Warning: Permanently added '10.128.1.229' (ED25519) to the list of known hosts. 2026/05/11 10:31:32 ignoring optional flag "type"="gce" 2026/05/11 10:31:32 parsed 1 programs 2026/05/11 10:31:32 executed programs: 0 [ 40.167286][ T349] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.175065][ T349] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.182693][ T349] device bridge_slave_0 entered promiscuous mode [ 40.189558][ T349] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.196745][ T349] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.204179][ T349] device bridge_slave_1 entered promiscuous mode [ 40.250567][ T349] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.257639][ T349] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.264998][ T349] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.272147][ T349] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.290309][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.297624][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.305347][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 40.312929][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 40.322596][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 40.331099][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.338153][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.346738][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 40.355124][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.362217][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.374130][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 40.383642][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 40.397071][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 40.408133][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 40.416225][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 40.424063][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 40.432541][ T349] device veth0_vlan entered promiscuous mode [ 40.442988][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 40.452304][ T349] device veth1_macvtap entered promiscuous mode [ 40.461952][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 40.471996][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 40.493630][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 40.493645][ T30] audit: type=1400 audit(1778495493.201:88): avc: denied { create } for pid=353 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 40.520640][ T30] audit: type=1400 audit(1778495493.231:89): avc: denied { write } for pid=353 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 40.541504][ T30] audit: type=1400 audit(1778495493.231:90): avc: denied { nlmsg_write } for pid=353 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 40.563246][ T30] audit: type=1400 audit(1778495493.231:91): avc: denied { prog_load } for pid=353 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 40.809935][ C0] ================================================================== [ 40.818151][ C0] BUG: KASAN: stack-out-of-bounds in __xfrm_dst_hash+0x399/0x480 [ 40.825920][ C0] Read of size 4 at addr ffffc90000007ad8 by task udevd/355 [ 40.833325][ C0] [ 40.835698][ C0] CPU: 0 PID: 355 Comm: udevd Not tainted syzkaller #0 [ 40.842582][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 40.852676][ C0] Call Trace: [ 40.855972][ C0] [ 40.858835][ C0] __dump_stack+0x21/0x30 [ 40.863291][ C0] dump_stack_lvl+0x110/0x170 [ 40.867999][ C0] ? show_regs_print_info+0x20/0x20 [ 40.873392][ C0] ? load_image+0x3e0/0x3e0 [ 40.877906][ C0] print_address_description+0x7f/0x2c0 [ 40.883466][ C0] ? __xfrm_dst_hash+0x399/0x480 [ 40.888417][ C0] kasan_report+0xf1/0x140 [ 40.892937][ C0] ? __xfrm_dst_hash+0x399/0x480 [ 40.897891][ C0] __asan_report_load4_noabort+0x14/0x20 [ 40.903538][ C0] __xfrm_dst_hash+0x399/0x480 [ 40.908317][ C0] xfrm_state_find+0x28a/0x2a10 [ 40.913197][ C0] ? percpu_counter_add_batch+0x13c/0x160 [ 40.918932][ C0] ? xfrm_sad_getinfo+0x170/0x170 [ 40.923972][ C0] ? xfrm_pol_bin_cmp+0x19e/0x310 [ 40.929019][ C0] xfrm_resolve_and_create_bundle+0x697/0x29f0 [ 40.935275][ C0] ? xfrm_sk_policy_lookup+0x480/0x480 [ 40.940751][ C0] ? xfrm_policy_lookup+0xcba/0xd10 [ 40.945965][ C0] ? __xfrm_policy_check+0x2980/0x2980 [ 40.951439][ C0] xfrm_lookup_with_ifid+0x4e9/0x2080 [ 40.956826][ C0] ? rt_set_nexthop+0x5b9/0x780 [ 40.961783][ C0] ? __xfrm_sk_clone_policy+0x680/0x680 [ 40.967361][ C0] ? ip_route_output_key_hash_rcu+0x15af/0x20e0 [ 40.973640][ C0] xfrm_lookup_route+0x3c/0x170 [ 40.978527][ C0] ip_route_output_flow+0x1f8/0x2f0 [ 40.983856][ C0] ? ipv4_sk_update_pmtu+0x14b0/0x14b0 [ 40.989430][ C0] ? make_kuid+0x1db/0x680 [ 40.993899][ C0] ? __put_user_ns+0x60/0x60 [ 40.998508][ C0] ? __kasan_check_write+0x14/0x20 [ 41.003857][ C0] ? __alloc_skb+0x463/0x740 [ 41.008497][ C0] igmpv3_newpack+0x280/0xcd0 [ 41.013313][ C0] ? igmpv3_sendpack+0x190/0x190 [ 41.018383][ C0] ? __kasan_check_read+0x11/0x20 [ 41.023648][ C0] add_grhead+0x75/0x2e0 [ 41.027933][ C0] add_grec+0x116c/0x1410 [ 41.032380][ C0] ? __kasan_check_write+0x14/0x20 [ 41.037519][ C0] igmp_ifc_timer_expire+0x89e/0xf80 [ 41.042993][ C0] ? __kasan_check_write+0x14/0x20 [ 41.048118][ C0] ? _raw_spin_lock+0x94/0xf0 [ 41.052816][ C0] ? _raw_spin_trylock_bh+0x150/0x150 [ 41.058211][ C0] ? igmp_gq_timer_expire+0xe0/0xe0 [ 41.063519][ C0] call_timer_fn+0x38/0x290 [ 41.068045][ C0] ? igmp_gq_timer_expire+0xe0/0xe0 [ 41.073346][ C0] __run_timers+0x650/0x9e0 [ 41.077866][ C0] ? calc_index+0x200/0x200 [ 41.082386][ C0] ? sched_clock_cpu+0x18/0x3c0 [ 41.087387][ C0] run_timer_softirq+0x6a/0xf0 [ 41.092166][ C0] handle_softirqs+0x250/0x560 [ 41.096958][ C0] __irq_exit_rcu+0x52/0xf0 [ 41.101471][ C0] irq_exit_rcu+0x9/0x10 [ 41.105728][ C0] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 41.111458][ C0] [ 41.114403][ C0] [ 41.117366][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 41.123389][ C0] RIP: 0010:__vfs_getxattr+0x232/0x3d0 [ 41.128887][ C0] Code: 7d b8 e8 01 ab ee ff 4c 89 e2 eb 8d 44 89 f1 80 e1 07 38 c1 7c b0 4c 89 f7 e8 ea aa ee ff eb a6 e8 b3 77 af ff 4d 89 fc eb 1b a9 77 af ff 4d 89 fd 4c 8b 7d c0 48 8b 5d d0 eb 68 e8 97 77 af [ 41.148505][ C0] RSP: 0018:ffffc90000b379c8 EFLAGS: 00000293 [ 41.154589][ C0] RAX: ffffffff81ba51b6 RBX: 0000000000000079 RCX: ffff88810ec8e2c0 [ 41.162573][ C0] RDX: 0000000000000000 RSI: 0000000000000079 RDI: 0000000000000065 [ 41.170568][ C0] RBP: ffffc90000b37a48 R08: 0000000000000000 R09: 1ffff1102482020e [ 41.178559][ C0] R10: dffffc0000000000 R11: ffffed102482020f R12: ffffffff8560e722 [ 41.186550][ C0] R13: 0000000000000065 R14: ffffffff854cb682 R15: dffffc0000000000 [ 41.194624][ C0] ? __vfs_getxattr+0x1b6/0x3d0 [ 41.199489][ C0] ? __vfs_getxattr+0x1b6/0x3d0 [ 41.204449][ C0] cap_inode_need_killpriv+0x45/0x60 [ 41.209761][ C0] security_inode_need_killpriv+0x62/0x90 [ 41.215604][ C0] file_remove_privs+0x22f/0x5c0 [ 41.220557][ C0] ? dentry_needs_remove_privs+0x100/0x100 [ 41.226596][ C0] ? rwsem_write_trylock+0x136/0x300 [ 41.231893][ C0] ? clear_nonspinnable+0x60/0x60 [ 41.237115][ C0] ? avc_policy_seqno+0x1b/0x70 [ 41.241989][ C0] __generic_file_write_iter+0x186/0x480 [ 41.247645][ C0] generic_file_write_iter+0xa9/0x1d0 [ 41.253027][ C0] vfs_write+0x835/0xfd0 [ 41.257284][ C0] ? file_end_write+0x1b0/0x1b0 [ 41.262151][ C0] ? __kasan_check_read+0x11/0x20 [ 41.267246][ C0] ? __fdget_pos+0x2d9/0x380 [ 41.271847][ C0] ksys_write+0x149/0x250 [ 41.276554][ C0] ? __ia32_sys_read+0x90/0x90 [ 41.281328][ C0] ? do_symlinkat+0x4eb/0x5a0 [ 41.286018][ C0] ? debug_smp_processor_id+0x17/0x20 [ 41.291404][ C0] __x64_sys_write+0x7b/0x90 [ 41.296010][ C0] x64_sys_call+0x8ef/0x9a0 [ 41.300525][ C0] do_syscall_64+0x4c/0xa0 [ 41.305567][ C0] ? clear_bhb_loop+0x50/0xa0 [ 41.310257][ C0] ? clear_bhb_loop+0x50/0xa0 [ 41.315121][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 41.321040][ C0] RIP: 0033:0x7f187b874407 [ 41.325473][ C0] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 41.345364][ C0] RSP: 002b:00007ffc2a2a10c0 EFLAGS: 00000202 ORIG_RAX: 0000000000000001 [ 41.353794][ C0] RAX: ffffffffffffffda RBX: 00007f187b786880 RCX: 00007f187b874407 [ 41.362055][ C0] RDX: 0000000000000024 RSI: 000056036960af50 RDI: 0000000000000009 [ 41.370072][ C0] RBP: 000056036960af50 R08: 0000000000000000 R09: 0000000000000000 [ 41.378146][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000024 [ 41.386143][ C0] R13: 00005603695b19b0 R14: 00007f187b9bcea0 R15: 00005603593989dd [ 41.394228][ C0] [ 41.397265][ C0] [ 41.399603][ C0] [ 41.402023][ C0] Memory state around the buggy address: [ 41.408276][ C0] ffffc90000007980: f8 f8 f3 f3 f3 f3 f3 f3 00 00 00 00 00 00 00 00 [ 41.416356][ C0] ffffc90000007a00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 41.424436][ C0] >ffffc90000007a80: f1 f1 f1 f1 00 00 00 00 00 00 00 f3 f3 f3 f3 f3 [ 41.432505][ C0] ^ [ 41.439456][ C0] ffffc90000007b00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 41.447528][ C0] ffffc90000007b80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 41.455595][ C0] ================================================================== [ 41.463665][ C0] Disabling lock debugging due to kernel taint 2026/05/11 10:31:37 executed programs: 598 2026/05/11 10:31:42 executed programs: 1376