Warning: Permanently added '10.128.1.67' (ED25519) to the list of known hosts.
2025/03/27 19:47:28 ignoring optional flag "sandboxArg"="0"
2025/03/27 19:47:28 ignoring optional flag "type"="gce"
2025/03/27 19:47:28 parsed 1 programs
2025/03/27 19:47:28 executed programs: 0
[ 46.400203][ T410] bridge0: port 1(bridge_slave_0) entered blocking state
[ 46.407189][ T410] bridge0: port 1(bridge_slave_0) entered disabled state
[ 46.414760][ T410] device bridge_slave_0 entered promiscuous mode
[ 46.421669][ T410] bridge0: port 2(bridge_slave_1) entered blocking state
[ 46.428544][ T410] bridge0: port 2(bridge_slave_1) entered disabled state
[ 46.436525][ T410] device bridge_slave_1 entered promiscuous mode
[ 46.492662][ T410] bridge0: port 2(bridge_slave_1) entered blocking state
[ 46.499814][ T410] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 46.507519][ T410] bridge0: port 1(bridge_slave_0) entered blocking state
[ 46.515014][ T410] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 46.541078][ T7] bridge0: port 1(bridge_slave_0) entered disabled state
[ 46.548869][ T7] bridge0: port 2(bridge_slave_1) entered disabled state
[ 46.556365][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 46.563659][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 46.574960][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 46.583111][ T7] bridge0: port 1(bridge_slave_0) entered blocking state
[ 46.590132][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 46.599720][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 46.607931][ T7] bridge0: port 2(bridge_slave_1) entered blocking state
[ 46.615133][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 46.630148][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 46.640122][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 46.659071][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 46.672335][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 46.688100][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 46.703313][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 46.717425][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 46.736067][ T23] kauditd_printk_skb: 15 callbacks suppressed
[ 46.736080][ T23] audit: type=1400 audit(1743104849.360:91): avc: denied { mounton } for pid=410 comm="syz-executor.0" path="/dev/binderfs" dev="devtmpfs" ino=11547 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1
[ 46.778596][ T23] audit: type=1400 audit(1743104849.400:92): avc: denied { create } for pid=415 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[ 46.799507][ T23] audit: type=1400 audit(1743104849.400:93): avc: denied { write } for pid=415 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[ 46.820173][ T23] audit: type=1400 audit(1743104849.400:94): avc: denied { nlmsg_write } for pid=415 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[ 46.924030][ C0] ==================================================================
[ 46.932370][ C0] BUG: KASAN: stack-out-of-bounds in __xfrm_dst_hash+0x355/0x430
[ 46.940083][ C0] Read of size 4 at addr ffff8881f6e09a78 by task swapper/0/0
[ 46.947841][ C0]
[ 46.950111][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 5.4.290-syzkaller-05053-g41adfeb3d639 #0
[ 46.959376][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[ 46.969493][ C0] Call Trace:
[ 46.972574][ C0]
[ 46.975283][ C0] dump_stack+0x1d8/0x241
[ 46.979699][ C0] ? nf_ct_l4proto_log_invalid+0x258/0x258
[ 46.985564][ C0] ? printk+0xd1/0x111
[ 46.989534][ C0] ? __xfrm_dst_hash+0x355/0x430
[ 46.994523][ C0] print_address_description+0x8c/0x600
[ 47.000000][ C0] ? __xfrm_dst_hash+0x355/0x430
[ 47.004981][ C0] __kasan_report+0xf3/0x120
[ 47.009414][ C0] ? __xfrm_dst_hash+0x355/0x430
[ 47.014175][ C0] kasan_report+0x30/0x60
[ 47.018423][ C0] __xfrm_dst_hash+0x355/0x430
[ 47.023219][ C0] xfrm_state_find+0x2cc/0x2dc0
[ 47.028007][ C0] ? call_rcu+0x10/0x10
[ 47.032182][ C0] ? xfrm_sad_getinfo+0x170/0x170
[ 47.037134][ C0] ? xfrm4_get_saddr+0x18c/0x2a0
[ 47.041897][ C0] ? stack_trace_save+0x118/0x1c0
[ 47.046953][ C0] ? xfrm_pol_bin_key+0x21/0x1c0
[ 47.052252][ C0] xfrm_resolve_and_create_bundle+0x6aa/0x31d0
[ 47.058448][ C0] ? xfrm_pol_bin_obj+0x1c0/0x1c0
[ 47.063480][ C0] ? xfrm_sk_policy_lookup+0x5c0/0x5c0
[ 47.068761][ C0] ? xfrm_policy_lookup+0xe4f/0xec0
[ 47.073920][ C0] xfrm_lookup_with_ifid+0x549/0x1c90
[ 47.079110][ C0] ? rt_set_nexthop+0x21b/0x700
[ 47.083798][ C0] ? __xfrm_sk_clone_policy+0x8a0/0x8a0
[ 47.089361][ C0] ? ip_route_output_key_hash+0x230/0x230
[ 47.095101][ C0] xfrm_lookup_route+0x37/0x170
[ 47.099878][ C0] ip_route_output_flow+0x1fe/0x330
[ 47.104917][ C0] ? ipv4_sk_update_pmtu+0x1ed0/0x1ed0
[ 47.110399][ C0] ? make_kuid+0x200/0x700
[ 47.114765][ C0] ? __put_user_ns+0x50/0x50
[ 47.119550][ C0] ? __alloc_skb+0x29e/0x4d0
[ 47.124594][ C0] igmpv3_newpack+0x437/0x1070
[ 47.129366][ C0] ? smp_apic_timer_interrupt+0x11a/0x490
[ 47.134904][ C0] ? igmpv3_sendpack+0x190/0x190
[ 47.139670][ C0] ? check_preemption_disabled+0x9f/0x320
[ 47.145226][ C0] ? check_preemption_disabled+0x9f/0x320
[ 47.151098][ C0] ? debug_smp_processor_id+0x20/0x20
[ 47.156465][ C0] ? update_vsyscall+0x5bc/0x8b0
[ 47.161643][ C0] add_grhead+0x75/0x2c0
[ 47.165951][ C0] add_grec+0x12c9/0x15d0
[ 47.170115][ C0] ? __raise_softirq_irqoff+0x1d/0x110
[ 47.175870][ C0] ? _raw_spin_lock_bh+0xa4/0x1b0
[ 47.180733][ C0] ? igmpv3_send_report+0x410/0x410
[ 47.185955][ C0] ? check_preemption_disabled+0x9f/0x320
[ 47.191587][ C0] ? update_rq_clock+0x67/0x350
[ 47.196474][ C0] igmp_ifc_timer_expire+0x7bc/0xea0
[ 47.201681][ C0] ? _raw_spin_lock_irq+0xa5/0x1b0
[ 47.206881][ C0] ? _raw_spin_lock_irqsave+0x210/0x210
[ 47.212684][ C0] ? igmp_gq_timer_expire+0xd0/0xd0
[ 47.217966][ C0] call_timer_fn+0x36/0x390
[ 47.222686][ C0] ? igmp_gq_timer_expire+0xd0/0xd0
[ 47.227881][ C0] __run_timers+0x879/0xbe0
[ 47.232499][ C0] ? enqueue_timer+0x300/0x300
[ 47.237917][ C0] ? scheduler_ipi+0xa7/0x160
[ 47.242509][ C0] ? check_preemption_disabled+0x9f/0x320
[ 47.248458][ C0] ? debug_smp_processor_id+0x20/0x20
[ 47.253920][ C0] ? check_preemption_disabled+0x91/0x320
[ 47.259658][ C0] run_timer_softirq+0x63/0xf0
[ 47.265351][ C0] __do_softirq+0x23b/0x6b7
[ 47.270490][ C0] ? sched_clock_cpu+0x18/0x3a0
[ 47.275530][ C0] irq_exit+0x195/0x1c0
[ 47.279705][ C0] smp_apic_timer_interrupt+0x11a/0x490
[ 47.285186][ C0] apic_timer_interrupt+0xf/0x20
[ 47.289940][ C0]
[ 47.292831][ C0] RIP: 0010:default_idle+0x1f/0x30
[ 47.298143][ C0] Code: 90 90 90 90 90 90 90 90 90 90 90 e8 8b af da fd bf 01 00 00 00 89 c6 e8 ef 93 d1 fc 0f 1f 44 00 00 0f 00 2d 23 a3 4d 00 fb f4 6c af da fd bf ff ff ff ff 89 c6 e9 d0 93 d1 fc 41 57 41 56 53
[ 47.318713][ C0] RSP: 0018:ffffffff85e07d18 EFLAGS: 000002d2 ORIG_RAX: ffffffffffffff13
[ 47.327503][ C0] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffffffff85e1adc0
[ 47.335593][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001
[ 47.343937][ C0] RBP: ffffffff85e07e20 R08: ffffffff8231cd01 R09: fffffbfff0bc35b9
[ 47.351845][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: ffffffff864c4d68
[ 47.360634][ C0] R13: ffffffff85e1adc0 R14: 1ffffffff0bc35b8 R15: 0000000000000000
[ 47.368530][ C0] ? check_preemption_disabled+0x91/0x320
[ 47.374488][ C0] ? default_idle+0x11/0x30
[ 47.378991][ C0] do_idle+0x248/0x660
[ 47.383436][ C0] ? check_preemption_disabled+0x9f/0x320
[ 47.389084][ C0] ? idle_inject_timer_fn+0x60/0x60
[ 47.394308][ C0] cpu_startup_entry+0x14/0x20
[ 47.399005][ C0] ? time_init+0x33/0x33
[ 47.403061][ C0] start_kernel+0x6d9/0x81d
[ 47.407403][ C0] ? arch_call_rest_init+0xa/0xa
[ 47.412267][ C0] ? kasan_early_init+0x22d/0x27d
[ 47.417366][ C0] ? check_loader_disabled_bsp+0x95/0x16c
[ 47.422923][ C0] ? load_ucode_bsp+0xde/0x105
[ 47.427892][ C0] secondary_startup_64+0xa4/0xb0
[ 47.432728][ C0]
[ 47.434890][ C0] The buggy address belongs to the page:
[ 47.440525][ C0] page:ffffea0007db8240 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0
[ 47.449548][ C0] flags: 0x8000000000001000(reserved)
[ 47.454839][ C0] raw: 8000000000001000 ffffea0007db8248 ffffea0007db8248 0000000000000000
[ 47.463454][ C0] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000
[ 47.471905][ C0] page dumped because: kasan: bad access detected
[ 47.478248][ C0] page_owner info is not present (never set?)
[ 47.484136][ C0]
[ 47.486313][ C0] Memory state around the buggy address:
[ 47.491802][ C0] ffff8881f6e09900: 00 00 00 00 00 00 f3 f3 f3 f3 f3 f3 00 00 00 00
[ 47.500010][ C0] ffff8881f6e09980: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 47.508170][ C0] >ffff8881f6e09a00: 00 00 00 00 f1 f1 f1 f1 00 00 00 00 00 00 00 f3
[ 47.516372][ C0] ^
[ 47.524417][ C0] ffff8881f6e09a80: f3 f3 f3 f3 00 00 00 00 00 00 00 00 00 00 00 00
[ 47.532583][ C0] ffff8881f6e09b00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 47.540948][ C0] ==================================================================
[ 47.549727][ C0] Disabling lock debugging due to kernel taint
2025/03/27 19:47:33 executed programs: 423
2025/03/27 19:47:38 executed programs: 966