Warning: Permanently added '10.128.1.200' (ED25519) to the list of known hosts.
2025/09/21 03:39:00 ignoring optional flag "type"="gce"
2025/09/21 03:39:00 parsed 1 programs
[ 71.466476][ T1428] ieee802154 phy0 wpan0: encryption failed: -22
[ 71.473701][ T1428] ieee802154 phy1 wpan1: encryption failed: -22
2025/09/21 03:39:02 executed programs: 0
[ 72.488537][ T4463] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS
[ 72.623615][ T4508] chnl_net:caif_netlink_parms(): no params data found
[ 72.661339][ T4508] bridge0: port 1(bridge_slave_0) entered blocking state
[ 72.669205][ T4508] bridge0: port 1(bridge_slave_0) entered disabled state
[ 72.677286][ T4508] device bridge_slave_0 entered promiscuous mode
[ 72.685271][ T4508] bridge0: port 2(bridge_slave_1) entered blocking state
[ 72.693368][ T4508] bridge0: port 2(bridge_slave_1) entered disabled state
[ 72.701687][ T4508] device bridge_slave_1 entered promiscuous mode
[ 72.721104][ T4508] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 72.732705][ T4508] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 72.758187][ T4508] team0: Port device team_slave_0 added
[ 72.766710][ T4508] team0: Port device team_slave_1 added
[ 72.783442][ T4508] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 72.794180][ T4508] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 72.825383][ T4508] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 72.838198][ T4508] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 72.845246][ T4508] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 72.872049][ T4508] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 72.898968][ T4508] device hsr_slave_0 entered promiscuous mode
[ 72.906157][ T4508] device hsr_slave_1 entered promiscuous mode
[ 73.337795][ T4508] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 73.349375][ T4508] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 73.360569][ T4508] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 73.370859][ T4508] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 73.401701][ T4508] bridge0: port 2(bridge_slave_1) entered blocking state
[ 73.409481][ T4508] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 73.417146][ T4508] bridge0: port 1(bridge_slave_0) entered blocking state
[ 73.424685][ T4508] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 73.481373][ T4508] 8021q: adding VLAN 0 to HW filter on device bond0
[ 73.498129][ T904] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 73.507889][ T904] bridge0: port 1(bridge_slave_0) entered disabled state
[ 73.517527][ T904] bridge0: port 2(bridge_slave_1) entered disabled state
[ 73.527026][ T904] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[ 73.552966][ T4508] 8021q: adding VLAN 0 to HW filter on device team0
[ 73.578462][ T904] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 73.588223][ T904] bridge0: port 1(bridge_slave_0) entered blocking state
[ 73.596216][ T904] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 73.611751][ T904] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 73.620794][ T904] bridge0: port 2(bridge_slave_1) entered blocking state
[ 73.628587][ T904] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 73.655271][ T904] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 73.665058][ T904] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 73.680400][ T4508] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 73.693464][ T4508] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 73.706859][ T904] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 73.715929][ T904] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 73.725386][ T904] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 73.736085][ T904] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 73.745423][ T904] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 73.759667][ T904] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 73.906469][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 73.915496][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 73.940599][ T4508] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 73.963858][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 73.983048][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 74.011980][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 74.022129][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 74.032373][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 74.040568][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 74.052047][ T4508] device veth0_vlan entered promiscuous mode
[ 74.065323][ T4508] device veth1_vlan entered promiscuous mode
[ 74.089087][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 74.098496][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 74.107960][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 74.117384][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 74.128271][ T4508] device veth0_macvtap entered promiscuous mode
[ 74.139239][ T4508] device veth1_macvtap entered promiscuous mode
[ 74.155766][ T4508] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 74.164837][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 74.174799][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 74.184468][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 74.195172][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 74.208851][ T4508] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 74.223180][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 74.235239][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 74.247361][ T4508] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 74.258514][ T4508] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 74.267924][ T4508] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 74.279277][ T4508] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 74.378969][ T4594] loop0: detected capacity change from 0 to 512
[ 74.450011][ T4594] EXT4-fs (loop0): 1 orphan inode deleted
[ 74.456563][ T4594] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[ 74.471880][ T4594] ext4 filesystem being mounted at /root/syzkaller-testdir2111562853/syzkaller.jTc9li/0/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 74.496966][ T26] audit: type=1800 audit(1758425944.301:2): pid=4594 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="loop0" ino=16 res=0 errno=0
[ 74.537989][ T26] audit: type=1800 audit(1758425944.331:3): pid=4594 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="loop0" ino=16 res=0 errno=0
[ 74.577614][ T904] ==================================================================
[ 74.586544][ T904] BUG: KASAN: use-after-free in ext4_find_extent+0xbcc/0xe00
[ 74.594396][ T904] Read of size 4 at addr ffff88806d25d090 by task kworker/u4:4/904
[ 74.602910][ T904]
[ 74.605436][ T904] CPU: 1 PID: 904 Comm: kworker/u4:4 Not tainted syzkaller #0
[ 74.612904][ T904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 74.623329][ T904] Workqueue: writeback wb_workfn (flush-7:0)
[ 74.629363][ T904] Call Trace:
[ 74.632921][ T904]
[ 74.636341][ T904] dump_stack_lvl+0x168/0x230
[ 74.641482][ T904] ? show_regs_print_info+0x20/0x20
[ 74.646698][ T904] ? _printk+0xcc/0x110
[ 74.651149][ T904] ? load_image+0x3b0/0x3b0
[ 74.656338][ T904] ? _raw_spin_lock_irqsave+0xb0/0xf0
[ 74.662075][ T904] print_address_description+0x60/0x2d0
[ 74.668462][ T904] ? ext4_find_extent+0xbcc/0xe00
[ 74.674235][ T904] kasan_report+0xdf/0x130
[ 74.679381][ T904] ? ext4_find_extent+0xbcc/0xe00
[ 74.684817][ T904] ext4_find_extent+0xbcc/0xe00
[ 74.689819][ T904] ext4_ext_map_blocks+0x25a/0x64e0
[ 74.695605][ T904] ? ext4_ext_release+0x10/0x10
[ 74.701007][ T904] ? rwsem_write_trylock+0x12f/0x1b0
[ 74.706617][ T904] ? ext4_es_lookup_extent+0x408/0xa10
[ 74.712281][ T904] ext4_map_blocks+0x981/0x1b30
[ 74.717826][ T904] ? ext4_issue_zeroout+0x250/0x250
[ 74.723239][ T904] ? ext4_inode_journal_mode+0x18f/0x460
[ 74.729276][ T904] ext4_writepages+0x12ca/0x2d20
[ 74.734368][ T904] ? ext4_readpage+0x2e0/0x2e0
[ 74.739377][ T904] ? verify_lock_unused+0x140/0x140
[ 74.744797][ T904] ? writeback_sb_inodes+0x3f6/0x1610
[ 74.750301][ T904] ? ext4_readpage+0x2e0/0x2e0
[ 74.755945][ T904] do_writepages+0x48d/0x6d0
[ 74.760872][ T904] ? __writepage+0x130/0x130
[ 74.766009][ T904] ? writeback_sb_inodes+0x65b/0x1610
[ 74.771935][ T904] ? __lock_acquire+0x7c60/0x7c60
[ 74.777254][ T904] ? do_raw_spin_lock+0x11d/0x280
[ 74.782308][ T904] __writeback_single_inode+0x153/0xda0
[ 74.788592][ T904] writeback_sb_inodes+0x9fe/0x1610
[ 74.793929][ T904] ? queue_io+0x550/0x550
[ 74.799004][ T904] ? rcu_is_watching+0x11/0xa0
[ 74.803963][ T904] wb_writeback+0x443/0xb90
[ 74.809168][ T904] ? rcu_lock_release+0x20/0x20
[ 74.814402][ T904] ? lockdep_hardirqs_on_prepare+0x3fc/0x760
[ 74.821086][ T904] ? mark_lock+0x94/0x320
[ 74.825700][ T904] ? _raw_spin_unlock_irq+0x1f/0x40
[ 74.831013][ T904] wb_workfn+0x423/0xe60
[ 74.835581][ T904] ? inode_wait_for_writeback+0x200/0x200
[ 74.841844][ T904] ? lockdep_hardirqs_on_prepare+0x3fc/0x760
[ 74.847962][ T904] ? read_lock_is_recursive+0x10/0x10
[ 74.853366][ T904] ? _raw_spin_unlock_irqrestore+0xaa/0x100
[ 74.859370][ T904] ? _raw_spin_unlock+0x40/0x40
[ 74.864828][ T904] ? _raw_spin_unlock_irq+0x1f/0x40
[ 74.871804][ T904] process_one_work+0x863/0x1000
[ 74.877426][ T904] ? worker_detach_from_pool+0x240/0x240
[ 74.883547][ T904] ? lockdep_hardirqs_off+0x70/0x100
[ 74.888951][ T904] ? _raw_spin_lock_irq+0xab/0xe0
[ 74.894489][ T904] ? _raw_spin_lock_irqsave+0xf0/0xf0
[ 74.900160][ T904] ? wq_worker_running+0x97/0x170
[ 74.905336][ T904] worker_thread+0xaa8/0x12a0
[ 74.910699][ T904] ? lockdep_hardirqs_on+0x94/0x140
[ 74.916012][ T904] ? lockdep_hardirqs_on+0x94/0x140
[ 74.921466][ T904] ? _raw_spin_unlock_irqrestore+0xaa/0x100
[ 74.927709][ T904] kthread+0x436/0x520
[ 74.931981][ T904] ? rcu_lock_release+0x20/0x20
[ 74.936995][ T904] ? kthread_blkcg+0xd0/0xd0
[ 74.941782][ T904] ret_from_fork+0x1f/0x30
[ 74.946433][ T904]
[ 74.949684][ T904]
[ 74.952379][ T904] The buggy address belongs to the page:
[ 74.958116][ T904] page:ffffea0001b49740 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1 pfn:0x6d25d
[ 74.971022][ T904] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 74.979168][ T904] raw: 00fff00000080014 ffffea0001b48088 ffffea0001b43cc8 ffff888076e84ee1
[ 74.988326][ T904] raw: 000000000000000e 0000000000000000 0000000100000000 ffff88814077c000
[ 74.997443][ T904] page dumped because: kasan: bad access detected
[ 75.004163][ T904] page_owner tracks the page as freed
[ 75.009819][ T904] page last allocated via order 0, migratetype Movable, gfp_mask 0x1100cca(GFP_HIGHUSER_MOVABLE), pid 4622, ts 74976353876, free_ts 74993379878
[ 75.025093][ T904] get_page_from_freelist+0x1b77/0x1c60
[ 75.031018][ T904] __alloc_pages+0x1e1/0x470
[ 75.035726][ T904] alloc_pages_vma+0x393/0x7c0
[ 75.040691][ T904] handle_mm_fault+0x1b98/0x43c0
[ 75.045736][ T904] do_user_addr_fault+0x489/0xc80
[ 75.051362][ T904] exc_page_fault+0x60/0x100
[ 75.056078][ T904] asm_exc_page_fault+0x22/0x30
[ 75.061038][ T904] page last free stack trace:
[ 75.065806][ T904] free_unref_page_prepare+0x637/0x6c0
[ 75.071379][ T904] free_unref_page_list+0x122/0x7e0
[ 75.076911][ T904] release_pages+0x184b/0x1bb0
[ 75.082018][ T904] tlb_finish_mmu+0x164/0x2e0
[ 75.086801][ T904] exit_mmap+0x3a6/0x5f0
[ 75.091059][ T904] __mmput+0x115/0x3b0
[ 75.095320][ T904] exit_mm+0x567/0x6c0
[ 75.099576][ T904] do_exit+0x5a1/0x20a0
[ 75.103918][ T904] do_group_exit+0x12e/0x300
[ 75.108713][ T904] __x64_sys_exit_group+0x3b/0x40
[ 75.114764][ T904] do_syscall_64+0x4c/0xa0
[ 75.119283][ T904] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 75.125453][ T904]
[ 75.127791][ T904] Memory state around the buggy address:
[ 75.133595][ T904] ffff88806d25cf80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 75.142111][ T904] ffff88806d25d000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 75.150552][ T904] >ffff88806d25d080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 75.158679][ T904] ^
[ 75.163305][ T904] ffff88806d25d100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 75.171820][ T904] ffff88806d25d180: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 75.180073][ T904] ==================================================================
[ 75.188501][ T904] Disabling lock debugging due to kernel taint
[ 75.196302][ T4209] Bluetooth: hci0: command 0x0409 tx timeout
[ 75.208769][ T904] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 75.216999][ T904] CPU: 1 PID: 904 Comm: kworker/u4:4 Tainted: G B syzkaller #0
[ 75.226383][ T904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 75.237527][ T904] Workqueue: writeback wb_workfn (flush-7:0)
[ 75.243974][ T904] Call Trace:
[ 75.247558][ T904]
[ 75.250738][ T904] dump_stack_lvl+0x168/0x230
[ 75.255424][ T904] ? show_regs_print_info+0x20/0x20
[ 75.260726][ T904] ? load_image+0x3b0/0x3b0
[ 75.265399][ T904] panic+0x2c9/0x7f0
[ 75.269756][ T904] ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 75.276276][ T904] ? bpf_jit_dump+0xd0/0xd0
[ 75.280880][ T904] ? _raw_spin_unlock_irqrestore+0xf6/0x100
[ 75.287268][ T904] ? _raw_spin_unlock+0x40/0x40
[ 75.292223][ T904] ? ext4_find_extent+0xbcc/0xe00
[ 75.297621][ T904] check_panic_on_warn+0x80/0xa0
[ 75.303357][ T904] ? ext4_find_extent+0xbcc/0xe00
[ 75.309028][ T904] end_report+0x6d/0xf0
[ 75.313341][ T904] kasan_report+0x102/0x130
[ 75.318890][ T904] ? ext4_find_extent+0xbcc/0xe00
[ 75.324297][ T904] ext4_find_extent+0xbcc/0xe00
[ 75.329433][ T904] ext4_ext_map_blocks+0x25a/0x64e0
[ 75.334889][ T904] ? ext4_ext_release+0x10/0x10
[ 75.340094][ T904] ? rwsem_write_trylock+0x12f/0x1b0
[ 75.346127][ T904] ? ext4_es_lookup_extent+0x408/0xa10
[ 75.352421][ T904] ext4_map_blocks+0x981/0x1b30
[ 75.357833][ T904] ? ext4_issue_zeroout+0x250/0x250
[ 75.363479][ T904] ? ext4_inode_journal_mode+0x18f/0x460
[ 75.369368][ T904] ext4_writepages+0x12ca/0x2d20
[ 75.374597][ T904] ? ext4_readpage+0x2e0/0x2e0
[ 75.379373][ T904] ? verify_lock_unused+0x140/0x140
[ 75.385225][ T904] ? writeback_sb_inodes+0x3f6/0x1610
[ 75.390999][ T904] ? ext4_readpage+0x2e0/0x2e0
[ 75.396201][ T904] do_writepages+0x48d/0x6d0
[ 75.401132][ T904] ? __writepage+0x130/0x130
[ 75.405885][ T904] ? writeback_sb_inodes+0x65b/0x1610
[ 75.411525][ T904] ? __lock_acquire+0x7c60/0x7c60
[ 75.416546][ T904] ? do_raw_spin_lock+0x11d/0x280
[ 75.421922][ T904] __writeback_single_inode+0x153/0xda0
[ 75.427716][ T904] writeback_sb_inodes+0x9fe/0x1610
[ 75.433086][ T904] ? queue_io+0x550/0x550
[ 75.437575][ T904] ? rcu_is_watching+0x11/0xa0
[ 75.442966][ T904] wb_writeback+0x443/0xb90
[ 75.447748][ T904] ? rcu_lock_release+0x20/0x20
[ 75.452625][ T904] ? lockdep_hardirqs_on_prepare+0x3fc/0x760
[ 75.458860][ T904] ? mark_lock+0x94/0x320
[ 75.463182][ T904] ? _raw_spin_unlock_irq+0x1f/0x40
[ 75.468381][ T904] wb_workfn+0x423/0xe60
[ 75.472837][ T904] ? inode_wait_for_writeback+0x200/0x200
[ 75.478927][ T904] ? lockdep_hardirqs_on_prepare+0x3fc/0x760
[ 75.485135][ T904] ? read_lock_is_recursive+0x10/0x10
[ 75.490671][ T904] ? _raw_spin_unlock_irqrestore+0xaa/0x100
[ 75.496987][ T904] ? _raw_spin_unlock+0x40/0x40
[ 75.501836][ T904] ? _raw_spin_unlock_irq+0x1f/0x40
[ 75.507128][ T904] process_one_work+0x863/0x1000
[ 75.512236][ T904] ? worker_detach_from_pool+0x240/0x240
[ 75.518037][ T904] ? lockdep_hardirqs_off+0x70/0x100
[ 75.523412][ T904] ? _raw_spin_lock_irq+0xab/0xe0
[ 75.529304][ T904] ? _raw_spin_lock_irqsave+0xf0/0xf0
[ 75.535123][ T904] ? wq_worker_running+0x97/0x170
[ 75.540378][ T904] worker_thread+0xaa8/0x12a0
[ 75.545783][ T904] ? lockdep_hardirqs_on+0x94/0x140
[ 75.551505][ T904] ? lockdep_hardirqs_on+0x94/0x140
[ 75.556699][ T904] ? _raw_spin_unlock_irqrestore+0xaa/0x100
[ 75.562596][ T904] kthread+0x436/0x520
[ 75.566653][ T904] ? rcu_lock_release+0x20/0x20
[ 75.571748][ T904] ? kthread_blkcg+0xd0/0xd0
[ 75.576864][ T904] ret_from_fork+0x1f/0x30
[ 75.581317][ T904]
[ 75.584919][ T904] Kernel Offset: disabled
[ 75.589445][ T904] Rebooting in 86400 seconds..