Warning: Permanently added '10.128.0.175' (ED25519) to the list of known hosts. 2026/09/05 11:45:40 parsed 1 programs 2026/09/05 11:45:40 serving rpc on tcp://42957 Setting up swapspace version 1, size = 127995904 bytes [ 34.721091][ T36] kauditd_printk_skb: 34 callbacks suppressed [ 34.721109][ T36] audit: type=1400 audit(1788608741.990:108): avc: denied { unlink } for pid=421 comm="syz-executor" name="swap-file" dev="sda1" ino=2027 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 34.779533][ T421] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 35.867536][ T444] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.884467][ T444] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.891747][ T444] bridge_slave_0: entered allmulticast mode [ 35.898262][ T444] bridge_slave_0: entered promiscuous mode [ 35.905087][ T444] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.912298][ T444] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.920010][ T444] bridge_slave_1: entered allmulticast mode [ 35.926374][ T444] bridge_slave_1: entered promiscuous mode [ 36.153355][ T444] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.160531][ T444] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.167806][ T444] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.174877][ T444] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.307714][ T36] audit: type=1401 audit(1788608743.570:109): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768" [ 36.331872][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.342558][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.352714][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.359756][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.383054][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.390140][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.478362][ T444] veth0_vlan: entered promiscuous mode [ 36.498283][ T444] veth1_macvtap: entered promiscuous mode 2026/09/05 11:45:43 executed programs: 0 [ 36.731838][ T12] bridge_slave_1: left allmulticast mode [ 36.737511][ T12] bridge_slave_1: left promiscuous mode [ 36.743316][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.750826][ T12] bridge_slave_0: left allmulticast mode [ 36.756547][ T12] bridge_slave_0: left promiscuous mode [ 36.762503][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.911783][ T12] veth1_macvtap: left promiscuous mode [ 36.917312][ T12] veth0_vlan: left promiscuous mode [ 36.959361][ T492] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.966476][ T492] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.973655][ T492] bridge_slave_0: entered allmulticast mode [ 36.980013][ T492] bridge_slave_0: entered promiscuous mode [ 36.987696][ T492] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.994770][ T492] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.005451][ T492] bridge_slave_1: entered allmulticast mode [ 37.012110][ T492] bridge_slave_1: entered promiscuous mode [ 37.040621][ T491] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.047689][ T491] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.055281][ T491] bridge_slave_0: entered allmulticast mode [ 37.061629][ T491] bridge_slave_0: entered promiscuous mode [ 37.071041][ T491] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.078093][ T491] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.085395][ T491] bridge_slave_1: entered allmulticast mode [ 37.092134][ T491] bridge_slave_1: entered promiscuous mode [ 37.128109][ T493] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.135222][ T493] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.142387][ T493] bridge_slave_0: entered allmulticast mode [ 37.148733][ T493] bridge_slave_0: entered promiscuous mode [ 37.165412][ T489] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.172491][ T489] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.179724][ T489] bridge_slave_0: entered allmulticast mode [ 37.186054][ T489] bridge_slave_0: entered promiscuous mode [ 37.195440][ T489] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.202611][ T489] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.209662][ T489] bridge_slave_1: entered allmulticast mode [ 37.216094][ T489] bridge_slave_1: entered promiscuous mode [ 37.225251][ T493] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.232368][ T493] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.239505][ T493] bridge_slave_1: entered allmulticast mode [ 37.245825][ T493] bridge_slave_1: entered promiscuous mode [ 37.366290][ T492] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.373371][ T492] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.380660][ T492] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.387682][ T492] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.403189][ T493] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.410432][ T493] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.417700][ T493] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.424771][ T493] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.433064][ T491] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.440302][ T491] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.447619][ T491] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.454665][ T491] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.497439][ T489] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.504514][ T489] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.511806][ T489] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.518919][ T489] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.546316][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.553808][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.561220][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.568911][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.576207][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.583499][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.590803][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.598060][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.616207][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.623380][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.631114][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.638154][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.655443][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.662514][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.670268][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.677325][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.690601][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.697656][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.705492][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.712552][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.720696][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.727761][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.751178][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.758265][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.782337][ T493] veth0_vlan: entered promiscuous mode [ 37.805761][ T493] veth1_macvtap: entered promiscuous mode [ 37.821017][ T491] veth0_vlan: entered promiscuous mode [ 37.833828][ T489] veth0_vlan: entered promiscuous mode [ 37.839462][ T492] veth0_vlan: entered promiscuous mode [ 37.852713][ T491] veth1_macvtap: entered promiscuous mode [ 37.863750][ T489] veth1_macvtap: entered promiscuous mode [ 37.898941][ T492] veth1_macvtap: entered promiscuous mode [ 37.926343][ T36] audit: type=1400 audit(1788608745.190:110): avc: denied { mount } for pid=506 comm="syz.4.20" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 37.948104][ T36] audit: type=1400 audit(1788608745.200:111): avc: denied { unmount } for pid=491 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 40.421145][ T1331] ================================================================== [ 40.429357][ T1331] BUG: KASAN: slab-use-after-free in strcmp+0x70/0xc0 [ 40.436165][ T1331] Read of size 1 at addr ffff8881087f42a0 by task syz.0.428/1331 [ 40.443882][ T1331] [ 40.446211][ T1331] CPU: 0 UID: 0 PID: 1331 Comm: syz.0.428 Not tainted syzkaller #0 2fae66520383d288bcf9fac971035d980e6c913c [ 40.446230][ T1331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 40.446243][ T1331] Call Trace: [ 40.446249][ T1331] [ 40.446255][ T1331] __dump_stack+0x21/0x30 [ 40.446274][ T1331] dump_stack_lvl+0x140/0x1c0 [ 40.446289][ T1331] ? __cfi_dump_stack_lvl+0x10/0x10 [ 40.446304][ T1331] print_address_description+0x71/0x210 [ 40.446320][ T1331] print_report+0x4a/0x70 [ 40.446333][ T1331] kasan_report+0x162/0x1a0 [ 40.446348][ T1331] ? strcmp+0x70/0xc0 [ 40.446361][ T1331] ? strcmp+0x70/0xc0 [ 40.446373][ T1331] __asan_report_load1_noabort+0x18/0x20 [ 40.446383][ T1331] strcmp+0x70/0xc0 [ 40.446395][ T1331] algorithm_params_store+0x425/0x790 [ 40.446410][ T1331] ? __cfi_algorithm_params_store+0x10/0x10 [ 40.446425][ T1331] ? __virt_addr_valid+0x2a1/0x370 [ 40.446439][ T1331] ? __kasan_check_write+0x18/0x20 [ 40.446450][ T1331] ? __cfi_algorithm_params_store+0x10/0x10 [ 40.446464][ T1331] dev_attr_store+0x76/0xa0 [ 40.446475][ T1331] ? __cfi_dev_attr_store+0x10/0x10 [ 40.446486][ T1331] sysfs_kf_write+0x13e/0x160 [ 40.446498][ T1331] ? __cfi_sysfs_kf_write+0x10/0x10 [ 40.446508][ T1331] kernfs_fop_write_iter+0x316/0x510 [ 40.446526][ T1331] vfs_write+0x762/0xfd0 [ 40.446538][ T1331] ? __cfi_vfs_write+0x10/0x10 [ 40.446549][ T1331] ? __cfi_mutex_lock+0x10/0x10 [ 40.446562][ T1331] ksys_write+0x145/0x260 [ 40.446573][ T1331] ? __cfi_ksys_write+0x10/0x10 [ 40.446584][ T1331] ? __kasan_check_write+0x18/0x20 [ 40.446594][ T1331] ? fpregs_restore_userregs+0x11c/0x260 [ 40.446608][ T1331] __x64_sys_write+0x7f/0x90 [ 40.446625][ T1331] x64_sys_call+0x271c/0x2ee0 [ 40.446634][ T1331] do_syscall_64+0x57/0xf0 [ 40.446650][ T1331] ? clear_bhb_loop+0x50/0xa0 [ 40.446662][ T1331] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 40.446674][ T1331] RIP: 0033:0x7f3c6e59df99 [ 40.446688][ T1331] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 40.446697][ T1331] RSP: 002b:00007f3c6e3ff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 40.446714][ T1331] RAX: ffffffffffffffda RBX: 00007f3c6e825fa0 RCX: 00007f3c6e59df99 [ 40.446723][ T1331] RDX: 000000000000001d RSI: 0000200000000400 RDI: 0000000000000004 [ 40.446730][ T1331] RBP: 00007f3c6e634ec4 R08: 0000000000000000 R09: 0000000000000000 [ 40.446737][ T1331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 40.446743][ T1331] R13: 00007f3c6e826038 R14: 00007f3c6e825fa0 R15: 00007ffcb5d91198 [ 40.446752][ T1331] [ 40.446756][ T1331] [ 40.711035][ T1331] Allocated by task 1331: [ 40.715347][ T1331] kasan_save_track+0x3e/0x80 [ 40.720012][ T1331] kasan_save_alloc_info+0x3a/0x50 [ 40.725108][ T1331] __kasan_kmalloc+0x96/0xb0 [ 40.729687][ T1331] __kmalloc_node_track_caller_noprof+0x24e/0x4f0 [ 40.736091][ T1331] kstrdup+0x4d/0x130 [ 40.740068][ T1331] __comp_algorithm_store+0x5c/0x250 [ 40.745341][ T1331] comp_algorithm_store+0x6e/0xb0 [ 40.750352][ T1331] dev_attr_store+0x76/0xa0 [ 40.754863][ T1331] sysfs_kf_write+0x13e/0x160 [ 40.759531][ T1331] kernfs_fop_write_iter+0x316/0x510 [ 40.764809][ T1331] vfs_write+0x762/0xfd0 [ 40.769299][ T1331] ksys_write+0x145/0x260 [ 40.773804][ T1331] __x64_sys_write+0x7f/0x90 [ 40.778474][ T1331] x64_sys_call+0x271c/0x2ee0 [ 40.783237][ T1331] do_syscall_64+0x57/0xf0 [ 40.787818][ T1331] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 40.793901][ T1331] [ 40.796215][ T1331] Freed by task 1332: [ 40.800174][ T1331] kasan_save_track+0x3e/0x80 [ 40.804858][ T1331] kasan_save_free_info+0x44/0x50 [ 40.809961][ T1331] __kasan_slab_free+0x5f/0x80 [ 40.814719][ T1331] kfree+0x158/0x440 [ 40.818616][ T1331] __comp_algorithm_store+0x190/0x250 [ 40.823998][ T1331] comp_algorithm_store+0x6e/0xb0 [ 40.829106][ T1331] dev_attr_store+0x76/0xa0 [ 40.833637][ T1331] sysfs_kf_write+0x13e/0x160 [ 40.838399][ T1331] kernfs_fop_write_iter+0x316/0x510 [ 40.843684][ T1331] vfs_write+0x762/0xfd0 [ 40.848007][ T1331] ksys_write+0x145/0x260 [ 40.852331][ T1331] __x64_sys_write+0x7f/0x90 [ 40.856907][ T1331] x64_sys_call+0x271c/0x2ee0 [ 40.861578][ T1331] do_syscall_64+0x57/0xf0 [ 40.866082][ T1331] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 40.871987][ T1331] [ 40.874298][ T1331] The buggy address belongs to the object at ffff8881087f42a0 [ 40.874298][ T1331] which belongs to the cache kmalloc-8 of size 8 [ 40.887990][ T1331] The buggy address is located 0 bytes inside of [ 40.887990][ T1331] freed 8-byte region [ffff8881087f42a0, ffff8881087f42a8) [ 40.901432][ T1331] [ 40.903749][ T1331] The buggy address belongs to the physical page: [ 40.910167][ T1331] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1087f4 [ 40.919008][ T1331] flags: 0x4000000000000000(zone=1) [ 40.924187][ T1331] page_type: f5(slab) [ 40.928505][ T1331] raw: 4000000000000000 ffff888100041500 dead000000000100 dead000000000122 [ 40.937337][ T1331] raw: 0000000000000000 0000000080800080 00000001f5000000 0000000000000000 [ 40.945901][ T1331] page dumped because: kasan: bad access detected [ 40.952357][ T1331] page_owner tracks the page as allocated [ 40.958141][ T1331] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 1, tgid 1 (swapper/0), ts 3358162282, free_ts 0 [ 40.975849][ T1331] post_alloc_hook+0x37d/0x3b0 [ 40.980629][ T1331] prep_new_page+0x2d/0x180 [ 40.985212][ T1331] get_page_from_freelist+0x4aea/0x4ba0 [ 40.990750][ T1331] __alloc_pages_noprof+0x35a/0x7e0 [ 40.996116][ T1331] alloc_slab_page+0x6b/0x1e0 [ 41.000778][ T1331] allocate_slab+0x69/0x430 [ 41.005523][ T1331] ___slab_alloc+0x591/0x8c0 [ 41.010093][ T1331] __kmalloc_node_track_caller_noprof+0x2e3/0x4f0 [ 41.016488][ T1331] kstrdup+0x4d/0x130 [ 41.020472][ T1331] kstrdup_const+0x45/0x60 [ 41.024871][ T1331] __kernfs_new_node+0xaa/0x740 [ 41.029713][ T1331] kernfs_new_node+0x154/0x280 [ 41.034471][ T1331] kernfs_create_dir_ns+0x4b/0x130 [ 41.039589][ T1331] sysfs_create_dir_ns+0x127/0x210 [ 41.044689][ T1331] kobject_add_internal+0x71f/0xc20 [ 41.049876][ T1331] kobject_init_and_add+0x12c/0x1a0 [ 41.055066][ T1331] page_owner free stack trace missing [ 41.060428][ T1331] [ 41.062749][ T1331] Memory state around the buggy address: [ 41.068451][ T1331] ffff8881087f4180: 04 fc fc fc fa fc fc fc 06 fc fc fc fa fc fc fc [ 41.076586][ T1331] ffff8881087f4200: 04 fc fc fc fa fc fc fc 04 fc fc fc fa fc fc fc [ 41.084820][ T1331] >ffff8881087f4280: 05 fc fc fc fa fc fc fc fa fc fc fc 06 fc fc fc [ 41.094456][ T1331] ^ [ 41.100265][ T1331] ffff8881087f4300: fa fc fc fc 06 fc fc fc fa fc fc fc fa fc fc fc [ 41.108977][ T1331] ffff8881087f4380: fa fc fc fc fa fc fc fc 00 fc fc fc fa fc fc fc [ 41.117047][ T1331] ================================================================== [ 41.127374][ T1331] Disabling lock debugging due to kernel taint [ 41.130761][ T36] audit: type=1400 audit(1788608748.390:112): avc: denied { read } for pid=92 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 41.155725][ T36] audit: type=1400 audit(1788608748.390:113): avc: denied { search } for pid=92 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 41.191941][ T36] audit: type=1400 audit(1788608748.390:114): avc: denied { write } for pid=92 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 41.213537][ T36] audit: type=1400 audit(1788608748.390:115): avc: denied { add_name } for pid=92 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 41.234615][ T36] audit: type=1400 audit(1788608748.390:116): avc: denied { create } for pid=92 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 41.257025][ T36] audit: type=1400 audit(1788608748.390:117): avc: denied { append open } for pid=92 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 41.283859][ T36] audit: type=1400 audit(1788608748.390:118): avc: denied { getattr } for pid=92 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 2026/09/05 11:45:48 executed programs: 490 2026/09/05 11:45:53 executed programs: 1455