Warning: Permanently added '10.128.1.185' (ED25519) to the list of known hosts. 2025/10/28 10:15:53 parsed 1 programs [ 40.135055][ T28] audit: type=1400 audit(1761646553.653:64): avc: denied { node_bind } for pid=282 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 40.168835][ T28] audit: type=1400 audit(1761646553.653:65): avc: denied { module_request } for pid=282 comm="syz-execprog" kmod="net-pf-2-proto-262-type-1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 41.644098][ T28] audit: type=1400 audit(1761646555.163:66): avc: denied { mounton } for pid=289 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 41.646236][ T289] cgroup: Unknown subsys name 'net' [ 41.681198][ T28] audit: type=1400 audit(1761646555.163:67): avc: denied { mount } for pid=289 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 41.726438][ T28] audit: type=1400 audit(1761646555.213:68): avc: denied { unmount } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 41.736812][ T289] cgroup: Unknown subsys name 'devices' [ 41.859517][ T289] cgroup: Unknown subsys name 'hugetlb' [ 41.870615][ T289] cgroup: Unknown subsys name 'rlimit' [ 41.991597][ T28] audit: type=1400 audit(1761646555.513:69): avc: denied { setattr } for pid=289 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 42.032544][ T28] audit: type=1400 audit(1761646555.513:70): avc: denied { create } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 42.053857][ T293] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 42.067620][ T28] audit: type=1400 audit(1761646555.513:71): avc: denied { write } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 42.110814][ T28] audit: type=1400 audit(1761646555.513:72): avc: denied { read } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 42.141204][ T28] audit: type=1400 audit(1761646555.513:73): avc: denied { mounton } for pid=289 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 42.235522][ T289] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 43.297141][ T299] request_module fs-gadgetfs succeeded, but still no fs? [ 44.357689][ T344] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.368771][ T344] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.385432][ T344] device bridge_slave_0 entered promiscuous mode [ 44.395696][ T344] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.410215][ T344] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.424571][ T344] device bridge_slave_1 entered promiscuous mode [ 44.567056][ T344] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.578456][ T344] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.599092][ T344] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.608837][ T344] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.649067][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 44.661313][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.673040][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.704052][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 44.719293][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.729151][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.744573][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 44.759290][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.770595][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.797888][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 44.807796][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 44.830438][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 44.845108][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 44.868244][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 44.881746][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 44.908530][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 44.919223][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 44.930277][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 44.941786][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 44.960616][ T344] device veth0_vlan entered promiscuous mode [ 44.972280][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 44.986833][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 45.013313][ T344] device veth1_macvtap entered promiscuous mode [ 45.025285][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 45.036203][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 45.050995][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 45.077062][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 45.086224][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 2025/10/28 10:15:58 executed programs: 0 [ 45.162359][ T344] syz-executor (344) used greatest stack depth: 21344 bytes left [ 45.446510][ T366] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.460846][ T366] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.471538][ T366] device bridge_slave_0 entered promiscuous mode [ 45.503752][ T366] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.517296][ T366] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.531635][ T366] device bridge_slave_1 entered promiscuous mode [ 45.598684][ T370] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.609192][ T370] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.628383][ T370] device bridge_slave_0 entered promiscuous mode [ 45.657857][ T370] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.668834][ T370] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.683782][ T370] device bridge_slave_1 entered promiscuous mode [ 45.711696][ T371] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.722292][ T371] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.732696][ T371] device bridge_slave_0 entered promiscuous mode [ 45.742150][ T371] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.760047][ T371] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.771480][ T371] device bridge_slave_1 entered promiscuous mode [ 45.820671][ T373] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.830605][ T373] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.841933][ T373] device bridge_slave_0 entered promiscuous mode [ 45.869975][ T373] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.886484][ T373] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.898182][ T373] device bridge_slave_1 entered promiscuous mode [ 45.984850][ T372] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.995021][ T372] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.007202][ T372] device bridge_slave_0 entered promiscuous mode [ 46.024333][ T372] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.033348][ T372] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.046851][ T372] device bridge_slave_1 entered promiscuous mode [ 46.337740][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 46.352446][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 46.369290][ T8] device bridge_slave_1 left promiscuous mode [ 46.380335][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.388928][ T8] device bridge_slave_0 left promiscuous mode [ 46.401788][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.415078][ T8] device veth1_macvtap left promiscuous mode [ 46.427282][ T8] device veth0_vlan left promiscuous mode [ 46.549049][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 46.566639][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 46.581382][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.591006][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.607546][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 46.639281][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 46.653775][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 46.668493][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.679113][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.712861][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 46.743380][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 46.781207][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 46.798440][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 46.810754][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 46.824981][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 46.836552][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.846119][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.856007][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 46.870546][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 46.883771][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.891799][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.926046][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 46.936052][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 46.948796][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 46.963258][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 46.975372][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 46.992411][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 47.004798][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 47.039491][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 47.050421][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 47.067197][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.077138][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.090019][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.098994][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.110290][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.122777][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.135930][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.146465][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.157538][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 47.168632][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 47.181189][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 47.200959][ T366] device veth0_vlan entered promiscuous mode [ 47.212213][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.224281][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.234946][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.244116][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.257153][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.269432][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.280065][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.289102][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.298407][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 47.310525][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 47.320968][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 47.330671][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 47.343396][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 47.362445][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 47.373057][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 47.388711][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 47.404169][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 47.417309][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 47.426192][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 47.437315][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 47.450306][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 47.470096][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 47.482421][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 47.517385][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 47.530176][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 47.539629][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 47.551188][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 47.567888][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 47.579644][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 47.590225][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.605318][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.617681][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.628203][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.645030][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.662703][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.673029][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.683303][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.694429][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 47.708666][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 47.719655][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 47.734050][ T370] device veth0_vlan entered promiscuous mode [ 47.744523][ T366] device veth1_macvtap entered promiscuous mode [ 47.773281][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 47.784682][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 47.794336][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 47.805184][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 47.819884][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 47.834353][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 47.849065][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 47.865377][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 47.876859][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 47.898423][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 47.910260][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 47.931654][ T371] device veth0_vlan entered promiscuous mode [ 47.944256][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 47.957643][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 47.968489][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 47.981380][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 47.992740][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 48.006031][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 48.017027][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 48.027937][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 48.049075][ T370] device veth1_macvtap entered promiscuous mode [ 48.062660][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 48.071841][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 48.082976][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 48.110483][ T372] device veth0_vlan entered promiscuous mode [ 48.124060][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 48.133713][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 48.143987][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 48.157047][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 48.168758][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 48.184364][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 48.203541][ T373] device veth0_vlan entered promiscuous mode [ 48.227061][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 48.236715][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 48.250079][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 48.261936][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 48.272082][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 48.283359][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 48.303849][ T371] device veth1_macvtap entered promiscuous mode [ 48.319310][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 48.331393][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 48.346636][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 48.359046][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 48.370299][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 48.385075][ T372] device veth1_macvtap entered promiscuous mode [ 48.404260][ T422] netlink: 12 bytes leftover after parsing attributes in process `syz.6.18'. [ 48.421319][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 48.433000][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 48.450049][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 48.463370][ T373] device veth1_macvtap entered promiscuous mode [ 48.483365][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 48.494468][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 48.510378][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 48.553448][ T426] netlink: 12 bytes leftover after parsing attributes in process `syz.6.22'. [ 48.589040][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 48.604169][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 48.615393][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 48.630079][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 48.647376][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 48.661487][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 48.673087][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 48.684276][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 48.695637][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 48.709940][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 48.726760][ T434] netlink: 12 bytes leftover after parsing attributes in process `syz.3.20'. [ 48.741022][ T436] netlink: 12 bytes leftover after parsing attributes in process `syz.6.23'. [ 48.805501][ T442] netlink: 12 bytes leftover after parsing attributes in process `syz.6.25'. [ 48.847828][ T440] netlink: 12 bytes leftover after parsing attributes in process `syz.3.24'. [ 48.869572][ T448] netlink: 12 bytes leftover after parsing attributes in process `syz.0.17'. [ 48.893242][ T446] netlink: 12 bytes leftover after parsing attributes in process `syz.5.19'. [ 48.911847][ T449] netlink: 12 bytes leftover after parsing attributes in process `syz.4.21'. [ 48.942889][ T461] netlink: 12 bytes leftover after parsing attributes in process `syz.5.27'. 2025/10/28 10:16:03 executed programs: 172 [ 53.414492][ T2182] __nla_validate_parse: 573 callbacks suppressed [ 53.414510][ T2182] netlink: 12 bytes leftover after parsing attributes in process `syz.6.604'. [ 53.440592][ T2180] netlink: 12 bytes leftover after parsing attributes in process `syz.4.600'. [ 53.459697][ T2186] netlink: 12 bytes leftover after parsing attributes in process `syz.0.602'. [ 53.481274][ T2175] netlink: 12 bytes leftover after parsing attributes in process `syz.3.601'. [ 53.524736][ T2179] netlink: 12 bytes leftover after parsing attributes in process `syz.5.603'. [ 53.557624][ T2194] netlink: 12 bytes leftover after parsing attributes in process `syz.4.605'. [ 53.593737][ T2196] netlink: 12 bytes leftover after parsing attributes in process `syz.6.606'. [ 53.626230][ T2200] netlink: 12 bytes leftover after parsing attributes in process `syz.0.608'. [ 53.691817][ T2205] netlink: 12 bytes leftover after parsing attributes in process `syz.5.609'. [ 53.735638][ T2207] netlink: 12 bytes leftover after parsing attributes in process `syz.6.611'. 2025/10/28 10:16:08 executed programs: 744 [ 58.417378][ T3924] __nla_validate_parse: 571 callbacks suppressed [ 58.417398][ T3924] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1182'. [ 58.462549][ T3928] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1183'. [ 58.479717][ T3923] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1181'. [ 58.502846][ T3933] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1184'. [ 58.533291][ T3931] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1185'. [ 58.595419][ T3941] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1188'. [ 58.618139][ T3939] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1186'. [ 58.639298][ T3943] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1187'. [ 58.666498][ T3948] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1189'. [ 58.692654][ T3951] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1190'. 2025/10/28 10:16:13 executed programs: 1318 [ 63.432453][ T5339] __nla_validate_parse: 462 callbacks suppressed [ 63.432472][ T5339] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1653'. [ 63.469262][ T5348] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1656'. [ 63.488740][ T5344] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1655'. [ 63.502307][ T5350] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1657'. [ 63.539520][ T5356] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1658'. [ 63.590727][ T5347] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1654'. [ 63.620335][ T5360] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1659'. [ 63.686493][ T5361] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1660'. [ 63.726715][ T5369] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1662'. [ 63.775700][ T5363] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1661'. 2025/10/28 10:16:18 executed programs: 1829 [ 68.438143][ T7280] __nla_validate_parse: 635 callbacks suppressed [ 68.438165][ T7280] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2299'. [ 68.483702][ T7283] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2301'. [ 68.505635][ T7277] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2296'. [ 68.537025][ T7286] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2300'. [ 68.577971][ T7296] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2305'. [ 68.611029][ T7287] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2302'. [ 68.637495][ T7293] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2303'. [ 68.652060][ T7298] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2304'. [ 68.698727][ T7307] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2308'. [ 68.725208][ T7300] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2306'. 2025/10/28 10:16:23 executed programs: 2462 [ 73.455422][ T8750] __nla_validate_parse: 483 callbacks suppressed [ 73.455442][ T8750] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2788'. [ 73.485797][ T8762] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2794'. [ 73.516125][ T8756] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2792'. [ 73.551328][ T8765] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2793'. [ 73.584181][ T8768] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2795'. [ 73.608122][ T8775] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2798'. [ 73.658320][ T8781] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2800'. [ 73.675462][ T8779] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2799'. [ 73.700272][ T8777] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2797'. [ 73.732062][ T8774] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2796'. 2025/10/28 10:16:28 executed programs: 2959 [ 75.493030][ T9271] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.514518][ T9271] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.539037][ T9271] device bridge_slave_0 entered promiscuous mode [ 75.603080][ T9271] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.614851][ T9271] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.626191][ T9271] device bridge_slave_1 entered promiscuous mode [ 75.931737][ T2414] device bridge_slave_1 left promiscuous mode [ 75.973880][ T2414] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.022369][ T2414] device bridge_slave_0 left promiscuous mode [ 76.060134][ T2414] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.137828][ T2414] device veth1_macvtap left promiscuous mode [ 76.174404][ T2414] device veth0_vlan left promiscuous mode [ 77.031751][ T2414] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 77.048134][ T2414] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 77.089218][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 77.136557][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 77.154137][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.168167][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.187919][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 77.207303][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 77.225754][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 77.235174][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.250767][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.300059][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 77.315903][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 77.337616][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 77.351783][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 77.428298][ T2414] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 77.448476][ T2414] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 77.463756][ T2414] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 77.484073][ T2414] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 77.497415][ T9271] device veth0_vlan entered promiscuous mode [ 77.596711][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 77.624073][ T9271] device veth1_macvtap entered promiscuous mode [ 77.687910][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.714960][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.758888][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.772880][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 78.227032][ T9643] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.242091][ T9643] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.263878][ T9643] device bridge_slave_0 entered promiscuous mode [ 78.302373][ T9643] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.313066][ T9643] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.324416][ T9643] device bridge_slave_1 entered promiscuous mode [ 78.481009][ T9761] __nla_validate_parse: 312 callbacks suppressed [ 78.481029][ T9761] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3114'. [ 78.509395][ T9763] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3116'. [ 78.526143][ T9760] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3115'. [ 78.572398][ T9768] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3117'. [ 78.598143][ T9770] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3119'. [ 78.616539][ T9772] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3118'. [ 78.668285][ T9775] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3120'. [ 78.708029][ T9784] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3123'. [ 78.728726][ T9782] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3122'. [ 78.753079][ T9788] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3124'. [ 78.823174][ T2414] device bridge_slave_1 left promiscuous mode [ 78.832645][ T2414] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.844868][ T2414] device bridge_slave_0 left promiscuous mode [ 78.854384][ T2414] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.875066][ T2414] device veth1_macvtap left promiscuous mode [ 78.883557][ T2414] device veth0_vlan left promiscuous mode [ 79.217540][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 79.242870][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 79.284152][ T2414] ================================================================== [ 79.300377][ T2414] BUG: KASAN: use-after-free in _raw_spin_lock_bh+0x81/0xe0 [ 79.310381][ T2414] Write of size 4 at addr ffff88810bdf6914 by task kworker/u4:4/2414 [ 79.323366][ T2414] [ 79.327282][ T2414] CPU: 1 PID: 2414 Comm: kworker/u4:4 Not tainted syzkaller #0 [ 79.337043][ T2414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 79.362262][ T2414] Workqueue: netns cleanup_net [ 79.371828][ T2414] Call Trace: [ 79.378838][ T2414] [ 79.383071][ T2414] __dump_stack+0x21/0x24 [ 79.388582][ T2414] dump_stack_lvl+0xee/0x150 [ 79.398601][ T2414] ? __cfi_dump_stack_lvl+0x8/0x8 [ 79.405646][ T2414] ? __cfi__printk+0x8/0x8 [ 79.413019][ T2414] ? _raw_spin_lock_bh+0x81/0xe0 [ 79.422400][ T2414] print_address_description+0x71/0x200 [ 79.429215][ T2414] print_report+0x4a/0x60 [ 79.435776][ T2414] kasan_report+0x122/0x150 [ 79.443332][ T2414] ? _raw_spin_lock_bh+0x81/0xe0 [ 79.453148][ T2414] ? unwind_next_frame+0x3d5/0x700 [ 79.465988][ T2414] kasan_check_range+0x280/0x290 [ 79.474825][ T2414] __kasan_check_write+0x14/0x20 [ 79.484367][ T2414] _raw_spin_lock_bh+0x81/0xe0 [ 79.494539][ T2414] ? __cfi__raw_spin_lock_bh+0x10/0x10 [ 79.504223][ T2414] ? ret_from_fork+0x1f/0x30 [ 79.514205][ T2414] __ip6_del_rt+0x8f/0x150 [ 79.524988][ T2414] ip6_del_rt+0xb0/0xf0 [ 79.530548][ T2414] ? __cfi_ip6_del_rt+0x10/0x10 [ 79.539662][ T2414] ? call_nexthop_notifiers+0x157/0x330 [ 79.546465][ T2414] ? remove_nexthop+0x500/0x500 [ 79.554013][ T2414] ? kasan_save_free_info+0x31/0x50 [ 79.562932][ T2414] ? __cfi_ip6_del_rt+0x10/0x10 [ 79.569645][ T2414] __remove_nexthop_fib+0x1f7/0x270 [ 79.578078][ T2414] remove_nexthop+0x73/0x500 [ 79.585318][ T2414] remove_nexthop_from_groups+0x22f/0x1210 [ 79.595795][ T2414] ? __remove_nexthop_fib+0x270/0x270 [ 79.607027][ T2414] ? __remove_nexthop_fib+0x25d/0x270 [ 79.613409][ T2414] ? mutex_lock+0xf8/0x1a0 [ 79.620995][ T2414] ? __cfi_mutex_lock+0x10/0x10 [ 79.629221][ T2414] remove_nexthop+0x3b6/0x500 [ 79.638406][ T2414] nexthop_net_exit_batch+0x76/0x110 [ 79.648900][ T2414] ? __cfi_nexthop_net_exit_batch+0x10/0x10 [ 79.657265][ T2414] cleanup_net+0x62d/0xb00 [ 79.665031][ T2414] ? __cfi_cleanup_net+0x10/0x10 [ 79.673612][ T2414] process_one_work+0x71f/0xc40 [ 79.682944][ T2414] worker_thread+0xa29/0x11f0 [ 79.688379][ T2414] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 79.696773][ T2414] ? __kthread_parkme+0x142/0x180 [ 79.702987][ T2414] kthread+0x281/0x320 [ 79.709120][ T2414] ? __cfi_worker_thread+0x10/0x10 [ 79.721531][ T2414] ? __cfi_kthread+0x10/0x10 [ 79.729079][ T2414] ret_from_fork+0x1f/0x30 [ 79.735886][ T2414] [ 79.739201][ T2414] [ 79.741911][ T2414] Allocated by task 371: [ 79.750077][ T2414] kasan_set_track+0x4b/0x70 [ 79.756356][ T2414] kasan_save_alloc_info+0x25/0x30 [ 79.763585][ T2414] __kasan_kmalloc+0x95/0xb0 [ 79.771091][ T2414] kmalloc_trace+0x40/0xb0 [ 79.779071][ T2414] fib6_net_init+0x23d/0x8c0 [ 79.789541][ T2414] ops_init+0x1c8/0x4a0 [ 79.796136][ T2414] setup_net+0x4ab/0xcb0 [ 79.801987][ T2414] copy_net_ns+0x355/0x5c0 [ 79.806782][ T2414] create_new_namespaces+0x3a2/0x660 [ 79.814502][ T2414] unshare_nsproxy_namespaces+0x120/0x170 [ 79.825028][ T2414] ksys_unshare+0x4ac/0x7b0 [ 79.831755][ T2414] __x64_sys_unshare+0x38/0x40 [ 79.838405][ T2414] x64_sys_call+0x767/0x9a0 [ 79.845772][ T2414] do_syscall_64+0x4c/0xa0 [ 79.851816][ T2414] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 79.863216][ T2414] [ 79.866291][ T2414] Freed by task 2414: [ 79.871655][ T2414] kasan_set_track+0x4b/0x70 [ 79.880583][ T2414] kasan_save_free_info+0x31/0x50 [ 79.887454][ T2414] ____kasan_slab_free+0x132/0x180 [ 79.896691][ T2414] __kasan_slab_free+0x11/0x20 [ 79.904914][ T2414] slab_free_freelist_hook+0xc2/0x190 [ 79.914562][ T2414] __kmem_cache_free+0xb7/0x1b0 [ 79.925181][ T2414] kfree+0x6f/0xf0 [ 79.931268][ T2414] fib6_net_exit+0x270/0x300 [ 79.938825][ T2414] cleanup_net+0x5ad/0xb00 [ 79.945564][ T2414] process_one_work+0x71f/0xc40 [ 79.953099][ T2414] worker_thread+0xa29/0x11f0 [ 79.959331][ T2414] kthread+0x281/0x320 [ 79.964675][ T2414] ret_from_fork+0x1f/0x30 [ 79.972524][ T2414] [ 79.976427][ T2414] The buggy address belongs to the object at ffff88810bdf6900 [ 79.976427][ T2414] which belongs to the cache kmalloc-128 of size 128 [ 79.997018][ T2414] The buggy address is located 20 bytes inside of [ 79.997018][ T2414] 128-byte region [ffff88810bdf6900, ffff88810bdf6980) [ 80.014792][ T2414] [ 80.019079][ T2414] The buggy address belongs to the physical page: [ 80.028932][ T2414] page:ffffea00042f7d80 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10bdf6 [ 80.048057][ T2414] flags: 0x4000000000000200(slab|zone=1) [ 80.057399][ T2414] raw: 4000000000000200 ffffea000432fbc0 dead000000000003 ffff888100042a80 [ 80.069537][ T2414] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 80.084007][ T2414] page dumped because: kasan: bad access detected [ 80.092437][ T2414] page_owner tracks the page as allocated [ 80.102910][ T2414] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12c00(GFP_NOIO|__GFP_NOWARN|__GFP_NORETRY), pid 1, tgid 1 (swapper/0), ts 3100221853, free_ts 0 [ 80.127220][ T2414] post_alloc_hook+0x1f5/0x210 [ 80.134033][ T2414] prep_new_page+0x1c/0x110 [ 80.141493][ T2414] get_page_from_freelist+0x2c7b/0x2cf0 [ 80.149926][ T2414] __alloc_pages+0x1c3/0x450 [ 80.157390][ T2414] alloc_slab_page+0x6e/0xf0 [ 80.164414][ T2414] new_slab+0x98/0x3d0 [ 80.170570][ T2414] ___slab_alloc+0x6bd/0xb20 [ 80.176813][ T2414] __slab_alloc+0x5e/0xa0 [ 80.182845][ T2414] __kmem_cache_alloc_node+0x203/0x2c0 [ 80.191021][ T2414] __kmalloc_node+0xa1/0x1e0 [ 80.204077][ T2414] kvmalloc_node+0x294/0x480 [ 80.210852][ T2414] sbitmap_init_node+0x43b/0x580 [ 80.220389][ T2414] blk_mq_alloc_and_init_hctx+0x4f0/0xe50 [ 80.227966][ T2414] blk_mq_realloc_hw_ctxs+0x17a/0x410 [ 80.236558][ T2414] blk_mq_init_allocated_queue+0x4df/0x16b0 [ 80.244705][ T2414] __blk_mq_alloc_disk+0xb8/0x1e0 [ 80.255742][ T2414] page_owner free stack trace missing [ 80.267073][ T2414] [ 80.270463][ T2414] Memory state around the buggy address: [ 80.279731][ T2414] ffff88810bdf6800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 80.294220][ T2414] ffff88810bdf6880: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 80.306049][ T2414] >ffff88810bdf6900: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 80.318134][ T2414] ^ [ 80.325622][ T2414] ffff88810bdf6980: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 80.341635][ T2414] ffff88810bdf6a00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fc fc [ 80.353166][ T2414] ================================================================== [ 80.367655][ T2414] Disabling lock debugging due to kernel taint [ 80.376005][ T28] kauditd_printk_skb: 31 callbacks suppressed 2025/10/28 10:16:33 executed programs: 3135 [ 80.376021][ T28] audit: type=1400 audit(1761646593.893:105): avc: denied { read } for pid=84 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 80.425394][ T28] audit: type=1400 audit(1761646593.913:106): avc: denied { search } for pid=84 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 80.464521][ T28] audit: type=1400 audit(1761646593.913:107): avc: denied { write } for pid=84 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 80.479253][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.517991][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.527963][ T28] audit: type=1400 audit(1761646593.913:108): avc: denied { add_name } for pid=84 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 80.532918][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.573732][ T28] audit: type=1400 audit(1761646593.913:109): avc: denied { create } for pid=84 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 80.584124][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.586534][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.618154][ T28] audit: type=1400 audit(1761646593.913:110): avc: denied { append open } for pid=84 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 80.629094][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.641096][ T28] audit: type=1400 audit(1761646593.913:111): avc: denied { getattr } for pid=84 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 80.672466][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.730729][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.744764][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 80.794163][ T2414] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 80.809757][ T2414] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 80.825384][ T2414] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 80.841984][ T2414] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 80.940172][ T2414] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 80.964119][ T2414] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 81.027196][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 81.052894][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 81.073752][ T9643] device veth0_vlan entered promiscuous mode [ 81.092321][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 81.105565][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 81.138499][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 81.161450][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 81.188760][ T9643] device veth1_macvtap entered promiscuous mode [ 81.238583][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 81.256918][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 81.274009][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 81.299733][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 81.318743][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 81.680323][ T9999] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.689555][ T9999] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.701677][ T9999] device bridge_slave_0 entered promiscuous mode [ 81.711483][ T9999] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.722066][ T9999] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.731795][ T9999] device bridge_slave_1 entered promiscuous mode [ 82.066517][ T43] device bridge_slave_1 left promiscuous mode [ 82.078489][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.093029][ T43] device bridge_slave_0 left promiscuous mode [ 82.105568][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.124951][ T43] device veth1_macvtap left promiscuous mode [ 82.134694][ T43] device veth0_vlan left promiscuous mode [ 82.353262][ T9999] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.366013][ T9999] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.375986][ T9999] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.387071][ T9999] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.519062][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 82.533102][ T329] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.552068][ T329] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.572777][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 82.594343][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 82.608499][ T329] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.621536][ T329] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.633836][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 82.648783][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 82.662887][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.673759][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.732427][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 82.767906][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 82.826662][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 82.852804][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 82.919697][T10201] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 82.934333][T10201] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 82.956029][T10201] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 82.974084][T10201] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 82.994998][ T9999] device veth0_vlan entered promiscuous mode [ 83.031788][T10201] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 83.047263][T10201] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 83.138837][T10201] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 83.154053][T10201] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 83.168514][ T9999] device veth1_macvtap entered promiscuous mode [ 83.230658][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 83.251665][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 83.264393][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 83.277896][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 83.291252][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 83.489260][T10339] __nla_validate_parse: 167 callbacks suppressed [ 83.489279][T10339] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3293'. [ 83.523245][T10340] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3292'. [ 83.537703][T10344] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3294'. [ 83.549548][T10330] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3290'. [ 83.593644][T10348] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3295'. [ 83.612155][T10350] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3296'. [ 83.643859][T10356] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3298'. [ 83.663002][T10354] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3297'. [ 83.683505][T10361] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3299'. [ 83.729983][T10363] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3300'. [ 83.908945][T10331] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.921744][T10331] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.939927][T10331] device bridge_slave_0 entered promiscuous mode [ 83.972333][T10331] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.988468][T10331] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.004411][T10331] device bridge_slave_1 entered promiscuous mode [ 84.285748][ T10] device bridge_slave_1 left promiscuous mode [ 84.297911][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.312073][ T10] device bridge_slave_0 left promiscuous mode [ 84.321369][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.335027][ T10] device veth1_macvtap left promiscuous mode [ 84.344130][ T10] device veth0_vlan left promiscuous mode [ 84.577046][T10331] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.588573][T10331] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.604249][T10331] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.617150][T10331] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.638565][T10201] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.649958][T10201] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.759335][T10201] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 84.774494][T10201] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 84.829398][T10201] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 84.864194][T10201] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 84.876232][T10201] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.886456][T10201] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.931887][T10201] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 84.952643][T10201] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 84.968235][T10201] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.977017][T10201] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.038310][T10201] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 85.063344][T10201] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 85.078691][T10201] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 85.090616][T10201] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 85.154597][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 85.174367][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 85.229722][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 85.252507][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 85.271080][T10331] device veth0_vlan entered promiscuous mode [ 85.290965][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 85.306589][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 85.359020][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 85.388507][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 85.409802][T10331] device veth1_macvtap entered promiscuous mode [ 85.438698][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready 2025/10/28 10:16:38 executed programs: 3373 [ 85.466233][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 85.487355][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 85.535701][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 85.549998][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 85.980472][T10672] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.991542][T10672] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.009192][T10672] device bridge_slave_0 entered promiscuous mode [ 86.049131][T10672] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.063181][T10672] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.075380][T10672] device bridge_slave_1 entered promiscuous mode [ 86.433958][ T329] device bridge_slave_1 left promiscuous mode [ 86.452521][ T329] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.462844][ T329] device bridge_slave_0 left promiscuous mode [ 86.475653][ T329] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.496670][ T329] device veth1_macvtap left promiscuous mode [ 86.508280][ T329] device veth0_vlan left promiscuous mode [ 86.975321][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 86.993402][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 87.037914][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 87.064075][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 87.078205][ T329] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.089956][ T329] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.104184][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 87.120521][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 87.132831][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 87.147323][ T329] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.157548][ T329] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.215336][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 87.243667][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 87.271472][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 87.293511][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 87.340436][T10201] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 87.365308][T10201] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 87.400468][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 87.423393][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 87.441754][T10672] device veth0_vlan entered promiscuous mode [ 87.468777][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 87.483222][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 87.527416][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 87.557189][T10672] device veth1_macvtap entered promiscuous mode [ 87.624441][T10201] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 87.647308][T10201] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 87.701440][T10201] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 87.739566][T10201] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 88.501679][T11321] __nla_validate_parse: 305 callbacks suppressed [ 88.501699][T11321] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3606'. [ 88.532270][T11323] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3604'. [ 88.564419][T11317] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3607'. [ 88.601984][T11328] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3609'. [ 88.619745][T11324] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3608'. [ 88.637815][T11333] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3610'. [ 88.685269][T11336] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3611'. [ 88.719920][T11341] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3614'. [ 88.734094][T11344] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3613'. [ 88.748543][T11345] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3615'.