Warning: Permanently added '10.128.1.87' (ED25519) to the list of known hosts. 2026/10/11 00:03:12 parsed 1 programs 2026/10/11 00:03:12 serving rpc on tcp://35161 [ 24.532384][ T24] audit: type=1400 audit(1791676992.410:64): avc: denied { node_bind } for pid=287 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 24.559740][ T24] audit: type=1400 audit(1791676992.410:65): avc: denied { create } for pid=287 comm="syz-execprog" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 24.580353][ T24] audit: type=1400 audit(1791676992.410:66): avc: denied { module_request } for pid=287 comm="syz-execprog" kmod="net-pf-2-proto-262-type-1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 25.530521][ T24] audit: type=1400 audit(1791676993.410:67): avc: denied { mounton } for pid=293 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2024 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 25.533708][ T293] cgroup: Unknown subsys name 'net' [ 25.553298][ T24] audit: type=1400 audit(1791676993.410:68): avc: denied { mount } for pid=293 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 25.580619][ T24] audit: type=1400 audit(1791676993.440:69): avc: denied { unmount } for pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 25.581138][ T293] cgroup: Unknown subsys name 'devices' [ 25.751470][ T293] cgroup: Unknown subsys name 'hugetlb' [ 25.757081][ T293] cgroup: Unknown subsys name 'rlimit' [ 25.905506][ T24] audit: type=1400 audit(1791676993.780:70): avc: denied { setattr } for pid=293 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 25.928779][ T24] audit: type=1400 audit(1791676993.780:71): avc: denied { create } for pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 25.949348][ T24] audit: type=1400 audit(1791676993.780:72): avc: denied { write } for pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.959525][ T298] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 25.970173][ T24] audit: type=1400 audit(1791676993.780:73): avc: denied { read } for pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.012794][ T293] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 26.469139][ T300] request_module fs-gadgetfs succeeded, but still no fs? [ 26.480529][ T300] cgroup: cgroup: disabling cgroup2 socket matching due to net_prio or net_cls activation [ 26.847981][ T335] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.855164][ T335] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.862672][ T335] device bridge_slave_0 entered promiscuous mode [ 26.870402][ T335] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.877435][ T335] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.885010][ T335] device bridge_slave_1 entered promiscuous mode [ 26.925963][ T335] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.933126][ T335] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.940561][ T335] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.947624][ T335] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.966015][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 26.974449][ T112] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.981819][ T112] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.990858][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 26.999035][ T112] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.006141][ T112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.029058][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 27.037575][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 27.046460][ T112] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.053596][ T112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.061332][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 27.069243][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 27.080028][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 27.088095][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 27.095696][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 27.103835][ T335] device veth0_vlan entered promiscuous mode [ 27.113720][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 27.123135][ T335] device veth1_macvtap entered promiscuous mode [ 27.133632][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 27.143812][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 2026/10/11 00:03:15 executed programs: 0 [ 27.627563][ T365] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.634683][ T365] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.642147][ T365] device bridge_slave_0 entered promiscuous mode [ 27.649037][ T365] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.656160][ T365] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.663708][ T365] device bridge_slave_1 entered promiscuous mode [ 27.708481][ T365] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.715544][ T365] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.722853][ T365] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.729913][ T365] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.752640][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 27.761207][ T112] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.768397][ T112] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.777874][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 27.786040][ T112] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.793129][ T112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.805471][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 27.813826][ T112] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.820904][ T112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.838189][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 27.846256][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 27.855919][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 27.864366][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 27.880693][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 27.889004][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 27.901262][ T365] device veth0_vlan entered promiscuous mode [ 27.913072][ T365] device veth1_macvtap entered promiscuous mode [ 27.920075][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 27.927985][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 27.937729][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 27.946302][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 27.954567][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 27.962279][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 27.969831][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 27.981335][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 27.989758][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 27.999008][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 28.007320][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 28.120099][ T397] ================================================================== [ 28.128244][ T397] BUG: KASAN: use-after-free in mutex_lock+0x85/0xf0 [ 28.134946][ T397] Write of size 8 at addr ffff88810ee69950 by task syz.2.17/397 [ 28.142597][ T397] [ 28.144969][ T397] CPU: 0 PID: 397 Comm: syz.2.17 Not tainted syzkaller #0 [ 28.152089][ T397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 28.162169][ T397] Call Trace: [ 28.165480][ T397] __dump_stack+0x21/0x24 [ 28.169862][ T397] dump_stack_lvl+0x1a7/0x208 [ 28.174575][ T397] ? show_regs_print_info+0x18/0x18 [ 28.179887][ T397] ? thaw_kernel_threads+0x220/0x220 [ 28.185187][ T397] print_address_description+0x7f/0x2c0 [ 28.190758][ T397] ? mutex_lock+0x85/0xf0 [ 28.195125][ T397] kasan_report+0x100/0x140 [ 28.199646][ T397] ? mutex_lock+0x85/0xf0 [ 28.204167][ T397] kasan_check_range+0x249/0x2a0 [ 28.209119][ T397] __kasan_check_write+0x14/0x20 [ 28.214292][ T397] mutex_lock+0x85/0xf0 [ 28.218469][ T397] ? mutex_trylock+0xb0/0xb0 [ 28.223082][ T397] ? l2tp_session_put+0xb2/0x1a0 [ 28.228035][ T397] ? l2tp_session_delete+0x3a9/0x4a0 [ 28.233346][ T397] pppol2tp_release+0x178/0x2b0 [ 28.238217][ T397] sock_close+0xb8/0x200 [ 28.242482][ T397] ? sock_mmap+0xa0/0xa0 [ 28.246741][ T397] __fput+0x2dc/0x730 [ 28.250761][ T397] ____fput+0x15/0x20 [ 28.254807][ T397] task_work_run+0x127/0x190 [ 28.259426][ T397] do_exit+0xa7c/0x24e0 [ 28.263603][ T397] ? finish_task_switch+0x1b7/0x5a0 [ 28.268924][ T397]