Warning: Permanently added '10.128.1.229' (ED25519) to the list of known hosts. 2025/10/04 08:52:28 parsed 1 programs [ 49.842853][ T30] audit: type=1400 audit(1759567949.839:105): avc: denied { unlink } for pid=401 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 49.890144][ T401] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 50.648580][ T30] audit: type=1401 audit(1759567950.639:106): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768" [ 50.851029][ T30] audit: type=1400 audit(1759567950.839:107): avc: denied { create } for pid=446 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 51.035344][ T430] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.043169][ T430] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.054648][ T430] device bridge_slave_0 entered promiscuous mode [ 51.074162][ T430] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.081304][ T430] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.093038][ T430] device bridge_slave_1 entered promiscuous mode [ 51.216820][ T430] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.223928][ T430] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.231386][ T430] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.238611][ T430] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.267354][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.275670][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.285376][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.303487][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.312351][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.319419][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.327287][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.336791][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.344034][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.351572][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 51.360673][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 51.375258][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 51.386912][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 51.395063][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 51.403126][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 51.411465][ T430] device veth0_vlan entered promiscuous mode 2025/10/04 08:52:31 executed programs: 0 [ 51.422354][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 51.431470][ T430] device veth1_macvtap entered promiscuous mode [ 51.441479][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 51.452089][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 51.666733][ T479] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.674424][ T479] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.681885][ T479] device bridge_slave_0 entered promiscuous mode [ 51.689207][ T479] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.696587][ T479] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.704074][ T479] device bridge_slave_1 entered promiscuous mode [ 51.744056][ T475] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.751200][ T475] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.758743][ T475] device bridge_slave_0 entered promiscuous mode [ 51.777383][ T475] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.784523][ T475] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.791899][ T475] device bridge_slave_1 entered promiscuous mode [ 51.825315][ T477] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.832419][ T477] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.839869][ T477] device bridge_slave_0 entered promiscuous mode [ 51.856556][ T477] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.863813][ T477] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.871188][ T477] device bridge_slave_1 entered promiscuous mode [ 51.925352][ T480] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.932522][ T480] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.939910][ T480] device bridge_slave_0 entered promiscuous mode [ 51.947203][ T480] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.954535][ T480] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.961921][ T480] device bridge_slave_1 entered promiscuous mode [ 51.969835][ T481] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.976974][ T481] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.984844][ T481] device bridge_slave_0 entered promiscuous mode [ 52.008153][ T481] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.015244][ T481] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.022888][ T481] device bridge_slave_1 entered promiscuous mode [ 52.185800][ T475] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.192997][ T475] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.200394][ T475] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.207456][ T475] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.216077][ T479] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.223169][ T479] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.230446][ T479] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.237491][ T479] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.303340][ T480] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.310505][ T480] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.317863][ T480] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.324924][ T480] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.335356][ T477] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.342436][ T477] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.349727][ T477] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.356803][ T477] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.373094][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.380986][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.388371][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.396416][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.404982][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.413391][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.420600][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.428353][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.435552][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.467741][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.476445][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.485645][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.492741][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.540295][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.549551][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.559116][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 52.568826][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 52.577087][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 52.585320][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.593718][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.600833][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.608375][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.616157][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.624421][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.631446][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.638923][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.647230][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.654390][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.662728][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.672352][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 52.680692][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.689082][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.696154][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.718250][ T475] device veth0_vlan entered promiscuous mode [ 52.733479][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 52.742750][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 52.750845][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 52.759336][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 52.767591][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 52.775810][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 52.784247][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.792633][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.799668][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.807118][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 52.815646][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.824155][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.831193][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.838655][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 52.846766][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 52.854941][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 52.863272][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.871382][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.878432][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.886007][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 52.894275][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 52.902229][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 52.910269][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 52.918590][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 52.926207][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 52.941930][ T481] device veth0_vlan entered promiscuous mode [ 52.952342][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 52.960522][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 52.968285][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 52.976272][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 52.984727][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 52.993085][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 53.001112][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.020646][ T480] device veth0_vlan entered promiscuous mode [ 53.029637][ T481] device veth1_macvtap entered promiscuous mode [ 53.038838][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 53.047328][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 53.055902][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 53.064434][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.072556][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.080593][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 53.088883][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.097008][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 53.105006][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 53.113223][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 53.120668][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 53.135930][ T480] device veth1_macvtap entered promiscuous mode [ 53.146734][ T475] device veth1_macvtap entered promiscuous mode [ 53.156024][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 53.164641][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 53.173116][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 53.181242][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 53.189689][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 53.202427][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 53.210786][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 53.219332][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 53.227885][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 53.241248][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 53.249770][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 53.259299][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 53.267597][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 53.283623][ T477] device veth0_vlan entered promiscuous mode [ 53.299581][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 53.308760][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 53.317582][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 53.326616][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 53.334946][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 53.343273][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 53.351562][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 53.360021][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 53.368770][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 53.377454][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 53.385878][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 53.393962][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 53.401940][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 53.409608][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 53.417331][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 53.425443][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 53.435077][ T479] device veth0_vlan entered promiscuous mode [ 53.479690][ T30] audit: type=1400 audit(1759567953.469:108): avc: denied { create } for pid=528 comm="syz.3.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 53.514040][ T477] device veth1_macvtap entered promiscuous mode [ 53.532593][ T30] audit: type=1400 audit(1759567953.479:109): avc: denied { connect } for pid=529 comm="syz.1.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 53.552761][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 53.557864][ T30] audit: type=1400 audit(1759567953.479:110): avc: denied { write } for pid=529 comm="syz.1.18" path="socket:[17955]" dev="sockfs" ino=17955 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 53.569288][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 53.631843][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 53.668592][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 53.696610][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 53.723696][ T479] device veth1_macvtap entered promiscuous mode [ 53.785111][ T437] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 53.794841][ T437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 53.816692][ T437] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 53.825305][ T437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 53.833809][ T437] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 53.859309][ T437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 53.878768][ T437] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 53.900715][ T437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 54.332439][ T320] device bridge_slave_1 left promiscuous mode [ 54.342436][ T320] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.354140][ T320] device bridge_slave_0 left promiscuous mode [ 54.363393][ T320] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.371778][ T320] device veth1_macvtap left promiscuous mode [ 54.378901][ T320] device veth0_vlan left promiscuous mode 2025/10/04 08:52:36 executed programs: 193 2025/10/04 08:52:41 executed programs: 420 2025/10/04 08:52:47 executed programs: 645 2025/10/04 08:52:52 executed programs: 874 2025/10/04 08:52:57 executed programs: 1096 2025/10/04 08:53:02 executed programs: 1305 2025/10/04 08:53:07 executed programs: 1530 2025/10/04 08:53:12 executed programs: 1741 [ 94.231711][ T10] ================================================================== [ 94.239841][ T10] BUG: KASAN: use-after-free in l2tp_session_delete+0x24/0x4a0 [ 94.247435][ T10] Write of size 8 at addr ffff888117708c08 by task kworker/u4:1/10 [ 94.255464][ T10] [ 94.257830][ T10] CPU: 0 PID: 10 Comm: kworker/u4:1 Not tainted syzkaller #0 [ 94.265227][ T10] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 94.275316][ T10] Workqueue: l2tp l2tp_tunnel_del_work [ 94.280868][ T10] Call Trace: [ 94.284165][ T10] [ 94.287122][ T10] __dump_stack+0x21/0x30 [ 94.291490][ T10] dump_stack_lvl+0xee/0x150 [ 94.296148][ T10] ? show_regs_print_info+0x20/0x20 [ 94.301395][ T10] ? load_image+0x3a0/0x3a0 [ 94.305935][ T10] ? __switch_to+0x51d/0xe20 [ 94.310595][ T10] print_address_description+0x7f/0x2c0 [ 94.316262][ T10] ? l2tp_session_delete+0x24/0x4a0 [ 94.321663][ T10] kasan_report+0xf1/0x140 [ 94.326109][ T10] ? l2tp_session_delete+0x24/0x4a0 [ 94.331336][ T10] kasan_check_range+0x280/0x290 [ 94.336300][ T10] __kasan_check_write+0x14/0x20 [ 94.341264][ T10] l2tp_session_delete+0x24/0x4a0 [ 94.346328][ T10] l2tp_tunnel_del_work+0x1d2/0x3e0 [ 94.351586][ T10] process_one_work+0x6be/0xba0 [ 94.356474][ T10] worker_thread+0xa59/0x1200 [ 94.361179][ T10] ? __kthread_parkme+0xac/0x200 [ 94.366140][ T10] kthread+0x411/0x500 [ 94.370236][ T10] ? worker_clr_flags+0x190/0x190 [ 94.375268][ T10] ? kthread_blkcg+0xd0/0xd0 [ 94.379877][ T10] ret_from_fork+0x1f/0x30 [ 94.384473][ T10] [ 94.387497][ T10] [ 94.389820][ T10] Allocated by task 4203: [ 94.394144][ T10] __kasan_kmalloc+0xda/0x110 [ 94.398827][ T10] __kmalloc+0x13d/0x2c0 [ 94.403071][ T10] l2tp_session_create+0x39/0xb60 [ 94.408101][ T10] pppol2tp_connect+0xb35/0x1570 [ 94.413058][ T10] __sys_connect+0x389/0x410 [ 94.417655][ T10] __x64_sys_connect+0x7a/0x90 [ 94.422427][ T10] x64_sys_call+0x7c/0x9a0 [ 94.426855][ T10] do_syscall_64+0x4c/0xa0 [ 94.431272][ T10] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 94.437257][ T10] [ 94.439582][ T10] Freed by task 4207: [ 94.443568][ T10] kasan_set_track+0x4a/0x70 [ 94.448161][ T10] kasan_set_free_info+0x23/0x40 [ 94.453097][ T10] ____kasan_slab_free+0x125/0x160 [ 94.458210][ T10] __kasan_slab_free+0x11/0x20 [ 94.462970][ T10] slab_free_freelist_hook+0xc2/0x190 [ 94.468352][ T10] kfree+0xc4/0x270 [ 94.472597][ T10] l2tp_session_dec_refcount+0xaf/0x1a0 [ 94.478145][ T10] pppol2tp_session_destruct+0xb1/0xf0 [ 94.483605][ T10] __sk_destruct+0x56/0x5e0 [ 94.488109][ T10] __sk_free+0x313/0x410 [ 94.492360][ T10] sk_free+0x54/0x90 [ 94.496256][ T10] pppol2tp_put_sk+0x7a/0xb0 [ 94.500886][ T10] rcu_do_batch+0x51d/0xba0 [ 94.505390][ T10] rcu_core+0x5e4/0xf80 [ 94.509547][ T10] rcu_core_si+0x9/0x10 [ 94.513700][ T10] handle_softirqs+0x250/0x560 [ 94.518477][ T10] __do_softirq+0xb/0xd [ 94.522654][ T10] [ 94.524974][ T10] Last potentially related work creation: [ 94.530706][ T10] kasan_save_stack+0x3a/0x60 [ 94.535476][ T10] __kasan_record_aux_stack+0xd2/0x100 [ 94.540939][ T10] kasan_record_aux_stack_noalloc+0xb/0x10 [ 94.546743][ T10] call_rcu+0x105/0xfe0 [ 94.550898][ T10] pppol2tp_release+0x208/0x2d0 [ 94.555785][ T10] sock_close+0xe0/0x270 [ 94.560030][ T10] __fput+0x20b/0x8b0 [ 94.564012][ T10] ____fput+0x15/0x20 [ 94.567997][ T10] task_work_run+0x127/0x190 [ 94.572589][ T10] exit_to_user_mode_loop+0xd0/0xe0 [ 94.577785][ T10] exit_to_user_mode_prepare+0x87/0xd0 [ 94.583243][ T10] syscall_exit_to_user_mode+0x1a/0x30 [ 94.588701][ T10] do_syscall_64+0x58/0xa0 [ 94.593218][ T10] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 94.599200][ T10] [ 94.601621][ T10] The buggy address belongs to the object at ffff888117708c00 [ 94.601621][ T10] which belongs to the cache kmalloc-512 of size 512 [ 94.615673][ T10] The buggy address is located 8 bytes inside of [ 94.615673][ T10] 512-byte region [ffff888117708c00, ffff888117708e00) [ 94.628776][ T10] The buggy address belongs to the page: [ 94.634409][ T10] page:ffffea00045dc200 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x117708 [ 94.644675][ T10] head:ffffea00045dc200 order:2 compound_mapcount:0 compound_pincount:0 [ 94.653055][ T10] flags: 0x4000000000010200(slab|head|zone=1) [ 94.659165][ T10] raw: 4000000000010200 dead000000000100 dead000000000122 ffff888100042f00 [ 94.667755][ T10] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 94.676446][ T10] page dumped because: kasan: bad access detected [ 94.682859][ T10] page_owner tracks the page as allocated [ 94.688569][ T10] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 475, ts 52070467627, free_ts 51546762556 [ 94.708983][ T10] post_alloc_hook+0x192/0x1b0 [ 94.713766][ T10] prep_new_page+0x1c/0x110 [ 94.718276][ T10] get_page_from_freelist+0x2cc5/0x2d50 [ 94.723825][ T10] __alloc_pages+0x18f/0x440 [ 94.728425][ T10] new_slab+0xa1/0x4d0 [ 94.732679][ T10] ___slab_alloc+0x381/0x810 [ 94.737276][ T10] __slab_alloc+0x49/0x90 [ 94.741610][ T10] __kmalloc+0x16a/0x2c0 [ 94.745904][ T10] __register_sysctl_table+0xa38/0x1250 [ 94.751453][ T10] register_net_sysctl+0x238/0x250 [ 94.756572][ T10] __addrconf_sysctl_register+0x26e/0x3d0 [ 94.762290][ T10] addrconf_sysctl_register+0x147/0x1a0 [ 94.767836][ T10] ipv6_add_dev+0xc03/0x1150 [ 94.772449][ T10] addrconf_notify+0x582/0xde0 [ 94.777211][ T10] raw_notifier_call_chain+0x90/0x100 [ 94.782606][ T10] call_netdevice_notifiers+0x111/0x190 [ 94.788264][ T10] page last free stack trace: [ 94.792928][ T10] free_unref_page_prepare+0x542/0x550 [ 94.798388][ T10] free_unref_page+0xa2/0x550 [ 94.803160][ T10] __free_pages+0x6c/0x100 [ 94.807575][ T10] __free_slab+0xe8/0x1e0 [ 94.811904][ T10] __unfreeze_partials+0x160/0x190 [ 94.817042][ T10] put_cpu_partial+0xc6/0x120 [ 94.821821][ T10] __slab_free+0x1d4/0x290 [ 94.826244][ T10] ___cache_free+0x104/0x120 [ 94.830870][ T10] qlink_free+0x4d/0x90 [ 94.835043][ T10] qlist_free_all+0x5f/0xb0 [ 94.839568][ T10] kasan_quarantine_reduce+0x14a/0x170 [ 94.845162][ T10] __kasan_slab_alloc+0x2f/0xf0 [ 94.850118][ T10] slab_post_alloc_hook+0x4f/0x2b0 [ 94.855241][ T10] kmem_cache_alloc+0xf7/0x260 [ 94.860010][ T10] alloc_vfsmnt+0x27/0x4a0 [ 94.864444][ T10] clone_mnt+0x6d/0xd10 [ 94.868608][ T10] [ 94.870932][ T10] Memory state around the buggy address: [ 94.876588][ T10] ffff888117708b00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 94.884657][ T10] ffff888117708b80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 94.892718][ T10] >ffff888117708c00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 94.900783][ T10] ^ [ 94.905193][ T10] ffff888117708c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 94.913262][ T10] ffff888117708d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 94.921315][ T10] ================================================================== [ 94.929408][ T10] Disabling lock debugging due to kernel taint [ 94.958994][ T30] audit: type=1400 audit(1759567994.949:111): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 94.985305][ T30] audit: type=1400 audit(1759567994.949:112): avc: denied { search } for pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 95.033154][ T30] audit: type=1400 audit(1759567994.949:113): avc: denied { write } for pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 95.096023][ T30] audit: type=1400 audit(1759567994.949:114): avc: denied { add_name } for pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 95.122404][ T30] audit: type=1400 audit(1759567994.949:115): avc: denied { create } for pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 95.211517][ T30] audit: type=1400 audit(1759567994.949:116): avc: denied { append open } for pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 95.264925][ T30] audit: type=1400 audit(1759567994.949:117): avc: denied { getattr } for pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 2025/10/04 08:53:17 executed programs: 1950 2025/10/04 08:53:22 executed programs: 2152