[ 86.694960][ T7] cfg80211: failed to load regulatory.db Warning: Permanently added '10.128.0.175' (ED25519) to the list of known hosts. 2026/06/07 21:52:09 ignoring optional flag "type"="gce" 2026/06/07 21:52:09 parsed 1 programs 2026/06/07 21:52:12 executed programs: 0 [ 90.696653][ T4464] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 90.854139][ T4532] chnl_net:caif_netlink_parms(): no params data found [ 90.898763][ T4532] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.906939][ T4532] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.915028][ T4532] device bridge_slave_0 entered promiscuous mode [ 90.923958][ T4532] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.931060][ T4532] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.939056][ T4532] device bridge_slave_1 entered promiscuous mode [ 90.961222][ T4532] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.972656][ T4532] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.997358][ T4532] team0: Port device team_slave_0 added [ 91.004884][ T4532] team0: Port device team_slave_1 added [ 91.024154][ T4532] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.031133][ T4532] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.057208][ T4532] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.069245][ T4532] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.076283][ T4532] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.102297][ T4532] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.135579][ T4532] device hsr_slave_0 entered promiscuous mode [ 91.142441][ T4532] device hsr_slave_1 entered promiscuous mode [ 91.762761][ T4532] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 91.774475][ T4532] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 91.786063][ T4532] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 91.797387][ T4532] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 91.825420][ T4532] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.832690][ T4532] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.840121][ T4532] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.847940][ T4532] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.903285][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.911319][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.941398][ T4532] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.957182][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 91.966465][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 91.979157][ T4532] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.992223][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 92.001717][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 92.012547][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.019900][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.046155][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 92.056094][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 92.066319][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.073501][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.084083][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 92.095039][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 92.118748][ T4532] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 92.130614][ T4532] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 92.143987][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 92.154552][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 92.164092][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 92.173738][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 92.183317][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 92.192657][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 92.201392][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 92.211106][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 92.220411][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 92.229763][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 92.356520][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 92.364851][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 92.378549][ T4532] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.403115][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 92.413562][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 92.435477][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 92.444558][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 92.459019][ T4532] device veth0_vlan entered promiscuous mode [ 92.467585][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 92.477528][ T1234] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 92.490833][ T4532] device veth1_vlan entered promiscuous mode [ 92.519324][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 92.529937][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 92.540760][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 92.549962][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 92.562754][ T4532] device veth0_macvtap entered promiscuous mode [ 92.575106][ T4532] device veth1_macvtap entered promiscuous mode [ 92.596087][ T4532] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.603793][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 92.613523][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 92.621737][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 92.633728][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 92.648057][ T4532] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.658609][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 92.668834][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 92.683252][ T4532] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.694611][ T4532] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.704904][ T4532] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.715120][ T4532] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.772729][ T1108] Bluetooth: hci0: command 0x0409 tx timeout [ 92.850159][ T4602] loop0: detected capacity change from 0 to 2048 [ 92.860663][ T4602] ======================================================= [ 92.860663][ T4602] WARNING: The mand mount option has been deprecated and [ 92.860663][ T4602] and is ignored by this kernel. Remove the mand [ 92.860663][ T4602] option from the mount to silence this warning. [ 92.860663][ T4602] ======================================================= [ 93.226078][ T4532] ================================================================== [ 93.234557][ T4532] BUG: KASAN: use-after-free in crc_itu_t+0x1b2/0x280 [ 93.241387][ T4532] Read of size 1 at addr ffff88806f052000 by task syz-executor.0/4532 [ 93.249572][ T4532] [ 93.252108][ T4532] CPU: 0 PID: 4532 Comm: syz-executor.0 Not tainted syzkaller #0 [ 93.259860][ T4532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 93.269966][ T4532] Call Trace: [ 93.273280][ T4532] [ 93.276235][ T4532] dump_stack_lvl+0x188/0x250 [ 93.280957][ T4532] ? show_regs_print_info+0x20/0x20 [ 93.286201][ T4532] ? load_image+0x400/0x400 [ 93.290740][ T4532] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 93.296264][ T4532] print_address_description+0x60/0x2d0 [ 93.301847][ T4532] ? crc_itu_t+0x1b2/0x280 [ 93.306296][ T4532] kasan_report+0xdf/0x130 [ 93.310749][ T4532] ? crc_itu_t+0x1b2/0x280 [ 93.315213][ T4532] crc_itu_t+0x1b2/0x280 [ 93.319490][ T4532] udf_sync_fs+0x1ac/0x380 [ 93.323954][ T4532] ? udf_put_super+0x160/0x160 [ 93.328792][ T4532] ? get_nr_dirty_inodes+0x248/0x2d0 [ 93.334121][ T4532] sync_filesystem+0xe6/0x220 [ 93.338923][ T4532] generic_shutdown_super+0x6b/0x300 [ 93.344256][ T4532] kill_block_super+0x7c/0xe0 [ 93.349026][ T4532] deactivate_locked_super+0x93/0xf0 [ 93.354352][ T4532] cleanup_mnt+0x42d/0x4e0 [ 93.358805][ T4532] ? lockdep_hardirqs_on+0x94/0x140 [ 93.364042][ T4532] task_work_run+0x125/0x1a0 [ 93.368671][ T4532] exit_to_user_mode_loop+0x10f/0x130 [ 93.374073][ T4532] exit_to_user_mode_prepare+0xee/0x180 [ 93.379735][ T4532] syscall_exit_to_user_mode+0x16/0x40 [ 93.385232][ T4532] do_syscall_64+0x58/0xa0 [ 93.389699][ T4532] ? clear_bhb_loop+0x30/0x80 [ 93.394411][ T4532] ? clear_bhb_loop+0x30/0x80 [ 93.399120][ T4532] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 93.405069][ T4532] RIP: 0033:0x7f669ef60757 [ 93.409536][ T4532] Code: a2 c7 05 a8 77 11 00 00 00 00 00 eb 96 e8 f1 09 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 d0 ff ff ff f7 d8 64 89 02 b8 [ 93.429174][ T4532] RSP: 002b:00007ffe90dd63f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 93.437625][ T4532] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f669ef60757 [ 93.445628][ T4532] RDX: 0000000000000000 RSI: 000000000000000a RDI: 00007ffe90dd64b0 [ 93.453719][ T4532] RBP: 00007ffe90dd64b0 R08: 00007ffe90dd74b0 R09: 00000000ffffffff [ 93.461905][ T4532] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe90dd7570 [ 93.469916][ T4532] R13: 00007f669efc03ef R14: 0000000000016a68 R15: 0000000000000006 [ 93.477936][ T4532] [ 93.480990][ T4532] [ 93.483333][ T4532] The buggy address belongs to the page: [ 93.488998][ T4532] page:ffffea0001bc1480 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1 pfn:0x6f052 [ 93.499177][ T4532] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 93.506343][ T4532] raw: 00fff00000000000 ffffea0001bc0f88 ffffea0001bc2bc8 0000000000000000 [ 93.514970][ T4532] raw: 0000000000000001 0000000000000000 00000000ffffffff 0000000000000000 [ 93.523579][ T4532] page dumped because: kasan: bad access detected [ 93.530024][ T4532] page_owner tracks the page as freed [ 93.535535][ T4532] page last allocated via order 0, migratetype Movable, gfp_mask 0x1100dca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), pid 4600, ts 92946240797, free_ts 93199930820 [ 93.551123][ T4532] get_page_from_freelist+0x1bbd/0x1ca0 [ 93.556715][ T4532] __alloc_pages+0x1ee/0x480 [ 93.561340][ T4532] alloc_pages_vma+0x393/0x7c0 [ 93.566145][ T4532] handle_mm_fault+0x23be/0x4410 [ 93.571118][ T4532] do_user_addr_fault+0x489/0xc80 [ 93.576174][ T4532] exc_page_fault+0x60/0x100 [ 93.580798][ T4532] asm_exc_page_fault+0x22/0x30 [ 93.585694][ T4532] page last free stack trace: [ 93.590391][ T4532] free_unref_page_prepare+0x637/0x6c0 [ 93.595901][ T4532] free_unref_page_list+0x119/0x820 [ 93.601135][ T4532] release_pages+0x186c/0x1be0 [ 93.606013][ T4532] tlb_flush_mmu+0xce/0x180 [ 93.610901][ T4532] unmap_page_range+0x2081/0x2500 [ 93.616044][ T4532] unmap_vmas+0x131/0x250 [ 93.620411][ T4532] exit_mmap+0x3b9/0x640 [ 93.624708][ T4532] __mmput+0x115/0x3b0 [ 93.628914][ T4532] exit_mm+0x5f7/0x770 [ 93.633208][ T4532] do_exit+0x5a9/0x20c0 [ 93.637398][ T4532] do_group_exit+0x12e/0x300 [ 93.642021][ T4532] get_signal+0x6d6/0x12d0 [ 93.646473][ T4532] arch_do_signal_or_restart+0xe7/0x12c0 [ 93.652146][ T4532] exit_to_user_mode_loop+0x9e/0x130 [ 93.657462][ T4532] exit_to_user_mode_prepare+0xee/0x180 [ 93.663042][ T4532] syscall_exit_to_user_mode+0x16/0x40 [ 93.668586][ T4532] [ 93.671040][ T4532] Memory state around the buggy address: [ 93.676699][ T4532] ffff88806f051f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 93.684785][ T4532] ffff88806f051f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 93.692882][ T4532] >ffff88806f052000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 93.700967][ T4532] ^ [ 93.705069][ T4532] ffff88806f052080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 93.713157][ T4532] ffff88806f052100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 93.721347][ T4532] ================================================================== [ 93.729432][ T4532] Disabling lock debugging due to kernel taint [ 93.743003][ T4532] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 93.750266][ T4532] CPU: 1 PID: 4532 Comm: syz-executor.0 Tainted: G B syzkaller #0 [ 93.759495][ T4532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 93.769579][ T4532] Call Trace: [ 93.772971][ T4532] [ 93.775931][ T4532] dump_stack_lvl+0x188/0x250 [ 93.780646][ T4532] ? show_regs_print_info+0x20/0x20 [ 93.785879][ T4532] ? load_image+0x400/0x400 [ 93.790423][ T4532] panic+0x2e5/0x810 [ 93.794444][ T4532] ? bpf_jit_dump+0xd0/0xd0 [ 93.798986][ T4532] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 93.805001][ T4532] ? _raw_spin_unlock+0x40/0x40 [ 93.810068][ T4532] ? crc_itu_t+0x1b2/0x280 [ 93.814532][ T4532] check_panic_on_warn+0x80/0xa0 [ 93.819509][ T4532] ? crc_itu_t+0x1b2/0x280 [ 93.824016][ T4532] end_report+0x6d/0xf0 [ 93.828476][ T4532] kasan_report+0x102/0x130 [ 93.833015][ T4532] ? crc_itu_t+0x1b2/0x280 [ 93.837468][ T4532] crc_itu_t+0x1b2/0x280 [ 93.841744][ T4532] udf_sync_fs+0x1ac/0x380 [ 93.846198][ T4532] ? udf_put_super+0x160/0x160 [ 93.850995][ T4532] ? get_nr_dirty_inodes+0x248/0x2d0 [ 93.856316][ T4532] sync_filesystem+0xe6/0x220 [ 93.861022][ T4532] generic_shutdown_super+0x6b/0x300 [ 93.866340][ T4532] kill_block_super+0x7c/0xe0 [ 93.871051][ T4532] deactivate_locked_super+0x93/0xf0 [ 93.876377][ T4532] cleanup_mnt+0x42d/0x4e0 [ 93.880826][ T4532] ? lockdep_hardirqs_on+0x94/0x140 [ 93.886063][ T4532] task_work_run+0x125/0x1a0 [ 93.890693][ T4532] exit_to_user_mode_loop+0x10f/0x130 [ 93.896090][ T4532] exit_to_user_mode_prepare+0xee/0x180 [ 93.901675][ T4532] syscall_exit_to_user_mode+0x16/0x40 [ 93.907172][ T4532] do_syscall_64+0x58/0xa0 [ 93.911624][ T4532] ? clear_bhb_loop+0x30/0x80 [ 93.916333][ T4532] ? clear_bhb_loop+0x30/0x80 [ 93.921058][ T4532] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 93.926982][ T4532] RIP: 0033:0x7f669ef60757 [ 93.931421][ T4532] Code: a2 c7 05 a8 77 11 00 00 00 00 00 eb 96 e8 f1 09 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 d0 ff ff ff f7 d8 64 89 02 b8 [ 93.951230][ T4532] RSP: 002b:00007ffe90dd63f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 93.959680][ T4532] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f669ef60757 [ 93.967692][ T4532] RDX: 0000000000000000 RSI: 000000000000000a RDI: 00007ffe90dd64b0 [ 93.975696][ T4532] RBP: 00007ffe90dd64b0 R08: 00007ffe90dd74b0 R09: 00000000ffffffff [ 93.983702][ T4532] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe90dd7570 [ 93.991704][ T4532] R13: 00007f669efc03ef R14: 0000000000016a68 R15: 0000000000000006 [ 93.999815][ T4532] [ 94.003092][ T4532] Kernel Offset: disabled [ 94.007451][ T4532] Rebooting in 86400 seconds..