Warning: Permanently added '10.128.1.168' (ED25519) to the list of known hosts.
2026/10/09 20:48:34 parsed 1 programs
Setting up swapspace version 1, size = 127995904 bytes
[ 36.708322][ T30] kauditd_printk_skb: 31 callbacks suppressed
[ 36.708336][ T30] audit: type=1400 audit(1791578914.990:105): avc: denied { unlink } for pid=409 comm="syz-executor" name="swap-file" dev="sda1" ino=2027 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[ 36.782057][ T409] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 37.410178][ T30] audit: type=1401 audit(1791578915.690:106): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768"
[ 37.453127][ T434] bridge0: port 1(bridge_slave_0) entered blocking state
[ 37.461029][ T434] bridge0: port 1(bridge_slave_0) entered disabled state
[ 37.468546][ T434] device bridge_slave_0 entered promiscuous mode
[ 37.475671][ T434] bridge0: port 2(bridge_slave_1) entered blocking state
[ 37.482850][ T434] bridge0: port 2(bridge_slave_1) entered disabled state
[ 37.490700][ T434] device bridge_slave_1 entered promiscuous mode
[ 37.525418][ T434] bridge0: port 2(bridge_slave_1) entered blocking state
[ 37.533820][ T434] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 37.542711][ T434] bridge0: port 1(bridge_slave_0) entered blocking state
[ 37.551867][ T434] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 37.574168][ T45] bridge0: port 1(bridge_slave_0) entered disabled state
[ 37.584741][ T45] bridge0: port 2(bridge_slave_1) entered disabled state
[ 37.599434][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 37.609058][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 37.620222][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 37.632339][ T45] bridge0: port 1(bridge_slave_0) entered blocking state
[ 37.646452][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 37.662562][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 37.674970][ T45] bridge0: port 2(bridge_slave_1) entered blocking state
[ 37.696404][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 37.715299][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 37.726115][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 37.750572][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 37.763098][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 37.772555][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 37.783200][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 37.794866][ T434] device veth0_vlan entered promiscuous mode
[ 37.809095][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 37.819613][ T434] device veth1_macvtap entered promiscuous mode
[ 37.829747][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 37.842399][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
2026/10/09 20:48:36 executed programs: 0
[ 38.417141][ T474] bridge0: port 1(bridge_slave_0) entered blocking state
[ 38.424766][ T474] bridge0: port 1(bridge_slave_0) entered disabled state
[ 38.432523][ T474] device bridge_slave_0 entered promiscuous mode
[ 38.439755][ T474] bridge0: port 2(bridge_slave_1) entered blocking state
[ 38.447236][ T474] bridge0: port 2(bridge_slave_1) entered disabled state
[ 38.455142][ T474] device bridge_slave_1 entered promiscuous mode
[ 38.515080][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 38.523245][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 38.532574][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 38.541349][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 38.550118][ T319] bridge0: port 1(bridge_slave_0) entered blocking state
[ 38.557164][ T319] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 38.564889][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 38.576117][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 38.584723][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 38.593299][ T319] bridge0: port 2(bridge_slave_1) entered blocking state
[ 38.600370][ T319] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 38.611456][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 38.620539][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 38.632960][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 38.643650][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 38.652043][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 38.659721][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 38.668233][ T474] device veth0_vlan entered promiscuous mode
[ 38.677234][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 38.686706][ T474] device veth1_macvtap entered promiscuous mode
[ 38.695802][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 38.705729][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 38.729329][ T30] audit: type=1400 audit(1791578917.000:107): avc: denied { create } for pid=478 comm="syz.2.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[ 38.749950][ T30] audit: type=1400 audit(1791578917.010:108): avc: denied { write } for pid=478 comm="syz.2.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[ 38.770280][ T30] audit: type=1400 audit(1791578917.010:109): avc: denied { nlmsg_write } for pid=478 comm="syz.2.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[ 38.807782][ C1] ==================================================================
[ 38.816005][ C1] BUG: KASAN: stack-out-of-bounds in __xfrm_dst_hash+0x399/0x480
[ 38.823854][ C1] Read of size 4 at addr ffffc900001d0ad8 by task swapper/1/0
[ 38.831295][ C1]
[ 38.833630][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted syzkaller #0
[ 38.840644][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 38.850696][ C1] Call Trace:
[ 38.854050][ C1]
[ 38.856962][ C1] __dump_stack+0x21/0x30
[ 38.861280][ C1] dump_stack_lvl+0x110/0x170
[ 38.865940][ C1] ? show_regs_print_info+0x20/0x20
[ 38.871121][ C1] ? load_image+0x3f0/0x3f0
[ 38.875604][ C1] print_address_description+0x7f/0x2c0
[ 38.881255][ C1] ? __xfrm_dst_hash+0x399/0x480
[ 38.886289][ C1] kasan_report+0x10f/0x150
[ 38.890777][ C1] ? __xfrm_dst_hash+0x399/0x480
[ 38.895908][ C1] __asan_report_load4_noabort+0x14/0x20
[ 38.901696][ C1] __xfrm_dst_hash+0x399/0x480
[ 38.906456][ C1] xfrm_state_find+0x291/0x2a10
[ 38.911503][ C1] ? update_stack_state+0x171/0x490
[ 38.916721][ C1] ? xfrm_sad_getinfo+0x170/0x170
[ 38.921932][ C1] ? secondary_startup_64_no_verify+0xb1/0xbb
[ 38.928183][ C1] ? stack_trace_save+0xa6/0xf0
[ 38.933236][ C1] xfrm_resolve_and_create_bundle+0x6b7/0x2a20
[ 38.939392][ C1] ? xfrm_sk_policy_lookup+0x460/0x460
[ 38.945431][ C1] ? xfrm_selector_match+0xc19/0x10a0
[ 38.950812][ C1] ? __xfrm_policy_check+0x2930/0x2930
[ 38.956277][ C1] xfrm_lookup_with_ifid+0x692/0x2050
[ 38.961963][ C1] ? __xfrm_sk_clone_policy+0x680/0x680
[ 38.967795][ C1] ? ip_route_output_key_hash_rcu+0x1597/0x1fd0
[ 38.974139][ C1] xfrm_lookup_route+0x3c/0x170
[ 38.978983][ C1] ip_route_output_flow+0x1f8/0x2f0
[ 38.984412][ C1] ? ipv4_sk_update_pmtu+0x14e0/0x14e0
[ 38.990071][ C1] ? make_kuid+0x1d7/0x680
[ 38.994494][ C1] ? __put_user_ns+0x60/0x60
[ 38.999162][ C1] ? __kasan_check_write+0x14/0x20
[ 39.004255][ C1] ? __alloc_skb+0x459/0x730
[ 39.008828][ C1] igmpv3_newpack+0x288/0xd00
[ 39.013595][ C1] ? __kasan_check_read+0x11/0x20
[ 39.018629][ C1] ? igmpv3_sendpack+0x190/0x190
[ 39.023584][ C1] ? kvm_sched_clock_read+0x18/0x40
[ 39.028846][ C1] ? __kasan_check_read+0x11/0x20
[ 39.033900][ C1] ? ttwu_do_wakeup+0x100/0x470
[ 39.038770][ C1] add_grhead+0x75/0x2e0
[ 39.043044][ C1] ? ttwu_do_activate+0x179/0x2a0
[ 39.048360][ C1] add_grec+0x1168/0x1400
[ 39.053027][ C1] ? try_to_wake_up+0x610/0x1150
[ 39.058339][ C1] ? __kasan_check_write+0x14/0x20
[ 39.063876][ C1] ? _raw_spin_lock_bh+0x94/0xf0
[ 39.068948][ C1] igmp_ifc_timer_expire+0x827/0xe70
[ 39.074308][ C1] ? __kasan_check_write+0x14/0x20
[ 39.079460][ C1] ? _raw_spin_trylock_bh+0x150/0x150
[ 39.084845][ C1] ? igmp_gq_timer_expire+0xe0/0xe0
[ 39.090117][ C1] call_timer_fn+0x38/0x290
[ 39.094701][ C1] ? igmp_gq_timer_expire+0xe0/0xe0
[ 39.099929][ C1] __run_timers+0x637/0x9a0
[ 39.104458][ C1] ? calc_index+0x200/0x200
[ 39.108982][ C1] ? sched_clock_cpu+0x18/0x3d0
[ 39.113871][ C1] run_timer_softirq+0x6a/0xf0
[ 39.118855][ C1] handle_softirqs+0x250/0x560
[ 39.123636][ C1] ? irqtime_account_irq+0xbe/0x390
[ 39.128897][ C1] __irq_exit_rcu+0x52/0xf0
[ 39.133425][ C1] irq_exit_rcu+0x9/0x10
[ 39.137687][ C1] sysvec_apic_timer_interrupt+0xa9/0xc0
[ 39.143344][ C1]
[ 39.146279][ C1]
[ 39.149214][ C1] asm_sysvec_apic_timer_interrupt+0x1b/0x20
[ 39.155215][ C1] RIP: 0010:default_idle+0xf/0x20
[ 39.160264][ C1] Code: 8c 4b ff ff ff 4c 89 f7 e8 9e 7e f4 fc e9 3e ff ff ff 00 00 cc cc 00 00 cc cc 00 55 48 89 e5 66 90 0f 00 2d e3 80 50 00 fb f4 <5d> c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 55 48 89 e5 41
[ 39.180048][ C1] RSP: 0018:ffffc90000157db8 EFLAGS: 00000246
[ 39.186153][ C1] RAX: 0000000000005772 RBX: ffff88810030bc00 RCX: 0000000000005772
[ 39.194145][ C1] RDX: 0000000000000001 RSI: ffffffff85639520 RDI: ffffffff856394e0
[ 39.202130][ C1] RBP: ffffc90000157db8 R08: ffff8881f7138c33 R09: 1ffff1103ee27186
[ 39.210214][ C1] R10: dffffc0000000000 R11: ffffed103ee27187 R12: 0000000000000000
[ 39.218413][ C1] R13: 1ffff11020061780 R14: dffffc0000000000 R15: dffffc0000000000
[ 39.226401][ C1] arch_cpu_idle+0xa/0x10
[ 39.230875][ C1] default_idle_call+0x71/0x1d0
[ 39.235756][ C1] do_idle+0x368/0x620
[ 39.239844][ C1] ? idle_inject_timer_fn+0x60/0x60
[ 39.245085][ C1] cpu_startup_entry+0x18/0x20
[ 39.249982][ C1] start_secondary+0x2c8/0x380
[ 39.254758][ C1] secondary_startup_64_no_verify+0xb1/0xbb
[ 39.261038][ C1]
[ 39.264056][ C1]
[ 39.266394][ C1]
[ 39.268788][ C1] Memory state around the buggy address:
[ 39.274510][ C1] ffffc900001d0980: f8 f8 f3 f3 f3 f3 f3 f3 00 00 00 00 00 00 00 00
[ 39.283008][ C1] ffffc900001d0a00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 39.291937][ C1] >ffffc900001d0a80: f1 f1 f1 f1 00 00 00 00 00 00 00 f3 f3 f3 f3 f3
[ 39.300432][ C1] ^
[ 39.307980][ C1] ffffc900001d0b00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 39.316323][ C1] ffffc900001d0b80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 39.324506][ C1] ==================================================================
[ 39.332562][ C1] Disabling lock debugging due to kernel taint
[ 39.802749][ T10] device bridge_slave_1 left promiscuous mode
[ 39.809198][ T10] bridge0: port 2(bridge_slave_1) entered disabled state
[ 39.819972][ T10] device bridge_slave_0 left promiscuous mode
[ 39.826270][ T10] bridge0: port 1(bridge_slave_0) entered disabled state
[ 39.834406][ T10] device veth1_macvtap left promiscuous mode
[ 39.840562][ T10] device veth0_vlan left promiscuous mode
2026/10/09 20:48:41 executed programs: 264
2026/10/09 20:48:46 executed programs: 565