Warning: Permanently added '10.128.0.218' (ED25519) to the list of known hosts. 2026/04/14 02:44:05 parsed 1 programs Setting up swapspace version 1, size = 127995904 bytes [ 44.533348][ T24] kauditd_printk_skb: 31 callbacks suppressed [ 44.533359][ T24] audit: type=1400 audit(1776134646.250:105): avc: denied { unlink } for pid=416 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 44.600007][ T24] audit: type=1400 audit(1776134646.320:106): avc: denied { write } for pid=418 comm="mkswap" path="pipe:[14836]" dev="pipefs" ino=14836 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 44.623280][ T416] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 45.383666][ T24] audit: type=1401 audit(1776134647.100:107): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768" [ 45.525779][ T24] audit: type=1400 audit(1776134647.240:108): avc: denied { create } for pid=460 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 45.725124][ T470] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.732418][ T470] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.740364][ T470] device bridge_slave_0 entered promiscuous mode [ 45.747276][ T470] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.754460][ T470] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.761956][ T470] device bridge_slave_1 entered promiscuous mode [ 45.791522][ T470] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.798689][ T470] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.805914][ T470] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.813046][ T470] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.829160][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 45.836820][ T321] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.844140][ T321] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.853287][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 45.861593][ T321] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.868797][ T321] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.877464][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 45.885963][ T321] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.893101][ T321] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.904628][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 45.914110][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 45.927652][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 45.938813][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 45.946897][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 45.954700][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 45.963097][ T470] device veth0_vlan entered promiscuous mode [ 45.972632][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 45.981649][ T470] device veth1_macvtap entered promiscuous mode [ 45.998771][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 46.008716][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 2026/04/14 02:44:07 executed programs: 0 [ 46.215978][ T480] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.223401][ T480] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.231372][ T480] device bridge_slave_0 entered promiscuous mode [ 46.238787][ T480] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.246013][ T480] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.253567][ T480] device bridge_slave_1 entered promiscuous mode [ 46.291326][ T480] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.298489][ T480] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.306146][ T480] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.313247][ T480] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.333750][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 46.341466][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.348898][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.358205][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 46.366641][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.373804][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.382264][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 46.390465][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.397508][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.414241][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 46.424032][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 46.442254][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 46.450711][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 46.462117][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 46.470433][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 46.478574][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 46.485987][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 46.494654][ T480] device veth0_vlan entered promiscuous mode [ 46.505713][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 46.513996][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 46.523476][ T480] device veth1_macvtap entered promiscuous mode [ 46.533424][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 46.541636][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 46.550529][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 46.570873][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 46.579453][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 46.594473][ T24] audit: type=1400 audit(1776134648.310:109): avc: denied { create } for pid=489 comm="syz.2.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 46.615040][ T24] audit: type=1400 audit(1776134648.310:110): avc: denied { write } for pid=489 comm="syz.2.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 46.635438][ T24] audit: type=1400 audit(1776134648.310:111): avc: denied { nlmsg_write } for pid=489 comm="syz.2.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 47.248070][ C0] ================================================================== [ 47.256401][ C0] BUG: KASAN: stack-out-of-bounds in __xfrm_dst_hash+0x399/0x480 [ 47.264405][ C0] Read of size 4 at addr ffffc90000007b18 by task swapper/0/0 [ 47.271847][ C0] [ 47.274279][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 [ 47.281398][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 47.291659][ C0] Call Trace: [ 47.294958][ C0] [ 47.297816][ C0] __dump_stack+0x21/0x24 [ 47.302179][ C0] dump_stack_lvl+0x1a7/0x208 [ 47.307033][ C0] ? show_regs_print_info+0x18/0x18 [ 47.312222][ C0] ? thaw_kernel_threads+0x220/0x220 [ 47.317677][ C0] print_address_description+0x7f/0x2c0 [ 47.323204][ C0] ? __xfrm_dst_hash+0x399/0x480 [ 47.328231][ C0] kasan_report+0xe2/0x130 [ 47.332720][ C0] ? __xfrm_dst_hash+0x399/0x480 [ 47.337640][ C0] __asan_report_load4_noabort+0x14/0x20 [ 47.343267][ C0] __xfrm_dst_hash+0x399/0x480 [ 47.348114][ C0] xfrm_state_find+0x28c/0x28b0 [ 47.353142][ C0] ? stack_trace_save+0xf0/0xf0 [ 47.358277][ C0] ? xfrm_sad_getinfo+0x170/0x170 [ 47.363295][ C0] ? stack_trace_save+0xa6/0xf0 [ 47.368324][ C0] ? stack_trace_snprint+0xf0/0xf0 [ 47.373416][ C0] xfrm_resolve_and_create_bundle+0x697/0x29f0 [ 47.379744][ C0] ? xfrm_sk_policy_lookup+0x480/0x480 [ 47.385674][ C0] ? xfrm_selector_match+0xb7e/0x1030 [ 47.391035][ C0] ? __xfrm_policy_check+0x29d0/0x29d0 [ 47.396629][ C0] xfrm_lookup_with_ifid+0x7ea/0x1a80 [ 47.401985][ C0] ? percpu_counter_add_batch+0x13c/0x160 [ 47.407872][ C0] ? rt_set_nexthop+0x5b9/0x780 [ 47.412982][ C0] ? __xfrm_sk_clone_policy+0x680/0x680 [ 47.418520][ C0] ? ip_route_output_key_hash_rcu+0x15af/0x20e0 [ 47.425104][ C0] xfrm_lookup_route+0x3c/0x170 [ 47.430287][ C0] ip_route_output_flow+0x1f8/0x2f0 [ 47.435470][ C0] ? igmpv3_newpack+0x173/0xc80 [ 47.440391][ C0] ? ipv4_sk_update_pmtu+0x14c0/0x14c0 [ 47.445836][ C0] ? make_kuid+0x1db/0x680 [ 47.450319][ C0] ? __put_user_ns+0x60/0x60 [ 47.454889][ C0] ? __kasan_check_write+0x14/0x20 [ 47.460345][ C0] ? __alloc_skb+0x38b/0x520 [ 47.465004][ C0] igmpv3_newpack+0x281/0xc80 [ 47.469859][ C0] ? ip6table_filter_table_init+0xf0/0xf0 [ 47.475733][ C0] ? igmpv3_sendpack+0x190/0x190 [ 47.480828][ C0] ? mld_sendpack+0x77d/0xb40 [ 47.485579][ C0] add_grhead+0x75/0x2e0 [ 47.489831][ C0] add_grec+0x116b/0x1410 [ 47.494144][ C0] ? __kasan_check_write+0x14/0x20 [ 47.499237][ C0] igmp_ifc_timer_expire+0x89e/0xf80 [ 47.504639][ C0] ? __kasan_check_write+0x14/0x20 [ 47.509972][ C0] ? _raw_spin_lock_irq+0x95/0xf0 [ 47.515121][ C0] ? _raw_spin_lock_irqsave+0x130/0x130 [ 47.520760][ C0] ? igmp_gq_timer_expire+0xe0/0xe0 [ 47.526068][ C0] call_timer_fn+0x38/0x290 [ 47.530567][ C0] ? igmp_gq_timer_expire+0xe0/0xe0 [ 47.535933][ C0] __run_timers+0x650/0x9e0 [ 47.540541][ C0] ? calc_index+0x200/0x200 [ 47.545041][ C0] ? sched_clock_cpu+0x1b/0x3d0 [ 47.550055][ C0] run_timer_softirq+0x6a/0xf0 [ 47.554801][ C0] __do_softirq+0x255/0x563 [ 47.559393][ C0] asm_call_irq_on_stack+0xf/0x20 [ 47.564409][ C0] [ 47.567342][ C0] do_softirq_own_stack+0x60/0x80 [ 47.572622][ C0] __irq_exit_rcu+0x128/0x150 [ 47.577476][ C0] irq_exit_rcu+0x9/0x10 [ 47.581718][ C0] sysvec_apic_timer_interrupt+0xbf/0xe0 [ 47.587881][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 47.593988][ C0] RIP: 0010:default_idle+0x12/0x20 [ 47.599239][ C0] Code: 44 2a 00 00 49 bd 00 00 00 00 00 fc ff df e9 67 ff ff ff e8 d0 f7 fa ff 55 48 89 e5 0f 1f 44 00 00 0f 00 2d 90 49 62 00 fb f4 <5d> c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 55 48 89 e5 41 57 41 56 [ 47.619076][ C0] RSP: 0018:ffffffff86407d58 EFLAGS: 00000242 [ 47.625238][ C0] RAX: ffff8881f7000000 RBX: ffffffff8641c100 RCX: 00000000000099c6 [ 47.633331][ C0] RDX: 0000000000000001 RSI: ffffffff85408180 RDI: ffffffff85408140 [ 47.641477][ C0] RBP: ffffffff86407d58 R08: ffff8881f70573d3 R09: 1ffff1103ee0ae7a [ 47.649634][ C0] R10: dffffc0000000000 R11: ffffed103ee0ae7b R12: 1ffffffff0c83820 [ 47.657805][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: dffffc0000000000 [ 47.666278][ C0] arch_cpu_idle+0xa/0x10 [ 47.670712][ C0] default_idle_call+0x71/0x1d0 [ 47.675723][ C0] do_idle+0x1dc/0x570 [ 47.680217][ C0] ? rcu_irq_exit+0x9/0x10 [ 47.684759][ C0] ? idle_inject_timer_fn+0x60/0x60 [ 47.690906][ C0] cpu_startup_entry+0x18/0x20 [ 47.695721][ C0] rest_init+0xe8/0xf0 [ 47.699797][ C0] ? time_init+0x38/0x38 [ 47.704156][ C0] arch_call_rest_init+0xe/0x10 [ 47.709438][ C0] start_kernel+0x431/0x49f [ 47.714029][ C0] x86_64_start_reservations+0x2a/0x2c [ 47.719488][ C0] x86_64_start_kernel+0x60/0x63 [ 47.724692][ C0] secondary_startup_64_no_verify+0xad/0xbb [ 47.730582][ C0] [ 47.732910][ C0] [ 47.735326][ C0] Memory state around the buggy address: [ 47.741300][ C0] ffffc90000007a00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 47.749456][ C0] ffffc90000007a80: 00 00 00 00 00 00 00 00 f1 f1 f1 f1 00 00 00 00 [ 47.757737][ C0] >ffffc90000007b00: 00 00 00 f3 f3 f3 f3 f3 00 00 00 00 00 00 00 00 [ 47.765798][ C0] ^ [ 47.770911][ C0] ffffc90000007b80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 47.778972][ C0] ffffc90000007c00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 47.787047][ C0] ================================================================== [ 47.795241][ C0] Disabling lock debugging due to kernel taint [ 47.829053][ T48] device bridge_slave_1 left promiscuous mode [ 47.835436][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.843482][ T48] device bridge_slave_0 left promiscuous mode [ 47.849840][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.857731][ T48] device veth1_macvtap left promiscuous mode [ 47.864304][ T48] device veth0_vlan left promiscuous mode 2026/04/14 02:44:12 executed programs: 243 2026/04/14 02:44:17 executed programs: 543 [ 57.187074][ T1695] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.194194][ T1695] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.201706][ T1695] device bridge_slave_0 entered promiscuous mode [ 57.209242][ T1695] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.216396][ T1695] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.223947][ T1695] device bridge_slave_1 entered promiscuous mode