Warning: Permanently added '10.128.0.181' (ED25519) to the list of known hosts. 2025/12/03 07:54:31 parsed 1 programs [ 86.969923][ T4640] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 88.975018][ T4679] chnl_net:caif_netlink_parms(): no params data found [ 89.032451][ T4679] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.039866][ T4679] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.049448][ T4679] device bridge_slave_0 entered promiscuous mode [ 89.058128][ T4679] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.066609][ T4679] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.075134][ T4679] device bridge_slave_1 entered promiscuous mode [ 89.104056][ T4679] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.116535][ T4679] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.145973][ T4679] team0: Port device team_slave_0 added [ 89.153776][ T4679] team0: Port device team_slave_1 added [ 89.176531][ T4679] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.184726][ T4679] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.213397][ T4679] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.233945][ T4679] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.241027][ T4679] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.267508][ T4679] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.305049][ T4679] device hsr_slave_0 entered promiscuous mode [ 89.312366][ T4679] device hsr_slave_1 entered promiscuous mode [ 89.833059][ T4679] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 89.851450][ T4679] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 89.873803][ T4679] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 89.893543][ T4679] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 90.009309][ T4679] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.023987][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 90.032576][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 90.043123][ T4679] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.055044][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 90.064392][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 90.089246][ T4242] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.096409][ T4242] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.117556][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 90.132451][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 90.143368][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 90.153135][ T4242] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.160218][ T4242] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.170246][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 90.180073][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 90.200529][ T4679] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 90.218803][ T4679] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 90.242884][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 90.260009][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 90.268991][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 90.279841][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 90.288664][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 90.298555][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 90.307604][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 90.317366][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 90.331785][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 90.340319][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 90.448314][ T1249] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 90.457741][ T1249] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 90.471595][ T4679] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.491546][ T1249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 90.502642][ T1249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 90.521880][ T1249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 90.533551][ T1249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 90.543117][ T4679] device veth0_vlan entered promiscuous mode [ 90.551165][ T1249] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 90.560042][ T1249] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 90.589823][ T4679] device veth1_vlan entered promiscuous mode [ 90.614488][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 90.624010][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 90.632845][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 90.642854][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 90.653051][ T4679] device veth0_macvtap entered promiscuous mode [ 90.682494][ T4679] device veth1_macvtap entered promiscuous mode [ 90.698957][ T4679] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.706938][ T1249] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 90.716437][ T1249] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 90.731816][ T1249] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 90.742789][ T1249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 90.754077][ T4679] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.765245][ T1249] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 90.774361][ T1249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 90.786337][ T4679] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.796092][ T4679] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.805387][ T4679] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.815776][ T4679] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.698362][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.721358][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.742751][ T1249] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 92.762652][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.780823][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.792243][ T1249] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 93.384233][ T1214] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2025/12/03 07:54:40 executed programs: 0 [ 93.616827][ T4876] chnl_net:caif_netlink_parms(): no params data found [ 93.669592][ T4876] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.676914][ T4876] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.685094][ T4876] device bridge_slave_0 entered promiscuous mode [ 93.693543][ T4876] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.700897][ T4876] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.708800][ T4876] device bridge_slave_1 entered promiscuous mode [ 93.738384][ T4876] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.752963][ T4876] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.785228][ T4876] team0: Port device team_slave_0 added [ 93.793624][ T4876] team0: Port device team_slave_1 added [ 93.818689][ T4876] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.826088][ T4876] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.855565][ T4876] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.868134][ T4876] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.875759][ T4876] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.902688][ T4876] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.939051][ T4876] device hsr_slave_0 entered promiscuous mode [ 93.946151][ T4876] device hsr_slave_1 entered promiscuous mode [ 93.953221][ T4876] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.962177][ T4876] Cannot create hsr debugfs directory [ 95.476086][ T1214] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.521397][ T1110] Bluetooth: hci0: command 0x0409 tx timeout [ 95.533954][ T1214] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.581061][ T1214] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.371234][ T4876] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 96.383121][ T4876] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 96.392887][ T4876] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 96.407392][ T4876] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 96.452240][ T4876] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.474806][ T1249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 96.483370][ T1249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 96.494267][ T4876] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.518601][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 96.528159][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 96.537519][ T4242] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.544673][ T4242] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.553501][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 96.575644][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 96.584302][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 96.592858][ T4242] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.599907][ T4242] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.607952][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 96.617037][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 96.625820][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 96.634583][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 96.643316][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 96.652162][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 96.660577][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 96.669145][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 96.695244][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 96.705845][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 96.714588][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 96.737326][ T4876] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 96.824668][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 96.832729][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 96.852920][ T4876] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.869118][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 96.879028][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 96.918235][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 96.926806][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 96.935780][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 96.943917][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 96.955764][ T4876] device veth0_vlan entered promiscuous mode [ 96.968043][ T4876] device veth1_vlan entered promiscuous mode [ 96.998313][ T1214] device hsr_slave_0 left promiscuous mode [ 97.004871][ T1214] device hsr_slave_1 left promiscuous mode [ 97.012043][ T1214] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 97.019492][ T1214] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 97.027882][ T1214] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 97.036743][ T1214] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 97.044730][ T1214] device bridge_slave_1 left promiscuous mode [ 97.051232][ T1214] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.060172][ T1214] device bridge_slave_0 left promiscuous mode [ 97.066947][ T1214] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.078934][ T1214] device veth1_macvtap left promiscuous mode [ 97.085180][ T1214] device veth0_macvtap left promiscuous mode [ 97.091305][ T1214] device veth1_vlan left promiscuous mode [ 97.097063][ T1214] device veth0_vlan left promiscuous mode [ 97.222277][ T1214] team0 (unregistering): Port device team_slave_1 removed [ 97.235030][ T1214] team0 (unregistering): Port device team_slave_0 removed [ 97.246510][ T1214] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 97.260136][ T1214] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 97.308733][ T1214] bond0 (unregistering): Released all slaves [ 97.357500][ T4876] device veth0_macvtap entered promiscuous mode [ 97.367758][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 97.377153][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 97.385405][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 97.394762][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 97.404110][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 97.413749][ T4876] device veth1_macvtap entered promiscuous mode [ 97.432624][ T4876] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.439996][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 97.448823][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 97.458068][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 97.469761][ T4876] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.480035][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 97.490755][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 97.502991][ T4876] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.511888][ T4876] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.520585][ T4876] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.530134][ T4876] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.611022][ T23] Bluetooth: hci0: command 0x041b tx timeout [ 97.617591][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.632904][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.644108][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 97.653122][ T4242] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.663036][ T4242] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.672727][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 97.766241][ T5092] loop0: detected capacity change from 0 to 4096 [ 97.798746][ T5092] ntfs: (device loop0): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 97.831716][ T5092] ntfs: (device loop0): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 97.861157][ T5092] ntfs: (device loop0): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 97.880511][ T5092] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 97.894185][ T5092] ntfs: (device loop0): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 97.907210][ T5092] ntfs: volume version 3.1. [ 97.915083][ T5092] ntfs: (device loop0): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 97.930287][ T5092] ntfs: (device loop0): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 97.945932][ T5092] ntfs: (device loop0): ntfs_lookup_inode_by_name(): Corrupt directory. Aborting lookup. [ 97.956270][ T5092] ntfs: (device loop0): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 97.969384][ T5092] ntfs: (device loop0): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 98.014358][ T4876] ================================================================== [ 98.022759][ T4876] BUG: KASAN: slab-out-of-bounds in ntfs_readdir+0xdda/0x3550 [ 98.030248][ T4876] Read of size 1 at addr ffff888027a1cb61 by task syz-executor/4876 [ 98.038314][ T4876] [ 98.040656][ T4876] CPU: 1 PID: 4876 Comm: syz-executor Not tainted syzkaller #0 [ 98.048203][ T4876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 98.058367][ T4876] Call Trace: [ 98.061652][ T4876] [ 98.064574][ T4876] dump_stack_lvl+0x168/0x230 [ 98.069266][ T4876] ? show_regs_print_info+0x20/0x20 [ 98.074465][ T4876] ? load_image+0x3b0/0x3b0 [ 98.078961][ T4876] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 98.084332][ T4876] print_address_description+0x60/0x2d0 [ 98.089872][ T4876] ? ntfs_readdir+0xdda/0x3550 [ 98.094639][ T4876] kasan_report+0xdf/0x130 [ 98.099075][ T4876] ? ntfs_readdir+0xdda/0x3550 [ 98.103836][ T4876] ? unmap_mft_record+0x171/0x2e0 [ 98.108865][ T4876] ntfs_readdir+0xdda/0x3550 [ 98.113560][ T4876] ? __might_sleep+0xf0/0xf0 [ 98.118141][ T4876] ? preempt_count_add+0x8d/0x190 [ 98.123171][ T4876] ? rwsem_write_trylock+0x12f/0x1b0 [ 98.128546][ T4876] ? clear_nonspinnable+0x60/0x60 [ 98.133565][ T4876] ? ntfs_unmap_page+0x200/0x200 [ 98.138517][ T4876] iterate_dir+0x218/0x560 [ 98.143023][ T4876] __se_sys_getdents64+0xe5/0x260 [ 98.148048][ T4876] ? __x64_sys_getdents64+0x80/0x80 [ 98.153250][ T4876] ? filldir+0x720/0x720 [ 98.157494][ T4876] ? vtime_user_exit+0x2dc/0x400 [ 98.162448][ T4876] ? lockdep_hardirqs_on+0x94/0x140 [ 98.167650][ T4876] do_syscall_64+0x4c/0xa0 [ 98.172056][ T4876] ? clear_bhb_loop+0x30/0x80 [ 98.176727][ T4876] ? clear_bhb_loop+0x30/0x80 [ 98.181396][ T4876] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 98.187297][ T4876] RIP: 0033:0x7ff5214fa553 [ 98.191709][ T4876] Code: c1 66 0f 1f 44 00 00 48 83 c4 08 48 89 ef 5b 5d e9 52 3e f8 ff 66 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 a8 ff ff ff f7 d8 [ 98.211319][ T4876] RSP: 002b:00007fff58dd0508 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 98.219877][ T4876] RAX: ffffffffffffffda RBX: 000055558538e600 RCX: 00007ff5214fa553 [ 98.227846][ T4876] RDX: 0000000000008000 RSI: 000055558538e600 RDI: 0000000000000005 [ 98.235811][ T4876] RBP: 000055558538e5d4 R08: 0000000000028a41 R09: 0000000000000000 [ 98.243864][ T4876] R10: 00007ff5216d0cc0 R11: 0000000000000293 R12: ffffffffffffffa8 [ 98.251842][ T4876] R13: 0000000000000010 R14: 000055558538e5d0 R15: 00007fff58dd27c0 [ 98.259827][ T4876] [ 98.262842][ T4876] [ 98.265161][ T4876] Allocated by task 4876: [ 98.269476][ T4876] __kasan_kmalloc+0xb5/0xf0 [ 98.274149][ T4876] ntfs_readdir+0x798/0x3550 [ 98.278732][ T4876] iterate_dir+0x218/0x560 [ 98.283144][ T4876] __se_sys_getdents64+0xe5/0x260 [ 98.288160][ T4876] do_syscall_64+0x4c/0xa0 [ 98.292564][ T4876] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 98.298448][ T4876] [ 98.300759][ T4876] The buggy address belongs to the object at ffff888027a1cb00 [ 98.300759][ T4876] which belongs to the cache kmalloc-64 of size 64 [ 98.314630][ T4876] The buggy address is located 33 bytes to the right of [ 98.314630][ T4876] 64-byte region [ffff888027a1cb00, ffff888027a1cb40) [ 98.328399][ T4876] The buggy address belongs to the page: [ 98.334053][ T4876] page:ffffea00009e8700 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x27a1c [ 98.344293][ T4876] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 98.351848][ T4876] raw: 00fff00000000200 ffffea0001defa80 000000180000000b ffff888016841640 [ 98.360442][ T4876] raw: 0000000000000000 0000000080200020 00000001ffffffff 0000000000000000 [ 98.369013][ T4876] page dumped because: kasan: bad access detected [ 98.375429][ T4876] page_owner tracks the page as allocated [ 98.381132][ T4876] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 1, ts 9419597433, free_ts 0 [ 98.396057][ T4876] get_page_from_freelist+0x1b77/0x1c60 [ 98.401619][ T4876] __alloc_pages+0x1e1/0x470 [ 98.406215][ T4876] alloc_page_interleave+0x24/0x1e0 [ 98.411426][ T4876] new_slab+0xc0/0x4b0 [ 98.415490][ T4876] ___slab_alloc+0x81e/0xdf0 [ 98.420084][ T4876] __kmalloc+0x1cd/0x330 [ 98.424316][ T4876] handler_new_ref+0x20b/0x950 [ 98.429075][ T4876] v4l2_ctrl_add_handler+0x197/0x280 [ 98.434380][ T4876] vivid_create_controls+0x2b6a/0x33b0 [ 98.439836][ T4876] vivid_probe+0x3cde/0x6950 [ 98.444421][ T4876] platform_probe+0x137/0x1c0 [ 98.449090][ T4876] really_probe+0x284/0xc80 [ 98.453637][ T4876] __driver_probe_device+0x18c/0x330 [ 98.458940][ T4876] driver_probe_device+0x4f/0x420 [ 98.464057][ T4876] __driver_attach+0x46b/0x670 [ 98.468815][ T4876] bus_for_each_dev+0x175/0x1e0 [ 98.473657][ T4876] page_owner free stack trace missing [ 98.479015][ T4876] [ 98.481335][ T4876] Memory state around the buggy address: [ 98.486957][ T4876] ffff888027a1ca00: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 98.495102][ T4876] ffff888027a1ca80: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 98.503158][ T4876] >ffff888027a1cb00: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc 2025/12/03 07:54:46 executed programs: 3 [ 98.511207][ T4876] ^ [ 98.518394][ T4876] ffff888027a1cb80: 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc [ 98.526446][ T4876] ffff888027a1cc00: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 98.534695][ T4876] ================================================================== [ 98.542757][ T4876] Disabling lock debugging due to kernel taint [ 98.562561][ T4876] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 98.569874][ T4876] CPU: 1 PID: 4876 Comm: syz-executor Tainted: G B syzkaller #0 [ 98.578895][ T4876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 98.588951][ T4876] Call Trace: [ 98.592319][ T4876] [ 98.595262][ T4876] dump_stack_lvl+0x168/0x230 [ 98.599924][ T4876] ? show_regs_print_info+0x20/0x20 [ 98.605096][ T4876] ? load_image+0x3b0/0x3b0 [ 98.609579][ T4876] panic+0x2c9/0x7f0 [ 98.613454][ T4876] ? bpf_jit_dump+0xd0/0xd0 [ 98.617932][ T4876] ? _raw_spin_unlock_irqrestore+0xf6/0x100 [ 98.623798][ T4876] ? _raw_spin_unlock+0x40/0x40 [ 98.628621][ T4876] ? ntfs_readdir+0xdda/0x3550 [ 98.633358][ T4876] check_panic_on_warn+0x80/0xa0 [ 98.638275][ T4876] ? ntfs_readdir+0xdda/0x3550 [ 98.643019][ T4876] end_report+0x6d/0xf0 [ 98.647165][ T4876] kasan_report+0x102/0x130 [ 98.651649][ T4876] ? ntfs_readdir+0xdda/0x3550 [ 98.656399][ T4876] ? unmap_mft_record+0x171/0x2e0 [ 98.661398][ T4876] ntfs_readdir+0xdda/0x3550 [ 98.665967][ T4876] ? __might_sleep+0xf0/0xf0 [ 98.670529][ T4876] ? preempt_count_add+0x8d/0x190 [ 98.675535][ T4876] ? rwsem_write_trylock+0x12f/0x1b0 [ 98.680797][ T4876] ? clear_nonspinnable+0x60/0x60 [ 98.685795][ T4876] ? ntfs_unmap_page+0x200/0x200 [ 98.690713][ T4876] iterate_dir+0x218/0x560 [ 98.695120][ T4876] __se_sys_getdents64+0xe5/0x260 [ 98.700122][ T4876] ? __x64_sys_getdents64+0x80/0x80 [ 98.705294][ T4876] ? filldir+0x720/0x720 [ 98.709654][ T4876] ? vtime_user_exit+0x2dc/0x400 [ 98.714592][ T4876] ? lockdep_hardirqs_on+0x94/0x140 [ 98.719781][ T4876] do_syscall_64+0x4c/0xa0 [ 98.724179][ T4876] ? clear_bhb_loop+0x30/0x80 [ 98.728845][ T4876] ? clear_bhb_loop+0x30/0x80 [ 98.733502][ T4876] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 98.739374][ T4876] RIP: 0033:0x7ff5214fa553 [ 98.743766][ T4876] Code: c1 66 0f 1f 44 00 00 48 83 c4 08 48 89 ef 5b 5d e9 52 3e f8 ff 66 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 a8 ff ff ff f7 d8 [ 98.763524][ T4876] RSP: 002b:00007fff58dd0508 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 98.771917][ T4876] RAX: ffffffffffffffda RBX: 000055558538e600 RCX: 00007ff5214fa553 [ 98.779869][ T4876] RDX: 0000000000008000 RSI: 000055558538e600 RDI: 0000000000000005 [ 98.787939][ T4876] RBP: 000055558538e5d4 R08: 0000000000028a41 R09: 0000000000000000 [ 98.795897][ T4876] R10: 00007ff5216d0cc0 R11: 0000000000000293 R12: ffffffffffffffa8 [ 98.803855][ T4876] R13: 0000000000000010 R14: 000055558538e5d0 R15: 00007fff58dd27c0 [ 98.811821][ T4876] [ 98.815041][ T4876] Kernel Offset: disabled [ 98.819384][ T4876] Rebooting in 86400 seconds..