_coarse_real_ts64+0x11f/0x140 [ 50.800058][T10471] ? atime_needs_update+0x41f/0x9a0 [ 50.800070][T10471] __asan_report_load8_noabort+0x18/0x20 [ 50.800084][T10471] atime_needs_update+0x41f/0x9a0 [ 50.800096][T10471] ? __cfi_atime_needs_update+0x10/0x10 [ 50.800109][T10471] ? __asan_memcpy+0x5a/0x80 [ 50.800123][T10471] pick_link+0x425/0xe80 [ 50.800137][T10471] step_into+0xc68/0xf60 [ 50.800153][T10471] ? __kasan_check_read+0x15/0x20 [ 50.800166][T10471] ? read_word_at_a_time+0x1a/0x40 [ 50.800183][T10471] ? set_root+0x420/0x420 [ 50.800196][T10471] ? lookup_fast+0x167/0x530 [ 50.800210][T10471] ? inode_permission+0xf3/0x4c0 [ 50.800226][T10471] link_path_walk+0x753/0xec0 [ 50.800239][T10471] ? stack_depot_save_flags+0x38/0x800 [ 50.800255][T10471] __filename_parentat+0x22a/0x650 [ 50.800271][T10471] ? x64_sys_call+0x2974/0x2ee0 [ 50.800287][T10471] ? do_syscall_64+0x57/0xf0 [ 50.800304][T10471] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 50.800321][T10471] ? vfs_path_parent_lookup+0x70/0x70 [ 50.800339][T10471] ? check_stack_object+0x81/0x150 [ 50.800353][T10471] ? __virt_addr_valid+0x2a6/0x380 [ 50.800366][T10471] ? __check_object_size+0x527/0x830 [ 50.800380][T10471] do_unlinkat+0xfe/0x5a0 [ 50.800392][T10471] ? __cfi_do_unlinkat+0x10/0x10 [ 50.800411][T10471] ? getname_flags+0x208/0x700 [ 50.800425][T10471] ? fpregs_restore_userregs+0x11c/0x260 [ 50.800438][T10471] __x64_sys_unlinkat+0xda/0xf0 [ 50.800451][T10471] x64_sys_call+0x2974/0x2ee0 [ 50.800467][T10471] do_syscall_64+0x57/0xf0 [ 50.800484][T10471] ? clear_bhb_loop+0x50/0xa0 [ 50.800500][T10471] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 50.800517][T10471] RIP: 0033:0x7fa39cf9bf79 [ 50.800529][T10471] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 50.800540][T10471] RSP: 002b:00007fa39ded7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000107 [ 50.800554][T10471] RAX: ffffffffffffffda RBX: 00007fa39d215fa0 RCX: 00007fa39cf9bf79 [ 50.800564][T10471] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004 [ 50.800572][T10471] RBP: 00007fa39d0327e0 R08: 0000000000000000 R09: 0000000000000000 [ 50.800581][T10471] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 50.800589][T10471] R13: 00007fa39d216038 R14: 00007fa39d215fa0 R15: 00007ffede267e58 [ 50.800599][T10471] [ 50.800603][T10471] [ 51.112819][T10471] Allocated by task 10471: [ 51.117259][T10471] kasan_save_track+0x3e/0x80 [ 51.122036][T10471] kasan_save_alloc_info+0x40/0x50 [ 51.127164][T10471] __kasan_slab_alloc+0x73/0x90 [ 51.132037][T10471] kmem_cache_alloc_lru_noprof+0x1c2/0x410 [ 51.138026][T10471] alloc_inode+0xa9/0x270 [ 51.142402][T10471] new_inode+0x25/0x1e0 [ 51.146669][T10471] bpf_symlink+0x65/0x200 [ 51.151270][T10471] vfs_symlink+0x3ee/0x620 [ 51.155724][T10471] do_symlinkat+0x1ba/0x400 [ 51.160389][T10471] __x64_sys_symlinkat+0x99/0xb0 [ 51.165508][T10471] x64_sys_call+0x1f79/0x2ee0 [ 51.170405][T10471] do_syscall_64+0x57/0xf0 [ 51.175128][T10471] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 51.181089][T10471] [ 51.183426][T10471] Freed by task 10474: [ 51.187712][T10471] kasan_save_track+0x3e/0x80 [ 51.192543][T10471] kasan_save_free_info+0x4a/0x60 [ 51.197665][T10471] __kasan_slab_free+0x5f/0x80 [ 51.202699][T10471] kmem_cache_free+0x1bd/0x4f0 [ 51.207560][T10471] free_inode_nonrcu+0x20/0x30 [ 51.212610][T10471] bpf_destroy_inode+0x14e/0x180 [ 51.217562][T10471] evict+0x7f2/0xac0 [ 51.221663][T10471] iput+0x635/0x8d0 [ 51.225586][T10471] do_unlinkat+0x3d2/0x5a0 [ 51.230012][T10471] __x64_sys_unlinkat+0xda/0xf0 [ 51.235046][T10471] x64_sys_call+0x2974/0x2ee0 [ 51.239728][T10471] do_syscall_64+0x57/0xf0 [ 51.244148][T10471] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 51.250311][T10471] [ 51.253001][T10471] The buggy address belongs to the object at ffff88811ec96700 [ 51.253001][T10471] which belongs to the cache inode_cache of size 704 [ 51.267839][T10471] The buggy address is located 40 bytes inside of [ 51.267839][T10471] freed 704-byte region [ffff88811ec96700, ffff88811ec969c0) [ 51.281999][T10471] [ 51.284428][T10471] The buggy address belongs to the physical page: [ 51.290854][T10471] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x11ec94 [ 51.300140][T10471] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 51.309019][T10471] flags: 0x4000000000000040(head|zone=1) [ 51.314924][T10471] page_type: f5(slab) [ 51.319107][T10471] raw: 4000000000000040 ffff88810167f780 ffffea00044ba400 dead000000000002 [ 51.328866][T10471] raw: 0000000000000000 0000000080130013 00000001f5000000 0000000000000000 [ 51.337735][T10471] head: 4000000000000040 ffff88810167f780 ffffea00044ba400 dead000000000002 [ 51.346577][T10471] head: 0000000000000000 0000000080130013 00000001f5000000 0000000000000000 [ 51.355426][T10471] head: 4000000000000002 ffffea00047b2501 ffffffffffffffff 0000000000000000 [ 51.364182][T10471] head: 0000000000000004 0000000000000000 00000000ffffffff 0000000000000000 [ 51.373107][T10471] page dumped because: kasan: bad access detected [ 51.379511][T10471] page_owner tracks the page as allocated [ 51.385374][T10471] page last allocated via order 2, migratetype Reclaimable, gfp_mask 0x1d20d0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL|__GFP_RECLAIMABLE), pid 2343, tgid 2340 (syz.4.706), ts 35685296844, free_ts 0 [ 51.409691][T10471] post_alloc_hook+0x3b8/0x3f0 [ 51.414583][T10471] prep_new_page+0x1c/0x110 [ 51.419542][T10471] get_page_from_freelist+0x496e/0x4a20 [ 51.425303][T10471] __alloc_pages_noprof+0x35f/0x7e0 [ 51.430693][T10471] alloc_slab_page+0x6b/0x1e0 [ 51.435574][T10471] allocate_slab+0x69/0x420 [ 51.440284][T10471] ___slab_alloc+0x5a2/0x8d0 [ 51.444887][T10471] kmem_cache_alloc_lru_noprof+0x295/0x410 [ 51.450713][T10471] alloc_inode+0xa9/0x270 [ 51.455113][T10471] new_inode+0x25/0x1e0 [ 51.459387][T10471] simple_fill_super+0xee/0x700 [ 51.464600][T10471] bpf_fill_super+0xf5/0xc90 [ 51.469383][T10471] get_tree_nodev+0xcb/0x170 [ 51.474164][T10471] bpf_get_tree+0x20/0x30 [ 51.478580][T10471] vfs_get_tree+0xa1/0x290 [ 51.483086][T10471] vfs_cmd_create+0xb0/0x220 [ 51.487821][T10471] page_owner free stack trace missing [ 51.493279][T10471] [ 51.495602][T10471] Memory state around the buggy address: [ 51.501313][T10471] ffff88811ec96600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 51.509475][T10471] ffff88811ec96680: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 51.518323][T10471] >ffff88811ec96700: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 51.526992][T10471] ^ [ 51.532636][T10471] ffff88811ec96780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 51.540989][T10471] ffff88811ec96800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 51.549066][T10471] ================================================================== [ 51.559030][T10471] Disabling lock debugging due to kernel taint [ 51.564883][ T36] audit: type=1400 audit(1770922588.220:106): avc: denied { read } for pid=92 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 51.628033][ T36] audit: type=1400 audit(1770922588.220:107): avc: denied { search } for pid=92 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 51.651213][ T36] audit: type=1400 audit(1770922588.220:108): avc: denied { write } for pid=92 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 51.677074][ T36] audit: type=1400 audit(1770922588.220:109): avc: denied { add_name } for pid=92 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 51.698970][ T36] audit: type=1400 audit(1770922588.220:110): avc: denied { create } for pid=92 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 51.721525][ T36] audit: type=1400 audit(1770922588.220:111): avc: denied { append open } for pid=92 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 51.747883][ T36] audit: type=1400 audit(1770922588.220:112): avc: denied { getattr } for pid=92 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 2026/02/12 18:56:31 executed programs: 4288 [ 55.323534][ T36] audit: type=1400 audit(1770922591.990:113): avc: denied { write } for pid=290 comm="syz-execprog" path="pipe:[3155]" dev="pipefs" ino=3155 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1