Warning: Permanently added '10.128.0.231' (ED25519) to the list of known hosts.
2025/07/26 15:04:24 ignoring optional flag "sandboxArg"="0"
2025/07/26 15:04:24 ignoring optional flag "type"="gce"
2025/07/26 15:04:25 parsed 1 programs
2025/07/26 15:04:25 executed programs: 0
[ 79.693018][ T4464] chnl_net:caif_netlink_parms(): no params data found
[ 79.757750][ T4464] bridge0: port 1(bridge_slave_0) entered blocking state
[ 79.766280][ T4464] bridge0: port 1(bridge_slave_0) entered disabled state
[ 79.774878][ T4464] device bridge_slave_0 entered promiscuous mode
[ 79.784269][ T4464] bridge0: port 2(bridge_slave_1) entered blocking state
[ 79.792031][ T4464] bridge0: port 2(bridge_slave_1) entered disabled state
[ 79.800362][ T4464] device bridge_slave_1 entered promiscuous mode
[ 79.824132][ T4464] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 79.835911][ T4464] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 79.868533][ T4464] team0: Port device team_slave_0 added
[ 79.877049][ T4464] team0: Port device team_slave_1 added
[ 79.905320][ T4464] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 79.912535][ T4464] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 79.939225][ T4464] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 79.951940][ T4464] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 79.959249][ T4464] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 79.985492][ T4464] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 80.026499][ T4464] device hsr_slave_0 entered promiscuous mode
[ 80.033739][ T4464] device hsr_slave_1 entered promiscuous mode
[ 80.662405][ T4464] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 80.674243][ T4464] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 80.685277][ T4464] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 80.695061][ T4464] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 80.723839][ T4464] bridge0: port 2(bridge_slave_1) entered blocking state
[ 80.731085][ T4464] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 80.738493][ T4464] bridge0: port 1(bridge_slave_0) entered blocking state
[ 80.745664][ T4464] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 80.764560][ T154] bridge0: port 1(bridge_slave_0) entered disabled state
[ 80.774434][ T154] bridge0: port 2(bridge_slave_1) entered disabled state
[ 80.867883][ T4464] 8021q: adding VLAN 0 to HW filter on device bond0
[ 80.884593][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 80.910892][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 80.922587][ T4464] 8021q: adding VLAN 0 to HW filter on device team0
[ 80.942842][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 80.958070][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 80.967119][ T154] bridge0: port 1(bridge_slave_0) entered blocking state
[ 80.974256][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 81.020595][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 81.040097][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 81.056888][ T154] bridge0: port 2(bridge_slave_1) entered blocking state
[ 81.064380][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 81.074586][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 81.083630][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 81.120252][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 81.140207][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 81.155655][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 81.167722][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 81.178356][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 81.188122][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 81.202341][ T4464] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 81.214801][ T4464] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 81.224637][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 81.234486][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 81.243431][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 81.373267][ T1438] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 81.381256][ T1438] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 81.394451][ T4464] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 81.415783][ T1438] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 81.426716][ T1438] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 81.450321][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 81.460327][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 81.469881][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 81.477748][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 81.489977][ T4464] device veth0_vlan entered promiscuous mode
[ 81.502467][ T4464] device veth1_vlan entered promiscuous mode
[ 81.524574][ T1438] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 81.532939][ T1438] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 81.542937][ T1438] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 81.552014][ T1438] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 81.567817][ T4464] device veth0_macvtap entered promiscuous mode
[ 81.580484][ T4464] device veth1_macvtap entered promiscuous mode
[ 81.610640][ T7] Bluetooth: hci0: command 0x0409 tx timeout
[ 81.618114][ T4464] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 81.639075][ T1438] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 81.650960][ T1438] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 81.667304][ T1438] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 81.681851][ T1438] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 81.695557][ T4464] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 81.705988][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 81.715402][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 81.727134][ T4464] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 81.736703][ T4464] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 81.745719][ T4464] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 81.755420][ T4464] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 81.863100][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 81.887047][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 81.908409][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 81.925214][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 81.945949][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 81.973334][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 82.076830][ T4576] loop0: detected capacity change from 0 to 2048
[ 82.126357][ T4576] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 82.397984][ T4464] ==================================================================
[ 82.406283][ T4464] BUG: KASAN: use-after-free in crc_itu_t+0x1f5/0x280
[ 82.413094][ T4464] Read of size 1 at addr ffff88806d05c000 by task syz-executor.0/4464
[ 82.421546][ T4464]
[ 82.423901][ T4464] CPU: 1 PID: 4464 Comm: syz-executor.0 Not tainted 5.15.189-syzkaller #0
[ 82.432431][ T4464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 82.442538][ T4464] Call Trace:
[ 82.445851][ T4464]
[ 82.448809][ T4464] dump_stack_lvl+0x168/0x230
[ 82.453533][ T4464] ? show_regs_print_info+0x20/0x20
[ 82.458768][ T4464] ? load_image+0x3b0/0x3b0
[ 82.463302][ T4464] ? _raw_spin_lock_irqsave+0xb0/0xf0
[ 82.468715][ T4464] print_address_description+0x60/0x2d0
[ 82.474299][ T4464] ? crc_itu_t+0x1f5/0x280
[ 82.478763][ T4464] kasan_report+0xdf/0x130
[ 82.483208][ T4464] ? crc_itu_t+0x1f5/0x280
[ 82.487662][ T4464] crc_itu_t+0x1f5/0x280
[ 82.491947][ T4464] udf_close_lvid+0x543/0x990
[ 82.496663][ T4464] ? udf_open_lvid+0x5a0/0x5a0
[ 82.501484][ T4464] ? iput+0x333/0x8a0
[ 82.505499][ T4464] ? clear_inode+0x150/0x150
[ 82.510124][ T4464] udf_put_super+0xc8/0x160
[ 82.514663][ T4464] ? udf_free_in_core_inode+0x20/0x20
[ 82.520068][ T4464] generic_shutdown_super+0x130/0x300
[ 82.525487][ T4464] kill_block_super+0x7c/0xe0
[ 82.530200][ T4464] deactivate_locked_super+0x93/0xf0
[ 82.535537][ T4464] cleanup_mnt+0x418/0x4d0
[ 82.539992][ T4464] ? lockdep_hardirqs_on+0x94/0x140
[ 82.545231][ T4464] task_work_run+0x125/0x1a0
[ 82.549876][ T4464] exit_to_user_mode_loop+0x10f/0x130
[ 82.555293][ T4464] exit_to_user_mode_prepare+0xb1/0x140
[ 82.560874][ T4464] syscall_exit_to_user_mode+0x16/0x40
[ 82.566368][ T4464] do_syscall_64+0x58/0xa0
[ 82.570826][ T4464] ? clear_bhb_loop+0x30/0x80
[ 82.575540][ T4464] ? clear_bhb_loop+0x30/0x80
[ 82.580256][ T4464] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 82.586195][ T4464] RIP: 0033:0x7f993cd89c87
[ 82.590643][ T4464] Code: b0 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b0 ff ff ff f7 d8 64 89 02 b8
[ 82.610277][ T4464] RSP: 002b:00007ffef6f392b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[ 82.618729][ T4464] RAX: 0000000000000000 RBX: 00007f993cde3c5a RCX: 00007f993cd89c87
[ 82.626739][ T4464] RDX: 0000000000000000 RSI: 000000000000000a RDI: 00007ffef6f39370
[ 82.634759][ T4464] RBP: 00007ffef6f39370 R08: 0000000000000000 R09: 0000000000000000
[ 82.642765][ T4464] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffef6f3a430
[ 82.650772][ T4464] R13: 00007f993cde3c5a R14: 0000000000014052 R15: 0000000000000006
[ 82.658794][ T4464]
[ 82.661837][ T4464]
[ 82.664181][ T4464] The buggy address belongs to the page:
[ 82.669822][ T4464] page:ffffea0001b41700 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1 pfn:0x6d05c
[ 82.679994][ T4464] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 82.687152][ T4464] raw: 00fff00000000000 ffffea0001b42108 ffffea0001b41748 0000000000000000
[ 82.695761][ T4464] raw: 0000000000000001 0000000000000000 00000000ffffffff 0000000000000000
[ 82.704366][ T4464] page dumped because: kasan: bad access detected
[ 82.710806][ T4464] page_owner tracks the page as freed
[ 82.716197][ T4464] page last allocated via order 0, migratetype Movable, gfp_mask 0x1100dca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), pid 4585, ts 82382837846, free_ts 82389754828
[ 82.731852][ T4464] get_page_from_freelist+0x1b77/0x1c60
[ 82.737437][ T4464] __alloc_pages+0x1e1/0x470
[ 82.742082][ T4464] alloc_pages_vma+0x393/0x7c0
[ 82.746874][ T4464] handle_mm_fault+0x2382/0x43c0
[ 82.751840][ T4464] do_user_addr_fault+0x489/0xc80
[ 82.756894][ T4464] exc_page_fault+0x60/0x100
[ 82.761508][ T4464] asm_exc_page_fault+0x22/0x30
[ 82.766383][ T4464] page last free stack trace:
[ 82.771070][ T4464] free_unref_page_prepare+0x637/0x6c0
[ 82.776575][ T4464] free_unref_page_list+0x122/0x7e0
[ 82.781800][ T4464] release_pages+0x184b/0x1bb0
[ 82.786588][ T4464] tlb_finish_mmu+0x164/0x2e0
[ 82.791297][ T4464] exit_mmap+0x3a6/0x5f0
[ 82.795576][ T4464] __mmput+0x115/0x3b0
[ 82.799667][ T4464] exit_mm+0x567/0x6c0
[ 82.803764][ T4464] do_exit+0x5a1/0x20a0
[ 82.807948][ T4464] do_group_exit+0x12e/0x300
[ 82.812561][ T4464] __x64_sys_exit_group+0x3b/0x40
[ 82.817607][ T4464] do_syscall_64+0x4c/0xa0
[ 82.822074][ T4464] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 82.827999][ T4464]
[ 82.830340][ T4464] Memory state around the buggy address:
[ 82.835991][ T4464] ffff88806d05bf00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 82.844190][ T4464] ffff88806d05bf80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 82.852272][ T4464] >ffff88806d05c000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 82.860350][ T4464] ^
[ 82.864465][ T4464] ffff88806d05c080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 82.872637][ T4464] ffff88806d05c100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 82.880712][ T4464] ==================================================================
[ 82.888789][ T4464] Disabling lock debugging due to kernel taint
[ 82.902532][ T4464] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 82.909771][ T4464] CPU: 0 PID: 4464 Comm: syz-executor.0 Tainted: G B 5.15.189-syzkaller #0
[ 82.919683][ T4464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 82.929765][ T4464] Call Trace:
[ 82.933072][ T4464]
[ 82.936013][ T4464] dump_stack_lvl+0x168/0x230
[ 82.940710][ T4464] ? show_regs_print_info+0x20/0x20
[ 82.945911][ T4464] ? load_image+0x3b0/0x3b0
[ 82.950422][ T4464] panic+0x2c9/0x7f0
[ 82.954326][ T4464] ? bpf_jit_dump+0xd0/0xd0
[ 82.958846][ T4464] ? _raw_spin_unlock_irqrestore+0xf6/0x100
[ 82.964761][ T4464] ? _raw_spin_unlock+0x40/0x40
[ 82.969627][ T4464] ? crc_itu_t+0x1f5/0x280
[ 82.974059][ T4464] check_panic_on_warn+0x80/0xa0
[ 82.979006][ T4464] ? crc_itu_t+0x1f5/0x280
[ 82.983468][ T4464] end_report+0x6d/0xf0
[ 82.987641][ T4464] kasan_report+0x102/0x130
[ 82.992170][ T4464] ? crc_itu_t+0x1f5/0x280
[ 82.996615][ T4464] crc_itu_t+0x1f5/0x280
[ 83.000880][ T4464] udf_close_lvid+0x543/0x990
[ 83.005574][ T4464] ? udf_open_lvid+0x5a0/0x5a0
[ 83.010345][ T4464] ? iput+0x333/0x8a0
[ 83.014340][ T4464] ? clear_inode+0x150/0x150
[ 83.018950][ T4464] udf_put_super+0xc8/0x160
[ 83.023478][ T4464] ? udf_free_in_core_inode+0x20/0x20
[ 83.028864][ T4464] generic_shutdown_super+0x130/0x300
[ 83.034248][ T4464] kill_block_super+0x7c/0xe0
[ 83.038932][ T4464] deactivate_locked_super+0x93/0xf0
[ 83.044241][ T4464] cleanup_mnt+0x418/0x4d0
[ 83.048671][ T4464] ? lockdep_hardirqs_on+0x94/0x140
[ 83.053890][ T4464] task_work_run+0x125/0x1a0
[ 83.058510][ T4464] exit_to_user_mode_loop+0x10f/0x130
[ 83.063893][ T4464] exit_to_user_mode_prepare+0xb1/0x140
[ 83.069451][ T4464] syscall_exit_to_user_mode+0x16/0x40
[ 83.074935][ T4464] do_syscall_64+0x58/0xa0
[ 83.079358][ T4464] ? clear_bhb_loop+0x30/0x80
[ 83.084063][ T4464] ? clear_bhb_loop+0x30/0x80
[ 83.088770][ T4464] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 83.094682][ T4464] RIP: 0033:0x7f993cd89c87
[ 83.099100][ T4464] Code: b0 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b0 ff ff ff f7 d8 64 89 02 b8
[ 83.118706][ T4464] RSP: 002b:00007ffef6f392b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[ 83.127130][ T4464] RAX: 0000000000000000 RBX: 00007f993cde3c5a RCX: 00007f993cd89c87
[ 83.135121][ T4464] RDX: 0000000000000000 RSI: 000000000000000a RDI: 00007ffef6f39370
[ 83.143108][ T4464] RBP: 00007ffef6f39370 R08: 0000000000000000 R09: 0000000000000000
[ 83.151267][ T4464] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffef6f3a430
[ 83.159250][ T4464] R13: 00007f993cde3c5a R14: 0000000000014052 R15: 0000000000000006
[ 83.167623][ T4464]
[ 83.170748][ T4464] Kernel Offset: disabled
[ 83.175100][ T4464] Rebooting in 86400 seconds..