Warning: Permanently added '10.128.1.80' (ED25519) to the list of known hosts. 2026/06/15 11:12:06 parsed 1 programs [ 68.138149][ T28] audit: type=1400 audit(1781521926.156:64): avc: denied { node_bind } for pid=295 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 68.159382][ T28] audit: type=1400 audit(1781521926.156:65): avc: denied { module_request } for pid=295 comm="syz-execprog" kmod="net-pf-2-proto-262-type-1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 68.965528][ T28] audit: type=1400 audit(1781521926.986:66): avc: denied { mounton } for pid=302 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2024 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 68.966509][ T302] cgroup: Unknown subsys name 'net' [ 68.988213][ T28] audit: type=1400 audit(1781521926.986:67): avc: denied { mount } for pid=302 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 69.015539][ T28] audit: type=1400 audit(1781521927.026:68): avc: denied { unmount } for pid=302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 69.015685][ T302] cgroup: Unknown subsys name 'devices' [ 69.133213][ T302] cgroup: Unknown subsys name 'hugetlb' [ 69.138882][ T302] cgroup: Unknown subsys name 'rlimit' [ 69.277471][ T28] audit: type=1400 audit(1781521927.296:69): avc: denied { setattr } for pid=302 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 69.300657][ T28] audit: type=1400 audit(1781521927.296:70): avc: denied { create } for pid=302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 69.321207][ T28] audit: type=1400 audit(1781521927.296:71): avc: denied { write } for pid=302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 69.330628][ T305] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 69.341621][ T28] audit: type=1400 audit(1781521927.296:72): avc: denied { read } for pid=302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 69.370549][ T28] audit: type=1400 audit(1781521927.296:73): avc: denied { mounton } for pid=302 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 69.397516][ T302] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 70.231948][ T314] request_module fs-gadgetfs succeeded, but still no fs? [ 70.497526][ T327] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.504663][ T327] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.512289][ T327] device bridge_slave_0 entered promiscuous mode [ 70.519240][ T327] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.526353][ T327] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.533948][ T327] device bridge_slave_1 entered promiscuous mode [ 70.836953][ T327] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.844081][ T327] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.851382][ T327] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.858405][ T327] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.904121][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.932203][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.941893][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.965342][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.980205][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.987315][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.002177][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.010651][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.017742][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.039443][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.047824][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.063512][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.074155][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.082402][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.089757][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.097714][ T327] device veth0_vlan entered promiscuous mode [ 71.107716][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready 2026/06/15 11:12:09 executed programs: 0 [ 71.116653][ T327] device veth1_macvtap entered promiscuous mode [ 71.125533][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.135733][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.178006][ T327] syz-executor (327) used greatest stack depth: 21824 bytes left [ 71.303937][ T370] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.310985][ T370] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.318412][ T370] device bridge_slave_0 entered promiscuous mode [ 71.326867][ T370] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.334110][ T370] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.341969][ T370] device bridge_slave_1 entered promiscuous mode [ 71.449314][ T375] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.456487][ T375] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.463934][ T375] device bridge_slave_0 entered promiscuous mode [ 71.471099][ T375] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.478258][ T375] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.486522][ T375] device bridge_slave_1 entered promiscuous mode [ 71.504481][ T373] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.511605][ T373] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.519105][ T373] device bridge_slave_0 entered promiscuous mode [ 71.549710][ T373] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.556936][ T373] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.564381][ T373] device bridge_slave_1 entered promiscuous mode [ 71.593361][ T381] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.600426][ T381] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.608014][ T381] device bridge_slave_0 entered promiscuous mode [ 71.618012][ T381] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.625293][ T381] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.633064][ T381] device bridge_slave_1 entered promiscuous mode [ 71.692772][ T376] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.699828][ T376] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.707733][ T376] device bridge_slave_0 entered promiscuous mode [ 71.717579][ T376] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.724994][ T376] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.732355][ T376] device bridge_slave_1 entered promiscuous mode [ 71.820455][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.827912][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.864049][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.872702][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.880882][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.887930][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.898059][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.952483][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.961061][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.969761][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.976820][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.012206][ T370] device veth0_vlan entered promiscuous mode [ 72.018671][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.027150][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.035567][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.043848][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.051598][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.059526][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.124187][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.145240][ T370] device veth1_macvtap entered promiscuous mode [ 72.161567][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.171952][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.180482][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.187544][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.195049][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.203986][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.211028][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.218542][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.226736][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.235207][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.242254][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.249654][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.257446][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.284493][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.292898][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.302632][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.310946][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.319413][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.327601][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.336242][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.343305][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.350733][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.358407][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.366698][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.373832][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.381211][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.389641][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.396721][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.404246][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.412272][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.420103][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.450443][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.459169][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.469747][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.476834][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.485343][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.493996][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.502675][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.510843][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.519031][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.527311][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.536499][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.545660][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.558973][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.566175][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.585884][ T375] device veth0_vlan entered promiscuous mode [ 72.603716][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.611186][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.619322][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.630512][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.638857][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.647144][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.664283][ T375] device veth1_macvtap entered promiscuous mode [ 72.687223][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.696814][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.706152][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.714448][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.722732][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.731012][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.739616][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.747869][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.757931][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.785274][ T381] device veth0_vlan entered promiscuous mode [ 72.794215][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.804328][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.813900][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.822860][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.831669][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.840603][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.849317][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.857745][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.866963][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.875937][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.889644][ T373] device veth0_vlan entered promiscuous mode [ 72.910096][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.918851][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.931314][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.939786][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.958527][ T381] device veth1_macvtap entered promiscuous mode [ 72.988677][ T373] device veth1_macvtap entered promiscuous mode [ 73.000449][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.010095][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.021134][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.036155][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.045544][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.057196][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.067620][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.076347][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.086105][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.094750][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.107825][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.122789][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.137636][ T376] device veth0_vlan entered promiscuous mode [ 73.165424][ T402] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.183325][ T402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.199973][ T376] device veth1_macvtap entered promiscuous mode [ 73.228622][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.239501][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.248030][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.263316][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.274723][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.283373][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.292231][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.330211][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.350961][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.368271][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.377348][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.388769][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.405893][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.693909][ T43] device bridge_slave_1 left promiscuous mode [ 73.700116][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.714220][ T43] device bridge_slave_0 left promiscuous mode [ 73.741377][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.772864][ T43] device veth1_macvtap left promiscuous mode [ 73.786811][ T43] device veth0_vlan left promiscuous mode 2026/06/15 11:12:14 executed programs: 648 2026/06/15 11:12:19 executed programs: 1799 [ 82.810359][ T6912] ================================================================== [ 82.818477][ T6912] BUG: KASAN: use-after-free in atime_needs_update+0x74b/0x810 [ 82.826054][ T6912] Read of size 4 at addr ffff8881329aed8c by task syz.1.2188/6912 [ 82.833968][ T6912] [ 82.836312][ T6912] CPU: 1 PID: 6912 Comm: syz.1.2188 Not tainted syzkaller #0 [ 82.843706][ T6912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 82.853781][ T6912] Call Trace: [ 82.857092][ T6912] [ 82.860048][ T6912] __dump_stack+0x21/0x24 [ 82.864417][ T6912] dump_stack_lvl+0x110/0x170 [ 82.869130][ T6912] ? __cfi_dump_stack_lvl+0x8/0x8 [ 82.874195][ T6912] ? __cfi__printk+0x8/0x8 [ 82.878644][ T6912] ? preempt_schedule_irq+0xca/0x120 [ 82.883972][ T6912] ? atime_needs_update+0x74b/0x810 [ 82.889205][ T6912] print_address_description+0x71/0x200 [ 82.894785][ T6912] print_report+0x4a/0x60 [ 82.899150][ T6912] kasan_report+0x122/0x150 [ 82.903691][ T6912] ? atime_needs_update+0x74b/0x810 [ 82.908926][ T6912] __asan_report_load4_noabort+0x14/0x20 [ 82.914592][ T6912] atime_needs_update+0x74b/0x810 [ 82.919661][ T6912] ? memcpy+0x56/0x70 [ 82.923681][ T6912] pick_link+0x496/0xe30 [ 82.927962][ T6912] step_into+0xc27/0xf00 [ 82.932253][ T6912] ? __d_lookup_rcu+0x37b/0x400 [ 82.937140][ T6912] ? set_root+0x400/0x400 [ 82.941498][ T6912] ? lookup_fast+0x15f/0x520 [ 82.946115][ T6912] ? inode_permission+0xef/0x4b0 [ 82.951082][ T6912] link_path_walk+0x744/0xeb0 [ 82.955794][ T6912] ? handle_lookup_down+0x130/0x130 [ 82.961029][ T6912] ? kasan_set_track+0x60/0x70 [ 82.965946][ T6912] __filename_parentat+0x22d/0x650 [ 82.971092][ T6912] ? vfs_path_parent_lookup+0x60/0x60 [ 82.976508][ T6912] ? ____kasan_slab_free+0x13d/0x180 [ 82.981832][ T6912] do_unlinkat+0xeb/0x6c0 [ 82.986202][ T6912] ? __check_object_size+0x45a/0x600 [ 82.991524][ T6912] ? __cfi_do_unlinkat+0x10/0x10 [ 82.996498][ T6912] __x64_sys_unlinkat+0xd8/0xf0 [ 83.001385][ T6912] x64_sys_call+0x79f/0x9a0 [ 83.005921][ T6912] do_syscall_64+0x4c/0xa0 [ 83.010370][ T6912] ? clear_bhb_loop+0x30/0x80 [ 83.015070][ T6912] ? clear_bhb_loop+0x30/0x80 [ 83.019778][ T6912] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 83.025707][ T6912] RIP: 0033:0x7f3c8ef9ce59 [ 83.030149][ T6912] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 83.049780][ T6912] RSP: 002b:00007f3c8ff07028 EFLAGS: 00000246 ORIG_RAX: 0000000000000107 [ 83.058234][ T6912] RAX: ffffffffffffffda RBX: 00007f3c8f215fa0 RCX: 00007f3c8ef9ce59 [ 83.066240][ T6912] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004 [ 83.074241][ T6912] RBP: 00007f3c8f032d6f R08: 0000000000000000 R09: 0000000000000000 [ 83.082245][ T6912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 83.090250][ T6912] R13: 00007f3c8f216038 R14: 00007f3c8f215fa0 R15: 00007fffc5e4b388 [ 83.098260][ T6912] [ 83.101305][ T6912] [ 83.103648][ T6912] Allocated by task 6912: [ 83.107992][ T6912] kasan_set_track+0x4b/0x70 [ 83.112616][ T6912] kasan_save_alloc_info+0x1f/0x30 [ 83.117752][ T6912] __kasan_slab_alloc+0x72/0x80 [ 83.122639][ T6912] slab_post_alloc_hook+0x4f/0x2d0 [ 83.127784][ T6912] kmem_cache_alloc_lru+0x104/0x280 [ 83.133017][ T6912] new_inode_pseudo+0x8f/0x1f0 [ 83.137811][ T6912] new_inode+0x28/0x1e0 [ 83.142005][ T6912] bpf_symlink+0x65/0x270 [ 83.146362][ T6912] vfs_symlink+0x261/0x3f0 [ 83.150809][ T6912] do_symlinkat+0x24a/0x5d0 [ 83.155341][ T6912] __x64_sys_symlinkat+0x99/0xb0 [ 83.160307][ T6912] x64_sys_call+0x282/0x9a0 [ 83.164835][ T6912] do_syscall_64+0x4c/0xa0 [ 83.169282][ T6912] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 83.175210][ T6912] [ 83.177558][ T6912] Freed by task 6919: [ 83.181560][ T6912] kasan_set_track+0x4b/0x70 [ 83.186185][ T6912] kasan_save_free_info+0x2b/0x40 [ 83.191228][ T6912] ____kasan_slab_free+0x132/0x180 [ 83.196368][ T6912] __kasan_slab_free+0x11/0x20 [ 83.201158][ T6912] slab_free_freelist_hook+0xc2/0x190 [ 83.206554][ T6912] kmem_cache_free+0x12d/0x300 [ 83.211362][ T6912] free_inode_nonrcu+0x1c/0x20 [ 83.216152][ T6912] bpf_destroy_inode+0x14a/0x170 [ 83.221127][ T6912] evict+0x7ac/0x8c0 [ 83.225062][ T6912] iput+0x633/0x690 [ 83.228904][ T6912] do_unlinkat+0x380/0x6c0 [ 83.233350][ T6912] __x64_sys_unlinkat+0xd8/0xf0 [ 83.238233][ T6912] x64_sys_call+0x79f/0x9a0 [ 83.242790][ T6912] do_syscall_64+0x4c/0xa0 [ 83.247238][ T6912] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 83.253165][ T6912] [ 83.255501][ T6912] The buggy address belongs to the object at ffff8881329aed80 [ 83.255501][ T6912] which belongs to the cache inode_cache of size 704 [ 83.269580][ T6912] The buggy address is located 12 bytes inside of [ 83.269580][ T6912] 704-byte region [ffff8881329aed80, ffff8881329af040) [ 83.282797][ T6912] [ 83.285136][ T6912] The buggy address belongs to the physical page: [ 83.291556][ T6912] page:ffffea0004ca6b00 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff8881329ae700 pfn:0x1329ac [ 83.303131][ T6912] head:ffffea0004ca6b00 order:2 compound_mapcount:0 compound_pincount:0 [ 83.311474][ T6912] flags: 0x4000000000010200(slab|head|zone=1) [ 83.317541][ T6912] raw: 4000000000010200 ffffea0004ca1d00 dead000000000002 ffff8881001ed200 [ 83.326121][ T6912] raw: ffff8881329ae700 000000008013000f 00000001ffffffff 0000000000000000 [ 83.334700][ T6912] page dumped because: kasan: bad access detected [ 83.341103][ T6912] page_owner tracks the page as allocated [ 83.346822][ T6912] page last allocated via order 2, migratetype Reclaimable, gfp_mask 0x1d20d0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL|__GFP_RECLAIMABLE), pid 885, tgid 883 (syz.6.179), ts 73986658359, free_ts 0 [ 83.370020][ T6912] post_alloc_hook+0x1f5/0x210 [ 83.375101][ T6912] prep_new_page+0x1c/0x110 [ 83.379626][ T6912] get_page_from_freelist+0x2ca9/0x2d20 [ 83.385195][ T6912] __alloc_pages+0x1fa/0x610 [ 83.389792][ T6912] alloc_slab_page+0x6e/0xf0 [ 83.394381][ T6912] new_slab+0x98/0x3e0 [ 83.398446][ T6912] ___slab_alloc+0x70f/0xb70 [ 83.403038][ T6912] __slab_alloc+0x5e/0xa0 [ 83.407371][ T6912] kmem_cache_alloc_lru+0x144/0x280 [ 83.412663][ T6912] new_inode_pseudo+0x8f/0x1f0 [ 83.417462][ T6912] new_inode+0x28/0x1e0 [ 83.421622][ T6912] simple_fill_super+0xd1/0x5c0 [ 83.426479][ T6912] bpf_fill_super+0xb0/0x700 [ 83.431069][ T6912] get_tree_nodev+0xc4/0x170 [ 83.435680][ T6912] bpf_get_tree+0x1c/0x20 [ 83.440030][ T6912] vfs_get_tree+0x9a/0x270 [ 83.444441][ T6912] page_owner free stack trace missing [ 83.449801][ T6912] [ 83.452119][ T6912] Memory state around the buggy address: [ 83.457740][ T6912] ffff8881329aec80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 83.465807][ T6912] ffff8881329aed00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 83.473915][ T6912] >ffff8881329aed80: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 83.481972][ T6912] ^ [ 83.486311][ T6912] ffff8881329aee00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 83.494482][ T6912] ffff8881329aee80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 83.502543][ T6912] ================================================================== [ 83.515988][ T28] kauditd_printk_skb: 32 callbacks suppressed [ 83.516003][ T28] audit: type=1400 audit(1781521941.536:106): avc: denied { read } for pid=85 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 83.527267][ T6912] Disabling lock debugging due to kernel taint [ 83.554780][ T28] audit: type=1400 audit(1781521941.536:107): avc: denied { search } for pid=85 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 83.581934][ T28] audit: type=1400 audit(1781521941.536:108): avc: denied { write } for pid=85 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 83.614722][ T28] audit: type=1400 audit(1781521941.536:109): avc: denied { add_name } for pid=85 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 83.661908][ T28] audit: type=1400 audit(1781521941.536:110): avc: denied { create } for pid=85 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 83.686387][ T28] audit: type=1400 audit(1781521941.536:111): avc: denied { append open } for pid=85 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 83.733135][ T28] audit: type=1400 audit(1781521941.536:112): avc: denied { getattr } for pid=85 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 2026/06/15 11:12:24 executed programs: 2569 [ 88.637716][ T9120] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.653641][ T9120] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.668888][ T9120] device bridge_slave_0 entered promiscuous mode [ 88.685704][ T9120] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.708196][ T9120] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.716259][ T9120] device bridge_slave_1 entered promiscuous mode [ 89.052948][ T43] device bridge_slave_1 left promiscuous mode [ 89.066293][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.099872][ T43] device bridge_slave_0 left promiscuous mode [ 89.129253][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.165468][ T43] device veth1_macvtap left promiscuous mode [ 89.186395][ T43] device veth0_vlan left promiscuous mode [ 89.527230][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 89.551043][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 89.590072][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 89.628128][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 89.677769][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.684888][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.727922][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 89.756055][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 89.777791][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.784911][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.797465][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 89.806391][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 89.823864][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 89.841147][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 89.852542][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 89.879548][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 89.903080][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 89.978892][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 90.002599][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 90.037440][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 90.060187][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 90.085344][ T9120] device veth0_vlan entered promiscuous mode [ 90.127165][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 90.144022][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 90.171956][ T9120] device veth1_macvtap entered promiscuous mode [ 90.203398][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 90.214766][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 90.274213][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 90.324655][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 90.349541][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 90.581656][T10017] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.603910][T10017] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.611540][T10017] device bridge_slave_0 entered promiscuous mode [ 90.618913][T10017] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.626042][T10017] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.648461][T10017] device bridge_slave_1 entered promiscuous mode [ 90.845273][T10017] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.852398][T10017] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.859692][T10017] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.867216][T10017] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.951056][ T8] device bridge_slave_1 left promiscuous mode [ 90.960745][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.993555][ T8] device bridge_slave_0 left promiscuous mode [ 91.013274][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.045393][ T8] device veth1_macvtap left promiscuous mode [ 91.064603][ T8] device veth0_vlan left promiscuous mode 2026/06/15 11:12:29 executed programs: 3340 [ 91.292316][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 91.317361][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.345389][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.375391][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 91.384595][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.391706][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.434132][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 91.454605][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.461734][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.481551][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 91.498013][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 91.524116][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 91.560923][T10017] device veth0_vlan entered promiscuous mode [ 91.571929][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 91.589752][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 91.603691][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 91.644759][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 91.680234][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 91.698917][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 91.727550][T10017] device veth1_macvtap entered promiscuous mode [ 91.768717][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 91.790747][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 91.816792][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 91.855372][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 91.893597][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 92.132862][T10720] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.139940][T10720] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.152405][T10720] device bridge_slave_0 entered promiscuous mode [ 92.190669][T10720] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.208429][T10720] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.237676][T10720] device bridge_slave_1 entered promiscuous mode [ 92.516534][T10720] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.523650][T10720] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.531003][T10720] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.538089][T10720] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.576922][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.589042][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.681963][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 92.696485][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 92.731378][ T402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 92.747205][ T402] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 92.773823][ T402] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.780903][ T402] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.794490][ T402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 92.805715][ T402] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready