Warning: Permanently added '10.128.10.32' (ED25519) to the list of known hosts. 2025/08/21 22:37:19 ignoring optional flag "type"="gce" 2025/08/21 22:37:20 parsed 1 programs [ 71.352594][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.359427][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 2025/08/21 22:37:22 executed programs: 0 [ 73.456487][ T4404] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 73.587984][ T4510] chnl_net:caif_netlink_parms(): no params data found [ 73.625873][ T4510] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.633559][ T4510] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.641810][ T4510] device bridge_slave_0 entered promiscuous mode [ 73.649966][ T4510] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.657233][ T4510] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.665245][ T4510] device bridge_slave_1 entered promiscuous mode [ 73.684465][ T4510] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.695467][ T4510] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.716581][ T4510] team0: Port device team_slave_0 added [ 73.724712][ T4510] team0: Port device team_slave_1 added [ 73.744861][ T4510] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.752192][ T4510] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.778395][ T4510] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.790542][ T4510] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.797513][ T4510] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.824193][ T4510] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.850231][ T4510] device hsr_slave_0 entered promiscuous mode [ 73.856849][ T4510] device hsr_slave_1 entered promiscuous mode [ 74.405114][ T4510] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 74.415412][ T4510] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 74.425244][ T4510] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 74.435357][ T4510] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 74.459656][ T4510] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.467025][ T4510] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.474994][ T4510] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.482340][ T4510] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.536074][ T4510] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.551296][ T1344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.561430][ T1344] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.569975][ T1344] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.578281][ T1344] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 74.595196][ T4510] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.606798][ T1344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.617021][ T1344] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.627003][ T1344] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.634333][ T1344] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.653869][ T1344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 74.663511][ T1344] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.673132][ T1344] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.680261][ T1344] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.690907][ T1344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 74.710604][ T1344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.719698][ T1344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.731566][ T1344] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.740888][ T1344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.750942][ T1344] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.769536][ T1344] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.777958][ T1344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.787197][ T1344] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.796489][ T1344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.805603][ T1344] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.815812][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 74.929696][ T1344] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.937490][ T1344] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.952905][ T4510] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.973273][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.982583][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.003389][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.012149][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.022339][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.031302][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.041832][ T4510] device veth0_vlan entered promiscuous mode [ 75.054692][ T4510] device veth1_vlan entered promiscuous mode [ 75.079765][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 75.088887][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 75.097154][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.106736][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.117986][ T4510] device veth0_macvtap entered promiscuous mode [ 75.129944][ T4510] device veth1_macvtap entered promiscuous mode [ 75.147800][ T4510] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.157957][ T1344] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.168020][ T1344] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.176674][ T1344] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.187020][ T1344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.198596][ T4510] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.209835][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.218652][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.230070][ T4510] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.239556][ T4510] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.248491][ T4510] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.258229][ T4510] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.330788][ T4606] loop0: detected capacity change from 0 to 1024 [ 75.454943][ T4606] ================================================================== [ 75.463359][ T4606] BUG: KASAN: slab-out-of-bounds in hfsplus_uni2asc+0x591/0x1200 [ 75.471197][ T4606] Read of size 2 at addr ffff88802378240c by task syz-executor.0/4606 [ 75.479535][ T4606] [ 75.481878][ T4606] CPU: 0 PID: 4606 Comm: syz-executor.0 Not tainted syzkaller #0 [ 75.489863][ T4606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 75.500064][ T4606] Call Trace: [ 75.503356][ T4606] [ 75.506468][ T4606] dump_stack_lvl+0x168/0x230 [ 75.511279][ T4606] ? show_regs_print_info+0x20/0x20 [ 75.516495][ T4606] ? _printk+0xcc/0x110 [ 75.520801][ T4606] ? hfsplus_uni2asc+0x591/0x1200 [ 75.525954][ T4606] ? load_image+0x3b0/0x3b0 [ 75.530561][ T4606] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 75.536142][ T4606] print_address_description+0x60/0x2d0 [ 75.541762][ T4606] ? hfsplus_uni2asc+0x591/0x1200 [ 75.546817][ T4606] kasan_report+0xdf/0x130 [ 75.551405][ T4606] ? hfsplus_uni2asc+0x591/0x1200 [ 75.556462][ T4606] hfsplus_uni2asc+0x591/0x1200 [ 75.561600][ T4606] hfsplus_readdir+0x6db/0xd70 [ 75.566507][ T4606] ? hfsplus_rename+0x1b0/0x1b0 [ 75.571427][ T4606] ? __might_sleep+0xf0/0xf0 [ 75.576043][ T4606] ? read_lock_is_recursive+0x10/0x10 [ 75.581535][ T4606] ? mutex_lock_io_nested+0x60/0x60 [ 75.586838][ T4606] ? preempt_count_add+0x8d/0x190 [ 75.591882][ T4606] ? down_read_killable+0x1ce/0x340 [ 75.597099][ T4606] ? fsnotify_perm+0x254/0x560 [ 75.601902][ T4606] iterate_dir+0x218/0x560 [ 75.606340][ T4606] ? hfsplus_rename+0x1b0/0x1b0 [ 75.611307][ T4606] __se_sys_getdents+0xe5/0x250 [ 75.616182][ T4606] ? __x64_sys_getdents+0x80/0x80 [ 75.621337][ T4606] ? fillonedir+0x4c0/0x4c0 [ 75.626068][ T4606] ? vtime_user_exit+0x2dc/0x400 [ 75.631029][ T4606] ? lockdep_hardirqs_on+0x94/0x140 [ 75.636258][ T4606] do_syscall_64+0x4c/0xa0 [ 75.640698][ T4606] ? clear_bhb_loop+0x30/0x80 [ 75.645404][ T4606] ? clear_bhb_loop+0x30/0x80 [ 75.650201][ T4606] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 75.656323][ T4606] RIP: 0033:0x7f97813cde69 [ 75.660758][ T4606] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 75.681105][ T4606] RSP: 002b:00007f978074e0c8 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 75.689623][ T4606] RAX: ffffffffffffffda RBX: 00007f97814fbf80 RCX: 00007f97813cde69 [ 75.697698][ T4606] RDX: 0000000000000090 RSI: 0000000020000180 RDI: 0000000000000004 [ 75.705982][ T4606] RBP: 00007f978141a47a R08: 0000000000000000 R09: 0000000000000000 [ 75.714071][ T4606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 75.722119][ T4606] R13: 000000000000000b R14: 00007f97814fbf80 R15: 00007fff19472998 [ 75.730267][ T4606] [ 75.733314][ T4606] [ 75.735656][ T4606] Allocated by task 4606: [ 75.740068][ T4606] __kasan_kmalloc+0xb5/0xf0 [ 75.744822][ T4606] hfsplus_find_init+0x85/0x1c0 [ 75.749749][ T4606] hfsplus_readdir+0x1cf/0xd70 [ 75.754498][ T4606] iterate_dir+0x218/0x560 [ 75.758987][ T4606] __se_sys_getdents+0xe5/0x250 [ 75.763912][ T4606] do_syscall_64+0x4c/0xa0 [ 75.768368][ T4606] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 75.774262][ T4606] [ 75.776571][ T4606] The buggy address belongs to the object at ffff888023782000 [ 75.776571][ T4606] which belongs to the cache kmalloc-2k of size 2048 [ 75.791041][ T4606] The buggy address is located 1036 bytes inside of [ 75.791041][ T4606] 2048-byte region [ffff888023782000, ffff888023782800) [ 75.804822][ T4606] The buggy address belongs to the page: [ 75.810471][ T4606] page:ffffea00008de000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x23780 [ 75.820627][ T4606] head:ffffea00008de000 order:3 compound_mapcount:0 compound_pincount:0 [ 75.829113][ T4606] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 75.837088][ T4606] raw: 00fff00000010200 ffffea0001f5d800 0000000300000003 ffff888016842000 [ 75.845657][ T4606] raw: 0000000000000000 0000000080080008 00000001ffffffff 0000000000000000 [ 75.854223][ T4606] page dumped because: kasan: bad access detected [ 75.860799][ T4606] page_owner tracks the page as allocated [ 75.866492][ T4606] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd28c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1344, ts 51382315170, free_ts 42151264615 [ 75.886810][ T4606] get_page_from_freelist+0x1b77/0x1c60 [ 75.892439][ T4606] __alloc_pages+0x1e1/0x470 [ 75.897028][ T4606] new_slab+0xc0/0x4b0 [ 75.901087][ T4606] ___slab_alloc+0x81e/0xdf0 [ 75.905663][ T4606] __kmalloc_node_track_caller+0x1fc/0x3a0 [ 75.911759][ T4606] pskb_expand_head+0x127/0x10f0 [ 75.917006][ T4606] netlink_trim+0x180/0x220 [ 75.921507][ T4606] netlink_broadcast_filtered+0x7c/0x1170 [ 75.927392][ T4606] nlmsg_notify+0xec/0x1a0 [ 75.931892][ T4606] netdev_state_change+0xe6/0x140 [ 75.937093][ T4606] linkwatch_do_dev+0x10d/0x160 [ 75.941980][ T4606] __linkwatch_run_queue+0x4a9/0x7b0 [ 75.947448][ T4606] linkwatch_event+0x48/0x50 [ 75.952110][ T4606] process_one_work+0x863/0x1000 [ 75.957120][ T4606] worker_thread+0xaa8/0x12a0 [ 75.961782][ T4606] kthread+0x436/0x520 [ 75.965953][ T4606] page last free stack trace: [ 75.970611][ T4606] free_unref_page_prepare+0x637/0x6c0 [ 75.976319][ T4606] free_unref_page+0x94/0x280 [ 75.980979][ T4606] __unfreeze_partials+0x1a5/0x200 [ 75.986115][ T4606] put_cpu_partial+0x12d/0x190 [ 75.990888][ T4606] qlist_free_all+0x35/0x90 [ 75.995484][ T4606] kasan_quarantine_reduce+0x150/0x160 [ 76.000929][ T4606] __kasan_slab_alloc+0x2f/0xd0 [ 76.005771][ T4606] slab_post_alloc_hook+0x4c/0x380 [ 76.010868][ T4606] kmem_cache_alloc_trace+0x103/0x2a0 [ 76.016315][ T4606] tomoyo_dump_page+0xe6/0x5e0 [ 76.021063][ T4606] tomoyo_condition+0x204d/0x2ce0 [ 76.026088][ T4606] tomoyo_check_acl+0x170/0x3f0 [ 76.031033][ T4606] tomoyo_execute_permission+0x12c/0x410 [ 76.036758][ T4606] tomoyo_find_next_domain+0x446/0x1a60 [ 76.042293][ T4606] tomoyo_bprm_check_security+0xdd/0x120 [ 76.047910][ T4606] security_bprm_check+0x5e/0x90 [ 76.052832][ T4606] [ 76.055149][ T4606] Memory state around the buggy address: [ 76.061057][ T4606] ffff888023782300: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 76.069280][ T4606] ffff888023782380: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 76.077413][ T4606] >ffff888023782400: 00 04 fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 76.085539][ T4606] ^ [ 76.090114][ T4606] ffff888023782480: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 76.098295][ T4606] ffff888023782500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 76.106347][ T4606] ================================================================== [ 76.114474][ T4606] Disabling lock debugging due to kernel taint [ 76.124064][ T1324] Bluetooth: hci0: command 0x0409 tx timeout [ 76.141236][ T4606] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 76.148496][ T4606] CPU: 0 PID: 4606 Comm: syz-executor.0 Tainted: G B syzkaller #0 [ 76.158093][ T4606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 76.168411][ T4606] Call Trace: [ 76.171781][ T4606] [ 76.174749][ T4606] dump_stack_lvl+0x168/0x230 [ 76.179508][ T4606] ? show_regs_print_info+0x20/0x20 [ 76.184947][ T4606] ? load_image+0x3b0/0x3b0 [ 76.189644][ T4606] panic+0x2c9/0x7f0 [ 76.193580][ T4606] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 76.199760][ T4606] ? bpf_jit_dump+0xd0/0xd0 [ 76.204453][ T4606] ? _raw_spin_unlock_irqrestore+0xf6/0x100 [ 76.210446][ T4606] ? _raw_spin_unlock+0x40/0x40 [ 76.215521][ T4606] ? hfsplus_uni2asc+0x591/0x1200 [ 76.220644][ T4606] check_panic_on_warn+0x80/0xa0 [ 76.225681][ T4606] ? hfsplus_uni2asc+0x591/0x1200 [ 76.230982][ T4606] end_report+0x6d/0xf0 [ 76.235429][ T4606] kasan_report+0x102/0x130 [ 76.239958][ T4606] ? hfsplus_uni2asc+0x591/0x1200 [ 76.245169][ T4606] hfsplus_uni2asc+0x591/0x1200 [ 76.250041][ T4606] hfsplus_readdir+0x6db/0xd70 [ 76.254827][ T4606] ? hfsplus_rename+0x1b0/0x1b0 [ 76.259794][ T4606] ? __might_sleep+0xf0/0xf0 [ 76.264410][ T4606] ? read_lock_is_recursive+0x10/0x10 [ 76.269813][ T4606] ? mutex_lock_io_nested+0x60/0x60 [ 76.275280][ T4606] ? preempt_count_add+0x8d/0x190 [ 76.280444][ T4606] ? down_read_killable+0x1ce/0x340 [ 76.285785][ T4606] ? fsnotify_perm+0x254/0x560 [ 76.290780][ T4606] iterate_dir+0x218/0x560 [ 76.295353][ T4606] ? hfsplus_rename+0x1b0/0x1b0 [ 76.300660][ T4606] __se_sys_getdents+0xe5/0x250 [ 76.305806][ T4606] ? __x64_sys_getdents+0x80/0x80 [ 76.310849][ T4606] ? fillonedir+0x4c0/0x4c0 [ 76.315547][ T4606] ? vtime_user_exit+0x2dc/0x400 [ 76.320590][ T4606] ? lockdep_hardirqs_on+0x94/0x140 [ 76.326150][ T4606] do_syscall_64+0x4c/0xa0 [ 76.330669][ T4606] ? clear_bhb_loop+0x30/0x80 [ 76.335535][ T4606] ? clear_bhb_loop+0x30/0x80 [ 76.340308][ T4606] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 76.346215][ T4606] RIP: 0033:0x7f97813cde69 [ 76.350903][ T4606] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 76.370706][ T4606] RSP: 002b:00007f978074e0c8 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 76.379219][ T4606] RAX: ffffffffffffffda RBX: 00007f97814fbf80 RCX: 00007f97813cde69 [ 76.387199][ T4606] RDX: 0000000000000090 RSI: 0000000020000180 RDI: 0000000000000004 [ 76.395401][ T4606] RBP: 00007f978141a47a R08: 0000000000000000 R09: 0000000000000000 [ 76.403541][ T4606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 76.411783][ T4606] R13: 000000000000000b R14: 00007f97814fbf80 R15: 00007fff19472998 [ 76.419882][ T4606] [ 76.423180][ T4606] Kernel Offset: disabled [ 76.427578][ T4606] Rebooting in 86400 seconds..