Warning: Permanently added '10.128.1.55' (ED25519) to the list of known hosts. 1970/01/01 00:00:47 ignoring optional flag "type"="gce" 1970/01/01 00:00:47 parsed 1 programs [ 47.814805][ T4293] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS 1970/01/01 00:00:47 executed programs: 0 [ 47.884106][ T4302] chnl_net:caif_netlink_parms(): no params data found [ 47.903768][ T4302] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.905003][ T4302] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.906491][ T4302] device bridge_slave_0 entered promiscuous mode [ 47.908565][ T4302] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.909704][ T4302] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.911195][ T4302] device bridge_slave_1 entered promiscuous mode [ 47.919192][ T4302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.922282][ T4302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.930436][ T4302] team0: Port device team_slave_0 added [ 47.932419][ T4302] team0: Port device team_slave_1 added [ 47.939267][ T4302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.940346][ T4302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.944154][ T4302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.948405][ T4302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.949761][ T4302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.953465][ T4302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.002221][ T4302] device hsr_slave_0 entered promiscuous mode [ 48.031502][ T4302] device hsr_slave_1 entered promiscuous mode [ 48.662683][ T4302] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 48.702226][ T4302] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 48.742335][ T4302] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 48.763205][ T4302] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 48.810441][ T4302] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.811616][ T4302] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.812951][ T4302] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.813963][ T4302] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.833880][ T4302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.838388][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 48.840957][ T148] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.844485][ T148] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.846308][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 48.852804][ T4302] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.857508][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.859115][ T136] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.860223][ T136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.862387][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.863974][ T136] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.865129][ T136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.869187][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 48.872134][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 48.878514][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 48.880583][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 48.883311][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 48.885396][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 48.886928][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 48.892408][ T4302] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 48.893973][ T4302] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 48.899060][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 48.901462][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 48.903941][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 48.905438][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 48.907016][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 48.946125][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 48.947325][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 48.952264][ T4302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.959244][ T346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 48.961563][ T346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 48.968644][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 48.970289][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 48.974000][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 48.975379][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 48.979012][ T4302] device veth0_vlan entered promiscuous mode [ 48.985817][ T4302] device veth1_vlan entered promiscuous mode [ 48.994260][ T1683] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 48.995728][ T1683] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 48.997263][ T1683] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 48.998627][ T1683] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 49.002583][ T4302] device veth0_macvtap entered promiscuous mode [ 49.005184][ T4302] device veth1_macvtap entered promiscuous mode [ 49.011858][ T4302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.013041][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 49.014458][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 49.015919][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 49.017470][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 49.023414][ T4302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.024606][ T1683] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 49.026111][ T1683] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 49.029372][ T4302] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.030711][ T4302] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.033240][ T4302] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.034553][ T4302] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.175146][ T4449] loop0: detected capacity change from 0 to 32768 [ 49.180406][ T4449] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor.0 (4449) [ 49.203670][ T4449] BTRFS info (device loop0): using crc32c (crc32c-generic) checksum algorithm [ 49.205232][ T4449] BTRFS info (device loop0): doing ref verification [ 49.206198][ T4449] BTRFS warning (device loop0): the 'inode_cache' option is deprecated and has no effect since 5.11 [ 49.207882][ T4449] BTRFS warning (device loop0): the 'inode_cache' option is deprecated and has no effect since 5.11 [ 49.209483][ T4449] BTRFS warning (device loop0): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 49.214935][ T4449] BTRFS info (device loop0): trying to use backup root at mount time [ 49.216324][ T4449] BTRFS info (device loop0): use zlib compression, level 3 [ 49.217656][ T4449] BTRFS info (device loop0): enabling ssd optimizations [ 49.222139][ T4449] BTRFS info (device loop0): using spread ssd allocation scheme [ 49.223418][ T4449] BTRFS info (device loop0): using free space tree [ 49.224338][ T4449] BTRFS info (device loop0): has skinny extents [ 49.261536][ T1683] BTRFS warning (device loop0): checksum verify failed on 5341184 wanted 0x829d3b74 found 0xe129ccda level 0 [ 49.263497][ T4449] BTRFS warning (device loop0): failed to read root (objectid=10): -5 [ 49.264931][ T1683] BTRFS warning (device loop0): checksum verify failed on 5324800 wanted 0xa187e1f9 found 0xa3d38d98 level 0 [ 49.266882][ T4449] BTRFS warning (device loop0): couldn't read tree root [ 49.268321][ T4449] BTRFS error (device loop0): parent transid verify failed on 5255168 wanted 5 found 7 [ 49.269988][ T4449] BTRFS warning (device loop0): couldn't read tree root [ 49.277707][ T4449] BTRFS info (device loop0): clearing free space tree [ 49.279095][ T4449] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 49.280577][ T4449] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 49.292118][ T4449] ================================================================== [ 49.293410][ T4449] BUG: KASAN: null-ptr-deref in btrfs_root_node+0x14c/0x3d4 [ 49.294488][ T4449] Write of size 4 at addr 0000000000000060 by task syz-executor.0/4449 [ 49.295627][ T4449] [ 49.295981][ T4449] CPU: 1 PID: 4449 Comm: syz-executor.0 Not tainted syzkaller #0 [ 49.297155][ T4449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 49.298564][ T4449] Call trace: [ 49.299030][ T4449] dump_backtrace+0x0/0x43c [ 49.299689][ T4449] show_stack+0x2c/0x3c [ 49.300309][ T4449] __dump_stack+0x30/0x40 [ 49.300949][ T4449] dump_stack_lvl+0xf8/0x160 [ 49.301631][ T4449] kasan_report+0xe0/0x15c [ 49.302327][ T4449] kasan_check_range+0x270/0x2b0 [ 49.303108][ T4449] __kasan_check_write+0x44/0x54 [ 49.303806][ T4449] btrfs_root_node+0x14c/0x3d4 [ 49.304514][ T4449] btrfs_read_lock_root_node+0x68/0x35c [ 49.305365][ T4449] btrfs_search_slot+0x2fc/0x1f4c [ 49.306119][ T4449] btrfs_orphan_cleanup+0x17c/0x7e0 [ 49.306858][ T4449] btrfs_cleanup_fs_roots+0x520/0x7a8 [ 49.307616][ T4449] btrfs_start_pre_rw_mount+0x14c/0x568 [ 49.308389][ T4449] open_ctree+0x1ef0/0x27b8 [ 49.309081][ T4449] btrfs_fill_super+0x1b4/0x2d4 [ 49.309758][ T4449] btrfs_mount_root+0x730/0x780 [ 49.310520][ T4449] legacy_get_tree+0xd4/0x16c [ 49.311202][ T4449] vfs_get_tree+0x90/0x274 [ 49.311849][ T4449] vfs_kern_mount+0xdc/0x178 [ 49.312565][ T4449] btrfs_mount+0x2a0/0x8d4 [ 49.313239][ T4449] legacy_get_tree+0xd4/0x16c [ 49.313901][ T4449] vfs_get_tree+0x90/0x274 [ 49.314509][ T4449] do_new_mount+0x228/0x810 [ 49.315205][ T4449] path_mount+0x5b4/0x1000 [ 49.315856][ T4449] __arm64_sys_mount+0x514/0x5e4 [ 49.316567][ T4449] invoke_syscall+0x98/0x2b8 [ 49.317184][ T4449] el0_svc_common+0x138/0x258 [ 49.317877][ T4449] do_el0_svc+0x58/0x14c [ 49.318467][ T4449] el0_svc+0x78/0x1e0 [ 49.318996][ T4449] el0t_64_sync_handler+0xcc/0xe4 [ 49.319698][ T4449] el0t_64_sync+0x1a0/0x1a4 [ 49.320377][ T4449] ================================================================== [ 49.321602][ T4449] Disabling lock debugging due to kernel taint [ 49.324385][ T4449] Unable to handle kernel paging request at virtual address dfff80000000000c [ 49.325816][ T4449] Mem abort info: [ 49.326341][ T4449] ESR = 0x0000000096000006 [ 49.327056][ T4449] EC = 0x25: DABT (current EL), IL = 32 bits [ 49.328013][ T4449] SET = 0, FnV = 0 [ 49.328625][ T4449] EA = 0, S1PTW = 0 [ 49.329250][ T4449] FSC = 0x06: level 2 translation fault [ 49.330186][ T4449] Data abort info: [ 49.330724][ T4449] ISV = 0, ISS = 0x00000006 [ 49.331641][ T4449] CM = 0, WnR = 0 [ 49.332238][ T4449] [dfff80000000000c] address between user and kernel address ranges [ 49.333505][ T4449] Internal error: Oops: 0000000096000006 [#1] PREEMPT SMP [ 49.334623][ T4449] Modules linked in: [ 49.335238][ T4449] CPU: 1 PID: 4449 Comm: syz-executor.0 Tainted: G B syzkaller #0 [ 49.336572][ T4449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 49.337979][ T4449] pstate: 82400005 (Nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 49.339150][ T4449] pc : btrfs_root_node+0x150/0x3d4 [ 49.339891][ T4449] lr : btrfs_root_node+0x14c/0x3d4 [ 49.340656][ T4449] sp : ffff80001f186f90 [ 49.341265][ T4449] x29: ffff80001f186f90 x28: dfff800000000000 x27: ffff800011694740 [ 49.342441][ T4449] x26: 0000000000000060 x25: 0000000000000000 x24: ffff800011694740 [ 49.343713][ T4449] x23: ffff80001655e000 x22: ffff800011694ec0 x21: 0000000000000001 [ 49.344961][ T4449] x20: 1fffe000192fe400 x19: ffff0000c97f2000 x18: 0000000000000002 [ 49.346249][ T4449] x17: 0000000040000000 x16: ffff8000082d6484 x15: 0000000000000002 [ 49.347515][ T4449] x14: 0000000000ff0100 x13: ffffffffffffffff x12: 0000000000ff0100 [ 49.348808][ T4449] x11: 0000000000000000 x10: 0000000000000000 x9 : 0000000000000000 [ 49.350116][ T4449] x8 : 000000000000000c x7 : 0000000000000000 x6 : ffff8000082459cc [ 49.351299][ T4449] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff800008185e44 [ 49.352575][ T4449] x2 : 0000000000000001 x1 : 0000000000000001 x0 : 0000000000000000 [ 49.353793][ T4449] Call trace: [ 49.354296][ T4449] btrfs_root_node+0x150/0x3d4 [ 49.354985][ T4449] btrfs_read_lock_root_node+0x68/0x35c [ 49.355824][ T4449] btrfs_search_slot+0x2fc/0x1f4c [ 49.356612][ T4449] btrfs_orphan_cleanup+0x17c/0x7e0 [ 49.357381][ T4449] btrfs_cleanup_fs_roots+0x520/0x7a8 [ 49.358120][ T4449] btrfs_start_pre_rw_mount+0x14c/0x568 [ 49.358871][ T4449] open_ctree+0x1ef0/0x27b8 [ 49.359541][ T4449] btrfs_fill_super+0x1b4/0x2d4 [ 49.360238][ T4449] btrfs_mount_root+0x730/0x780 [ 49.360896][ T4449] legacy_get_tree+0xd4/0x16c [ 49.361556][ T4449] vfs_get_tree+0x90/0x274 [ 49.362110][ T4449] vfs_kern_mount+0xdc/0x178 [ 49.362774][ T4449] btrfs_mount+0x2a0/0x8d4 [ 49.363393][ T4449] legacy_get_tree+0xd4/0x16c [ 49.364098][ T4449] vfs_get_tree+0x90/0x274 [ 49.364732][ T4449] do_new_mount+0x228/0x810 [ 49.365348][ T4449] path_mount+0x5b4/0x1000 [ 49.366077][ T4449] __arm64_sys_mount+0x514/0x5e4 [ 49.366888][ T4449] invoke_syscall+0x98/0x2b8 [ 49.367619][ T4449] el0_svc_common+0x138/0x258 [ 49.368281][ T4449] do_el0_svc+0x58/0x14c [ 49.368887][ T4449] el0_svc+0x78/0x1e0 [ 49.369484][ T4449] el0t_64_sync_handler+0xcc/0xe4 [ 49.370241][ T4449] el0t_64_sync+0x1a0/0x1a4 [ 49.370892][ T4449] Code: aa1b03f8 aa1a03e0 97a8fc42 d343ff48 (38fc6908) [ 49.371931][ T4449] ---[ end trace a3ea5a5963caaed7 ]--- [ 49.543121][ T4449] Kernel panic - not syncing: Oops: Fatal exception [ 49.544180][ T4449] SMP: stopping secondary CPUs [ 49.544902][ T4449] Kernel Offset: disabled [ 49.545529][ T4449] CPU features: 0x8,000003c1,7d33ffd9 [ 49.546332][ T4449] Memory Limit: none [ 49.724255][ T4449] Rebooting in 86400 seconds..