Warning: Permanently added '10.128.1.81' (ED25519) to the list of known hosts. 2026/04/13 04:04:13 ignoring optional flag "type"="gce" 2026/04/13 04:04:13 parsed 1 programs [ 121.455408][ T6102] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 126.486384][ T60] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 126.490763][ T60] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 126.504370][ T60] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 126.523230][ T60] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 126.523897][ T60] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 127.687848][ T101] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.687883][ T101] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.721305][ T101] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.721325][ T101] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.121567][ T6174] chnl_net:caif_netlink_parms(): no params data found [ 128.547924][ T6174] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.548108][ T6174] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.548289][ T6174] bridge_slave_0: entered allmulticast mode [ 128.550014][ T6174] bridge_slave_0: entered promiscuous mode [ 128.552219][ T6174] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.552334][ T6174] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.552434][ T6174] bridge_slave_1: entered allmulticast mode [ 128.553789][ T6174] bridge_slave_1: entered promiscuous mode [ 128.766970][ T6174] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 128.771481][ T6174] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 129.153767][ T6174] team0: Port device team_slave_0 added [ 129.182721][ T6174] team0: Port device team_slave_1 added [ 129.589040][ T6174] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 129.589057][ T6174] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 129.589080][ T6174] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 129.591187][ T6174] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 129.591201][ T6174] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 129.591222][ T6174] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 130.034541][ T6174] hsr_slave_0: entered promiscuous mode [ 130.035251][ T6174] hsr_slave_1: entered promiscuous mode [ 131.592793][ T6174] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 131.622275][ T6174] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 131.661340][ T6174] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 131.702237][ T6174] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 131.844634][ T6174] 8021q: adding VLAN 0 to HW filter on device bond0 [ 131.881679][ T6174] 8021q: adding VLAN 0 to HW filter on device team0 [ 131.896277][ T101] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.896468][ T101] bridge0: port 1(bridge_slave_0) entered forwarding state [ 131.921166][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.923475][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 132.196593][ T6174] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 132.260149][ T6174] veth0_vlan: entered promiscuous mode [ 132.271281][ T6174] veth1_vlan: entered promiscuous mode [ 132.303082][ T6174] veth0_macvtap: entered promiscuous mode [ 132.307028][ T6174] veth1_macvtap: entered promiscuous mode [ 132.335632][ T6174] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 132.360138][ T6174] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 132.378350][ T101] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.381010][ T101] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.382507][ T101] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.392214][ T101] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 2026/04/13 04:04:28 executed programs: 0 [ 132.705701][ T5113] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 132.716124][ T5113] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 132.727645][ T5113] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 132.731627][ T5113] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 132.732470][ T5113] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 132.934733][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.934821][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.223323][ T101] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.460348][ T101] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.801831][ T6253] chnl_net:caif_netlink_parms(): no params data found [ 134.161393][ T6253] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.161580][ T6253] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.162215][ T6253] bridge_slave_0: entered allmulticast mode [ 134.164963][ T6253] bridge_slave_0: entered promiscuous mode [ 134.195230][ T6253] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.195438][ T6253] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.195635][ T6253] bridge_slave_1: entered allmulticast mode [ 134.209510][ T6253] bridge_slave_1: entered promiscuous mode [ 134.561797][ T101] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.606366][ T6253] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 134.623845][ T6253] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 134.767766][ T60] Bluetooth: hci0: command tx timeout [ 134.811943][ T6253] team0: Port device team_slave_0 added [ 134.815149][ T6253] team0: Port device team_slave_1 added [ 134.990153][ T6253] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 134.990164][ T6253] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 134.990177][ T6253] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 134.992034][ T6253] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 134.992047][ T6253] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 134.992072][ T6253] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 135.456813][ T6253] hsr_slave_0: entered promiscuous mode [ 135.460658][ T6253] hsr_slave_1: entered promiscuous mode [ 135.461483][ T6253] debugfs: 'hsr0' already exists in 'hsr' [ 135.461521][ T6253] Cannot create hsr debugfs directory [ 135.622217][ T101] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.280911][ T101] bridge_slave_1: left allmulticast mode [ 136.280939][ T101] bridge_slave_1: left promiscuous mode [ 136.281183][ T101] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.359020][ T101] bridge_slave_0: left allmulticast mode [ 136.359047][ T101] bridge_slave_0: left promiscuous mode [ 136.359271][ T101] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.847308][ T60] Bluetooth: hci0: command tx timeout [ 136.997896][ T101] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 137.077907][ T101] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 137.099119][ T101] bond0 (unregistering): Released all slaves [ 137.407742][ T101] hsr_slave_0: left promiscuous mode [ 137.447404][ T101] hsr_slave_1: left promiscuous mode [ 137.448390][ T101] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 137.448414][ T101] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 137.498419][ T101] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 137.498445][ T101] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 137.600576][ T101] veth1_macvtap: left promiscuous mode [ 137.600677][ T101] veth0_macvtap: left promiscuous mode [ 137.600943][ T101] veth1_vlan: left promiscuous mode [ 137.601107][ T101] veth0_vlan: left promiscuous mode [ 138.148539][ T101] team0 (unregistering): Port device team_slave_1 removed [ 138.188805][ T101] team0 (unregistering): Port device team_slave_0 removed [ 138.927357][ T60] Bluetooth: hci0: command tx timeout [ 139.128717][ T6253] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 139.165755][ T6253] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 139.202428][ T6253] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 139.250658][ T6253] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 139.460209][ T6253] 8021q: adding VLAN 0 to HW filter on device bond0 [ 139.485875][ T6253] 8021q: adding VLAN 0 to HW filter on device team0 [ 139.500769][ T1003] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.500908][ T1003] bridge0: port 1(bridge_slave_0) entered forwarding state [ 139.512808][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.513029][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 139.783688][ T6253] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 139.825429][ T6253] veth0_vlan: entered promiscuous mode [ 139.836514][ T6253] veth1_vlan: entered promiscuous mode [ 139.866267][ T6253] veth0_macvtap: entered promiscuous mode [ 139.875802][ T6253] veth1_macvtap: entered promiscuous mode [ 139.893228][ T6253] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 139.902648][ T6253] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 139.922501][ T67] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.922769][ T67] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.922816][ T67] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.922848][ T67] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.094267][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.094288][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.133603][ T152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.133622][ T152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/04/13 04:04:36 executed programs: 2 [ 140.231186][ T6438] loop0: detected capacity change from 0 to 512 [ 140.274919][ T6438] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.359614][ T6438] loop0: detected capacity change from 512 to 511 [ 140.386761][ T6253] EXT4-fs error (device loop0): htree_dirblock_to_tree:1080: inode #2: block 21: comm syz-executor: bad entry in directory: directory entry overrun - offset=1004, inode=0, rec_len=1000, size=1024 fake=0 [ 140.413031][ T6253] EXT4-fs error (device loop0): ext4_inlinedir_to_tree:1332: inode #12: block 10: comm syz-executor: path /0/file0/file0: bad entry in directory: directory entry overrun - offset=388, inode=0, rec_len=1024, size=384 fake=0 [ 140.414398][ T6253] EXT4-fs error (device loop0): empty_inline_dir:1778: inode #12: block 10: comm syz-executor: bad entry in directory: directory entry overrun - offset=4, inode=0, rec_len=1024, size=60 fake=0 [ 140.422443][ T6253] EXT4-fs warning (device loop0): empty_inline_dir:1785: bad inline directory (dir #12) - inode 0, rec_len 0, name_len 0inline size 60 [ 140.422992][ T6253] EXT4-fs error (device loop0): ext4_inlinedir_to_tree:1332: inode #12: block 10: comm syz-executor: path /0/file0/file0: bad entry in directory: directory entry overrun - offset=388, inode=0, rec_len=1024, size=384 fake=0 [ 140.423815][ T6253] EXT4-fs error (device loop0): empty_inline_dir:1778: inode #12: block 10: comm syz-executor: bad entry in directory: directory entry overrun - offset=4, inode=0, rec_len=1024, size=60 fake=0 [ 140.424306][ T6253] EXT4-fs warning (device loop0): empty_inline_dir:1785: bad inline directory (dir #12) - inode 0, rec_len 0, name_len 0inline size 60 [ 140.424738][ T6253] EXT4-fs error (device loop0): ext4_inlinedir_to_tree:1332: inode #12: block 10: comm syz-executor: path /0/file0/file0: bad entry in directory: directory entry overrun - offset=388, inode=0, rec_len=1024, size=384 fake=0 [ 140.425560][ T6253] EXT4-fs error (device loop0): empty_inline_dir:1778: inode #12: block 10: comm syz-executor: bad entry in directory: directory entry overrun - offset=4, inode=0, rec_len=1024, size=60 fake=0 [ 140.430400][ T6253] EXT4-fs warning (device loop0): empty_inline_dir:1785: bad inline directory (dir #12) - inode 0, rec_len 0, name_len 0inline size 60 [ 140.430867][ T6253] EXT4-fs error (device loop0): ext4_inlinedir_to_tree:1332: inode #12: block 10: comm syz-executor: path /0/file0/file0: bad entry in directory: directory entry overrun - offset=388, inode=0, rec_len=1024, size=384 fake=0 [ 140.431636][ T6253] EXT4-fs error (device loop0): empty_inline_dir:1778: inode #12: block 10: comm syz-executor: bad entry in directory: directory entry overrun - offset=4, inode=0, rec_len=1024, size=60 fake=0 [ 140.432459][ T6253] EXT4-fs warning (device loop0): empty_inline_dir:1785: bad inline directory (dir #12) - inode 0, rec_len 0, name_len 0inline size 60 [ 140.433099][ T6253] EXT4-fs error (device loop0): ext4_inlinedir_to_tree:1332: inode #12: block 10: comm syz-executor: path /0/file0/file0: bad entry in directory: directory entry overrun - offset=388, inode=0, rec_len=1024, size=384 fake=0 [ 140.434308][ T6253] EXT4-fs warning (device loop0): empty_inline_dir:1785: bad inline directory (dir #12) - inode 0, rec_len 0, name_len 0inline size 60 [ 140.435875][ T6253] EXT4-fs warning (device loop0): empty_inline_dir:1785: bad inline directory (dir #12) - inode 0, rec_len 0, name_len 0inline size 60 [ 140.438635][ T6253] EXT4-fs warning (device loop0): empty_inline_dir:1785: bad inline directory (dir #12) - inode 0, rec_len 0, name_len 0inline size 60 [ 140.441815][ T6253] EXT4-fs warning (device loop0): empty_inline_dir:1785: bad inline directory (dir #12) - inode 0, rec_len 0, name_len 0inline size 60 [ 140.443431][ T6253] EXT4-fs warning (device loop0): empty_inline_dir:1785: bad inline directory (dir #12) - inode 0, rec_len 0, name_len 0inline size 60 [ 140.445965][ T6253] EXT4-fs warning (device loop0): empty_inline_dir:1785: bad inline directory (dir #12) - inode 0, rec_len 0, name_len 0inline size 60 [ 141.928727][ T6253] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.982617][ T5113] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 141.984467][ T5113] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 141.985932][ T5113] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 141.987110][ T5113] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 142.010859][ T5113] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 142.392107][ T1003] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.574271][ T6442] chnl_net:caif_netlink_parms(): no params data found [ 142.828552][ T6442] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.828696][ T6442] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.828798][ T6442] bridge_slave_0: entered allmulticast mode [ 142.830175][ T6442] bridge_slave_0: entered promiscuous mode [ 142.833254][ T6442] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.833360][ T6442] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.833460][ T6442] bridge_slave_1: entered allmulticast mode [ 142.834742][ T6442] bridge_slave_1: entered promiscuous mode [ 143.001261][ T6442] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 143.003805][ T6442] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 143.150157][ T6442] team0: Port device team_slave_0 added [ 143.152218][ T6442] team0: Port device team_slave_1 added [ 143.310425][ T6442] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 143.310441][ T6442] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 143.310466][ T6442] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 143.312613][ T6442] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 143.312626][ T6442] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 143.312650][ T6442] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 143.692425][ T6442] hsr_slave_0: entered promiscuous mode [ 143.693143][ T6442] hsr_slave_1: entered promiscuous mode [ 143.818243][ T1003] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.047314][ T60] Bluetooth: hci0: command tx timeout [ 144.051353][ T1003] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.332859][ T1003] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.720375][ T1003] bridge_slave_1: left allmulticast mode [ 144.720401][ T1003] bridge_slave_1: left promiscuous mode [ 144.720613][ T1003] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.790992][ T1003] bridge_slave_0: left allmulticast mode [ 144.791021][ T1003] bridge_slave_0: left promiscuous mode [ 144.791276][ T1003] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.447973][ T1003] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 145.527885][ T1003] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 145.549035][ T1003] bond0 (unregistering): Released all slaves [ 146.127647][ T60] Bluetooth: hci0: command tx timeout [ 146.777299][ T1003] hsr_slave_0: left promiscuous mode [ 146.817374][ T1003] hsr_slave_1: left promiscuous mode [ 146.818212][ T1003] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 146.818228][ T1003] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 146.860221][ T1003] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 146.860247][ T1003] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 146.948775][ T1003] veth1_macvtap: left promiscuous mode [ 146.948883][ T1003] veth0_macvtap: left promiscuous mode [ 146.949126][ T1003] veth1_vlan: left promiscuous mode [ 146.949293][ T1003] veth0_vlan: left promiscuous mode [ 147.607868][ T1003] team0 (unregistering): Port device team_slave_1 removed [ 147.648214][ T1003] team0 (unregistering): Port device team_slave_0 removed [ 147.865613][ T6442] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 147.900342][ T6442] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 147.941627][ T6442] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 147.981310][ T6442] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 148.090901][ T6442] 8021q: adding VLAN 0 to HW filter on device bond0 [ 148.114856][ T6442] 8021q: adding VLAN 0 to HW filter on device team0 [ 148.128105][ T1487] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.128256][ T1487] bridge0: port 1(bridge_slave_0) entered forwarding state [ 148.156872][ T1487] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.156952][ T1487] bridge0: port 2(bridge_slave_1) entered forwarding state [ 148.219271][ T60] Bluetooth: hci0: command tx timeout [ 148.354025][ T6442] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 148.401070][ T6442] veth0_vlan: entered promiscuous mode [ 148.406023][ T6442] veth1_vlan: entered promiscuous mode [ 148.434075][ T6442] veth0_macvtap: entered promiscuous mode [ 148.439338][ T6442] veth1_macvtap: entered promiscuous mode [ 148.454379][ T6442] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 148.463641][ T6442] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 148.472629][ T1487] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.472849][ T1487] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.472883][ T1487] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.472914][ T1487] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.680160][ T1487] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 148.680180][ T1487] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 148.716332][ T152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 148.716351][ T152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/04/13 04:04:45 executed programs: 5 [ 148.836930][ T6517] loop0: detected capacity change from 0 to 512 [ 148.876163][ T6517] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 148.957453][ T6517] loop0: detected capacity change from 512 to 511 [ 148.970295][ T6442] EXT4-fs error (device loop0): htree_dirblock_to_tree:1080: inode #2: block 21: comm syz-executor: bad entry in directory:[ 148.970295][ T6442] EXT4-fs error (device loop0): htree_dirblock_to_tree:1080: inode #2: block 21: comm syz-executor: bad entry in directory: directory entry overrun - offset=1004, inode=0, rec_len=1000, size=1024 fake=0 [ 148.976298][ T6442] ================================================================== [ 148.976312][ T6442] BUG: KASAN: use-after-free in ext4_read_inline_data+0x1d0/0x2c0 [ 148.976348][ T6442] Read of size 324 at addr ffff88804a29fc05 by task syz-executor/6442 [ 148.976364][ T6442] [ 148.976387][ T6442] CPU: 0 UID: 0 PID: 6442 Comm: syz-executor Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 148.976412][ T6442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 148.976429][ T6442] Call Trace: [ 148.976436][ T6442] [ 148.976444][ T6442] dump_stack_lvl+0xe8/0x150 [ 148.976469][ T6442] print_report+0xba/0x230 [ 148.976490][ T6442] ? ext4_read_inline_data+0x1d0/0x2c0 [ 148.976510][ T6442] kasan_report+0x117/0x150 [ 148.976528][ T6442] ? ext4_read_inline_data+0x1d0/0x2c0 [ 148.976552][ T6442] kasan_check_range+0x264/0x2c0 [ 148.976568][ T6442] ? ext4_read_inline_data+0x1d0/0x2c0 [ 148.976588][ T6442] __asan_memcpy+0x29/0x70 [ 148.976609][ T6442] ext4_read_inline_data+0x1d0/0x2c0 [ 148.976630][ T6442] ext4_inlinedir_to_tree+0x3fb/0xdc0 [ 148.976652][ T6442] ? __update_page_owner_handle+0x5a/0x570 [ 148.976677][ T6442] ? __update_page_owner_handle+0x5a/0x570 [ 148.976700][ T6442] ? __update_page_owner_handle+0x51a/0x570 [ 148.976725][ T6442] ? __pfx_ext4_inlinedir_to_tree+0x10/0x10 [ 148.976746][ T6442] ? __lock_acquire+0x6b5/0x2cf0 [ 148.976773][ T6442] ? try_to_take_rt_mutex+0x840/0xb00 [ 148.976796][ T6442] ext4_htree_fill_tree+0x50e/0x1230 [ 148.976816][ T6442] ? __lock_acquire+0x6b5/0x2cf0 [ 148.976835][ T6442] ? __lock_acquire+0x6b5/0x2cf0 [ 148.976858][ T6442] ? __pfx_ext4_htree_fill_tree+0x10/0x10 [ 148.976883][ T6442] ? inode_query_iversion+0x120/0x180 [ 148.976910][ T6442] ext4_readdir+0x332b/0x41b0 [ 148.976938][ T6442] ? __pfx_ext4_readdir+0x10/0x10 [ 148.976959][ T6442] ? iterate_dir+0x29e/0x580 [ 148.976975][ T6442] ? down_read_killable+0x14c/0x220 [ 148.976996][ T6442] ? __pfx_down_read_killable+0x10/0x10 [ 148.977017][ T6442] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 148.977035][ T6442] ? lockdep_hardirqs_on+0x7a/0x110 [ 148.977054][ T6442] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 148.977073][ T6442] iterate_dir+0x3a5/0x580 [ 148.977092][ T6442] __se_sys_getdents64+0xf1/0x280 [ 148.977111][ T6442] ? __pfx___se_sys_getdents64+0x10/0x10 [ 148.977131][ T6442] ? exc_page_fault+0x6a/0xc0 [ 148.977145][ T6442] ? __pfx_filldir64+0x10/0x10 [ 148.977161][ T6442] ? do_user_addr_fault+0xc6f/0x1340 [ 148.977187][ T6442] do_syscall_64+0x14d/0xf80 [ 148.977204][ T6442] ? trace_irq_disable+0x3b/0x150 [ 148.977222][ T6442] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.977239][ T6442] ? clear_bhb_loop+0x40/0x90 [ 148.977258][ T6442] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.977274][ T6442] RIP: 0033:0x7f354232ce33 [ 148.977295][ T6442] Code: c7 c0 e8 ff ff ff 64 c7 00 16 00 00 00 31 c0 eb 9e e8 c1 a1 fd ff 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 e8 ff ff ff f7 d8 [ 148.977309][ T6442] RSP: 002b:00007ffd03c91018 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 148.977335][ T6442] RAX: ffffffffffffffda RBX: 0000555555935a70 RCX: 00007f354232ce33 [ 148.977348][ T6442] RDX: 0000000000008000 RSI: 0000555555935aa0 RDI: 0000000000000006 [ 148.977360][ T6442] RBP: 0000555555935aa0 R08: 00007f3542483ca0 R09: 0000000000000001 [ 148.977372][ T6442] R10: 0000000000000000 R11: 0000000000000293 R12: 0000555555935a74 [ 148.977384][ T6442] R13: ffffffffffffffe8 R14: 0000000000000016 R15: 00007ffd03c943a0 [ 148.977403][ T6442] [ 148.977409][ T6442] [ 148.977413][ T6442] The buggy address belongs to the physical page: [ 148.977426][ T6442] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x2 pfn:0x4a29f [ 148.977443][ T6442] flags: 0x80000000000000(node=0|zone=1) [ 148.977467][ T6442] raw: 0080000000000000 ffffea0001581b08 ffffea000123f308 0000000000000000 [ 148.977481][ T6442] raw: 0000000000000002 0000000000000000 00000000ffffffff 0000000000000000 [ 148.977489][ T6442] page dumped because: kasan: bad access detected [ 148.977501][ T6442] page_owner tracks the page as freed [ 148.977507][ T6442] page last allocated via order 0, migratetype Movable, gfp_mask 0x140cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP), pid 6452, tgid 6452 (dhcpcd-run-hook), ts 144683295515, free_ts 145006604424 [ 148.977535][ T6442] post_alloc_hook+0x231/0x280 [ 148.977558][ T6442] get_page_from_freelist+0x28bb/0x2950 [ 148.977575][ T6442] __alloc_frozen_pages_noprof+0x18d/0x380 [ 148.977591][ T6442] alloc_pages_mpol+0xd1/0x380 [ 148.977606][ T6442] vma_alloc_folio_noprof+0xea/0x290 [ 148.977621][ T6442] do_wp_page+0x127a/0x49d0 [ 148.977642][ T6442] handle_mm_fault+0x9f5/0x13c0 [ 148.977663][ T6442] do_user_addr_fault+0xa73/0x1340 [ 148.977682][ T6442] exc_page_fault+0x6a/0xc0 [ 148.977697][ T6442] asm_exc_page_fault+0x26/0x30 [ 148.977711][ T6442] page last free pid 6452 tgid 6452 stack trace: [ 148.977720][ T6442] free_unref_folios+0xe7b/0x1c70 [ 148.977734][ T6442] folios_put_refs+0x56f/0x680 [ 148.977750][ T6442] free_pages_and_swap_cache+0x537/0x5b0 [ 148.977769][ T6442] tlb_flush_mmu+0x6d3/0xa30 [ 148.977785][ T6442] tlb_finish_mmu+0xf9/0x230 [ 148.977800][ T6442] exit_mmap+0x498/0xa10 [ 148.977812][ T6442] __mmput+0xcb/0x3d0 [ 148.977830][ T6442] exit_mm+0x168/0x220 [ 148.977851][ T6442] do_exit+0x6a2/0x23c0 [ 148.977865][ T6442] do_group_exit+0x21b/0x2d0 [ 148.977881][ T6442] __x64_sys_exit_group+0x3f/0x40 [ 148.977896][ T6442] x64_sys_call+0x221a/0x2240 [ 148.977910][ T6442] do_syscall_64+0x14d/0xf80 [ 148.977926][ T6442] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.977941][ T6442] [ 148.977945][ T6442] Memory state around the buggy address: [ 148.977954][ T6442] ffff88804a29fb00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 148.977965][ T6442] ffff88804a29fb80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 148.977976][ T6442] >ffff88804a29fc00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 148.977984][ T6442] ^ [ 148.977993][ T6442] ffff88804a29fc80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 148.978003][ T6442] ffff88804a29fd00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 148.978012][ T6442] ================================================================== [ 148.984915][ T6442] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 148.984934][ T6442] CPU: 0 UID: 0 PID: 6442 Comm: syz-executor Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 148.984956][ T6442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 148.984966][ T6442] Call Trace: [ 148.984973][ T6442] [ 148.984981][ T6442] vpanic+0x56c/0xa60 [ 148.985009][ T6442] ? __pfx_vpanic+0x10/0x10 [ 148.985035][ T6442] panic+0xc5/0xd0 [ 148.985057][ T6442] ? __pfx_panic+0x10/0x10 [ 148.985079][ T6442] ? preempt_schedule_thunk+0x16/0x30 [ 148.985102][ T6442] ? preempt_schedule_thunk+0x16/0x30 [ 148.985121][ T6442] ? ext4_read_inline_data+0x1d0/0x2c0 [ 148.985140][ T6442] check_panic_on_warn+0x89/0xb0 [ 148.985159][ T6442] ? ext4_read_inline_data+0x1d0/0x2c0 [ 148.985176][ T6442] end_report+0x73/0x180 [ 148.985193][ T6442] ? ext4_read_inline_data+0x1d0/0x2c0 [ 148.985212][ T6442] kasan_report+0x128/0x150 [ 148.985229][ T6442] ? ext4_read_inline_data+0x1d0/0x2c0 [ 148.985252][ T6442] kasan_check_range+0x264/0x2c0 [ 148.985268][ T6442] ? ext4_read_inline_data+0x1d0/0x2c0 [ 148.985289][ T6442] __asan_memcpy+0x29/0x70 [ 148.985311][ T6442] ext4_read_inline_data+0x1d0/0x2c0 [ 148.985333][ T6442] ext4_inlinedir_to_tree+0x3fb/0xdc0 [ 148.985354][ T6442] ? __update_page_owner_handle+0x5a/0x570 [ 148.985379][ T6442] ? __update_page_owner_handle+0x5a/0x570 [ 148.985403][ T6442] ? __update_page_owner_handle+0x51a/0x570 [ 148.985428][ T6442] ? __pfx_ext4_inlinedir_to_tree+0x10/0x10 [ 148.985450][ T6442] ? __lock_acquire+0x6b5/0x2cf0 [ 148.985476][ T6442] ? try_to_take_rt_mutex+0x840/0xb00 [ 148.985500][ T6442] ext4_htree_fill_tree+0x50e/0x1230 [ 148.985521][ T6442] ? __lock_acquire+0x6b5/0x2cf0 [ 148.985541][ T6442] ? __lock_acquire+0x6b5/0x2cf0 [ 148.985557][ T6442] ? __pfx_ext4_htree_fill_tree+0x10/0x10 [ 148.985582][ T6442] ? inode_query_iversion+0x120/0x180 [ 148.985608][ T6442] ext4_readdir+0x332b/0x41b0 [ 148.985638][ T6442] ? __pfx_ext4_readdir+0x10/0x10 [ 148.985725][ T6442] ? iterate_dir+0x29e/0x580 [ 148.985741][ T6442] ? down_read_killable+0x14c/0x220 [ 148.985763][ T6442] ? __pfx_down_read_killable+0x10/0x10 [ 148.985783][ T6442] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 148.985801][ T6442] ? lockdep_hardirqs_on+0x7a/0x110 [ 148.985820][ T6442] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 148.985840][ T6442] iterate_dir+0x3a5/0x580 [ 148.985859][ T6442] __se_sys_getdents64+0xf1/0x280 [ 148.985877][ T6442] ? __pfx___se_sys_getdents64+0x10/0x10 [ 148.985893][ T6442] ? exc_page_fault+0x6a/0xc0 [ 148.985909][ T6442] ? __pfx_filldir64+0x10/0x10 [ 148.985928][ T6442] ? do_user_addr_fault+0xc6f/0x1340 [ 148.985954][ T6442] do_syscall_64+0x14d/0xf80 [ 148.985972][ T6442] ? trace_irq_disable+0x3b/0x150 [ 148.985991][ T6442] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.986008][ T6442] ? clear_bhb_loop+0x40/0x90 [ 148.986027][ T6442] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.986044][ T6442] RIP: 0033:0x7f354232ce33 [ 148.986059][ T6442] Code: c7 c0 e8 ff ff ff 64 c7 00 16 00 00 00 31 c0 eb 9e e8 c1 a1 fd ff 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 e8 ff ff ff f7 d8 [ 148.986074][ T6442] RSP: 002b:00007ffd03c91018 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 148.986093][ T6442] RAX: ffffffffffffffda RBX: 0000555555935a70 RCX: 00007f354232ce33 [ 148.986105][ T6442] RDX: 0000000000008000 RSI: 0000555555935aa0 RDI: 0000000000000006 [ 148.986116][ T6442] RBP: 0000555555935aa0 R08: 00007f3542483ca0 R09: 0000000000000001 [ 148.986128][ T6442] R10: 0000000000000000 R11: 0000000000000293 R12: 0000555555935a74 [ 148.986140][ T6442] R13: ffffffffffffffe8 R14: 0000000000000016 R15: 00007ffd03c943a0 [ 148.986160][ T6442] [ 148.986839][ T6442] Kernel Offset: disabled