Warning: Permanently added '10.128.0.253' (ED25519) to the list of known hosts. 2026/06/22 21:25:13 parsed 1 programs 2026/06/22 21:25:13 serving rpc on tcp://41311 [ 24.301117][ T24] audit: type=1400 audit(1782163513.070:64): avc: denied { node_bind } for pid=287 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 24.321901][ T24] audit: type=1400 audit(1782163513.070:65): avc: denied { create } for pid=287 comm="syz-execprog" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 24.341641][ T24] audit: type=1400 audit(1782163513.070:66): avc: denied { module_request } for pid=287 comm="syz-execprog" kmod="net-pf-2-proto-262-type-1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 24.901027][ T24] audit: type=1400 audit(1782163513.670:67): avc: denied { mounton } for pid=293 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2024 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 24.902135][ T293] cgroup: Unknown subsys name 'net' [ 24.923678][ T24] audit: type=1400 audit(1782163513.670:68): avc: denied { mount } for pid=293 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.950919][ T24] audit: type=1400 audit(1782163513.700:69): avc: denied { unmount } for pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.951086][ T293] cgroup: Unknown subsys name 'devices' [ 25.098155][ T293] cgroup: Unknown subsys name 'hugetlb' [ 25.103794][ T293] cgroup: Unknown subsys name 'rlimit' [ 25.246530][ T24] audit: type=1400 audit(1782163514.010:70): avc: denied { setattr } for pid=293 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 25.269660][ T24] audit: type=1400 audit(1782163514.020:71): avc: denied { create } for pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 25.290003][ T24] audit: type=1400 audit(1782163514.020:72): avc: denied { write } for pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.295955][ T297] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 25.310275][ T24] audit: type=1400 audit(1782163514.020:73): avc: denied { read } for pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.360128][ T293] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 25.740847][ T299] request_module fs-gadgetfs succeeded, but still no fs? [ 25.751340][ T299] cgroup: cgroup: disabling cgroup2 socket matching due to net_prio or net_cls activation [ 25.874909][ T313] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.882164][ T313] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.889573][ T313] device bridge_slave_0 entered promiscuous mode [ 25.897212][ T313] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.904233][ T313] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.911556][ T313] device bridge_slave_1 entered promiscuous mode [ 25.943553][ T313] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.950617][ T313] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.957884][ T313] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.964896][ T313] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.982114][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.989676][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.997189][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.005725][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 26.013957][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.021017][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.030483][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 26.038671][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.045675][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.056689][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 26.067013][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 26.079570][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 26.090308][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 26.098558][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 26.106374][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 26.115558][ T313] device veth0_vlan entered promiscuous mode [ 26.125142][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.134625][ T313] device veth1_macvtap entered promiscuous mode [ 26.144766][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.155128][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 2026/06/22 21:25:15 executed programs: 0 [ 26.756901][ T362] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.764475][ T362] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.771965][ T362] device bridge_slave_0 entered promiscuous mode [ 26.779032][ T362] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.786099][ T362] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.793661][ T362] device bridge_slave_1 entered promiscuous mode [ 26.805996][ T112] device bridge_slave_1 left promiscuous mode [ 26.812158][ T112] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.820240][ T112] device bridge_slave_0 left promiscuous mode [ 26.826341][ T112] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.834215][ T112] device veth1_macvtap left promiscuous mode [ 26.840337][ T112] device veth0_vlan left promiscuous mode [ 26.928365][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 26.935734][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 26.944676][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 26.953154][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 26.961362][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.968408][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.976701][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 26.984339][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 26.992723][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 27.001195][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.008229][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.019546][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 27.028518][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 27.040820][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 27.051591][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 27.059781][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 27.067402][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 27.075892][ T362] device veth0_vlan entered promiscuous mode [ 27.085214][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 27.094169][ T362] device veth1_macvtap entered promiscuous mode [ 27.102940][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 27.112725][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 27.156993][ C0] ================================================================== [ 27.165158][ C0] BUG: KASAN: use-after-free in rcu_cblist_dequeue+0x6c/0xb0 [ 27.172620][ C0] Read of size 8 at addr ffff8881115d3590 by task ksoftirqd/0/12 [ 27.180329][ C0] [ 27.182677][ C0] CPU: 0 PID: 12 Comm: ksoftirqd/0 Not tainted syzkaller #0 [ 27.189965][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 27.200024][ C0] Call Trace: [ 27.203336][ C0] __dump_stack+0x21/0x24 [ 27.207673][ C0] dump_stack_lvl+0x1a7/0x208 [ 27.212378][ C0] ? show_regs_print_info+0x18/0x18 [ 27.218375][ C0] ? thaw_kernel_threads+0x220/0x220 [ 27.223666][ C0] print_address_description+0x7f/0x2c0 [ 27.229213][ C0] ? rcu_cblist_dequeue+0x6c/0xb0 [ 27.234252][ C0] kasan_report+0x100/0x140 [ 27.238860][ C0] ? rcu_cblist_dequeue+0x6c/0xb0 [ 27.244000][ C0] __asan_report_load8_noabort+0x14/0x20 [ 27.249635][ C0] rcu_cblist_dequeue+0x6c/0xb0 [ 27.254487][ C0] rcu_do_batc