[ 71.429846][ T1429] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.436736][ T1429] ieee802154 phy1 wpan1: encryption failed: -22 Warning: Permanently added '10.128.1.208' (ED25519) to the list of known hosts. 2026/05/11 21:39:16 ignoring optional flag "type"="gce" 2026/05/11 21:39:16 parsed 1 programs 2026/05/11 21:39:16 executed programs: 0 [ 73.361693][ T4480] chnl_net:caif_netlink_parms(): no params data found [ 73.403528][ T4480] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.411345][ T4480] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.420213][ T4480] device bridge_slave_0 entered promiscuous mode [ 73.429056][ T4480] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.436528][ T4480] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.445731][ T4480] device bridge_slave_1 entered promiscuous mode [ 73.473826][ T4480] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.487690][ T4480] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.517954][ T4480] team0: Port device team_slave_0 added [ 73.526200][ T4480] team0: Port device team_slave_1 added [ 73.552365][ T4480] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.560451][ T4480] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.590907][ T4480] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.604015][ T4480] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.611682][ T4480] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.642211][ T4480] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.683430][ T4480] device hsr_slave_0 entered promiscuous mode [ 73.691006][ T4480] device hsr_slave_1 entered promiscuous mode [ 74.180460][ T4480] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 74.191746][ T4480] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 74.203388][ T4480] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 74.214830][ T4480] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 74.240501][ T4480] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.248511][ T4480] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.256088][ T4480] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.263552][ T4480] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.316466][ T4480] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.334446][ T1396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.344988][ T1396] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.353305][ T1396] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.362570][ T1396] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 74.378817][ T4480] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.392027][ T1396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.402156][ T1396] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.411548][ T1396] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.419334][ T1396] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.437874][ T1396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 74.448558][ T1396] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.466170][ T1396] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.473354][ T1396] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.483390][ T1396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 74.498779][ T1396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.508714][ T1396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.519981][ T1396] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.529312][ T1396] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.542861][ T423] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.552026][ T423] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.569675][ T423] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.579737][ T423] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.589379][ T423] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.599038][ T423] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.608403][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 74.720452][ T423] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.729046][ T423] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.742533][ T4480] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.763242][ T423] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.773064][ T423] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.795412][ T4480] device veth0_vlan entered promiscuous mode [ 74.802993][ T423] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.814164][ T423] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.824552][ T423] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.834006][ T423] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.848707][ T4480] device veth1_vlan entered promiscuous mode [ 74.873340][ T1396] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.883830][ T1396] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.895108][ T1396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.905820][ T1396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.919492][ T4480] device veth0_macvtap entered promiscuous mode [ 74.932163][ T4480] device veth1_macvtap entered promiscuous mode [ 74.949769][ T4480] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.959897][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.969910][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.979015][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.989469][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.001812][ T4480] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.014636][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.025002][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.038573][ T4480] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.051889][ T4480] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.061943][ T4480] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.072915][ T4480] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.161372][ T4578] loop0: detected capacity change from 0 to 2048 [ 75.176218][ T4578] ======================================================= [ 75.176218][ T4578] WARNING: The mand mount option has been deprecated and [ 75.176218][ T4578] and is ignored by this kernel. Remove the mand [ 75.176218][ T4578] option from the mount to silence this warning. [ 75.176218][ T4578] ======================================================= [ 75.221480][ T4578] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 75.235854][ T4578] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 75.312717][ T4480] ================================================================== [ 75.321542][ T4480] BUG: KASAN: use-after-free in crc_itu_t+0x1fa/0x280 [ 75.328805][ T4480] Read of size 1 at addr ffff88806dd05000 by task syz-executor.0/4480 [ 75.338550][ T4480] [ 75.341188][ T4480] CPU: 0 PID: 4480 Comm: syz-executor.0 Not tainted syzkaller #0 [ 75.349285][ T4480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 75.360170][ T4480] Call Trace: [ 75.363476][ T4480] [ 75.366540][ T4480] dump_stack_lvl+0x188/0x250 [ 75.371273][ T4480] ? show_regs_print_info+0x20/0x20 [ 75.376616][ T4480] ? load_image+0x400/0x400 [ 75.381153][ T4480] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 75.386987][ T4480] print_address_description+0x60/0x2d0 [ 75.393570][ T4480] ? crc_itu_t+0x1fa/0x280 [ 75.398627][ T4480] kasan_report+0xdf/0x130 [ 75.403168][ T4480] ? crc_itu_t+0x1fa/0x280 [ 75.408136][ T4480] crc_itu_t+0x1fa/0x280 [ 75.412606][ T4480] udf_sync_fs+0x1ac/0x380 [ 75.417534][ T4480] ? udf_put_super+0x160/0x160 [ 75.422474][ T4480] ? get_nr_dirty_inodes+0x248/0x2d0 [ 75.428622][ T4480] sync_filesystem+0xe6/0x220 [ 75.433588][ T4480] generic_shutdown_super+0x6b/0x300 [ 75.438925][ T4480] kill_block_super+0x7c/0xe0 [ 75.443888][ T4480] deactivate_locked_super+0x93/0xf0 [ 75.449468][ T4480] cleanup_mnt+0x42d/0x4e0 [ 75.454047][ T4480] ? lockdep_hardirqs_on+0x94/0x140 [ 75.459448][ T4480] task_work_run+0x125/0x1a0 [ 75.464621][ T4480] exit_to_user_mode_loop+0x10f/0x130 [ 75.470825][ T4480] exit_to_user_mode_prepare+0xee/0x180 [ 75.476729][ T4480] syscall_exit_to_user_mode+0x16/0x40 [ 75.482265][ T4480] do_syscall_64+0x58/0xa0 [ 75.486978][ T4480] ? clear_bhb_loop+0x30/0x80 [ 75.492285][ T4480] ? clear_bhb_loop+0x30/0x80 [ 75.497429][ T4480] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 75.503566][ T4480] RIP: 0033:0x7f6ce347a617 [ 75.508353][ T4480] Code: a2 c7 05 e8 78 11 00 00 00 00 00 eb 96 e8 f1 09 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 d0 ff ff ff f7 d8 64 89 02 b8 [ 75.528819][ T4480] RSP: 002b:00007ffcc617c198 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 75.537457][ T4480] RAX: 0000000000000000 RBX: 00007f6ce34eeb22 RCX: 00007f6ce347a617 [ 75.546577][ T4480] RDX: 0000000000000000 RSI: 000000000000000a RDI: 00007ffcc617c250 [ 75.554875][ T4480] RBP: 00007ffcc617c250 R08: 00007ffcc617d250 R09: 00000000ffffffff [ 75.563310][ T4480] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffcc617d310 [ 75.572627][ T4480] R13: 00007f6ce34eeb22 R14: 000000000001255f R15: 0000000000000006 [ 75.581505][ T4480] [ 75.585101][ T4480] [ 75.587520][ T4480] The buggy address belongs to the page: [ 75.594056][ T4480] page:ffffea0001b74140 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1 pfn:0x6dd05 [ 75.604666][ T4480] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 75.612099][ T4480] raw: 00fff00000000000 ffffea0001c1fbc8 ffffea0001bb2748 0000000000000000 [ 75.621135][ T4480] raw: 0000000000000001 0000000000000000 00000000ffffffff 0000000000000000 [ 75.630905][ T4480] page dumped because: kasan: bad access detected [ 75.638758][ T4480] page_owner tracks the page as freed [ 75.645022][ T4480] page last allocated via order 0, migratetype Movable, gfp_mask 0x1100cca(GFP_HIGHUSER_MOVABLE), pid 4584, ts 75292458736, free_ts 75296219895 [ 75.662293][ T4480] get_page_from_freelist+0x1bbd/0x1ca0 [ 75.669607][ T4480] __alloc_pages+0x1ee/0x480 [ 75.675403][ T4480] alloc_pages_vma+0x393/0x7c0 [ 75.680810][ T4480] wp_page_copy+0x24b/0x2050 [ 75.686251][ T4480] handle_mm_fault+0x1f06/0x4410 [ 75.691832][ T4480] do_user_addr_fault+0x489/0xc80 [ 75.697140][ T4480] exc_page_fault+0x60/0x100 [ 75.702026][ T4480] asm_exc_page_fault+0x22/0x30 [ 75.707705][ T4480] page last free stack trace: [ 75.712702][ T4480] free_unref_page_prepare+0x637/0x6c0 [ 75.718441][ T4480] free_unref_page_list+0x119/0x820 [ 75.723968][ T4480] release_pages+0x186c/0x1be0 [ 75.728943][ T4480] tlb_finish_mmu+0x1b4/0x370 [ 75.733731][ T4480] exit_mmap+0x3d0/0x640 [ 75.738154][ T4480] __mmput+0x115/0x3b0 [ 75.742431][ T4480] exit_mm+0x588/0x6e0 [ 75.746694][ T4480] do_exit+0x5a9/0x20c0 [ 75.751242][ T4480] do_group_exit+0x12e/0x300 [ 75.756239][ T4480] __x64_sys_exit_group+0x3b/0x40 [ 75.761316][ T4480] do_syscall_64+0x4c/0xa0 [ 75.766109][ T4480] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 75.772393][ T4480] [ 75.775078][ T4480] Memory state around the buggy address: [ 75.780723][ T4480] ffff88806dd04f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 75.789954][ T4480] ffff88806dd04f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 75.798471][ T4480] >ffff88806dd05000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 75.807078][ T4480] ^ [ 75.811543][ T4480] ffff88806dd05080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 75.819800][ T4480] ffff88806dd05100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 75.828140][ T4480] ================================================================== [ 75.836909][ T4480] Disabling lock debugging due to kernel taint [ 75.846409][ T4221] Bluetooth: hci0: command 0x0409 tx timeout [ 75.848884][ T4480] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 75.863173][ T4480] CPU: 1 PID: 4480 Comm: syz-executor.0 Tainted: G B syzkaller #0 [ 75.874419][ T4480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 75.889843][ T4480] Call Trace: [ 75.893852][ T4480] [ 75.898250][ T4480] dump_stack_lvl+0x188/0x250 [ 75.904286][ T4480] ? show_regs_print_info+0x20/0x20 [ 75.911027][ T4480] ? load_image+0x400/0x400 [ 75.916789][ T4480] panic+0x2e5/0x810 [ 75.922652][ T4480] ? bpf_jit_dump+0xd0/0xd0 [ 75.928823][ T4480] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 75.937053][ T4480] ? _raw_spin_unlock+0x40/0x40 [ 75.942904][ T4480] ? crc_itu_t+0x1fa/0x280 [ 75.947837][ T4480] check_panic_on_warn+0x80/0xa0 [ 75.952882][ T4480] ? crc_itu_t+0x1fa/0x280 [ 75.957978][ T4480] end_report+0x6d/0xf0 [ 75.962903][ T4480] kasan_report+0x102/0x130 [ 75.968035][ T4480] ? crc_itu_t+0x1fa/0x280 [ 75.973323][ T4480] crc_itu_t+0x1fa/0x280 [ 75.978774][ T4480] udf_sync_fs+0x1ac/0x380 [ 75.985250][ T4480] ? udf_put_super+0x160/0x160 [ 75.991442][ T4480] ? get_nr_dirty_inodes+0x248/0x2d0 [ 75.998060][ T4480] sync_filesystem+0xe6/0x220 [ 76.003113][ T4480] generic_shutdown_super+0x6b/0x300 [ 76.009548][ T4480] kill_block_super+0x7c/0xe0 [ 76.015322][ T4480] deactivate_locked_super+0x93/0xf0 [ 76.020819][ T4480] cleanup_mnt+0x42d/0x4e0 [ 76.025378][ T4480] ? lockdep_hardirqs_on+0x94/0x140 [ 76.030944][ T4480] task_work_run+0x125/0x1a0 [ 76.036185][ T4480] exit_to_user_mode_loop+0x10f/0x130 [ 76.042007][ T4480] exit_to_user_mode_prepare+0xee/0x180 [ 76.048371][ T4480] syscall_exit_to_user_mode+0x16/0x40 [ 76.054307][ T4480] do_syscall_64+0x58/0xa0 [ 76.059107][ T4480] ? clear_bhb_loop+0x30/0x80 [ 76.064410][ T4480] ? clear_bhb_loop+0x30/0x80 [ 76.069452][ T4480] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 76.076493][ T4480] RIP: 0033:0x7f6ce347a617 [ 76.081185][ T4480] Code: a2 c7 05 e8 78 11 00 00 00 00 00 eb 96 e8 f1 09 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 d0 ff ff ff f7 d8 64 89 02 b8 [ 76.102890][ T4480] RSP: 002b:00007ffcc617c198 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 76.111784][ T4480] RAX: 0000000000000000 RBX: 00007f6ce34eeb22 RCX: 00007f6ce347a617 [ 76.120206][ T4480] RDX: 0000000000000000 RSI: 000000000000000a RDI: 00007ffcc617c250 [ 76.129538][ T4480] RBP: 00007ffcc617c250 R08: 00007ffcc617d250 R09: 00000000ffffffff [ 76.137935][ T4480] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffcc617d310 [ 76.146557][ T4480] R13: 00007f6ce34eeb22 R14: 000000000001255f R15: 0000000000000006 [ 76.154865][ T4480] [ 76.159088][ T4480] Kernel Offset: disabled [ 76.164737][ T4480] Rebooting in 86400 seconds..