Warning: Permanently added '10.128.0.60' (ED25519) to the list of known hosts. 2026/11/02 20:04:39 parsed 1 programs 2026/11/02 20:04:39 serving rpc on tcp://33171 Setting up swapspace version 1, size = 127995904 bytes [ 38.814846][ T28] kauditd_printk_skb: 32 callbacks suppressed [ 38.814862][ T28] audit: type=1400 audit(1793649881.106:106): avc: denied { unlink } for pid=408 comm="syz-executor" name="swap-file" dev="sda1" ino=2027 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 38.891243][ T408] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 39.845068][ T423] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.852132][ T423] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.859669][ T423] device bridge_slave_0 entered promiscuous mode [ 39.866841][ T423] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.873876][ T423] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.881496][ T423] device bridge_slave_1 entered promiscuous mode [ 39.928208][ T423] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.935282][ T423] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.942552][ T423] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.949633][ T423] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.970513][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.977839][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.985393][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 39.992851][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 40.002218][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 40.010598][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.017666][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.027037][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 40.035289][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.042315][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.055353][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 40.065045][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 40.079899][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 40.091952][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 40.100290][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 40.108154][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 40.116789][ T423] device veth0_vlan entered promiscuous mode [ 40.129692][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 40.139086][ T423] device veth1_macvtap entered promiscuous mode [ 40.149401][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 40.160698][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 40.336106][ T28] audit: type=1401 audit(1793649882.626:107): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768" 2026/11/02 20:04:43 executed programs: 0 [ 40.945038][ T474] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.952176][ T474] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.959907][ T474] device bridge_slave_0 entered promiscuous mode [ 40.967210][ T8] device bridge_slave_1 left promiscuous mode [ 40.973341][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.980995][ T8] device bridge_slave_0 left promiscuous mode [ 40.987298][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.995404][ T8] device veth1_macvtap left promiscuous mode [ 41.001449][ T8] device veth0_vlan left promiscuous mode [ 41.077885][ T474] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.085088][ T474] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.092498][ T474] device bridge_slave_1 entered promiscuous mode [ 41.141215][ T474] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.148296][ T474] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.155643][ T474] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.162691][ T474] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.184277][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 41.192020][ T322] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.199390][ T322] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.208764][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 41.217078][ T322] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.224171][ T322] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.232979][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 41.241568][ T322] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.248684][ T322] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.261665][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 41.271264][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 41.286777][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 41.299249][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 41.307809][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 41.315586][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 41.324033][ T474] device veth0_vlan entered promiscuous mode [ 41.337497][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 41.347702][ T474] device veth1_macvtap entered promiscuous mode [ 41.357880][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 41.368128][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 41.394470][ T28] audit: type=1400 audit(1793649883.676:108): avc: denied { bpf } for pid=478 comm="syz.2.17" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 41.416210][ T479] ================================================================== [ 41.424441][ T479] BUG: KASAN: slab-out-of-bounds in stack_map_get_build_id_offset+0x988/0x9b0 [ 41.424541][ T28] audit: type=1400 audit(1793649883.676:109): avc: denied { prog_load } for pid=478 comm="syz.2.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 41.433332][ T479] Write of size 4 at addr ffff88811d4d9330 by task syz.2.17/479 [ 41.452968][ T28] audit: type=1400 audit(1793649883.676:110): avc: denied { map_create } for pid=478 comm="syz.2.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 41.459626][ T479] [ 41.459634][ T479] CPU: 1 PID: 479 Comm: syz.2.17 Not tainted syzkaller #0 [ 41.459655][ T479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 41.459682][ T479] Call Trace: [ 41.479538][ T28] audit: type=1400 audit(1793649883.676:111): avc: denied { map_read } for pid=478 comm="syz.2.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 41.480956][ T479] [ 41.490286][ T28] audit: type=1400 audit(1793649883.676:112): avc: denied { perfmon } for pid=478 comm="syz.2.17" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 41.498154][ T479] __dump_stack+0x21/0x24 [ 41.498183][ T479] dump_stack_lvl+0x110/0x170 [ 41.498202][ T479] ? __cfi_dump_stack_lvl+0x8/0x8 [ 41.502349][ T28] audit: type=1400 audit(1793649883.676:113): avc: denied { prog_run } for pid=478 comm="syz.2.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 41.520061][ T479] ? stack_map_get_build_id_offset+0x988/0x9b0 [ 41.520092][ T479] print_address_description+0x71/0x200 [ 41.523834][ T28] audit: type=1400 audit(1793649883.686:114): avc: denied { open } for pid=478 comm="syz.2.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 41.543619][ T479] print_report+0x4a/0x60 [ 41.543656][ T479] kasan_report+0x122/0x150 [ 41.548720][ T28] audit: type=1400 audit(1793649883.686:115): avc: denied { kernel } for pid=478 comm="syz.2.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 41.552794][ T479] ? stack_map_get_build_id_offset+0x988/0x9b0 [ 41.641246][ T479] __asan_report_store4_noabort+0x17/0x20 [ 41.647008][ T479] stack_map_get_build_id_offset+0x988/0x9b0 [ 41.653019][ T479] ? _raw_spin_unlock+0x4c/0x70 [ 41.657882][ T479] ? __bpf_get_stackid+0x960/0x960 [ 41.663036][ T479] ? pcpu_freelist_pop+0xac/0xf0 [ 41.668009][ T479] ? __cfi_pcpu_freelist_pop+0x10/0x10 [ 41.673578][ T479] __bpf_get_stackid+0x5ac/0x960 [ 41.678756][ T479] bpf_get_stackid_pe+0x2ee/0x400 [ 41.683799][ T479] bpf_prog_2414a5d5030ea31b+0x21/0x25 [ 41.689285][ T479] bpf_overflow_handler+0x3c7/0x5e0 [ 41.694592][ T479] ? __sys_bpf+0x57b/0x850 [ 41.699032][ T479] ? __cfi_bpf_overflow_handler+0x10/0x10 [ 41.704788][ T479] ? __this_cpu_preempt_check+0x13/0x20 [ 41.710443][ T479] ? __perf_event_account_interrupt+0x1a4/0x2c0 [ 41.716792][ T479] __perf_event_overflow+0x458/0x640 [ 41.722127][ T479] perf_swevent_event+0x243/0x440 [ 41.727176][ T479] ? perf_tp_event+0xa20/0xa20 [ 41.732045][ T479] ? unwind_get_return_address+0x4d/0x90 [ 41.737705][ T479] ___perf_sw_event+0x3bf/0x500 [ 41.742582][ T479] ? __cfi____perf_sw_event+0x10/0x10 [ 41.748053][ T479] ? is_bpf_text_address+0x177/0x190 [ 41.753387][ T479] ? stack_trace_save+0xa6/0xf0 [ 41.758362][ T479] ? __stack_depot_save+0x36/0x490 [ 41.763504][ T479] __perf_sw_event+0x134/0x270 [ 41.768290][ T479] do_user_addr_fault+0xfe9/0x1030 [ 41.773425][ T479] exc_page_fault+0x51/0xb0 [ 41.777946][ T479] asm_exc_page_fault+0x27/0x30 [ 41.782946][ T479] RIP: 0010:copy_user_short_string+0xd/0x40 [ 41.788868][ T479] Code: 74 0a 89 d1 f3 a4 89 c8 0f 01 ca c3 89 d0 0f 01 ca c3 01 ca eb e7 90 90 90 90 90 90 90 89 d1 83 e2 07 c1 e9 03 74 12 4c 8b 06 <4c> 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 89 d1 8a [ 41.808684][ T479] RSP: 0018:ffffc90000a97298 EFLAGS: 00050202 [ 41.814784][ T479] RAX: ffffffff82697d01 RBX: 000000000000000b RCX: 0000000000000001 [ 41.822774][ T479] RDX: 0000000000000003 RSI: ffff88810912866c RDI: 000020000000cf3d [ 41.830848][ T479] RBP: ffffc90000a972c0 R08: 40203023636e7566 R09: 1ffff110212250ce [ 41.839008][ T479] R10: dffffc0000000000 R11: ffffed10212250cf R12: 00007fffffffeff5 [ 41.847091][ T479] R13: 000000000000000b R14: 000020000000cf3d R15: ffff88810912866c [ 41.855080][ T479] ? _copy_from_user+0x61/0xc0 [ 41.859868][ T479] ? _copy_to_user+0x72/0x90 [ 41.864703][ T479] bpf_verifier_vlog+0x179/0x390 [ 41.869683][ T479] verbose+0x1f0/0x2b0 [ 41.873783][ T479] ? __cfi_verbose+0x10/0x10 [ 41.878397][ T479] ? security_capable+0x99/0xc0 [ 41.883272][ T479] bpf_check+0x2f1b/0x10e90 [ 41.887799][ T479] ? unwind_get_return_address+0x4d/0x90 [ 41.893455][ T479] ? __cfi_gfp_zone+0x10/0x10 [ 41.898586][ T479] ? __cfi_bpf_check+0x10/0x10 [ 41.903465][ T479] ? 0xffffffffa000064c [ 41.907633][ T479] ? is_bpf_text_address+0x177/0x190 [ 41.912949][ T479] ? kernel_text_address+0xa0/0xd0 [ 41.918092][ T479] ? __kernel_text_address+0xd/0x30 [ 41.923311][ T479] ? unwind_get_return_address+0x4d/0x90 [ 41.928995][ T479] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 41.935171][ T479] ? arch_stack_walk+0xfc/0x150 [ 41.940079][ T479] ? stack_trace_save+0xa6/0xf0 [ 41.944956][ T479] ? __stack_depot_save+0x36/0x490 [ 41.950140][ T479] ? kasan_set_track+0x60/0x70 [ 41.954932][ T479] ? kasan_set_track+0x4b/0x70 [ 41.959721][ T479] ? kasan_save_alloc_info+0x1f/0x30 [ 41.965031][ T479] ? __kasan_kmalloc+0x95/0xb0 [ 41.969818][ T479] ? kmalloc_trace+0x40/0xb0 [ 41.974421][ T479] ? selinux_bpf_prog_alloc+0x51/0x140 [ 41.979908][ T479] ? security_bpf_prog_alloc+0x73/0xa0 [ 41.985402][ T479] ? bpf_prog_load+0xa03/0x1670 [ 41.990265][ T479] ? __sys_bpf+0x57b/0x850 [ 41.994699][ T479] ? __x64_sys_bpf+0x7c/0x90 [ 41.999304][ T479] ? x64_sys_call+0x488/0x9a0 [ 42.004009][ T479] ? do_syscall_64+0x4c/0xa0 [ 42.008615][ T479] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 42.014707][ T479] ? __kasan_check_write+0x14/0x20 [ 42.019854][ T479] ? _raw_spin_lock+0x94/0xf0 [ 42.024568][ T479] ? __cfi__raw_spin_lock+0x10/0x10 [ 42.029788][ T479] ? _raw_spin_unlock+0x4c/0x70 [ 42.034650][ T479] ? memset+0x35/0x40 [ 42.038655][ T479] ? bpf_obj_name_cpy+0x193/0x1e0 [ 42.043700][ T479] bpf_prog_load+0x10f4/0x1670 [ 42.048482][ T479] ? map_freeze+0x3a0/0x3a0 [ 42.053000][ T479] ? selinux_bpf+0xc7/0xf0 [ 42.057612][ T479] ? security_bpf+0x93/0xb0 [ 42.062143][ T479] __sys_bpf+0x57b/0x850 [ 42.066426][ T479] ? bpf_link_show_fdinfo+0x330/0x330 [ 42.071819][ T479] ? fpregs_restore_userregs+0x128/0x260 [ 42.077468][ T479] __x64_sys_bpf+0x7c/0x90 [ 42.081908][ T479] x64_sys_call+0x488/0x9a0 [ 42.086423][ T479] do_syscall_64+0x4c/0xa0 [ 42.090853][ T479] ? clear_bhb_loop+0x30/0x80 [ 42.095544][ T479] ? clear_bhb_loop+0x30/0x80 [ 42.100261][ T479] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 42.106183][ T479] RIP: 0033:0x7f7d4b99e159 [ 42.110611][ T479] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 42.130315][ T479] RSP: 002b:00007f7d4c854028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 42.138744][ T479] RAX: ffffffffffffffda RBX: 00007f7d4bc25fa0 RCX: 00007f7d4b99e159 [ 42.146729][ T479] RDX: 0000000000000048 RSI: 000020000000e000 RDI: 0000000000000005 [ 42.154715][ T479] RBP: 00007f7d4ba3506b R08: 0000000000000000 R09: 0000000000000000 [ 42.162705][ T479] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 42.170693][ T479] R13: 00007f7d4bc26038 R14: 00007f7d4bc25fa0 R15: 00007ffc08d84b48 [ 42.178710][ T479] [ 42.181742][ T479] [ 42.184074][ T479] Allocated by task 479: [ 42.188322][ T479] kasan_set_track+0x4b/0x70 [ 42.192936][ T479] kasan_save_alloc_info+0x1f/0x30 [ 42.198073][ T479] __kasan_kmalloc+0x95/0xb0 [ 42.202704][ T479] __kmalloc_node+0xb2/0x1e0 [ 42.207304][ T479] bpf_map_area_alloc+0x4b/0xe0 [ 42.212626][ T479] prealloc_elems_and_freelist+0x8a/0x1e0 [ 42.218359][ T479] stack_map_alloc+0x398/0x520 [ 42.223135][ T479] map_create+0x467/0xcf0 [ 42.227481][ T479] __sys_bpf+0x34e/0x850 [ 42.231733][ T479] __x64_sys_bpf+0x7c/0x90 [ 42.236161][ T479] x64_sys_call+0x488/0x9a0 [ 42.240678][ T479] do_syscall_64+0x4c/0xa0 [ 42.245116][ T479] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 42.251022][ T479] [ 42.253362][ T479] The buggy address belongs to the object at ffff88811d4d9000 [ 42.253362][ T479] which belongs to the cache kmalloc-1k of size 1024 [ 42.267423][ T479] The buggy address is located 816 bytes inside of [ 42.267423][ T479] 1024-byte region [ffff88811d4d9000, ffff88811d4d9400) [ 42.280799][ T479] [ 42.283174][ T479] The buggy address belongs to the physical page: [ 42.289601][ T479] page:ffffea0004753600 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x11d4d8 [ 42.299876][ T479] head:ffffea0004753600 order:3 compound_mapcount:0 compound_pincount:0 [ 42.308236][ T479] flags: 0x4000000000010200(slab|head|zone=1) [ 42.314347][ T479] raw: 4000000000010200 0000000000000000 dead000000000001 ffff888100043080 [ 42.323116][ T479] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 42.331727][ T479] page dumped because: kasan: bad access detected [ 42.338158][ T479] page_owner tracks the page as allocated [ 42.343879][ T479] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 131, tgid 131 (S40network), ts 6660789801, free_ts 0 [ 42.364039][ T479] post_alloc_hook+0x1f5/0x210 [ 42.368833][ T479] prep_new_page+0x1c/0x110 [ 42.373351][ T479] get_page_from_freelist+0x2ca9/0x2d20 [ 42.378927][ T479] __alloc_pages+0x1fa/0x610 [ 42.383621][ T479] alloc_slab_page+0x6e/0xf0 [ 42.388218][ T479] new_slab+0x98/0x3e0 [ 42.392294][ T479] ___slab_alloc+0x70f/0xb70 [ 42.396907][ T479] __slab_alloc+0x5e/0xa0 [ 42.401342][ T479] __kmem_cache_alloc_node+0x204/0x2d0 [ 42.406824][ T479] __kmalloc+0xa4/0x1e0 [ 42.411024][ T479] load_elf_phdrs+0x132/0x230 [ 42.415720][ T479] load_elf_binary+0x9a3/0x2820 [ 42.420588][ T479] bprm_execve+0x782/0x1390 [ 42.425266][ T479] do_execveat_common+0x8e3/0xaa0 [ 42.430329][ T479] __x64_sys_execve+0x92/0xb0 [ 42.435042][ T479] x64_sys_call+0x98/0x9a0 [ 42.439489][ T479] page_owner free stack trace missing [ 42.444868][ T479] [ 42.447202][ T479] Memory state around the buggy address: [ 42.452925][ T479] ffff88811d4d9200: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 42.461003][ T479] ffff88811d4d9280: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 42.469091][ T479] >ffff88811d4d9300: 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc [ 42.477196][ T479] ^ [ 42.482834][ T479] ffff88811d4d9380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 42.491018][ T479] ffff88811d4d9400: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 42.499104][ T479] ================================================================== [ 42.507268][ T479] Disabling lock debugging due to kernel taint 2026/11/02 20:04:48 executed programs: 204 2026/11/02 20:04:53 executed programs: 504