Warning: Permanently added '10.128.1.19' (ED25519) to the list of known hosts. 2026/05/31 14:52:45 ignoring optional flag "type"="gce" 2026/05/31 14:52:45 parsed 1 programs 2026/05/31 14:52:45 executed programs: 0 [ 85.877434][ T4471] chnl_net:caif_netlink_parms(): no params data found [ 85.946990][ T4471] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.954285][ T4471] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.962529][ T4471] device bridge_slave_0 entered promiscuous mode [ 85.972813][ T4471] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.980281][ T4471] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.989915][ T4471] device bridge_slave_1 entered promiscuous mode [ 86.016091][ T4471] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.028175][ T4471] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.059607][ T4471] team0: Port device team_slave_0 added [ 86.068169][ T4471] team0: Port device team_slave_1 added [ 86.095618][ T4471] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.102901][ T4471] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.130878][ T4471] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.143760][ T4471] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.152299][ T4471] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.180027][ T4471] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.221689][ T4471] device hsr_slave_0 entered promiscuous mode [ 86.229978][ T4471] device hsr_slave_1 entered promiscuous mode [ 86.727286][ T1111] cfg80211: failed to load regulatory.db [ 86.776993][ T4471] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 86.808291][ T4471] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 86.847699][ T4471] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 86.868634][ T4471] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 87.178477][ T4471] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.224345][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 87.235875][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 87.248355][ T4471] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.267519][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 87.284735][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 87.308255][ T3077] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.315447][ T3077] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.324954][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 87.342586][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 87.352059][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 87.377342][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.384512][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.405764][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 87.435348][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 87.457710][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 87.475862][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 87.489770][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 87.500004][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 87.510264][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 87.519454][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 87.529698][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 87.544244][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 87.552955][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 87.565560][ T4471] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 87.688755][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 87.696990][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 87.710310][ T4471] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.735436][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 87.745491][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 87.755492][ T1108] Bluetooth: hci0: command 0x0409 tx timeout [ 87.774890][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 87.783567][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 87.797834][ T4471] device veth0_vlan entered promiscuous mode [ 87.806900][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 87.816772][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 87.830494][ T4471] device veth1_vlan entered promiscuous mode [ 87.859483][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 87.870275][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 87.880573][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 87.889791][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 87.902352][ T4471] device veth0_macvtap entered promiscuous mode [ 87.917182][ T4471] device veth1_macvtap entered promiscuous mode [ 87.924948][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 87.933782][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 87.956615][ T4471] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.964396][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 87.974209][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 87.989186][ T4471] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.006167][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 88.015960][ T3077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 88.028725][ T4471] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.038194][ T4471] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.047613][ T4471] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.057757][ T4471] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.157278][ T4568] loop0: detected capacity change from 0 to 2048 [ 88.197025][ T4568] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 88.294791][ T4471] ================================================================== [ 88.303093][ T4471] BUG: KASAN: slab-out-of-bounds in crc_itu_t+0x1fa/0x280 [ 88.310275][ T4471] Read of size 1 at addr ffff88806fb87078 by task syz-executor.0/4471 [ 88.318461][ T4471] [ 88.320829][ T4471] CPU: 1 PID: 4471 Comm: syz-executor.0 Not tainted syzkaller #0 [ 88.328581][ T4471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 88.338678][ T4471] Call Trace: [ 88.341998][ T4471] [ 88.345059][ T4471] dump_stack_lvl+0x188/0x250 [ 88.349785][ T4471] ? show_regs_print_info+0x20/0x20 [ 88.355021][ T4471] ? load_image+0x400/0x400 [ 88.359564][ T4471] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 88.365203][ T4471] print_address_description+0x60/0x2d0 [ 88.370794][ T4471] ? crc_itu_t+0x1fa/0x280 [ 88.375354][ T4471] kasan_report+0xdf/0x130 [ 88.379820][ T4471] ? crc_itu_t+0x1fa/0x280 [ 88.384291][ T4471] crc_itu_t+0x1fa/0x280 [ 88.388581][ T4471] udf_close_lvid+0x554/0x9a0 [ 88.393491][ T4471] ? udf_open_lvid+0x5c0/0x5c0 [ 88.398424][ T4471] ? iput+0x333/0x8a0 [ 88.402444][ T4471] ? clear_inode+0x150/0x150 [ 88.407075][ T4471] udf_put_super+0xc8/0x160 [ 88.411618][ T4471] ? udf_free_in_core_inode+0x20/0x20 [ 88.417043][ T4471] generic_shutdown_super+0x130/0x300 [ 88.422499][ T4471] kill_block_super+0x7c/0xe0 [ 88.427349][ T4471] deactivate_locked_super+0x93/0xf0 [ 88.432673][ T4471] cleanup_mnt+0x42d/0x4e0 [ 88.437135][ T4471] ? lockdep_hardirqs_on+0x94/0x140 [ 88.442379][ T4471] task_work_run+0x125/0x1a0 [ 88.447013][ T4471] exit_to_user_mode_loop+0x10f/0x130 [ 88.452593][ T4471] exit_to_user_mode_prepare+0xee/0x180 [ 88.458184][ T4471] syscall_exit_to_user_mode+0x16/0x40 [ 88.463690][ T4471] do_syscall_64+0x58/0xa0 [ 88.468144][ T4471] ? clear_bhb_loop+0x30/0x80 [ 88.472862][ T4471] ? clear_bhb_loop+0x30/0x80 [ 88.477668][ T4471] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 88.483616][ T4471] RIP: 0033:0x7f516ce4d617 [ 88.488097][ T4471] Code: a2 c7 05 e8 78 11 00 00 00 00 00 eb 96 e8 f1 09 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 d0 ff ff ff f7 d8 64 89 02 b8 [ 88.508044][ T4471] RSP: 002b:00007ffc9f2b07e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 88.516768][ T4471] RAX: 0000000000000000 RBX: 00007f516cec1b22 RCX: 00007f516ce4d617 [ 88.524784][ T4471] RDX: 0000000000000000 RSI: 000000000000000a RDI: 00007ffc9f2b08a0 [ 88.532791][ T4471] RBP: 00007ffc9f2b08a0 R08: 00007ffc9f2b18a0 R09: 00000000ffffffff [ 88.540808][ T4471] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc9f2b1960 [ 88.548826][ T4471] R13: 00007f516cec1b22 R14: 000000000001580c R15: 0000000000000006 [ 88.556853][ T4471] [ 88.560189][ T4471] [ 88.562534][ T4471] Allocated by task 4570: [ 88.566888][ T4471] __kasan_kmalloc+0xb5/0xf0 [ 88.571599][ T4471] memcg_alloc_page_obj_cgroups+0x81/0x120 [ 88.577449][ T4471] new_slab+0x100/0x4b0 [ 88.581692][ T4471] ___slab_alloc+0x80a/0xdd0 [ 88.586311][ T4471] kmem_cache_alloc+0x195/0x290 [ 88.591281][ T4471] vm_area_alloc+0x20/0xe0 [ 88.595782][ T4471] mmap_region+0xac0/0x1650 [ 88.600316][ T4471] do_mmap+0x819/0xe90 [ 88.604504][ T4471] vm_mmap_pgoff+0x1c1/0x2d0 [ 88.609301][ T4471] ksys_mmap_pgoff+0x54b/0x790 [ 88.614445][ T4471] do_syscall_64+0x4c/0xa0 [ 88.618890][ T4471] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 88.625025][ T4471] [ 88.627375][ T4471] The buggy address belongs to the object at ffff88806fb87000 [ 88.627375][ T4471] which belongs to the cache kmalloc-128 of size 128 [ 88.641461][ T4471] The buggy address is located 120 bytes inside of [ 88.641461][ T4471] 128-byte region [ffff88806fb87000, ffff88806fb87080) [ 88.654781][ T4471] The buggy address belongs to the page: [ 88.660458][ T4471] page:ffffea0001bee1c0 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x6fb87 [ 88.670655][ T4471] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 88.678249][ T4471] raw: 00fff00000000200 0000000000000000 dead000000000122 ffff888016c418c0 [ 88.687089][ T4471] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 88.695707][ T4471] page dumped because: kasan: bad access detected [ 88.702253][ T4471] page_owner tracks the page as allocated [ 88.708085][ T4471] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 4570, ts 88207191733, free_ts 88181132407 [ 88.724294][ T4471] get_page_from_freelist+0x1bbd/0x1ca0 [ 88.729939][ T4471] __alloc_pages+0x1ee/0x480 [ 88.734564][ T4471] new_slab+0xb6/0x4b0 [ 88.738674][ T4471] ___slab_alloc+0x80a/0xdd0 [ 88.743467][ T4471] __kmalloc_node+0x200/0x3b0 [ 88.748183][ T4471] memcg_alloc_page_obj_cgroups+0x81/0x120 [ 88.754027][ T4471] new_slab+0x100/0x4b0 [ 88.758233][ T4471] ___slab_alloc+0x80a/0xdd0 [ 88.762840][ T4471] kmem_cache_alloc+0x195/0x290 [ 88.767710][ T4471] vm_area_alloc+0x20/0xe0 [ 88.772143][ T4471] mmap_region+0xac0/0x1650 [ 88.776760][ T4471] do_mmap+0x819/0xe90 [ 88.780843][ T4471] vm_mmap_pgoff+0x1c1/0x2d0 [ 88.785446][ T4471] ksys_mmap_pgoff+0x54b/0x790 [ 88.790231][ T4471] do_syscall_64+0x4c/0xa0 [ 88.794669][ T4471] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 88.800589][ T4471] page last free stack trace: [ 88.805276][ T4471] free_unref_page_prepare+0x637/0x6c0 [ 88.810757][ T4471] free_unref_page_list+0x119/0x820 [ 88.815973][ T4471] release_pages+0x186c/0x1be0 [ 88.820844][ T4471] tlb_finish_mmu+0x1b4/0x370 [ 88.825537][ T4471] exit_mmap+0x3d0/0x640 [ 88.829813][ T4471] __mmput+0x115/0x3b0 [ 88.834155][ T4471] exec_mmap+0x51d/0x610 [ 88.838418][ T4471] begin_new_exec+0x7e8/0x1160 [ 88.843288][ T4471] load_elf_binary+0x99c/0x28e0 [ 88.848258][ T4471] bprm_execve+0xaee/0x1840 [ 88.852778][ T4471] do_execveat_common+0x51e/0x6d0 [ 88.857987][ T4471] __x64_sys_execve+0x8e/0xa0 [ 88.862678][ T4471] do_syscall_64+0x4c/0xa0 [ 88.867112][ T4471] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 88.873027][ T4471] [ 88.875369][ T4471] Memory state around the buggy address: [ 88.881024][ T4471] ffff88806fb86f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 88.889106][ T4471] ffff88806fb86f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 88.897369][ T4471] >ffff88806fb87000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fc [ 88.905447][ T4471] ^ [ 88.913439][ T4471] ffff88806fb87080: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 88.921524][ T4471] ffff88806fb87100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fc [ 88.929602][ T4471] ================================================================== [ 88.937669][ T4471] Disabling lock debugging due to kernel taint [ 88.949309][ T4471] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 88.956553][ T4471] CPU: 0 PID: 4471 Comm: syz-executor.0 Tainted: G B syzkaller #0 [ 88.965711][ T4471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 88.975789][ T4471] Call Trace: [ 88.979107][ T4471] [ 88.982064][ T4471] dump_stack_lvl+0x188/0x250 [ 88.986783][ T4471] ? show_regs_print_info+0x20/0x20 [ 88.992143][ T4471] ? load_image+0x400/0x400 [ 88.996686][ T4471] panic+0x2e5/0x810 [ 89.000621][ T4471] ? bpf_jit_dump+0xd0/0xd0 [ 89.005171][ T4471] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 89.011191][ T4471] ? _raw_spin_unlock+0x40/0x40 [ 89.016075][ T4471] ? crc_itu_t+0x1fa/0x280 [ 89.020529][ T4471] check_panic_on_warn+0x80/0xa0 [ 89.025503][ T4471] ? crc_itu_t+0x1fa/0x280 [ 89.030012][ T4471] end_report+0x6d/0xf0 [ 89.034199][ T4471] kasan_report+0x102/0x130 [ 89.038732][ T4471] ? crc_itu_t+0x1fa/0x280 [ 89.043179][ T4471] crc_itu_t+0x1fa/0x280 [ 89.047457][ T4471] udf_close_lvid+0x554/0x9a0 [ 89.052172][ T4471] ? udf_open_lvid+0x5c0/0x5c0 [ 89.056972][ T4471] ? iput+0x333/0x8a0 [ 89.060983][ T4471] ? clear_inode+0x150/0x150 [ 89.065635][ T4471] udf_put_super+0xc8/0x160 [ 89.070171][ T4471] ? udf_free_in_core_inode+0x20/0x20 [ 89.075642][ T4471] generic_shutdown_super+0x130/0x300 [ 89.081048][ T4471] kill_block_super+0x7c/0xe0 [ 89.085763][ T4471] deactivate_locked_super+0x93/0xf0 [ 89.091079][ T4471] cleanup_mnt+0x42d/0x4e0 [ 89.095528][ T4471] ? lockdep_hardirqs_on+0x94/0x140 [ 89.100770][ T4471] task_work_run+0x125/0x1a0 [ 89.105407][ T4471] exit_to_user_mode_loop+0x10f/0x130 [ 89.110816][ T4471] exit_to_user_mode_prepare+0xee/0x180 [ 89.116503][ T4471] syscall_exit_to_user_mode+0x16/0x40 [ 89.122004][ T4471] do_syscall_64+0x58/0xa0 [ 89.126627][ T4471] ? clear_bhb_loop+0x30/0x80 [ 89.131343][ T4471] ? clear_bhb_loop+0x30/0x80 [ 89.136056][ T4471] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 89.142070][ T4471] RIP: 0033:0x7f516ce4d617 [ 89.146517][ T4471] Code: a2 c7 05 e8 78 11 00 00 00 00 00 eb 96 e8 f1 09 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 d0 ff ff ff f7 d8 64 89 02 b8 [ 89.166179][ T4471] RSP: 002b:00007ffc9f2b07e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 89.174636][ T4471] RAX: 0000000000000000 RBX: 00007f516cec1b22 RCX: 00007f516ce4d617 [ 89.182643][ T4471] RDX: 0000000000000000 RSI: 000000000000000a RDI: 00007ffc9f2b08a0 [ 89.190942][ T4471] RBP: 00007ffc9f2b08a0 R08: 00007ffc9f2b18a0 R09: 00000000ffffffff [ 89.199038][ T4471] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc9f2b1960 [ 89.207130][ T4471] R13: 00007f516cec1b22 R14: 000000000001580c R15: 0000000000000006 [ 89.215149][ T4471] [ 89.218483][ T4471] Kernel Offset: disabled [ 89.222849][ T4471] Rebooting in 86400 seconds..