Warning: Permanently added '10.128.0.31' (ED25519) to the list of known hosts. 2026/05/24 06:44:42 ignoring optional flag "type"="gce" 2026/05/24 06:44:42 parsed 1 programs 2026/05/24 06:44:42 executed programs: 0 [ 86.437288][ T4493] chnl_net:caif_netlink_parms(): no params data found [ 86.502234][ T4493] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.510714][ T4493] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.519108][ T4493] device bridge_slave_0 entered promiscuous mode [ 86.529116][ T4493] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.536543][ T4493] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.545895][ T4493] device bridge_slave_1 entered promiscuous mode [ 86.575889][ T4493] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.588661][ T4493] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.622007][ T4493] team0: Port device team_slave_0 added [ 86.631263][ T4493] team0: Port device team_slave_1 added [ 86.656694][ T4493] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.665171][ T4493] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.694742][ T1111] cfg80211: failed to load regulatory.db [ 86.700480][ T4493] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.715939][ T4493] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.722920][ T4493] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.753157][ T4493] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.793229][ T4493] device hsr_slave_0 entered promiscuous mode [ 86.800851][ T4493] device hsr_slave_1 entered promiscuous mode [ 87.482377][ T4493] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 87.492318][ T4493] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 87.505128][ T4493] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 87.516442][ T4493] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 87.592445][ T4493] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.608332][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 87.617010][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 87.630090][ T4493] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.640524][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 87.651327][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 87.660725][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.667882][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.679514][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 87.697780][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 87.707413][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 87.719326][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.726521][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.738457][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 87.755328][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 87.767145][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 87.777267][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 87.800627][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 87.809649][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 87.818814][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 87.829207][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 87.838478][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 87.847492][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 87.857002][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 87.867696][ T4493] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 87.995760][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 88.003280][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 88.019467][ T4493] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.040585][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 88.050135][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 88.074814][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 88.084160][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 88.096238][ T4493] device veth0_vlan entered promiscuous mode [ 88.107327][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 88.117838][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 88.131956][ T4493] device veth1_vlan entered promiscuous mode [ 88.157739][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 88.167163][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 88.177731][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 88.187434][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 88.200027][ T4493] device veth0_macvtap entered promiscuous mode [ 88.211432][ T4493] device veth1_macvtap entered promiscuous mode [ 88.230163][ T4493] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.241285][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 88.250034][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 88.258555][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 88.268254][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 88.281281][ T4493] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.291930][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 88.300882][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 88.314239][ T4493] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.323165][ T4493] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.333851][ T4493] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.342759][ T4493] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.364817][ T1111] Bluetooth: hci0: command 0x0409 tx timeout [ 88.459380][ T4578] loop0: detected capacity change from 0 to 2048 [ 88.517989][ T4578] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 88.570561][ T4578] ================================================================== [ 88.578910][ T4578] BUG: KASAN: slab-out-of-bounds in ext4_convert_inline_data_nolock+0x2f9/0xcd0 [ 88.588007][ T4578] Read of size 20 at addr ffff88801f3ad1a3 by task syz-executor.0/4578 [ 88.596292][ T4578] [ 88.598659][ T4578] CPU: 1 PID: 4578 Comm: syz-executor.0 Not tainted syzkaller #0 [ 88.606409][ T4578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 88.616510][ T4578] Call Trace: [ 88.619843][ T4578] [ 88.622814][ T4578] dump_stack_lvl+0x188/0x250 [ 88.627639][ T4578] ? show_regs_print_info+0x20/0x20 [ 88.633132][ T4578] ? _printk+0xda/0x130 [ 88.637322][ T4578] ? ext4_convert_inline_data_nolock+0x2f9/0xcd0 [ 88.643690][ T4578] ? load_image+0x400/0x400 [ 88.648236][ T4578] print_address_description+0x60/0x2d0 [ 88.653819][ T4578] ? ext4_convert_inline_data_nolock+0x2f9/0xcd0 [ 88.660182][ T4578] kasan_report+0xdf/0x130 [ 88.664633][ T4578] ? ext4_convert_inline_data_nolock+0x2f9/0xcd0 [ 88.671066][ T4578] kasan_check_range+0x235/0x290 [ 88.676043][ T4578] ? ext4_convert_inline_data_nolock+0x2f9/0xcd0 [ 88.682501][ T4578] memcpy+0x25/0x60 [ 88.686354][ T4578] ext4_convert_inline_data_nolock+0x2f9/0xcd0 [ 88.692559][ T4578] ? rwsem_write_trylock+0x135/0x1c0 [ 88.697887][ T4578] ? ext4_add_dirent_to_inline+0x4d0/0x4d0 [ 88.703743][ T4578] ? __ext4_journal_start_sb+0x1bd/0x360 [ 88.709417][ T4578] ext4_convert_inline_data+0x4b9/0x5f0 [ 88.715011][ T4578] ? ext4_inline_data_truncate+0xbf0/0xbf0 [ 88.720851][ T4578] ? rwsem_write_trylock+0x135/0x1c0 [ 88.726184][ T4578] ext4_fallocate+0xf4/0x1ed0 [ 88.730906][ T4578] ? common_file_perm+0x171/0x1c0 [ 88.736009][ T4578] vfs_fallocate+0x587/0x6f0 [ 88.740641][ T4578] __x64_sys_fallocate+0xbd/0x100 [ 88.745792][ T4578] do_syscall_64+0x4c/0xa0 [ 88.750253][ T4578] ? clear_bhb_loop+0x30/0x80 [ 88.754960][ T4578] ? clear_bhb_loop+0x30/0x80 [ 88.759675][ T4578] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 88.765621][ T4578] RIP: 0033:0x7ff38e29ffb9 [ 88.770107][ T4578] Code: 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d0 ff ff ff f7 d8 64 89 01 48 [ 88.789868][ T4578] RSP: 002b:00007ff38d6310b8 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 88.798336][ T4578] RAX: ffffffffffffffda RBX: 00007ff38e3def80 RCX: 00007ff38e29ffb9 [ 88.806351][ T4578] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 88.814448][ T4578] RBP: 00007ff38e315b38 R08: 0000000000000000 R09: 0000000000000000 [ 88.822458][ T4578] R10: 0000000000008000 R11: 0000000000000246 R12: 0000000000000000 [ 88.830462][ T4578] R13: 000000000000000b R14: 00007ff38e3def80 R15: 00007ffd8af9a688 [ 88.838497][ T4578] [ 88.841541][ T4578] [ 88.843889][ T4578] Allocated by task 4214: [ 88.848280][ T4578] __kasan_kmalloc+0xb5/0xf0 [ 88.852909][ T4578] __alloc_skb+0x22c/0x750 [ 88.857355][ T4578] nsim_dev_trap_report_work+0x2a1/0xb40 [ 88.863020][ T4578] process_one_work+0x85f/0x1010 [ 88.868106][ T4578] worker_thread+0xaa6/0x1290 [ 88.872813][ T4578] kthread+0x436/0x520 [ 88.876919][ T4578] ret_from_fork+0x1f/0x30 [ 88.881371][ T4578] [ 88.883721][ T4578] Freed by task 4214: [ 88.887721][ T4578] kasan_set_track+0x4b/0x70 [ 88.892341][ T4578] kasan_set_free_info+0x1f/0x40 [ 88.897304][ T4578] ____kasan_slab_free+0xd5/0x110 [ 88.902379][ T4578] slab_free_freelist_hook+0xea/0x170 [ 88.908055][ T4578] kfree+0xef/0x2a0 [ 88.911993][ T4578] skb_release_data+0x6b8/0x800 [ 88.916890][ T4578] consume_skb+0xa2/0x100 [ 88.921271][ T4578] nsim_dev_trap_report_work+0x7c8/0xb40 [ 88.926933][ T4578] process_one_work+0x85f/0x1010 [ 88.931907][ T4578] worker_thread+0xaa6/0x1290 [ 88.936613][ T4578] kthread+0x436/0x520 [ 88.940716][ T4578] ret_from_fork+0x1f/0x30 [ 88.945250][ T4578] [ 88.947594][ T4578] The buggy address belongs to the object at ffff88801f3ac000 [ 88.947594][ T4578] which belongs to the cache kmalloc-4k of size 4096 [ 88.961683][ T4578] The buggy address is located 419 bytes to the right of [ 88.961683][ T4578] 4096-byte region [ffff88801f3ac000, ffff88801f3ad000) [ 88.975620][ T4578] The buggy address belongs to the page: [ 88.981298][ T4578] page:ffffea00007cea00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1f3a8 [ 88.991584][ T4578] head:ffffea00007cea00 order:3 compound_mapcount:0 compound_pincount:0 [ 88.999943][ T4578] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 89.007976][ T4578] raw: 00fff00000010200 dead000000000100 dead000000000122 ffff888016c42140 [ 89.016606][ T4578] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000 [ 89.025210][ T4578] page dumped because: kasan: bad access detected [ 89.031663][ T4578] page_owner tracks the page as allocated [ 89.037492][ T4578] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 3560, ts 25822581989, free_ts 25804273189 [ 89.055859][ T4578] get_page_from_freelist+0x1bbd/0x1ca0 [ 89.061457][ T4578] __alloc_pages+0x1ee/0x480 [ 89.066090][ T4578] new_slab+0xc0/0x4b0 [ 89.070275][ T4578] ___slab_alloc+0x80a/0xdd0 [ 89.074894][ T4578] __kmalloc+0x1cd/0x330 [ 89.079166][ T4578] tomoyo_realpath_from_path+0x118/0x610 [ 89.084837][ T4578] tomoyo_check_open_permission+0x1eb/0x410 [ 89.090768][ T4578] security_file_open+0x5e/0xa0 [ 89.095664][ T4578] do_dentry_open+0x322/0xf80 [ 89.100396][ T4578] path_openat+0x26f5/0x2fa0 [ 89.105192][ T4578] do_filp_open+0x1e2/0x410 [ 89.109724][ T4578] do_sys_openat2+0x150/0x4b0 [ 89.114427][ T4578] __x64_sys_openat+0x135/0x160 [ 89.119305][ T4578] do_syscall_64+0x4c/0xa0 [ 89.123752][ T4578] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 89.129679][ T4578] page last free stack trace: [ 89.134370][ T4578] free_unref_page_prepare+0x637/0x6c0 [ 89.139865][ T4578] free_unref_page+0x8f/0x2a0 [ 89.144581][ T4578] qlist_free_all+0x35/0x90 [ 89.149118][ T4578] kasan_quarantine_reduce+0x150/0x160 [ 89.154609][ T4578] __kasan_slab_alloc+0x2f/0xd0 [ 89.159672][ T4578] slab_post_alloc_hook+0x4c/0x380 [ 89.164819][ T4578] __kmalloc+0x127/0x330 [ 89.169092][ T4578] tomoyo_realpath_from_path+0x118/0x610 [ 89.174861][ T4578] tomoyo_check_open_permission+0x1eb/0x410 [ 89.180967][ T4578] security_file_open+0x5e/0xa0 [ 89.185863][ T4578] do_dentry_open+0x322/0xf80 [ 89.190580][ T4578] path_openat+0x26f5/0x2fa0 [ 89.195209][ T4578] do_filp_open+0x1e2/0x410 [ 89.199760][ T4578] do_sys_openat2+0x150/0x4b0 [ 89.204468][ T4578] __x64_sys_openat+0x135/0x160 [ 89.209351][ T4578] do_syscall_64+0x4c/0xa0 [ 89.213803][ T4578] [ 89.216146][ T4578] Memory state around the buggy address: [ 89.221802][ T4578] ffff88801f3ad080: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 89.229893][ T4578] ffff88801f3ad100: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 89.238069][ T4578] >ffff88801f3ad180: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 89.246161][ T4578] ^ [ 89.251309][ T4578] ffff88801f3ad200: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 89.259408][ T4578] ffff88801f3ad280: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 89.267494][ T4578] ================================================================== [ 89.275795][ T4578] Disabling lock debugging due to kernel taint [ 89.283873][ T4578] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 89.291139][ T4578] CPU: 0 PID: 4578 Comm: syz-executor.0 Tainted: G B syzkaller #0 [ 89.300287][ T4578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 89.310368][ T4578] Call Trace: [ 89.313672][ T4578] [ 89.316628][ T4578] dump_stack_lvl+0x188/0x250 [ 89.321358][ T4578] ? show_regs_print_info+0x20/0x20 [ 89.326609][ T4578] ? load_image+0x400/0x400 [ 89.331157][ T4578] panic+0x2e5/0x810 [ 89.335094][ T4578] ? bpf_jit_dump+0xd0/0xd0 [ 89.339635][ T4578] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 89.345650][ T4578] ? _raw_spin_unlock+0x40/0x40 [ 89.350812][ T4578] ? print_memory_metadata+0x314/0x400 [ 89.356307][ T4578] ? ext4_convert_inline_data_nolock+0x2f9/0xcd0 [ 89.362675][ T4578] check_panic_on_warn+0x80/0xa0 [ 89.367758][ T4578] ? ext4_convert_inline_data_nolock+0x2f9/0xcd0 [ 89.374128][ T4578] end_report+0x6d/0xf0 [ 89.378314][ T4578] kasan_report+0x102/0x130 [ 89.382957][ T4578] ? ext4_convert_inline_data_nolock+0x2f9/0xcd0 [ 89.389414][ T4578] kasan_check_range+0x235/0x290 [ 89.394384][ T4578] ? ext4_convert_inline_data_nolock+0x2f9/0xcd0 [ 89.401215][ T4578] memcpy+0x25/0x60 [ 89.405061][ T4578] ext4_convert_inline_data_nolock+0x2f9/0xcd0 [ 89.411256][ T4578] ? rwsem_write_trylock+0x135/0x1c0 [ 89.416582][ T4578] ? ext4_add_dirent_to_inline+0x4d0/0x4d0 [ 89.422424][ T4578] ? __ext4_journal_start_sb+0x1bd/0x360 [ 89.428102][ T4578] ext4_convert_inline_data+0x4b9/0x5f0 [ 89.433681][ T4578] ? ext4_inline_data_truncate+0xbf0/0xbf0 [ 89.439528][ T4578] ? rwsem_write_trylock+0x135/0x1c0 [ 89.444852][ T4578] ext4_fallocate+0xf4/0x1ed0 [ 89.449557][ T4578] ? common_file_perm+0x171/0x1c0 [ 89.454616][ T4578] vfs_fallocate+0x587/0x6f0 [ 89.459241][ T4578] __x64_sys_fallocate+0xbd/0x100 [ 89.464298][ T4578] do_syscall_64+0x4c/0xa0 [ 89.468764][ T4578] ? clear_bhb_loop+0x30/0x80 [ 89.473471][ T4578] ? clear_bhb_loop+0x30/0x80 [ 89.478181][ T4578] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 89.484108][ T4578] RIP: 0033:0x7ff38e29ffb9 [ 89.488550][ T4578] Code: 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d0 ff ff ff f7 d8 64 89 01 48 [ 89.508180][ T4578] RSP: 002b:00007ff38d6310b8 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 89.516775][ T4578] RAX: ffffffffffffffda RBX: 00007ff38e3def80 RCX: 00007ff38e29ffb9 [ 89.524780][ T4578] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 89.532788][ T4578] RBP: 00007ff38e315b38 R08: 0000000000000000 R09: 0000000000000000 [ 89.540792][ T4578] R10: 0000000000008000 R11: 0000000000000246 R12: 0000000000000000 [ 89.548793][ T4578] R13: 000000000000000b R14: 00007ff38e3def80 R15: 00007ffd8af9a688 [ 89.556809][ T4578] [ 89.560201][ T4578] Kernel Offset: disabled [ 89.564555][ T4578] Rebooting in 86400 seconds..