Warning: Permanently added '10.128.1.185' (ED25519) to the list of known hosts.
2026/10/09 21:02:42 parsed 1 programs
Setting up swapspace version 1, size = 127995904 bytes
[ 34.487188][ T30] kauditd_printk_skb: 31 callbacks suppressed
[ 34.487200][ T30] audit: type=1400 audit(1791579763.323:105): avc: denied { unlink } for pid=409 comm="syz-executor" name="swap-file" dev="sda1" ino=2027 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[ 34.526507][ T409] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 35.342184][ T30] audit: type=1401 audit(1791579764.173:106): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768"
[ 35.501296][ T464] bridge0: port 1(bridge_slave_0) entered blocking state
[ 35.509204][ T464] bridge0: port 1(bridge_slave_0) entered disabled state
[ 35.516517][ T464] device bridge_slave_0 entered promiscuous mode
[ 35.523334][ T464] bridge0: port 2(bridge_slave_1) entered blocking state
[ 35.530370][ T464] bridge0: port 2(bridge_slave_1) entered disabled state
[ 35.537731][ T464] device bridge_slave_1 entered promiscuous mode
[ 35.570903][ T464] bridge0: port 2(bridge_slave_1) entered blocking state
[ 35.577997][ T464] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 35.585240][ T464] bridge0: port 1(bridge_slave_0) entered blocking state
[ 35.592303][ T464] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 35.608520][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 35.616053][ T319] bridge0: port 1(bridge_slave_0) entered disabled state
[ 35.623377][ T319] bridge0: port 2(bridge_slave_1) entered disabled state
[ 35.631973][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 35.640189][ T319] bridge0: port 1(bridge_slave_0) entered blocking state
[ 35.647233][ T319] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 35.655857][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 35.664273][ T319] bridge0: port 2(bridge_slave_1) entered blocking state
[ 35.671339][ T319] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 35.682412][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 35.691622][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 35.704127][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 35.714835][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 35.723087][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 35.730739][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 35.739311][ T464] device veth0_vlan entered promiscuous mode
[ 35.748654][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 35.757831][ T464] device veth1_macvtap entered promiscuous mode
[ 35.767037][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 35.776740][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
2026/10/09 21:02:44 executed programs: 0
[ 35.965821][ T474] bridge0: port 1(bridge_slave_0) entered blocking state
[ 35.973616][ T474] bridge0: port 1(bridge_slave_0) entered disabled state
[ 35.981414][ T474] device bridge_slave_0 entered promiscuous mode
[ 35.988467][ T474] bridge0: port 2(bridge_slave_1) entered blocking state
[ 35.995519][ T474] bridge0: port 2(bridge_slave_1) entered disabled state
[ 36.003033][ T474] device bridge_slave_1 entered promiscuous mode
[ 36.045564][ T474] bridge0: port 2(bridge_slave_1) entered blocking state
[ 36.052661][ T474] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 36.059953][ T474] bridge0: port 1(bridge_slave_0) entered blocking state
[ 36.066977][ T474] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 36.089142][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 36.096894][ T8] bridge0: port 1(bridge_slave_0) entered disabled state
[ 36.104060][ T8] bridge0: port 2(bridge_slave_1) entered disabled state
[ 36.112946][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 36.121125][ T8] bridge0: port 1(bridge_slave_0) entered blocking state
[ 36.128168][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 36.141937][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 36.150758][ T8] bridge0: port 2(bridge_slave_1) entered blocking state
[ 36.157832][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 36.168953][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 36.186237][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 36.199255][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 36.215159][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 36.223173][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 36.231795][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 36.239465][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 36.247862][ T474] device veth0_vlan entered promiscuous mode
[ 36.263710][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 36.271864][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 36.288204][ T474] device veth1_macvtap entered promiscuous mode
[ 36.296864][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 36.304506][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 36.312840][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 36.322689][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 36.331229][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 36.359560][ T30] audit: type=1400 audit(1791579765.193:107): avc: denied { create } for pid=478 comm="syz.2.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[ 36.379266][ T30] audit: type=1400 audit(1791579765.213:108): avc: denied { create } for pid=478 comm="syz.2.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[ 36.399291][ T30] audit: type=1400 audit(1791579765.213:109): avc: denied { write } for pid=478 comm="syz.2.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[ 36.406770][ C1] ==================================================================
[ 36.420591][ T30] audit: type=1400 audit(1791579765.213:110): avc: denied { nlmsg_write } for pid=478 comm="syz.2.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[ 36.427152][ C1] BUG: KASAN: stack-out-of-bounds in __xfrm_dst_hash+0x399/0x480
[ 36.447643][ T30] audit: type=1400 audit(1791579765.213:111): avc: denied { setopt } for pid=478 comm="syz.2.17" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[ 36.455174][ C1] Read of size 4 at addr ffffc900001d0b38 by task kworker/u4:4/323
[ 36.483371][ C1]
[ 36.485697][ C1] CPU: 1 PID: 323 Comm: kworker/u4:4 Not tainted syzkaller #0
[ 36.493138][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 36.503201][ C1] Workqueue: netns cleanup_net
[ 36.507997][ C1] Call Trace:
[ 36.511262][ C1]
[ 36.514097][ C1] __dump_stack+0x21/0x30
[ 36.518416][ C1] dump_stack_lvl+0x110/0x170
[ 36.523093][ C1] ? show_regs_print_info+0x20/0x20
[ 36.528273][ C1] ? load_image+0x3f0/0x3f0
[ 36.532755][ C1] print_address_description+0x7f/0x2c0
[ 36.538280][ C1] ? __xfrm_dst_hash+0x399/0x480
[ 36.543202][ C1] kasan_report+0x10f/0x150
[ 36.547695][ C1] ? __xfrm_dst_hash+0x399/0x480
[ 36.552633][ C1] __asan_report_load4_noabort+0x14/0x20
[ 36.558257][ C1] __xfrm_dst_hash+0x399/0x480
[ 36.563188][ C1] xfrm_state_find+0x291/0x2a10
[ 36.568289][ C1] ? update_stack_state+0x171/0x490
[ 36.573488][ C1] ? xfrm_sad_getinfo+0x170/0x170
[ 36.578504][ C1] ? _raw_spin_lock_irqsave+0xc2/0x130
[ 36.584156][ C1] ? stack_trace_save+0xa6/0xf0
[ 36.589010][ C1] xfrm_resolve_and_create_bundle+0x6b7/0x2a20
[ 36.595159][ C1] ? xfrm_sk_policy_lookup+0x460/0x460
[ 36.600641][ C1] ? xfrm_selector_match+0xc19/0x10a0
[ 36.606007][ C1] ? __xfrm_policy_check+0x2930/0x2930
[ 36.611494][ C1] xfrm_lookup_with_ifid+0x692/0x2050
[ 36.616896][ C1] ? __xfrm_sk_clone_policy+0x680/0x680
[ 36.622474][ C1] ? ip_route_output_key_hash_rcu+0x1597/0x1fd0
[ 36.628793][ C1] xfrm_lookup_route+0x3c/0x170
[ 36.633632][ C1] ip_route_output_flow+0x1f8/0x2f0
[ 36.638829][ C1] ? ipv4_sk_update_pmtu+0x14e0/0x14e0
[ 36.644272][ C1] ? make_kuid+0x1d7/0x680
[ 36.648672][ C1] ? __put_user_ns+0x60/0x60
[ 36.653267][ C1] ? __kasan_check_write+0x14/0x20
[ 36.658360][ C1] ? __alloc_skb+0x459/0x730
[ 36.662930][ C1] igmpv3_newpack+0x288/0xd00
[ 36.667595][ C1] ? process_one_work+0x6c8/0xbb0
[ 36.672599][ C1] ? worker_thread+0xaa0/0x1250
[ 36.677448][ C1] ? kthread+0x3f5/0x4f0
[ 36.681701][ C1] ? igmpv3_sendpack+0x190/0x190
[ 36.686768][ C1] ? _raw_spin_lock_irqsave+0xc2/0x130
[ 36.692322][ C1] ? is_in+0x137/0x5b0
[ 36.696384][ C1] add_grec+0x997/0x1400
[ 36.700620][ C1] igmp_ifc_timer_expire+0x101/0xe70
[ 36.705903][ C1] ? __kasan_check_write+0x14/0x20
[ 36.711098][ C1] ? igmp_gq_timer_expire+0xe0/0xe0
[ 36.716602][ C1] call_timer_fn+0x38/0x290
[ 36.721357][ C1] ? igmp_gq_timer_expire+0xe0/0xe0
[ 36.726751][ C1] __run_timers+0x637/0x9a0
[ 36.731346][ C1] ? calc_index+0x200/0x200
[ 36.735838][ C1] ? sched_clock_cpu+0x18/0x3d0
[ 36.740686][ C1] run_timer_softirq+0x6a/0xf0
[ 36.745460][ C1] handle_softirqs+0x250/0x560
[ 36.750351][ C1] __irq_exit_rcu+0x52/0xf0
[ 36.754869][ C1] irq_exit_rcu+0x9/0x10
[ 36.759196][ C1] sysvec_apic_timer_interrupt+0xa9/0xc0
[ 36.764910][ C1]
[ 36.767834][ C1]
[ 36.770749][ C1] asm_sysvec_apic_timer_interrupt+0x1b/0x20
[ 36.776728][ C1] RIP: 0010:kasan_check_range+0x8f/0x2a0
[ 36.782356][ C1] Code: 1c 29 49 89 dc 4d 29 dc 49 83 fc 10 7f 29 4d 85 e4 0f 84 45 01 00 00 4c 89 cb 48 f7 d3 4c 01 f3 41 80 3b 00 0f 85 95 01 00 00 <49> ff c3 48 ff c3 75 ee e9 25 01 00 00 45 89 df 41 83 e7 07 0f 84
[ 36.802059][ C1] RSP: 0018:ffffc90000af75e8 EFLAGS: 00000246
[ 36.808216][ C1] RAX: ffff88811b982801 RBX: fffffffffffffff7 RCX: ffffffff8131cf44
[ 36.816188][ C1] RDX: 0000000000000001 RSI: 0000000000000060 RDI: ffffc90000af76a8
[ 36.824149][ C1] RBP: ffffc90000af7610 R08: ffffc90000af7707 R09: 1ffff9200015eee0
[ 36.832197][ C1] R10: dffffc0000000000 R11: fffff5200015eed8 R12: 000000000000000c
[ 36.840496][ C1] R13: dffffc0000000001 R14: 1ffff9200015eed5 R15: ffffc90000af76a8
[ 36.848948][ C1] ? __unwind_start+0x34/0x3a0
[ 36.854796][ C1] memset+0x23/0x40
[ 36.858605][ C1] __unwind_start+0x34/0x3a0
[ 36.863184][ C1] ? stack_trace_save+0xf0/0xf0
[ 36.868107][ C1] arch_stack_walk+0xd6/0x140
[ 36.872776][ C1] stack_trace_save+0xa6/0xf0
[ 36.877537][ C1] ? stack_trace_snprint+0xe0/0xe0
[ 36.882632][ C1] ? __stack_depot_save+0x34/0x480
[ 36.887908][ C1] ? memset+0x35/0x40
[ 36.891878][ C1] kasan_save_stack+0x3a/0x60
[ 36.896551][ C1] __kasan_record_aux_stack+0xd2/0x100
[ 36.902565][ C1] kasan_record_aux_stack_noalloc+0xb/0x10
[ 36.908377][ C1] kvfree_call_rcu+0xb6/0x860
[ 36.913054][ C1] ? call_rcu+0xf60/0xf60
[ 36.917368][ C1] ? __kasan_slab_free+0x11/0x20
[ 36.922290][ C1] ? __rtnl_unlock+0x7c/0x90
[ 36.926980][ C1] ? __kasan_check_write+0x14/0x20
[ 36.932077][ C1] ? _raw_spin_lock+0x94/0xf0
[ 36.936739][ C1] ? mutex_lock+0x9b/0x1c0
[ 36.941141][ C1] ? fib6_rule_configure+0xa80/0xa80
[ 36.946412][ C1] fib_rules_unregister+0x30b/0x330
[ 36.951592][ C1] fib6_rules_net_exit+0x40/0x50
[ 36.956514][ C1] cleanup_net+0x58e/0xae0
[ 36.960912][ C1] ? ops_init+0x470/0x470
[ 36.965226][ C1] process_one_work+0x6c8/0xbb0
[ 36.970064][ C1] worker_thread+0xaa0/0x1250
[ 36.974733][ C1] ? __kasan_check_read+0x11/0x20
[ 36.979741][ C1] kthread+0x3f5/0x4f0
[ 36.983798][ C1] ? worker_clr_flags+0x190/0x190
[ 36.988809][ C1] ? kthread_blkcg+0xd0/0xd0
[ 36.993560][ C1] ret_from_fork+0x1f/0x30
[ 36.997963][ C1]
[ 37.000967][ C1]
[ 37.003272][ C1]
[ 37.005771][ C1] Memory state around the buggy address:
[ 37.011386][ C1] ffffc900001d0a00: f3 f3 f3 f3 00 00 00 00 00 00 00 00 00 00 00 00
[ 37.019526][ C1] ffffc900001d0a80: 00 00 00 00 00 00 00 00 00 00 00 00 f1 f1 f1 f1
[ 37.027616][ C1] >ffffc900001d0b00: 00 00 00 00 00 00 00 f3 f3 f3 f3 f3 00 00 00 00
[ 37.035672][ C1] ^
[ 37.041731][ C1] ffffc900001d0b80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 37.049808][ C1] ffffc900001d0c00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 37.057856][ C1] ==================================================================
[ 37.065918][ C1] Disabling lock debugging due to kernel taint
[ 37.588707][ T323] device bridge_slave_1 left promiscuous mode
[ 37.594894][ T323] bridge0: port 2(bridge_slave_1) entered disabled state
[ 37.602339][ T323] device bridge_slave_0 left promiscuous mode
[ 37.608495][ T323] bridge0: port 1(bridge_slave_0) entered disabled state
[ 37.616082][ T323] device veth1_macvtap left promiscuous mode
[ 37.622153][ T323] device veth0_vlan left promiscuous mode
2026/10/09 21:02:49 executed programs: 228
2026/10/09 21:02:54 executed programs: 525