[ 37.850214][ T9] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.209443][ T9] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.269117][ T9] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.319957][ T9] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.509662][ T9] device hsr_slave_0 left promiscuous mode [ 41.556498][ T9] device hsr_slave_1 left promiscuous mode [ 41.656194][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 41.657587][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 41.659560][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 41.660859][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 41.662270][ T9] device bridge_slave_1 left promiscuous mode [ 41.663561][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.707509][ T9] device bridge_slave_0 left promiscuous mode [ 41.708610][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.836574][ T9] device veth1_macvtap left promiscuous mode [ 41.837711][ T9] device veth0_macvtap left promiscuous mode [ 41.838711][ T9] device veth1_vlan left promiscuous mode [ 41.839870][ T9] device veth0_vlan left promiscuous mode [ 41.922998][ T9] team0 (unregistering): Port device team_slave_1 removed [ 41.928856][ T9] team0 (unregistering): Port device team_slave_0 removed [ 41.932906][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 41.961089][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 42.089807][ T9] bond0 (unregistering): Released all slaves Warning: Permanently added '10.128.1.165' (ED25519) to the list of known hosts. 1970/01/01 00:00:42 ignoring optional flag "type"="gce" 1970/01/01 00:00:42 parsed 1 programs [ 42.577301][ T4253] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS 1970/01/01 00:00:42 executed programs: 0 [ 42.641034][ T4260] chnl_net:caif_netlink_parms(): no params data found [ 42.657458][ T4260] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.658826][ T4260] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.660429][ T4260] device bridge_slave_0 entered promiscuous mode [ 42.662327][ T4260] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.663627][ T4260] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.665189][ T4260] device bridge_slave_1 entered promiscuous mode [ 42.674667][ T4260] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 42.677467][ T4260] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 42.684577][ T4260] team0: Port device team_slave_0 added [ 42.687556][ T4260] team0: Port device team_slave_1 added [ 42.693596][ T4260] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 42.694732][ T4260] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.701859][ T4260] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 42.704319][ T4260] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 42.705488][ T4260] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 42.711163][ T4260] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 42.767480][ T4260] device hsr_slave_0 entered promiscuous mode [ 42.806250][ T4260] device hsr_slave_1 entered promiscuous mode [ 43.447046][ T4260] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 43.477393][ T4260] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 43.526509][ T4260] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 43.567869][ T4260] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 43.629417][ T4260] 8021q: adding VLAN 0 to HW filter on device bond0 [ 43.633848][ T4260] 8021q: adding VLAN 0 to HW filter on device team0 [ 43.635863][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 43.638556][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 43.647570][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 43.649865][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 43.651421][ T136] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.652752][ T136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.654372][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 43.657240][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 43.658814][ T136] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.659931][ T136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.661421][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 43.663175][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 43.664959][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 43.667005][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 43.668600][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 43.670332][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 43.675361][ T4260] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 43.677372][ T4260] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 43.679874][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 43.681965][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 43.683630][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 43.685301][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 43.687205][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 43.688885][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 43.692360][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 43.756708][ T4260] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 43.758468][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 43.759821][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 43.769217][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 43.770820][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 43.781031][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 43.782670][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 43.784346][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 43.785867][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 43.789703][ T4260] device veth0_vlan entered promiscuous mode [ 43.793051][ T4260] device veth1_vlan entered promiscuous mode [ 43.801188][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 43.802841][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 43.804434][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 43.806015][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 43.809297][ T4260] device veth0_macvtap entered promiscuous mode [ 43.811720][ T4260] device veth1_macvtap entered promiscuous mode [ 43.818611][ T4260] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 43.819936][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 43.821563][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 43.823182][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 43.825014][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 43.829018][ T4260] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 43.830962][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 43.832536][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 43.834717][ T4260] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.836757][ T4260] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.838320][ T4260] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.839819][ T4260] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.882707][ T4391] loop0: detected capacity change from 0 to 4096 [ 43.902415][ T4391] ntfs: (device loop0): check_mft_mirror(): $MFT and $MFTMirr (record 3) do not match. Run ntfsfix or chkdsk. [ 43.904379][ T4391] ntfs: (device loop0): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 43.917069][ T4391] ntfs: (device loop0): ntfs_read_locked_inode(): Found unknown compression method or corrupt file. [ 43.918890][ T4391] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 43.921019][ T4391] ntfs: (device loop0): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 43.923412][ T4391] ntfs: volume version 3.1. [ 43.925227][ T4391] ================================================================== [ 43.926631][ T4391] BUG: KASAN: use-after-free in ntfs_lookup_inode_by_name+0xb48/0x2568 [ 43.928153][ T4391] Read of size 8 at addr ffff0000e3014962 by task syz-executor.0/4391 [ 43.929624][ T4391] [ 43.930017][ T4391] CPU: 1 PID: 4391 Comm: syz-executor.0 Not tainted syzkaller #0 [ 43.931611][ T4391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 43.933514][ T4391] Call trace: [ 43.934121][ T4391] dump_backtrace+0x0/0x458 [ 43.934956][ T4391] show_stack+0x2c/0x3c [ 43.935732][ T4391] __dump_stack+0x30/0x40 [ 43.936468][ T4391] dump_stack_lvl+0xf4/0x15c [ 43.937281][ T4391] print_address_description+0x78/0x30c [ 43.938265][ T4391] kasan_report+0xec/0x158 [ 43.939062][ T4391] __asan_report_load8_noabort+0x44/0x50 [ 43.940081][ T4391] ntfs_lookup_inode_by_name+0xb48/0x2568 [ 43.941147][ T4391] check_windows_hibernation_status+0xd4/0x5a8 [ 43.942260][ T4391] load_system_files+0x3018/0x4398 [ 43.943166][ T4391] ntfs_fill_super+0x15a0/0x2450 [ 43.944044][ T4391] mount_bdev+0x264/0x35c [ 43.944829][ T4391] ntfs_mount+0x44/0x58 [ 43.945585][ T4391] legacy_get_tree+0xd8/0x174 [ 43.946457][ T4391] vfs_get_tree+0x90/0x278 [ 43.947262][ T4391] do_new_mount+0x228/0x804 [ 43.948084][ T4391] path_mount+0x57c/0xfe8 [ 43.948863][ T4391] __arm64_sys_mount+0x488/0x5f8 [ 43.949766][ T4391] invoke_syscall+0x98/0x28c [ 43.950577][ T4391] el0_svc_common+0x13c/0x258 [ 43.951415][ T4391] do_el0_svc+0x5c/0x140 [ 43.952197][ T4391] el0_svc+0x78/0x1d0 [ 43.952916][ T4391] el0t_64_sync_handler+0xcc/0xe4 [ 43.953835][ T4391] el0t_64_sync+0x1a0/0x1a4 [ 43.954648][ T4391] [ 43.955058][ T4391] The buggy address belongs to the page: [ 43.956066][ T4391] page:00000000459207a4 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1 pfn:0x123014 [ 43.957907][ T4391] flags: 0x5ffc00000000000(node=0|zone=2|lastcpupid=0x7ff) [ 43.959161][ T4391] raw: 05ffc00000000000 fffffc00038c1748 fffffc00038c0488 0000000000000000 [ 43.960667][ T4391] raw: 0000000000000001 0000000000000000 00000000ffffffff 0000000000000000 [ 43.962212][ T4391] page dumped because: kasan: bad access detected [ 43.963331][ T4391] [ 43.963733][ T4391] Memory state around the buggy address: [ 43.964712][ T4391] ffff0000e3014800: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 43.966148][ T4391] ffff0000e3014880: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 43.967551][ T4391] >ffff0000e3014900: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 43.968960][ T4391] ^ [ 43.970184][ T4391] ffff0000e3014980: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 43.971577][ T4391] ffff0000e3014a00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 43.972978][ T4391] ================================================================== [ 43.974351][ T4391] Disabling lock debugging due to kernel taint [ 44.051092][ T4411] loop0: detected capacity change from 0 to 4096 [ 44.081622][ T4411] ntfs: (device loop0): check_mft_mirror(): $MFT and $MFTMirr (record 3) do not match. Run ntfsfix or chkdsk. [ 44.083671][ T4411] ntfs: (device loop0): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 44.091160][ T4411] ntfs: (device loop0): ntfs_read_locked_inode(): Found unknown compression method or corrupt file. [ 44.092867][ T4411] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 44.094929][ T4411] ntfs: (device loop0): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 44.106822][ T4411] ntfs: volume version 3.1. [ 44.157484][ T4431] loop0: detected capacity change from 0 to 4096 [ 44.219419][ T4431] ntfs: volume version 3.1. [ 44.281685][ T4452] loop0: detected capacity change from 0 to 4096 [ 44.351210][ T4452] ntfs: volume version 3.1. [ 44.409287][ T4472] loop0: detected capacity change from 0 to 4096 [ 44.501884][ T4472] ntfs: volume version 3.1. [ 44.548065][ T4501] loop0: detected capacity change from 0 to 4096 [ 44.559910][ T4501] ntfs: volume version 3.1. [ 44.629120][ T4508] loop0: detected capacity change from 0 to 4096 [ 44.676260][ T4074] Bluetooth: hci0: command 0x0409 tx timeout [ 44.680637][ T4508] ntfs: volume version 3.1. [ 44.717574][ T4521] loop0: detected capacity change from 0 to 4096 [ 44.761184][ T4521] ntfs: volume version 3.1. [ 44.766863][ T4260] ------------[ cut here ]------------ [ 44.767838][ T4260] kernel BUG at fs/inode.c:592! [ 44.768701][ T4260] Internal error: Oops - BUG: 00000000f2000800 [#1] PREEMPT SMP [ 44.770081][ T4260] Modules linked in: [ 44.770763][ T4260] CPU: 1 PID: 4260 Comm: syz-executor.0 Tainted: G B syzkaller #0 [ 44.772327][ T4260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 44.774196][ T4260] pstate: 824000c5 (Nzcv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 44.775531][ T4260] pc : clear_inode+0x120/0x144 [ 44.776340][ T4260] lr : clear_inode+0x120/0x144 [ 44.777198][ T4260] sp : ffff80001f877730 [ 44.777937][ T4260] x29: ffff80001f877730 x28: ffff0000e2d5de08 x27: ffff8000117b5880 [ 44.779377][ T4260] x26: ffff0000e2d5deb8 x25: ffff8000117b5880 x24: 1fffe0001c5abbd7 [ 44.780851][ T4260] x23: dfff800000000000 x22: ffff700003f0ef00 x21: dfff800000000000 [ 44.782289][ T4260] x20: 0000000000000001 x19: ffff0000e2d5dde0 x18: 0000000000000000 [ 44.783761][ T4260] x17: 0000000000000000 x16: ffff8000082dbc98 x15: 0000000000000406 [ 44.785257][ T4260] x14: ffff700003f0eecc x13: 1ffff00003f0eecc x12: 0000000000000004 [ 44.786731][ T4260] x11: ff80800008956d78 x10: 0000000000000000 x9 : ffff800008956d78 [ 44.788217][ T4260] x8 : ffff0000d10651c0 x7 : 0000000000000000 x6 : ffff800008956c88 [ 44.789673][ T4260] x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff8000082dbdc0 [ 44.791104][ T4260] x2 : 0000000000000001 x1 : 0000000000000001 x0 : 0000000000000000 [ 44.792780][ T4260] Call trace: [ 44.793442][ T4260] clear_inode+0x120/0x144 [ 44.794326][ T4260] ntfs_evict_big_inode+0x44/0x430 [ 44.795242][ T4260] evict+0x3d8/0x824 [ 44.795928][ T4260] iput+0x6b4/0x770 [ 44.796606][ T4260] ntfs_put_super+0x818/0xe44 [ 44.797588][ T4260] generic_shutdown_super+0x138/0x2f8 [ 44.798718][ T4260] kill_block_super+0x78/0xe0 [ 44.799669][ T4260] deactivate_locked_super+0xc0/0x13c [ 44.800732][ T4260] deactivate_super+0xf0/0x110 [ 44.801710][ T4260] cleanup_mnt+0x3bc/0x470 [ 44.802546][ T4260] __cleanup_mnt+0x20/0x30 [ 44.803364][ T4260] task_work_run+0x13c/0x1e8 [ 44.804229][ T4260] do_notify_resume+0x2488/0x30a8 [ 44.805166][ T4260] el0_svc+0xf0/0x1d0 [ 44.805912][ T4260] el0t_64_sync_handler+0xcc/0xe4 [ 44.806850][ T4260] el0t_64_sync+0x1a0/0x1a4 [ 44.807707][ T4260] Code: a8c47bfd d50323bf d65f03c0 97ecb5b1 (d4210000) [ 44.808951][ T4260] ---[ end trace d20c851d9b8bb8ee ]--- [ 44.980229][ T4260] Kernel panic - not syncing: Oops - BUG: Fatal exception [ 44.981435][ T4260] SMP: stopping secondary CPUs [ 44.982221][ T4260] Kernel Offset: disabled [ 44.982963][ T4260] CPU features: 0xa,000003c1,7d33ffd9 [ 44.984110][ T4260] Memory Limit: none [ 45.153956][ T4260] Rebooting in 86400 seconds..