Warning: Permanently added '10.128.1.161' (ED25519) to the list of known hosts. 2026/05/07 11:39:14 ignoring optional flag "type"="gce" 2026/05/07 11:39:15 parsed 1 programs 2026/05/07 11:39:15 executed programs: 0 [ 83.084852][ T4476] chnl_net:caif_netlink_parms(): no params data found [ 83.138114][ T4476] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.145450][ T4476] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.154087][ T4476] device bridge_slave_0 entered promiscuous mode [ 83.164589][ T4476] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.172637][ T4476] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.181413][ T4476] device bridge_slave_1 entered promiscuous mode [ 83.207810][ T4476] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.219020][ T4476] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.250703][ T4476] team0: Port device team_slave_0 added [ 83.258954][ T4476] team0: Port device team_slave_1 added [ 83.283134][ T4476] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.290757][ T4476] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.319465][ T4476] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.333270][ T4476] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.340473][ T4476] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.369311][ T4476] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.405481][ T4476] device hsr_slave_0 entered promiscuous mode [ 83.412776][ T4476] device hsr_slave_1 entered promiscuous mode [ 83.928396][ T4476] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 83.939855][ T4476] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 83.950907][ T4476] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 83.961156][ T4476] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 83.988426][ T4476] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.996876][ T4476] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.005193][ T4476] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.012749][ T4476] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.067329][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.075371][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.092191][ T4476] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.110676][ T4476] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.117953][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 84.126552][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 84.146786][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 84.156899][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 84.167976][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.175155][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.185738][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 84.194932][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 84.203817][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.211812][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.221560][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 84.230689][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 84.250421][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 84.261465][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 84.271638][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 84.285119][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 84.295190][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 84.306562][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 84.326195][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 84.337555][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 84.347058][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 84.360084][ T4476] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 84.470152][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 84.478632][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 84.491540][ T4476] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.512486][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 84.522954][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 84.542314][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 84.551543][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 84.564088][ T4476] device veth0_vlan entered promiscuous mode [ 84.572830][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 84.581982][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 84.597011][ T4476] device veth1_vlan entered promiscuous mode [ 84.622219][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 84.633152][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 84.642711][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 84.653331][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 84.667162][ T4476] device veth0_macvtap entered promiscuous mode [ 84.678548][ T4476] device veth1_macvtap entered promiscuous mode [ 84.699407][ T4476] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.709658][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 84.720077][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 84.730479][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 84.740392][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 84.753631][ T4476] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.762523][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 84.773013][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 84.785464][ T4476] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.795616][ T4476] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.805048][ T4476] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.815860][ T4476] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.922351][ T4588] loop0: detected capacity change from 0 to 4096 [ 85.003389][ T4588] ntfs: volume version 3.1. [ 85.015070][ T4588] ================================================================== [ 85.023604][ T4588] BUG: KASAN: use-after-free in ntfs_lookup_inode_by_name+0xde5/0x3100 [ 85.026664][ T23] Bluetooth: hci0: command 0x0409 tx timeout [ 85.033374][ T4588] Read of size 8 at addr ffff88806dce655a by task syz-executor.0/4588 [ 85.033393][ T4588] [ 85.033412][ T4588] CPU: 0 PID: 4588 Comm: syz-executor.0 Not tainted syzkaller #0 [ 85.059148][ T4588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 85.070638][ T4588] Call Trace: [ 85.073925][ T4588] [ 85.077136][ T4588] dump_stack_lvl+0x188/0x250 [ 85.082027][ T4588] ? show_regs_print_info+0x20/0x20 [ 85.087950][ T4588] ? _printk+0xda/0x130 [ 85.092308][ T4588] ? ntfs_lookup_inode_by_name+0xde5/0x3100 [ 85.098909][ T4588] ? load_image+0x400/0x400 [ 85.103598][ T4588] print_address_description+0x60/0x2d0 [ 85.109328][ T4588] ? ntfs_lookup_inode_by_name+0xde5/0x3100 [ 85.115525][ T4588] kasan_report+0xdf/0x130 [ 85.120391][ T4588] ? ntfs_lookup_inode_by_name+0xde5/0x3100 [ 85.126527][ T4588] ntfs_lookup_inode_by_name+0xde5/0x3100 [ 85.132570][ T4588] check_windows_hibernation_status+0xe6/0x680 [ 85.139099][ T4588] ? load_and_check_logfile+0xd0/0xd0 [ 85.145068][ T4588] ? rcu_is_watching+0x11/0xa0 [ 85.149952][ T4588] ? load_system_files+0x3c40/0x55a0 [ 85.156302][ T4588] ? kfree+0x4a/0x2a0 [ 85.160566][ T4588] load_system_files+0x3d12/0x55a0 [ 85.166131][ T4588] ? ntfs_setup_allocators+0x2c0/0x2c0 [ 85.171855][ T4588] ntfs_fill_super+0x19e0/0x2c90 [ 85.176988][ T4588] mount_bdev+0x287/0x3c0 [ 85.181513][ T4588] ? ntfs_mount+0x40/0x40 [ 85.186169][ T4588] legacy_get_tree+0xe6/0x180 [ 85.191089][ T4588] ? ntfs_rl_punch_nolock+0x1470/0x1470 [ 85.197284][ T4588] vfs_get_tree+0x88/0x270 [ 85.202424][ T4588] do_new_mount+0x24a/0xa40 [ 85.207306][ T4588] __se_sys_mount+0x2e3/0x3d0 [ 85.212102][ T4588] ? __x64_sys_mount+0xc0/0xc0 [ 85.217333][ T4588] ? lockdep_hardirqs_on+0x94/0x140 [ 85.222717][ T4588] ? __x64_sys_mount+0x1c/0xc0 [ 85.227760][ T4588] do_syscall_64+0x4c/0xa0 [ 85.232486][ T4588] ? clear_bhb_loop+0x30/0x80 [ 85.237612][ T4588] ? clear_bhb_loop+0x30/0x80 [ 85.242390][ T4588] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 85.248579][ T4588] RIP: 0033:0x7f29ccde064a [ 85.253352][ T4588] Code: 48 c7 c2 d0 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d0 ff ff ff f7 d8 64 89 01 48 [ 85.274447][ T4588] RSP: 002b:00007f29cc170ed8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 85.285579][ T4588] RAX: ffffffffffffffda RBX: 00007f29cc170f70 RCX: 00007f29ccde064a [ 85.294166][ T4588] RDX: 000000002001ec80 RSI: 000000002001ecc0 RDI: 00007f29cc170f30 [ 85.303444][ T4588] RBP: 000000002001ec80 R08: 00007f29cc170f70 R09: 0000000000000000 [ 85.312355][ T4588] R10: 0000000000000000 R11: 0000000000000246 R12: 000000002001ecc0 [ 85.321560][ T4588] R13: 00007f29cc170f30 R14: 000000000001ec6a R15: 000000002001ed00 [ 85.330053][ T4588] [ 85.333157][ T4588] [ 85.335548][ T4588] The buggy address belongs to the page: [ 85.341793][ T4588] page:ffffea0001b73980 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1 pfn:0x6dce6 [ 85.352703][ T4588] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 85.360439][ T4588] raw: 00fff00000000000 ffffea0001c4fd48 ffffea0001bd2bc8 0000000000000000 [ 85.369408][ T4588] raw: 0000000000000001 0000000000000000 00000000ffffffff 0000000000000000 [ 85.378560][ T4588] page dumped because: kasan: bad access detected [ 85.386125][ T4588] page_owner tracks the page as freed [ 85.391768][ T4588] page last allocated via order 0, migratetype Movable, gfp_mask 0x1100dca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), pid 4588, ts 84898144408, free_ts 84920131084 [ 85.408281][ T4588] get_page_from_freelist+0x1bbd/0x1ca0 [ 85.414093][ T4588] __alloc_pages+0x1ee/0x480 [ 85.418929][ T4588] alloc_pages_vma+0x393/0x7c0 [ 85.423851][ T4588] handle_mm_fault+0x23be/0x4410 [ 85.428876][ T4588] do_user_addr_fault+0x489/0xc80 [ 85.434083][ T4588] exc_page_fault+0x60/0x100 [ 85.438867][ T4588] asm_exc_page_fault+0x22/0x30 [ 85.444074][ T4588] page last free stack trace: [ 85.449045][ T4588] free_unref_page_prepare+0x637/0x6c0 [ 85.454835][ T4588] free_unref_page_list+0x119/0x820 [ 85.461666][ T4588] release_pages+0x186c/0x1be0 [ 85.466871][ T4588] tlb_finish_mmu+0x1b4/0x370 [ 85.472063][ T4588] unmap_region+0x344/0x3b0 [ 85.476984][ T4588] __do_munmap+0x9f8/0xdf0 [ 85.481817][ T4588] __vm_munmap+0x140/0x240 [ 85.486568][ T4588] __x64_sys_munmap+0x67/0x70 [ 85.491855][ T4588] do_syscall_64+0x4c/0xa0 [ 85.496784][ T4588] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 85.502864][ T4588] [ 85.505806][ T4588] Memory state around the buggy address: [ 85.511961][ T4588] ffff88806dce6400: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 85.520449][ T4588] ffff88806dce6480: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 85.529456][ T4588] >ffff88806dce6500: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 85.538525][ T4588] ^ [ 85.545708][ T4588] ffff88806dce6580: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 85.554816][ T4588] ffff88806dce6600: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 85.563665][ T4588] ================================================================== [ 85.572322][ T4588] Disabling lock debugging due to kernel taint [ 85.584854][ T4588] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 85.594694][ T4588] CPU: 1 PID: 4588 Comm: syz-executor.0 Tainted: G B syzkaller #0 [ 85.605565][ T4588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 85.617321][ T4588] Call Trace: [ 85.621049][ T4588] [ 85.625009][ T4588] dump_stack_lvl+0x188/0x250 [ 85.630249][ T4588] ? show_regs_print_info+0x20/0x20 [ 85.636055][ T4588] ? load_image+0x400/0x400 [ 85.641267][ T4588] panic+0x2e5/0x810 [ 85.645444][ T4588] ? bpf_jit_dump+0xd0/0xd0 [ 85.650469][ T4588] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 85.657747][ T4588] ? _raw_spin_unlock+0x40/0x40 [ 85.662976][ T4588] ? print_memory_metadata+0x314/0x400 [ 85.669027][ T4588] ? ntfs_lookup_inode_by_name+0xde5/0x3100 [ 85.675294][ T4588] check_panic_on_warn+0x80/0xa0 [ 85.680587][ T4588] ? ntfs_lookup_inode_by_name+0xde5/0x3100 [ 85.686762][ T4588] end_report+0x6d/0xf0 [ 85.691011][ T4588] kasan_report+0x102/0x130 [ 85.695682][ T4588] ? ntfs_lookup_inode_by_name+0xde5/0x3100 [ 85.702166][ T4588] ntfs_lookup_inode_by_name+0xde5/0x3100 [ 85.707873][ T4588] check_windows_hibernation_status+0xe6/0x680 [ 85.715050][ T4588] ? load_and_check_logfile+0xd0/0xd0 [ 85.720755][ T4588] ? rcu_is_watching+0x11/0xa0 [ 85.725698][ T4588] ? load_system_files+0x3c40/0x55a0 [ 85.731197][ T4588] ? kfree+0x4a/0x2a0 [ 85.735513][ T4588] load_system_files+0x3d12/0x55a0 [ 85.741207][ T4588] ? ntfs_setup_allocators+0x2c0/0x2c0 [ 85.747567][ T4588] ntfs_fill_super+0x19e0/0x2c90 [ 85.752912][ T4588] mount_bdev+0x287/0x3c0 [ 85.757853][ T4588] ? ntfs_mount+0x40/0x40 [ 85.762395][ T4588] legacy_get_tree+0xe6/0x180 [ 85.767522][ T4588] ? ntfs_rl_punch_nolock+0x1470/0x1470 [ 85.773602][ T4588] vfs_get_tree+0x88/0x270 [ 85.778201][ T4588] do_new_mount+0x24a/0xa40 [ 85.782975][ T4588] __se_sys_mount+0x2e3/0x3d0 [ 85.788337][ T4588] ? __x64_sys_mount+0xc0/0xc0 [ 85.793978][ T4588] ? lockdep_hardirqs_on+0x94/0x140 [ 85.799711][ T4588] ? __x64_sys_mount+0x1c/0xc0 [ 85.804753][ T4588] do_syscall_64+0x4c/0xa0 [ 85.809681][ T4588] ? clear_bhb_loop+0x30/0x80 [ 85.815168][ T4588] ? clear_bhb_loop+0x30/0x80 [ 85.820533][ T4588] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 85.827291][ T4588] RIP: 0033:0x7f29ccde064a [ 85.832219][ T4588] Code: 48 c7 c2 d0 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d0 ff ff ff f7 d8 64 89 01 48 [ 85.855420][ T4588] RSP: 002b:00007f29cc170ed8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 85.864707][ T4588] RAX: ffffffffffffffda RBX: 00007f29cc170f70 RCX: 00007f29ccde064a [ 85.874189][ T4588] RDX: 000000002001ec80 RSI: 000000002001ecc0 RDI: 00007f29cc170f30 [ 85.883120][ T4588] RBP: 000000002001ec80 R08: 00007f29cc170f70 R09: 0000000000000000 [ 85.891515][ T4588] R10: 0000000000000000 R11: 0000000000000246 R12: 000000002001ecc0 [ 85.899738][ T4588] R13: 00007f29cc170f30 R14: 000000000001ec6a R15: 000000002001ed00 [ 85.908230][ T4588] [ 85.911699][ T4588] Kernel Offset: disabled [ 85.916359][ T4588] Rebooting in 86400 seconds..