Warning: Permanently added '10.128.1.53' (ED25519) to the list of known hosts. 2026/07/23 22:42:54 parsed 1 programs 2026/07/23 22:42:54 serving rpc on tcp://46343 [ 20.826275][ T24] audit: type=1400 audit(1784846574.800:64): avc: denied { node_bind } for pid=287 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 20.829537][ T24] audit: type=1400 audit(1784846574.800:65): avc: denied { create } for pid=287 comm="syz-execprog" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 20.834221][ T24] audit: type=1400 audit(1784846574.800:66): avc: denied { module_request } for pid=287 comm="syz-execprog" kmod="net-pf-2-proto-262-type-1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 21.407639][ T24] audit: type=1400 audit(1784846575.380:67): avc: denied { mounton } for pid=293 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2024 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 21.408634][ T293] cgroup: Unknown subsys name 'net' [ 21.430319][ T24] audit: type=1400 audit(1784846575.380:68): avc: denied { mount } for pid=293 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.457567][ T24] audit: type=1400 audit(1784846575.420:69): avc: denied { unmount } for pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.457771][ T293] cgroup: Unknown subsys name 'devices' [ 21.572052][ T293] cgroup: Unknown subsys name 'hugetlb' [ 21.577692][ T293] cgroup: Unknown subsys name 'rlimit' [ 21.750083][ T24] audit: type=1400 audit(1784846575.720:70): avc: denied { setattr } for pid=293 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 21.773251][ T24] audit: type=1400 audit(1784846575.720:71): avc: denied { create } for pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 21.780866][ T297] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 21.793748][ T24] audit: type=1400 audit(1784846575.720:72): avc: denied { write } for pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 21.822481][ T24] audit: type=1400 audit(1784846575.720:73): avc: denied { read } for pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 21.842779][ T293] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 22.225629][ T299] request_module fs-gadgetfs succeeded, but still no fs? [ 22.236042][ T299] cgroup: cgroup: disabling cgroup2 socket matching due to net_prio or net_cls activation [ 22.469251][ T321] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.476372][ T321] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.483775][ T321] device bridge_slave_0 entered promiscuous mode [ 22.491269][ T321] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.498275][ T321] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.505584][ T321] device bridge_slave_1 entered promiscuous mode [ 22.537372][ T321] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.544430][ T321] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.551704][ T321] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.558711][ T321] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.574641][ T322] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.582024][ T322] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.589212][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 22.596762][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.606190][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.614434][ T322] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.621445][ T322] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.629779][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.638223][ T322] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.645265][ T322] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.656622][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.665564][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 22.677685][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 22.688660][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 22.696835][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 22.704395][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 22.712819][ T321] device veth0_vlan entered promiscuous mode [ 22.722591][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 22.731555][ T321] device veth1_macvtap entered promiscuous mode [ 22.739814][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 22.749503][ T322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 2026/07/23 22:42:57 executed programs: 0 [ 23.226454][ T363] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.233560][ T363] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.240957][ T363] device bridge_slave_0 entered promiscuous mode [ 23.247774][ T363] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.255025][ T363] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.262529][ T363] device bridge_slave_1 entered promiscuous mode [ 23.299689][ T363] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.306744][ T363] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.314009][ T363] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.321043][ T363] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.341290][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.348767][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.356201][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.364685][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.372883][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.379891][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.388436][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.396705][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.403880][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.417337][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.426260][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.438564][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.452489][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.460455][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.468130][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.476861][ T363] device veth0_vlan entered promiscuous mode [ 23.483380][ T112] device bridge_slave_1 left promiscuous mode [ 23.489458][ T112] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.496833][ T112] device bridge_slave_0 left promiscuous mode [ 23.503249][ T112] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.510957][ T112] device veth1_macvtap left promiscuous mode [ 23.516932][ T112] device veth0_vlan left promiscuous mode [ 23.576807][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.585043][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.594018][ T363] device veth1_macvtap entered promiscuous mode [ 23.602384][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 23.609958][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.618481][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.627621][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.635848][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.690846][ T369] ================================================================== [ 23.698979][ T369] BUG: KASAN: use-after-free in pppol2tp_sock_to_session+0x1a0/0x1b0 [ 23.707041][ T369] Read of size 4 at addr ffff88811173d000 by task syz.2.17/369 [ 23.714564][ T369] [ 23.716897][ T369] CPU: 0 PID: 369 Comm: syz.2.17 Not tainted syzkaller #0 [ 23.723993][ T369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 23.734047][ T369] Call Trace: [ 23.737328][ T369] __dump_stack+0x21/0x24 [ 23.741650][ T369] dump_stack_lvl+0x1a7/0x208 [ 23.746317][ T369] ? show_regs_print_info+0x18/0x18 [ 23.751509][ T369] ? thaw_kernel_threads+0x220/0x220 [ 23.756788][ T369] ? __local_bh_enable_ip+0x53/0x80 [ 23.761983][ T369] print_address_description+0x7f/0x2c0 [ 23.767518][ T369] ? pppol2tp_sock_to_session+0x1a0/0x1b0 [ 23.773231][ T369] kasan_report+0x100/0x140 [ 23.777720][ T369] ? pppol2tp_sock_to_session+0x1a0/0x1b0 [ 23.783427][ T369] __asan_report_load4_noabort+0x14/0x20 [ 23.789045][ T369] ppp