Warning: Permanently added '10.128.10.39' (ED25519) to the list of known hosts. 2025/08/02 22:01:35 ignoring optional flag "sandboxArg"="0" 2025/08/02 22:01:36 parsed 1 programs [ 67.519585][ T29] kauditd_printk_skb: 30 callbacks suppressed [ 67.519612][ T29] audit: type=1400 audit(1754172096.576:90): avc: denied { create } for pid=439 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 67.545978][ T29] audit: type=1400 audit(1754172096.576:91): avc: denied { write } for pid=439 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 67.566441][ T29] audit: type=1400 audit(1754172096.576:92): avc: denied { read } for pid=439 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 67.586712][ T29] audit: type=1400 audit(1754172096.646:93): avc: denied { unlink } for pid=439 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 67.661550][ T439] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 68.066495][ T29] audit: type=1401 audit(1754172097.126:94): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768" [ 68.123493][ T452] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.130440][ T452] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.137724][ T452] device bridge_slave_0 entered promiscuous mode [ 68.144790][ T452] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.156673][ T452] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.163953][ T452] device bridge_slave_1 entered promiscuous mode [ 68.175536][ T29] audit: type=1400 audit(1754172097.236:95): avc: denied { create } for pid=469 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 68.336325][ T452] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.343232][ T452] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.350428][ T452] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.357369][ T452] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.377794][ T354] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.385116][ T354] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.396973][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.404293][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.414308][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.422415][ T354] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.429291][ T354] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.437522][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.445525][ T354] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.452373][ T354] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.475623][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.483971][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.492688][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.500029][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.507371][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.515319][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.524986][ T452] device veth0_vlan entered promiscuous mode 2025/08/02 22:01:37 executed programs: 0 [ 68.533904][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.542686][ T452] device veth1_macvtap entered promiscuous mode [ 68.551183][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.561451][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.699031][ T496] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.706005][ T496] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.713142][ T496] device bridge_slave_0 entered promiscuous mode [ 68.728173][ T498] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.735081][ T498] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.742172][ T498] device bridge_slave_0 entered promiscuous mode [ 68.749482][ T498] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.756444][ T498] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.764038][ T498] device bridge_slave_1 entered promiscuous mode [ 68.770582][ T496] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.777611][ T496] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.784693][ T496] device bridge_slave_1 entered promiscuous mode [ 68.887830][ T502] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.894774][ T502] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.902318][ T502] device bridge_slave_0 entered promiscuous mode [ 68.909271][ T501] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.916244][ T501] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.923353][ T501] device bridge_slave_0 entered promiscuous mode [ 68.931229][ T501] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.938119][ T501] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.945371][ T501] device bridge_slave_1 entered promiscuous mode [ 68.951790][ T499] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.958967][ T499] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.966121][ T499] device bridge_slave_0 entered promiscuous mode [ 68.972631][ T502] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.979641][ T502] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.986868][ T502] device bridge_slave_1 entered promiscuous mode [ 69.007990][ T499] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.015016][ T499] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.022163][ T499] device bridge_slave_1 entered promiscuous mode [ 69.225241][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.232539][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.244290][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.251709][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.262878][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.270302][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.289595][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.297603][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.304810][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.313032][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.321260][ T354] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.328217][ T354] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.335794][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.343851][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.351858][ T354] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.358747][ T354] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.366195][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.374255][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.382314][ T354] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.389300][ T354] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.396832][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.405503][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.413436][ T354] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.420211][ T354] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.427378][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.434779][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.451878][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.460075][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.468751][ T354] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.475604][ T354] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.483047][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.491233][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.499312][ T354] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.506620][ T354] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.513899][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.521861][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.541644][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.549760][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.557712][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.565746][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.573822][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.592610][ T498] device veth0_vlan entered promiscuous mode [ 69.602010][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.609875][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.617567][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.625304][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.633664][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.642142][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.650079][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.657956][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.665866][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.674010][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.682256][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.690233][ T354] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.697220][ T354] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.704647][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.712904][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.721068][ T354] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.728262][ T354] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.735500][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.742690][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.750180][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.775271][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.782969][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.791100][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.798636][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.806927][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.815093][ T354] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.821919][ T354] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.829227][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.837505][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.845705][ T354] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.852532][ T354] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.860030][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.869476][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.881030][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.891888][ T502] device veth0_vlan entered promiscuous mode [ 69.899524][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.907748][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.916392][ T498] device veth1_macvtap entered promiscuous mode [ 69.937324][ T501] device veth0_vlan entered promiscuous mode [ 69.947371][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.956521][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.964329][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.971730][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.979408][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.990151][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.998266][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.007932][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.016274][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.026903][ T501] device veth1_macvtap entered promiscuous mode [ 70.043369][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.058962][ T29] audit: type=1400 audit(1754172099.116:96): avc: denied { create } for pid=552 comm="syz.1.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 70.065274][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.092090][ T29] audit: type=1400 audit(1754172099.136:97): avc: denied { connect } for pid=552 comm="syz.1.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 70.105276][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.136718][ T29] audit: type=1400 audit(1754172099.136:98): avc: denied { write } for pid=552 comm="syz.1.17" path="socket:[14311]" dev="sockfs" ino=14311 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 70.174710][ T499] device veth0_vlan entered promiscuous mode [ 70.188023][ T496] device veth0_vlan entered promiscuous mode [ 70.194105][ T502] device veth1_macvtap entered promiscuous mode [ 70.200694][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.210706][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.220031][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.228300][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.237487][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.246154][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.254482][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.262468][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.270628][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.285068][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.293135][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.300937][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.309038][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.319576][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.327215][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.334506][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.341986][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.360451][ T499] device veth1_macvtap entered promiscuous mode [ 70.369290][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.379312][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.387791][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.402396][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.411040][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.419857][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.431742][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.445249][ T496] device veth1_macvtap entered promiscuous mode [ 70.474766][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.483431][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.496533][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.504716][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.518769][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.534455][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.542724][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.573585][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.582425][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.596854][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.605202][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.687547][ T52] device bridge_slave_1 left promiscuous mode [ 70.693536][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.737928][ T52] device bridge_slave_0 left promiscuous mode [ 70.756511][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.784140][ T52] device veth1_macvtap left promiscuous mode [ 70.811055][ T52] device veth0_vlan left promiscuous mode [ 72.942772][ T10] ================================================================== [ 72.950764][ T10] BUG: KASAN: use-after-free in l2tp_session_delete+0x1e/0x440 [ 72.958323][ T10] Write of size 8 at addr ffff88812c1ab408 by task kworker/u4:1/10 [ 72.966248][ T10] [ 72.968500][ T10] CPU: 0 PID: 10 Comm: kworker/u4:1 Not tainted 5.15.189-syzkaller #0 [ 72.976488][ T10] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 72.986687][ T10] Workqueue: l2tp l2tp_tunnel_del_work [ 72.992079][ T10] Call Trace: [ 72.995197][ T10] [ 72.997961][ T10] dump_stack_lvl+0x38/0x49 [ 73.002466][ T10] print_address_description.constprop.0+0x24/0x160 [ 73.008896][ T10] ? l2tp_session_delete+0x1e/0x440 [ 73.014027][ T10] kasan_report.cold+0x82/0xdb [ 73.018779][ T10] ? l2tp_session_delete+0x1e/0x440 [ 73.023807][ T10] kasan_check_range+0x148/0x190 [ 73.028601][ T10] __kasan_check_write+0x14/0x20 [ 73.033350][ T10] l2tp_session_delete+0x1e/0x440 [ 73.038208][ T10] l2tp_tunnel_del_work+0x182/0x400 [ 73.043246][ T10] process_one_work+0x62c/0xec0 [ 73.048028][ T10] worker_thread+0x48e/0xdb0 [ 73.052449][ T10] ? rescuer_thread+0xc30/0xc30 [ 73.057139][ T10] kthread+0x324/0x3e0 [ 73.061035][ T10] ? set_kthread_struct+0x100/0x100 [ 73.066069][ T10] ret_from_fork+0x1f/0x30 [ 73.070323][ T10] [ 73.073272][ T10] [ 73.075447][ T10] Allocated by task 1035: [ 73.079622][ T10] kasan_save_stack+0x26/0x50 [ 73.084209][ T10] __kasan_kmalloc+0xae/0xe0 [ 73.088640][ T10] __kmalloc+0x2e6/0x550 [ 73.092714][ T10] l2tp_session_create+0x38/0xa80 [ 73.097664][ T10] pppol2tp_connect+0xe03/0x1910 [ 73.102572][ T10] __sys_connect_file+0x136/0x190 [ 73.107430][ T10] __sys_connect+0x101/0x130 [ 73.111847][ T10] __x64_sys_connect+0x6e/0xb0 [ 73.116453][ T10] x64_sys_call+0x85c/0x990 [ 73.120788][ T10] do_syscall_64+0x33/0xb0 [ 73.125041][ T10] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 73.130862][ T10] [ 73.133032][ T10] Freed by task 13: [ 73.136790][ T10] kasan_save_stack+0x26/0x50 [ 73.141289][ T10] kasan_set_track+0x25/0x30 [ 73.145709][ T10] kasan_set_free_info+0x24/0x40 [ 73.150485][ T10] __kasan_slab_free+0x111/0x150 [ 73.155364][ T10] slab_free_freelist_hook+0x94/0x1a0 [ 73.160546][ T10] kfree+0xc2/0x2a0 [ 73.164200][ T10] l2tp_session_dec_refcount+0x7a/0x130 [ 73.169580][ T10] pppol2tp_session_destruct+0xa3/0xd0 [ 73.174866][ T10] __sk_destruct+0x42/0x520 [ 73.179223][ T10] sk_destruct+0x9b/0xc0 [ 73.183288][ T10] __sk_free+0xd1/0x350 [ 73.187276][ T10] sk_free+0x45/0x60 [ 73.191013][ T10] pppol2tp_put_sk+0x66/0x90 [ 73.195525][ T10] rcu_do_batch+0x340/0xca0 [ 73.199864][ T10] rcu_core+0x56b/0xac0 [ 73.203853][ T10] rcu_core_si+0x9/0x10 [ 73.207848][ T10] handle_softirqs+0x1c5/0x510 [ 73.212716][ T10] run_ksoftirqd+0x2b/0x40 [ 73.216924][ T10] smpboot_thread_fn+0x502/0x7b0 [ 73.221703][ T10] kthread+0x324/0x3e0 [ 73.225717][ T10] ret_from_fork+0x1f/0x30 [ 73.229963][ T10] [ 73.232124][ T10] Last potentially related work creation: [ 73.237866][ T10] kasan_save_stack+0x26/0x50 [ 73.242397][ T10] __kasan_record_aux_stack+0xd8/0xf0 [ 73.247573][ T10] kasan_record_aux_stack_noalloc+0xb/0x10 [ 73.253563][ T10] __call_rcu_common.constprop.0+0xd1/0x1180 [ 73.259381][ T10] call_rcu+0x9/0x10 [ 73.263105][ T10] pppol2tp_release+0x292/0x3e0 [ 73.267794][ T10] __sock_release+0xc2/0x270 [ 73.272226][ T10] sock_close+0x10/0x20 [ 73.276212][ T10] __fput+0x319/0x960 [ 73.280043][ T10] ____fput+0x9/0x10 [ 73.283770][ T10] task_work_run+0xc2/0x150 [ 73.288191][ T10] exit_to_user_mode_prepare+0x143/0x150 [ 73.293763][ T10] syscall_exit_to_user_mode+0x21/0x40 [ 73.299046][ T10] do_syscall_64+0x40/0xb0 [ 73.303731][ T10] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 73.309563][ T10] [ 73.311732][ T10] The buggy address belongs to the object at ffff88812c1ab400 [ 73.311732][ T10] which belongs to the cache kmalloc-512 of size 512 [ 73.325778][ T10] The buggy address is located 8 bytes inside of [ 73.325778][ T10] 512-byte region [ffff88812c1ab400, ffff88812c1ab600) [ 73.338882][ T10] The buggy address belongs to the page: [ 73.344538][ T10] page:ffffea0004b06a00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x12c1a8 [ 73.354626][ T10] head:ffffea0004b06a00 order:2 compound_mapcount:0 compound_pincount:0 [ 73.362864][ T10] flags: 0x4000000000010200(slab|head|zone=1) [ 73.368758][ T10] raw: 4000000000010200 ffffea000464e100 0000000600000006 ffff888100042f00 [ 73.377184][ T10] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 73.385582][ T10] page dumped because: kasan: bad access detected [ 73.392016][ T10] page_owner tracks the page as allocated [ 73.397668][ T10] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x1d2a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 38, ts 71113681878, free_ts 70361450811 [ 73.417621][ T10] prep_new_page+0x1a2/0x310 [ 73.422139][ T10] get_page_from_freelist+0x1ce2/0x30a0 [ 73.427513][ T10] __alloc_pages+0x300/0x2c90 [ 73.432035][ T10] allocate_slab+0x39d/0x530 [ 73.436469][ T10] ___slab_alloc.constprop.0+0x3ca/0x890 [ 73.442021][ T10] __slab_alloc.constprop.0+0x42/0x80 [ 73.447222][ T10] __kmalloc_track_caller+0x501/0x540 [ 73.452422][ T10] __alloc_skb+0x8b/0x250 [ 73.456587][ T10] ndisc_alloc_skb+0xdf/0x310 [ 73.461100][ T10] ndisc_send_rs+0x2de/0x630 [ 73.465530][ T10] addrconf_dad_completed+0x2ea/0xd70 [ 73.470860][ T10] addrconf_dad_work+0x62d/0x1100 [ 73.475714][ T10] process_one_work+0x62c/0xec0 [ 73.480407][ T10] worker_thread+0x48e/0xdb0 [ 73.484916][ T10] kthread+0x324/0x3e0 [ 73.488820][ T10] ret_from_fork+0x1f/0x30 [ 73.493079][ T10] page last free stack trace: [ 73.497684][ T10] __free_pages_ok+0x65f/0xbe0 [ 73.502292][ T10] __free_pages+0xc3/0xf0 [ 73.506455][ T10] kfree+0x242/0x2a0 [ 73.510194][ T10] skb_free_head+0xb8/0x110 [ 73.514531][ T10] pskb_expand_head+0x270/0xdd0 [ 73.519231][ T10] l2tp_xmit_skb+0xa1b/0x1780 [ 73.523721][ T10] pppol2tp_sendmsg+0x426/0x670 [ 73.528856][ T10] __sock_sendmsg+0xb5/0xf0 [ 73.533202][ T10] sock_write_iter+0x223/0x430 [ 73.537784][ T10] do_iter_readv_writev+0x34b/0x850 [ 73.542824][ T10] do_iter_write+0x125/0x620 [ 73.547252][ T10] vfs_writev+0x186/0x4a0 [ 73.551587][ T10] do_writev+0x213/0x2d0 [ 73.555839][ T10] __x64_sys_writev+0x70/0xb0 [ 73.560374][ T10] x64_sys_call+0x8f6/0x990 [ 73.564693][ T10] do_syscall_64+0x33/0xb0 [ 73.568953][ T10] [ 73.571109][ T10] Memory state around the buggy address: [ 73.576579][ T10] ffff88812c1ab300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 73.584568][ T10] ffff88812c1ab380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc 2025/08/02 22:01:42 executed programs: 249 [ 73.592637][ T10] >ffff88812c1ab400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 73.600536][ T10] ^ [ 73.604700][ T10] ffff88812c1ab480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 73.612609][ T10] ffff88812c1ab500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 73.620505][ T10] ================================================================== [ 73.628407][ T10] Disabling lock debugging due to kernel taint [ 73.663790][ T29] audit: type=1400 audit(1754172102.706:99): avc: denied { read } for pid=79 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 73.741140][ T29] audit: type=1400 audit(1754172102.706:100): avc: denied { search } for pid=79 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 73.762633][ T29] audit: type=1400 audit(1754172102.706:101): avc: denied { write } for pid=79 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 73.785267][ T29] audit: type=1400 audit(1754172102.706:102): avc: denied { add_name } for pid=79 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 73.805943][ T29] audit: type=1400 audit(1754172102.706:103): avc: denied { create } for pid=79 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 73.830574][ T29] audit: type=1400 audit(1754172102.706:104): avc: denied { append open } for pid=79 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 73.856178][ T29] audit: type=1400 audit(1754172102.706:105): avc: denied { getattr } for pid=79 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 2025/08/02 22:01:47 executed programs: 509