Warning: Permanently added '10.128.1.105' (ED25519) to the list of known hosts. 2025/10/11 23:40:55 ignoring optional flag "type"="gce" 2025/10/11 23:40:55 parsed 1 programs 2025/10/11 23:40:55 executed programs: 0 [ 71.282958][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.289546][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.447602][ T4434] chnl_net:caif_netlink_parms(): no params data found [ 71.481950][ T4434] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.489546][ T4434] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.497940][ T4434] device bridge_slave_0 entered promiscuous mode [ 71.506167][ T4434] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.513359][ T4434] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.521208][ T4434] device bridge_slave_1 entered promiscuous mode [ 71.539656][ T4434] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.550286][ T4434] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.570891][ T4434] team0: Port device team_slave_0 added [ 71.577720][ T4434] team0: Port device team_slave_1 added [ 71.594456][ T4434] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.601701][ T4434] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.627825][ T4434] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.639581][ T4434] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.646766][ T4434] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.672897][ T4434] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.702755][ T4434] device hsr_slave_0 entered promiscuous mode [ 71.709482][ T4434] device hsr_slave_1 entered promiscuous mode [ 72.178043][ T4434] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 72.188869][ T4434] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 72.198429][ T4434] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 72.208315][ T4434] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 72.232992][ T4434] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.240095][ T4434] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.247761][ T4434] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.255522][ T4434] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.306002][ T4434] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.319915][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.331816][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.339631][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.349610][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 72.362700][ T4434] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.374751][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.383394][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.390501][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.409269][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.419016][ T1223] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.426161][ T1223] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.440119][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.452086][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.469414][ T4434] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 72.481922][ T4434] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.495406][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.504674][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.514572][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.524109][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.533522][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.543363][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.552437][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.565122][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.662714][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.670162][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.686027][ T4434] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.707659][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.718178][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.740547][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.749115][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.761888][ T4434] device veth0_vlan entered promiscuous mode [ 72.768297][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.777059][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.790207][ T4434] device veth1_vlan entered promiscuous mode [ 72.811861][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.820719][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.829043][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.838501][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.849967][ T4434] device veth0_macvtap entered promiscuous mode [ 72.861636][ T4434] device veth1_macvtap entered promiscuous mode [ 72.879553][ T4434] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.888324][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.897973][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.906237][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.915275][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.927787][ T4434] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.936024][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.945119][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.956639][ T4434] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.965849][ T4434] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.975384][ T4434] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.985719][ T4434] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.064029][ T4524] loop0: detected capacity change from 0 to 190 [ 73.089200][ T4524] ntfs: (device loop0): is_boot_sector_ntfs(): Invalid boot sector checksum. [ 73.113901][ T4524] ntfs: (device loop0): map_mft_record_page(): Mft record 0x1 is corrupt. Run chkdsk. [ 73.124896][ T4524] ntfs: (device loop0): map_mft_record(): Failed with error code 5. [ 73.133589][ T4524] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 73.147369][ T4524] ntfs: (device loop0): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 73.161658][ T4524] ntfs: (device loop0): ntfs_external_attr_find(): Base inode 0xa contains corrupt attribute list attribute. Unmount and run chkdsk. [ 73.175638][ T4524] ntfs: (device loop0): ntfs_read_locked_inode(): Failed to lookup $DATA attribute. [ 73.185659][ T4524] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 73.199369][ T4524] ntfs: (device loop0): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 73.212453][ T4524] ================================================================== [ 73.220618][ T4524] BUG: KASAN: use-after-free in ntfs_readpage+0x84e/0x2220 [ 73.227958][ T4524] Read of size 1 at addr ffff88807305a17f by task syz-executor.0/4524 [ 73.236110][ T4524] [ 73.238443][ T4524] CPU: 1 PID: 4524 Comm: syz-executor.0 Not tainted syzkaller #0 [ 73.246289][ T4524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 73.256358][ T4524] Call Trace: [ 73.259645][ T4524] [ 73.262582][ T4524] dump_stack_lvl+0x168/0x230 [ 73.267361][ T4524] ? show_regs_print_info+0x20/0x20 [ 73.272694][ T4524] ? _printk+0xcc/0x110 [ 73.276858][ T4524] ? load_image+0x3b0/0x3b0 [ 73.281371][ T4524] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 73.286752][ T4524] print_address_description+0x60/0x2d0 [ 73.292659][ T4524] ? ntfs_readpage+0x84e/0x2220 [ 73.297533][ T4524] kasan_report+0xdf/0x130 [ 73.301957][ T4524] ? ntfs_readpage+0x84e/0x2220 [ 73.307109][ T4524] ? _raw_read_unlock+0x40/0x40 [ 73.311962][ T4524] ? ntfs_readpage+0x84e/0x2220 [ 73.316820][ T4524] kasan_check_range+0x27b/0x290 [ 73.321767][ T4524] memcpy+0x25/0x60 [ 73.325617][ T4524] ntfs_readpage+0x84e/0x2220 [ 73.330410][ T4524] ? ntfs_writepage+0x1360/0x1360 [ 73.335440][ T4524] ? lru_cache_add+0x589/0x750 [ 73.340295][ T4524] ? add_to_page_cache_lru+0x2a8/0x4a0 [ 73.345758][ T4524] ? ntfs_writepage+0x1360/0x1360 [ 73.350794][ T4524] do_read_cache_page+0x8a1/0x1030 [ 73.355924][ T4524] ntfs_map_page+0x24/0x390 [ 73.360433][ T4524] load_system_files+0x2299/0x5560 [ 73.365716][ T4524] ? ntfs_setup_allocators+0x2c0/0x2c0 [ 73.371201][ T4524] ? mutex_unlock+0x10/0x10 [ 73.375725][ T4524] ? generate_default_upcase+0x10c/0x990 [ 73.381381][ T4524] ntfs_fill_super+0x19e0/0x2c90 [ 73.386417][ T4524] mount_bdev+0x287/0x3c0 [ 73.390767][ T4524] ? ntfs_mount+0x40/0x40 [ 73.395227][ T4524] legacy_get_tree+0xe6/0x180 [ 73.399952][ T4524] ? ntfs_rl_punch_nolock+0x1470/0x1470 [ 73.405519][ T4524] vfs_get_tree+0x88/0x270 [ 73.409946][ T4524] do_new_mount+0x24a/0xa40 [ 73.414465][ T4524] __se_sys_mount+0x2d6/0x3c0 [ 73.419155][ T4524] ? __x64_sys_mount+0xc0/0xc0 [ 73.424011][ T4524] ? lockdep_hardirqs_on+0x94/0x140 [ 73.429220][ T4524] ? __x64_sys_mount+0x1c/0xc0 [ 73.433993][ T4524] do_syscall_64+0x4c/0xa0 [ 73.438416][ T4524] ? clear_bhb_loop+0x30/0x80 [ 73.443130][ T4524] ? clear_bhb_loop+0x30/0x80 [ 73.447903][ T4524] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 73.453811][ T4524] RIP: 0033:0x7fa69817e05a [ 73.458235][ T4524] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 09 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 73.477842][ T4524] RSP: 002b:00007fa6974fdee8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 73.486261][ T4524] RAX: ffffffffffffffda RBX: 00007fa6974fdf80 RCX: 00007fa69817e05a [ 73.494237][ T4524] RDX: 0000000020000040 RSI: 000000002001f200 RDI: 00007fa6974fdf40 [ 73.502216][ T4524] RBP: 0000000020000040 R08: 00007fa6974fdf80 R09: 0000000000000000 [ 73.510210][ T4524] R10: 0000000000000000 R11: 0000000000000246 R12: 000000002001f200 [ 73.518271][ T4524] R13: 00007fa6974fdf40 R14: 000000000000097e R15: 0000000020000000 [ 73.526266][ T4524] [ 73.529809][ T4524] [ 73.532129][ T4524] The buggy address belongs to the page: [ 73.537759][ T4524] page:ffffea0001cc1680 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1 pfn:0x7305a [ 73.547909][ T4524] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 73.555029][ T4524] raw: 00fff00000000000 ffffea0001befe48 ffffea0001befa88 0000000000000000 [ 73.563625][ T4524] raw: 0000000000000001 0000000000000000 00000000ffffffff 0000000000000000 [ 73.572206][ T4524] page dumped because: kasan: bad access detected [ 73.578644][ T4524] page_owner tracks the page as freed [ 73.584098][ T4524] page last allocated via order 0, migratetype Movable, gfp_mask 0x1100dca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), pid 4550, ts 73565659486, free_ts 73576273117 [ 73.599641][ T4524] get_page_from_freelist+0x1b77/0x1c60 [ 73.605391][ T4524] __alloc_pages+0x1e1/0x470 [ 73.609987][ T4524] alloc_pages_vma+0x393/0x7c0 [ 73.614755][ T4524] handle_mm_fault+0x2382/0x43c0 [ 73.619692][ T4524] do_user_addr_fault+0x489/0xc80 [ 73.624745][ T4524] exc_page_fault+0x60/0x100 [ 73.629335][ T4524] asm_exc_page_fault+0x22/0x30 [ 73.634271][ T4524] page last free stack trace: [ 73.638932][ T4524] free_unref_page_prepare+0x637/0x6c0 [ 73.644393][ T4524] free_unref_page_list+0x122/0x7e0 [ 73.649682][ T4524] release_pages+0x184b/0x1bb0 [ 73.654443][ T4524] tlb_finish_mmu+0x164/0x2e0 [ 73.659121][ T4524] exit_mmap+0x3a6/0x5f0 [ 73.663450][ T4524] __mmput+0x115/0x3b0 [ 73.667520][ T4524] exit_mm+0x567/0x6c0 [ 73.671666][ T4524] do_exit+0x5a1/0x20a0 [ 73.675822][ T4524] do_group_exit+0x12e/0x300 [ 73.680412][ T4524] __x64_sys_exit_group+0x3b/0x40 [ 73.685454][ T4524] do_syscall_64+0x4c/0xa0 [ 73.689965][ T4524] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 73.695872][ T4524] [ 73.698212][ T4524] Memory state around the buggy address: [ 73.703929][ T4524] ffff88807305a000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 73.711986][ T4524] ffff88807305a080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 73.720049][ T4524] >ffff88807305a100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 73.728307][ T4524] ^ [ 73.736281][ T4524] ffff88807305a180: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 73.744345][ T4524] ffff88807305a200: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 73.752400][ T4524] ================================================================== [ 73.760463][ T4524] Disabling lock debugging due to kernel taint [ 73.767320][ T4524] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 73.774533][ T4524] CPU: 1 PID: 4524 Comm: syz-executor.0 Tainted: G B syzkaller #0 [ 73.784007][ T4524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 73.794065][ T4524] Call Trace: [ 73.797346][ T4524] [ 73.800277][ T4524] dump_stack_lvl+0x168/0x230 [ 73.804972][ T4524] ? show_regs_print_info+0x20/0x20 [ 73.810176][ T4524] ? load_image+0x3b0/0x3b0 [ 73.814693][ T4524] panic+0x2c9/0x7f0 [ 73.818602][ T4524] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 73.824764][ T4524] ? bpf_jit_dump+0xd0/0xd0 [ 73.829278][ T4524] ? _raw_spin_unlock_irqrestore+0xa5/0x100 [ 73.835180][ T4524] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 73.841097][ T4524] ? _raw_spin_unlock+0x40/0x40 [ 73.845951][ T4524] ? ntfs_readpage+0x84e/0x2220 [ 73.850816][ T4524] check_panic_on_warn+0x80/0xa0 [ 73.855763][ T4524] ? ntfs_readpage+0x84e/0x2220 [ 73.860620][ T4524] end_report+0x6d/0xf0 [ 73.864781][ T4524] kasan_report+0x102/0x130 [ 73.869303][ T4524] ? ntfs_readpage+0x84e/0x2220 [ 73.874159][ T4524] ? _raw_read_unlock+0x40/0x40 [ 73.879012][ T4524] ? ntfs_readpage+0x84e/0x2220 [ 73.884049][ T4524] kasan_check_range+0x27b/0x290 [ 73.888997][ T4524] memcpy+0x25/0x60 [ 73.892867][ T4524] ntfs_readpage+0x84e/0x2220 [ 73.897557][ T4524] ? ntfs_writepage+0x1360/0x1360 [ 73.902590][ T4524] ? lru_cache_add+0x589/0x750 [ 73.907361][ T4524] ? add_to_page_cache_lru+0x2a8/0x4a0 [ 73.912848][ T4524] ? ntfs_writepage+0x1360/0x1360 [ 73.917968][ T4524] do_read_cache_page+0x8a1/0x1030 [ 73.923201][ T4524] ntfs_map_page+0x24/0x390 [ 73.927808][ T4524] load_system_files+0x2299/0x5560 [ 73.932936][ T4524] ? ntfs_setup_allocators+0x2c0/0x2c0 [ 73.938501][ T4524] ? mutex_unlock+0x10/0x10 [ 73.943014][ T4524] ? generate_default_upcase+0x10c/0x990 [ 73.948659][ T4524] ntfs_fill_super+0x19e0/0x2c90 [ 73.953788][ T4524] mount_bdev+0x287/0x3c0 [ 73.958131][ T4524] ? ntfs_mount+0x40/0x40 [ 73.962467][ T4524] legacy_get_tree+0xe6/0x180 [ 73.967149][ T4524] ? ntfs_rl_punch_nolock+0x1470/0x1470 [ 73.972701][ T4524] vfs_get_tree+0x88/0x270 [ 73.977126][ T4524] do_new_mount+0x24a/0xa40 [ 73.981638][ T4524] __se_sys_mount+0x2d6/0x3c0 [ 73.986323][ T4524] ? __x64_sys_mount+0xc0/0xc0 [ 73.991100][ T4524] ? lockdep_hardirqs_on+0x94/0x140 [ 73.996488][ T4524] ? __x64_sys_mount+0x1c/0xc0 [ 74.001258][ T4524] do_syscall_64+0x4c/0xa0 [ 74.005677][ T4524] ? clear_bhb_loop+0x30/0x80 [ 74.010537][ T4524] ? clear_bhb_loop+0x30/0x80 [ 74.015255][ T4524] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 74.021152][ T4524] RIP: 0033:0x7fa69817e05a [ 74.025568][ T4524] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 09 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 74.045345][ T4524] RSP: 002b:00007fa6974fdee8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 74.053759][ T4524] RAX: ffffffffffffffda RBX: 00007fa6974fdf80 RCX: 00007fa69817e05a [ 74.061730][ T4524] RDX: 0000000020000040 RSI: 000000002001f200 RDI: 00007fa6974fdf40 [ 74.069791][ T4524] RBP: 0000000020000040 R08: 00007fa6974fdf80 R09: 0000000000000000 [ 74.077763][ T4524] R10: 0000000000000000 R11: 0000000000000246 R12: 000000002001f200 [ 74.085909][ T4524] R13: 00007fa6974fdf40 R14: 000000000000097e R15: 0000000020000000 [ 74.093975][ T4524] [ 74.097229][ T4524] Kernel Offset: disabled [ 74.101544][ T4524] Rebooting in 86400 seconds..