Warning: Permanently added '10.128.1.79' (ED25519) to the list of known hosts. 2026/01/06 06:55:00 parsed 1 programs [ 45.101150][ T30] audit: type=1400 audit(1767682500.679:105): avc: denied { unlink } for pid=396 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 45.139297][ T396] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 45.628603][ T30] audit: type=1401 audit(1767682501.199:106): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768" [ 45.875764][ T417] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.882877][ T417] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.890290][ T417] device bridge_slave_0 entered promiscuous mode [ 45.916319][ T30] audit: type=1400 audit(1767682501.489:107): avc: denied { create } for pid=441 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 45.948247][ T417] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.958738][ T417] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.976694][ T417] device bridge_slave_1 entered promiscuous mode [ 46.127150][ T417] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.134443][ T417] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.141745][ T417] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.148772][ T417] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.171171][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 46.179024][ T320] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.186960][ T320] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.203478][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 46.211985][ T320] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.219022][ T320] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.226581][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 46.234799][ T320] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.241825][ T320] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.249154][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 46.258108][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 46.270996][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 46.281349][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 46.289275][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 46.297227][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 46.306980][ T417] device veth0_vlan entered promiscuous mode [ 46.315937][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready 2026/01/06 06:55:01 executed programs: 0 [ 46.324796][ T417] device veth1_macvtap entered promiscuous mode [ 46.333618][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 46.343676][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 46.508916][ T465] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.516205][ T465] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.523652][ T465] device bridge_slave_0 entered promiscuous mode [ 46.531889][ T465] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.538925][ T465] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.546593][ T465] device bridge_slave_1 entered promiscuous mode [ 46.560725][ T468] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.567834][ T468] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.575280][ T468] device bridge_slave_0 entered promiscuous mode [ 46.583377][ T468] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.590667][ T468] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.598166][ T468] device bridge_slave_1 entered promiscuous mode [ 46.647973][ T470] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.655162][ T470] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.662491][ T470] device bridge_slave_0 entered promiscuous mode [ 46.670405][ T470] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.677536][ T470] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.685077][ T470] device bridge_slave_1 entered promiscuous mode [ 46.706832][ T471] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.713920][ T471] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.721309][ T471] device bridge_slave_0 entered promiscuous mode [ 46.739342][ T471] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.746423][ T471] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.753883][ T471] device bridge_slave_1 entered promiscuous mode [ 46.814512][ T472] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.821596][ T472] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.828849][ T472] device bridge_slave_0 entered promiscuous mode [ 46.844978][ T472] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.852030][ T472] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.859397][ T472] device bridge_slave_1 entered promiscuous mode [ 46.992032][ T472] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.999081][ T472] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.006360][ T472] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.013385][ T472] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.051642][ T320] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.058938][ T320] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.066706][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 47.074503][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 47.101708][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.109920][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.118146][ T320] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.125175][ T320] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.132737][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.141389][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.149470][ T320] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.156492][ T320] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.163826][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 47.171330][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 47.178656][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 47.186765][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 47.194816][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 47.202209][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 47.209532][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.217856][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.225954][ T320] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.233002][ T320] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.240410][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.248776][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.256977][ T320] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.263996][ T320] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.271383][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 47.278986][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 47.307780][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 47.316056][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.325126][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.333301][ T320] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.340306][ T320] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.347838][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 47.355927][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 47.364088][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 47.379464][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.387981][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.396264][ T320] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.403286][ T320] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.410950][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 47.421786][ T470] device veth0_vlan entered promiscuous mode [ 47.441027][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 47.449022][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 47.456613][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 47.472383][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.481059][ T320] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.488076][ T320] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.495449][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 47.503441][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.511897][ T320] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.518914][ T320] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.526273][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 47.537961][ T470] device veth1_macvtap entered promiscuous mode [ 47.554450][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 47.563376][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 47.571772][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 47.589023][ T465] device veth0_vlan entered promiscuous mode [ 47.596281][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 47.605137][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 47.613834][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 47.621883][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 47.629334][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 47.651313][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 47.659568][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 47.667582][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 47.675513][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 47.680406][ T30] audit: type=1400 audit(1767682503.249:108): avc: denied { create } for pid=518 comm="syz.1.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 47.686241][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 47.711777][ T30] audit: type=1400 audit(1767682503.279:109): avc: denied { connect } for pid=518 comm="syz.1.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 47.714810][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 47.732011][ T30] audit: type=1400 audit(1767682503.279:110): avc: denied { write } for pid=518 comm="syz.1.17" path="socket:[17635]" dev="sockfs" ino=17635 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 47.738932][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 47.778797][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 47.787188][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 47.802518][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.811610][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.819760][ T320] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.826820][ T320] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.843382][ T468] device veth0_vlan entered promiscuous mode [ 47.852753][ T472] device veth0_vlan entered promiscuous mode [ 47.863562][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 47.871575][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 47.879784][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 47.889075][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 47.897592][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 47.908293][ T465] device veth1_macvtap entered promiscuous mode [ 47.925725][ T472] device veth1_macvtap entered promiscuous mode [ 47.937509][ T468] device veth1_macvtap entered promiscuous mode [ 47.949693][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 47.957429][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 47.965761][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 47.977527][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.994054][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.012512][ T320] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.019590][ T320] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.027223][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 48.036585][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 48.048937][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 48.062876][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 48.079881][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 48.089014][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 48.098936][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 48.107896][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 48.122569][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 48.132541][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 48.144418][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 48.152905][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 48.161633][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 48.170794][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 48.201417][ T580] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 48.209719][ T580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 48.224755][ T580] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 48.242840][ T580] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 48.256692][ T580] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 48.273928][ T580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 48.292028][ T580] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 48.302716][ T580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 48.314037][ T580] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 48.325929][ T580] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 48.345594][ T471] device veth0_vlan entered promiscuous mode [ 48.365342][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 48.398978][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 48.416765][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 48.424787][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 48.495367][ T8] device bridge_slave_1 left promiscuous mode [ 48.522540][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.546883][ T8] device bridge_slave_0 left promiscuous mode [ 48.570687][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.611570][ T8] device veth1_macvtap left promiscuous mode [ 48.617611][ T8] device veth0_vlan left promiscuous mode [ 48.916546][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 48.930177][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 48.946870][ T471] device veth1_macvtap entered promiscuous mode [ 48.986751][ T580] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 48.995759][ T580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 49.049709][ T580] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 49.078677][ T580] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 50.937163][ T8] ================================================================== [ 50.945257][ T8] BUG: KASAN: use-after-free in l2tp_session_delete+0x24/0x4a0 [ 50.952826][ T8] Write of size 8 at addr ffff88810ac82408 by task kworker/u4:0/8 [ 50.960627][ T8] [ 50.962959][ T8] CPU: 0 PID: 8 Comm: kworker/u4:0 Not tainted syzkaller #0 [ 50.970235][ T8] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 50.980371][ T8] Workqueue: l2tp l2tp_tunnel_del_work [ 50.985859][ T8] Call Trace: [ 50.989141][ T8] [ 50.992067][ T8] __dump_stack+0x21/0x30 [ 50.996394][ T8] dump_stack_lvl+0xee/0x150 [ 51.000981][ T8] ? show_regs_print_info+0x20/0x20 [ 51.006181][ T8] ? load_image+0x3a0/0x3a0 [ 51.010699][ T8] ? check_preempt_wakeup+0x8d0/0xb80 [ 51.016314][ T8] print_address_description+0x7f/0x2c0 [ 51.021872][ T8] ? l2tp_session_delete+0x24/0x4a0 [ 51.027148][ T8] kasan_report+0xf1/0x140 [ 51.031563][ T8] ? l2tp_session_delete+0x24/0x4a0 [ 51.036759][ T8] kasan_check_range+0x280/0x290 [ 51.041694][ T8] __kasan_check_write+0x14/0x20 [ 51.046628][ T8] l2tp_session_delete+0x24/0x4a0 [ 51.051649][ T8] l2tp_tunnel_del_work+0x1d2/0x3e0 [ 51.056851][ T8] process_one_work+0x6be/0xba0 [ 51.061711][ T8] worker_thread+0xa59/0x1200 [ 51.066396][ T8] kthread+0x411/0x500 [ 51.070558][ T8] ? worker_clr_flags+0x190/0x190 [ 51.075608][ T8] ? kthread_blkcg+0xd0/0xd0 [ 51.080218][ T8] ret_from_fork+0x1f/0x30 [ 51.084816][ T8] [ 51.087831][ T8] [ 51.090141][ T8] Allocated by task 1025: [ 51.094457][ T8] __kasan_kmalloc+0xda/0x110 [ 51.099192][ T8] __kmalloc+0x13d/0x2c0 [ 51.103435][ T8] l2tp_session_create+0x39/0xb60 [ 51.108476][ T8] pppol2tp_connect+0xb35/0x1570 [ 51.113478][ T8] __sys_connect+0x389/0x410 [ 51.118080][ T8] __x64_sys_connect+0x7a/0x90 [ 51.122865][ T8] x64_sys_call+0x7c/0x9a0 [ 51.127279][ T8] do_syscall_64+0x4c/0xa0 [ 51.131693][ T8] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 51.137588][ T8] [ 51.139907][ T8] Freed by task 25: [ 51.143801][ T8] kasan_set_track+0x4a/0x70 [ 51.148394][ T8] kasan_set_free_info+0x23/0x40 [ 51.153333][ T8] ____kasan_slab_free+0x125/0x160 [ 51.158456][ T8] __kasan_slab_free+0x11/0x20 [ 51.163238][ T8] slab_free_freelist_hook+0xc2/0x190 [ 51.168613][ T8] kfree+0xc4/0x270 [ 51.172425][ T8] l2tp_session_dec_refcount+0xaf/0x1a0 [ 51.177969][ T8] pppol2tp_session_destruct+0xb1/0xf0 [ 51.183426][ T8] __sk_destruct+0x56/0x5e0 [ 51.188012][ T8] __sk_free+0x313/0x410 [ 51.192251][ T8] sk_free+0x54/0x90 [ 51.196139][ T8] pppol2tp_put_sk+0x7a/0xb0 [ 51.200733][ T8] rcu_do_batch+0x51d/0xba0 [ 51.205231][ T8] rcu_core+0x5e4/0xf80 [ 51.209386][ T8] rcu_core_si+0x9/0x10 [ 51.213536][ T8] handle_softirqs+0x250/0x560 [ 51.218292][ T8] run_ksoftirqd+0x28/0x40 [ 51.222710][ T8] smpboot_thread_fn+0x45a/0x8c0 [ 51.227833][ T8] kthread+0x411/0x500 [ 51.231896][ T8] ret_from_fork+0x1f/0x30 [ 51.236304][ T8] [ 51.238630][ T8] Last potentially related work creation: [ 51.244329][ T8] kasan_save_stack+0x3a/0x60 [ 51.249005][ T8] __kasan_record_aux_stack+0xd2/0x100 [ 51.254461][ T8] kasan_record_aux_stack_noalloc+0xb/0x10 [ 51.260365][ T8] call_rcu+0x105/0xfe0 [ 51.264524][ T8] pppol2tp_release+0x208/0x2d0 [ 51.269376][ T8] sock_close+0xe0/0x270 [ 51.273613][ T8] __fput+0x20b/0x8b0 [ 51.277597][ T8] ____fput+0x15/0x20 [ 51.281595][ T8] task_work_run+0x127/0x190 [ 51.286194][ T8] exit_to_user_mode_loop+0xd0/0xe0 [ 51.291391][ T8] exit_to_user_mode_prepare+0x87/0xd0 [ 51.296867][ T8] syscall_exit_to_user_mode+0x1a/0x30 [ 51.302323][ T8] do_syscall_64+0x58/0xa0 [ 51.306740][ T8] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 51.312652][ T8] [ 51.314968][ T8] Second to last potentially related work creation: [ 51.321538][ T8] kasan_save_stack+0x3a/0x60 [ 51.326219][ T8] __kasan_record_aux_stack+0xd2/0x100 [ 51.331673][ T8] kasan_record_aux_stack_noalloc+0xb/0x10 2026/01/06 06:55:06 executed programs: 281 [ 51.337478][ T8] call_rcu+0x105/0xfe0 [ 51.341633][ T8] pwq_unbound_release_workfn+0x287/0x2c0 [ 51.347347][ T8] process_one_work+0x6be/0xba0 [ 51.352275][ T8] worker_thread+0xa59/0x1200 [ 51.356951][ T8] kthread+0x411/0x500 [ 51.361016][ T8] ret_from_fork+0x1f/0x30 [ 51.365429][ T8] [ 51.367740][ T8] The buggy address belongs to the object at ffff88810ac82400 [ 51.367740][ T8] which belongs to the cache kmalloc-512 of size 512 [ 51.381785][ T8] The buggy address is located 8 bytes inside of [ 51.381785][ T8] 512-byte region [ffff88810ac82400, ffff88810ac82600) [ 51.395062][ T8] The buggy address belongs to the page: [ 51.400688][ T8] page:ffffea00042b2000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10ac80 [ 51.411025][ T8] head:ffffea00042b2000 order:2 compound_mapcount:0 compound_pincount:0 [ 51.419350][ T8] flags: 0x4000000000010200(slab|head|zone=1) [ 51.425444][ T8] raw: 4000000000010200 ffffea00047e7700 0000000400000004 ffff888100042f00 [ 51.434024][ T8] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 51.442601][ T8] page dumped because: kasan: bad access detected [ 51.449005][ T8] page_owner tracks the page as allocated [ 51.454714][ T8] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, ts 2001414186, free_ts 0 [ 51.472596][ T8] post_alloc_hook+0x192/0x1b0 [ 51.477356][ T8] prep_new_page+0x1c/0x110 [ 51.481935][ T8] get_page_from_freelist+0x2cc5/0x2d50 [ 51.487478][ T8] __alloc_pages+0x18f/0x440 [ 51.492068][ T8] new_slab+0xa1/0x4d0 [ 51.496140][ T8] ___slab_alloc+0x381/0x810 [ 51.500770][ T8] __slab_alloc+0x49/0x90 [ 51.505208][ T8] kmem_cache_alloc_trace+0x146/0x270 [ 51.510586][ T8] blkg_alloc+0x86/0x590 [ 51.514828][ T8] blkcg_init_queue+0x29/0x210 [ 51.519595][ T8] blk_alloc_queue+0x3d8/0x560 [ 51.524358][ T8] blk_mq_init_queue+0x37/0xd0 [ 51.529209][ T8] scsi_alloc_sdev+0x66c/0x9c0 [ 51.533972][ T8] scsi_probe_and_add_lun+0x18d/0x33b0 [ 51.539431][ T8] __scsi_scan_target+0x1d6/0xb50 [ 51.544455][ T8] scsi_scan_host_selected+0x343/0x5f0 [ 51.549911][ T8] page_owner free stack trace missing [ 51.555274][ T8] [ 51.557596][ T8] Memory state around the buggy address: [ 51.563225][ T8] ffff88810ac82300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 51.571276][ T8] ffff88810ac82380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 51.579329][ T8] >ffff88810ac82400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 51.587382][ T8] ^ [ 51.591702][ T8] ffff88810ac82480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 51.599762][ T8] ffff88810ac82500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 51.607808][ T8] ================================================================== [ 51.616029][ T8] Disabling lock debugging due to kernel taint [ 51.694881][ T30] audit: type=1400 audit(1767682507.249:111): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 51.751651][ T30] audit: type=1400 audit(1767682507.249:112): avc: denied { search } for pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 51.781855][ T30] audit: type=1400 audit(1767682507.249:113): avc: denied { write } for pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 51.803271][ T30] audit: type=1400 audit(1767682507.249:114): avc: denied { add_name } for pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 51.823967][ T30] audit: type=1400 audit(1767682507.249:115): avc: denied { create } for pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 51.844524][ T30] audit: type=1400 audit(1767682507.249:116): avc: denied { append open } for pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 51.867459][ T30] audit: type=1400 audit(1767682507.249:117): avc: denied { getattr } for pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 2026/01/06 06:55:12 executed programs: 511