Warning: Permanently added '10.128.1.45' (ED25519) to the list of known hosts. 1970/01/01 00:00:46 ignoring optional flag "type"="gce" 1970/01/01 00:00:46 parsed 1 programs [ 46.789014][ T4257] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS 1970/01/01 00:00:46 executed programs: 0 [ 46.866636][ T4264] chnl_net:caif_netlink_parms(): no params data found [ 46.886707][ T4264] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.887984][ T4264] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.889406][ T4264] device bridge_slave_0 entered promiscuous mode [ 46.891529][ T4264] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.892708][ T4264] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.894105][ T4264] device bridge_slave_1 entered promiscuous mode [ 46.902249][ T4264] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.905021][ T4264] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.915521][ T4264] team0: Port device team_slave_0 added [ 46.917801][ T4264] team0: Port device team_slave_1 added [ 46.924563][ T4264] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.925720][ T4264] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.930571][ T4264] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.932916][ T4264] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.934035][ T4264] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.938144][ T4264] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.988589][ T4264] device hsr_slave_0 entered promiscuous mode [ 47.027631][ T4264] device hsr_slave_1 entered promiscuous mode [ 47.616564][ T4264] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 47.658724][ T4264] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 47.708650][ T4264] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 47.729062][ T4264] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 47.793526][ T4264] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.794707][ T4264] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.795982][ T4264] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.797153][ T4264] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.814419][ T4264] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.819276][ T1809] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 47.821110][ T1809] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.822591][ T1809] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.824487][ T1809] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 47.829914][ T4264] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.839378][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.840991][ T148] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.842157][ T148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.843504][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.845001][ T148] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.846144][ T148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.853974][ T4264] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 47.855584][ T4264] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 47.859671][ T1809] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 47.861425][ T1809] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 47.863101][ T1809] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 47.864657][ T1809] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 47.866061][ T1809] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 47.869118][ T1809] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 47.870667][ T1809] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 47.872223][ T1809] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 47.874049][ T1809] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 47.875634][ T1809] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 47.916502][ T4264] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.918405][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 47.919634][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 47.926133][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 47.928422][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 47.935176][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 47.936876][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 47.939115][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 47.940837][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 47.943155][ T4264] device veth0_vlan entered promiscuous mode [ 47.946479][ T4264] device veth1_vlan entered promiscuous mode [ 47.956081][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 47.957550][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 47.958891][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 47.960353][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 47.963706][ T4264] device veth0_macvtap entered promiscuous mode [ 47.966359][ T4264] device veth1_macvtap entered promiscuous mode [ 47.973183][ T4264] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.974379][ T1809] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 47.975801][ T1809] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 47.977193][ T1809] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 47.979262][ T1809] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 47.982284][ T4264] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.984213][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 47.985820][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 47.989297][ T4264] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.990653][ T4264] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.991974][ T4264] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.993281][ T4264] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.042711][ T4398] loop0: detected capacity change from 0 to 4096 [ 48.096239][ T4398] ntfs: (device loop0): ntfs_attr_find(): Inode is corrupt. Run chkdsk. [ 48.097772][ T4398] ntfs: (device loop0): ntfs_read_locked_inode(): Failed to lookup attribute list attribute. [ 48.099447][ T4398] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 48.102688][ T4398] ntfs: (device loop0): load_system_files(): Failed to load $MFTMirr. Will not be able to remount read-write. Run ntfsfix and/or chkdsk. [ 48.105505][ T4398] ntfs: (device loop0): map_mft_record_page(): Mft record 0xa is corrupt. Run chkdsk. [ 48.107942][ T4398] ntfs: (device loop0): map_mft_record(): Failed with error code 5. [ 48.117627][ T4398] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 48.119897][ T4398] ntfs: (device loop0): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 48.128390][ T4398] attempt to access beyond end of device [ 48.128390][ T4398] loop0: rw=0, want=32770, limit=4096 [ 48.130287][ T4398] ntfs: (device loop0): ntfs_end_buffer_async_read(): Buffer I/O error, logical block 0x4000. [ 48.132078][ T4398] attempt to access beyond end of device [ 48.132078][ T4398] loop0: rw=0, want=32772, limit=4096 [ 48.146203][ T4398] ntfs: (device loop0): ntfs_end_buffer_async_read(): Buffer I/O error, logical block 0x4001. [ 48.148410][ T4398] attempt to access beyond end of device [ 48.148410][ T4398] loop0: rw=0, want=32774, limit=4096 [ 48.259170][ T4426] loop0: detected capacity change from 0 to 4096 [ 48.270565][ T4426] attempt to access beyond end of device [ 48.270565][ T4426] loop0: rw=0, want=32770, limit=4096 [ 48.273494][ T4426] attempt to access beyond end of device [ 48.273494][ T4426] loop0: rw=0, want=32772, limit=4096 [ 48.277024][ T4426] attempt to access beyond end of device [ 48.277024][ T4426] loop0: rw=0, want=32774, limit=4096 [ 48.339653][ T4436] loop0: detected capacity change from 0 to 4096 [ 48.399998][ T4436] attempt to access beyond end of device [ 48.399998][ T4436] loop0: rw=0, want=32770, limit=4096 [ 48.401703][ T4436] attempt to access beyond end of device [ 48.401703][ T4436] loop0: rw=0, want=32772, limit=4096 [ 48.403455][ T4436] attempt to access beyond end of device [ 48.403455][ T4436] loop0: rw=0, want=32774, limit=4096 [ 48.472454][ T4451] loop0: detected capacity change from 0 to 4096 [ 48.522565][ T4451] ================================================================== [ 48.523714][ T4451] BUG: KASAN: use-after-free in ntfs_attr_find+0x60c/0x9d4 [ 48.524896][ T4451] Read of size 2 at addr ffff0000e2e60442 by task syz-executor.0/4451 [ 48.526170][ T4451] [ 48.526592][ T4451] CPU: 1 PID: 4451 Comm: syz-executor.0 Not tainted syzkaller #0 [ 48.527842][ T4451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 48.529378][ T4451] Call trace: [ 48.529870][ T4451] dump_backtrace+0x0/0x458 [ 48.530574][ T4451] show_stack+0x2c/0x3c [ 48.531200][ T4451] __dump_stack+0x30/0x40 [ 48.531920][ T4451] dump_stack_lvl+0xf4/0x15c [ 48.532689][ T4451] print_address_description+0x78/0x30c [ 48.533639][ T4451] kasan_report+0xec/0x158 [ 48.534328][ T4451] __asan_report_load_n_noabort+0x40/0x4c [ 48.535222][ T4451] ntfs_attr_find+0x60c/0x9d4 [ 48.535928][ T4451] ntfs_attr_lookup+0x1d4/0x1bc0 [ 48.536661][ T4451] ntfs_read_locked_inode+0x85c/0x38c0 [ 48.537592][ T4451] ntfs_iget+0x100/0x19c [ 48.538263][ T4451] load_system_files+0xc4/0x3f9c [ 48.539052][ T4451] ntfs_fill_super+0x1640/0x24bc [ 48.539813][ T4451] mount_bdev+0x264/0x358 [ 48.540446][ T4451] ntfs_mount+0x44/0x58 [ 48.541075][ T4451] legacy_get_tree+0xd4/0x16c [ 48.541763][ T4451] vfs_get_tree+0x90/0x274 [ 48.542459][ T4451] do_new_mount+0x228/0x810 [ 48.543245][ T4451] path_mount+0x5bc/0x1008 [ 48.544006][ T4451] __arm64_sys_mount+0x514/0x5f0 [ 48.544789][ T4451] invoke_syscall+0x98/0x2b0 [ 48.545543][ T4451] el0_svc_common+0x138/0x258 [ 48.546265][ T4451] do_el0_svc+0x58/0x13c [ 48.546908][ T4451] el0_svc+0x78/0x1d0 [ 48.547599][ T4451] el0t_64_sync_handler+0xcc/0xe4 [ 48.548380][ T4451] el0t_64_sync+0x1a0/0x1a4 [ 48.549092][ T4451] [ 48.549454][ T4451] The buggy address belongs to the page: [ 48.550346][ T4451] page:000000001cfe2caf refcount:0 mapcount:0 mapping:0000000000000000 index:0x1 pfn:0x122e60 [ 48.551976][ T4451] flags: 0x5ffc00000000000(node=0|zone=2|lastcpupid=0x7ff) [ 48.553174][ T4451] raw: 05ffc00000000000 fffffc00038b9848 ffff0001a0fbd520 0000000000000000 [ 48.554548][ T4451] raw: 0000000000000001 0000000000000000 00000000ffffffff 0000000000000000 [ 48.555880][ T4451] page dumped because: kasan: bad access detected [ 48.556820][ T4451] [ 48.557168][ T4451] Memory state around the buggy address: [ 48.557982][ T4451] ffff0000e2e60300: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 48.559166][ T4451] ffff0000e2e60380: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 48.560312][ T4451] >ffff0000e2e60400: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 48.561514][ T4451] ^ [ 48.562436][ T4451] ffff0000e2e60480: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 48.563747][ T4451] ffff0000e2e60500: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 48.565085][ T4451] ================================================================== [ 48.566392][ T4451] Disabling lock debugging due to kernel taint [ 48.576757][ T4451] attempt to access beyond end of device [ 48.576757][ T4451] loop0: rw=0, want=32770, limit=4096 [ 48.618613][ T4469] loop0: detected capacity change from 0 to 4096 [ 48.698513][ T4480] loop0: detected capacity change from 0 to 4096 [ 48.800190][ T4496] loop0: detected capacity change from 0 to 4096 [ 48.878259][ T4503] loop0: detected capacity change from 0 to 4096 [ 48.887881][ T4064] Bluetooth: hci0: command 0x0409 tx timeout [ 49.033758][ T4536] loop0: detected capacity change from 0 to 4096 [ 49.128754][ T4553] loop0: detected capacity change from 0 to 4096 [ 50.967466][ T7] Bluetooth: hci0: command 0x041b tx timeout 1970/01/01 00:00:51 executed programs: 35 [ 53.047527][ T4064] Bluetooth: hci0: command 0x040f tx timeout [ 53.098643][ T4641] __ntfs_error: 536 callbacks suppressed [ 53.098652][ T4641] ntfs: (device loop0): ntfs_attr_find(): Inode is corrupt. Run chkdsk. [ 53.100821][ T4641] ntfs: (device loop0): ntfs_read_locked_inode(): Failed to lookup attribute list attribute. [ 53.102283][ T4641] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 53.104503][ T4641] ntfs: (device loop0): load_system_files(): Failed to load $MFTMirr. Will not be able to remount read-write. Run ntfsfix and/or chkdsk. [ 53.106990][ T4641] ntfs: (device loop0): map_mft_record_page(): Mft record 0xa is corrupt. Run chkdsk. [ 53.108934][ T4641] ntfs: (device loop0): map_mft_record(): Failed with error code 5. [ 53.110175][ T4641] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 53.112416][ T4641] ntfs: (device loop0): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 53.114372][ T4641] ntfs: (device loop0): ntfs_end_buffer_async_read(): Buffer I/O error, logical block 0x4000. [ 53.115907][ T4641] ntfs: (device loop0): ntfs_end_buffer_async_read(): Buffer I/O error, logical block 0x4001. [ 53.156269][ T4643] set_capacity_and_notify: 33 callbacks suppressed [ 53.156279][ T4643] loop0: detected capacity change from 0 to 4096 [ 53.228638][ T4643] handle_bad_sector: 119 callbacks suppressed [ 53.228648][ T4643] attempt to access beyond end of device [ 53.228648][ T4643] loop0: rw=0, want=32770, limit=4096 [ 53.231238][ T4643] attempt to access beyond end of device [ 53.231238][ T4643] loop0: rw=0, want=32772, limit=4096 [ 53.232770][ T4643] attempt to access beyond end of device [ 53.232770][ T4643] loop0: rw=0, want=32774, limit=4096 [ 53.278371][ T4645] loop0: detected capacity change from 0 to 4096 [ 53.309623][ T4645] attempt to access beyond end of device [ 53.309623][ T4645] loop0: rw=0, want=32770, limit=4096 [ 53.311355][ T4645] attempt to access beyond end of device [ 53.311355][ T4645] loop0: rw=0, want=32772, limit=4096 [ 53.313057][ T4645] attempt to access beyond end of device [ 53.313057][ T4645] loop0: rw=0, want=32774, limit=4096 [ 53.348205][ T4647] loop0: detected capacity change from 0 to 4096 [ 53.354956][ T4647] attempt to access beyond end of device [ 53.354956][ T4647] loop0: rw=0, want=32770, limit=4096 [ 53.356779][ T4647] attempt to access beyond end of device [ 53.356779][ T4647] loop0: rw=0, want=32772, limit=4096 [ 53.358698][ T4647] attempt to access beyond end of device [ 53.358698][ T4647] loop0: rw=0, want=32774, limit=4096 [ 53.408163][ T4649] loop0: detected capacity change from 0 to 4096 [ 53.414294][ T4649] attempt to access beyond end of device [ 53.414294][ T4649] loop0: rw=0, want=32770, limit=4096 [ 53.448475][ T4651] loop0: detected capacity change from 0 to 4096 [ 53.638244][ T4653] loop0: detected capacity change from 0 to 4096 [ 53.718607][ T4655] loop0: detected capacity change from 0 to 4096 [ 53.920988][ T4657] loop0: detected capacity change from 0 to 4096 [ 54.048435][ T4659] loop0: detected capacity change from 0 to 4096 [ 54.148327][ T4661] loop0: detected capacity change from 0 to 4096 [ 55.127506][ T4064] Bluetooth: hci0: command 0x0419 tx timeout 1970/01/01 00:00:56 executed programs: 79 [ 58.138676][ T4731] __ntfs_error: 562 callbacks suppressed [ 58.138686][ T4731] ntfs: (device loop0): ntfs_attr_find(): Inode is corrupt. Run chkdsk. [ 58.140914][ T4731] ntfs: (device loop0): ntfs_read_locked_inode(): Failed to lookup attribute list attribute. [ 58.142485][ T4731] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 58.144712][ T4731] ntfs: (device loop0): load_system_files(): Failed to load $MFTMirr. Will not be able to remount read-write. Run ntfsfix and/or chkdsk. [ 58.147319][ T4731] ntfs: (device loop0): map_mft_record_page(): Mft record 0xa is corrupt. Run chkdsk. [ 58.149365][ T4731] ntfs: (device loop0): map_mft_record(): Failed with error code 5. [ 58.150716][ T4731] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 58.152837][ T4731] ntfs: (device loop0): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 58.154949][ T4731] ntfs: (device loop0): ntfs_end_buffer_async_read(): Buffer I/O error, logical block 0x4000. [ 58.156636][ T4731] ntfs: (device loop0): ntfs_end_buffer_async_read(): Buffer I/O error, logical block 0x4001. [ 58.208214][ T4733] set_capacity_and_notify: 34 callbacks suppressed [ 58.208224][ T4733] loop0: detected capacity change from 0 to 4096 [ 58.258211][ T4735] loop0: detected capacity change from 0 to 4096 [ 58.352674][ T4735] handle_bad_sector: 125 callbacks suppressed [ 58.352686][ T4735] attempt to access beyond end of device [ 58.352686][ T4735] loop0: rw=0, want=32770, limit=4096 [ 58.355558][ T4735] attempt to access beyond end of device [ 58.355558][ T4735] loop0: rw=0, want=32772, limit=4096 [ 58.357826][ T4735] attempt to access beyond end of device [ 58.357826][ T4735] loop0: rw=0, want=32774, limit=4096 [ 58.398337][ T4737] loop0: detected capacity change from 0 to 4096 [ 58.402737][ T4737] attempt to access beyond end of device [ 58.402737][ T4737] loop0: rw=0, want=32770, limit=4096 [ 58.404623][ T4737] attempt to access beyond end of device [ 58.404623][ T4737] loop0: rw=0, want=32772, limit=4096 [ 58.406490][ T4737] attempt to access beyond end of device [ 58.406490][ T4737] loop0: rw=0, want=32774, limit=4096 [ 58.448405][ T4739] loop0: detected capacity change from 0 to 4096 [ 58.455077][ T4739] attempt to access beyond end of device [ 58.455077][ T4739] loop0: rw=0, want=32770, limit=4096 [ 58.456839][ T4739] attempt to access beyond end of device [ 58.456839][ T4739] loop0: rw=0, want=32772, limit=4096 [ 58.458743][ T4739] attempt to access beyond end of device [ 58.458743][ T4739] loop0: rw=0, want=32774, limit=4096 [ 58.514323][ T4741] loop0: detected capacity change from 0 to 4096 [ 58.518971][ T4741] attempt to access beyond end of device [ 58.518971][ T4741] loop0: rw=0, want=32770, limit=4096