Warning: Permanently added '10.128.1.145' (ED25519) to the list of known hosts. 2026/07/22 20:59:07 parsed 1 programs 2026/07/22 20:59:07 serving rpc on tcp://34137 [ 23.472745][ T28] audit: type=1400 audit(1784753947.461:64): avc: denied { node_bind } for pid=295 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 23.493587][ T28] audit: type=1400 audit(1784753947.461:65): avc: denied { module_request } for pid=295 comm="syz-execprog" kmod="net-pf-2-proto-262-type-1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 24.242640][ T28] audit: type=1400 audit(1784753948.231:66): avc: denied { mounton } for pid=301 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2024 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 24.243677][ T301] cgroup: Unknown subsys name 'net' [ 24.265308][ T28] audit: type=1400 audit(1784753948.231:67): avc: denied { mount } for pid=301 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.292589][ T28] audit: type=1400 audit(1784753948.261:68): avc: denied { unmount } for pid=301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.292756][ T301] cgroup: Unknown subsys name 'devices' [ 24.431933][ T301] cgroup: Unknown subsys name 'hugetlb' [ 24.437557][ T301] cgroup: Unknown subsys name 'rlimit' [ 24.545102][ T28] audit: type=1400 audit(1784753948.531:69): avc: denied { setattr } for pid=301 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 24.568301][ T28] audit: type=1400 audit(1784753948.531:70): avc: denied { create } for pid=301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 24.588701][ T28] audit: type=1400 audit(1784753948.531:71): avc: denied { write } for pid=301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 24.609039][ T28] audit: type=1400 audit(1784753948.531:72): avc: denied { read } for pid=301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 24.617811][ T305] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 24.629827][ T28] audit: type=1400 audit(1784753948.531:73): avc: denied { mounton } for pid=301 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 24.673531][ T301] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 25.380888][ T312] request_module fs-gadgetfs succeeded, but still no fs? [ 25.863154][ T345] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.870293][ T345] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.877946][ T345] device bridge_slave_0 entered promiscuous mode [ 25.885402][ T345] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.892516][ T345] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.900024][ T345] device bridge_slave_1 entered promiscuous mode [ 25.961381][ T345] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.968463][ T345] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.975790][ T345] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.982835][ T345] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.007807][ T335] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.015259][ T335] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.023111][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 26.032756][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 26.058938][ T345] device veth0_vlan entered promiscuous mode [ 26.065958][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 26.074552][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 26.082547][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 26.089974][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 26.097581][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 26.105796][ T335] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.112817][ T335] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.120122][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 26.128305][ T335] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.135331][ T335] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.142673][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 26.150892][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready 2026/07/22 20:59:10 executed programs: 0 [ 26.167059][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.176144][ T345] device veth1_macvtap entered promiscuous mode [ 26.185103][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.194871][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.265449][ T345] syz-executor (345) used greatest stack depth: 21152 bytes left [ 26.416770][ T373] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.423912][ T373] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.431306][ T373] device bridge_slave_0 entered promiscuous mode [ 26.438383][ T373] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.445621][ T373] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.453148][ T373] device bridge_slave_1 entered promiscuous mode [ 26.470546][ T379] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.477579][ T379] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.484958][ T379] device bridge_slave_0 entered promiscuous mode [ 26.494578][ T379] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.501680][ T379] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.509046][ T379] device bridge_slave_1 entered promiscuous mode [ 26.561848][ T374] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.568898][ T374] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.576488][ T374] device bridge_slave_0 entered promiscuous mode [ 26.586070][ T374] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.593144][ T374] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.600567][ T374] device bridge_slave_1 entered promiscuous mode [ 26.612061][ T378] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.619093][ T378] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.626557][ T378] device bridge_slave_0 entered promiscuous mode [ 26.648087][ T378] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.655169][ T378] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.662533][ T378] device bridge_slave_1 entered promiscuous mode [ 26.705375][ T376] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.712472][ T376] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.719730][ T376] device bridge_slave_0 entered promiscuous mode [ 26.729281][ T376] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.736392][ T376] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.744061][ T376] device bridge_slave_1 entered promiscuous mode [ 26.873169][ T373] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.880232][ T373] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.887549][ T373] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.894607][ T373] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.912487][ T379] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.919527][ T379] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.926854][ T379] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.933890][ T379] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.946252][ T378] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.953319][ T378] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.960612][ T378] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.967641][ T378] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.976760][ T376] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.983817][ T376] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.991288][ T376] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.998313][ T376] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.006635][ T327] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.014061][ T327] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.021238][ T327] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.028349][ T327] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.035931][ T327] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.043104][ T327] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.050442][ T327] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.057626][ T327] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.088047][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 27.095882][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 27.132060][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 27.140882][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 27.149054][ T327] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.156090][ T327] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.163619][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 27.171186][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 27.201244][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 27.209877][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 27.218129][ T327] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.225187][ T327] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.232899][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 27.241169][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 27.249137][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 27.257333][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 27.265370][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 27.273131][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 27.280673][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 27.289023][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 27.297565][ T327] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.304729][ T327] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.312233][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 27.320636][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 27.328761][ T327] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.335840][ T327] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.343319][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 27.350925][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 27.358335][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 27.366720][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 27.375026][ T327] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.382061][ T327] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.389455][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 27.397104][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 27.404600][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 27.412878][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 27.421132][ T327] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.428149][ T327] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.435657][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 27.444040][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 27.452286][ T327] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.459307][ T327] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.466796][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 27.474958][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 27.483098][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 27.491208][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 27.515514][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 27.523794][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 27.532380][ T327] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.539412][ T327] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.546901][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 27.555529][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 27.563884][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 27.572131][ T327] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.579164][ T327] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.586751][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 27.613242][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 27.622002][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 27.629862][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 27.637562][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 27.645758][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 27.653867][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 27.661955][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 27.670714][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 27.679034][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 27.687267][ T327] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.694320][ T327] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.706264][ T379] device veth0_vlan entered promiscuous mode [ 27.720475][ T378] device veth0_vlan entered promiscuous mode [ 27.726864][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 27.735536][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 27.743766][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 27.751448][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 27.764930][ T373] device veth0_vlan entered promiscuous mode [ 27.778648][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 27.786741][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 27.794392][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 27.802414][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 27.811223][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 27.819459][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 27.827482][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 27.843517][ T379] device veth1_macvtap entered promiscuous mode [ 27.851321][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 27.862567][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 27.875608][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 27.887237][ T373] device veth1_macvtap entered promiscuous mode [ 27.895736][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 27.904009][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 27.911568][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 27.919657][ T376] device veth0_vlan entered promiscuous mode [ 27.934859][ T374] device veth0_vlan entered promiscuous mode [ 27.943383][ T378] device veth1_macvtap entered promiscuous mode [ 27.951322][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 27.959697][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 27.968273][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 27.976021][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 27.983639][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 27.992033][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 28.000580][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 28.008788][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 28.021574][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 28.029817][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 28.040696][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 28.048928][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 28.074376][ T376] device veth1_macvtap entered promiscuous mode [ 28.085634][ T374] device veth1_macvtap entered promiscuous mode [ 28.097690][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 28.106100][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 28.115171][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 28.123780][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 28.132381][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 28.140056][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 28.148619][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 28.157113][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 28.197791][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 28.215968][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 28.225917][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 28.234425][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 28.244878][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 28.254719][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 28.265220][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 28.277025][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 28.288775][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 28.298469][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 28.402758][ T8] device bridge_slave_1 left promiscuous mode [ 28.408922][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.459720][ T8] device bridge_slave_0 left promiscuous mode [ 28.467508][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.507871][ T8] device veth1_macvtap left promiscuous mode [ 28.534424][ T8] device veth0_vlan left promiscuous mode 2026/07/22 20:59:15 executed programs: 722 [ 33.153214][ T3743] ================================================================== [ 33.161667][ T3743] BUG: KASAN: use-after-free in link_path_walk+0x9e7/0xeb0 [ 33.168983][ T3743] Read of size 1 at addr ffff88810d5a1bb8 by task syz.4.1130/3743 [ 33.176787][ T3743] [ 33.179128][ T3743] CPU: 0 PID: 3743 Comm: syz.4.1130 Not tainted syzkaller #0 [ 33.186517][ T3743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 33.196597][ T3743] Call Trace: [ 33.199887][ T3743] [ 33.202826][ T3743] __dump_stack+0x21/0x24 [ 33.207170][ T3743] dump_stack_lvl+0x110/0x170 [ 33.211864][ T3743] ? __cfi_dump_stack_lvl+0x8/0x8 [ 33.216900][ T3743] ? selinux_inode_permission+0x404/0x5d0 [ 33.222637][ T3743] ? link_path_walk+0x9e7/0xeb0 [ 33.227509][ T3743] print_address_description+0x71/0x200 [ 33.233067][ T3743] print_report+0x4a/0x60 [ 33.237419][ T3743] kasan_report+0x122/0x150 [ 33.241942][ T3743] ? link_path_walk+0x9e7/0xeb0 [ 33.246808][ T3743] __asan_report_load1_noabort+0x14/0x20 [ 33.252447][ T3743] link_path_walk+0x9e7/0xeb0 [ 33.257138][ T3743] ? handle_lookup_down+0x130/0x130 [ 33.262351][ T3743] ? kasan_set_track+0x60/0x70 [ 33.267128][ T3743] __filename_parentat+0x22d/0x650 [ 33.272255][ T3743] ? vfs_path_parent_lookup+0x60/0x60 [ 33.277643][ T3743] ? ____kasan_slab_free+0x13d/0x180 [ 33.282952][ T3743] do_unlinkat+0xeb/0x6c0 [ 33.287300][ T3743] ? __check_object_size+0x45a/0x600 [ 33.292600][ T3743] ? __cfi_do_unlinkat+0x10/0x10 [ 33.297555][ T3743] __x64_sys_unlinkat+0xd8/0xf0 [ 33.302423][ T3743] x64_sys_call+0x79f/0x9a0 [ 33.306944][ T3743] do_syscall_64+0x4c/0xa0 [ 33.311375][ T3743] ? clear_bhb_loop+0x30/0x80 [ 33.316075][ T3743] ? clear_bhb_loop+0x30/0x80 [ 33.320814][ T3743] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 33.326723][ T3743] RIP: 0033:0x7f9eb8b9de99 [ 33.331138][ T3743] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 33.350725][ T3743] RSP: 002b:00007f9eb9a9d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000107 [ 33.359136][ T3743] RAX: ffffffffffffffda RBX: 00007f9eb8e25fa0 RCX: 00007f9eb8b9de99 [ 33.367548][ T3743] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004 [ 33.375533][ T3743] RBP: 00007f9eb8c33eaf R08: 0000000000000000 R09: 0000000000000000 [ 33.383489][ T3743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 33.391445][ T3743] R13: 00007f9eb8e26038 R14: 00007f9eb8e25fa0 R15: 00007fff1ea1d008 [ 33.399401][ T3743] [ 33.402403][ T3743] [ 33.404706][ T3743] Allocated by task 3743: [ 33.409009][ T3743] kasan_set_track+0x4b/0x70 [ 33.413584][ T3743] kasan_save_alloc_info+0x1f/0x30 [ 33.418676][ T3743] __kasan_kmalloc+0x95/0xb0 [ 33.423248][ T3743] __kmalloc_node_track_caller+0xb1/0x1e0 [ 33.428946][ T3743] kstrdup+0x3b/0x80 [ 33.432818][ T3743] bpf_symlink+0x2c/0x270 [ 33.437126][ T3743] vfs_symlink+0x261/0x3f0 [ 33.441521][ T3743] do_symlinkat+0x24a/0x5d0 [ 33.446002][ T3743] __x64_sys_symlinkat+0x99/0xb0 [ 33.450922][ T3743] x64_sys_call+0x282/0x9a0 [ 33.455410][ T3743] do_syscall_64+0x4c/0xa0 [ 33.459821][ T3743] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 33.465703][ T3743] [ 33.468008][ T3743] Freed by task 3752: [ 33.471959][ T3743] kasan_set_track+0x4b/0x70 [ 33.476529][ T3743] kasan_save_free_info+0x2b/0x40 [ 33.481530][ T3743] ____kasan_slab_free+0x132/0x180 [ 33.486623][ T3743] __kasan_slab_free+0x11/0x20 [ 33.491366][ T3743] slab_free_freelist_hook+0xc2/0x190 [ 33.496716][ T3743] __kmem_cache_free+0xb7/0x1b0 [ 33.501573][ T3743] kfree+0x6f/0xf0 [ 33.505274][ T3743] bpf_destroy_inode+0x7a/0x170 [ 33.510464][ T3743] evict+0x7ac/0x8c0 [ 33.514383][ T3743] iput+0x633/0x690 [ 33.518185][ T3743] do_unlinkat+0x380/0x6c0 [ 33.522586][ T3743] __x64_sys_unlinkat+0xd8/0xf0 [ 33.527422][ T3743] x64_sys_call+0x79f/0x9a0 [ 33.531917][ T3743] do_syscall_64+0x4c/0xa0 [ 33.536315][ T3743] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 33.542192][ T3743] [ 33.544497][ T3743] The buggy address belongs to the object at ffff88810d5a1bb8 [ 33.544497][ T3743] which belongs to the cache kmalloc-8 of size 8 [ 33.558179][ T3743] The buggy address is located 0 bytes inside of [ 33.558179][ T3743] 8-byte region [ffff88810d5a1bb8, ffff88810d5a1bc0) [ 33.571093][ T3743] [ 33.573422][ T3743] The buggy address belongs to the physical page: [ 33.579826][ T3743] page:ffffea0004356840 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88810d5a1a28 pfn:0x10d5a1 [ 33.591360][ T3743] flags: 0x4000000000000200(slab|zone=1) [ 33.596983][ T3743] raw: 4000000000000200 ffffea00043a5ec0 dead000000000003 ffff888100042300 [ 33.605545][ T3743] raw: ffff88810d5a1a28 0000000080660065 00000001ffffffff 0000000000000000 [ 33.614099][ T3743] page dumped because: kasan: bad access detected [ 33.620487][ T3743] page_owner tracks the page as allocated [ 33.626203][ T3743] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 1526, tgid 1524 (syz.5.394), ts 29819241519, free_ts 29813103378 [ 33.644199][ T3743] post_alloc_hook+0x1f5/0x210 [ 33.648966][ T3743] prep_new_page+0x1c/0x110 [ 33.653476][ T3743] get_page_from_freelist+0x2ca9/0x2d20 [ 33.659028][ T3743] __alloc_pages+0x1fa/0x610 [ 33.663605][ T3743] alloc_slab_page+0x6e/0xf0 [ 33.668183][ T3743] new_slab+0x98/0x3e0 [ 33.672231][ T3743] ___slab_alloc+0x70f/0xb70 [ 33.676807][ T3743] __slab_alloc+0x5e/0xa0 [ 33.681129][ T3743] __kmem_cache_alloc_node+0x204/0x2d0 [ 33.686662][ T3743] kmalloc_trace+0x29/0xb0 [ 33.691147][ T3743] bpf_init_fs_context+0x4f/0xe0 [ 33.696163][ T3743] alloc_fs_context+0x653/0x7d0 [ 33.701035][ T3743] fs_context_for_mount+0x22/0x30 [ 33.706058][ T3743] __se_sys_fsopen+0xa3/0x2f0 [ 33.710731][ T3743] __x64_sys_fsopen+0x5b/0x70 [ 33.715391][ T3743] x64_sys_call+0x537/0x9a0 [ 33.719878][ T3743] page last free stack trace: [ 33.724533][ T3743] free_unref_page_prepare+0x80c/0x820 [ 33.730114][ T3743] free_unref_page_list+0x117/0x8d0 [ 33.735322][ T3743] release_pages+0xc7e/0xce0 [ 33.739933][ T3743] free_pages_and_swap_cache+0x86/0xa0 [ 33.745401][ T3743] tlb_finish_mmu+0x1b2/0x380 [ 33.750079][ T3743] exit_mmap+0x41d/0xc10 [ 33.754304][ T3743] __mmput+0x92/0x340 [ 33.758275][ T3743] mmput+0x4b/0x150 [ 33.762066][ T3743] do_exit+0xa51/0x2850 [ 33.766255][ T3743] do_group_exit+0x21b/0x2e0 [ 33.770826][ T3743] get_signal+0x167c/0x1700 [ 33.775315][ T3743] arch_do_signal_or_restart+0xd1/0x11c0 [ 33.780928][ T3743] exit_to_user_mode_loop+0x7a/0xb0 [ 33.786105][ T3743] exit_to_user_mode_prepare+0x87/0xd0 [ 33.791543][ T3743] syscall_exit_to_user_mode+0x1a/0x30 [ 33.796995][ T3743] do_syscall_64+0x58/0xa0 [ 33.801401][ T3743] [ 33.803712][ T3743] Memory state around the buggy address: [ 33.809318][ T3743] ffff88810d5a1a80: fc fc fc fc fa fc fc fc fc fa fc fc fc fc 05 fc [ 33.817361][ T3743] ffff88810d5a1b00: fc fc fc fa fc fc fc fc fa fc fc fc fc fa fc fc [ 33.825423][ T3743] >ffff88810d5a1b80: fc fc fa fc fc fc fc fa fc fc fc fc fb fc fc fc [ 33.833460][ T3743] ^ [ 33.839333][ T3743] ffff88810d5a1c00: fc fa fc fc fc fc fa fc fc fc fc fa fc fc fc fc [ 33.847411][ T3743] ffff88810d5a1c80: fa fc fc fc fc fa fc fc fc fc fa fc fc fc fc fa [ 33.855452][ T3743] ================================================================== [ 33.865224][ T3743] Disabling lock debugging due to kernel taint [ 33.867584][ T28] kauditd_printk_skb: 34 callbacks suppressed [ 33.867596][ T28] audit: type=1400 audit(1784753957.851:108): avc: denied { read } for pid=85 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 33.899768][ T28] audit: type=1400 audit(1784753957.851:109): avc: denied { search } for pid=85 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 33.934476][ T28] audit: type=1400 audit(1784753957.851:110): avc: denied { write } for pid=85 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 33.964058][ T28] audit: type=1400 audit(1784753957.851:111): avc: denied { add_name } for pid=85 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 34.035745][ T28] audit: type=1400 audit(1784753957.851:112): avc: denied { create } for pid=85 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 34.061335][ T28] audit: type=1400 audit(1784753957.851:113): avc: denied { append open } for pid=85 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 34.100700][ T28] audit: type=1400 audit(1784753957.851:114): avc: denied { getattr } for pid=85 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 2026/07/22 20:59:20 executed programs: 1650 [ 36.241784][ T28] audit: type=1400 audit(1784753960.231:115): avc: denied { write } for pid=295 comm="syz-execprog" path="pipe:[15428]" dev="pipefs" ino=15428 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 2026/07/22 20:59:25 executed programs: 2827 [ 42.001577][ T9275] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.008761][ T9275] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.034147][ T9275] device bridge_slave_0 entered promiscuous mode [ 42.105339][ T9275] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.126265][ T9275] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.148288][ T9275] device bridge_slave_1 entered promiscuous mode [ 42.458592][ T9275] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.465761][ T9275] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.473077][ T9275] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.480111][ T9275] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.572937][ T415] device bridge_slave_1 left promiscuous mode [ 42.590671][ T415] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.612317][ T415] device bridge_slave_0 left promiscuous mode [ 42.630187][ T415] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.688326][ T415] device veth1_macvtap left promiscuous mode [ 42.710826][ T415] device veth0_vlan left promiscuous mode [ 42.995825][ T335] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.012240][ T335] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.081761][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 43.091597][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 43.133776][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 43.153751][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 43.166602][ T335] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.173690][ T335] bridge0: port 1(bridge_slave_0) entered forwarding state