Warning: Permanently added '10.128.0.39' (ED25519) to the list of known hosts. 2025/07/26 15:22:02 ignoring optional flag "sandboxArg"="0" 2025/07/26 15:22:02 ignoring optional flag "type"="gce" 2025/07/26 15:22:03 parsed 1 programs 2025/07/26 15:22:04 executed programs: 0 [ 68.317567][ T4468] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 68.441132][ T4509] chnl_net:caif_netlink_parms(): no params data found [ 68.476209][ T4509] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.483776][ T4509] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.492117][ T4509] device bridge_slave_0 entered promiscuous mode [ 68.500047][ T4509] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.507361][ T4509] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.515141][ T4509] device bridge_slave_1 entered promiscuous mode [ 68.533375][ T4509] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.544316][ T4509] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.564867][ T4509] team0: Port device team_slave_0 added [ 68.571796][ T4509] team0: Port device team_slave_1 added [ 68.586789][ T4509] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.593994][ T4509] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.620321][ T4509] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.632501][ T4509] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.639644][ T4509] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.665561][ T4509] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.691655][ T4509] device hsr_slave_0 entered promiscuous mode [ 68.699070][ T4509] device hsr_slave_1 entered promiscuous mode [ 69.127017][ T4509] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 69.137555][ T4509] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 69.149433][ T4509] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 69.159350][ T4509] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 69.184224][ T4509] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.191351][ T4509] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.198758][ T4509] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.205836][ T4509] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.254999][ T4509] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.271852][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.280263][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.289033][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.297203][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 69.311729][ T4509] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.325373][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.334809][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.341960][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.357674][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.367475][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.374610][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.401220][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.411679][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.420995][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.432134][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.446728][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.455877][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.466896][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.582913][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.591994][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.603976][ T4509] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.625769][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.635794][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.657491][ T4509] device veth0_vlan entered promiscuous mode [ 69.666297][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.675211][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.690522][ T4509] device veth1_vlan entered promiscuous mode [ 69.699217][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.707454][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.715729][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 69.738958][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 69.747161][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.756603][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.766639][ T4509] device veth0_macvtap entered promiscuous mode [ 69.779380][ T4509] device veth1_macvtap entered promiscuous mode [ 69.796070][ T4509] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.804175][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.814691][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.823558][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.834278][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.846801][ T4509] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.855825][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.866004][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.879489][ T4509] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.890510][ T4509] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.900368][ T4509] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.910699][ T4509] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.993528][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.013361][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.033138][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.047793][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.057087][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.068310][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.131642][ T4597] loop0: detected capacity change from 0 to 2048 [ 70.150265][ T4597] ======================================================= [ 70.150265][ T4597] WARNING: The mand mount option has been deprecated and [ 70.150265][ T4597] and is ignored by this kernel. Remove the mand [ 70.150265][ T4597] option from the mount to silence this warning. [ 70.150265][ T4597] ======================================================= [ 70.214185][ T4597] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 70.238544][ T4597] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 70.378992][ T21] Bluetooth: hci0: command 0x0409 tx timeout [ 70.393132][ T4509] ================================================================== [ 70.401384][ T4509] BUG: KASAN: use-after-free in udf_close_lvid+0x674/0x990 [ 70.408603][ T4509] Write of size 1 at addr ffff888079f131d8 by task syz-executor.0/4509 [ 70.416842][ T4509] [ 70.419192][ T4509] CPU: 1 PID: 4509 Comm: syz-executor.0 Not tainted 5.15.189-syzkaller #0 [ 70.427870][ T4509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 70.438026][ T4509] Call Trace: [ 70.441309][ T4509] [ 70.444248][ T4509] dump_stack_lvl+0x168/0x230 [ 70.448950][ T4509] ? show_regs_print_info+0x20/0x20 [ 70.454350][ T4509] ? load_image+0x3b0/0x3b0 [ 70.458872][ T4509] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 70.464256][ T4509] ? mutex_lock_io_nested+0x60/0x60 [ 70.469476][ T4509] print_address_description+0x60/0x2d0 [ 70.475040][ T4509] ? udf_close_lvid+0x674/0x990 [ 70.479903][ T4509] kasan_report+0xdf/0x130 [ 70.484330][ T4509] ? udf_close_lvid+0x674/0x990 [ 70.489288][ T4509] udf_close_lvid+0x674/0x990 [ 70.493986][ T4509] ? udf_open_lvid+0x5a0/0x5a0 [ 70.498767][ T4509] ? iput+0x333/0x8a0 [ 70.502761][ T4509] ? clear_inode+0x150/0x150 [ 70.507364][ T4509] udf_put_super+0xc8/0x160 [ 70.511881][ T4509] ? udf_free_in_core_inode+0x20/0x20 [ 70.517263][ T4509] generic_shutdown_super+0x130/0x300 [ 70.522665][ T4509] kill_block_super+0x7c/0xe0 [ 70.527355][ T4509] deactivate_locked_super+0x93/0xf0 [ 70.532656][ T4509] cleanup_mnt+0x418/0x4d0 [ 70.537172][ T4509] ? lockdep_hardirqs_on+0x94/0x140 [ 70.542380][ T4509] task_work_run+0x125/0x1a0 [ 70.546996][ T4509] exit_to_user_mode_loop+0x10f/0x130 [ 70.552371][ T4509] exit_to_user_mode_prepare+0xb1/0x140 [ 70.557934][ T4509] syscall_exit_to_user_mode+0x16/0x40 [ 70.563399][ T4509] do_syscall_64+0x58/0xa0 [ 70.567821][ T4509] ? clear_bhb_loop+0x30/0x80 [ 70.572506][ T4509] ? clear_bhb_loop+0x30/0x80 [ 70.577192][ T4509] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 70.583113][ T4509] RIP: 0033:0x7fc10287ae57 [ 70.587530][ T4509] Code: b0 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b0 ff ff ff f7 d8 64 89 02 b8 [ 70.607231][ T4509] RSP: 002b:00007ffdca55d208 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 70.615821][ T4509] RAX: 0000000000000000 RBX: 00007fc1028c43b9 RCX: 00007fc10287ae57 [ 70.623806][ T4509] RDX: 0000000000000000 RSI: 000000000000000a RDI: 00007ffdca55d2c0 [ 70.631874][ T4509] RBP: 00007ffdca55d2c0 R08: 0000000000000000 R09: 0000000000000000 [ 70.639939][ T4509] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffdca55e380 [ 70.647920][ T4509] R13: 00007fc1028c43b9 R14: 00000000000111a9 R15: 0000000000000006 [ 70.655911][ T4509] [ 70.658938][ T4509] [ 70.661260][ T4509] Allocated by task 4566: [ 70.665582][ T4509] __kasan_slab_alloc+0x9c/0xd0 [ 70.670521][ T4509] slab_post_alloc_hook+0x4c/0x380 [ 70.675642][ T4509] kmem_cache_alloc+0x100/0x290 [ 70.680549][ T4509] getname_flags+0xb5/0x500 [ 70.685062][ T4509] user_path_at_empty+0x2a/0x190 [ 70.690018][ T4509] vfs_statx+0x102/0x4d0 [ 70.694354][ T4509] __x64_sys_newfstatat+0x12c/0x1b0 [ 70.699559][ T4509] do_syscall_64+0x4c/0xa0 [ 70.703981][ T4509] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 70.709898][ T4509] [ 70.712225][ T4509] Freed by task 4566: [ 70.716199][ T4509] kasan_set_track+0x4b/0x70 [ 70.720804][ T4509] kasan_set_free_info+0x1f/0x40 [ 70.725759][ T4509] ____kasan_slab_free+0xd5/0x110 [ 70.730791][ T4509] slab_free_freelist_hook+0xea/0x170 [ 70.736167][ T4509] kmem_cache_free+0x8f/0x210 [ 70.740849][ T4509] user_path_at_empty+0x13e/0x190 [ 70.745884][ T4509] vfs_statx+0x102/0x4d0 [ 70.750133][ T4509] __x64_sys_newfstatat+0x12c/0x1b0 [ 70.755339][ T4509] do_syscall_64+0x4c/0xa0 [ 70.759765][ T4509] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 70.765760][ T4509] [ 70.768084][ T4509] The buggy address belongs to the object at ffff888079f12200 [ 70.768084][ T4509] which belongs to the cache names_cache of size 4096 [ 70.782344][ T4509] The buggy address is located 4056 bytes inside of [ 70.782344][ T4509] 4096-byte region [ffff888079f12200, ffff888079f13200) [ 70.795978][ T4509] The buggy address belongs to the page: [ 70.801618][ T4509] page:ffffea0001e7c400 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x79f10 [ 70.811782][ T4509] head:ffffea0001e7c400 order:3 compound_mapcount:0 compound_pincount:0 [ 70.820296][ T4509] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 70.828394][ T4509] raw: 00fff00000010200 0000000000000000 0000000600000001 ffff8880169e9500 [ 70.836997][ T4509] raw: 0000000000000000 0000000000070007 00000001ffffffff 0000000000000000 [ 70.845581][ T4509] page dumped because: kasan: bad access detected [ 70.852089][ T4509] page_owner tracks the page as allocated [ 70.857891][ T4509] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 3561, ts 16929696264, free_ts 16917064013 [ 70.877380][ T4509] get_page_from_freelist+0x1b77/0x1c60 [ 70.882950][ T4509] __alloc_pages+0x1e1/0x470 [ 70.887563][ T4509] new_slab+0xc0/0x4b0 [ 70.891646][ T4509] ___slab_alloc+0x81e/0xdf0 [ 70.896333][ T4509] kmem_cache_alloc+0x195/0x290 [ 70.901198][ T4509] getname_flags+0xb5/0x500 [ 70.905713][ T4509] do_sys_openat2+0xcf/0x4a0 [ 70.910398][ T4509] __x64_sys_openat+0x135/0x160 [ 70.915255][ T4509] do_syscall_64+0x4c/0xa0 [ 70.919787][ T4509] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 70.925692][ T4509] page last free stack trace: [ 70.930360][ T4509] free_unref_page_prepare+0x637/0x6c0 [ 70.935832][ T4509] free_unref_page+0x94/0x280 [ 70.940518][ T4509] __unfreeze_partials+0x1a5/0x200 [ 70.945634][ T4509] put_cpu_partial+0x12d/0x190 [ 70.950402][ T4509] qlist_free_all+0x35/0x90 [ 70.954912][ T4509] kasan_quarantine_reduce+0x150/0x160 [ 70.960550][ T4509] __kasan_slab_alloc+0x2f/0xd0 [ 70.965405][ T4509] slab_post_alloc_hook+0x4c/0x380 [ 70.970520][ T4509] kmem_cache_alloc_node+0x12d/0x2d0 [ 70.975806][ T4509] __alloc_skb+0xf4/0x750 [ 70.980144][ T4509] alloc_skb_with_frags+0xa7/0x730 [ 70.985345][ T4509] sock_alloc_send_pskb+0x853/0x980 [ 70.990649][ T4509] unix_dgram_sendmsg+0x5ef/0x1890 [ 70.995784][ T4509] sock_write_iter+0x29c/0x380 [ 71.000565][ T4509] vfs_write+0x712/0xd00 [ 71.005155][ T4509] ksys_write+0x14d/0x250 [ 71.009572][ T4509] [ 71.011897][ T4509] Memory state around the buggy address: [ 71.017525][ T4509] ffff888079f13080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 71.025590][ T4509] ffff888079f13100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 71.033653][ T4509] >ffff888079f13180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 71.041718][ T4509] ^ [ 71.048654][ T4509] ffff888079f13200: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 71.056718][ T4509] ffff888079f13280: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 71.064867][ T4509] ================================================================== [ 71.072925][ T4509] Disabling lock debugging due to kernel taint [ 71.089674][ T4509] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 71.096903][ T4509] CPU: 1 PID: 4509 Comm: syz-executor.0 Tainted: G B 5.15.189-syzkaller #0 [ 71.106795][ T4509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 71.117036][ T4509] Call Trace: [ 71.120324][ T4509] [ 71.123260][ T4509] dump_stack_lvl+0x168/0x230 [ 71.127940][ T4509] ? show_regs_print_info+0x20/0x20 [ 71.133141][ T4509] ? load_image+0x3b0/0x3b0 [ 71.137647][ T4509] panic+0x2c9/0x7f0 [ 71.141543][ T4509] ? bpf_jit_dump+0xd0/0xd0 [ 71.146044][ T4509] ? _raw_spin_unlock_irqrestore+0xf6/0x100 [ 71.151955][ T4509] ? _raw_spin_unlock+0x40/0x40 [ 71.156816][ T4509] ? udf_close_lvid+0x674/0x990 [ 71.161668][ T4509] check_panic_on_warn+0x80/0xa0 [ 71.166605][ T4509] ? udf_close_lvid+0x674/0x990 [ 71.171475][ T4509] end_report+0x6d/0xf0 [ 71.175641][ T4509] kasan_report+0x102/0x130 [ 71.180150][ T4509] ? udf_close_lvid+0x674/0x990 [ 71.185011][ T4509] udf_close_lvid+0x674/0x990 [ 71.189699][ T4509] ? udf_open_lvid+0x5a0/0x5a0 [ 71.194572][ T4509] ? iput+0x333/0x8a0 [ 71.198558][ T4509] ? clear_inode+0x150/0x150 [ 71.203148][ T4509] udf_put_super+0xc8/0x160 [ 71.207649][ T4509] ? udf_free_in_core_inode+0x20/0x20 [ 71.213006][ T4509] generic_shutdown_super+0x130/0x300 [ 71.218536][ T4509] kill_block_super+0x7c/0xe0 [ 71.223191][ T4509] deactivate_locked_super+0x93/0xf0 [ 71.228455][ T4509] cleanup_mnt+0x418/0x4d0 [ 71.232850][ T4509] ? lockdep_hardirqs_on+0x94/0x140 [ 71.238026][ T4509] task_work_run+0x125/0x1a0 [ 71.242599][ T4509] exit_to_user_mode_loop+0x10f/0x130 [ 71.247959][ T4509] exit_to_user_mode_prepare+0xb1/0x140 [ 71.253481][ T4509] syscall_exit_to_user_mode+0x16/0x40 [ 71.258918][ T4509] do_syscall_64+0x58/0xa0 [ 71.263321][ T4509] ? clear_bhb_loop+0x30/0x80 [ 71.268235][ T4509] ? clear_bhb_loop+0x30/0x80 [ 71.272888][ T4509] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 71.278762][ T4509] RIP: 0033:0x7fc10287ae57 [ 71.283158][ T4509] Code: b0 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b0 ff ff ff f7 d8 64 89 02 b8 [ 71.302767][ T4509] RSP: 002b:00007ffdca55d208 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 71.311166][ T4509] RAX: 0000000000000000 RBX: 00007fc1028c43b9 RCX: 00007fc10287ae57 [ 71.319114][ T4509] RDX: 0000000000000000 RSI: 000000000000000a RDI: 00007ffdca55d2c0 [ 71.327235][ T4509] RBP: 00007ffdca55d2c0 R08: 0000000000000000 R09: 0000000000000000 [ 71.335180][ T4509] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffdca55e380 [ 71.343129][ T4509] R13: 00007fc1028c43b9 R14: 00000000000111a9 R15: 0000000000000006 [ 71.351084][ T4509] [ 71.354301][ T4509] Kernel Offset: disabled [ 71.358610][ T4509] Rebooting in 86400 seconds..