Warning: Permanently added '10.128.0.25' (ED25519) to the list of known hosts.
2026/05/07 06:32:33 ignoring optional flag "type"="gce"
[ 86.782256][ T7] cfg80211: failed to load regulatory.db
2026/05/07 06:32:33 parsed 1 programs
2026/05/07 06:32:33 executed programs: 0
[ 87.220863][ T4511] chnl_net:caif_netlink_parms(): no params data found
[ 87.318931][ T4511] bridge0: port 1(bridge_slave_0) entered blocking state
[ 87.326617][ T4511] bridge0: port 1(bridge_slave_0) entered disabled state
[ 87.336752][ T4511] device bridge_slave_0 entered promiscuous mode
[ 87.345795][ T4511] bridge0: port 2(bridge_slave_1) entered blocking state
[ 87.354374][ T4511] bridge0: port 2(bridge_slave_1) entered disabled state
[ 87.362908][ T4511] device bridge_slave_1 entered promiscuous mode
[ 87.394156][ T4511] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 87.405854][ T4511] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 87.445268][ T4511] team0: Port device team_slave_0 added
[ 87.454721][ T4511] team0: Port device team_slave_1 added
[ 87.502622][ T4511] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 87.519250][ T4511] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 87.561246][ T4511] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 87.574207][ T4511] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 87.582709][ T4511] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 87.611295][ T4511] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 87.648209][ T4511] device hsr_slave_0 entered promiscuous mode
[ 87.655663][ T4511] device hsr_slave_1 entered promiscuous mode
[ 88.196093][ T4511] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 88.213169][ T4511] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 88.228497][ T4511] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 88.238489][ T4511] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 88.324188][ T4511] 8021q: adding VLAN 0 to HW filter on device bond0
[ 88.338909][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 88.348690][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 88.360346][ T4511] 8021q: adding VLAN 0 to HW filter on device team0
[ 88.371733][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 88.381691][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 88.390685][ T144] bridge0: port 1(bridge_slave_0) entered blocking state
[ 88.397966][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 88.422154][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 88.432261][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 88.442335][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 88.453903][ T144] bridge0: port 2(bridge_slave_1) entered blocking state
[ 88.461060][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 88.470737][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 88.482126][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 88.491651][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 88.503178][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 88.520904][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 88.530892][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 88.540132][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 88.548913][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 88.562270][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 88.574534][ T4511] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 88.586789][ T4511] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 88.596354][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 88.605771][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 88.728387][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 88.737949][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 88.752466][ T4511] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 88.775787][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 88.785973][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 88.807561][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 88.817382][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 88.830023][ T4511] device veth0_vlan entered promiscuous mode
[ 88.840787][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 88.849132][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 88.861274][ T4511] device veth1_vlan entered promiscuous mode
[ 88.886731][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 88.896465][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 88.905869][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 88.916212][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 88.929521][ T4511] device veth0_macvtap entered promiscuous mode
[ 88.940716][ T4511] device veth1_macvtap entered promiscuous mode
[ 88.963362][ T4511] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 88.971752][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 88.980568][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 88.988745][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 88.998728][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 89.011688][ T4511] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 89.019431][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 89.028827][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 89.041179][ T4511] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 89.051313][ T4511] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 89.060815][ T4511] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 89.069745][ T4511] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 89.100801][ T4206] Bluetooth: hci0: command 0x0409 tx timeout
[ 89.219377][ T4587] loop0: detected capacity change from 0 to 8192
[ 89.254026][ T4587] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[ 89.282081][ T4587] REISERFS (device loop0): using ordered data mode
[ 89.288653][ T4587] reiserfs: using flush barriers
[ 89.309376][ T4587] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[ 89.333316][ T4587] REISERFS (device loop0): checking transaction log (loop0)
[ 89.344986][ T4587] REISERFS (device loop0): Using r5 hash to sort names
[ 89.353642][ T4587] ==================================================================
[ 89.361902][ T4587] BUG: KASAN: use-after-free in search_by_entry_key+0x597/0x1370
[ 89.369693][ T4587] Read of size 4 at addr ffff88806e635004 by task syz-executor.0/4587
[ 89.377896][ T4587]
[ 89.380290][ T4587] CPU: 0 PID: 4587 Comm: syz-executor.0 Not tainted syzkaller #0
[ 89.388039][ T4587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 89.398153][ T4587] Call Trace:
[ 89.401464][ T4587]
[ 89.404432][ T4587] dump_stack_lvl+0x188/0x250
[ 89.409173][ T4587] ? show_regs_print_info+0x20/0x20
[ 89.414402][ T4587] ? _printk+0xda/0x130
[ 89.418685][ T4587] ? search_by_entry_key+0x597/0x1370
[ 89.424114][ T4587] ? load_image+0x400/0x400
[ 89.428672][ T4587] ? _raw_spin_lock_irqsave+0xbc/0x100
[ 89.434191][ T4587] print_address_description+0x60/0x2d0
[ 89.439785][ T4587] ? search_by_entry_key+0x597/0x1370
[ 89.445215][ T4587] kasan_report+0xdf/0x130
[ 89.449682][ T4587] ? search_by_entry_key+0x597/0x1370
[ 89.455108][ T4587] search_by_entry_key+0x597/0x1370
[ 89.460439][ T4587] ? pathrelse+0xe2/0x140
[ 89.464926][ T4587] reiserfs_find_entry+0xeda/0x18e0
[ 89.470262][ T4587] ? mutex_lock_io_nested+0x60/0x60
[ 89.475513][ T4587] ? mark_lock+0x94/0x320
[ 89.479888][ T4587] ? reiserfs_get_parent+0x2f0/0x2f0
[ 89.485233][ T4587] ? mutex_lock_nested+0x17/0x20
[ 89.490260][ T4587] reiserfs_lookup+0x1e8/0x480
[ 89.495077][ T4587] ? reiserfs_find_entry+0x18e0/0x18e0
[ 89.500612][ T4587] ? __init_waitqueue_head+0xa5/0x150
[ 89.506041][ T4587] __lookup_slow+0x29d/0x410
[ 89.510699][ T4587] ? lookup_one_len+0x2d0/0x2d0
[ 89.515705][ T4587] lookup_one_len+0x19d/0x2d0
[ 89.520530][ T4587] ? lookup_one_common+0x460/0x460
[ 89.525696][ T4587] reiserfs_lookup_privroot+0x85/0x1e0
[ 89.531212][ T4587] reiserfs_fill_super+0x17ab/0x2440
[ 89.536561][ T4587] ? reiserfs_kill_sb+0x140/0x140
[ 89.541628][ T4587] ? snprintf+0xe5/0x140
[ 89.545954][ T4587] ? vscnprintf+0x80/0x80
[ 89.550323][ T4587] ? set_blocksize+0x1f3/0x370
[ 89.555140][ T4587] ? sb_set_blocksize+0xa5/0xe0
[ 89.560035][ T4587] mount_bdev+0x287/0x3c0
[ 89.564447][ T4587] ? reiserfs_kill_sb+0x140/0x140
[ 89.569615][ T4587] legacy_get_tree+0xe6/0x180
[ 89.574363][ T4587] ? remove_save_link+0x3e0/0x3e0
[ 89.579469][ T4587] vfs_get_tree+0x88/0x270
[ 89.584043][ T4587] do_new_mount+0x24a/0xa40
[ 89.588694][ T4587] __se_sys_mount+0x2e3/0x3d0
[ 89.593421][ T4587] ? __x64_sys_mount+0xc0/0xc0
[ 89.598240][ T4587] ? lockdep_hardirqs_on+0x94/0x140
[ 89.603481][ T4587] ? __x64_sys_mount+0x1c/0xc0
[ 89.608287][ T4587] do_syscall_64+0x4c/0xa0
[ 89.612752][ T4587] ? clear_bhb_loop+0x30/0x80
[ 89.617480][ T4587] ? clear_bhb_loop+0x30/0x80
[ 89.622244][ T4587] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 89.628185][ T4587] RIP: 0033:0x7fed4835264a
[ 89.632627][ T4587] Code: 48 c7 c2 d0 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d0 ff ff ff f7 d8 64 89 01 48
[ 89.652274][ T4587] RSP: 002b:00007fed476e2ed8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 89.660736][ T4587] RAX: ffffffffffffffda RBX: 00007fed476e2f70 RCX: 00007fed4835264a
[ 89.669282][ T4587] RDX: 0000000020000140 RSI: 0000000020000340 RDI: 00007fed476e2f30
[ 89.677297][ T4587] RBP: 0000000020000140 R08: 00007fed476e2f70 R09: 000000000120c083
[ 89.685397][ T4587] R10: 000000000120c083 R11: 0000000000000246 R12: 0000000020000340
[ 89.693428][ T4587] R13: 00007fed476e2f30 R14: 0000000000001120 R15: 0000000020000380
[ 89.701499][ T4587]
[ 89.704551][ T4587]
[ 89.706903][ T4587] The buggy address belongs to the page:
[ 89.712569][ T4587] page:ffffea0001b98d40 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1 pfn:0x6e635
[ 89.723283][ T4587] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 89.730452][ T4587] raw: 00fff00000000000 ffffea0001b983c8 ffffea0001b98288 0000000000000000
[ 89.739254][ T4587] raw: 0000000000000001 0000000000000000 00000000ffffffff 0000000000000000
[ 89.747963][ T4587] page dumped because: kasan: bad access detected
[ 89.754422][ T4587] page_owner tracks the page as freed
[ 89.759879][ T4587] page last allocated via order 0, migratetype Movable, gfp_mask 0x1100cca(GFP_HIGHUSER_MOVABLE), pid 4575, ts 88762402855, free_ts 89243012694
[ 89.774594][ T4587] get_page_from_freelist+0x1bbd/0x1ca0
[ 89.780228][ T4587] __alloc_pages+0x1ee/0x480
[ 89.784878][ T4587] alloc_pages_vma+0x393/0x7c0
[ 89.789684][ T4587] wp_page_copy+0x24b/0x2050
[ 89.794313][ T4587] handle_mm_fault+0x1f06/0x4410
[ 89.799515][ T4587] do_user_addr_fault+0x489/0xc80
[ 89.804584][ T4587] exc_page_fault+0x60/0x100
[ 89.809302][ T4587] asm_exc_page_fault+0x22/0x30
[ 89.814193][ T4587] page last free stack trace:
[ 89.818884][ T4587] free_unref_page_prepare+0x637/0x6c0
[ 89.824379][ T4587] free_unref_page_list+0x119/0x820
[ 89.829616][ T4587] release_pages+0x186c/0x1be0
[ 89.834507][ T4587] tlb_finish_mmu+0x1b4/0x370
[ 89.839221][ T4587] exit_mmap+0x3d0/0x640
[ 89.843504][ T4587] __mmput+0x115/0x3b0
[ 89.847711][ T4587] exit_mm+0x588/0x6e0
[ 89.851816][ T4587] do_exit+0x5a9/0x20c0
[ 89.856015][ T4587] do_group_exit+0x12e/0x300
[ 89.860728][ T4587] __x64_sys_exit_group+0x3b/0x40
[ 89.865877][ T4587] do_syscall_64+0x4c/0xa0
[ 89.870385][ T4587] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 89.876332][ T4587]
[ 89.878689][ T4587] Memory state around the buggy address:
[ 89.884347][ T4587] ffff88806e634f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 89.892452][ T4587] ffff88806e634f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 89.900679][ T4587] >ffff88806e635000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 89.909039][ T4587] ^
[ 89.913157][ T4587] ffff88806e635080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 89.921292][ T4587] ffff88806e635100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 89.930238][ T4587] ==================================================================
[ 89.938445][ T4587] Disabling lock debugging due to kernel taint
[ 89.956467][ T4587] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 89.963819][ T4587] CPU: 0 PID: 4587 Comm: syz-executor.0 Tainted: G B syzkaller #0
[ 89.972966][ T4587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 89.983087][ T4587] Call Trace:
[ 89.986404][ T4587]
[ 89.989374][ T4587] dump_stack_lvl+0x188/0x250
[ 89.994182][ T4587] ? show_regs_print_info+0x20/0x20
[ 89.999418][ T4587] ? load_image+0x400/0x400
[ 90.004081][ T4587] panic+0x2e5/0x810
[ 90.008112][ T4587] ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 90.014314][ T4587] ? bpf_jit_dump+0xd0/0xd0
[ 90.018876][ T4587] ? _raw_spin_unlock_irqrestore+0x10d/0x120
[ 90.024902][ T4587] ? _raw_spin_unlock+0x40/0x40
[ 90.029803][ T4587] ? search_by_entry_key+0x597/0x1370
[ 90.035226][ T4587] check_panic_on_warn+0x80/0xa0
[ 90.040207][ T4587] ? search_by_entry_key+0x597/0x1370
[ 90.045645][ T4587] end_report+0x6d/0xf0
[ 90.049946][ T4587] kasan_report+0x102/0x130
[ 90.054498][ T4587] ? search_by_entry_key+0x597/0x1370
[ 90.059953][ T4587] search_by_entry_key+0x597/0x1370
[ 90.065292][ T4587] ? pathrelse+0xe2/0x140
[ 90.069772][ T4587] reiserfs_find_entry+0xeda/0x18e0
[ 90.075127][ T4587] ? mutex_lock_io_nested+0x60/0x60
[ 90.080377][ T4587] ? mark_lock+0x94/0x320
[ 90.084733][ T4587] ? reiserfs_get_parent+0x2f0/0x2f0
[ 90.090078][ T4587] ? mutex_lock_nested+0x17/0x20
[ 90.095284][ T4587] reiserfs_lookup+0x1e8/0x480
[ 90.100082][ T4587] ? reiserfs_find_entry+0x18e0/0x18e0
[ 90.105583][ T4587] ? __init_waitqueue_head+0xa5/0x150
[ 90.110985][ T4587] __lookup_slow+0x29d/0x410
[ 90.115598][ T4587] ? lookup_one_len+0x2d0/0x2d0
[ 90.120739][ T4587] lookup_one_len+0x19d/0x2d0
[ 90.125900][ T4587] ? lookup_one_common+0x460/0x460
[ 90.131034][ T4587] reiserfs_lookup_privroot+0x85/0x1e0
[ 90.136523][ T4587] reiserfs_fill_super+0x17ab/0x2440
[ 90.141834][ T4587] ? reiserfs_kill_sb+0x140/0x140
[ 90.147169][ T4587] ? snprintf+0xe5/0x140
[ 90.151432][ T4587] ? vscnprintf+0x80/0x80
[ 90.155776][ T4587] ? set_blocksize+0x1f3/0x370
[ 90.160555][ T4587] ? sb_set_blocksize+0xa5/0xe0
[ 90.165427][ T4587] mount_bdev+0x287/0x3c0
[ 90.169781][ T4587] ? reiserfs_kill_sb+0x140/0x140
[ 90.174856][ T4587] legacy_get_tree+0xe6/0x180
[ 90.179721][ T4587] ? remove_save_link+0x3e0/0x3e0
[ 90.184882][ T4587] vfs_get_tree+0x88/0x270
[ 90.189662][ T4587] do_new_mount+0x24a/0xa40
[ 90.194200][ T4587] __se_sys_mount+0x2e3/0x3d0
[ 90.198902][ T4587] ? __x64_sys_mount+0xc0/0xc0
[ 90.203699][ T4587] ? lockdep_hardirqs_on+0x94/0x140
[ 90.209019][ T4587] ? __x64_sys_mount+0x1c/0xc0
[ 90.213911][ T4587] do_syscall_64+0x4c/0xa0
[ 90.218362][ T4587] ? clear_bhb_loop+0x30/0x80
[ 90.223079][ T4587] ? clear_bhb_loop+0x30/0x80
[ 90.228042][ T4587] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 90.234047][ T4587] RIP: 0033:0x7fed4835264a
[ 90.238485][ T4587] Code: 48 c7 c2 d0 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d0 ff ff ff f7 d8 64 89 01 48
[ 90.258243][ T4587] RSP: 002b:00007fed476e2ed8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 90.266688][ T4587] RAX: ffffffffffffffda RBX: 00007fed476e2f70 RCX: 00007fed4835264a
[ 90.274675][ T4587] RDX: 0000000020000140 RSI: 0000000020000340 RDI: 00007fed476e2f30
[ 90.282763][ T4587] RBP: 0000000020000140 R08: 00007fed476e2f70 R09: 000000000120c083
[ 90.291046][ T4587] R10: 000000000120c083 R11: 0000000000000246 R12: 0000000020000340
[ 90.299035][ T4587] R13: 00007fed476e2f30 R14: 0000000000001120 R15: 0000000020000380
[ 90.307157][ T4587]
[ 90.310432][ T4587] Kernel Offset: disabled
[ 90.314782][ T4587] Rebooting in 86400 seconds..