[   71.014695][ T1425] ieee802154 phy0 wpan0: encryption failed: -22
[   71.021140][ T1425] ieee802154 phy1 wpan1: encryption failed: -22
Warning: Permanently added '10.128.1.217' (ED25519) to the list of known hosts.
2025/11/07 02:27:49 ignoring optional flag "type"="gce"
2025/11/07 02:27:49 parsed 1 programs
2025/11/07 02:27:50 executed programs: 0
[   73.014913][ T4480] chnl_net:caif_netlink_parms(): no params data found
[   73.046123][ T4480] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.053299][ T4480] bridge0: port 1(bridge_slave_0) entered disabled state
[   73.060790][ T4480] device bridge_slave_0 entered promiscuous mode
[   73.068910][ T4480] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.076152][ T4480] bridge0: port 2(bridge_slave_1) entered disabled state
[   73.084546][ T4480] device bridge_slave_1 entered promiscuous mode
[   73.101320][ T4480] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   73.112227][ T4480] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   73.131109][ T4480] team0: Port device team_slave_0 added
[   73.138148][ T4480] team0: Port device team_slave_1 added
[   73.152434][ T4480] batman_adv: batadv0: Adding interface: batadv_slave_0
[   73.159435][ T4480] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   73.185420][ T4480] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   73.197174][ T4480] batman_adv: batadv0: Adding interface: batadv_slave_1
[   73.204228][ T4480] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   73.230472][ T4480] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   73.255965][ T4480] device hsr_slave_0 entered promiscuous mode
[   73.262416][ T4480] device hsr_slave_1 entered promiscuous mode
[   73.818868][ T4480] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   73.829721][ T4480] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   73.839937][ T4480] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   73.850136][ T4480] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   73.878143][ T4480] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.885455][ T4480] bridge0: port 2(bridge_slave_1) entered forwarding state
[   73.892914][ T4480] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.900011][ T4480] bridge0: port 1(bridge_slave_0) entered forwarding state
[   73.959421][ T4480] 8021q: adding VLAN 0 to HW filter on device bond0
[   73.980951][ T4480] 8021q: adding VLAN 0 to HW filter on device team0
[   73.988756][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   73.997735][  T144] bridge0: port 1(bridge_slave_0) entered disabled state
[   74.006311][  T144] bridge0: port 2(bridge_slave_1) entered disabled state
[   74.014200][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[   74.030056][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   74.039651][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   74.050427][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[   74.057583][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[   74.078375][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   74.089873][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   74.099748][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[   74.106926][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[   74.118179][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   74.127319][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   74.145004][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   74.155315][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   74.164397][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   74.173716][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   74.182431][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   74.200518][ T4480] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   74.212286][ T4480] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   74.226432][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   74.235070][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   74.245769][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   74.254785][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   74.263692][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   74.390901][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   74.399095][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   74.414980][ T4480] 8021q: adding VLAN 0 to HW filter on device batadv0
[   74.438337][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   74.448829][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   74.470372][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   74.478911][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   74.491008][ T4480] device veth0_vlan entered promiscuous mode
[   74.498264][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   74.508555][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   74.521878][ T4480] device veth1_vlan entered promiscuous mode
[   74.549045][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   74.558779][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   74.567972][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   74.578598][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   74.591678][ T4480] device veth0_macvtap entered promiscuous mode
[   74.602967][ T4480] device veth1_macvtap entered promiscuous mode
[   74.620752][ T4480] batman_adv: batadv0: Interface activated: batadv_slave_0
[   74.629760][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   74.638204][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   74.647544][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   74.656692][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   74.671017][ T4480] batman_adv: batadv0: Interface activated: batadv_slave_1
[   74.679424][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   74.690725][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   74.706265][ T4480] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   74.717520][ T4480] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   74.726954][ T4480] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   74.737243][ T4480] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   74.835620][ T4572] loop0: detected capacity change from 0 to 2048
[   74.863546][ T4572] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[   74.882987][ T4572] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[   74.900065][ T4572] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[   74.913302][ T4572] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found
[   74.921078][ T4572] UDF-fs: Scanning with blocksize 512 failed
[   74.933715][ T4572] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   75.013935][ T4210] Bluetooth: hci0: command 0x0409 tx timeout
[   75.256954][ T4586] loop0: detected capacity change from 0 to 2048
[   75.283421][ T4586] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[   75.304638][ T4586] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[   75.337615][ T4586] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[   75.361253][ T4586] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found
[   75.383083][ T4586] UDF-fs: Scanning with blocksize 512 failed
[   75.393496][ T4586] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   75.634951][ T4603] loop0: detected capacity change from 0 to 2048
[   75.648809][ T4603] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[   75.664610][ T4603] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[   75.675816][ T4603] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[   75.688552][ T4603] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found
[   75.699105][ T4603] UDF-fs: Scanning with blocksize 512 failed
[   75.715223][ T4603] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   75.867626][ T4480] ==================================================================
[   75.875935][ T4480] BUG: KASAN: use-after-free in crc_itu_t+0x1ad/0x280
[   75.882748][ T4480] Read of size 1 at addr ffff88806e22b000 by task syz-executor.0/4480
[   75.890917][ T4480] 
[   75.893275][ T4480] CPU: 1 PID: 4480 Comm: syz-executor.0 Not tainted syzkaller #0
[   75.901013][ T4480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[   75.911095][ T4480] Call Trace:
[   75.914403][ T4480]  <TASK>
[   75.917365][ T4480]  dump_stack_lvl+0x168/0x230
[   75.922090][ T4480]  ? show_regs_print_info+0x20/0x20
[   75.927336][ T4480]  ? load_image+0x3b0/0x3b0
[   75.931888][ T4480]  ? _raw_spin_lock_irqsave+0xb0/0xf0
[   75.937296][ T4480]  print_address_description+0x60/0x2d0
[   75.942879][ T4480]  ? crc_itu_t+0x1ad/0x280
[   75.947434][ T4480]  kasan_report+0xdf/0x130
[   75.951895][ T4480]  ? crc_itu_t+0x1ad/0x280
[   75.956450][ T4480]  crc_itu_t+0x1ad/0x280
[   75.960730][ T4480]  udf_sync_fs+0x194/0x350
[   75.965216][ T4480]  ? udf_put_super+0x160/0x160
[   75.970014][ T4480]  ? get_nr_dirty_inodes+0x248/0x2d0
[   75.975338][ T4480]  sync_filesystem+0xe6/0x220
[   75.980051][ T4480]  generic_shutdown_super+0x6b/0x300
[   75.985370][ T4480]  kill_block_super+0x7c/0xe0
[   75.990079][ T4480]  deactivate_locked_super+0x93/0xf0
[   75.995494][ T4480]  cleanup_mnt+0x418/0x4d0
[   75.999952][ T4480]  ? lockdep_hardirqs_on+0x94/0x140
[   76.005179][ T4480]  task_work_run+0x125/0x1a0
[   76.009806][ T4480]  exit_to_user_mode_loop+0x10f/0x130
[   76.015428][ T4480]  exit_to_user_mode_prepare+0xee/0x180
[   76.021011][ T4480]  syscall_exit_to_user_mode+0x16/0x40
[   76.026498][ T4480]  do_syscall_64+0x58/0xa0
[   76.031035][ T4480]  ? clear_bhb_loop+0x30/0x80
[   76.035739][ T4480]  ? clear_bhb_loop+0x30/0x80
[   76.040450][ T4480]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   76.046460][ T4480] RIP: 0033:0x7fa9e7aa9c87
[   76.050924][ T4480] Code: b0 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b0 ff ff ff f7 d8 64 89 02 b8
[   76.070559][ T4480] RSP: 002b:00007ffc9c3ed348 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[   76.079007][ T4480] RAX: 0000000000000000 RBX: 00007fa9e7b03c5a RCX: 00007fa9e7aa9c87
[   76.087139][ T4480] RDX: 0000000000000000 RSI: 000000000000000a RDI: 00007ffc9c3ed400
[   76.095165][ T4480] RBP: 00007ffc9c3ed400 R08: 0000000000000000 R09: 0000000000000000
[   76.103176][ T4480] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc9c3ee4c0
[   76.111196][ T4480] R13: 00007fa9e7b03c5a R14: 0000000000012706 R15: 0000000000000006
[   76.119217][ T4480]  </TASK>
[   76.122263][ T4480] 
[   76.124612][ T4480] The buggy address belongs to the page:
[   76.130261][ T4480] page:ffffea0001b88ac0 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1 pfn:0x6e22b
[   76.135602][   T13] cfg80211: failed to load regulatory.db
[   76.140430][ T4480] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[   76.153522][ T4480] raw: 00fff00000000000 ffffea0001b88348 ffffea0001bbd888 0000000000000000
[   76.162142][ T4480] raw: 0000000000000001 0000000000000000 00000000ffffffff 0000000000000000
[   76.170751][ T4480] page dumped because: kasan: bad access detected
[   76.177188][ T4480] page_owner tracks the page as freed
[   76.182567][ T4480] page last allocated via order 0, migratetype Movable, gfp_mask 0x1100cca(GFP_HIGHUSER_MOVABLE), pid 4610, ts 75711691996, free_ts 75755610381
[   76.197181][ T4480]  get_page_from_freelist+0x1b77/0x1c60
[   76.202757][ T4480]  __alloc_pages+0x1e1/0x470
[   76.207364][ T4480]  alloc_pages_vma+0x393/0x7c0
[   76.212260][ T4480]  handle_mm_fault+0x1b95/0x43b0
[   76.217354][ T4480]  do_user_addr_fault+0x489/0xc80
[   76.222442][ T4480]  exc_page_fault+0x60/0x100
[   76.227047][ T4480]  asm_exc_page_fault+0x22/0x30
[   76.231917][ T4480]  clear_user+0xf0/0x150
[   76.236261][ T4480]  load_elf_binary+0x1b14/0x2890
[   76.241314][ T4480]  bprm_execve+0xa92/0x17d0
[   76.245926][ T4480]  do_execveat_common+0x51e/0x6d0
[   76.250965][ T4480]  __x64_sys_execve+0x8e/0xa0
[   76.255654][ T4480]  do_syscall_64+0x4c/0xa0
[   76.260528][ T4480]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   76.266433][ T4480] page last free stack trace:
[   76.271117][ T4480]  free_unref_page_prepare+0x637/0x6c0
[   76.276710][ T4480]  free_unref_page_list+0x122/0x7e0
[   76.281947][ T4480]  release_pages+0x184b/0x1bb0
[   76.286763][ T4480]  tlb_finish_mmu+0x164/0x2e0
[   76.291462][ T4480]  exit_mmap+0x3a6/0x5f0
[   76.295816][ T4480]  __mmput+0x115/0x3b0
[   76.299920][ T4480]  exit_mm+0x567/0x6c0
[   76.304003][ T4480]  do_exit+0x5a1/0x20a0
[   76.308175][ T4480]  do_group_exit+0x12e/0x300
[   76.312781][ T4480]  __x64_sys_exit_group+0x3b/0x40
[   76.318004][ T4480]  do_syscall_64+0x4c/0xa0
[   76.322433][ T4480]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   76.328535][ T4480] 
[   76.330872][ T4480] Memory state around the buggy address:
[   76.336517][ T4480]  ffff88806e22af00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[   76.344593][ T4480]  ffff88806e22af80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[   76.352722][ T4480] >ffff88806e22b000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[   76.360987][ T4480]                    ^
[   76.365076][ T4480]  ffff88806e22b080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[   76.373242][ T4480]  ffff88806e22b100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[   76.381317][ T4480] ==================================================================
[   76.389401][ T4480] Disabling lock debugging due to kernel taint
[   76.410936][ T4480] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[   76.418184][ T4480] CPU: 1 PID: 4480 Comm: syz-executor.0 Tainted: G    B             syzkaller #0
[   76.427318][ T4480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[   76.437397][ T4480] Call Trace:
[   76.440700][ T4480]  <TASK>
[   76.443657][ T4480]  dump_stack_lvl+0x168/0x230
[   76.448371][ T4480]  ? show_regs_print_info+0x20/0x20
[   76.453710][ T4480]  ? load_image+0x3b0/0x3b0
[   76.458239][ T4480]  panic+0x2c9/0x7f0
[   76.462146][ T4480]  ? bpf_jit_dump+0xd0/0xd0
[   76.466662][ T4480]  ? _raw_spin_unlock_irqrestore+0xf6/0x100
[   76.472566][ T4480]  ? _raw_spin_unlock+0x40/0x40
[   76.477432][ T4480]  ? crc_itu_t+0x1ad/0x280
[   76.481862][ T4480]  check_panic_on_warn+0x80/0xa0
[   76.486826][ T4480]  ? crc_itu_t+0x1ad/0x280
[   76.491265][ T4480]  end_report+0x6d/0xf0
[   76.495450][ T4480]  kasan_report+0x102/0x130
[   76.499985][ T4480]  ? crc_itu_t+0x1ad/0x280
[   76.504423][ T4480]  crc_itu_t+0x1ad/0x280
[   76.508788][ T4480]  udf_sync_fs+0x194/0x350
[   76.513231][ T4480]  ? udf_put_super+0x160/0x160
[   76.518022][ T4480]  ? get_nr_dirty_inodes+0x248/0x2d0
[   76.523326][ T4480]  sync_filesystem+0xe6/0x220
[   76.528123][ T4480]  generic_shutdown_super+0x6b/0x300
[   76.533619][ T4480]  kill_block_super+0x7c/0xe0
[   76.538328][ T4480]  deactivate_locked_super+0x93/0xf0
[   76.543640][ T4480]  cleanup_mnt+0x418/0x4d0
[   76.548089][ T4480]  ? lockdep_hardirqs_on+0x94/0x140
[   76.553316][ T4480]  task_work_run+0x125/0x1a0
[   76.557945][ T4480]  exit_to_user_mode_loop+0x10f/0x130
[   76.563347][ T4480]  exit_to_user_mode_prepare+0xee/0x180
[   76.568934][ T4480]  syscall_exit_to_user_mode+0x16/0x40
[   76.574427][ T4480]  do_syscall_64+0x58/0xa0
[   76.578877][ T4480]  ? clear_bhb_loop+0x30/0x80
[   76.583592][ T4480]  ? clear_bhb_loop+0x30/0x80
[   76.588323][ T4480]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   76.594242][ T4480] RIP: 0033:0x7fa9e7aa9c87
[   76.598670][ T4480] Code: b0 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b0 ff ff ff f7 d8 64 89 02 b8
[   76.618277][ T4480] RSP: 002b:00007ffc9c3ed348 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[   76.626694][ T4480] RAX: 0000000000000000 RBX: 00007fa9e7b03c5a RCX: 00007fa9e7aa9c87
[   76.634700][ T4480] RDX: 0000000000000000 RSI: 000000000000000a RDI: 00007ffc9c3ed400
[   76.642666][ T4480] RBP: 00007ffc9c3ed400 R08: 0000000000000000 R09: 0000000000000000
[   76.650635][ T4480] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc9c3ee4c0
[   76.658602][ T4480] R13: 00007fa9e7b03c5a R14: 0000000000012706 R15: 0000000000000006
[   76.666696][ T4480]  </TASK>
[   76.669881][ T4480] Kernel Offset: disabled
[   76.674212][ T4480] Rebooting in 86400 seconds..