Warning: Permanently added '10.128.0.24' (ED25519) to the list of known hosts. 2026/02/19 06:36:35 ignoring optional flag "type"="gce" [ 71.226914][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.233556][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 2026/02/19 06:36:35 parsed 1 programs 2026/02/19 06:36:37 executed programs: 0 [ 73.096443][ T4439] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 73.221341][ T4510] chnl_net:caif_netlink_parms(): no params data found [ 73.256427][ T4510] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.263770][ T4510] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.271347][ T4510] device bridge_slave_0 entered promiscuous mode [ 73.279739][ T4510] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.286959][ T4510] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.294696][ T4510] device bridge_slave_1 entered promiscuous mode [ 73.312834][ T4510] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.323931][ T4510] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.344894][ T4510] team0: Port device team_slave_0 added [ 73.352287][ T4510] team0: Port device team_slave_1 added [ 73.368212][ T4510] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.375208][ T4510] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.401482][ T4510] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.413536][ T4510] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.420496][ T4510] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.446407][ T4510] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.472352][ T4510] device hsr_slave_0 entered promiscuous mode [ 73.479303][ T4510] device hsr_slave_1 entered promiscuous mode [ 73.982275][ T4510] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 73.995036][ T4510] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 74.004607][ T4510] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 74.015598][ T4510] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 74.039161][ T4510] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.046295][ T4510] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.054073][ T4510] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.061166][ T4510] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.108988][ T4510] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.123630][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.131738][ T1231] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.140508][ T1231] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.149625][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 74.163207][ T4510] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.175906][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.185149][ T1231] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.192444][ T1231] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.216073][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.226122][ T1231] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.233242][ T1231] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.244927][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.263458][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.271425][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.281019][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.291234][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.300599][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.310478][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.319240][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.329428][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 74.444952][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.454657][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.467557][ T4510] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.488551][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.498480][ T1231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.526714][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.538774][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.547546][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.555970][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.566752][ T4510] device veth0_vlan entered promiscuous mode [ 74.579214][ T4510] device veth1_vlan entered promiscuous mode [ 74.600892][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.620135][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.629147][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.655052][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.665867][ T4510] device veth0_macvtap entered promiscuous mode [ 74.677146][ T4510] device veth1_macvtap entered promiscuous mode [ 74.695090][ T4510] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.713939][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.732717][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.740804][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.752665][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.763189][ T4510] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.771561][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.781259][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.809999][ T4510] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.822968][ T4510] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.831685][ T4510] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.841563][ T4510] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.964472][ T4604] loop0: detected capacity change from 0 to 2048 [ 75.000727][ T4604] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 75.223133][ T4210] Bluetooth: hci0: command 0x0409 tx timeout [ 75.300376][ T4510] ================================================================== [ 75.308631][ T4510] BUG: KASAN: use-after-free in crc_itu_t+0x1b2/0x280 [ 75.315440][ T4510] Read of size 1 at addr ffff88807c5f8000 by task syz-executor.0/4510 [ 75.323598][ T4510] [ 75.325944][ T4510] CPU: 0 PID: 4510 Comm: syz-executor.0 Not tainted syzkaller #0 [ 75.333666][ T4510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 75.343737][ T4510] Call Trace: [ 75.347028][ T4510] [ 75.349962][ T4510] dump_stack_lvl+0x188/0x250 [ 75.354679][ T4510] ? show_regs_print_info+0x20/0x20 [ 75.359890][ T4510] ? load_image+0x400/0x400 [ 75.364489][ T4510] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 75.369965][ T4510] print_address_description+0x60/0x2d0 [ 75.375524][ T4510] ? crc_itu_t+0x1b2/0x280 [ 75.379945][ T4510] kasan_report+0xdf/0x130 [ 75.384377][ T4510] ? crc_itu_t+0x1b2/0x280 [ 75.388808][ T4510] crc_itu_t+0x1b2/0x280 [ 75.393054][ T4510] udf_sync_fs+0x1ac/0x380 [ 75.397462][ T4510] ? udf_put_super+0x160/0x160 [ 75.402211][ T4510] ? get_nr_dirty_inodes+0x248/0x2d0 [ 75.407492][ T4510] sync_filesystem+0xe6/0x220 [ 75.412154][ T4510] generic_shutdown_super+0x6b/0x300 [ 75.417424][ T4510] kill_block_super+0x7c/0xe0 [ 75.422086][ T4510] deactivate_locked_super+0x93/0xf0 [ 75.427482][ T4510] cleanup_mnt+0x42d/0x4e0 [ 75.431896][ T4510] ? lockdep_hardirqs_on+0x94/0x140 [ 75.437097][ T4510] task_work_run+0x125/0x1a0 [ 75.441690][ T4510] exit_to_user_mode_loop+0x10f/0x130 [ 75.447048][ T4510] exit_to_user_mode_prepare+0xee/0x180 [ 75.452576][ T4510] syscall_exit_to_user_mode+0x16/0x40 [ 75.458020][ T4510] do_syscall_64+0x58/0xa0 [ 75.462424][ T4510] ? clear_bhb_loop+0x30/0x80 [ 75.467095][ T4510] ? clear_bhb_loop+0x30/0x80 [ 75.471770][ T4510] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 75.477658][ T4510] RIP: 0033:0x7fb1002e6757 [ 75.482064][ T4510] Code: a2 c7 05 a8 77 11 00 00 00 00 00 eb 96 e8 f1 09 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 d0 ff ff ff f7 d8 64 89 02 b8 [ 75.501657][ T4510] RSP: 002b:00007ffda8664e08 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 75.510066][ T4510] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fb1002e6757 [ 75.518020][ T4510] RDX: 0000000000000000 RSI: 000000000000000a RDI: 00007ffda8664ec0 [ 75.525969][ T4510] RBP: 00007ffda8664ec0 R08: 00007ffda8665ec0 R09: 00000000ffffffff [ 75.533922][ T4510] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffda8665f80 [ 75.541877][ T4510] R13: 00007fb1003463ef R14: 00000000000124a2 R15: 0000000000000006 [ 75.549841][ T4510] [ 75.552841][ T4510] [ 75.555178][ T4510] Allocated by task 4507: [ 75.559483][ T4510] __kasan_kmalloc+0xb5/0xf0 [ 75.564060][ T4510] tomoyo_realpath_from_path+0x118/0x610 [ 75.569757][ T4510] tomoyo_path_number_perm+0x242/0x660 [ 75.575195][ T4510] tomoyo_path_mkdir+0xad/0xf0 [ 75.579968][ T4510] security_path_mkdir+0xe0/0x130 [ 75.584976][ T4510] do_mkdirat+0x160/0x5b0 [ 75.589284][ T4510] __x64_sys_mkdirat+0x85/0x90 [ 75.594042][ T4510] do_syscall_64+0x4c/0xa0 [ 75.598442][ T4510] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 75.604315][ T4510] [ 75.606618][ T4510] Freed by task 4507: [ 75.610574][ T4510] kasan_set_track+0x4b/0x70 [ 75.615232][ T4510] kasan_set_free_info+0x1f/0x40 [ 75.620148][ T4510] ____kasan_slab_free+0xd5/0x110 [ 75.625153][ T4510] slab_free_freelist_hook+0xea/0x170 [ 75.630504][ T4510] kfree+0xef/0x2a0 [ 75.634290][ T4510] tomoyo_realpath_from_path+0x5d8/0x610 [ 75.639899][ T4510] tomoyo_path_number_perm+0x242/0x660 [ 75.645337][ T4510] tomoyo_path_mkdir+0xad/0xf0 [ 75.650076][ T4510] security_path_mkdir+0xe0/0x130 [ 75.655078][ T4510] do_mkdirat+0x160/0x5b0 [ 75.659386][ T4510] __x64_sys_mkdirat+0x85/0x90 [ 75.664128][ T4510] do_syscall_64+0x4c/0xa0 [ 75.668524][ T4510] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 75.674396][ T4510] [ 75.676699][ T4510] The buggy address belongs to the object at ffff88807c5f8000 [ 75.676699][ T4510] which belongs to the cache kmalloc-4k of size 4096 [ 75.690728][ T4510] The buggy address is located 0 bytes inside of [ 75.690728][ T4510] 4096-byte region [ffff88807c5f8000, ffff88807c5f9000) [ 75.703893][ T4510] The buggy address belongs to the page: [ 75.709518][ T4510] page:ffffea0001f17e00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7c5f8 [ 75.719733][ T4510] head:ffffea0001f17e00 order:3 compound_mapcount:0 compound_pincount:0 [ 75.728062][ T4510] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 75.736116][ T4510] raw: 00fff00000010200 dead000000000100 dead000000000122 ffff888016c42140 [ 75.744852][ T4510] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000 [ 75.753407][ T4510] page dumped because: kasan: bad access detected [ 75.759837][ T4510] page_owner tracks the page as allocated [ 75.765526][ T4510] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 3572, ts 23665120445, free_ts 23659720449 [ 75.783819][ T4510] get_page_from_freelist+0x1bbd/0x1ca0 [ 75.789352][ T4510] __alloc_pages+0x1ee/0x480 [ 75.793920][ T4510] new_slab+0xc0/0x4b0 [ 75.797971][ T4510] ___slab_alloc+0x80a/0xdd0 [ 75.802543][ T4510] __kmalloc+0x1cd/0x330 [ 75.806762][ T4510] tomoyo_realpath_from_path+0x118/0x610 [ 75.812373][ T4510] tomoyo_path_perm+0x23f/0x5d0 [ 75.817216][ T4510] security_inode_getattr+0xcf/0x120 [ 75.822483][ T4510] vfs_getattr+0x26/0x3a0 [ 75.826881][ T4510] __x64_sys_newfstat+0x137/0x210 [ 75.831886][ T4510] do_syscall_64+0x4c/0xa0 [ 75.836285][ T4510] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 75.842170][ T4510] page last free stack trace: [ 75.846840][ T4510] free_unref_page_prepare+0x637/0x6c0 [ 75.852278][ T4510] free_unref_page+0x8f/0x2a0 [ 75.856944][ T4510] __unfreeze_partials+0x1a5/0x200 [ 75.862058][ T4510] put_cpu_partial+0x12d/0x190 [ 75.866817][ T4510] qlist_free_all+0x35/0x90 [ 75.871304][ T4510] kasan_quarantine_reduce+0x150/0x160 [ 75.876741][ T4510] __kasan_slab_alloc+0x2f/0xd0 [ 75.881572][ T4510] slab_post_alloc_hook+0x4c/0x380 [ 75.886684][ T4510] __kmalloc+0x127/0x330 [ 75.890911][ T4510] tomoyo_encode+0x27e/0x540 [ 75.895480][ T4510] tomoyo_realpath_from_path+0x5cd/0x610 [ 75.901092][ T4510] tomoyo_path_perm+0x23f/0x5d0 [ 75.905922][ T4510] security_inode_getattr+0xcf/0x120 [ 75.911189][ T4510] vfs_getattr+0x26/0x3a0 [ 75.915500][ T4510] __x64_sys_newfstat+0x137/0x210 [ 75.920519][ T4510] do_syscall_64+0x4c/0xa0 [ 75.925018][ T4510] [ 75.927327][ T4510] Memory state around the buggy address: [ 75.932942][ T4510] ffff88807c5f7f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 75.940985][ T4510] ffff88807c5f7f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 75.949027][ T4510] >ffff88807c5f8000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 75.957064][ T4510] ^ [ 75.961108][ T4510] ffff88807c5f8080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 75.969144][ T4510] ffff88807c5f8100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 75.977179][ T4510] ================================================================== [ 75.985213][ T4510] Disabling lock debugging due to kernel taint [ 76.003141][ T4510] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 76.010410][ T4510] CPU: 1 PID: 4510 Comm: syz-executor.0 Tainted: G B syzkaller #0 [ 76.019515][ T4510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 76.029571][ T4510] Call Trace: [ 76.032854][ T4510] [ 76.035789][ T4510] dump_stack_lvl+0x188/0x250 [ 76.040472][ T4510] ? show_regs_print_info+0x20/0x20 [ 76.045681][ T4510] ? load_image+0x400/0x400 [ 76.050200][ T4510] panic+0x2e5/0x810 [ 76.054102][ T4510] ? bpf_jit_dump+0xd0/0xd0 [ 76.058613][ T4510] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 76.064696][ T4510] ? _raw_spin_unlock+0x40/0x40 [ 76.069636][ T4510] ? crc_itu_t+0x1b2/0x280 [ 76.074057][ T4510] check_panic_on_warn+0x80/0xa0 [ 76.078998][ T4510] ? crc_itu_t+0x1b2/0x280 [ 76.083524][ T4510] end_report+0x6d/0xf0 [ 76.087713][ T4510] kasan_report+0x102/0x130 [ 76.092225][ T4510] ? crc_itu_t+0x1b2/0x280 [ 76.096644][ T4510] crc_itu_t+0x1b2/0x280 [ 76.100891][ T4510] udf_sync_fs+0x1ac/0x380 [ 76.105432][ T4510] ? udf_put_super+0x160/0x160 [ 76.110217][ T4510] ? get_nr_dirty_inodes+0x248/0x2d0 [ 76.115516][ T4510] sync_filesystem+0xe6/0x220 [ 76.120300][ T4510] generic_shutdown_super+0x6b/0x300 [ 76.125589][ T4510] kill_block_super+0x7c/0xe0 [ 76.130273][ T4510] deactivate_locked_super+0x93/0xf0 [ 76.135564][ T4510] cleanup_mnt+0x42d/0x4e0 [ 76.139984][ T4510] ? lockdep_hardirqs_on+0x94/0x140 [ 76.145186][ T4510] task_work_run+0x125/0x1a0 [ 76.149789][ T4510] exit_to_user_mode_loop+0x10f/0x130 [ 76.155249][ T4510] exit_to_user_mode_prepare+0xee/0x180 [ 76.160795][ T4510] syscall_exit_to_user_mode+0x16/0x40 [ 76.166264][ T4510] do_syscall_64+0x58/0xa0 [ 76.170691][ T4510] ? clear_bhb_loop+0x30/0x80 [ 76.175372][ T4510] ? clear_bhb_loop+0x30/0x80 [ 76.180053][ T4510] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 76.185950][ T4510] RIP: 0033:0x7fb1002e6757 [ 76.190362][ T4510] Code: a2 c7 05 a8 77 11 00 00 00 00 00 eb 96 e8 f1 09 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 d0 ff ff ff f7 d8 64 89 02 b8 [ 76.209967][ T4510] RSP: 002b:00007ffda8664e08 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 76.218564][ T4510] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fb1002e6757 [ 76.226550][ T4510] RDX: 0000000000000000 RSI: 000000000000000a RDI: 00007ffda8664ec0 [ 76.234623][ T4510] RBP: 00007ffda8664ec0 R08: 00007ffda8665ec0 R09: 00000000ffffffff [ 76.242596][ T4510] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffda8665f80 [ 76.250568][ T4510] R13: 00007fb1003463ef R14: 00000000000124a2 R15: 0000000000000006 [ 76.258564][ T4510] [ 76.261900][ T4510] Kernel Offset: disabled [ 76.266216][ T4510] Rebooting in 86400 seconds..