Warning: Permanently added '10.128.0.245' (ED25519) to the list of known hosts. 2025/12/23 12:05:01 ignoring optional flag "type"="gce" 2025/12/23 12:05:01 parsed 1 programs 2025/12/23 12:05:01 executed programs: 0 [ 79.912310][ T4481] chnl_net:caif_netlink_parms(): no params data found [ 79.977749][ T4481] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.986252][ T4481] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.994736][ T4481] device bridge_slave_0 entered promiscuous mode [ 80.003470][ T4481] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.011960][ T4481] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.020327][ T4481] device bridge_slave_1 entered promiscuous mode [ 80.052242][ T4481] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.065303][ T4481] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.092492][ T4481] team0: Port device team_slave_0 added [ 80.100694][ T4481] team0: Port device team_slave_1 added [ 80.125146][ T4481] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.132156][ T4481] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.158377][ T4481] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.171476][ T4481] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.178808][ T4481] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.205188][ T4481] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.244155][ T4481] device hsr_slave_0 entered promiscuous mode [ 80.251266][ T4481] device hsr_slave_1 entered promiscuous mode [ 80.829176][ T4481] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 80.841477][ T4481] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 80.851721][ T4481] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 80.863258][ T4481] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 80.950577][ T4481] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.974310][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 80.983046][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 80.995609][ T4481] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.006743][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 81.017455][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 81.026378][ T156] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.033477][ T156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.055680][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 81.064394][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 81.073227][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 81.081865][ T156] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.089107][ T156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.099278][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 81.109011][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 81.118095][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 81.128666][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 81.147614][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 81.156207][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 81.168017][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 81.177304][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 81.186567][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 81.199088][ T4481] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 81.210967][ T4481] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 81.219348][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 81.229956][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 81.358197][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 81.366299][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 81.381005][ T4481] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.406137][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 81.416107][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 81.436748][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 81.446026][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 81.458853][ T4481] device veth0_vlan entered promiscuous mode [ 81.467924][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 81.477134][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 81.490904][ T4481] device veth1_vlan entered promiscuous mode [ 81.516785][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 81.526536][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 81.536301][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 81.547066][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 81.560248][ T4481] device veth0_macvtap entered promiscuous mode [ 81.572806][ T4481] device veth1_macvtap entered promiscuous mode [ 81.593422][ T4481] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.602704][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 81.612145][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 81.621320][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 81.630552][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 81.644115][ T4481] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.656044][ T4481] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.665201][ T4481] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.675237][ T4481] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.684296][ T4481] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.695831][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 81.706462][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 81.854549][ T2239] Bluetooth: hci0: command 0x0409 tx timeout [ 81.886300][ T4567] loop0: detected capacity change from 0 to 2048 [ 81.926442][ T4567] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 81.977293][ T4567] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 82.100093][ T4481] ================================================================== [ 82.108488][ T4481] BUG: KASAN: slab-out-of-bounds in crc_itu_t+0x1f5/0x280 [ 82.115659][ T4481] Read of size 1 at addr ffff88801f1e4028 by task syz-executor.0/4481 [ 82.124193][ T4481] [ 82.126563][ T4481] CPU: 1 PID: 4481 Comm: syz-executor.0 Not tainted syzkaller #0 [ 82.134575][ T4481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 82.145112][ T4481] Call Trace: [ 82.148528][ T4481] [ 82.151494][ T4481] dump_stack_lvl+0x168/0x230 [ 82.156265][ T4481] ? show_regs_print_info+0x20/0x20 [ 82.161503][ T4481] ? load_image+0x3b0/0x3b0 [ 82.166067][ T4481] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 82.171596][ T4481] print_address_description+0x60/0x2d0 [ 82.177178][ T4481] ? crc_itu_t+0x1f5/0x280 [ 82.181637][ T4481] kasan_report+0xdf/0x130 [ 82.186122][ T4481] ? crc_itu_t+0x1f5/0x280 [ 82.190632][ T4481] crc_itu_t+0x1f5/0x280 [ 82.194928][ T4481] udf_sync_fs+0x194/0x350 [ 82.199395][ T4481] ? udf_put_super+0x160/0x160 [ 82.204216][ T4481] ? get_nr_dirty_inodes+0x248/0x2d0 [ 82.209550][ T4481] sync_filesystem+0xe6/0x220 [ 82.214273][ T4481] generic_shutdown_super+0x6b/0x300 [ 82.219600][ T4481] kill_block_super+0x7c/0xe0 [ 82.224403][ T4481] deactivate_locked_super+0x93/0xf0 [ 82.229723][ T4481] cleanup_mnt+0x418/0x4d0 [ 82.234178][ T4481] ? lockdep_hardirqs_on+0x94/0x140 [ 82.239417][ T4481] task_work_run+0x125/0x1a0 [ 82.244054][ T4481] exit_to_user_mode_loop+0x10f/0x130 [ 82.249470][ T4481] exit_to_user_mode_prepare+0xee/0x180 [ 82.255058][ T4481] syscall_exit_to_user_mode+0x16/0x40 [ 82.260557][ T4481] do_syscall_64+0x58/0xa0 [ 82.265012][ T4481] ? clear_bhb_loop+0x30/0x80 [ 82.269726][ T4481] ? clear_bhb_loop+0x30/0x80 [ 82.274446][ T4481] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 82.280400][ T4481] RIP: 0033:0x7f2f51a37c87 [ 82.284856][ T4481] Code: b0 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b0 ff ff ff f7 d8 64 89 02 b8 [ 82.304501][ T4481] RSP: 002b:00007ffd20c74dc8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 82.312970][ T4481] RAX: 0000000000000000 RBX: 00007f2f51a91c5a RCX: 00007f2f51a37c87 [ 82.321019][ T4481] RDX: 0000000000000000 RSI: 000000000000000a RDI: 00007ffd20c74e80 [ 82.329037][ T4481] RBP: 00007ffd20c74e80 R08: 0000000000000000 R09: 0000000000000000 [ 82.337058][ T4481] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd20c75f40 [ 82.345148][ T4481] R13: 00007f2f51a91c5a R14: 0000000000013f68 R15: 0000000000000006 [ 82.353346][ T4481] [ 82.356388][ T4481] [ 82.358734][ T4481] Allocated by task 4481: [ 82.363097][ T4481] __kasan_slab_alloc+0x9c/0xd0 [ 82.367977][ T4481] slab_post_alloc_hook+0x4c/0x380 [ 82.373131][ T4481] kmem_cache_alloc+0x100/0x290 [ 82.378012][ T4481] __debug_object_init+0x7ab/0xa40 [ 82.383165][ T4481] init_timer_key+0x3d/0x2a0 [ 82.387797][ T4481] __ipv6_dev_mc_inc+0x4e3/0xa90 [ 82.392772][ T4481] ipv6_add_dev+0xcc9/0x1190 [ 82.397475][ T4481] addrconf_notify+0x66f/0xf00 [ 82.403069][ T4481] raw_notifier_call_chain+0xcb/0x160 [ 82.408496][ T4481] register_netdevice+0x1275/0x16b0 [ 82.413731][ T4481] veth_newlink+0x8ed/0xda0 [ 82.418271][ T4481] rtnl_newlink+0x114c/0x17d0 [ 82.422977][ T4481] rtnetlink_rcv_msg+0x7ff/0xe90 [ 82.428035][ T4481] netlink_rcv_skb+0x1e0/0x430 [ 82.433001][ T4481] netlink_unicast+0x774/0x920 [ 82.437801][ T4481] netlink_sendmsg+0x8ab/0xbc0 [ 82.442604][ T4481] __sys_sendto+0x423/0x580 [ 82.447144][ T4481] __x64_sys_sendto+0xda/0xf0 [ 82.451850][ T4481] do_syscall_64+0x4c/0xa0 [ 82.456298][ T4481] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 82.462344][ T4481] [ 82.464692][ T4481] The buggy address belongs to the object at ffff88801f1e4000 [ 82.464692][ T4481] which belongs to the cache debug_objects_cache of size 40 [ 82.479750][ T4481] The buggy address is located 0 bytes to the right of [ 82.479750][ T4481] 40-byte region [ffff88801f1e4000, ffff88801f1e4028) [ 82.493328][ T4481] The buggy address belongs to the page: [ 82.499089][ T4481] page:ffffea00007c7900 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1f1e4 [ 82.509902][ T4481] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 82.517686][ T4481] raw: 00fff00000000200 0000000000000000 dead000000000122 ffff88801684f8c0 [ 82.526480][ T4481] raw: 0000000000000000 0000000000490049 00000001ffffffff 0000000000000000 [ 82.535090][ T4481] page dumped because: kasan: bad access detected [ 82.541572][ T4481] page_owner tracks the page as allocated [ 82.547317][ T4481] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112020(__GFP_HIGH|__GFP_NOWARN|__GFP_NORETRY|__GFP_HARDWALL), pid 4481, ts 80268920500, free_ts 80267462464 [ 82.565067][ T4481] get_page_from_freelist+0x1b77/0x1c60 [ 82.570821][ T4481] __alloc_pages+0x1e1/0x470 [ 82.575459][ T4481] new_slab+0xc0/0x4b0 [ 82.579553][ T4481] ___slab_alloc+0x81e/0xdf0 [ 82.584194][ T4481] kmem_cache_alloc+0x195/0x290 [ 82.589073][ T4481] __debug_object_init+0x7ab/0xa40 [ 82.594217][ T4481] init_timer_key+0x3d/0x2a0 [ 82.598836][ T4481] __ipv6_dev_mc_inc+0x4e3/0xa90 [ 82.603819][ T4481] ipv6_add_dev+0xcc9/0x1190 [ 82.608441][ T4481] addrconf_notify+0x66f/0xf00 [ 82.613231][ T4481] raw_notifier_call_chain+0xcb/0x160 [ 82.618626][ T4481] register_netdevice+0x1275/0x16b0 [ 82.623853][ T4481] veth_newlink+0x8ed/0xda0 [ 82.628395][ T4481] rtnl_newlink+0x114c/0x17d0 [ 82.633109][ T4481] rtnetlink_rcv_msg+0x7ff/0xe90 [ 82.638075][ T4481] netlink_rcv_skb+0x1e0/0x430 [ 82.642875][ T4481] page last free stack trace: [ 82.647569][ T4481] free_unref_page_prepare+0x637/0x6c0 [ 82.653056][ T4481] free_unref_page+0x94/0x280 [ 82.657762][ T4481] qlist_free_all+0x35/0x90 [ 82.662289][ T4481] kasan_quarantine_reduce+0x150/0x160 [ 82.667780][ T4481] __kasan_slab_alloc+0x2f/0xd0 [ 82.672658][ T4481] slab_post_alloc_hook+0x4c/0x380 [ 82.677788][ T4481] __kmalloc_track_caller+0x125/0x330 [ 82.683483][ T4481] kvasprintf+0xd4/0x180 [ 82.687838][ T4481] kobject_set_name_vargs+0x5d/0x110 [ 82.693262][ T4481] kobject_init_and_add+0xda/0x190 [ 82.698406][ T4481] netdev_queue_update_kobjects+0x19c/0x3e0 [ 82.704512][ T4481] netdev_register_kobject+0x265/0x310 [ 82.710111][ T4481] register_netdevice+0x1019/0x16b0 [ 82.715344][ T4481] veth_newlink+0x8ed/0xda0 [ 82.719959][ T4481] rtnl_newlink+0x114c/0x17d0 [ 82.724664][ T4481] rtnetlink_rcv_msg+0x7ff/0xe90 [ 82.729654][ T4481] [ 82.731997][ T4481] Memory state around the buggy address: [ 82.737747][ T4481] ffff88801f1e3f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 82.745930][ T4481] ffff88801f1e3f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 82.754014][ T4481] >ffff88801f1e4000: 00 00 00 00 00 fc fc 00 00 00 00 00 fc fc 00 00 [ 82.762277][ T4481] ^ [ 82.767714][ T4481] ffff88801f1e4080: 00 00 00 fc fc 00 00 00 00 00 fc fc 00 00 00 00 [ 82.775910][ T4481] ffff88801f1e4100: 00 fc fc 00 00 00 00 00 fc fc 00 00 00 00 00 fc [ 82.783994][ T4481] ================================================================== [ 82.792086][ T4481] Disabling lock debugging due to kernel taint [ 82.818296][ T4481] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 82.825560][ T4481] CPU: 1 PID: 4481 Comm: syz-executor.0 Tainted: G B syzkaller #0 [ 82.834940][ T4481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 82.845322][ T4481] Call Trace: [ 82.848625][ T4481] [ 82.851581][ T4481] dump_stack_lvl+0x168/0x230 [ 82.856291][ T4481] ? show_regs_print_info+0x20/0x20 [ 82.861726][ T4481] ? load_image+0x3b0/0x3b0 [ 82.866281][ T4481] panic+0x2c9/0x7f0 [ 82.870213][ T4481] ? bpf_jit_dump+0xd0/0xd0 [ 82.874741][ T4481] ? _raw_spin_unlock_irqrestore+0xf6/0x100 [ 82.880667][ T4481] ? _raw_spin_unlock+0x40/0x40 [ 82.885654][ T4481] ? crc_itu_t+0x1f5/0x280 [ 82.890115][ T4481] check_panic_on_warn+0x80/0xa0 [ 82.895204][ T4481] ? crc_itu_t+0x1f5/0x280 [ 82.899657][ T4481] end_report+0x6d/0xf0 [ 82.903850][ T4481] kasan_report+0x102/0x130 [ 82.908488][ T4481] ? crc_itu_t+0x1f5/0x280 [ 82.912944][ T4481] crc_itu_t+0x1f5/0x280 [ 82.917218][ T4481] udf_sync_fs+0x194/0x350 [ 82.921755][ T4481] ? udf_put_super+0x160/0x160 [ 82.926640][ T4481] ? get_nr_dirty_inodes+0x248/0x2d0 [ 82.931963][ T4481] sync_filesystem+0xe6/0x220 [ 82.936677][ T4481] generic_shutdown_super+0x6b/0x300 [ 82.941995][ T4481] kill_block_super+0x7c/0xe0 [ 82.946852][ T4481] deactivate_locked_super+0x93/0xf0 [ 82.952172][ T4481] cleanup_mnt+0x418/0x4d0 [ 82.956627][ T4481] ? lockdep_hardirqs_on+0x94/0x140 [ 82.961865][ T4481] task_work_run+0x125/0x1a0 [ 82.966611][ T4481] exit_to_user_mode_loop+0x10f/0x130 [ 82.972015][ T4481] exit_to_user_mode_prepare+0xee/0x180 [ 82.977601][ T4481] syscall_exit_to_user_mode+0x16/0x40 [ 82.983095][ T4481] do_syscall_64+0x58/0xa0 [ 82.987547][ T4481] ? clear_bhb_loop+0x30/0x80 [ 82.992360][ T4481] ? clear_bhb_loop+0x30/0x80 [ 82.997069][ T4481] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 83.003005][ T4481] RIP: 0033:0x7f2f51a37c87 [ 83.007450][ T4481] Code: b0 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b0 ff ff ff f7 d8 64 89 02 b8 [ 83.027083][ T4481] RSP: 002b:00007ffd20c74dc8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 83.035649][ T4481] RAX: 0000000000000000 RBX: 00007f2f51a91c5a RCX: 00007f2f51a37c87 [ 83.043658][ T4481] RDX: 0000000000000000 RSI: 000000000000000a RDI: 00007ffd20c74e80 [ 83.051799][ T4481] RBP: 00007ffd20c74e80 R08: 0000000000000000 R09: 0000000000000000 [ 83.059828][ T4481] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd20c75f40 [ 83.067834][ T4481] R13: 00007f2f51a91c5a R14: 0000000000013f68 R15: 0000000000000006 [ 83.075953][ T4481] [ 83.079274][ T4481] Kernel Offset: disabled [ 83.083627][ T4481] Rebooting in 86400 seconds..