Warning: Permanently added '10.128.1.181' (ED25519) to the list of known hosts. 1970/01/01 00:00:47 ignoring optional flag "type"="gce" 1970/01/01 00:00:47 parsed 1 programs [ 47.557739][ T4273] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS 1970/01/01 00:00:47 executed programs: 0 [ 47.628371][ T4279] chnl_net:caif_netlink_parms(): no params data found [ 47.648137][ T4279] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.649289][ T4279] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.650789][ T4279] device bridge_slave_0 entered promiscuous mode [ 47.652793][ T4279] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.653906][ T4279] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.655499][ T4279] device bridge_slave_1 entered promiscuous mode [ 47.663608][ T4279] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.666415][ T4279] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.675850][ T4279] team0: Port device team_slave_0 added [ 47.677746][ T4279] team0: Port device team_slave_1 added [ 47.685386][ T4279] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.686557][ T4279] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.690609][ T4279] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.693001][ T4279] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.694071][ T4279] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.698701][ T4279] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.756341][ T4279] device hsr_slave_0 entered promiscuous mode [ 47.795235][ T4279] device hsr_slave_1 entered promiscuous mode [ 48.349500][ T4279] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 48.387012][ T4279] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 48.436436][ T4279] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 48.466366][ T4279] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 48.513085][ T4279] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.514269][ T4279] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.515614][ T4279] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.516750][ T4279] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.541796][ T4279] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.549600][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 48.551412][ T136] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.552892][ T136] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.554830][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 48.561081][ T4279] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.564411][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.566628][ T136] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.567717][ T136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.571381][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.572924][ T136] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.574162][ T136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.581678][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 48.583323][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 48.587640][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 48.591899][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 48.596739][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 48.599966][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 48.646375][ T4279] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.648174][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 48.649248][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 48.661418][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 48.663041][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 48.671736][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 48.673221][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 48.674740][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 48.677569][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 48.680534][ T4279] device veth0_vlan entered promiscuous mode [ 48.684373][ T4279] device veth1_vlan entered promiscuous mode [ 48.694681][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 48.698355][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 48.699892][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 48.701435][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 48.706742][ T4279] device veth0_macvtap entered promiscuous mode [ 48.709631][ T4279] device veth1_macvtap entered promiscuous mode [ 48.717164][ T4279] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.718513][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 48.720054][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 48.721567][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 48.723733][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 48.728302][ T4279] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.730373][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 48.732021][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 48.734294][ T4279] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.738607][ T4279] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.739945][ T4279] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.741378][ T4279] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.819975][ T4418] loop0: detected capacity change from 0 to 8192 [ 48.838064][ T4418] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 48.839842][ T4418] REISERFS (device loop0): using ordered data mode [ 48.846106][ T4418] reiserfs: using flush barriers [ 48.855815][ T4418] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 48.858798][ T4418] REISERFS (device loop0): checking transaction log (loop0) [ 48.915707][ T4418] REISERFS (device loop0): Using rupasov hash to sort names [ 48.918820][ T4418] ================================================================== [ 48.920233][ T4418] BUG: KASAN: out-of-bounds in leaf_paste_entries+0x4c0/0x918 [ 48.921398][ T4418] Read of size 18446744073709551584 at addr ffff0000e2fd6fa4 by task syz-executor.0/4418 [ 48.922929][ T4418] [ 48.923340][ T4418] CPU: 1 PID: 4418 Comm: syz-executor.0 Not tainted syzkaller #0 [ 48.924585][ T4418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 48.926298][ T4418] Call trace: [ 48.926849][ T4418] dump_backtrace+0x0/0x458 [ 48.927585][ T4418] show_stack+0x2c/0x3c [ 48.928218][ T4418] __dump_stack+0x30/0x40 [ 48.928916][ T4418] dump_stack_lvl+0xf4/0x15c [ 48.929605][ T4418] print_address_description+0x78/0x30c [ 48.930461][ T4418] kasan_report+0xec/0x158 [ 48.931131][ T4418] kasan_check_range+0x268/0x2a0 [ 48.931980][ T4418] memmove+0x90/0xe8 [ 48.932579][ T4418] leaf_paste_entries+0x4c0/0x918 [ 48.933376][ T4418] balance_leaf+0x8318/0xd92c [ 48.934199][ T4418] do_balance+0x270/0x790 [ 48.934954][ T4418] reiserfs_paste_into_item+0x5d0/0x6e0 [ 48.935866][ T4418] reiserfs_add_entry+0x86c/0xc28 [ 48.936783][ T4418] reiserfs_mkdir+0x5bc/0x7bc [ 48.937646][ T4418] reiserfs_xattr_init+0x2b0/0x6cc [ 48.938498][ T4418] reiserfs_fill_super+0x183c/0x1bfc [ 48.939366][ T4418] mount_bdev+0x264/0x358 [ 48.940051][ T4418] get_super_block+0x44/0x58 [ 48.940812][ T4418] legacy_get_tree+0xd4/0x16c [ 48.941585][ T4418] vfs_get_tree+0x90/0x274 [ 48.942307][ T4418] do_new_mount+0x228/0x810 [ 48.943029][ T4418] path_mount+0x5bc/0x1008 [ 48.943795][ T4418] __arm64_sys_mount+0x514/0x5f0 [ 48.944570][ T4418] invoke_syscall+0x98/0x2b0 [ 48.945320][ T4418] el0_svc_common+0x138/0x258 [ 48.946088][ T4418] do_el0_svc+0x58/0x13c [ 48.946721][ T4418] el0_svc+0x78/0x1d0 [ 48.947382][ T4418] el0t_64_sync_handler+0xcc/0xe4 [ 48.948264][ T4418] el0t_64_sync+0x1a0/0x1a4 [ 48.948951][ T4418] [ 48.949303][ T4418] The buggy address belongs to the page: [ 48.950156][ T4418] page:00000000fa8271a7 refcount:2 mapcount:0 mapping:00000000bd7a8e6b index:0x213 pfn:0x122fd6 [ 48.951731][ T4418] memcg:ffff0000c9880000 [ 48.952416][ T4418] aops:def_blk_aops ino:700000 [ 48.953209][ T4418] flags: 0x5ffc00000002032(referenced|lru|active|private|node=0|zone=2|lastcpupid=0x7ff) [ 48.954713][ T4418] raw: 05ffc00000002032 fffffc00038bf548 ffff0000c7de6030 ffff0000c049db08 [ 48.956056][ T4418] raw: 0000000000000213 ffff0000de5091d0 00000002ffffffff ffff0000c9880000 [ 48.957345][ T4418] page dumped because: kasan: bad access detected [ 48.958350][ T4418] [ 48.958693][ T4418] Memory state around the buggy address: [ 48.959584][ T4418] ffff0000e2fd6e80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 48.960804][ T4418] ffff0000e2fd6f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 48.962003][ T4418] >ffff0000e2fd6f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 48.963192][ T4418] ^ [ 48.963926][ T4418] ffff0000e2fd7000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 48.965129][ T4418] ffff0000e2fd7080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 48.966330][ T4418] ================================================================== [ 48.967604][ T4418] Disabling lock debugging due to kernel taint [ 48.969993][ T4418] REISERFS warning: reiserfs-5094 has_valid_deh_location: directory entry location seems wrong *3.5*[1768256046 1718773107 0x72705f73 UNKNOWN], item_len 10864, item_location 2, free_space(entry_count) 1536 [ 48.973173][ T4418] REISERFS error (device loop0): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 48.974845][ T4418] REISERFS (device loop0): Remounting filesystem read-only [ 48.976150][ T4418] REISERFS error (device loop0): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [1 2 0x0 SD] stat data [ 48.978325][ T4418] REISERFS warning (device loop0): jdm-20006 create_privroot: xattrs/ACLs enabled and couldn't find/create .reiserfs_priv. Failing mount. [ 48.980743][ T4418] REISERFS warning: reiserfs-5094 has_valid_deh_location: directory entry location seems wrong *3.5*[1768256046 1718773107 0x72705f73 UNKNOWN], item_len 10864, item_location 2, free_space(entry_count) 1536 [ 48.983958][ T4418] REISERFS error (device loop0): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 48.985810][ T4418] REISERFS error (device loop0): zam-7001 reiserfs_find_entry: io error [ 49.166307][ T4466] loop0: detected capacity change from 0 to 8192 [ 49.181166][ T4466] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 49.183267][ T4466] REISERFS (device loop0): using ordered data mode [ 49.184477][ T4466] reiserfs: using flush barriers [ 49.187005][ T4466] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 49.189624][ T4466] REISERFS (device loop0): checking transaction log (loop0) [ 49.216646][ T4466] REISERFS (device loop0): Using rupasov hash to sort names [ 49.219174][ T4279] Unable to handle kernel paging request at virtual address dfff8000000000fe [ 49.219185][ T4473] Internal error: Oops - BTI: 0000000036000001 [#1] PREEMPT SMP [ 49.220592][ T4279] Mem abort info: [ 49.221832][ T4473] Modules linked in: [ 49.222426][ T4279] ESR = 0x0000000096000006 [ 49.223121][ T4473] CPU: 1 PID: 4473 Comm: dhcpcd-run-hook Tainted: G B syzkaller #0 [ 49.223840][ T4279] EC = 0x25: DABT (current EL), IL = 32 bits [ 49.225366][ T4473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 49.225380][ T4473] pstate: 42400405 (nZcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=jc) [ 49.225399][ T4473] pc : exit_robust_list+0x414/0x5f0 [ 49.225414][ T4473] lr : exit_robust_list+0x3f0/0x5f0 [ 49.225418][ T4473] sp : ffff80001ba27750 [ 49.225421][ T4473] x29: ffff80001ba27790 x28: dfff800000000000 x27: 00000000fffffff2 [ 49.225431][ T4473] x26: 0000000000000000 x25: 1fffe00018f12004 x24: 0000ffff99403100 [ 49.225438][ T4473] x23: 0000000000000000 x22: 0000000000001178 x21: ffff0000c7890024 [ 49.225446][ T4473] x20: ffff0000c7890000 x19: ffff0000c7890000 x18: 0000000000000000 [ 49.225454][ T4473] x17: ffff800011251700 [ 49.227535][ T3645] list_add corruption. next->prev should be prev (ffff0000cd14e078), but was ffff0001a071d830. (next=ffff0000e242ddf0). [ 49.228137][ T4473] x16: ffff8000083c916c [ 49.229424][ T3645] ------------[ cut here ]------------ [ 49.230143][ T4473] x15: ffff8000081c3c88 [ 49.230973][ T3645] kernel BUG at lib/list_debug.c:29! [ 49.231664][ T4473] [ 49.231668][ T4473] x14: 0000000000000003 x13: 1ffff00003744eac x12: 0000000000ff0100 [ 49.244307][ T4473] x11: 0000000000000000 x10: 0000ffffffffffff x9 : 0000000000001178 [ 49.245663][ T4473] x8 : 0000000000001178 x7 : 0000000000000000 x6 : ffff8000087586bc [ 49.247013][ T4473] x5 : 0000000000000000 x4 : 0000000000000001 x3 : 0000000000000001 [ 49.248319][ T4473] x2 : 0000000000000000 x1 : 0000000000000001 x0 : 0000000000000000 [ 49.249622][ T4473] Call trace: [ 49.250100][ T4473] exit_robust_list+0x414/0x5f0 [ 49.250906][ T4473] futex_exit_release+0x124/0x1ac [ 49.251772][ T4473] exit_mm_release+0x24/0x40 [ 49.252474][ T4473] exit_mm+0xa4/0x664 [ 49.253083][ T4473] do_exit+0x4f0/0x1f50 [ 49.253714][ T4473] do_group_exit+0x100/0x268 [ 49.254481][ T4473] get_signal+0x73c/0x1334 [ 49.255183][ T4473] do_notify_resume+0x298/0x309c [ 49.255920][ T4473] el0_da+0x10c/0x1ec [ 49.256549][ T4473] el0t_64_sync_handler+0xd8/0xe4 [ 49.257312][ T4473] el0t_64_sync+0x1a0/0x1a4 [ 49.258008][ T4473] Code: d503229f 2a1703fb 2a1703e0 f840093a (2a1b03e1) [ 49.259069][ T4473] ---[ end trace f72af2d4c5ec3eef ]--- [ 49.443329][ T4473] Kernel panic - not syncing: Oops - BTI: Fatal exception [ 49.444476][ T4473] SMP: stopping secondary CPUs [ 50.517457][ T4473] SMP: failed to stop secondary CPUs 0-1 [ 50.518337][ T4473] Kernel Offset: disabled [ 50.519087][ T4473] CPU features: 0x8,000003c1,7d33ffd9 [ 50.520016][ T4473] Memory Limit: none [ 50.700145][ T4473] Rebooting in 86400 seconds..