Warning: Permanently added '10.128.1.143' (ED25519) to the list of known hosts. 2026/08/04 23:47:55 ignoring optional flag "type"="gce" 2026/08/04 23:47:55 parsed 1 programs 2026/08/04 23:47:55 executed programs: 0 [ 32.189640][ T349] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.196978][ T349] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.204766][ T349] device bridge_slave_0 entered promiscuous mode [ 32.211988][ T349] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.219231][ T349] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.226798][ T349] device bridge_slave_1 entered promiscuous mode [ 32.276764][ T349] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.283840][ T349] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.291457][ T349] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.298657][ T349] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.319224][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.327267][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.335512][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.343029][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.353074][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.361813][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.369088][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.378634][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.387243][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.394682][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.408607][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.418978][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.433569][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.446001][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.454516][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.462173][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.471172][ T349] device veth0_vlan entered promiscuous mode [ 32.482645][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.492332][ T349] device veth1_macvtap entered promiscuous mode [ 32.503332][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 32.514081][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 32.536612][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 32.536629][ T30] audit: type=1400 audit(1785887275.587:88): avc: denied { create } for pid=353 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 32.572811][ T30] audit: type=1400 audit(1785887275.587:89): avc: denied { write } for pid=353 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 32.593703][ T30] audit: type=1400 audit(1785887275.587:90): avc: denied { nlmsg_write } for pid=353 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 32.616288][ T30] audit: type=1400 audit(1785887275.587:91): avc: denied { prog_load } for pid=353 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 32.824439][ C1] ================================================================== [ 32.832785][ C1] BUG: KASAN: stack-out-of-bounds in __xfrm_dst_hash+0x399/0x480 [ 32.840674][ C1] Read of size 4 at addr ffffc900001d0af8 by task swapper/1/0 [ 32.848176][ C1] [ 32.850572][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 [ 32.857598][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 32.867665][ C1] Call Trace: [ 32.871078][ C1] [ 32.873952][ C1] __dump_stack+0x21/0x30 [ 32.878296][ C1] dump_stack_lvl+0x110/0x170 [ 32.882979][ C1] ? show_regs_print_info+0x20/0x20 [ 32.888318][ C1] ? load_image+0x3f0/0x3f0 [ 32.893139][ C1] print_address_description+0x7f/0x2c0 [ 32.898702][ C1] ? __xfrm_dst_hash+0x399/0x480 [ 32.903746][ C1] kasan_report+0x10f/0x150 [ 32.908262][ C1] ? __xfrm_dst_hash+0x399/0x480 [ 32.913422][ C1] __asan_report_load4_noabort+0x14/0x20 [ 32.919271][ C1] __xfrm_dst_hash+0x399/0x480 [ 32.924059][ C1] xfrm_state_find+0x291/0x2a10 [ 32.929008][ C1] ? percpu_counter_add_batch+0x13c/0x160 [ 32.934755][ C1] ? xfrm_sad_getinfo+0x170/0x170 [ 32.939842][ C1] ? stack_trace_save+0xa6/0xf0 [ 32.944792][ C1] xfrm_resolve_and_create_bundle+0x6b7/0x2a20 [ 32.950956][ C1] ? xfrm_sk_policy_lookup+0x460/0x460 [ 32.956433][ C1] ? xfrm_selector_match+0xbc6/0x10b0 [ 32.961982][ C1] ? __xfrm_policy_check+0x2930/0x2930 [ 32.967622][ C1] xfrm_lookup_with_ifid+0x692/0x2050 [ 32.973019][ C1] ? __xfrm_sk_clone_policy+0x680/0x680 [ 32.978700][ C1] ? ip_route_output_key_hash_rcu+0x1681/0x1f90 [ 32.985126][ C1] xfrm_lookup_route+0x3c/0x170 [ 32.990293][ C1] ip_route_output_flow+0x1f8/0x2f0 [ 32.995656][ C1] ? ipv4_sk_update_pmtu+0x14e0/0x14e0 [ 33.001228][ C1] ? make_kuid+0x1d7/0x680 [ 33.005778][ C1] ? __put_user_ns+0x60/0x60 [ 33.010564][ C1] ? __kasan_check_write+0x14/0x20 [ 33.015877][ C1] ? __alloc_skb+0x459/0x730 [ 33.020603][ C1] igmpv3_newpack+0x288/0xd00 [ 33.025838][ C1] ? igmpv3_sendpack+0x190/0x190 [ 33.030828][ C1] ? __this_cpu_preempt_check+0x13/0x20 [ 33.036663][ C1] ? __raise_softirq_irqoff+0x17/0xd0 [ 33.042164][ C1] ? raise_softirq+0x7d/0xf0 [ 33.046816][ C1] add_grhead+0x75/0x2e0 [ 33.051084][ C1] add_grec+0x1168/0x1400 [ 33.055514][ C1] ? __kasan_check_write+0x14/0x20 [ 33.060833][ C1] ? _raw_spin_lock_bh+0x94/0xf0 [ 33.065867][ C1] ? _raw_spin_lock_irq+0xf0/0xf0 [ 33.071116][ C1] igmp_ifc_timer_expire+0x85c/0xfc0 [ 33.076408][ C1] ? __next_timer_interrupt+0x379/0x3e0 [ 33.081982][ C1] ? _raw_spin_lock_irqsave+0x130/0x130 [ 33.087758][ C1] ? igmp_gq_timer_expire+0xe0/0xe0 [ 33.092970][ C1] call_timer_fn+0x38/0x290 [ 33.097740][ C1] ? igmp_gq_timer_expire+0xe0/0xe0 [ 33.103281][ C1] __run_timers+0x637/0x9a0 [ 33.107811][ C1] ? calc_index+0x200/0x200 [ 33.112619][ C1] ? sched_clock_cpu+0x18/0x3d0 [ 33.117714][ C1] run_timer_softirq+0x6a/0xf0 [ 33.122585][ C1] handle_softirqs+0x250/0x560 [ 33.127497][ C1] ? irqtime_account_irq+0xbe/0x390 [ 33.133238][ C1] __irq_exit_rcu+0x52/0xf0 [ 33.139433][ C1] irq_exit_rcu+0x9/0x10 [ 33.143856][ C1] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 33.149771][ C1] [ 33.152845][ C1] [ 33.155928][ C1] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 33.162552][ C1] RIP: 0010:default_idle+0xf/0x20 [ 33.167629][ C1] Code: 8c 4b ff ff ff 4c 89 f7 e8 7e 5a f5 fc e9 3e ff ff ff 00 00 cc cc 00 00 cc cc 00 55 48 89 e5 66 90 0f 00 2d b3 92 51 00 fb f4 <5d> c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 55 48 89 e5 41 [ 33.187373][ C1] RSP: 0018:ffffc90000157db8 EFLAGS: 00000256 [ 33.193746][ C1] RAX: 00000000000042f0 RBX: ffff888100308000 RCX: 00000000000042f0 [ 33.201723][ C1] RDX: 0000000000000001 RSI: ffffffff85638620 RDI: ffffffff856385e0 [ 33.209799][ C1] RBP: ffffc90000157db8 R08: ffff8881f7138c73 R09: 1ffff1103ee2718e [ 33.218549][ C1] R10: dffffc0000000000 R11: ffffed103ee2718f R12: 0000000000000000 [ 33.227268][ C1] R13: 1ffff11020061000 R14: dffffc0000000000 R15: dffffc0000000000 [ 33.235589][ C1] arch_cpu_idle+0xa/0x10 [ 33.240129][ C1] default_idle_call+0x71/0x1d0 [ 33.245018][ C1] do_idle+0x368/0x620 [ 33.249198][ C1] ? idle_inject_timer_fn+0x60/0x60 [ 33.254744][ C1] cpu_startup_entry+0x18/0x20 [ 33.259707][ C1] start_secondary+0x2c8/0x380 [ 33.265858][ C1] secondary_startup_64_no_verify+0xb1/0xbb [ 33.273094][ C1] [ 33.276263][ C1] [ 33.278683][ C1] [ 33.281283][ C1] Memory state around the buggy address: [ 33.287244][ C1] ffffc900001d0980: f8 f8 f8 f8 f8 f8 f3 f3 f3 f3 f3 f3 00 00 00 00 [ 33.295974][ C1] ffffc900001d0a00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 33.304692][ C1] >ffffc900001d0a80: 00 00 00 00 f1 f1 f1 f1 00 00 00 00 00 00 00 f3 [ 33.313092][ C1] ^ [ 33.321363][ C1] ffffc900001d0b00: f3 f3 f3 f3 00 00 00 00 00 00 00 00 00 00 00 00 [ 33.329816][ C1] ffffc900001d0b80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 33.338862][ C1] ================================================================== [ 33.347707][ C1] Disabling lock debugging due to kernel taint 2026/08/04 23:48:00 executed programs: 530 2026/08/04 23:48:05 executed programs: 1184