Warning: Permanently added '10.128.0.146' (ED25519) to the list of known hosts.
2026/07/29 11:31:46 parsed 1 programs
2026/07/29 11:31:46 serving rpc on tcp://40083
[ 24.196970][ T36] audit: type=1400 audit(1785324706.160:64): avc: denied { node_bind } for pid=303 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[ 25.732203][ T36] audit: type=1400 audit(1785324707.700:65): avc: denied { mounton } for pid=309 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2024 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[ 25.735494][ T309] cgroup: Unknown subsys name 'net'
[ 25.754884][ T36] audit: type=1400 audit(1785324707.700:66): avc: denied { mount } for pid=309 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[ 25.782248][ T36] audit: type=1400 audit(1785324707.730:67): avc: denied { unmount } for pid=309 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[ 25.782824][ T309] cgroup: Unknown subsys name 'devices'
[ 25.890603][ T309] cgroup: Unknown subsys name 'hugetlb'
[ 25.896268][ T309] cgroup: Unknown subsys name 'rlimit'
[ 26.019763][ T36] audit: type=1400 audit(1785324707.990:68): avc: denied { setattr } for pid=309 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 26.042966][ T36] audit: type=1400 audit(1785324707.990:69): avc: denied { create } for pid=309 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 26.063411][ T36] audit: type=1400 audit(1785324707.990:70): avc: denied { write } for pid=309 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 26.083731][ T36] audit: type=1400 audit(1785324707.990:71): avc: denied { read } for pid=309 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
Setting up swapspace version 1, size = 127995904 bytes
[ 26.104020][ T36] audit: type=1400 audit(1785324707.990:72): avc: denied { sys_module } for pid=309 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[ 26.125043][ T36] audit: type=1400 audit(1785324707.990:73): avc: denied { mounton } for pid=309 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[ 26.131368][ T314] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped).
[ 26.180915][ T309] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 27.193829][ T319] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[ 27.250853][ T320] bridge0: port 1(bridge_slave_0) entered blocking state
[ 27.276975][ T320] bridge0: port 1(bridge_slave_0) entered disabled state
[ 27.284433][ T320] bridge_slave_0: entered allmulticast mode
[ 27.294395][ T320] bridge_slave_0: entered promiscuous mode
[ 27.301720][ T320] bridge0: port 2(bridge_slave_1) entered blocking state
[ 27.308985][ T320] bridge0: port 2(bridge_slave_1) entered disabled state
[ 27.316139][ T320] bridge_slave_1: entered allmulticast mode
[ 27.322998][ T320] bridge_slave_1: entered promiscuous mode
[ 27.554126][ T320] bridge0: port 2(bridge_slave_1) entered blocking state
[ 27.561265][ T320] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 27.570012][ T320] bridge0: port 1(bridge_slave_0) entered blocking state
[ 27.578901][ T320] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 27.811460][ T53] bridge0: port 1(bridge_slave_0) entered disabled state
[ 27.834235][ T53] bridge0: port 2(bridge_slave_1) entered disabled state
[ 27.856081][ T357] bridge0: port 1(bridge_slave_0) entered blocking state
[ 27.863198][ T357] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 27.939102][ T53] bridge0: port 2(bridge_slave_1) entered blocking state
[ 27.948669][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 28.070950][ T320] veth0_vlan: entered promiscuous mode
[ 28.117681][ T320] veth1_macvtap: entered promiscuous mode
2026/07/29 11:31:50 executed programs: 0
[ 28.436873][ T380] bridge0: port 1(bridge_slave_0) entered blocking state
[ 28.444090][ T380] bridge0: port 1(bridge_slave_0) entered disabled state
[ 28.451305][ T380] bridge_slave_0: entered allmulticast mode
[ 28.457615][ T380] bridge_slave_0: entered promiscuous mode
[ 28.465510][ T380] bridge0: port 2(bridge_slave_1) entered blocking state
[ 28.472703][ T380] bridge0: port 2(bridge_slave_1) entered disabled state
[ 28.479912][ T380] bridge_slave_1: entered allmulticast mode
[ 28.486170][ T380] bridge_slave_1: entered promiscuous mode
[ 28.556321][ T383] bridge0: port 1(bridge_slave_0) entered blocking state
[ 28.563547][ T383] bridge0: port 1(bridge_slave_0) entered disabled state
[ 28.570832][ T383] bridge_slave_0: entered allmulticast mode
[ 28.577128][ T383] bridge_slave_0: entered promiscuous mode
[ 28.585224][ T383] bridge0: port 2(bridge_slave_1) entered blocking state
[ 28.592456][ T383] bridge0: port 2(bridge_slave_1) entered disabled state
[ 28.599674][ T383] bridge_slave_1: entered allmulticast mode
[ 28.605938][ T383] bridge_slave_1: entered promiscuous mode
[ 28.612261][ T45] bridge_slave_1: left allmulticast mode
[ 28.617926][ T45] bridge_slave_1: left promiscuous mode
[ 28.624022][ T45] bridge0: port 2(bridge_slave_1) entered disabled state
[ 28.631720][ T45] bridge_slave_0: left allmulticast mode
[ 28.637372][ T45] bridge_slave_0: left promiscuous mode
[ 28.643186][ T45] bridge0: port 1(bridge_slave_0) entered disabled state
[ 28.705554][ T385] bridge0: port 1(bridge_slave_0) entered blocking state
[ 28.712815][ T385] bridge0: port 1(bridge_slave_0) entered disabled state
[ 28.719967][ T385] bridge_slave_0: entered allmulticast mode
[ 28.726255][ T385] bridge_slave_0: entered promiscuous mode
[ 28.735503][ T385] bridge0: port 2(bridge_slave_1) entered blocking state
[ 28.742660][ T385] bridge0: port 2(bridge_slave_1) entered disabled state
[ 28.749864][ T385] bridge_slave_1: entered allmulticast mode
[ 28.756268][ T385] bridge_slave_1: entered promiscuous mode
[ 28.781403][ T45] veth1_macvtap: left promiscuous mode
[ 28.786971][ T45] veth0_vlan: left promiscuous mode
[ 28.899990][ T386] bridge0: port 1(bridge_slave_0) entered blocking state
[ 28.907093][ T386] bridge0: port 1(bridge_slave_0) entered disabled state
[ 28.914366][ T386] bridge_slave_0: entered allmulticast mode
[ 28.920710][ T386] bridge_slave_0: entered promiscuous mode
[ 28.927460][ T386] bridge0: port 2(bridge_slave_1) entered blocking state
[ 28.934570][ T386] bridge0: port 2(bridge_slave_1) entered disabled state
[ 28.941726][ T386] bridge_slave_1: entered allmulticast mode
[ 28.948156][ T386] bridge_slave_1: entered promiscuous mode
[ 29.015896][ T380] bridge0: port 2(bridge_slave_1) entered blocking state
[ 29.023005][ T380] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 29.030340][ T380] bridge0: port 1(bridge_slave_0) entered blocking state
[ 29.037379][ T380] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 29.072124][ T385] bridge0: port 2(bridge_slave_1) entered blocking state
[ 29.079485][ T385] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 29.086771][ T385] bridge0: port 1(bridge_slave_0) entered blocking state
[ 29.093835][ T385] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 29.102622][ T383] bridge0: port 2(bridge_slave_1) entered blocking state
[ 29.109697][ T383] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 29.117065][ T383] bridge0: port 1(bridge_slave_0) entered blocking state
[ 29.124190][ T383] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 29.172676][ T386] bridge0: port 2(bridge_slave_1) entered blocking state
[ 29.179786][ T386] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 29.187182][ T386] bridge0: port 1(bridge_slave_0) entered blocking state
[ 29.194709][ T386] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 29.208620][ T45] bridge0: port 1(bridge_slave_0) entered disabled state
[ 29.215984][ T45] bridge0: port 2(bridge_slave_1) entered disabled state
[ 29.224137][ T45] bridge0: port 1(bridge_slave_0) entered disabled state
[ 29.231878][ T45] bridge0: port 2(bridge_slave_1) entered disabled state
[ 29.239242][ T45] bridge0: port 2(bridge_slave_1) entered disabled state
[ 29.247089][ T45] bridge0: port 1(bridge_slave_0) entered disabled state
[ 29.254716][ T45] bridge0: port 2(bridge_slave_1) entered disabled state
[ 29.289291][ T45] bridge0: port 2(bridge_slave_1) entered blocking state
[ 29.296382][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 29.304906][ T45] bridge0: port 1(bridge_slave_0) entered blocking state
[ 29.312004][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 29.320447][ T45] bridge0: port 2(bridge_slave_1) entered blocking state
[ 29.327486][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 29.336310][ T45] bridge0: port 1(bridge_slave_0) entered blocking state
[ 29.343402][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 29.351662][ T45] bridge0: port 2(bridge_slave_1) entered blocking state
[ 29.358728][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 29.381986][ T53] bridge0: port 1(bridge_slave_0) entered blocking state
[ 29.389098][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 29.403922][ T53] bridge0: port 2(bridge_slave_1) entered blocking state
[ 29.411031][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 29.440978][ T386] veth0_vlan: entered promiscuous mode
[ 29.451544][ T383] veth0_vlan: entered promiscuous mode
[ 29.462312][ T380] veth0_vlan: entered promiscuous mode
[ 29.474610][ T386] veth1_macvtap: entered promiscuous mode
[ 29.491939][ T385] veth0_vlan: entered promiscuous mode
[ 29.505995][ T380] veth1_macvtap: entered promiscuous mode
[ 29.527600][ T383] veth1_macvtap: entered promiscuous mode
[ 29.545274][ T385] veth1_macvtap: entered promiscuous mode
[ 29.563690][ T36] kauditd_printk_skb: 31 callbacks suppressed
[ 29.563708][ T36] audit: type=1400 audit(1785324711.530:105): avc: denied { mount } for pid=400 comm="syz.5.20" name="/" dev="configfs" ino=1185 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1
[ 29.607249][ T36] audit: type=1400 audit(1785324711.570:106): avc: denied { search } for pid=400 comm="syz.5.20" name="/" dev="configfs" ino=1185 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[ 29.632221][ T36] audit: type=1400 audit(1785324711.570:107): avc: denied { write } for pid=400 comm="syz.5.20" name="usb_gadget" dev="configfs" ino=1186 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[ 29.669572][ T36] audit: type=1400 audit(1785324711.570:108): avc: denied { add_name } for pid=400 comm="syz.5.20" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[ 29.700763][ T36] audit: type=1400 audit(1785324711.570:109): avc: denied { create } for pid=400 comm="syz.5.20" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1
[ 29.744420][ T36] audit: type=1400 audit(1785324711.570:110): avc: denied { create } for pid=400 comm="syz.5.20" name="uac2.usb0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=lnk_file permissive=1
[ 29.787842][ T36] audit: type=1400 audit(1785324711.570:111): avc: denied { remove_name } for pid=400 comm="syz.5.20" name="uac2.usb0" dev="configfs" ino=3990 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[ 29.830981][ T36] audit: type=1400 audit(1785324711.570:112): avc: denied { unlink } for pid=400 comm="syz.5.20" name="uac2.usb0" dev="configfs" ino=3990 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=lnk_file permissive=1
[ 29.895555][ T36] audit: type=1400 audit(1785324711.570:113): avc: denied { rmdir } for pid=400 comm="syz.5.20" name="uac2.usb0" dev="configfs" ino=3989 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[ 29.918382][ T36] audit: type=1400 audit(1785324711.570:114): avc: denied { unmount } for pid=386 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1
2026/07/29 11:31:55 executed programs: 633
2026/07/29 11:32:00 executed programs: 1584
[ 42.173968][ T357] bridge_slave_1: left allmulticast mode
[ 42.184064][ T357] bridge_slave_1: left promiscuous mode
[ 42.192988][ T357] bridge0: port 2(bridge_slave_1) entered disabled state
[ 42.205441][ T357] bridge_slave_0: left allmulticast mode
[ 42.213957][ T357] bridge_slave_0: left promiscuous mode
[ 42.227004][ T357] bridge0: port 1(bridge_slave_0) entered disabled state
[ 42.357789][ T2740] bridge0: port 1(bridge_slave_0) entered blocking state
[ 42.370076][ T2740] bridge0: port 1(bridge_slave_0) entered disabled state
[ 42.377352][ T2740] bridge_slave_0: entered allmulticast mode
[ 42.386022][ T2740] bridge_slave_0: entered promiscuous mode
[ 42.393362][ T2740] bridge0: port 2(bridge_slave_1) entered blocking state
[ 42.403952][ T2740] bridge0: port 2(bridge_slave_1) entered disabled state
[ 42.416475][ T2740] bridge_slave_1: entered allmulticast mode
[ 42.424447][ T2740] bridge_slave_1: entered promiscuous mode
[ 42.431531][ T357] veth1_macvtap: left promiscuous mode
[ 42.437691][ T357] veth0_vlan: left promiscuous mode
[ 42.704545][ T2740] bridge0: port 2(bridge_slave_1) entered blocking state
[ 42.711780][ T2740] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 42.719142][ T2740] bridge0: port 1(bridge_slave_0) entered blocking state
[ 42.726206][ T2740] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 42.800484][ T374] bridge0: port 1(bridge_slave_0) entered disabled state
[ 42.807906][ T374] bridge0: port 2(bridge_slave_1) entered disabled state
[ 42.834642][ T45] bridge0: port 1(bridge_slave_0) entered blocking state
[ 42.841765][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 42.865325][ T45] bridge0: port 2(bridge_slave_1) entered blocking state
[ 42.872540][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 42.928216][ T2740] veth0_vlan: entered promiscuous mode
[ 42.947400][ T2740] veth1_macvtap: entered promiscuous mode
[ 43.113137][ T357] bridge_slave_1: left allmulticast mode
[ 43.121488][ T357] bridge_slave_1: left promiscuous mode
[ 43.129788][ T357] bridge0: port 2(bridge_slave_1) entered disabled state
[ 43.148220][ T357] bridge_slave_0: left allmulticast mode
[ 43.155453][ T357] bridge_slave_0: left promiscuous mode
[ 43.161502][ T357] bridge0: port 1(bridge_slave_0) entered disabled state
[ 43.284261][ T2877] bridge0: port 1(bridge_slave_0) entered blocking state
[ 43.291542][ T2877] bridge0: port 1(bridge_slave_0) entered disabled state
[ 43.311650][ T2877] bridge_slave_0: entered allmulticast mode
[ 43.328808][ T2877] bridge_slave_0: entered promiscuous mode
[ 43.339932][ T357] veth1_macvtap: left promiscuous mode
[ 43.345809][ T357] veth0_vlan: left promiscuous mode
2026/07/29 11:32:05 executed programs: 2522
[ 43.499748][ T2877] bridge0: port 2(bridge_slave_1) entered blocking state
[ 43.506879][ T2877] bridge0: port 2(bridge_slave_1) entered disabled state
[ 43.514244][ T2877] bridge_slave_1: entered allmulticast mode
[ 43.526683][ T2877] bridge_slave_1: entered promiscuous mode
[ 43.659201][ T2877] bridge0: port 2(bridge_slave_1) entered blocking state
[ 43.666312][ T2877] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 43.673742][ T2877] bridge0: port 1(bridge_slave_0) entered blocking state
[ 43.680834][ T2877] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 43.750282][ T53] bridge0: port 1(bridge_slave_0) entered disabled state
[ 43.763956][ T53] bridge0: port 2(bridge_slave_1) entered disabled state
[ 43.790308][ T12] bridge0: port 1(bridge_slave_0) entered blocking state
[ 43.797410][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 43.818007][ T12] bridge0: port 2(bridge_slave_1) entered blocking state
[ 43.825141][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 43.878005][ T2877] veth0_vlan: entered promiscuous mode
[ 43.910247][ T2877] veth1_macvtap: entered promiscuous mode
[ 44.064020][ T374] bridge_slave_1: left allmulticast mode
[ 44.069822][ T374] bridge_slave_1: left promiscuous mode
[ 44.075736][ T374] bridge0: port 2(bridge_slave_1) entered disabled state
[ 44.083513][ T374] bridge_slave_0: left allmulticast mode
[ 44.095230][ T374] bridge_slave_0: left promiscuous mode
[ 44.101589][ T374] bridge0: port 1(bridge_slave_0) entered disabled state
[ 44.176874][ T3020] bridge0: port 1(bridge_slave_0) entered blocking state
[ 44.184062][ T3020] bridge0: port 1(bridge_slave_0) entered disabled state
[ 44.191433][ T3020] bridge_slave_0: entered allmulticast mode
[ 44.197979][ T3020] bridge_slave_0: entered promiscuous mode
[ 44.212501][ T3020] bridge0: port 2(bridge_slave_1) entered blocking state
[ 44.219880][ T3020] bridge0: port 2(bridge_slave_1) entered disabled state
[ 44.228452][ T3020] bridge_slave_1: entered allmulticast mode
[ 44.248831][ T3020] bridge_slave_1: entered promiscuous mode
[ 44.263522][ T374] veth1_macvtap: left promiscuous mode
[ 44.272478][ T374] veth0_vlan: left promiscuous mode
[ 44.471827][ T12] bridge0: port 1(bridge_slave_0) entered blocking state
[ 44.479063][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 44.501095][ T12] bridge0: port 2(bridge_slave_1) entered blocking state
[ 44.508208][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 44.547621][ T3020] veth0_vlan: entered promiscuous mode
[ 44.566310][ T3020] veth1_macvtap: entered promiscuous mode
[ 44.761095][ T374] bridge_slave_1: left allmulticast mode
[ 44.766846][ T374] bridge_slave_1: left promiscuous mode
[ 44.774086][ T374] bridge0: port 2(bridge_slave_1) entered disabled state
[ 44.785115][ T374] bridge_slave_0: left allmulticast mode
[ 44.792957][ T374] bridge_slave_0: left promiscuous mode
[ 44.798895][ T374] bridge0: port 1(bridge_slave_0) entered disabled state
[ 44.933541][ T3125] bridge0: port 1(bridge_slave_0) entered blocking state
[ 44.955430][ T3125] bridge0: port 1(bridge_slave_0) entered disabled state
[ 44.968081][ T3125] bridge_slave_0: entered allmulticast mode
[ 44.974689][ T3125] bridge_slave_0: entered promiscuous mode
[ 44.989757][ T374] veth1_macvtap: left promiscuous mode
[ 44.998148][ T374] veth0_vlan: left promiscuous mode
[ 45.161966][ T3125] bridge0: port 2(bridge_slave_1) entered blocking state
[ 45.185618][ T3125] bridge0: port 2(bridge_slave_1) entered disabled state
[ 45.206064][ T3125] bridge_slave_1: entered allmulticast mode
[ 45.223519][ T3125] bridge_slave_1: entered promiscuous mode
[ 45.364874][ T3125] bridge0: port 2(bridge_slave_1) entered blocking state
[ 45.372003][ T3125] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 45.379378][ T3125] bridge0: port 1(bridge_slave_0) entered blocking state
[ 45.386467][ T3125] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 45.433305][ T53] bridge0: port 1(bridge_slave_0) entered disabled state
[ 45.441188][ T53] bridge0: port 2(bridge_slave_1) entered disabled state
[ 45.495075][ T374] bridge0: port 1(bridge_slave_0) entered blocking state
[ 45.502194][ T374] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 45.513145][ T374] bridge0: port 2(bridge_slave_1) entered blocking state
[ 45.520287][ T374] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 45.568110][ T3125] veth0_vlan: entered promiscuous mode
[ 45.597555][ T3125] veth1_macvtap: entered promiscuous mode
2026/07/29 11:32:10 executed programs: 3432
2026/07/29 11:32:15 executed programs: 4492
[ 54.593789][ T5131] bridge0: port 1(bridge_slave_0) entered blocking state
[ 54.603296][ T5131] bridge0: port 1(bridge_slave_0) entered disabled state
[ 54.617132][ T5131] bridge_slave_0: entered allmulticast mode
[ 54.629312][ T5131] bridge_slave_0: entered promiscuous mode
[ 54.643907][ T5131] bridge0: port 2(bridge_slave_1) entered blocking state
[ 54.651040][ T5131] bridge0: port 2(bridge_slave_1) entered disabled state
[ 54.658550][ T5131] bridge_slave_1: entered allmulticast mode
[ 54.665114][ T5131] bridge_slave_1: entered promiscuous mode
[ 54.685467][ T374] bridge_slave_1: left allmulticast mode
[ 54.691323][ T374] bridge_slave_1: left promiscuous mode
[ 54.696997][ T374] bridge0: port 2(bridge_slave_1) entered disabled state
[ 54.704885][ T374] bridge_slave_0: left allmulticast mode
[ 54.710732][ T374] bridge_slave_0: left promiscuous mode
[ 54.718386][ T374] bridge0: port 1(bridge_slave_0) entered disabled state
[ 54.868323][ T374] veth1_macvtap: left promiscuous mode
[ 54.873963][ T374] veth0_vlan: left promiscuous mode
[ 54.957887][ T5131] bridge0: port 2(bridge_slave_1) entered blocking state
[ 54.964988][ T5131] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 54.972321][ T5131] bridge0: port 1(bridge_slave_0) entered blocking state
[ 54.979407][ T5131] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 55.016939][ T53] bridge0: port 1(bridge_slave_0) entered disabled state
[ 55.036757][ T53] bridge0: port 2(bridge_slave_1) entered disabled state
[ 55.062321][ T53] bridge0: port 1(bridge_slave_0) entered blocking state
[ 55.069435][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 55.077737][ T53] bridge0: port 2(bridge_slave_1) entered blocking state
[ 55.084831][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 55.132088][ T5131] veth0_vlan: entered promiscuous mode
[ 55.151091][ T5131] veth1_macvtap: entered promiscuous mode
[ 55.479626][ T374] bridge_slave_1: left allmulticast mode
[ 55.485337][ T374] bridge_slave_1: left promiscuous mode
[ 55.493385][ T374] bridge0: port 2(bridge_slave_1) entered disabled state
[ 55.501134][ T374] bridge_slave_0: left allmulticast mode
[ 55.506812][ T374] bridge_slave_0: left promiscuous mode
[ 55.512589][ T374] bridge0: port 1(bridge_slave_0) entered disabled state
[ 55.608471][ T5278] bridge0: port 1(bridge_slave_0) entered blocking state
[ 55.616743][ T5278] bridge0: port 1(bridge_slave_0) entered disabled state
[ 55.625909][ T5278] bridge_slave_0: entered allmulticast mode
[ 55.632280][ T5278] bridge_slave_0: entered promiscuous mode
[ 55.644105][ T5278] bridge0: port 2(bridge_slave_1) entered blocking state
[ 55.664732][ T5278] bridge0: port 2(bridge_slave_1) entered disabled state
[ 55.673029][ T5278] bridge_slave_1: entered allmulticast mode
[ 55.679991][ T5278] bridge_slave_1: entered promiscuous mode
[ 55.690240][ T374] veth1_macvtap: left promiscuous mode
[ 55.695856][ T374] veth0_vlan: left promiscuous mode
[ 55.906820][ T53] bridge0: port 1(bridge_slave_0) entered blocking state
[ 55.913940][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 55.923126][ T53] bridge0: port 2(bridge_slave_1) entered blocking state
[ 55.930240][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 55.988555][ T5278] veth0_vlan: entered promiscuous mode
[ 56.006403][ T5278] veth1_macvtap: entered promiscuous mode
[ 56.383031][ T12] bridge_slave_1: left allmulticast mode
[ 56.388901][ T12] bridge_slave_1: left promiscuous mode
[ 56.394524][ T12] bridge0: port 2(bridge_slave_1) entered disabled state
[ 56.402984][ T12] bridge_slave_0: left allmulticast mode
[ 56.410118][ T12] bridge_slave_0: left promiscuous mode
[ 56.415779][ T12] bridge0: port 1(bridge_slave_0) entered disabled state
[ 56.510683][ T5443] bridge0: port 1(bridge_slave_0) entered blocking state
[ 56.517788][ T5443] bridge0: port 1(bridge_slave_0) entered disabled state
[ 56.525394][ T5443] bridge_slave_0: entered allmulticast mode
[ 56.533878][ T5443] bridge_slave_0: entered promiscuous mode
[ 56.543680][ T5443] bridge0: port 2(bridge_slave_1) entered blocking state
[ 56.551632][ T5443] bridge0: port 2(bridge_slave_1) entered disabled state
[ 56.561853][ T5443] bridge_slave_1: entered allmulticast mode
[ 56.569046][ T5443] bridge_slave_1: entered promiscuous mode
[ 56.586273][ T12] veth1_macvtap: left promiscuous mode
[ 56.598079][ T12] veth0_vlan: left promiscuous mode
[ 56.815904][ T53] bridge0: port 1(bridge_slave_0) entered blocking state
[ 56.823010][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 56.833766][ T53] bridge0: port 2(bridge_slave_1) entered blocking state
[ 56.840854][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 56.894587][ T5443] veth0_vlan: entered promiscuous mode
[ 56.914702][ T5443] veth1_macvtap: entered promiscuous mode
[ 57.492741][ T374] bridge_slave_1: left allmulticast mode
[ 57.501629][ T374] bridge_slave_1: left promiscuous mode
[ 57.507897][ T374] bridge0: port 2(bridge_slave_1) entered disabled state
[ 57.518096][ T374] bridge_slave_0: left allmulticast mode
[ 57.530841][ T374] bridge_slave_0: left promiscuous mode
[ 57.536521][ T374] bridge0: port 1(bridge_slave_0) entered disabled state
[ 57.692322][ T374] veth1_macvtap: left promiscuous mode
[ 57.704938][ T374] veth0_vlan: left promiscuous mode
[ 57.806304][ T5655] bridge0: port 1(bridge_slave_0) entered blocking state
[ 57.817553][ T5655] bridge0: port 1(bridge_slave_0) entered disabled state
[ 57.825211][ T5655] bridge_slave_0: entered allmulticast mode
[ 57.838832][ T5655] bridge_slave_0: entered promiscuous mode
[ 57.845508][ T5655] bridge0: port 2(bridge_slave_1) entered blocking state
[ 57.864982][ T5655] bridge0: port 2(bridge_slave_1) entered disabled state
[ 57.878333][ T5655] bridge_slave_1: entered allmulticast mode
[ 57.886594][ T5655] bridge_slave_1: entered promiscuous mode
[ 58.018126][ T12] bridge0: port 1(bridge_slave_0) entered blocking state
[ 58.025253][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 58.045799][ T357] bridge0: port 2(bridge_slave_1) entered blocking state
[ 58.052923][ T357] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 58.097009][ T5655] veth0_vlan: entered promiscuous mode
[ 58.114725][ T5655] veth1_macvtap: entered promiscuous mode
2026/07/29 11:32:20 executed programs: 5407
2026/07/29 11:32:25 executed programs: 6492
[ 66.096478][ T7484] bridge0: port 1(bridge_slave_0) entered blocking state
[ 66.107895][ T7484] bridge0: port 1(bridge_slave_0) entered disabled state
[ 66.120067][ T7484] bridge_slave_0: entered allmulticast mode
[ 66.126491][ T7484] bridge_slave_0: entered promiscuous mode
[ 66.133730][ T7484] bridge0: port 2(bridge_slave_1) entered blocking state
[ 66.143558][ T7484] bridge0: port 2(bridge_slave_1) entered disabled state
[ 66.150987][ T7484] bridge_slave_1: entered allmulticast mode
[ 66.157543][ T7484] bridge_slave_1: entered promiscuous mode
[ 66.167810][ T374] bridge_slave_1: left allmulticast mode
[ 66.175083][ T374] bridge_slave_1: left promiscuous mode
[ 66.182864][ T374] bridge0: port 2(bridge_slave_1) entered disabled state
[ 66.193706][ T374] bridge_slave_0: left allmulticast mode
[ 66.202475][ T374] bridge_slave_0: left promiscuous mode
[ 66.211641][ T374] bridge0: port 1(bridge_slave_0) entered disabled state
[ 66.334622][ T374] veth1_macvtap: left promiscuous mode
[ 66.342622][ T374] veth0_vlan: left promiscuous mode
[ 66.455247][ T7484] bridge0: port 2(bridge_slave_1) entered blocking state
[ 66.462399][ T7484] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 66.469760][ T7484] bridge0: port 1(bridge_slave_0) entered blocking state
[ 66.476818][ T7484] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 66.522608][ T357] bridge0: port 1(bridge_slave_0) entered disabled state
[ 66.532521][ T357] bridge0: port 2(bridge_slave_1) entered disabled state
[ 66.547960][ T12] bridge0: port 1(bridge_slave_0) entered blocking state
[ 66.555101][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 66.572019][ T12] bridge0: port 2(bridge_slave_1) entered blocking state
[ 66.579122][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 66.626517][ T7484] veth0_vlan: entered promiscuous mode
[ 66.646039][ T7484] veth1_macvtap: entered promiscuous mode
[ 67.127333][ T374] bridge_slave_1: left allmulticast mode
[ 67.133129][ T374] bridge_slave_1: left promiscuous mode
[ 67.139773][ T374] bridge0: port 2(bridge_slave_1) entered disabled state
[ 67.153110][ T374] bridge_slave_0: left allmulticast mode
[ 67.160614][ T374] bridge_slave_0: left promiscuous mode
[ 67.169442][ T374] bridge0: port 1(bridge_slave_0) entered disabled state
[ 67.287277][ T7675] bridge0: port 1(bridge_slave_0) entered blocking state
[ 67.294839][ T7675] bridge0: port 1(bridge_slave_0) entered disabled state
[ 67.302279][ T7675] bridge_slave_0: entered allmulticast mode
[ 67.308835][ T7675] bridge_slave_0: entered promiscuous mode
[ 67.319678][ T7675] bridge0: port 2(bridge_slave_1) entered blocking state
[ 67.326806][ T7675] bridge0: port 2(bridge_slave_1) entered disabled state
[ 67.337404][ T7675] bridge_slave_1: entered allmulticast mode
[ 67.345399][ T7675] bridge_slave_1: entered promiscuous mode
[ 67.354673][ T374] veth1_macvtap: left promiscuous mode
[ 67.363475][ T374] veth0_vlan: left promiscuous mode
[ 67.545395][ T7675] bridge0: port 2(bridge_slave_1) entered blocking state
[ 67.552508][ T7675] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 67.559871][ T7675] bridge0: port 1(bridge_slave_0) entered blocking state
[ 67.566913][ T7675] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 67.611042][ T53] bridge0: port 1(bridge_slave_0) entered disabled state
[ 67.618717][ T53] bridge0: port 2(bridge_slave_1) entered disabled state
[ 67.641629][ T53] bridge0: port 1(bridge_slave_0) entered blocking state
[ 67.648736][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 67.662158][ T53] bridge0: port 2(bridge_slave_1) entered blocking state
[ 67.669257][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 67.703232][ T7675] veth0_vlan: entered promiscuous mode
[ 67.725832][ T7675] veth1_macvtap: entered promiscuous mode
[ 67.955731][ T7819] ------------[ cut here ]------------
[ 67.961270][ T7819] refcount_t: addition on 0; use-after-free.
[ 67.967410][ T7819] WARNING: CPU: 1 PID: 7819 at lib/refcount.c:25 refcount_warn_saturate+0xfd/0x1c0
[ 67.976788][ T7819] Modules linked in:
[ 67.980858][ T7819] CPU: 1 UID: 0 PID: 7819 Comm: syz.0.7381 Not tainted syzkaller #0 4e52c0723cb79d31d146da949bb07b469cd0953d
[ 67.992501][ T7819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[ 68.002605][ T7819] RIP: 0010:refcount_warn_saturate+0xfd/0x1c0
[ 68.008718][ T7819] Code: 00 00 00 e8 b5 a4 d8 fe 5b 41 5e 5d e9 cc 41 f7 02 cc e8 a6 a4 d8 fe c6 05 a3 77 36 05 01 48 c7 c7 40 ec 51 86 e8 c3 7c 55 fe <0f> 0b eb da e8 8a a4 d8 fe c6 05 88 77 36 05 01 48 c7 c7 a0 ec 51
[ 68.028390][ T7819] RSP: 0018:ffffc90000fffc38 EFLAGS: 00010246
[ 68.034492][ T7819] RAX: 56cc99a766d4bc00 RBX: 0000000000000002 RCX: ffff88812ef5cc00
[ 68.042493][ T7819] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002
[ 68.050504][ T7819] RBP: ffffc90000fffc48 R08: ffff8881f6f294d3 R09: 1ffff1103ede529a
[ 68.058598][ T7819] R10: dffffc0000000000 R11: ffffed103ede529b R12: ffff888121bd5300
[ 68.066585][ T7819] R13: dffffc0000000000 R14: ffff888114e9401c R15: 0000000000000000
[ 68.074616][ T7819] FS: 0000555594c93500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[ 68.083610][ T7819] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 68.090248][ T7819] CR2: 0000001b2e263fff CR3: 000000010f3b2000 CR4: 00000000003526b0
[ 68.098237][ T7819] Call Trace:
[ 68.101572][ T7819]
[ 68.104511][ T7819] config_item_get+0x95/0xa0
[ 68.109147][ T7819] configfs_symlink+0x455/0x1050
[ 68.114117][ T7819] ? generic_permission+0x1ec/0x590
[ 68.119365][ T7819] ? __cfi_configfs_symlink+0x10/0x10
[ 68.124760][ T7819] ? selinux_inode_symlink+0x26/0x30
[ 68.130067][ T7819] ? bpf_lsm_inode_symlink+0xd/0x20
[ 68.135303][ T7819] ? security_inode_symlink+0x7e/0x170
[ 68.140842][ T7819] vfs_symlink+0x3f7/0x620
[ 68.145312][ T7819] do_symlinkat+0x1ba/0x400
[ 68.149893][ T7819] ? __cfi_do_symlinkat+0x10/0x10
[ 68.154960][ T7819] ? __kasan_check_write+0x18/0x20
[ 68.160099][ T7819] ? getname_flags+0x203/0x6b0
[ 68.164877][ T7819] ? __kasan_check_read+0x15/0x20
[ 68.169964][ T7819] __x64_sys_symlinkat+0x99/0xb0
[ 68.174943][ T7819] x64_sys_call+0x1f79/0x2ee0
[ 68.179745][ T7819] do_syscall_64+0x57/0xf0
[ 68.184194][ T7819] ? clear_bhb_loop+0x50/0xa0
[ 68.188915][ T7819] entry_SYSCALL_64_after_hwframe+0x76/0x7e
[ 68.194826][ T7819] RIP: 0033:0x7f339259de99
[ 68.199271][ T7819] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 68.218917][ T7819] RSP: 002b:00007ffd2a4c0608 EFLAGS: 00000246 ORIG_RAX: 000000000000010a
[ 68.227362][ T7819] RAX: ffffffffffffffda RBX: 00007f3392825fa0 RCX: 00007f339259de99
[ 68.235356][ T7819] RDX: 0000200000000340 RSI: ffffffffffffff9c RDI: 0000200000000300
[ 68.243394][ T7819] RBP: 00007f3392633eaf R08: 0000000000000000 R09: 0000000000000000
[ 68.251407][ T7819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 68.259412][ T7819] R13: 00007f3392825fac R14: 00007f3392825fa0 R15: 00007f3392825fa0
[ 68.267401][ T7819]
[ 68.270525][ T7819] ---[ end trace 0000000000000000 ]---
[ 68.282210][ T7819] ==================================================================
[ 68.290341][ T7819] BUG: KASAN: slab-use-after-free in config_item_put+0x37/0x240
[ 68.298040][ T7819] Write of size 4 at addr ffff888114e9401c by task syz.0.7381/7819
[ 68.305937][ T7819]
[ 68.308290][ T7819] CPU: 1 UID: 0 PID: 7819 Comm: syz.0.7381 Tainted: G W syzkaller #0 4e52c0723cb79d31d146da949bb07b469cd0953d
[ 68.308327][ T7819] Tainted: [W]=WARN
[ 68.308333][ T7819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[ 68.308342][ T7819] Call Trace:
[ 68.308349][ T7819]
[ 68.308356][ T7819] __dump_stack+0x21/0x30
[ 68.308382][ T7819] dump_stack_lvl+0x140/0x1c0
[ 68.308404][ T7819] ? __cfi_dump_stack_lvl+0x10/0x10
[ 68.308432][ T7819] ? __cfi__printk+0x10/0x10
[ 68.308467][ T7819] ? refcount_warn_saturate+0xfd/0x1c0
[ 68.308499][ T7819] print_address_description+0x71/0x210
[ 68.308531][ T7819] print_report+0x4a/0x70
[ 68.308564][ T7819] kasan_report+0x162/0x1a0
[ 68.308585][ T7819] ? config_item_put+0x37/0x240
[ 68.308609][ T7819] ? config_item_put+0x37/0x240
[ 68.308632][ T7819] kasan_check_range+0x25a/0x2b0
[ 68.308653][ T7819] __kasan_check_write+0x18/0x20
[ 68.308669][ T7819] config_item_put+0x37/0x240
[ 68.308692][ T7819] configfs_symlink+0x4b5/0x1050
[ 68.308715][ T7819] ? generic_permission+0x1ec/0x590
[ 68.308734][ T7819] ? __cfi_configfs_symlink+0x10/0x10
[ 68.308757][ T7819] ? selinux_inode_symlink+0x26/0x30
[ 68.308780][ T7819] ? bpf_lsm_inode_symlink+0xd/0x20
[ 68.308798][ T7819] ? security_inode_symlink+0x7e/0x170
[ 68.308820][ T7819] vfs_symlink+0x3f7/0x620
[ 68.308844][ T7819] do_symlinkat+0x1ba/0x400
[ 68.308867][ T7819] ? __cfi_do_symlinkat+0x10/0x10
[ 68.308890][ T7819] ? __kasan_check_write+0x18/0x20
[ 68.308905][ T7819] ? getname_flags+0x203/0x6b0
[ 68.308922][ T7819] ? __kasan_check_read+0x15/0x20
[ 68.308937][ T7819] __x64_sys_symlinkat+0x99/0xb0
[ 68.308961][ T7819] x64_sys_call+0x1f79/0x2ee0
[ 68.308975][ T7819] do_syscall_64+0x57/0xf0
[ 68.308993][ T7819] ? clear_bhb_loop+0x50/0xa0
[ 68.309015][ T7819] entry_SYSCALL_64_after_hwframe+0x76/0x7e
[ 68.309035][ T7819] RIP: 0033:0x7f339259de99
[ 68.309049][ T7819] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 68.309062][ T7819] RSP: 002b:00007ffd2a4c0608 EFLAGS: 00000246 ORIG_RAX: 000000000000010a
[ 68.309079][ T7819] RAX: ffffffffffffffda RBX: 00007f3392825fa0 RCX: 00007f339259de99
[ 68.309091][ T7819] RDX: 0000200000000340 RSI: ffffffffffffff9c RDI: 0000200000000300
[ 68.309103][ T7819] RBP: 00007f3392633eaf R08: 0000000000000000 R09: 0000000000000000
[ 68.309113][ T7819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 68.309122][ T7819] R13: 00007f3392825fac R14: 00007f3392825fa0 R15: 00007f3392825fa0
[ 68.309136][ T7819]
[ 68.309141][ T7819]
[ 68.567270][ T7819] Allocated by task 7819:
[ 68.571592][ T7819] kasan_save_track+0x3e/0x80
[ 68.576277][ T7819] kasan_save_alloc_info+0x3a/0x50
[ 68.581397][ T7819] __kasan_kmalloc+0x96/0xb0
[ 68.585988][ T7819] __kmalloc_cache_noprof+0x23c/0x470
[ 68.591362][ T7819] afunc_alloc_inst+0x5e/0x810
[ 68.596129][ T7819] usb_get_function_instance+0xf7/0x320
[ 68.601680][ T7819] function_make+0x125/0x370
[ 68.606268][ T7819] configfs_mkdir+0x523/0xb70
[ 68.610953][ T7819] vfs_mkdir+0x58e/0x810
[ 68.615209][ T7819] do_mkdirat+0x240/0x530
[ 68.619564][ T7819] __x64_sys_mkdirat+0x8b/0xa0
[ 68.624337][ T7819] x64_sys_call+0x2ba8/0x2ee0
[ 68.629026][ T7819] do_syscall_64+0x57/0xf0
[ 68.633475][ T7819] entry_SYSCALL_64_after_hwframe+0x76/0x7e
[ 68.639374][ T7819]
[ 68.641716][ T7819] Freed by task 7820:
[ 68.645703][ T7819] kasan_save_track+0x3e/0x80
[ 68.650405][ T7819] kasan_save_free_info+0x44/0x50
[ 68.655438][ T7819] __kasan_slab_free+0x5f/0x80
[ 68.660211][ T7819] kfree+0x158/0x440
[ 68.664119][ T7819] afunc_free_inst+0x19/0x30
[ 68.668711][ T7819] usb_put_function_instance+0xa2/0xc0
[ 68.674177][ T7819] f_uac2_attr_release+0x19/0x30
[ 68.679138][ T7819] config_item_put+0x175/0x240
[ 68.683910][ T7819] configfs_rmdir+0x8e8/0x9b0
[ 68.688592][ T7819] vfs_rmdir+0x3db/0x560
[ 68.692841][ T7819] do_rmdir+0x29a/0x590
[ 68.697002][ T7819] __x64_sys_unlinkat+0xc9/0xf0
[ 68.701861][ T7819] x64_sys_call+0x2974/0x2ee0
[ 68.706536][ T7819] do_syscall_64+0x57/0xf0
[ 68.710952][ T7819] entry_SYSCALL_64_after_hwframe+0x76/0x7e
[ 68.716850][ T7819]
[ 68.719211][ T7819] The buggy address belongs to the object at ffff888114e94000
[ 68.719211][ T7819] which belongs to the cache kmalloc-2k of size 2048
[ 68.733279][ T7819] The buggy address is located 28 bytes inside of
[ 68.733279][ T7819] freed 2048-byte region [ffff888114e94000, ffff888114e94800)
[ 68.747078][ T7819]
[ 68.749407][ T7819] The buggy address belongs to the physical page:
[ 68.755841][ T7819] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x114e90
[ 68.764708][ T7819] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 68.773211][ T7819] flags: 0x4000000000000040(head|zone=1)
[ 68.778872][ T7819] page_type: f5(slab)
[ 68.782859][ T7819] raw: 4000000000000040 ffff888100042000 dead000000000100 dead000000000122
[ 68.791442][ T7819] raw: 0000000000000000 0000000000080008 00000001f5000000 0000000000000000
[ 68.800045][ T7819] head: 4000000000000040 ffff888100042000 dead000000000100 dead000000000122
[ 68.808749][ T7819] head: 0000000000000000 0000000000080008 00000001f5000000 0000000000000000
[ 68.817422][ T7819] head: 4000000000000003 ffffea000453a401 ffffffffffffffff 0000000000000000
[ 68.826095][ T7819] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000
[ 68.834760][ T7819] page dumped because: kasan: bad access detected
[ 68.841180][ T7819] page_owner tracks the page as allocated
[ 68.846891][ T7819] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 5278, tgid 5278 (syz-executor), ts 55810717670, free_ts 55808582158
[ 68.869037][ T7819] post_alloc_hook+0x37d/0x3b0
[ 68.873836][ T7819] prep_new_page+0x2d/0x180
[ 68.878353][ T7819] get_page_from_freelist+0x4aea/0x4ba0
[ 68.883929][ T7819] __alloc_pages_noprof+0x35a/0x7e0
[ 68.889158][ T7819] alloc_slab_page+0x6b/0x1e0
[ 68.893842][ T7819] allocate_slab+0x69/0x430
[ 68.898357][ T7819] ___slab_alloc+0x591/0x8c0
[ 68.902984][ T7819] __kmalloc_node_track_caller_noprof+0x2e3/0x4f0
[ 68.909409][ T7819] kmalloc_reserve+0x144/0x4f0
[ 68.914176][ T7819] pskb_expand_head+0x1a9/0x1350
[ 68.919116][ T7819] netlink_trim+0x193/0x230
[ 68.923630][ T7819] netlink_broadcast_filtered+0x7b/0x11d0
[ 68.929358][ T7819] nlmsg_notify+0xed/0x1b0
[ 68.933771][ T7819] rtmsg_ifinfo+0x157/0x1a0
[ 68.938290][ T7819] __dev_notify_flags+0xfd/0x5a0
[ 68.943269][ T7819] rtnl_newlink+0x1a53/0x2220
[ 68.947959][ T7819] page last free pid 3020 tgid 3020 stack trace:
[ 68.954303][ T7819] free_unref_page+0xbb8/0xf70
[ 68.959091][ T7819] __free_pages+0x6b/0x3b0
[ 68.963516][ T7819] __free_slab+0xb2/0x110
[ 68.967860][ T7819] free_slab+0x18/0xe0
[ 68.971928][ T7819] __put_partials+0x115/0x150
[ 68.976646][ T7819] put_cpu_partial+0x91/0xc0
[ 68.981239][ T7819] __slab_free+0x1cf/0x2a0
[ 68.985656][ T7819] ___cache_free+0xc9/0xe0
[ 68.990068][ T7819] qlist_free_all+0xb5/0x130
[ 68.994684][ T7819] kasan_quarantine_reduce+0x14f/0x180
[ 69.000174][ T7819] __kasan_slab_alloc+0x28/0x90
[ 69.005033][ T7819] kmem_cache_alloc_noprof+0x1bf/0x410
[ 69.010515][ T7819] getname_flags+0xcc/0x6b0
[ 69.015021][ T7819] user_path_at+0x2b/0x60
[ 69.019372][ T7819] __x64_sys_umount+0xfa/0x180
[ 69.024135][ T7819] x64_sys_call+0x2ab8/0x2ee0
[ 69.028820][ T7819]
[ 69.031158][ T7819] Memory state around the buggy address:
[ 69.036794][ T7819] ffff888114e93f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 69.044853][ T7819] ffff888114e93f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 69.052910][ T7819] >ffff888114e94000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 69.060961][ T7819] ^
[ 69.065807][ T7819] ffff888114e94080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 69.073864][ T7819] ffff888114e94100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 69.081918][ T7819] ==================================================================
[ 69.096970][ T7819] Disabling lock debugging due to kernel taint
[ 69.103258][ T7819] ------------[ cut here ]------------
[ 69.108818][ T7819] refcount_t: underflow; use-after-free.
[ 69.121461][ T36] audit: type=1400 audit(1785324751.090:115): avc: denied { read } for pid=93 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
[ 69.133892][ T7819] WARNING: CPU: 0 PID: 7819 at lib/refcount.c:28 refcount_warn_saturate+0x119/0x1c0
[ 69.151245][ T36] audit: type=1400 audit(1785324751.090:116): avc: denied { search } for pid=93 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 69.153379][ T7819] Modules linked in:
[ 69.175165][ T36] audit: type=1400 audit(1785324751.090:117): avc: denied { write } for pid=93 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 69.178567][ T7819] CPU: 0 UID: 0 PID: 7819 Comm: syz.0.7381 Tainted: G B W syzkaller #0 4e52c0723cb79d31d146da949bb07b469cd0953d
[ 69.200816][ T36] audit: type=1400 audit(1785324751.090:118): avc: denied { add_name } for pid=93 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 69.212944][ T7819] Tainted: [B]=BAD_PAGE, [W]=WARN
[ 69.234095][ T36] audit: type=1400 audit(1785324751.090:119): avc: denied { create } for pid=93 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[ 69.238574][ T7819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[ 69.259728][ T36] audit: type=1400 audit(1785324751.090:120): avc: denied { append open } for pid=93 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[ 69.269175][ T7819] RIP: 0010:refcount_warn_saturate+0x119/0x1c0
[ 69.269217][ T7819] Code: 05 01 48 c7 c7 40 ec 51 86 e8 c3 7c 55 fe 0f 0b eb da e8 8a a4 d8 fe c6 05 88 77 36 05 01 48 c7 c7 a0 ec 51 86 e8 a7 7c 55 fe <0f> 0b eb be e8 6e a4 d8 fe c6 05 69 77 36 05 01 48 c7 c7 e0 eb 51
[ 69.293481][ T36] audit: type=1400 audit(1785324751.090:121): avc: denied { getattr } for pid=93 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[ 69.298229][ T7819] RSP: 0018:ffffc90000fffc18 EFLAGS: 00010246
[ 69.346424][ T7819] RAX: 56cc99a766d4bc00 RBX: 0000000000000003 RCX: ffff88812ef5cc00
[ 69.354523][ T7819] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002
[ 69.362540][ T7819] RBP: ffffc90000fffc28 R08: 0000000000000003 R09: 0000000000000004
[ 69.370563][ T7819] R10: dffffc0000000000 R11: fffffbfff0e9f34c R12: 00000000ffffffef
[ 69.378603][ T7819] R13: dffffc0000000000 R14: ffff888114e9401c R15: 00000000c0000000
[ 69.386600][ T7819] FS: 0000555594c93500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[ 69.395583][ T7819] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 69.402234][ T7819] CR2: 00007f6860958060 CR3: 000000010f3b2000 CR4: 00000000003526b0
[ 69.410295][ T7819] Call Trace:
[ 69.413600][ T7819]
[ 69.416546][ T7819] config_item_put+0x230/0x240
[ 69.421397][ T7819] configfs_symlink+0x4b5/0x1050
[ 69.426383][ T7819] ? generic_permission+0x1ec/0x590
[ 69.431909][ T7819] ? __cfi_configfs_symlink+0x10/0x10
[ 69.437332][ T7819] ? selinux_inode_symlink+0x26/0x30
[ 69.442765][ T7819] ? bpf_lsm_inode_symlink+0xd/0x20
[ 69.447994][ T7819] ? security_inode_symlink+0x7e/0x170
[ 69.453519][ T7819] vfs_symlink+0x3f7/0x620
[ 69.457991][ T7819] do_symlinkat+0x1ba/0x400
[ 69.462661][ T7819] ? __cfi_do_symlinkat+0x10/0x10
[ 69.467726][ T7819] ? __kasan_check_write+0x18/0x20
[ 69.472908][ T7819] ? getname_flags+0x203/0x6b0
[ 69.477707][ T7819] ? __kasan_check_read+0x15/0x20
[ 69.482815][ T7819] __x64_sys_symlinkat+0x99/0xb0
[ 69.487791][ T7819] x64_sys_call+0x1f79/0x2ee0
[ 69.492542][ T7819] do_syscall_64+0x57/0xf0
[ 69.496985][ T7819] ? clear_bhb_loop+0x50/0xa0
[ 69.501754][ T7819] entry_SYSCALL_64_after_hwframe+0x76/0x7e
[ 69.507710][ T7819] RIP: 0033:0x7f339259de99
[ 69.512170][ T7819] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 69.531873][ T7819] RSP: 002b:00007ffd2a4c0608 EFLAGS: 00000246 ORIG_RAX: 000000000000010a
[ 69.540383][ T7819] RAX: ffffffffffffffda RBX: 00007f3392825fa0 RCX: 00007f339259de99
[ 69.548433][ T7819] RDX: 0000200000000340 RSI: ffffffffffffff9c RDI: 0000200000000300
[ 69.556441][ T7819] RBP: 00007f3392633eaf R08: 0000000000000000 R09: 0000000000000000
[ 69.564468][ T7819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 69.572507][ T7819] R13: 00007f3392825fac R14: 00007f3392825fa0 R15: 00007f3392825fa0
[ 69.580570][ T7819]
[ 69.583605][ T7819] ---[ end trace 0000000000000000 ]---
2026/07/29 11:32:31 executed programs: 7380
[ 69.639157][ T36] audit: type=1400 audit(1785324751.610:122): avc: denied { write } for pid=303 comm="syz-execprog" path="pipe:[3035]" dev="pipefs" ino=3035 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1
[ 70.031402][ T53] bridge_slave_1: left allmulticast mode
[ 70.037118][ T53] bridge_slave_1: left promiscuous mode
[ 70.046165][ T53] bridge0: port 2(bridge_slave_1) entered disabled state
[ 70.054149][ T53] bridge_slave_0: left allmulticast mode
[ 70.059966][ T53] bridge_slave_0: left promiscuous mode
[ 70.065673][ T53] bridge0: port 1(bridge_slave_0) entered disabled state
[ 70.173596][ T7906] bridge0: port 1(bridge_slave_0) entered blocking state
[ 70.180727][ T7906] bridge0: port 1(bridge_slave_0) entered disabled state
[ 70.187848][ T7906] bridge_slave_0: entered allmulticast mode
[ 70.194808][ T7906] bridge_slave_0: entered promiscuous mode
[ 70.207463][ T53] veth1_macvtap: left promiscuous mode
[ 70.219856][ T53] veth0_vlan: left promiscuous mode
[ 70.321235][ T7906] bridge0: port 2(bridge_slave_1) entered blocking state
[ 70.328399][ T7906] bridge0: port 2(bridge_slave_1) entered disabled state
[ 70.346558][ T7906] bridge_slave_1: entered allmulticast mode
[ 70.354450][ T7906] bridge_slave_1: entered promiscuous mode
[ 70.457033][ T7906] bridge0: port 2(bridge_slave_1) entered blocking state
[ 70.464156][ T7906] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 70.471478][ T7906] bridge0: port 1(bridge_slave_0) entered blocking state
[ 70.478549][ T7906] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 70.517644][ T12] bridge0: port 1(bridge_slave_0) entered disabled state
[ 70.527886][ T12] bridge0: port 2(bridge_slave_1) entered disabled state
[ 70.546033][ T12] bridge0: port 1(bridge_slave_0) entered blocking state
[ 70.553182][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 70.568022][ T12] bridge0: port 2(bridge_slave_1) entered blocking state
[ 70.575155][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 70.615657][ T7906] veth0_vlan: entered promiscuous mode
[ 70.639678][ T7906] veth1_macvtap: entered promiscuous mode
[ 71.005229][ T357] bridge_slave_1: left allmulticast mode
[ 71.011111][ T357] bridge_slave_1: left promiscuous mode
[ 71.016772][ T357] bridge0: port 2(bridge_slave_1) entered disabled state
[ 71.025088][ T357] bridge_slave_0: left allmulticast mode
[ 71.033307][ T357] bridge_slave_0: left promiscuous mode
[ 71.038980][ T357] bridge0: port 1(bridge_slave_0) entered disabled state
[ 71.138635][ T8078] bridge0: port 1(bridge_slave_0) entered blocking state
[ 71.145721][ T8078] bridge0: port 1(bridge_slave_0) entered disabled state
[ 71.153015][ T8078] bridge_slave_0: entered allmulticast mode
[ 71.164303][ T8078] bridge_slave_0: entered promiscuous mode
[ 71.171703][ T8078] bridge0: port 2(bridge_slave_1) entered blocking state
[ 71.181843][ T8078] bridge0: port 2(bridge_slave_1) entered disabled state
[ 71.190613][ T8078] bridge_slave_1: entered allmulticast mode
[ 71.197115][ T8078] bridge_slave_1: entered promiscuous mode
[ 71.212936][ T357] veth1_macvtap: left promiscuous mode
[ 71.225071][ T357] veth0_vlan: left promiscuous mode
[ 71.387580][ T8078] bridge0: port 2(bridge_slave_1) entered blocking state
[ 71.394680][ T8078] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 71.402018][ T8078] bridge0: port 1(bridge_slave_0) entered blocking state
[ 71.409089][ T8078] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 71.454357][ T12] bridge0: port 1(bridge_slave_0) entered disabled state
[ 71.462025][ T12] bridge0: port 2(bridge_slave_1) entered disabled state
[ 71.482961][ T12] bridge0: port 1(bridge_slave_0) entered blocking state
[ 71.490055][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 71.503154][ T12] bridge0: port 2(bridge_slave_1) entered blocking state
[ 71.510247][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 71.565760][ T8078] veth0_vlan: entered promiscuous mode
[ 71.587347][ T8078] veth1_macvtap: entered promiscuous mode
2026/07/29 11:32:36 executed programs: 8394