Warning: Permanently added '10.128.0.183' (ED25519) to the list of known hosts. 2026/08/17 02:36:08 parsed 1 programs 2026/08/17 02:36:08 serving rpc on tcp://37359 [ 25.163440][ T24] audit: type=1400 audit(1786934168.060:64): avc: denied { node_bind } for pid=287 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 25.184285][ T24] audit: type=1400 audit(1786934168.060:65): avc: denied { create } for pid=287 comm="syz-execprog" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 25.204020][ T24] audit: type=1400 audit(1786934168.060:66): avc: denied { module_request } for pid=287 comm="syz-execprog" kmod="net-pf-2-proto-262-type-1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 26.108672][ T24] audit: type=1400 audit(1786934169.000:67): avc: denied { mounton } for pid=293 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2024 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 26.112104][ T293] cgroup: Unknown subsys name 'net' [ 26.131865][ T24] audit: type=1400 audit(1786934169.000:68): avc: denied { mount } for pid=293 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.159030][ T24] audit: type=1400 audit(1786934169.030:69): avc: denied { unmount } for pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.159477][ T293] cgroup: Unknown subsys name 'devices' [ 26.302756][ T293] cgroup: Unknown subsys name 'hugetlb' [ 26.308458][ T293] cgroup: Unknown subsys name 'rlimit' [ 26.456649][ T24] audit: type=1400 audit(1786934169.350:70): avc: denied { setattr } for pid=293 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 26.479814][ T24] audit: type=1400 audit(1786934169.350:71): avc: denied { create } for pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 26.500300][ T24] audit: type=1400 audit(1786934169.350:72): avc: denied { write } for pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.517507][ T297] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 26.520763][ T24] audit: type=1400 audit(1786934169.350:73): avc: denied { read } for pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.570624][ T293] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 26.986953][ T301] request_module fs-gadgetfs succeeded, but still no fs? [ 26.997978][ T301] cgroup: cgroup: disabling cgroup2 socket matching due to net_prio or net_cls activation [ 27.610641][ T354] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.617741][ T354] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.625303][ T354] device bridge_slave_0 entered promiscuous mode [ 27.632190][ T354] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.639230][ T354] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.646624][ T354] device bridge_slave_1 entered promiscuous mode [ 27.686080][ T354] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.693158][ T354] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.700587][ T354] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.707675][ T354] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.725737][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 27.733326][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.740499][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.749758][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 27.758589][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.765655][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.774154][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 27.782391][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.789500][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.800762][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 27.810179][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 27.823710][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 27.834880][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 27.842983][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 27.850443][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 27.858982][ T354] device veth0_vlan entered promiscuous mode [ 27.869040][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 27.878138][ T354] device veth1_macvtap entered promiscuous mode [ 27.887281][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 27.897304][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 2026/08/17 02:36:11 executed programs: 0 [ 28.165256][ T364] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.172425][ T364] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.179847][ T364] device bridge_slave_0 entered promiscuous mode [ 28.187025][ T364] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.194095][ T364] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.201593][ T364] device bridge_slave_1 entered promiscuous mode [ 28.248368][ T364] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.255492][ T364] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.262802][ T364] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.269853][ T364] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.293649][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 28.301541][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.308708][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.325479][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 28.333666][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.340701][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.351444][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 28.359845][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 28.368187][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.375264][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.391629][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 28.399791][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 28.407903][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 28.416162][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 28.430114][ T364] device veth0_vlan entered promiscuous mode [ 28.438321][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 28.448188][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 28.456981][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 28.464963][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 28.473130][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 28.480682][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 28.492766][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 28.501250][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 28.510438][ T364] device veth1_macvtap entered promiscuous mode [ 28.520943][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 28.528899][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 28.537447][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 28.547062][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 28.555574][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 28.671413][ T400] ================================================================== [ 28.679658][ T400] BUG: KASAN: use-after-free in mutex_lock+0x85/0xf0 [ 28.686359][ T400] Write of size 8 at addr ffff888111340550 by task syz.2.17/400 [ 28.694104][ T400] [ 28.696462][ T400] CPU: 1 PID: 400 Comm: syz.2.17 Not tainted syzkaller #0 [ 28.703670][ T400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 28.713742][ T400] Call Trace: [ 28.717145][ T400] __dump_stack+0x21/0x24 [ 28.721489][ T400] dump_stack_lvl+0x1a7/0x208 [ 28.726178][ T400] ? show_regs_print_info+0x18/0x18 [ 28.731434][ T400] ? thaw_kernel_threads+0x220/0x220 [ 28.736739][ T400] print_address_description+0x7f/0x2c0 [ 28.742477][ T400] ? mutex_lock+0x85/0xf0 [ 28.746848][ T400] kasan_report+0x100/0x140 [ 28.751359][ T400] ? mutex_lock+0x85/0xf0 [ 28.755813][ T400] kasan_check_range+0x249/0x2a0 [ 28.760766][ T400] __kasan_check_write+0x14/0x20 [ 28.765717][ T400] mutex_lock+0x85/0xf0 [ 28.769886][ T400] ? mutex_trylock+0xb0/0xb0 [ 28.774503][ T400] ? l2tp_session_put+0xb2/0x1a0 [ 28.779451][ T400] ? l2tp_session_delete+0x3a9/0x4a0 [ 28.784835][ T400] pppol2tp_release+0x178/0x2b0 [ 28.789723][ T400] sock_close+0xb8/0x200 [ 28.793975][ T400] ? sock_mmap+0xa0/0xa0 [ 28.798414][ T400] __fput+0x2dc/0x730 [ 28.802406][ T400] ____fput+0x15/0x20 [ 28.806398][ T400] task_work_run+0x127/0x190 [ 28.811000][ T400] do_exit+0xa7c/0x24e0 [ 28.815205][ T400] ? put_task_struct+0x90/0x90 [ 28.820000][ T400