Warning: Permanently added '10.128.1.163' (ED25519) to the list of known hosts. 1970/01/01 00:00:49 ignoring optional flag "type"="gce" 1970/01/01 00:00:50 parsed 1 programs [ 50.209825][ T4272] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS 1970/01/01 00:00:50 executed programs: 0 [ 50.283098][ T4279] chnl_net:caif_netlink_parms(): no params data found [ 50.303461][ T4279] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.304639][ T4279] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.306289][ T4279] device bridge_slave_0 entered promiscuous mode [ 50.308522][ T4279] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.309590][ T4279] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.311249][ T4279] device bridge_slave_1 entered promiscuous mode [ 50.320780][ T4279] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.323414][ T4279] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.332899][ T4279] team0: Port device team_slave_0 added [ 50.335044][ T4279] team0: Port device team_slave_1 added [ 50.342958][ T4279] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.344077][ T4279] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.348352][ T4279] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.350707][ T4279] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.351791][ T4279] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.355613][ T4279] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.408986][ T4279] device hsr_slave_0 entered promiscuous mode [ 50.447383][ T4279] device hsr_slave_1 entered promiscuous mode [ 50.981746][ T4279] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 51.008698][ T4279] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 51.049119][ T4279] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 51.088895][ T4279] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 51.136053][ T4279] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.137403][ T4279] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.138708][ T4279] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.139817][ T4279] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.163230][ T4279] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.169119][ T360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.171748][ T360] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.173245][ T360] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.174965][ T360] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 51.181760][ T4279] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.188855][ T265] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.190493][ T265] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.191870][ T265] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.193300][ T265] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.194971][ T265] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.196111][ T265] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.203261][ T265] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 51.205020][ T265] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 51.209608][ T265] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 51.213120][ T265] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 51.216402][ T265] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 51.222137][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 51.268162][ T265] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 51.269529][ T265] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 51.274004][ T4279] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.287209][ T360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 51.289042][ T360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 51.290535][ T360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 51.292035][ T360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 51.294360][ T360] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 51.299922][ T360] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 51.302243][ T4279] device veth0_vlan entered promiscuous mode [ 51.305873][ T4279] device veth1_vlan entered promiscuous mode [ 51.316447][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 51.318244][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 51.319692][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 51.321236][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 51.323788][ T4279] device veth0_macvtap entered promiscuous mode [ 51.326347][ T4279] device veth1_macvtap entered promiscuous mode [ 51.332657][ T4279] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.333954][ T360] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 51.335569][ T360] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 51.337278][ T360] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 51.338996][ T360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 51.342173][ T4279] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.344584][ T4279] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.345975][ T4279] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.348806][ T4279] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.350262][ T4279] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.354107][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 51.356266][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 51.518710][ T4385] loop0: detected capacity change from 0 to 32768 [ 51.524232][ T4385] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor.0 (4385) [ 51.531174][ T4385] BTRFS info (device loop0): using crc32c (crc32c-generic) checksum algorithm [ 51.532880][ T4385] BTRFS info (device loop0): doing ref verification [ 51.534127][ T4385] BTRFS warning (device loop0): the 'inode_cache' option is deprecated and has no effect since 5.11 [ 51.536143][ T4385] BTRFS warning (device loop0): the 'inode_cache' option is deprecated and has no effect since 5.11 [ 51.540414][ T4385] BTRFS warning (device loop0): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 51.542421][ T4385] BTRFS info (device loop0): trying to use backup root at mount time [ 51.543897][ T4385] BTRFS info (device loop0): use zlib compression, level 3 [ 51.545241][ T4385] BTRFS info (device loop0): enabling ssd optimizations [ 51.546627][ T4385] BTRFS info (device loop0): using spread ssd allocation scheme [ 51.548530][ T4385] BTRFS info (device loop0): using free space tree [ 51.549856][ T4385] BTRFS info (device loop0): has skinny extents [ 51.621761][ T148] BTRFS warning (device loop0): checksum verify failed on 5341184 wanted 0x829d3b74 found 0xe129ccda level 0 [ 51.624470][ T4385] BTRFS warning (device loop0): failed to read root (objectid=10): -5 [ 51.626158][ T360] BTRFS warning (device loop0): checksum verify failed on 5324800 wanted 0xa187e1f9 found 0xa3d38d98 level 0 [ 51.628959][ T4385] BTRFS warning (device loop0): couldn't read tree root [ 51.630475][ T4385] BTRFS error (device loop0): parent transid verify failed on 5255168 wanted 5 found 7 [ 51.632410][ T4385] BTRFS warning (device loop0): couldn't read tree root [ 51.636805][ T4385] BTRFS info (device loop0): clearing free space tree [ 51.638281][ T4385] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 51.641349][ T4385] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 51.651778][ T4385] ================================================================== [ 51.653149][ T4385] BUG: KASAN: null-ptr-deref in btrfs_root_node+0x14c/0x3cc [ 51.654361][ T4385] Write of size 4 at addr 0000000000000060 by task syz-executor.0/4385 [ 51.655723][ T4385] [ 51.656148][ T4385] CPU: 1 PID: 4385 Comm: syz-executor.0 Not tainted syzkaller #0 [ 51.657489][ T4385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 51.659203][ T4385] Call trace: [ 51.659748][ T4385] dump_backtrace+0x0/0x458 [ 51.660547][ T4385] show_stack+0x2c/0x3c [ 51.661258][ T4385] __dump_stack+0x30/0x40 [ 51.662059][ T4385] dump_stack_lvl+0xf4/0x15c [ 51.662829][ T4385] kasan_report+0xe0/0x158 [ 51.663571][ T4385] kasan_check_range+0x268/0x2a0 [ 51.664453][ T4385] __kasan_check_write+0x44/0x54 [ 51.665306][ T4385] btrfs_root_node+0x14c/0x3cc [ 51.666145][ T4385] btrfs_read_lock_root_node+0x68/0x35c [ 51.667134][ T4385] btrfs_search_slot+0x2fc/0x1f44 [ 51.668006][ T4385] btrfs_orphan_cleanup+0x194/0x7fc [ 51.668875][ T4385] btrfs_cleanup_fs_roots+0x53c/0x7c4 [ 51.669839][ T4385] btrfs_start_pre_rw_mount+0x14c/0x568 [ 51.670826][ T4385] open_ctree+0x1f18/0x27e8 [ 51.671624][ T4385] btrfs_fill_super+0x1b4/0x2d4 [ 51.672447][ T4385] btrfs_mount_root+0x780/0x7d0 [ 51.673305][ T4385] legacy_get_tree+0xd4/0x16c [ 51.674083][ T4385] vfs_get_tree+0x90/0x274 [ 51.674803][ T4385] vfs_kern_mount+0xdc/0x178 [ 51.675581][ T4385] btrfs_mount+0x2d4/0x950 [ 51.676297][ T4385] legacy_get_tree+0xd4/0x16c [ 51.677040][ T4385] vfs_get_tree+0x90/0x274 [ 51.677738][ T4385] do_new_mount+0x228/0x810 [ 51.678473][ T4385] path_mount+0x5bc/0x1008 [ 51.679262][ T4385] __arm64_sys_mount+0x514/0x5f0 [ 51.680076][ T4385] invoke_syscall+0x98/0x2b0 [ 51.680828][ T4385] el0_svc_common+0x138/0x258 [ 51.681627][ T4385] do_el0_svc+0x58/0x13c [ 51.682346][ T4385] el0_svc+0x78/0x1d0 [ 51.683057][ T4385] el0t_64_sync_handler+0xcc/0xe4 [ 51.683844][ T4385] el0t_64_sync+0x1a0/0x1a4 [ 51.684665][ T4385] ================================================================== [ 51.686094][ T4385] Disabling lock debugging due to kernel taint [ 51.689532][ T4385] Unable to handle kernel paging request at virtual address dfff80000000000c [ 51.691060][ T4385] Mem abort info: [ 51.691659][ T4385] ESR = 0x0000000096000006 [ 51.692533][ T4385] EC = 0x25: DABT (current EL), IL = 32 bits [ 51.693568][ T4385] SET = 0, FnV = 0 [ 51.694309][ T4385] EA = 0, S1PTW = 0 [ 51.695066][ T4385] FSC = 0x06: level 2 translation fault [ 51.696005][ T4385] Data abort info: [ 51.696664][ T4385] ISV = 0, ISS = 0x00000006 [ 51.698646][ T4385] CM = 0, WnR = 0 [ 51.699276][ T4385] [dfff80000000000c] address between user and kernel address ranges [ 51.700620][ T4385] Internal error: Oops: 0000000096000006 [#1] PREEMPT SMP [ 51.701660][ T4385] Modules linked in: [ 51.702332][ T4385] CPU: 1 PID: 4385 Comm: syz-executor.0 Tainted: G B syzkaller #0 [ 51.703824][ T4385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/26/2026 [ 51.705541][ T4385] pstate: 82400005 (Nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 51.706846][ T4385] pc : btrfs_root_node+0x150/0x3cc [ 51.707732][ T4385] lr : btrfs_root_node+0x14c/0x3cc [ 51.708619][ T4385] sp : ffff80001fc86f90 [ 51.709298][ T4385] x29: ffff80001fc86f90 x28: dfff800000000000 x27: ffff8000117858c0 [ 51.710616][ T4385] x26: 0000000000000060 x25: 0000000000000000 x24: ffff8000117858c0 [ 51.711943][ T4385] x23: ffff8000166df000 x22: ffff800011786040 x21: 0000000000000001 [ 51.713275][ T4385] x20: 1fffe0001ac92400 x19: ffff0000d6492000 x18: 0000000000000002 [ 51.714691][ T4385] x17: 0000000040000000 x16: ffff8000082d87e4 x15: 0000000000000002 [ 51.716087][ T4385] x14: ffff700002d1cb70 x13: 1ffff00002d1cb70 x12: 0000000000ff0100 [ 51.717433][ T4385] x11: 0000000000000000 x10: 0000000000000000 x9 : 0000000000000000 [ 51.718796][ T4385] x8 : 000000000000000c x7 : 0000000000000000 x6 : ffff800008247e40 [ 51.720123][ T4385] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff800008186eb0 [ 51.721468][ T4385] x2 : 0000000000000001 x1 : 0000000000000001 x0 : 0000000000000000 [ 51.722714][ T4385] Call trace: [ 51.723247][ T4385] btrfs_root_node+0x150/0x3cc [ 51.724080][ T4385] btrfs_read_lock_root_node+0x68/0x35c [ 51.725042][ T4385] btrfs_search_slot+0x2fc/0x1f44 [ 51.725949][ T4385] btrfs_orphan_cleanup+0x194/0x7fc [ 51.726862][ T4385] btrfs_cleanup_fs_roots+0x53c/0x7c4 [ 51.727713][ T4385] btrfs_start_pre_rw_mount+0x14c/0x568 [ 51.728714][ T4385] open_ctree+0x1f18/0x27e8 [ 51.729529][ T4385] btrfs_fill_super+0x1b4/0x2d4 [ 51.730346][ T4385] btrfs_mount_root+0x780/0x7d0 [ 51.731149][ T4385] legacy_get_tree+0xd4/0x16c [ 51.731991][ T4385] vfs_get_tree+0x90/0x274 [ 51.732736][ T4385] vfs_kern_mount+0xdc/0x178 [ 51.733524][ T4385] btrfs_mount+0x2d4/0x950 [ 51.734243][ T4385] legacy_get_tree+0xd4/0x16c [ 51.735060][ T4385] vfs_get_tree+0x90/0x274 [ 51.735864][ T4385] do_new_mount+0x228/0x810 [ 51.736655][ T4385] path_mount+0x5bc/0x1008 [ 51.737386][ T4385] __arm64_sys_mount+0x514/0x5f0 [ 51.738288][ T4385] invoke_syscall+0x98/0x2b0 [ 51.739089][ T4385] el0_svc_common+0x138/0x258 [ 51.739891][ T4385] do_el0_svc+0x58/0x13c [ 51.740576][ T4385] el0_svc+0x78/0x1d0 [ 51.741183][ T4385] el0t_64_sync_handler+0xcc/0xe4 [ 51.742101][ T4385] el0t_64_sync+0x1a0/0x1a4 [ 51.742880][ T4385] Code: aa1b03f8 aa1a03e0 97a875ae d343ff48 (38fc6908) [ 51.744095][ T4385] ---[ end trace 686c069d13ee7229 ]--- [ 51.936807][ T4385] Kernel panic - not syncing: Oops: Fatal exception [ 51.937835][ T4385] SMP: stopping secondary CPUs [ 51.938653][ T4385] Kernel Offset: disabled [ 51.939350][ T4385] CPU features: 0x8,000003c1,7d33ffd9 [ 51.940203][ T4385] Memory Limit: none [ 52.112024][ T4385] Rebooting in 86400 seconds..