Warning: Permanently added '10.128.10.34' (ED25519) to the list of known hosts.
2025/06/16 18:37:38 ignoring optional flag "sandboxArg"="0"
2025/06/16 18:37:38 ignoring optional flag "type"="gce"
2025/06/16 18:37:39 parsed 1 programs
2025/06/16 18:37:39 executed programs: 0
[ 84.093189][ T4466] chnl_net:caif_netlink_parms(): no params data found
[ 84.159988][ T4466] bridge0: port 1(bridge_slave_0) entered blocking state
[ 84.168455][ T4466] bridge0: port 1(bridge_slave_0) entered disabled state
[ 84.177020][ T4466] device bridge_slave_0 entered promiscuous mode
[ 84.187498][ T4466] bridge0: port 2(bridge_slave_1) entered blocking state
[ 84.195181][ T4466] bridge0: port 2(bridge_slave_1) entered disabled state
[ 84.204988][ T4466] device bridge_slave_1 entered promiscuous mode
[ 84.235934][ T4466] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 84.249095][ T4466] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 84.285504][ T4466] team0: Port device team_slave_0 added
[ 84.293820][ T4466] team0: Port device team_slave_1 added
[ 84.320274][ T4466] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 84.327503][ T4466] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 84.354065][ T4466] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 84.366968][ T4466] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 84.374338][ T4466] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 84.401261][ T4466] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 84.438564][ T4466] device hsr_slave_0 entered promiscuous mode
[ 84.445546][ T4466] device hsr_slave_1 entered promiscuous mode
[ 84.968289][ T4466] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 84.978912][ T4466] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 84.989161][ T4466] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 84.999336][ T4466] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 85.024334][ T4466] bridge0: port 2(bridge_slave_1) entered blocking state
[ 85.031711][ T4466] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 85.039176][ T4466] bridge0: port 1(bridge_slave_0) entered blocking state
[ 85.046529][ T4466] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 85.101717][ T1266] bridge0: port 1(bridge_slave_0) entered disabled state
[ 85.109556][ T1266] bridge0: port 2(bridge_slave_1) entered disabled state
[ 85.125850][ T4466] 8021q: adding VLAN 0 to HW filter on device bond0
[ 85.140245][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 85.148809][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 85.160382][ T4466] 8021q: adding VLAN 0 to HW filter on device team0
[ 85.176123][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 85.196112][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 85.206336][ T1266] bridge0: port 1(bridge_slave_0) entered blocking state
[ 85.213502][ T1266] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 85.224416][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 85.234196][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 85.254171][ T1266] bridge0: port 2(bridge_slave_1) entered blocking state
[ 85.261603][ T1266] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 85.286403][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 85.296043][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 85.307496][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 85.319912][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 85.329091][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 85.338300][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 85.348091][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 85.362317][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 85.373706][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 85.388080][ T4466] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 85.401889][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 85.410446][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 85.424568][ T1266] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 85.555781][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 85.564834][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 85.578680][ T4466] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 85.602227][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 85.613984][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 85.638034][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 85.647903][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 85.660915][ T4466] device veth0_vlan entered promiscuous mode
[ 85.669510][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 85.678021][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 85.689840][ T4466] device veth1_vlan entered promiscuous mode
[ 85.714900][ T434] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 85.723954][ T434] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 85.732670][ T434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 85.742219][ T434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 85.754063][ T4466] device veth0_macvtap entered promiscuous mode
[ 85.766843][ T4466] device veth1_macvtap entered promiscuous mode
[ 85.788590][ T4466] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 85.799739][ T4466] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 85.807457][ T434] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 85.816644][ T434] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 85.824874][ T434] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 85.833690][ T434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 85.843629][ T434] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 85.852707][ T434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 85.866450][ T4466] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 85.875944][ T4466] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 85.885094][ T4466] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 85.894536][ T4466] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 85.964886][ T434] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 85.978265][ T434] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 85.994542][ T7] Bluetooth: hci0: command 0x0409 tx timeout
[ 85.999169][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 86.018645][ T434] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 86.029396][ T434] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 86.040670][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 86.097739][ T4559] loop0: detected capacity change from 0 to 2048
[ 86.115545][ T4559] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[ 86.138250][ T4559] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[ 86.157123][ T4559] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[ 86.181205][ T4559] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found
[ 86.189382][ T4559] UDF-fs: Scanning with blocksize 512 failed
[ 86.201744][ T4559] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 86.413023][ T4466] ==================================================================
[ 86.421907][ T4466] BUG: KASAN: use-after-free in crc_itu_t+0x1ad/0x280
[ 86.428810][ T4466] Read of size 1 at addr ffff88806e7b7000 by task syz-executor.0/4466
[ 86.437161][ T4466]
[ 86.439525][ T4466] CPU: 0 PID: 4466 Comm: syz-executor.0 Not tainted 5.15.185-syzkaller #0
[ 86.448052][ T4466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 86.458237][ T4466] Call Trace:
[ 86.461553][ T4466]
[ 86.464600][ T4466] dump_stack_lvl+0x168/0x230
[ 86.469320][ T4466] ? show_regs_print_info+0x20/0x20
[ 86.474552][ T4466] ? load_image+0x3b0/0x3b0
[ 86.479094][ T4466] ? _raw_spin_lock_irqsave+0xb0/0xf0
[ 86.484510][ T4466] print_address_description+0x60/0x2d0
[ 86.490185][ T4466] ? crc_itu_t+0x1ad/0x280
[ 86.494734][ T4466] kasan_report+0xdf/0x130
[ 86.499189][ T4466] ? crc_itu_t+0x1ad/0x280
[ 86.503818][ T4466] crc_itu_t+0x1ad/0x280
[ 86.508184][ T4466] udf_sync_fs+0x194/0x350
[ 86.512655][ T4466] ? udf_put_super+0x160/0x160
[ 86.517652][ T4466] ? get_nr_dirty_inodes+0x248/0x2d0
[ 86.522995][ T4466] sync_filesystem+0xe6/0x220
[ 86.527708][ T4466] generic_shutdown_super+0x6b/0x300
[ 86.533229][ T4466] kill_block_super+0x7c/0xe0
[ 86.538009][ T4466] deactivate_locked_super+0x93/0xf0
[ 86.543339][ T4466] cleanup_mnt+0x418/0x4d0
[ 86.547797][ T4466] ? lockdep_hardirqs_on+0x94/0x140
[ 86.553040][ T4466] task_work_run+0x125/0x1a0
[ 86.557969][ T4466] exit_to_user_mode_loop+0x10f/0x130
[ 86.563382][ T4466] exit_to_user_mode_prepare+0xb1/0x140
[ 86.569052][ T4466] syscall_exit_to_user_mode+0x16/0x40
[ 86.574558][ T4466] do_syscall_64+0x58/0xa0
[ 86.579096][ T4466] ? clear_bhb_loop+0x30/0x80
[ 86.583805][ T4466] ? clear_bhb_loop+0x30/0x80
[ 86.588782][ T4466] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 86.594835][ T4466] RIP: 0033:0x7f0fa8ac7c87
[ 86.599490][ T4466] Code: b0 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b0 ff ff ff f7 d8 64 89 02 b8
[ 86.619126][ T4466] RSP: 002b:00007ffc587101c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[ 86.627679][ T4466] RAX: 0000000000000000 RBX: 00007f0fa8b21c5a RCX: 00007f0fa8ac7c87
[ 86.635696][ T4466] RDX: 0000000000000000 RSI: 000000000000000a RDI: 00007ffc58710280
[ 86.643713][ T4466] RBP: 00007ffc58710280 R08: 0000000000000000 R09: 0000000000000000
[ 86.651903][ T4466] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc58711340
[ 86.660096][ T4466] R13: 00007f0fa8b21c5a R14: 0000000000014ffc R15: 0000000000000006
[ 86.668121][ T4466]
[ 86.671172][ T4466]
[ 86.673526][ T4466] The buggy address belongs to the page:
[ 86.679287][ T4466] page:ffffea0001b9edc0 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1 pfn:0x6e7b7
[ 86.689640][ T4466] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 86.696803][ T4466] raw: 00fff00000000000 ffffea0001e84bc8 ffffea0001b9df08 0000000000000000
[ 86.705619][ T4466] raw: 0000000000000001 0000000000000000 00000000ffffffff 0000000000000000
[ 86.714233][ T4466] page dumped because: kasan: bad access detected
[ 86.720861][ T4466] page_owner tracks the page as freed
[ 86.726781][ T4466] page last allocated via order 0, migratetype Movable, gfp_mask 0x1100dca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), pid 4510, ts 86267675981, free_ts 86278794923
[ 86.742582][ T4466] get_page_from_freelist+0x1b77/0x1c60
[ 86.748184][ T4466] __alloc_pages+0x1e1/0x470
[ 86.752831][ T4466] alloc_pages_vma+0x393/0x7c0
[ 86.757641][ T4466] handle_mm_fault+0x2382/0x43c0
[ 86.762649][ T4466] do_user_addr_fault+0x489/0xc80
[ 86.767711][ T4466] exc_page_fault+0x60/0x100
[ 86.772475][ T4466] asm_exc_page_fault+0x22/0x30
[ 86.777378][ T4466] copy_user_enhanced_fast_string+0xe/0x40
[ 86.783305][ T4466] copy_page_to_iter+0x49e/0x910
[ 86.788279][ T4466] filemap_read+0x1d94/0x2480
[ 86.792993][ T4466] blkdev_read_iter+0x11d/0x150
[ 86.797879][ T4466] vfs_read+0x725/0xcf0
[ 86.802068][ T4466] ksys_read+0x14d/0x250
[ 86.806444][ T4466] do_syscall_64+0x4c/0xa0
[ 86.810899][ T4466] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 86.816823][ T4466] page last free stack trace:
[ 86.821516][ T4466] free_unref_page_prepare+0x637/0x6c0
[ 86.827022][ T4466] free_unref_page_list+0x122/0x7e0
[ 86.832263][ T4466] release_pages+0x184b/0x1bb0
[ 86.837064][ T4466] tlb_finish_mmu+0x164/0x2e0
[ 86.841771][ T4466] unmap_region+0x315/0x360
[ 86.846307][ T4466] __do_munmap+0x9d3/0xdc0
[ 86.850754][ T4466] __vm_munmap+0x137/0x230
[ 86.855334][ T4466] __x64_sys_munmap+0x67/0x70
[ 86.860224][ T4466] do_syscall_64+0x4c/0xa0
[ 86.864679][ T4466] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 86.866115][ T23] cfg80211: failed to load regulatory.db
[ 86.870816][ T4466]
[ 86.878980][ T4466] Memory state around the buggy address:
[ 86.884633][ T4466] ffff88806e7b6f00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 86.892819][ T4466] ffff88806e7b6f80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 86.900994][ T4466] >ffff88806e7b7000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 86.909083][ T4466] ^
[ 86.913474][ T4466] ffff88806e7b7080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 86.921684][ T4466] ffff88806e7b7100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 86.929785][ T4466] ==================================================================
[ 86.937950][ T4466] Disabling lock debugging due to kernel taint
[ 86.950846][ T4466] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 86.958107][ T4466] CPU: 0 PID: 4466 Comm: syz-executor.0 Tainted: G B 5.15.185-syzkaller #0
[ 86.968128][ T4466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 86.978211][ T4466] Call Trace:
[ 86.981518][ T4466]
[ 86.984483][ T4466] dump_stack_lvl+0x168/0x230
[ 86.989195][ T4466] ? show_regs_print_info+0x20/0x20
[ 86.994433][ T4466] ? load_image+0x3b0/0x3b0
[ 86.998979][ T4466] panic+0x2c9/0x7f0
[ 87.002910][ T4466] ? bpf_jit_dump+0xd0/0xd0
[ 87.007443][ T4466] ? _raw_spin_unlock_irqrestore+0xf6/0x100
[ 87.013362][ T4466] ? _raw_spin_unlock+0x40/0x40
[ 87.018218][ T4466] ? crc_itu_t+0x1ad/0x280
[ 87.022655][ T4466] check_panic_on_warn+0x80/0xa0
[ 87.027627][ T4466] ? crc_itu_t+0x1ad/0x280
[ 87.032042][ T4466] end_report+0x6d/0xf0
[ 87.036296][ T4466] kasan_report+0x102/0x130
[ 87.040806][ T4466] ? crc_itu_t+0x1ad/0x280
[ 87.045228][ T4466] crc_itu_t+0x1ad/0x280
[ 87.049830][ T4466] udf_sync_fs+0x194/0x350
[ 87.054252][ T4466] ? udf_put_super+0x160/0x160
[ 87.059024][ T4466] ? get_nr_dirty_inodes+0x248/0x2d0
[ 87.064331][ T4466] sync_filesystem+0xe6/0x220
[ 87.069108][ T4466] generic_shutdown_super+0x6b/0x300
[ 87.074402][ T4466] kill_block_super+0x7c/0xe0
[ 87.079138][ T4466] deactivate_locked_super+0x93/0xf0
[ 87.084446][ T4466] cleanup_mnt+0x418/0x4d0
[ 87.088873][ T4466] ? lockdep_hardirqs_on+0x94/0x140
[ 87.094164][ T4466] task_work_run+0x125/0x1a0
[ 87.098849][ T4466] exit_to_user_mode_loop+0x10f/0x130
[ 87.104230][ T4466] exit_to_user_mode_prepare+0xb1/0x140
[ 87.109956][ T4466] syscall_exit_to_user_mode+0x16/0x40
[ 87.115419][ T4466] do_syscall_64+0x58/0xa0
[ 87.119841][ T4466] ? clear_bhb_loop+0x30/0x80
[ 87.124529][ T4466] ? clear_bhb_loop+0x30/0x80
[ 87.129380][ T4466] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 87.135288][ T4466] RIP: 0033:0x7f0fa8ac7c87
[ 87.139795][ T4466] Code: b0 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b0 ff ff ff f7 d8 64 89 02 b8
[ 87.159487][ T4466] RSP: 002b:00007ffc587101c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[ 87.167908][ T4466] RAX: 0000000000000000 RBX: 00007f0fa8b21c5a RCX: 00007f0fa8ac7c87
[ 87.175984][ T4466] RDX: 0000000000000000 RSI: 000000000000000a RDI: 00007ffc58710280
[ 87.184054][ T4466] RBP: 00007ffc58710280 R08: 0000000000000000 R09: 0000000000000000
[ 87.192197][ T4466] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc58711340
[ 87.200191][ T4466] R13: 00007f0fa8b21c5a R14: 0000000000014ffc R15: 0000000000000006
[ 87.208460][ T4466]
[ 87.211770][ T4466] Kernel Offset: disabled
[ 87.216191][ T4466] Rebooting in 86400 seconds..