Warning: Permanently added '10.128.10.14' (ED25519) to the list of known hosts. 2026/09/05 12:04:12 parsed 1 programs 2026/09/05 12:04:12 serving rpc on tcp://45375 Setting up swapspace version 1, size = 127995904 bytes [ 48.560674][ T36] audit: type=1400 audit(1788609854.080:106): avc: denied { unlink } for pid=423 comm="syz-executor" name="swap-file" dev="sda1" ino=2027 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 48.620184][ T423] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 49.808911][ T36] audit: type=1400 audit(1788609855.320:107): avc: denied { create } for pid=448 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 50.186903][ T459] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.194963][ T459] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.202916][ T459] bridge_slave_0: entered allmulticast mode [ 50.209877][ T459] bridge_slave_0: entered promiscuous mode [ 50.221952][ T459] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.237075][ T459] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.261809][ T459] bridge_slave_1: entered allmulticast mode [ 50.288674][ T459] bridge_slave_1: entered promiscuous mode [ 50.394997][ T36] audit: type=1401 audit(1788609855.910:108): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768" [ 50.516886][ T459] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.524247][ T459] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.533201][ T459] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.540779][ T459] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.619315][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.627117][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.649896][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.657272][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.685126][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.692507][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.725368][ T459] veth0_vlan: entered promiscuous mode [ 50.740681][ T459] veth1_macvtap: entered promiscuous mode 2026/09/05 12:04:16 executed programs: 0 [ 51.004168][ T491] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.011603][ T491] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.019232][ T491] bridge_slave_0: entered allmulticast mode [ 51.026022][ T491] bridge_slave_0: entered promiscuous mode [ 51.034403][ T491] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.042240][ T491] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.049606][ T491] bridge_slave_1: entered allmulticast mode [ 51.056608][ T491] bridge_slave_1: entered promiscuous mode [ 51.110617][ T496] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.117711][ T496] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.125008][ T496] bridge_slave_0: entered allmulticast mode [ 51.131897][ T496] bridge_slave_0: entered promiscuous mode [ 51.140422][ T496] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.147601][ T496] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.154935][ T496] bridge_slave_1: entered allmulticast mode [ 51.162381][ T496] bridge_slave_1: entered promiscuous mode [ 51.191137][ T12] bridge_slave_1: left allmulticast mode [ 51.197195][ T12] bridge_slave_1: left promiscuous mode [ 51.203234][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.210976][ T12] bridge_slave_0: left allmulticast mode [ 51.217224][ T12] bridge_slave_0: left promiscuous mode [ 51.223162][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.294990][ T494] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.303154][ T494] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.310757][ T494] bridge_slave_0: entered allmulticast mode [ 51.317173][ T494] bridge_slave_0: entered promiscuous mode [ 51.327137][ T494] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.334979][ T494] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.342989][ T494] bridge_slave_1: entered allmulticast mode [ 51.350074][ T494] bridge_slave_1: entered promiscuous mode [ 51.375227][ T12] veth1_macvtap: left promiscuous mode [ 51.381226][ T12] veth0_vlan: left promiscuous mode [ 51.453814][ T495] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.461199][ T495] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.469202][ T495] bridge_slave_0: entered allmulticast mode [ 51.475646][ T495] bridge_slave_0: entered promiscuous mode [ 51.493602][ T495] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.501314][ T495] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.508683][ T495] bridge_slave_1: entered allmulticast mode [ 51.515216][ T495] bridge_slave_1: entered promiscuous mode [ 51.648773][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.656093][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.678140][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.685400][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.731828][ T491] veth0_vlan: entered promiscuous mode [ 51.759459][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.766925][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.775154][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.782597][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.797792][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.804927][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.812893][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.820016][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.835868][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.843664][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.853691][ T491] veth1_macvtap: entered promiscuous mode [ 51.870198][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.877367][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.929225][ T36] audit: type=1400 audit(1788609857.440:109): avc: denied { mount } for pid=509 comm="syz.5.17" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 51.952693][ T36] audit: type=1400 audit(1788609857.460:110): avc: denied { unmount } for pid=491 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 51.982453][ T495] veth0_vlan: entered promiscuous mode [ 52.012610][ T496] veth0_vlan: entered promiscuous mode [ 52.027271][ T495] veth1_macvtap: entered promiscuous mode [ 52.063693][ T494] veth0_vlan: entered promiscuous mode [ 52.086321][ T496] veth1_macvtap: entered promiscuous mode [ 52.103586][ T494] veth1_macvtap: entered promiscuous mode [ 53.920486][ T1008] ================================================================== [ 53.929774][ T1008] BUG: KASAN: slab-use-after-free in strcmp+0x70/0xc0 [ 53.938091][ T1008] Read of size 1 at addr ffff8881006c40c0 by task syz.5.264/1008 [ 53.946811][ T1008] [ 53.949280][ T1008] CPU: 1 UID: 0 PID: 1008 Comm: syz.5.264 Not tainted syzkaller #0 ad407e8f17cc85d21b6f9c449a44e5b2e6da0b56 [ 53.949314][ T1008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 53.949347][ T1008] Call Trace: [ 53.949356][ T1008] [ 53.949365][ T1008] __dump_stack+0x21/0x30 [ 53.949405][ T1008] dump_stack_lvl+0x140/0x1c0 [ 53.949436][ T1008] ? __cfi_dump_stack_lvl+0x10/0x10 [ 53.949472][ T1008] print_address_description+0x71/0x210 [ 53.949509][ T1008] print_report+0x4a/0x70 [ 53.949540][ T1008] kasan_report+0x162/0x1a0 [ 53.949572][ T1008] ? strcmp+0x70/0xc0 [ 53.949602][ T1008] ? strcmp+0x70/0xc0 [ 53.949630][ T1008] __asan_report_load1_noabort+0x18/0x20 [ 53.949656][ T1008] strcmp+0x70/0xc0 [ 53.949685][ T1008] algorithm_params_store+0x425/0x790 [ 53.949720][ T1008] ? __cfi_algorithm_params_store+0x10/0x10 [ 53.949753][ T1008] ? __virt_addr_valid+0x2a1/0x370 [ 53.949783][ T1008] ? __kasan_check_write+0x18/0x20 [ 53.949806][ T1008] ? __cfi_algorithm_params_store+0x10/0x10 [ 53.949839][ T1008] dev_attr_store+0x76/0xa0 [ 53.949864][ T1008] ? __cfi_dev_attr_store+0x10/0x10 [ 53.949889][ T1008] sysfs_kf_write+0x13e/0x160 [ 53.949923][ T1008] ? __cfi_sysfs_kf_write+0x10/0x10 [ 53.949947][ T1008] kernfs_fop_write_iter+0x316/0x510 [ 53.949983][ T1008] vfs_write+0x762/0xfd0 [ 53.950009][ T1008] ? __cfi_vfs_write+0x10/0x10 [ 53.950034][ T1008] ? __cfi_mutex_lock+0x10/0x10 [ 53.950063][ T1008] ksys_write+0x145/0x260 [ 53.950087][ T1008] ? xfd_validate_state+0x68/0x140 [ 53.950120][ T1008] ? __cfi_ksys_write+0x10/0x10 [ 53.950144][ T1008] ? __kasan_check_write+0x18/0x20 [ 53.950168][ T1008] ? fpregs_restore_userregs+0x11c/0x260 [ 53.950199][ T1008] __x64_sys_write+0x7f/0x90 [ 53.950221][ T1008] x64_sys_call+0x271c/0x2ee0 [ 53.950241][ T1008] do_syscall_64+0x57/0xf0 [ 53.950282][ T1008] ? clear_bhb_loop+0x50/0xa0 [ 53.950309][ T1008] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 53.950335][ T1008] RIP: 0033:0x7f44ad19df99 [ 53.950366][ T1008] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 53.950386][ T1008] RSP: 002b:00007f44acfeb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 53.950422][ T1008] RAX: ffffffffffffffda RBX: 00007f44ad425fa0 RCX: 00007f44ad19df99 [ 53.950439][ T1008] RDX: 000000000000001d RSI: 0000200000000400 RDI: 0000000000000004 [ 53.950455][ T1008] RBP: 00007f44ad234ec4 R08: 0000000000000000 R09: 0000000000000000 [ 53.950471][ T1008] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 53.950486][ T1008] R13: 00007f44ad426038 R14: 00007f44ad425fa0 R15: 00007fffb5520388 [ 53.950506][ T1008] [ 53.950515][ T1008] [ 54.238479][ T1008] Allocated by task 1008: [ 54.243582][ T1008] kasan_save_track+0x3e/0x80 [ 54.248867][ T1008] kasan_save_alloc_info+0x3a/0x50 [ 54.254367][ T1008] __kasan_kmalloc+0x96/0xb0 [ 54.259012][ T1008] __kmalloc_node_track_caller_noprof+0x24e/0x4f0 [ 54.265560][ T1008] kstrdup+0x4d/0x130 [ 54.269590][ T1008] __comp_algorithm_store+0x5c/0x250 [ 54.274936][ T1008] comp_algorithm_store+0x6e/0xb0 [ 54.280078][ T1008] dev_attr_store+0x76/0xa0 [ 54.284609][ T1008] sysfs_kf_write+0x13e/0x160 [ 54.289323][ T1008] kernfs_fop_write_iter+0x316/0x510 [ 54.295029][ T1008] vfs_write+0x762/0xfd0 [ 54.299739][ T1008] ksys_write+0x145/0x260 [ 54.304125][ T1008] __x64_sys_write+0x7f/0x90 [ 54.308850][ T1008] x64_sys_call+0x271c/0x2ee0 [ 54.313628][ T1008] do_syscall_64+0x57/0xf0 [ 54.318103][ T1008] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 54.324255][ T1008] [ 54.326613][ T1008] Freed by task 1010: [ 54.330686][ T1008] kasan_save_track+0x3e/0x80 [ 54.335484][ T1008] kasan_save_free_info+0x44/0x50 [ 54.340722][ T1008] __kasan_slab_free+0x5f/0x80 [ 54.345824][ T1008] kfree+0x158/0x440 [ 54.349845][ T1008] __comp_algorithm_store+0x190/0x250 [ 54.355881][ T1008] comp_algorithm_store+0x6e/0xb0 [ 54.360981][ T1008] dev_attr_store+0x76/0xa0 [ 54.365710][ T1008] sysfs_kf_write+0x13e/0x160 [ 54.370500][ T1008] kernfs_fop_write_iter+0x316/0x510 [ 54.375943][ T1008] vfs_write+0x762/0xfd0 [ 54.380472][ T1008] ksys_write+0x145/0x260 [ 54.384834][ T1008] __x64_sys_write+0x7f/0x90 [ 54.389809][ T1008] x64_sys_call+0x271c/0x2ee0 [ 54.394600][ T1008] do_syscall_64+0x57/0xf0 [ 54.399177][ T1008] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 54.405221][ T1008] [ 54.408180][ T1008] The buggy address belongs to the object at ffff8881006c40c0 [ 54.408180][ T1008] which belongs to the cache kmalloc-8 of size 8 [ 54.423358][ T1008] The buggy address is located 0 bytes inside of [ 54.423358][ T1008] freed 8-byte region [ffff8881006c40c0, ffff8881006c40c8) [ 54.437311][ T1008] [ 54.439756][ T1008] The buggy address belongs to the physical page: [ 54.448253][ T1008] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1006c4 [ 54.457783][ T1008] flags: 0x4000000000000000(zone=1) [ 54.463220][ T1008] page_type: f5(slab) [ 54.467482][ T1008] raw: 4000000000000000 ffff888100041500 ffffea00042afb00 dead000000000002 [ 54.476535][ T1008] raw: 0000000000000000 0000000080800080 00000001f5000000 0000000000000000 [ 54.485529][ T1008] page dumped because: kasan: bad access detected [ 54.492173][ T1008] page_owner tracks the page as allocated [ 54.498260][ T1008] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 1, tgid 1 (swapper/0), ts 2956326695, free_ts 0 [ 54.516629][ T1008] post_alloc_hook+0x37d/0x3b0 [ 54.521519][ T1008] prep_new_page+0x2d/0x180 [ 54.526143][ T1008] get_page_from_freelist+0x4aea/0x4ba0 [ 54.532081][ T1008] __alloc_pages_noprof+0x35a/0x7e0 [ 54.537344][ T1008] alloc_slab_page+0x6b/0x1e0 [ 54.542184][ T1008] allocate_slab+0x69/0x430 [ 54.546799][ T1008] ___slab_alloc+0x591/0x8c0 [ 54.551441][ T1008] __kmalloc_noprof+0x2fc/0x510 [ 54.556572][ T1008] acpi_ns_internalize_name+0x2df/0x490 [ 54.562500][ T1008] acpi_ns_get_node+0x1ab/0x360 [ 54.567640][ T1008] acpi_ns_evaluate+0x373/0xa60 [ 54.573308][ T1008] acpi_ut_evaluate_object+0x15a/0x5b0 [ 54.578987][ T1008] acpi_ut_execute_STA+0x4b/0x150 [ 54.584246][ T1008] acpi_ns_get_device_callback+0x215/0x4d0 [ 54.590339][ T1008] acpi_ns_walk_namespace+0x258/0x690 [ 54.595861][ T1008] acpi_get_devices+0x10c/0x180 [ 54.600898][ T1008] page_owner free stack trace missing [ 54.606354][ T1008] [ 54.608682][ T1008] Memory state around the buggy address: [ 54.614611][ T1008] ffff8881006c3f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 54.622702][ T1008] ffff8881006c4000: 04 fc fc fc fa fc fc fc fa fc fc fc 00 fc fc fc [ 54.631087][ T1008] >ffff8881006c4080: fa fc fc fc fa fc fc fc fa fc fc fc fa fc fc fc [ 54.640861][ T1008] ^ [ 54.647620][ T1008] ffff8881006c4100: fa fc fc fc fa fc fc fc fa fc fc fc 05 fc fc fc [ 54.656193][ T1008] ffff8881006c4180: 04 fc fc fc fa fc fc fc fa fc fc fc fa fc fc fc [ 54.665148][ T1008] ================================================================== [ 54.676380][ T1008] Disabling lock debugging due to kernel taint [ 54.706989][ T36] audit: type=1400 audit(1788609860.220:111): avc: denied { read } for pid=93 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 54.745837][ T36] audit: type=1400 audit(1788609860.220:112): avc: denied { search } for pid=93 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 54.778516][ T36] audit: type=1400 audit(1788609860.220:113): avc: denied { write } for pid=93 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 54.828794][ T36] audit: type=1400 audit(1788609860.220:114): avc: denied { add_name } for pid=93 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 54.886766][ T36] audit: type=1400 audit(1788609860.220:115): avc: denied { create } for pid=93 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 54.925054][ T36] audit: type=1400 audit(1788609860.230:116): avc: denied { append open } for pid=93 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 54.948938][ T36] audit: type=1400 audit(1788609860.230:117): avc: denied { getattr } for pid=93 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 2026/09/05 12:04:21 executed programs: 404 2026/09/05 12:04:26 executed programs: 1156