Warning: Permanently added '10.128.1.220' (ED25519) to the list of known hosts.
2025/07/22 18:37:41 ignoring optional flag "sandboxArg"="0"
2025/07/22 18:37:41 ignoring optional flag "type"="gce"
2025/07/22 18:37:41 parsed 1 programs
2025/07/22 18:37:43 executed programs: 0
[ 68.767227][ T4473] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS
[ 68.897206][ T4510] chnl_net:caif_netlink_parms(): no params data found
[ 68.935671][ T4510] bridge0: port 1(bridge_slave_0) entered blocking state
[ 68.943277][ T4510] bridge0: port 1(bridge_slave_0) entered disabled state
[ 68.950949][ T4510] device bridge_slave_0 entered promiscuous mode
[ 68.959465][ T4510] bridge0: port 2(bridge_slave_1) entered blocking state
[ 68.966711][ T4510] bridge0: port 2(bridge_slave_1) entered disabled state
[ 68.974548][ T4510] device bridge_slave_1 entered promiscuous mode
[ 68.994189][ T4510] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 69.005158][ T4510] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 69.026286][ T4510] team0: Port device team_slave_0 added
[ 69.034305][ T4510] team0: Port device team_slave_1 added
[ 69.049503][ T4510] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 69.056535][ T4510] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 69.082691][ T4510] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 69.094389][ T4510] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 69.101422][ T4510] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 69.127679][ T4510] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 69.154754][ T4510] device hsr_slave_0 entered promiscuous mode
[ 69.162212][ T4510] device hsr_slave_1 entered promiscuous mode
[ 69.608752][ T4510] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 69.621112][ T4510] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 69.631168][ T4510] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 69.642630][ T4510] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 69.668762][ T4510] bridge0: port 2(bridge_slave_1) entered blocking state
[ 69.676069][ T4510] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 69.683528][ T4510] bridge0: port 1(bridge_slave_0) entered blocking state
[ 69.690702][ T4510] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 69.741745][ T4510] 8021q: adding VLAN 0 to HW filter on device bond0
[ 69.756611][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 69.766848][ T155] bridge0: port 1(bridge_slave_0) entered disabled state
[ 69.776231][ T155] bridge0: port 2(bridge_slave_1) entered disabled state
[ 69.785774][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[ 69.799847][ T4510] 8021q: adding VLAN 0 to HW filter on device team0
[ 69.813824][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 69.822795][ T155] bridge0: port 1(bridge_slave_0) entered blocking state
[ 69.829951][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 69.855488][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 69.866188][ T155] bridge0: port 2(bridge_slave_1) entered blocking state
[ 69.873309][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 69.886431][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 69.896000][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 69.915531][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 69.925233][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 69.938718][ T3045] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 69.947975][ T3045] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 69.961637][ T4510] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 69.981790][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 69.990273][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 69.999571][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 70.108533][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 70.116987][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 70.132131][ T4510] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 70.154750][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 70.164281][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 70.185755][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 70.196263][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 70.208132][ T4510] device veth0_vlan entered promiscuous mode
[ 70.223224][ T4510] device veth1_vlan entered promiscuous mode
[ 70.230542][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 70.238839][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 70.247000][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 70.270376][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 70.280162][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 70.289566][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 70.302516][ T4510] device veth0_macvtap entered promiscuous mode
[ 70.311943][ T4510] device veth1_macvtap entered promiscuous mode
[ 70.331151][ T4510] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 70.338626][ T3045] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 70.348847][ T3045] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 70.357094][ T3045] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 70.367790][ T3045] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 70.380490][ T4510] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 70.391138][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 70.401054][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 70.413794][ T4510] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 70.425526][ T4510] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 70.435125][ T4510] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 70.445407][ T4510] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 70.517590][ T151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 70.531815][ T151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 70.551207][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 70.571104][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 70.579906][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 70.595246][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 70.659041][ T4598] loop0: detected capacity change from 0 to 2048
[ 70.685114][ T4598] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[ 70.718769][ T4598] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[ 70.731330][ T4598] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[ 70.743143][ T4598] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found
[ 70.750899][ T4598] UDF-fs: Scanning with blocksize 512 failed
[ 70.761947][ T4598] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 70.833608][ T7] Bluetooth: hci0: command 0x0409 tx timeout
[ 70.924121][ T4510] ==================================================================
[ 70.932439][ T4510] BUG: KASAN: use-after-free in crc_itu_t+0x1f5/0x280
[ 70.939336][ T4510] Read of size 1 at addr ffff88806f334000 by task syz-executor.0/4510
[ 70.947497][ T4510]
[ 70.949991][ T4510] CPU: 0 PID: 4510 Comm: syz-executor.0 Not tainted 5.15.189-syzkaller #0
[ 70.958593][ T4510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 70.968942][ T4510] Call Trace:
[ 70.972247][ T4510]
[ 70.975197][ T4510] dump_stack_lvl+0x168/0x230
[ 70.980006][ T4510] ? show_regs_print_info+0x20/0x20
[ 70.985405][ T4510] ? load_image+0x3b0/0x3b0
[ 70.989926][ T4510] ? _raw_spin_lock_irqsave+0xb0/0xf0
[ 70.995342][ T4510] print_address_description+0x60/0x2d0
[ 71.000910][ T4510] ? crc_itu_t+0x1f5/0x280
[ 71.005354][ T4510] kasan_report+0xdf/0x130
[ 71.009799][ T4510] ? crc_itu_t+0x1f5/0x280
[ 71.014242][ T4510] crc_itu_t+0x1f5/0x280
[ 71.018523][ T4510] udf_sync_fs+0x194/0x350
[ 71.023048][ T4510] ? udf_put_super+0x160/0x160
[ 71.027836][ T4510] ? get_nr_dirty_inodes+0x248/0x2d0
[ 71.033147][ T4510] sync_filesystem+0xe6/0x220
[ 71.037846][ T4510] generic_shutdown_super+0x6b/0x300
[ 71.043229][ T4510] kill_block_super+0x7c/0xe0
[ 71.047932][ T4510] deactivate_locked_super+0x93/0xf0
[ 71.053247][ T4510] cleanup_mnt+0x418/0x4d0
[ 71.058018][ T4510] ? lockdep_hardirqs_on+0x94/0x140
[ 71.063238][ T4510] task_work_run+0x125/0x1a0
[ 71.067863][ T4510] exit_to_user_mode_loop+0x10f/0x130
[ 71.073284][ T4510] exit_to_user_mode_prepare+0xb1/0x140
[ 71.078873][ T4510] syscall_exit_to_user_mode+0x16/0x40
[ 71.084647][ T4510] do_syscall_64+0x58/0xa0
[ 71.089105][ T4510] ? clear_bhb_loop+0x30/0x80
[ 71.093817][ T4510] ? clear_bhb_loop+0x30/0x80
[ 71.098520][ T4510] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 71.104450][ T4510] RIP: 0033:0x7fe085ad7e57
[ 71.108908][ T4510] Code: b0 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b0 ff ff ff f7 d8 64 89 02 b8
[ 71.128533][ T4510] RSP: 002b:00007ffdba28a298 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[ 71.137068][ T4510] RAX: 0000000000000000 RBX: 00007fe085b213b9 RCX: 00007fe085ad7e57
[ 71.145151][ T4510] RDX: 0000000000000000 RSI: 000000000000000a RDI: 00007ffdba28a350
[ 71.153141][ T4510] RBP: 00007ffdba28a350 R08: 0000000000000000 R09: 0000000000000000
[ 71.161134][ T4510] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffdba28b410
[ 71.169133][ T4510] R13: 00007fe085b213b9 R14: 00000000000113ca R15: 0000000000000006
[ 71.177143][ T4510]
[ 71.180180][ T4510]
[ 71.182513][ T4510] The buggy address belongs to the page:
[ 71.188152][ T4510] page:ffffea0001bccd00 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1 pfn:0x6f334
[ 71.198326][ T4510] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 71.205568][ T4510] raw: 00fff00000000000 ffffea0001bc9688 ffffea0001bcc188 0000000000000000
[ 71.214267][ T4510] raw: 0000000000000001 0000000000000000 00000000ffffffff 0000000000000000
[ 71.222960][ T4510] page dumped because: kasan: bad access detected
[ 71.229395][ T4510] page_owner tracks the page as freed
[ 71.234779][ T4510] page last allocated via order 0, migratetype Movable, gfp_mask 0x1100dca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), pid 4597, ts 70775189909, free_ts 70901002309
[ 71.250453][ T4510] get_page_from_freelist+0x1b77/0x1c60
[ 71.256037][ T4510] __alloc_pages+0x1e1/0x470
[ 71.260649][ T4510] alloc_pages_vma+0x393/0x7c0
[ 71.265436][ T4510] handle_mm_fault+0x2382/0x43c0
[ 71.270393][ T4510] do_user_addr_fault+0x489/0xc80
[ 71.275573][ T4510] exc_page_fault+0x60/0x100
[ 71.280331][ T4510] asm_exc_page_fault+0x22/0x30
[ 71.285205][ T4510] page last free stack trace:
[ 71.289896][ T4510] free_unref_page_prepare+0x637/0x6c0
[ 71.295376][ T4510] free_unref_page_list+0x122/0x7e0
[ 71.300669][ T4510] release_pages+0x184b/0x1bb0
[ 71.305452][ T4510] tlb_flush_mmu+0xc5/0x170
[ 71.309974][ T4510] unmap_page_range+0x2096/0x2520
[ 71.315040][ T4510] unmap_vmas+0x11b/0x230
[ 71.319422][ T4510] exit_mmap+0x38f/0x5f0
[ 71.323694][ T4510] __mmput+0x115/0x3b0
[ 71.327773][ T4510] exit_mm+0x567/0x6c0
[ 71.331856][ T4510] do_exit+0x5a1/0x20a0
[ 71.336038][ T4510] do_group_exit+0x12e/0x300
[ 71.340655][ T4510] get_signal+0x6ca/0x12c0
[ 71.345098][ T4510] arch_do_signal_or_restart+0xc1/0x1300
[ 71.350762][ T4510] exit_to_user_mode_loop+0x9e/0x130
[ 71.356080][ T4510] exit_to_user_mode_prepare+0xb1/0x140
[ 71.361735][ T4510] syscall_exit_to_user_mode+0x16/0x40
[ 71.367216][ T4510]
[ 71.369545][ T4510] Memory state around the buggy address:
[ 71.375177][ T4510] ffff88806f333f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 71.383264][ T4510] ffff88806f333f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 71.391343][ T4510] >ffff88806f334000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 71.399432][ T4510] ^
[ 71.403553][ T4510] ffff88806f334080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 71.411630][ T4510] ffff88806f334100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 71.420060][ T4510] ==================================================================
[ 71.428133][ T4510] Disabling lock debugging due to kernel taint
[ 71.446882][ T4510] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 71.454128][ T4510] CPU: 0 PID: 4510 Comm: syz-executor.0 Tainted: G B 5.15.189-syzkaller #0
[ 71.464334][ T4510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 71.474666][ T4510] Call Trace:
[ 71.477949][ T4510]
[ 71.480866][ T4510] dump_stack_lvl+0x168/0x230
[ 71.485607][ T4510] ? show_regs_print_info+0x20/0x20
[ 71.490800][ T4510] ? load_image+0x3b0/0x3b0
[ 71.495498][ T4510] panic+0x2c9/0x7f0
[ 71.499435][ T4510] ? bpf_jit_dump+0xd0/0xd0
[ 71.503941][ T4510] ? _raw_spin_unlock_irqrestore+0xf6/0x100
[ 71.509944][ T4510] ? _raw_spin_unlock+0x40/0x40
[ 71.514794][ T4510] ? crc_itu_t+0x1f5/0x280
[ 71.519214][ T4510] check_panic_on_warn+0x80/0xa0
[ 71.524162][ T4510] ? crc_itu_t+0x1f5/0x280
[ 71.528568][ T4510] end_report+0x6d/0xf0
[ 71.532710][ T4510] kasan_report+0x102/0x130
[ 71.537221][ T4510] ? crc_itu_t+0x1f5/0x280
[ 71.541643][ T4510] crc_itu_t+0x1f5/0x280
[ 71.546016][ T4510] udf_sync_fs+0x194/0x350
[ 71.550445][ T4510] ? udf_put_super+0x160/0x160
[ 71.555196][ T4510] ? get_nr_dirty_inodes+0x248/0x2d0
[ 71.560488][ T4510] sync_filesystem+0xe6/0x220
[ 71.565192][ T4510] generic_shutdown_super+0x6b/0x300
[ 71.570760][ T4510] kill_block_super+0x7c/0xe0
[ 71.575424][ T4510] deactivate_locked_super+0x93/0xf0
[ 71.580787][ T4510] cleanup_mnt+0x418/0x4d0
[ 71.586836][ T4510] ? lockdep_hardirqs_on+0x94/0x140
[ 71.592017][ T4510] task_work_run+0x125/0x1a0
[ 71.596591][ T4510] exit_to_user_mode_loop+0x10f/0x130
[ 71.601977][ T4510] exit_to_user_mode_prepare+0xb1/0x140
[ 71.607501][ T4510] syscall_exit_to_user_mode+0x16/0x40
[ 71.612958][ T4510] do_syscall_64+0x58/0xa0
[ 71.617385][ T4510] ? clear_bhb_loop+0x30/0x80
[ 71.622043][ T4510] ? clear_bhb_loop+0x30/0x80
[ 71.626703][ T4510] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 71.632668][ T4510] RIP: 0033:0x7fe085ad7e57
[ 71.637076][ T4510] Code: b0 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b0 ff ff ff f7 d8 64 89 02 b8
[ 71.656665][ T4510] RSP: 002b:00007ffdba28a298 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[ 71.665161][ T4510] RAX: 0000000000000000 RBX: 00007fe085b213b9 RCX: 00007fe085ad7e57
[ 71.673200][ T4510] RDX: 0000000000000000 RSI: 000000000000000a RDI: 00007ffdba28a350
[ 71.681151][ T4510] RBP: 00007ffdba28a350 R08: 0000000000000000 R09: 0000000000000000
[ 71.689101][ T4510] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffdba28b410
[ 71.697231][ T4510] R13: 00007fe085b213b9 R14: 00000000000113ca R15: 0000000000000006
[ 71.705390][ T4510]
[ 71.708673][ T4510] Kernel Offset: disabled
[ 71.713114][ T4510] Rebooting in 86400 seconds..