Warning: Permanently added '10.128.1.96' (ED25519) to the list of known hosts. 2025/03/19 21:34:41 ignoring optional flag "sandboxArg"="0" 2025/03/19 21:34:41 ignoring optional flag "type"="gce" 2025/03/19 21:34:42 parsed 1 programs 2025/03/19 21:34:42 executed programs: 0 [ 78.953322][ T4427] chnl_net:caif_netlink_parms(): no params data found [ 78.998995][ T4427] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.006749][ T4427] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.014876][ T4427] device bridge_slave_0 entered promiscuous mode [ 79.023163][ T4427] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.031505][ T4427] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.040093][ T4427] device bridge_slave_1 entered promiscuous mode [ 79.061545][ T4427] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.072637][ T4427] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.098182][ T4427] team0: Port device team_slave_0 added [ 79.107077][ T4427] team0: Port device team_slave_1 added [ 79.127468][ T4427] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.134535][ T4427] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.161265][ T4427] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.174199][ T4427] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.181368][ T4427] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.208081][ T4427] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.240533][ T4427] device hsr_slave_0 entered promiscuous mode [ 79.247601][ T4427] device hsr_slave_1 entered promiscuous mode [ 79.741254][ T4427] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 79.752557][ T4427] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 79.762958][ T4427] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 79.774488][ T4427] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 79.800846][ T4427] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.808140][ T4427] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.815942][ T4427] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.823066][ T4427] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.892126][ T4427] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.910080][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 79.921970][ T4192] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.933379][ T4192] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.943332][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 79.961609][ T4427] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.976812][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 79.987571][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 79.997243][ T4192] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.004861][ T4192] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.036392][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.046252][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.056845][ T4192] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.063948][ T4192] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.073749][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 80.083713][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 80.096270][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 80.106518][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 80.116889][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 80.129855][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 80.139128][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 80.156585][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 80.166011][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 80.176960][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 80.187187][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 80.198666][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 80.314041][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 80.324078][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 80.338796][ T4427] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.363141][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 80.374448][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 80.399657][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 80.410370][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 80.420691][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 80.429108][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 80.440475][ T4427] device veth0_vlan entered promiscuous mode [ 80.455642][ T4427] device veth1_vlan entered promiscuous mode [ 80.480418][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 80.490768][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 80.500320][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 80.511185][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 80.523025][ T4427] device veth0_macvtap entered promiscuous mode [ 80.537825][ T4427] device veth1_macvtap entered promiscuous mode [ 80.559674][ T4427] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.568761][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 80.578639][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 80.590333][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 80.600257][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 80.615785][ T4427] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.625182][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 80.635806][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 80.647185][ T4427] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.656314][ T4427] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.665694][ T4427] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.674514][ T4427] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.758510][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.784714][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.794227][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 80.809448][ T4192] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.821758][ T4192] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.834889][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 80.899410][ T4516] loop0: detected capacity change from 0 to 2048 [ 80.905777][ T1324] Bluetooth: hci0: command 0x0409 tx timeout [ 80.919888][ T4516] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 81.386239][ T4537] loop0: detected capacity change from 0 to 2048 [ 81.400089][ T4537] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 81.627840][ T13] cfg80211: failed to load regulatory.db [ 81.886261][ T4427] ================================================================== [ 81.894788][ T4427] BUG: KASAN: use-after-free in crc_itu_t+0x218/0x2a0 [ 81.901915][ T4427] Read of size 1 at addr ffff88806dcf9000 by task syz-executor.0/4427 [ 81.910208][ T4427] [ 81.912598][ T4427] CPU: 1 PID: 4427 Comm: syz-executor.0 Not tainted 5.15.179-syzkaller #0 [ 81.921353][ T4427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 81.931974][ T4427] Call Trace: [ 81.935278][ T4427] <TASK> [ 81.938231][ T4427] dump_stack_lvl+0x1e3/0x2d0 [ 81.942952][ T4427] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 81.948727][ T4427] ? _printk+0xd1/0x120 [ 81.952918][ T4427] ? __wake_up_klogd+0xcc/0x100 [ 81.957804][ T4427] ? panic+0x860/0x860 [ 81.961907][ T4427] ? _raw_spin_lock_irqsave+0xdd/0x120 [ 81.967503][ T4427] print_address_description+0x63/0x3b0 [ 81.973177][ T4427] ? crc_itu_t+0x218/0x2a0 [ 81.977723][ T4427] kasan_report+0x16b/0x1c0 [ 81.982319][ T4427] ? crc_itu_t+0x218/0x2a0 [ 81.986930][ T4427] ? pvclock_gtod_unregister_notifier+0x50/0x50 [ 81.993300][ T4427] crc_itu_t+0x218/0x2a0 [ 81.997710][ T4427] udf_close_lvid+0x57a/0x9a0 [ 82.002434][ T4427] ? udf_open_lvid+0x5a0/0x5a0 [ 82.007235][ T4427] ? clear_inode+0x150/0x150 [ 82.012038][ T4427] udf_put_super+0xc9/0x160 [ 82.017391][ T4427] ? udf_free_in_core_inode+0x20/0x20 [ 82.023057][ T4427] generic_shutdown_super+0x130/0x310 [ 82.028538][ T4427] kill_block_super+0x7a/0xe0 [ 82.033423][ T4427] deactivate_locked_super+0xa0/0x110 [ 82.038835][ T4427] cleanup_mnt+0x44e/0x500 [ 82.043286][ T4427] ? lockdep_hardirqs_on+0x94/0x130 [ 82.048521][ T4427] task_work_run+0x129/0x1a0 [ 82.053234][ T4427] exit_to_user_mode_loop+0x106/0x130 [ 82.058635][ T4427] exit_to_user_mode_prepare+0xb1/0x140 [ 82.064305][ T4427] syscall_exit_to_user_mode+0x5d/0x240 [ 82.069955][ T4427] do_syscall_64+0x47/0xb0 [ 82.074850][ T4427] ? clear_bhb_loop+0x15/0x70 [ 82.079564][ T4427] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 82.085488][ T4427] RIP: 0033:0x7fd0fe2b5c87 [ 82.089944][ T4427] Code: b0 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b0 ff ff ff f7 d8 64 89 02 b8 [ 82.109926][ T4427] RSP: 002b:00007fffb016f6d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 82.118466][ T4427] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fd0fe2b5c87 [ 82.126466][ T4427] RDX: 0000000000000000 RSI: 000000000000000a RDI: 00007fffb016f790 [ 82.134587][ T4427] RBP: 00007fffb016f790 R08: 0000000000000000 R09: 0000000000000000 [ 82.142968][ T4427] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fffb0170850 [ 82.151249][ T4427] R13: 00007fd0fe30fc5a R14: 0000000000013d90 R15: 0000000000000006 [ 82.159370][ T4427] </TASK> [ 82.162406][ T4427] [ 82.164749][ T4427] The buggy address belongs to the page: [ 82.170405][ T4427] page:ffffea0001b73e40 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1 pfn:0x6dcf9 [ 82.180601][ T4427] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 82.187763][ T4427] raw: 00fff00000000000 ffffea0001b75b88 ffffea0001b75c08 0000000000000000 [ 82.196593][ T4427] raw: 0000000000000001 0000000000000000 00000000ffffffff 0000000000000000 [ 82.205188][ T4427] page dumped because: kasan: bad access detected [ 82.211638][ T4427] page_owner tracks the page as freed [ 82.217021][ T4427] page last allocated via order 0, migratetype Movable, gfp_mask 0x1100cca(GFP_HIGHUSER_MOVABLE), pid 4516, ts 80889774206, free_ts 81310516039 [ 82.231959][ T4427] get_page_from_freelist+0x3b78/0x3d40 [ 82.237540][ T4427] __alloc_pages+0x272/0x700 [ 82.242177][ T4427] alloc_pages_vma+0x39a/0x800 [ 82.247102][ T4427] shmem_alloc_and_acct_page+0x4d1/0xd10 [ 82.252767][ T4427] shmem_getpage_gfp+0x17b1/0x3190 [ 82.257931][ T4427] shmem_write_begin+0xce/0x1a0 [ 82.262814][ T4427] generic_perform_write+0x2bf/0x5b0 [ 82.268341][ T4427] __generic_file_write_iter+0x243/0x4f0 [ 82.274138][ T4427] generic_file_write_iter+0xa7/0x1b0 [ 82.279765][ T4427] vfs_write+0xacd/0xe50 [ 82.284045][ T4427] ksys_write+0x1a2/0x2c0 [ 82.288400][ T4427] do_syscall_64+0x3b/0xb0 [ 82.293018][ T4427] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 82.298945][ T4427] page last free stack trace: [ 82.303727][ T4427] free_unref_page_prepare+0xc34/0xcf0 [ 82.309230][ T4427] free_unref_page_list+0x1f7/0x8e0 [ 82.314456][ T4427] release_pages+0x1bb9/0x1f40 [ 82.319247][ T4427] __pagevec_release+0x80/0xf0 [ 82.324167][ T4427] shmem_undo_range+0x67a/0x1b50 [ 82.329137][ T4427] shmem_evict_inode+0x21b/0xa00 [ 82.334098][ T4427] evict+0x529/0x930 [ 82.338107][ T4427] __dentry_kill+0x436/0x650 [ 82.342722][ T4427] dentry_kill+0xbb/0x290 [ 82.347080][ T4427] dput+0xd8/0x1a0 [ 82.351443][ T4427] __fput+0x636/0x8e0 [ 82.355580][ T4427] task_work_run+0x129/0x1a0 [ 82.360283][ T4427] exit_to_user_mode_loop+0x106/0x130 [ 82.365762][ T4427] exit_to_user_mode_prepare+0xb1/0x140 [ 82.371457][ T4427] syscall_exit_to_user_mode+0x5d/0x240 [ 82.377115][ T4427] do_syscall_64+0x47/0xb0 [ 82.381597][ T4427] [ 82.383998][ T4427] Memory state around the buggy address: [ 82.389743][ T4427] ffff88806dcf8f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 82.397914][ T4427] ffff88806dcf8f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 82.406435][ T4427] >ffff88806dcf9000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 82.414686][ T4427] ^ [ 82.418786][ T4427] ffff88806dcf9080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 82.426873][ T4427] ffff88806dcf9100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 82.434950][ T4427] ================================================================== [ 82.443037][ T4427] Disabling lock debugging due to kernel taint [ 82.612386][ T4427] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 82.619704][ T4427] CPU: 1 PID: 4427 Comm: syz-executor.0 Tainted: G B 5.15.179-syzkaller #0 [ 82.630120][ T4427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 82.640170][ T4427] Call Trace: [ 82.643448][ T4427] <TASK> [ 82.646374][ T4427] dump_stack_lvl+0x1e3/0x2d0 [ 82.651140][ T4427] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 82.656767][ T4427] ? panic+0x860/0x860 [ 82.660833][ T4427] ? preempt_schedule_common+0xa6/0xd0 [ 82.666287][ T4427] ? preempt_schedule+0xd9/0xe0 [ 82.671138][ T4427] panic+0x318/0x860 [ 82.675033][ T4427] ? check_panic_on_warn+0x1d/0xa0 [ 82.680243][ T4427] ? fb_is_primary_device+0xd0/0xd0 [ 82.685438][ T4427] ? _raw_spin_unlock_irqrestore+0x128/0x130 [ 82.691437][ T4427] ? _raw_spin_unlock+0x40/0x40 [ 82.696478][ T4427] ? print_memory_metadata+0xe2/0x140 [ 82.702040][ T4427] check_panic_on_warn+0x7e/0xa0 [ 82.707006][ T4427] ? crc_itu_t+0x218/0x2a0 [ 82.711424][ T4427] end_report+0x6d/0xf0 [ 82.715590][ T4427] kasan_report+0x18e/0x1c0 [ 82.720111][ T4427] ? crc_itu_t+0x218/0x2a0 [ 82.724538][ T4427] ? pvclock_gtod_unregister_notifier+0x50/0x50 [ 82.730865][ T4427] crc_itu_t+0x218/0x2a0 [ 82.735156][ T4427] udf_close_lvid+0x57a/0x9a0 [ 82.739851][ T4427] ? udf_open_lvid+0x5a0/0x5a0 [ 82.744876][ T4427] ? clear_inode+0x150/0x150 [ 82.749467][ T4427] udf_put_super+0xc9/0x160 [ 82.754183][ T4427] ? udf_free_in_core_inode+0x20/0x20 [ 82.759731][ T4427] generic_shutdown_super+0x130/0x310 [ 82.765187][ T4427] kill_block_super+0x7a/0xe0 [ 82.769988][ T4427] deactivate_locked_super+0xa0/0x110 [ 82.775363][ T4427] cleanup_mnt+0x44e/0x500 [ 82.780094][ T4427] ? lockdep_hardirqs_on+0x94/0x130 [ 82.785310][ T4427] task_work_run+0x129/0x1a0 [ 82.789999][ T4427] exit_to_user_mode_loop+0x106/0x130 [ 82.795372][ T4427] exit_to_user_mode_prepare+0xb1/0x140 [ 82.800914][ T4427] syscall_exit_to_user_mode+0x5d/0x240 [ 82.806551][ T4427] do_syscall_64+0x47/0xb0 [ 82.810972][ T4427] ? clear_bhb_loop+0x15/0x70 [ 82.815651][ T4427] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 82.821630][ T4427] RIP: 0033:0x7fd0fe2b5c87 [ 82.826223][ T4427] Code: b0 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b0 ff ff ff f7 d8 64 89 02 b8 [ 82.846487][ T4427] RSP: 002b:00007fffb016f6d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 82.854906][ T4427] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fd0fe2b5c87 [ 82.862877][ T4427] RDX: 0000000000000000 RSI: 000000000000000a RDI: 00007fffb016f790 [ 82.870934][ T4427] RBP: 00007fffb016f790 R08: 0000000000000000 R09: 0000000000000000 [ 82.879072][ T4427] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fffb0170850 [ 82.887612][ T4427] R13: 00007fd0fe30fc5a R14: 0000000000013d90 R15: 0000000000000006 [ 82.895606][ T4427] </TASK> [ 82.899102][ T4427] Kernel Offset: disabled [ 82.903497][ T4427] Rebooting in 86400 seconds..