Warning: Permanently added '10.128.0.74' (ED25519) to the list of known hosts. 2026/09/05 11:27:55 parsed 1 programs 2026/09/05 11:27:55 serving rpc on tcp://43731 Setting up swapspace version 1, size = 127995904 bytes [ 38.696342][ T36] kauditd_printk_skb: 32 callbacks suppressed [ 38.696358][ T36] audit: type=1400 audit(1788607676.839:106): avc: denied { unlink } for pid=425 comm="syz-executor" name="swap-file" dev="sda1" ino=2027 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 38.770970][ T425] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 40.068799][ T36] audit: type=1401 audit(1788607678.209:107): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768" [ 40.111832][ T36] audit: type=1400 audit(1788607678.239:108): avc: denied { create } for pid=467 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 40.344053][ T473] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.362355][ T473] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.369450][ T473] bridge_slave_0: entered allmulticast mode [ 40.376680][ T473] bridge_slave_0: entered promiscuous mode [ 40.389482][ T473] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.397075][ T473] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.404853][ T473] bridge_slave_1: entered allmulticast mode [ 40.411289][ T473] bridge_slave_1: entered promiscuous mode [ 40.488653][ T473] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.495852][ T473] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.503277][ T473] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.510674][ T473] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.537903][ T341] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.545799][ T341] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.557507][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.564617][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.573543][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.580594][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state 2026/09/05 11:27:58 executed programs: 0 [ 40.603536][ T473] veth0_vlan: entered promiscuous mode [ 40.615059][ T473] veth1_macvtap: entered promiscuous mode [ 40.793031][ T495] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.800105][ T495] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.807274][ T495] bridge_slave_0: entered allmulticast mode [ 40.813743][ T495] bridge_slave_0: entered promiscuous mode [ 40.841864][ T495] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.848919][ T495] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.856414][ T495] bridge_slave_1: entered allmulticast mode [ 40.862690][ T495] bridge_slave_1: entered promiscuous mode [ 40.882514][ T494] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.889562][ T494] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.896686][ T494] bridge_slave_0: entered allmulticast mode [ 40.902864][ T494] bridge_slave_0: entered promiscuous mode [ 40.909515][ T494] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.916915][ T494] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.924041][ T494] bridge_slave_1: entered allmulticast mode [ 40.930435][ T494] bridge_slave_1: entered promiscuous mode [ 40.946427][ T46] bridge_slave_1: left allmulticast mode [ 40.952118][ T46] bridge_slave_1: left promiscuous mode [ 40.957728][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.965258][ T46] bridge_slave_0: left allmulticast mode [ 40.970890][ T46] bridge_slave_0: left promiscuous mode [ 40.976633][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.072837][ T492] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.079894][ T492] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.087036][ T492] bridge_slave_0: entered allmulticast mode [ 41.093567][ T492] bridge_slave_0: entered promiscuous mode [ 41.099856][ T497] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.107148][ T497] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.114268][ T497] bridge_slave_0: entered allmulticast mode [ 41.120611][ T497] bridge_slave_0: entered promiscuous mode [ 41.127345][ T497] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.134564][ T497] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.141636][ T497] bridge_slave_1: entered allmulticast mode [ 41.148053][ T497] bridge_slave_1: entered promiscuous mode [ 41.162926][ T492] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.170426][ T492] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.177815][ T492] bridge_slave_1: entered allmulticast mode [ 41.184181][ T492] bridge_slave_1: entered promiscuous mode [ 41.224211][ T46] veth1_macvtap: left promiscuous mode [ 41.229741][ T46] veth0_vlan: left promiscuous mode [ 41.340627][ T495] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.347894][ T495] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.355613][ T495] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.362853][ T495] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.378010][ T497] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.385124][ T497] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.392506][ T497] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.399543][ T497] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.408788][ T494] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.416038][ T494] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.423599][ T494] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.430980][ T494] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.439768][ T128] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.447375][ T128] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.455184][ T128] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.462556][ T128] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.470544][ T128] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.478033][ T128] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.550545][ T128] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.557911][ T128] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.572703][ T483] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.579769][ T483] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.589799][ T341] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.597137][ T341] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.608586][ T341] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.615960][ T341] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.624102][ T341] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.631132][ T341] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.643813][ T341] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.650970][ T341] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.678273][ T341] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.685470][ T341] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.698465][ T341] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.705556][ T341] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.715980][ T494] veth0_vlan: entered promiscuous mode [ 41.735837][ T497] veth0_vlan: entered promiscuous mode [ 41.753888][ T494] veth1_macvtap: entered promiscuous mode [ 41.766470][ T495] veth0_vlan: entered promiscuous mode [ 41.787937][ T497] veth1_macvtap: entered promiscuous mode [ 41.795173][ T492] veth0_vlan: entered promiscuous mode [ 41.807683][ T495] veth1_macvtap: entered promiscuous mode [ 41.827036][ T492] veth1_macvtap: entered promiscuous mode [ 41.843966][ T36] audit: type=1400 audit(1788607679.989:109): avc: denied { mount } for pid=510 comm="syz.4.18" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 41.868434][ T36] audit: type=1400 audit(1788607679.999:110): avc: denied { unmount } for pid=494 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 42.015092][ T547] ================================================================== [ 42.023213][ T547] BUG: KASAN: slab-use-after-free in strcmp+0x70/0xc0 [ 42.029981][ T547] Read of size 1 at addr ffff888121298be0 by task syz.4.35/547 [ 42.037528][ T547] [ 42.040071][ T547] CPU: 0 UID: 0 PID: 547 Comm: syz.4.35 Not tainted syzkaller #0 2e83b55a69bea07f20837ef65095b54bb8d4ee1c [ 42.040092][ T547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 42.040105][ T547] Call Trace: [ 42.040110][ T547] [ 42.040117][ T547] __dump_stack+0x21/0x30 [ 42.040139][ T547] dump_stack_lvl+0x140/0x1c0 [ 42.040153][ T547] ? __cfi_dump_stack_lvl+0x10/0x10 [ 42.040169][ T547] print_address_description+0x71/0x210 [ 42.040184][ T547] print_report+0x4a/0x70 [ 42.040198][ T547] kasan_report+0x162/0x1a0 [ 42.040213][ T547] ? strcmp+0x70/0xc0 [ 42.040225][ T547] ? strcmp+0x70/0xc0 [ 42.040237][ T547] __asan_report_load1_noabort+0x18/0x20 [ 42.040248][ T547] strcmp+0x70/0xc0 [ 42.040259][ T547] algorithm_params_store+0x425/0x790 [ 42.040275][ T547] ? __cfi_algorithm_params_store+0x10/0x10 [ 42.040289][ T547] ? __virt_addr_valid+0x2a1/0x370 [ 42.040303][ T547] ? __kasan_check_write+0x18/0x20 [ 42.040314][ T547] ? __cfi_algorithm_params_store+0x10/0x10 [ 42.040328][ T547] dev_attr_store+0x76/0xa0 [ 42.040339][ T547] ? __cfi_dev_attr_store+0x10/0x10 [ 42.040350][ T547] sysfs_kf_write+0x13e/0x160 [ 42.040362][ T547] ? __cfi_sysfs_kf_write+0x10/0x10 [ 42.040372][ T547] kernfs_fop_write_iter+0x316/0x510 [ 42.040388][ T547] vfs_write+0x762/0xfd0 [ 42.040400][ T547] ? __cfi_vfs_write+0x10/0x10 [ 42.040425][ T547] ? __cfi_mutex_lock+0x10/0x10 [ 42.040439][ T547] ksys_write+0x145/0x260 [ 42.040449][ T547] ? xfd_validate_state+0x68/0x140 [ 42.040465][ T547] ? __cfi_ksys_write+0x10/0x10 [ 42.040475][ T547] ? __kasan_check_write+0x18/0x20 [ 42.040485][ T547] ? fpregs_restore_userregs+0x11c/0x260 [ 42.040498][ T547] __x64_sys_write+0x7f/0x90 [ 42.040510][ T547] x64_sys_call+0x271c/0x2ee0 [ 42.040519][ T547] do_syscall_64+0x57/0xf0 [ 42.040534][ T547] ? clear_bhb_loop+0x50/0xa0 [ 42.040547][ T547] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 42.040558][ T547] RIP: 0033:0x7f79b8f9de99 [ 42.040573][ T547] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 42.040582][ T547] RSP: 002b:00007f79b9f3e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 42.040600][ T547] RAX: ffffffffffffffda RBX: 00007f79b9225fa0 RCX: 00007f79b8f9de99 [ 42.040609][ T547] RDX: 000000000000001d RSI: 0000200000000400 RDI: 0000000000000004 [ 42.040616][ T547] RBP: 00007f79b9033eaf R08: 0000000000000000 R09: 0000000000000000 [ 42.040623][ T547] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 42.040629][ T547] R13: 00007f79b9226038 R14: 00007f79b9225fa0 R15: 00007ffe7959cf38 [ 42.040638][ T547] [ 42.040642][ T547] [ 42.313475][ T547] Allocated by task 552: [ 42.317698][ T547] kasan_save_track+0x3e/0x80 [ 42.322379][ T547] kasan_save_alloc_info+0x3a/0x50 [ 42.327549][ T547] __kasan_kmalloc+0x96/0xb0 [ 42.332159][ T547] __kmalloc_node_track_caller_noprof+0x24e/0x4f0 [ 42.338750][ T547] kstrdup+0x4d/0x130 [ 42.342800][ T547] __comp_algorithm_store+0x5c/0x250 [ 42.348113][ T547] comp_algorithm_store+0x6e/0xb0 [ 42.353175][ T547] dev_attr_store+0x76/0xa0 [ 42.357788][ T547] sysfs_kf_write+0x13e/0x160 [ 42.362470][ T547] kernfs_fop_write_iter+0x316/0x510 [ 42.367756][ T547] vfs_write+0x762/0xfd0 [ 42.371994][ T547] ksys_write+0x145/0x260 [ 42.376331][ T547] __x64_sys_write+0x7f/0x90 [ 42.380922][ T547] x64_sys_call+0x271c/0x2ee0 [ 42.385600][ T547] do_syscall_64+0x57/0xf0 [ 42.390071][ T547] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 42.395987][ T547] [ 42.398302][ T547] Freed by task 549: [ 42.402263][ T547] kasan_save_track+0x3e/0x80 [ 42.407135][ T547] kasan_save_free_info+0x44/0x50 [ 42.412153][ T547] __kasan_slab_free+0x5f/0x80 [ 42.416988][ T547] kfree+0x158/0x440 [ 42.420981][ T547] __comp_algorithm_store+0x190/0x250 [ 42.426442][ T547] comp_algorithm_store+0x6e/0xb0 [ 42.431556][ T547] dev_attr_store+0x76/0xa0 [ 42.436051][ T547] sysfs_kf_write+0x13e/0x160 [ 42.440724][ T547] kernfs_fop_write_iter+0x316/0x510 [ 42.446028][ T547] vfs_write+0x762/0xfd0 [ 42.450286][ T547] ksys_write+0x145/0x260 [ 42.454631][ T547] __x64_sys_write+0x7f/0x90 [ 42.459216][ T547] x64_sys_call+0x271c/0x2ee0 [ 42.464068][ T547] do_syscall_64+0x57/0xf0 [ 42.468515][ T547] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 42.474425][ T547] [ 42.476740][ T547] The buggy address belongs to the object at ffff888121298be0 [ 42.476740][ T547] which belongs to the cache kmalloc-8 of size 8 [ 42.490518][ T547] The buggy address is located 0 bytes inside of [ 42.490518][ T547] freed 8-byte region [ffff888121298be0, ffff888121298be8) [ 42.504053][ T547] [ 42.506494][ T547] The buggy address belongs to the physical page: [ 42.513005][ T547] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x121298 [ 42.522003][ T547] flags: 0x4000000000000000(zone=1) [ 42.527213][ T547] page_type: f5(slab) [ 42.531205][ T547] raw: 4000000000000000 ffff888100041500 dead000000000100 dead000000000122 [ 42.539925][ T547] raw: 0000000000000000 0000000080800080 00000001f5000000 0000000000000000 [ 42.548499][ T547] page dumped because: kasan: bad access detected [ 42.554954][ T547] page_owner tracks the page as allocated [ 42.560703][ T547] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x152cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 492, tgid 492 (syz-executor), ts 41908023158, free_ts 41902861984 [ 42.580236][ T547] post_alloc_hook+0x37d/0x3b0 [ 42.585112][ T547] prep_new_page+0x2d/0x180 [ 42.589619][ T547] get_page_from_freelist+0x4aea/0x4ba0 [ 42.595194][ T547] __alloc_pages_noprof+0x35a/0x7e0 [ 42.600502][ T547] alloc_slab_page+0x6b/0x1e0 [ 42.605641][ T547] allocate_slab+0x69/0x430 [ 42.610161][ T547] ___slab_alloc+0x591/0x8c0 [ 42.614754][ T547] __kmalloc_node_track_caller_noprof+0x2e3/0x4f0 [ 42.621200][ T547] kstrdup+0x4d/0x130 [ 42.625199][ T547] kstrdup_const+0x45/0x60 [ 42.629631][ T547] alloc_vfsmnt+0xed/0x610 [ 42.634062][ T547] clone_mnt+0x6e/0xbe0 [ 42.638310][ T547] copy_tree+0xe2/0xcb0 [ 42.642552][ T547] __do_loopback+0x1da/0x3c0 [ 42.647135][ T547] do_loopback+0x335/0x4c0 [ 42.651543][ T547] path_mount+0x55b/0xff0 [ 42.655875][ T547] page last free pid 33 tgid 33 stack trace: [ 42.661928][ T547] free_unref_page+0xbb8/0xf70 [ 42.666689][ T547] __free_pages+0x6b/0x3b0 [ 42.671106][ T547] __free_slab+0xb2/0x110 [ 42.675427][ T547] rcu_free_slab+0x18/0x30 [ 42.679834][ T547] rcu_do_batch+0x56a/0xcb0 [ 42.684336][ T547] rcu_nocb_cb_kthread+0x533/0xb60 [ 42.689836][ T547] kthread+0x2c4/0x360 [ 42.693914][ T547] ret_from_fork+0x64/0xa0 [ 42.698333][ T547] ret_from_fork_asm+0x1a/0x30 [ 42.703118][ T547] [ 42.705429][ T547] Memory state around the buggy address: [ 42.711064][ T547] ffff888121298a80: fa fc fc fc fc fc fc fc fa fc fc fc fa fc fc fc [ 42.719333][ T547] ffff888121298b00: fc fc fc fc fc fc fc fc fa fc fc fc fc fc fc fc [ 42.727495][ T547] >ffff888121298b80: fc fc fc fc 05 fc fc fc fa fc fc fc fa fc fc fc [ 42.735751][ T547] ^ [ 42.742979][ T547] ffff888121298c00: fa fc fc fc fa fc fc fc fa fc fc fc fa fc fc fc [ 42.751131][ T547] ffff888121298c80: fc fc fc fc fc fc fc fc fc fc fc fc fa fc fc fc [ 42.759276][ T547] ================================================================== [ 42.778228][ T547] Disabling lock debugging due to kernel taint [ 42.807028][ T36] audit: type=1400 audit(1788607680.949:111): avc: denied { read } for pid=92 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 42.839294][ T36] audit: type=1400 audit(1788607680.949:112): avc: denied { search } for pid=92 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 42.861344][ T36] audit: type=1400 audit(1788607680.949:113): avc: denied { write } for pid=92 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 42.883207][ T36] audit: type=1400 audit(1788607680.949:114): avc: denied { add_name } for pid=92 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 42.904109][ T36] audit: type=1400 audit(1788607680.949:115): avc: denied { create } for pid=92 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 2026/09/05 11:28:03 executed programs: 607 2026/09/05 11:28:08 executed programs: 1658