ocess permissive=1 [ 14.313528][ T24] audit: type=1400 audit(1785273134.900:63): avc: denied { siginh } for pid=217 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.1.85' (ED25519) to the list of known hosts. 2026/07/28 21:12:40 parsed 1 programs 2026/07/28 21:12:40 serving rpc on tcp://42879 [ 40.075827][ T24] audit: type=1400 audit(1785273160.710:64): avc: denied { node_bind } for pid=287 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 40.097492][ T24] audit: type=1400 audit(1785273160.710:65): avc: denied { create } for pid=287 comm="syz-execprog" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 40.117083][ T24] audit: type=1400 audit(1785273160.710:66): avc: denied { module_request } for pid=287 comm="syz-execprog" kmod="net-pf-2-proto-262-type-1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 41.016027][ T24] audit: type=1400 audit(1785273161.650:67): avc: denied { mounton } for pid=293 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2024 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 41.019472][ T293] cgroup: Unknown subsys name 'net' [ 41.038846][ T24] audit: type=1400 audit(1785273161.650:68): avc: denied { mount } for pid=293 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 41.066062][ T24] audit: type=1400 audit(1785273161.680:69): avc: denied { unmount } for pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 41.066501][ T293] cgroup: Unknown subsys name 'devices' [ 41.221143][ T293] cgroup: Unknown subsys name 'hugetlb' [ 41.226851][ T293] cgroup: Unknown subsys name 'rlimit' [ 41.346043][ T24] audit: type=1400 audit(1785273161.980:70): avc: denied { setattr } for pid=293 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 41.369250][ T24] audit: type=1400 audit(1785273161.980:71): avc: denied { create } for pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 41.389788][ T24] audit: type=1400 audit(1785273161.980:72): avc: denied { write } for pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 41.407357][ T298] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 41.410747][ T24] audit: type=1400 audit(1785273161.980:73): avc: denied { read } for pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 41.497129][ T293] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 41.996345][ T305] request_module fs-gadgetfs succeeded, but still no fs? [ 42.012499][ T307] cgroup: cgroup: disabling cgroup2 socket matching due to net_prio or net_cls activation [ 42.097028][ T304] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.134716][ T304] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.159507][ T304] device bridge_slave_0 entered promiscuous mode [ 42.189635][ T304] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.197085][ T304] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.222956][ T304] device bridge_slave_1 entered promiscuous mode [ 42.442522][ T304] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.449768][ T304] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.457075][ T304] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.464173][ T304] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.579316][ T337] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.589395][ T337] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.609739][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 42.617247][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 42.646729][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 42.655219][ T337] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.662286][ T337] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.670373][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 42.678480][ T337] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.685543][ T337] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.692933][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 42.701001][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 42.763028][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 42.775278][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 42.786992][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 42.826508][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 42.837552][ T304] device veth0_vlan entered promiscuous mode [ 42.848860][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 42.858534][ T304] device veth1_macvtap entered promiscuous mode [ 42.868805][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 42.892059][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 2026/07/28 21:12:43 executed programs: 0 [ 43.090267][ T369] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.097333][ T369] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.105064][ T369] device bridge_slave_0 entered promiscuous mode [ 43.113240][ T369] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.121414][ T369] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.128721][ T369] device bridge_slave_1 entered promiscuous mode [ 43.171718][ T375] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.178786][ T375] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.186488][ T375] device bridge_slave_0 entered promiscuous mode [ 43.194772][ T375] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.201942][ T375] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.209418][ T375] device bridge_slave_1 entered promiscuous mode [ 43.272333][ T372] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.279659][ T372] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.287569][ T372] device bridge_slave_0 entered promiscuous mode [ 43.295877][ T372] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.303068][ T372] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.310557][ T372] device bridge_slave_1 entered promiscuous mode [ 43.360569][ T373] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.367628][ T373] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.375224][ T373] device bridge_slave_0 entered promiscuous mode [ 43.407219][ T376] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.414360][ T376] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.421830][ T376] device bridge_slave_0 entered promiscuous mode [ 43.428466][ T373] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.435905][ T373] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.443400][ T373] device bridge_slave_1 entered promiscuous mode [ 43.467685][ T376] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.474814][ T376] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.482267][ T376] device bridge_slave_1 entered promiscuous mode [ 43.528919][ T369] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.536026][ T369] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.543315][ T369] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.550360][ T369] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.598832][ T372] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.605953][ T372] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.613229][ T372] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.620367][ T372] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.651834][ T375] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.659034][ T375] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.666294][ T375] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.673349][ T375] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.712020][ T363] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.719414][ T363] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.726654][ T363] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.734074][ T363] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.741815][ T363] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.748956][ T363] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.757088][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 43.764799][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 43.795334][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 43.803336][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 43.811995][ T363] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.819098][ T363] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.826796][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 43.835059][ T363] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.842109][ T363] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.849870][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 43.857802][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 43.866094][ T363] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.873177][ T363] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.880585][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 43.906018][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 43.914351][ T363] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.921432][ T363] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.954544][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 43.963055][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 43.971810][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 43.980695][ T363] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.987720][ T363] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.995567][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 44.004128][ T363] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.011198][ T363] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.018578][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 44.026737][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 44.043085][ T369] device veth0_vlan entered promiscuous mode [ 44.053388][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 44.061818][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 44.069907][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 44.077494][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 44.101281][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 44.109437][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 44.133361][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 44.142514][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 44.151197][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 44.160695][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 44.168705][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 44.176394][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 44.184170][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 44.192607][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 44.201035][ T363] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.208065][ T363] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.215730][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 44.224106][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 44.232375][ T363] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.239418][ T363] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.246862][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 44.255118][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 44.263194][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 44.270835][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 44.278196][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 44.291934][ T372] device veth0_vlan entered promiscuous mode [ 44.307981][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 44.315531][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 44.323848][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 44.332197][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 44.340508][ T363] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.347527][ T363] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.355125][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 44.363578][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 44.371837][ T363] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.378887][ T363] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.386699][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 44.395055][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 44.403155][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 44.418329][ T369] device veth1_macvtap entered promiscuous mode [ 44.458730][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 44.469396][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 44.477491][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 44.485492][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 44.493935][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 44.502487][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 44.510726][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 44.518686][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 44.527063][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 44.535982][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 44.544172][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 44.555329][ T373] device veth0_vlan entered promiscuous mode [ 44.564071][ T372] device veth1_macvtap entered promiscuous mode [ 44.576191][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 44.584907][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 44.593055][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 44.601138][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 44.609385][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 44.617625][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 44.626119][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 44.634630][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 44.642211][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 44.652923][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 44.661395][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 44.676429][ T376] device veth0_vlan entered promiscuous mode [ 44.687091][ T375] device veth0_vlan entered promiscuous mode [ 44.694478][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 44.702619][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 44.710091][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 44.717470][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 44.726500][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 44.734665][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 44.742759][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 44.750593][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 44.762107][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 44.771546][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 44.783934][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 44.797495][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 44.806130][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 44.824281][ T373] device veth1_macvtap entered promiscuous mode [ 44.832157][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 44.841567][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 44.851559][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 44.861221][ T376] device veth1_macvtap entered promiscuous mode [ 44.869602][ T375] device veth1_macvtap entered promiscuous mode [ 44.881902][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 44.899718][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 44.908311][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 44.918045][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 44.935433][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 44.967215][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 44.976496][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 44.991374][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 45.002072][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 45.011074][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 45.022188][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 45.033861][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 45.042575][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 45.482218][ T48] device bridge_slave_1 left promiscuous mode [ 45.488481][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.510799][ T48] device bridge_slave_0 left promiscuous mode [ 45.516980][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.556288][ T48] device veth1_macvtap left promiscuous mode [ 45.569989][ T48] device veth0_vlan left promiscuous mode 2026/07/28 21:12:48 executed programs: 755 2026/07/28 21:12:53 executed programs: 2031 [ 56.696514][ T3361] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.732566][ T3361] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.741448][ T3361] device bridge_slave_0 entered promiscuous mode [ 56.750860][ T3361] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.760504][ T3361] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.770801][ T3361] device bridge_slave_1 entered promiscuous mode [ 57.059442][ T3361] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.066547][ T3361] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.073884][ T3361] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.080954][ T3361] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.230001][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.264710][ T363] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.283210][ T363] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.324923][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.360419][ T363] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.367596][ T363] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.379076][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.396081][ T363] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.403272][ T363] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.424885][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.434705][ T48] device bridge_slave_1 left promiscuous mode [ 57.453604][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.490456][ T48] device bridge_slave_0 left promiscuous mode [ 57.496673][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.513494][ T48] device veth1_macvtap left promiscuous mode [ 57.522011][ T48] device veth0_vlan left promiscuous mode [ 57.860295][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.907696][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.937001][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready 2026/07/28 21:12:58 executed programs: 3168 [ 57.984710][ T3361] device veth0_vlan entered promiscuous mode [ 58.007515][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.022860][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.058589][ T3361] device veth1_macvtap entered promiscuous mode [ 58.097015][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.112298][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.134437][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.155395][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.180098][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.211159][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.223186][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.253647][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.284256][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.560560][ T3627] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.567654][ T3627] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.641802][ T3627] device bridge_slave_0 entered promiscuous mode [ 58.648867][ T3627] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.656595][ T3627] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.709935][ T3627] device bridge_slave_1 entered promiscuous mode [ 59.076704][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.090620][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.128242][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 59.154954][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.181805][ T314] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.188918][ T314] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.205962][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.217042][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.225732][ T314] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.232807][ T314] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.254459][ T48] device bridge_slave_1 left promiscuous mode [ 59.261204][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.289917][ T48] device bridge_slave_0 left promiscuous mode [ 59.296094][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.375101][ T48] device veth1_macvtap left promiscuous mode [ 59.381483][ T48] device veth0_vlan left promiscuous mode [ 59.722285][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.743016][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.792751][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.856215][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.874277][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.902018][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.914927][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.966889][ T3627] device veth0_vlan entered promiscuous mode [ 60.016692][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.025935][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.038112][ T3627] device veth1_macvtap entered promiscuous mode [ 60.123110][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 60.143712][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.186482][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.247585][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.278141][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.464134][ T3889] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.471887][ T3889] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.480019][ T3889] device bridge_slave_0 entered promiscuous mode [ 60.486909][ T3889] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.539827][ T3889] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.594482][ T3889] device bridge_slave_1 entered promiscuous mode [ 60.796360][ T3889] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.803449][ T3889] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.810761][ T3889] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.817802][ T3889] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.890938][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.915903][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.035391][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 61.085677][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 61.125250][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 61.134429][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 61.155391][ T314] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.162506][ T314] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.181970][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 61.192883][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 61.204016][ T314] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.211107][ T314] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.252562][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 61.260718][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 61.298891][ T3889] device veth0_vlan entered promiscuous mode [ 61.351257][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 61.395399][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 61.432747][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 61.472262][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 61.525959][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 61.564423][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.618660][ T3889] device veth1_macvtap entered promiscuous mode [ 61.652371][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.660473][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.668005][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 61.709196][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.733052][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 61.761884][ T337] device bridge_slave_1 left promiscuous mode [ 61.770644][ T337] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.820216][ T337] device bridge_slave_0 left promiscuous mode [ 61.828764][ T337] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.880124][ T337] device veth1_macvtap left promiscuous mode [ 61.906719][ T337] device veth0_vlan left promiscuous mode [ 62.235673][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 62.246389][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 62.285005][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 62.360134][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.725706][ T4238] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.756142][ T4238] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.789975][ T4238] device bridge_slave_0 entered promiscuous mode [ 62.832739][ T4238] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.874467][ T4238] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.900908][ T4238] device bridge_slave_1 entered promiscuous mode 2026/07/28 21:13:03 executed programs: 3888 [ 62.990309][ T4238] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.997506][ T4238] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.004835][ T4238] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.011907][ T4238] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.114382][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.128497][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.153070][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.190168][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.212737][ T363] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.219838][ T363] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.271026][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.283832][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.292447][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.299537][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.357150][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.391660][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.423945][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.467565][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.515832][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 63.548010][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 63.597469][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 63.611681][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 63.652380][ T4238] device veth0_vlan entered promiscuous mode [ 63.674721][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 63.692014][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 63.745410][ T4238] device veth1_macvtap entered promiscuous mode [ 63.756042][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 63.767608][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 63.778616][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 63.787006][ T337] device bridge_slave_1 left promiscuous mode [ 63.796976][ T337] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.823940][ T337] device bridge_slave_0 left promiscuous mode [ 63.836333][ T337] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.847238][ T337] device veth1_macvtap left promiscuous mode [ 63.854322][ T337] device veth0_vlan left promiscuous mode [ 64.024841][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 64.048247][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.081394][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 64.096580][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.297850][ T4534] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.332949][ T4534] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.380514][ T4534] device bridge_slave_0 entered promiscuous mode [ 64.411689][ T4534] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.443546][ T4534] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.467415][ T4534] device bridge_slave_1 entered promiscuous mode [ 64.687590][ T4534] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.694706][ T4534] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.702047][ T4534] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.709134][ T4534] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.777430][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.787682][ T314] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.816795][ T314] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.852176][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.880094][ T314] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.887291][ T314] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.930389][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.946480][ T314] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.953656][ T314] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.005781][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.028400][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.039699][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.058897][ T4534] device veth0_vlan entered promiscuous mode [ 65.074714][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.084390][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.108972][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.143181][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.159623][ T4534] device veth1_macvtap entered promiscuous mode [ 65.197640][ T337] device bridge_slave_1 left promiscuous mode [ 65.213025][ T337] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.244525][ T337] device bridge_slave_0 left promiscuous mode [ 65.262549][ T337] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.300254][ T337] device veth1_macvtap left promiscuous mode [ 65.306311][ T337] device veth0_vlan left promiscuous mode [ 65.586542][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.623370][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.639687][ T314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 2026/07/28 21:13:08 executed programs: 4919 [ 68.077095][ T5373] ------------[ cut here ]------------ [ 68.082769][ T5373] refcount_t: addition on 0; use-after-free. [ 68.088944][ T5373] WARNING: CPU: 0 PID: 5373 at lib/refcount.c:25 refcount_warn_saturate+0x104/0x1a0 [ 68.098458][ T5373] Modules linked in: [ 68.102450][ T5373] CPU: 0 PID: 5373 Comm: syz.0.4942 Not tainted syzkaller #0 [ 68.109909][ T5373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 68.120215][ T5373] RIP: 0010:refcount_warn_saturate+0x104/0x1a0 [ 68.126378][ T5373] Code: 04 01 48 c7 c7 a0 49 40 85 e8 98 ca 3a 02 0f 0b eb df e8 8f 89 26 ff c6 05 cc 75 82 04 01 48 c7 c7 e0 48 40 85 e8 7c ca 3a 02 <0f> 0b eb c3 e8 73 89 26 ff c6 05 b1 75 82 04 01 48 c7 c7 40 49 40 [ 68.146059][ T5373] RSP: 0018:ffffc900027c7c98 EFLAGS: 00010246 [ 68.152212][ T5373] RAX: 9819682e70f9f400 RBX: 0000000000000002 RCX: ffff888111cfe2c0 [ 68.160332][ T5373] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 68.168313][ T5373] RBP: ffffc900027c7ca8 R08: ffff8881f7027453 R09: 1ffff1103ee04e8a [ 68.176476][ T5373] R10: dffffc0000000000 R11: ffffed103ee04e8b R12: ffff88810fba1378 [ 68.184525][ T5373] R13: dffffc0000000000 R14: 0000000000000002 R15: 0000000000000000 [ 68.192577][ T5373] FS: 0000555566e66500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 68.201619][ T5373] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 68.208379][ T5373] CR2: 0000001b2d563fff CR3: 000000010f4b7000 CR4: 00000000003506b0 [ 68.216407][ T5373] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 68.224506][ T5373] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 68.232554][ T5373] Call Trace: [ 68.235874][ T5373] config_item_get+0x8c/0x90 [ 68.240619][ T5373] configfs_symlink+0x44f/0x1320 [ 68.245563][ T5373] ? show_sid+0x1b0/0x1b0 [ 68.250070][ T5373] ? __lookup_hash+0x122/0x250 [ 68.254847][ T5373] ? detach_groups+0x2e0/0x2e0 [ 68.259699][ T5373] ? selinux_inode_symlink+0x22/0x30 [ 68.264994][ T5373] ? security_inode_symlink+0xba/0x100 [ 68.270541][ T5373] vfs_symlink+0x339/0x4c0 [ 68.274959][ T5373] do_symlinkat+0x10e/0x3d0 [ 68.279536][ T5373] __x64_sys_symlinkat+0x7b/0x90 [ 68.284473][ T5373] do_syscall_64+0x31/0x40 [ 68.288893][ T5373] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 68.294829][ T5373] RIP: 0033:0x7f75c8748e99 [ 68.299339][ T5373] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 68.319081][ T5373] RSP: 002b:00007fff1734d278 EFLAGS: 00000246 ORIG_RAX: 000000000000010a [ 68.327501][ T5373] RAX: ffffffffffffffda RBX: 00007f75c89d0fa0 RCX: 00007f75c8748e99 [ 68.335605][ T5373] RDX: 0000200000000340 RSI: ffffffffffffff9c RDI: 0000200000000300 [ 68.343692][ T5373] RBP: 00007f75c87deeaf R08: 0000000000000000 R09: 0000000000000000 [ 68.351718][ T5373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 68.359714][ T5373] R13: 00007f75c89d0fac R14: 00007f75c89d0fa0 R15: 00007f75c89d0fa0 [ 68.367706][ T5373] ---[ end trace 87b5e643bfb90402 ]--- [ 68.373908][ T5367] ================================================================== [ 68.382027][ T5367] BUG: KASAN: use-after-free in config_item_get+0x27/0x90 [ 68.389142][ T5367] Write of size 4 at addr ffff888112a5e41c by task syz.3.4939/5367 [ 68.397036][ T5367] [ 68.399551][ T5367] CPU: 1 PID: 5367 Comm: syz.3.4939 Tainted: G W syzkaller #0 [ 68.408319][ T5367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 68.418370][ T5367] Call Trace: [ 68.421672][ T5367] __dump_stack+0x21/0x24 [ 68.426003][ T5367] dump_stack_lvl+0x1a7/0x208 [ 68.430679][ T5367] ? show_regs_print_info+0x18/0x18 [ 68.435969][ T5367] ? thaw_kernel_threads+0x220/0x220 [ 68.441254][ T5367] print_address_description+0x7f/0x2c0 [ 68.446802][ T5367] ? config_item_get+0x27/0x90 [ 68.451570][ T5367] kasan_report+0x100/0x140 [ 68.456093][ T5367] ? config_item_get+0x27/0x90 [ 68.460858][ T5367] kasan_check_range+0x249/0x2a0 [ 68.465830][ T5367] __kasan_check_write+0x14/0x20 [ 68.470772][ T5367] config_item_get+0x27/0x90 [ 68.475369][ T5367] configfs_symlink+0x44f/0x1320 [ 68.480315][ T5367] ? show_sid+0x1b0/0x1b0 [ 68.484653][ T5367] ? __lookup_hash+0x68/0x250 [ 68.489326][ T5367] ? detach_groups+0x2e0/0x2e0 [ 68.494094][ T5367] ? selinux_inode_symlink+0x22/0x30 [ 68.499388][ T5367] ? security_inode_symlink+0xba/0x100 [ 68.504866][ T5367] vfs_symlink+0x339/0x4c0 [ 68.509291][ T5367] do_symlinkat+0x10e/0x3d0 [ 68.513817][ T5367] __x64_sys_symlinkat+0x7b/0x90 [ 68.518758][ T5367] do_syscall_64+0x31/0x40 [ 68.523174][ T5367] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 68.529078][ T5367] RIP: 0033:0x7f435fd25e99 [ 68.533517][ T5367] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 68.553146][ T5367] RSP: 002b:00007ffcae75c908 EFLAGS: 00000246 ORIG_RAX: 000000000000010a [ 68.562285][ T5367] RAX: ffffffffffffffda RBX: 00007f435ffadfa0 RCX: 00007f435fd25e99 [ 68.570265][ T5367] RDX: 0000200000000340 RSI: ffffffffffffff9c RDI: 0000200000000300 [ 68.578