Warning: Permanently added '10.128.1.219' (ED25519) to the list of known hosts. 2026/05/07 20:55:06 parsed 1 programs [ 49.431642][ T24] kauditd_printk_skb: 31 callbacks suppressed [ 49.431654][ T24] audit: type=1400 audit(1778187306.940:105): avc: denied { unlink } for pid=442 comm="syz-executor" name="swap-file" dev="sda1" ino=2027 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 49.468540][ T442] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 50.238515][ T24] audit: type=1401 audit(1778187307.750:106): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768" [ 50.312062][ T24] audit: type=1400 audit(1778187307.820:107): avc: denied { create } for pid=484 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 50.461334][ T494] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.469237][ T494] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.477124][ T494] device bridge_slave_0 entered promiscuous mode [ 50.484510][ T494] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.491654][ T494] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.499311][ T494] device bridge_slave_1 entered promiscuous mode [ 50.531259][ T494] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.538724][ T494] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.546621][ T494] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.554392][ T494] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.572181][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 50.580105][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.587635][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.597315][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.605763][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.613323][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.622339][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.630755][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.638289][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.649590][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 50.659350][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 50.672774][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 50.684509][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 50.693011][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 50.701669][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 50.710283][ T494] device veth0_vlan entered promiscuous mode [ 50.720113][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 50.729491][ T494] device veth1_macvtap entered promiscuous mode [ 50.738402][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 50.748897][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 2026/05/07 20:55:08 executed programs: 0 [ 50.958362][ T24] audit: type=1400 audit(1778187308.470:108): avc: denied { write } for pid=433 comm="syz-execprog" path="pipe:[15588]" dev="pipefs" ino=15588 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 51.010217][ T504] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.017448][ T504] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.025562][ T504] device bridge_slave_0 entered promiscuous mode [ 51.033349][ T504] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.040908][ T504] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.048977][ T504] device bridge_slave_1 entered promiscuous mode [ 51.086072][ T504] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.093501][ T504] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.101133][ T504] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.108405][ T504] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.132293][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.140575][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.149794][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.159341][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.168111][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.175853][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.185722][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.194116][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.201443][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.220360][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 51.230562][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 51.248129][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 51.259392][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 51.267585][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 51.275789][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 51.284844][ T504] device veth0_vlan entered promiscuous mode [ 51.301034][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 51.309630][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 51.319259][ T504] device veth1_macvtap entered promiscuous mode [ 51.328641][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 51.336796][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 51.345529][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 51.355460][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 51.364682][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 51.392561][ T24] audit: type=1400 audit(1778187308.900:109): avc: denied { create } for pid=508 comm="syz.2.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 51.423253][ T24] audit: type=1400 audit(1778187308.900:110): avc: denied { write } for pid=508 comm="syz.2.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 51.445260][ T24] audit: type=1400 audit(1778187308.900:111): avc: denied { nlmsg_write } for pid=508 comm="syz.2.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 51.767837][ C0] ================================================================== [ 51.776061][ C0] BUG: KASAN: stack-out-of-bounds in __xfrm_dst_hash+0x399/0x480 [ 51.784484][ C0] Read of size 4 at addr ffffc90000007b18 by task swapper/0/0 [ 51.792203][ C0] [ 51.794526][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 [ 51.801853][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 51.812223][ C0] Call Trace: [ 51.815500][ C0] [ 51.818344][ C0] __dump_stack+0x21/0x24 [ 51.822951][ C0] dump_stack_lvl+0x1a7/0x208 [ 51.827889][ C0] ? show_regs_print_info+0x18/0x18 [ 51.833707][ C0] ? thaw_kernel_threads+0x220/0x220 [ 51.839026][ C0] ? _raw_spin_unlock+0x4d/0x70 [ 51.844066][ C0] print_address_description+0x7f/0x2c0 [ 51.849627][ C0] ? __xfrm_dst_hash+0x399/0x480 [ 51.856361][ C0] kasan_report+0xe2/0x130 [ 51.860995][ C0] ? __xfrm_dst_hash+0x399/0x480 [ 51.866086][ C0] __asan_report_load4_noabort+0x14/0x20 [ 51.872336][ C0] __xfrm_dst_hash+0x399/0x480 [ 51.877327][ C0] xfrm_state_find+0x28c/0x28b0 [ 51.882218][ C0] ? stack_trace_save+0xf0/0xf0 [ 51.887261][ C0] ? xfrm_sad_getinfo+0x170/0x170 [ 51.892632][ C0] ? stack_trace_save+0xa6/0xf0 [ 51.898565][ C0] ? stack_trace_snprint+0xf0/0xf0 [ 51.904114][ C0] xfrm_resolve_and_create_bundle+0x697/0x29f0 [ 51.910828][ C0] ? xfrm_sk_policy_lookup+0x480/0x480 [ 51.916402][ C0] ? xfrm_selector_match+0xb7e/0x1030 [ 51.922151][ C0] ? __xfrm_policy_check+0x29d0/0x29d0 [ 51.927765][ C0] xfrm_lookup_with_ifid+0x7ea/0x1a80 [ 51.933598][ C0] ? percpu_counter_add_batch+0x13c/0x160 [ 51.939732][ C0] ? rt_set_nexthop+0x5b9/0x780 [ 51.944678][ C0] ? __xfrm_sk_clone_policy+0x680/0x680 [ 51.951231][ C0] ? ip_route_output_key_hash_rcu+0x15af/0x20e0 [ 51.957770][ C0] xfrm_lookup_route+0x3c/0x170 [ 51.963011][ C0] ip_route_output_flow+0x1f8/0x2f0 [ 51.968444][ C0] ? igmpv3_newpack+0x173/0xc80 [ 51.973535][ C0] ? ipv4_sk_update_pmtu+0x14c0/0x14c0 [ 51.979464][ C0] ? make_kuid+0x1db/0x680 [ 51.984261][ C0] ? __put_user_ns+0x60/0x60 [ 51.989399][ C0] ? __kasan_check_write+0x14/0x20 [ 51.994692][ C0] ? __alloc_skb+0x38b/0x520 [ 51.999823][ C0] igmpv3_newpack+0x281/0xc80 [ 52.005067][ C0] ? igmpv3_sendpack+0x190/0x190 [ 52.010330][ C0] ? __kasan_check_read+0x11/0x20 [ 52.015580][ C0] ? ttwu_do_wakeup+0xf6/0x3c0 [ 52.020548][ C0] add_grhead+0x75/0x2e0 [ 52.025050][ C0] add_grec+0x116b/0x1410 [ 52.029807][ C0] ? __kasan_check_write+0x14/0x20 [ 52.036899][ C0] igmp_ifc_timer_expire+0x89e/0xf80 [ 52.044140][ C0] ? __kasan_check_write+0x14/0x20 [ 52.051013][ C0] ? _raw_spin_lock+0x94/0xf0 [ 52.056602][ C0] ? _raw_spin_trylock_bh+0x150/0x150 [ 52.062238][ C0] ? igmp_gq_timer_expire+0xe0/0xe0 [ 52.068103][ C0] call_timer_fn+0x38/0x290 [ 52.072698][ C0] ? igmp_gq_timer_expire+0xe0/0xe0 [ 52.078271][ C0] __run_timers+0x650/0x9e0 [ 52.083117][ C0] ? calc_index+0x200/0x200 [ 52.087746][ C0] ? sched_clock_cpu+0x1b/0x3d0 [ 52.092799][ C0] run_timer_softirq+0x6a/0xf0 [ 52.098003][ C0] __do_softirq+0x255/0x563 [ 52.102816][ C0] asm_call_irq_on_stack+0xf/0x20 [ 52.108542][ C0] [ 52.111476][ C0] do_softirq_own_stack+0x60/0x80 [ 52.116597][ C0] __irq_exit_rcu+0x128/0x150 [ 52.121362][ C0] irq_exit_rcu+0x9/0x10 [ 52.125601][ C0] sysvec_apic_timer_interrupt+0xbf/0xe0 [ 52.131630][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 52.138299][ C0] RIP: 0010:default_idle+0x12/0x20 [ 52.143708][ C0] Code: 44 2a 00 00 49 bd 00 00 00 00 00 fc ff df e9 67 ff ff ff e8 d0 f7 fa ff 55 48 89 e5 0f 1f 44 00 00 0f 00 2d 40 38 62 00 fb f4 <5d> c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 55 48 89 e5 41 57 41 56 [ 52.164191][ C0] RSP: 0018:ffffffff86407d78 EFLAGS: 00000252 [ 52.170381][ C0] RAX: ffff8881f7000000 RBX: ffffffff8641c100 RCX: 000000000000b7ce [ 52.179659][ C0] RDX: 0000000000000001 RSI: ffffffff85408480 RDI: ffffffff85408440 [ 52.187819][ C0] RBP: ffffffff86407d78 R08: ffff8881f70573d3 R09: 1ffff1103ee0ae7a [ 52.196837][ C0] R10: dffffc0000000000 R11: ffffed103ee0ae7b R12: 0000000000000000 [ 52.205112][ C0] R13: 1ffffffff0c83820 R14: dffffc0000000000 R15: dffffc0000000000 [ 52.213542][ C0] arch_cpu_idle+0xa/0x10 [ 52.218327][ C0] default_idle_call+0x71/0x1d0 [ 52.223188][ C0] do_idle+0x368/0x620 [ 52.227369][ C0] ? idle_inject_timer_fn+0x60/0x60 [ 52.232648][ C0] ? radix_tree_lookup+0x183/0x1d0 [ 52.237750][ C0] ? debug_smp_processor_id+0x17/0x20 [ 52.243131][ C0] cpu_startup_entry+0x18/0x20 [ 52.249382][ C0] rest_init+0xe8/0xf0 [ 52.253621][ C0] ? time_init+0x38/0x38 [ 52.258463][ C0] arch_call_rest_init+0xe/0x10 [ 52.263327][ C0] start_kernel+0x431/0x49f [ 52.268010][ C0] x86_64_start_reservations+0x2a/0x2c [ 52.273788][ C0] x86_64_start_kernel+0x60/0x63 [ 52.278926][ C0] secondary_startup_64_no_verify+0xad/0xbb [ 52.284909][ C0] [ 52.287260][ C0] [ 52.289940][ C0] Memory state around the buggy address: [ 52.295872][ C0] ffffc90000007a00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 52.304665][ C0] ffffc90000007a80: 00 00 00 00 00 00 00 00 f1 f1 f1 f1 00 00 00 00 [ 52.313411][ C0] >ffffc90000007b00: 00 00 00 f3 f3 f3 f3 f3 00 00 00 00 00 00 00 00 [ 52.321988][ C0] ^ [ 52.326843][ C0] ffffc90000007b80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 52.335364][ C0] ffffc90000007c00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 52.344106][ C0] ================================================================== [ 52.353081][ C0] Disabling lock debugging due to kernel taint [ 52.609683][ T311] device bridge_slave_1 left promiscuous mode [ 52.616324][ T311] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.624349][ T311] device bridge_slave_0 left promiscuous mode [ 52.630720][ T311] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.639323][ T311] device veth1_macvtap left promiscuous mode [ 52.645847][ T311] device veth0_vlan left promiscuous mode 2026/05/07 20:55:13 executed programs: 240 2026/05/07 20:55:18 executed programs: 540