Warning: Permanently added '10.128.0.254' (ED25519) to the list of known hosts. 1970/01/01 00:01:00 ignoring optional flag "sandboxArg"="0" 1970/01/01 00:01:00 ignoring optional flag "type"="gce" 1970/01/01 00:01:01 parsed 1 programs [ 61.188795][ T4294] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS 1970/01/01 00:01:01 executed programs: 0 [ 61.311188][ T4300] chnl_net:caif_netlink_parms(): no params data found [ 61.343948][ T4300] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.346010][ T4300] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.348633][ T4300] device bridge_slave_0 entered promiscuous mode [ 61.352315][ T4300] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.354303][ T4300] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.356848][ T4300] device bridge_slave_1 entered promiscuous mode [ 61.370912][ T4300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.375991][ T4300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.390955][ T4300] team0: Port device team_slave_0 added [ 61.394106][ T4300] team0: Port device team_slave_1 added [ 61.410091][ T4300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.412090][ T4300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.419744][ T4300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.426519][ T4300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.429208][ T4300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.436268][ T4300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.532612][ T4300] device hsr_slave_0 entered promiscuous mode [ 61.569067][ T4300] device hsr_slave_1 entered promiscuous mode [ 62.295067][ T4300] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 62.354544][ T4300] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 62.400695][ T4300] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 62.431767][ T4300] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 62.508621][ T4300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.517179][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.522322][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.526823][ T4300] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.534401][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.537327][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.541424][ T136] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.543449][ T136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.554080][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.556691][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.562207][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.564793][ T136] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.566766][ T136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.570228][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.573215][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 62.585865][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 62.590810][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 62.593611][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 62.596419][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 62.602570][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 62.605227][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.611573][ T4300] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 62.615047][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 62.621092][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 62.623731][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 62.626665][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.709761][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 62.711913][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 62.720865][ T4300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.735470][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 62.738417][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 62.751705][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 62.754468][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 62.757388][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 62.761822][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 62.767076][ T4300] device veth0_vlan entered promiscuous mode [ 62.774694][ T4300] device veth1_vlan entered promiscuous mode [ 62.791776][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 62.794483][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 62.797194][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 62.802531][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 62.807221][ T4300] device veth0_macvtap entered promiscuous mode [ 62.812611][ T4300] device veth1_macvtap entered promiscuous mode [ 62.823917][ T4300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.826048][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 62.831826][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 62.834555][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 62.837765][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 62.843300][ T4300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.847385][ T4300] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.850251][ T4300] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.852691][ T4300] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.855124][ T4300] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.860722][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 62.863959][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.908614][ T153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.912820][ T153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.915819][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 62.937961][ T136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.944384][ T136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.947442][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 63.200407][ T4416] loop0: detected capacity change from 0 to 32768 [ 63.209176][ T4416] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor.0 (4416) [ 63.224764][ T4416] BTRFS info (device loop0): using crc32c (crc32c-generic) checksum algorithm [ 63.227320][ T4416] BTRFS info (device loop0): doing ref verification [ 63.233651][ T4416] BTRFS warning (device loop0): the 'inode_cache' option is deprecated and has no effect since 5.11 [ 63.236651][ T4416] BTRFS warning (device loop0): the 'inode_cache' option is deprecated and has no effect since 5.11 [ 63.239979][ T4416] BTRFS warning (device loop0): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 63.242951][ T4416] BTRFS info (device loop0): trying to use backup root at mount time [ 63.259217][ T4416] BTRFS info (device loop0): use zlib compression, level 3 [ 63.261276][ T4416] BTRFS info (device loop0): enabling ssd optimizations [ 63.263160][ T4416] BTRFS info (device loop0): using spread ssd allocation scheme [ 63.265291][ T4416] BTRFS info (device loop0): using free space tree [ 63.267098][ T4416] BTRFS info (device loop0): has skinny extents [ 63.289558][ T4044] Bluetooth: hci0: command 0x0409 tx timeout [ 63.358449][ T148] BTRFS warning (device loop0): checksum verify failed on 5341184 wanted 0x829d3b74 found 0xe129ccda level 0 [ 63.364274][ T4416] BTRFS warning (device loop0): failed to read root (objectid=10): -5 [ 63.367126][ T136] BTRFS warning (device loop0): checksum verify failed on 5324800 wanted 0xa187e1f9 found 0xa3d38d98 level 0 [ 63.378865][ T4416] BTRFS warning (device loop0): couldn't read tree root [ 63.384445][ T4416] BTRFS error (device loop0): parent transid verify failed on 5255168 wanted 5 found 7 [ 63.387526][ T4416] BTRFS warning (device loop0): couldn't read tree root [ 63.416420][ T4416] BTRFS info (device loop0): clearing free space tree [ 63.419049][ T4416] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 63.422683][ T4416] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 63.439816][ T4416] ================================================================== [ 63.442225][ T4416] BUG: KASAN: null-ptr-deref in btrfs_root_node+0x14c/0x3d4 [ 63.444244][ T4416] Write of size 4 at addr 0000000000000060 by task syz-executor.0/4416 [ 63.446574][ T4416] [ 63.447207][ T4416] CPU: 0 PID: 4416 Comm: syz-executor.0 Not tainted 5.15.182-syzkaller #0 [ 63.449512][ T4416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 63.452374][ T4416] Call trace: [ 63.453287][ T4416] dump_backtrace+0x0/0x43c [ 63.454573][ T4416] show_stack+0x2c/0x3c [ 63.455782][ T4416] __dump_stack+0x30/0x40 [ 63.457054][ T4416] dump_stack_lvl+0xf8/0x160 [ 63.458384][ T4416] kasan_report+0xe0/0x15c [ 63.459640][ T4416] kasan_check_range+0x270/0x2b0 [ 63.461094][ T4416] __kasan_check_write+0x44/0x54 [ 63.462493][ T4416] btrfs_root_node+0x14c/0x3d4 [ 63.463784][ T4416] btrfs_read_lock_root_node+0x68/0x35c [ 63.465337][ T4416] btrfs_search_slot+0x2fc/0x1f4c [ 63.466709][ T4416] btrfs_orphan_cleanup+0x17c/0x7e0 [ 63.468167][ T4416] btrfs_cleanup_fs_roots+0x520/0x7a8 [ 63.469672][ T4416] btrfs_start_pre_rw_mount+0x14c/0x568 [ 63.471266][ T4416] open_ctree+0x1ef0/0x27b8 [ 63.472500][ T4416] btrfs_fill_super+0x1b4/0x2d4 [ 63.473845][ T4416] btrfs_mount_root+0x730/0x780 [ 63.475220][ T4416] legacy_get_tree+0xd4/0x16c [ 63.476519][ T4416] vfs_get_tree+0x90/0x274 [ 63.477732][ T4416] vfs_kern_mount+0xdc/0x178 [ 63.479080][ T4416] btrfs_mount+0x2a0/0x8d4 [ 63.480359][ T4416] legacy_get_tree+0xd4/0x16c [ 63.481707][ T4416] vfs_get_tree+0x90/0x274 [ 63.482902][ T4416] do_new_mount+0x228/0x810 [ 63.484122][ T4416] path_mount+0x5b4/0x1000 [ 63.485344][ T4416] __arm64_sys_mount+0x514/0x5e4 [ 63.486699][ T4416] invoke_syscall+0x98/0x2b8 [ 63.488038][ T4416] el0_svc_common+0x138/0x258 [ 63.489334][ T4416] do_el0_svc+0x58/0x14c [ 63.490481][ T4416] el0_svc+0x78/0x1e0 [ 63.491635][ T4416] el0t_64_sync_handler+0xcc/0xe4 [ 63.493078][ T4416] el0t_64_sync+0x1a0/0x1a4 [ 63.494422][ T4416] ================================================================== [ 63.496679][ T4416] Disabling lock debugging due to kernel taint [ 63.501858][ T4416] Unable to handle kernel paging request at virtual address dfff80000000000c [ 63.504297][ T4416] Mem abort info: [ 63.505267][ T4416] ESR = 0x0000000096000006 [ 63.506473][ T4416] EC = 0x25: DABT (current EL), IL = 32 bits [ 63.508380][ T4416] SET = 0, FnV = 0 [ 63.510626][ T4416] EA = 0, S1PTW = 0 [ 63.511780][ T4416] FSC = 0x06: level 2 translation fault [ 63.513357][ T4416] Data abort info: [ 63.514359][ T4416] ISV = 0, ISS = 0x00000006 [ 63.515624][ T4416] CM = 0, WnR = 0 [ 63.516634][ T4416] [dfff80000000000c] address between user and kernel address ranges [ 63.519352][ T4416] Internal error: Oops: 0000000096000006 [#1] PREEMPT SMP [ 63.521375][ T4416] Modules linked in: [ 63.522464][ T4416] CPU: 0 PID: 4416 Comm: syz-executor.0 Tainted: G B 5.15.182-syzkaller #0 [ 63.525200][ T4416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 63.528015][ T4416] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 63.530218][ T4416] pc : btrfs_root_node+0x150/0x3d4 [ 63.531632][ T4416] lr : btrfs_root_node+0x14c/0x3d4 [ 63.533054][ T4416] sp : ffff80001f186f90 [ 63.534225][ T4416] x29: ffff80001f186f90 x28: dfff800000000000 x27: ffff8000116c1e40 [ 63.536527][ T4416] x26: 0000000000000060 x25: 0000000000000000 x24: ffff8000116c1e40 [ 63.538753][ T4416] x23: ffff80001658d000 x22: ffff8000116c25c0 x21: 0000000000000001 [ 63.541007][ T4416] x20: 1fffe0001b2f1800 x19: ffff0000d978c000 x18: 0000000000000002 [ 63.543221][ T4416] x17: 0000000040000000 x16: ffff8000082d4b24 x15: 0000000000000002 [ 63.545412][ T4416] x14: 0000000000ff0100 x13: ffffffffffffffff x12: 0000000000ff0100 [ 63.547730][ T4416] x11: 0000000000000000 x10: 0000000000000000 x9 : 0000000000000000 [ 63.549982][ T4416] x8 : 000000000000000c x7 : 0000000000000000 x6 : ffff800008244078 [ 63.552267][ T4416] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff800008184528 [ 63.554475][ T4416] x2 : 0000000000000001 x1 : 0000000000000001 x0 : 0000000000000000 [ 63.556701][ T4416] Call trace: [ 63.557619][ T4416] btrfs_root_node+0x150/0x3d4 [ 63.558939][ T4416] btrfs_read_lock_root_node+0x68/0x35c [ 63.560562][ T4416] btrfs_search_slot+0x2fc/0x1f4c [ 63.561940][ T4416] btrfs_orphan_cleanup+0x17c/0x7e0 [ 63.563435][ T4416] btrfs_cleanup_fs_roots+0x520/0x7a8 [ 63.564899][ T4416] btrfs_start_pre_rw_mount+0x14c/0x568 [ 63.566445][ T4416] open_ctree+0x1ef0/0x27b8 [ 63.567688][ T4416] btrfs_fill_super+0x1b4/0x2d4 [ 63.569110][ T4416] btrfs_mount_root+0x730/0x780 [ 63.570486][ T4416] legacy_get_tree+0xd4/0x16c [ 63.571770][ T4416] vfs_get_tree+0x90/0x274 [ 63.573038][ T4416] vfs_kern_mount+0xdc/0x178 [ 63.574339][ T4416] btrfs_mount+0x2a0/0x8d4 [ 63.575554][ T4416] legacy_get_tree+0xd4/0x16c [ 63.576853][ T4416] vfs_get_tree+0x90/0x274 [ 63.578124][ T4416] do_new_mount+0x228/0x810 [ 63.579405][ T4416] path_mount+0x5b4/0x1000 [ 63.580664][ T4416] __arm64_sys_mount+0x514/0x5e4 [ 63.582019][ T4416] invoke_syscall+0x98/0x2b8 [ 63.583344][ T4416] el0_svc_common+0x138/0x258 [ 63.584610][ T4416] do_el0_svc+0x58/0x14c [ 63.585781][ T4416] el0_svc+0x78/0x1e0 [ 63.586855][ T4416] el0t_64_sync_handler+0xcc/0xe4 [ 63.588289][ T4416] el0t_64_sync+0x1a0/0x1a4 [ 63.589520][ T4416] Code: aa1b03f8 aa1a03e0 97a91345 d343ff48 (38fc6908) [ 63.591422][ T4416] ---[ end trace 4b20acf180ba7714 ]--- [ 63.906985][ T4416] Kernel panic - not syncing: Oops: Fatal exception [ 63.908879][ T4416] SMP: stopping secondary CPUs [ 63.910271][ T4416] Kernel Offset: disabled [ 63.911502][ T4416] CPU features: 0x8,000081c1,21302e40 [ 63.913026][ T4416] Memory Limit: none [ 64.271368][ T4416] Rebooting in 86400 seconds..