[ 76.373471][ T1107] cfg80211: failed to load regulatory.db Warning: Permanently added '10.128.0.233' (ED25519) to the list of known hosts. 2026/02/13 02:47:15 parsed 1 programs [ 84.661679][ T4603] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 86.530007][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.541006][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.550319][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 86.571640][ T1167] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.579470][ T1167] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.587652][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 87.649636][ T144] ODEBUG: Out of memory. ODEBUG disabled [ 87.792400][ T4661] chnl_net:caif_netlink_parms(): no params data found [ 87.877767][ T4661] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.885042][ T4661] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.893264][ T4661] device bridge_slave_0 entered promiscuous mode [ 87.905421][ T4661] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.912625][ T4661] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.920190][ T4661] device bridge_slave_1 entered promiscuous mode [ 87.936997][ T4661] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.947421][ T4661] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.966993][ T4661] team0: Port device team_slave_0 added [ 87.973976][ T4661] team0: Port device team_slave_1 added [ 87.988668][ T4661] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.995647][ T4661] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.021798][ T4661] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.034563][ T4661] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.041689][ T4661] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.068275][ T4661] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.105590][ T4661] device hsr_slave_0 entered promiscuous mode [ 88.112354][ T4661] device hsr_slave_1 entered promiscuous mode [ 88.569823][ T4661] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 88.579174][ T4661] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 88.614069][ T4661] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 88.627786][ T4661] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 88.705966][ T4661] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.740264][ T4661] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.748490][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 88.758184][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 88.774139][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 88.784168][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 88.793193][ T4311] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.800255][ T4311] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.809928][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 88.819266][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 88.828041][ T4311] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.835136][ T4311] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.843682][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 88.860042][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 88.890408][ T4661] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 88.904190][ T4661] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 88.915873][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 88.926258][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 88.936013][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 88.946874][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 88.956181][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 88.966148][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 88.975184][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 88.984993][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 88.994009][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 89.023977][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 89.033653][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 89.161956][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 89.169378][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 89.186696][ T4661] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.205433][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 89.214768][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 89.235470][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 89.245995][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 89.256127][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 89.265104][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 89.275394][ T4661] device veth0_vlan entered promiscuous mode [ 89.287883][ T4661] device veth1_vlan entered promiscuous mode [ 89.331563][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 89.351007][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 89.362698][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 89.374020][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 89.385371][ T4661] device veth0_macvtap entered promiscuous mode [ 89.404271][ T4661] device veth1_macvtap entered promiscuous mode [ 89.429778][ T4661] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.446708][ T4661] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.459156][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 89.468393][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 89.491581][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 89.508618][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 89.522487][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 89.531787][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 89.546870][ T4661] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.557682][ T4661] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.572488][ T4661] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.581877][ T4661] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 2026/02/13 02:47:23 executed programs: 0 [ 90.651598][ T4785] chnl_net:caif_netlink_parms(): no params data found [ 90.736145][ T4785] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.744989][ T4785] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.757017][ T4785] device bridge_slave_0 entered promiscuous mode [ 90.769799][ T4785] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.778399][ T4785] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.802870][ T4785] device bridge_slave_1 entered promiscuous mode [ 90.853151][ T4785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.867168][ T4785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.887880][ T144] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.924043][ T4785] team0: Port device team_slave_0 added [ 90.940497][ T4785] team0: Port device team_slave_1 added [ 90.966075][ T4785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.974082][ T4785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.002482][ T4785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.015296][ T4785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.022599][ T4785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.048562][ T4785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.082159][ T4785] device hsr_slave_0 entered promiscuous mode [ 91.088833][ T4785] device hsr_slave_1 entered promiscuous mode [ 91.095971][ T4785] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.103842][ T4785] Cannot create hsr debugfs directory [ 92.530953][ T4677] Bluetooth: hci0: command 0x0409 tx timeout [ 93.495740][ T144] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.124452][ T144] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.185070][ T144] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.621009][ T4665] Bluetooth: hci0: command 0x041b tx timeout [ 94.948859][ T144] device hsr_slave_0 left promiscuous mode [ 94.955219][ T144] device hsr_slave_1 left promiscuous mode [ 94.962466][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 94.969845][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 94.977630][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 94.985046][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 94.992647][ T144] device bridge_slave_1 left promiscuous mode [ 94.998963][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.007143][ T144] device bridge_slave_0 left promiscuous mode [ 95.013571][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.024507][ T144] device veth1_macvtap left promiscuous mode [ 95.030523][ T144] device veth0_macvtap left promiscuous mode [ 95.037033][ T144] device veth1_vlan left promiscuous mode [ 95.042934][ T144] device veth0_vlan left promiscuous mode [ 95.140026][ T144] team0 (unregistering): Port device team_slave_1 removed [ 95.152556][ T144] team0 (unregistering): Port device team_slave_0 removed [ 95.162918][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 95.177013][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 95.217975][ T144] bond0 (unregistering): Released all slaves [ 95.255695][ T4785] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 95.264700][ T4785] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 95.273102][ T4785] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 95.282006][ T4785] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 95.331871][ T4785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.343242][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 95.351713][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 95.361508][ T4785] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.376490][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 95.396368][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 95.404889][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.411963][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.419511][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 95.428442][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 95.436980][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.444074][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.451814][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 95.460300][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 95.487307][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 95.496566][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 95.506209][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 95.514909][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 95.524385][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 95.532769][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 95.541213][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 95.549318][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 95.557848][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 95.566367][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 95.576061][ T4785] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 95.652427][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 95.659844][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 95.672305][ T4785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.690589][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 95.699325][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 95.719031][ T4785] device veth0_vlan entered promiscuous mode [ 95.725807][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 95.738666][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 95.747283][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 95.756376][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 95.768466][ T4785] device veth1_vlan entered promiscuous mode [ 95.789056][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 95.798929][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 95.808808][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 95.817689][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 95.829398][ T4785] device veth0_macvtap entered promiscuous mode [ 95.839178][ T4785] device veth1_macvtap entered promiscuous mode [ 95.854771][ T4785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.862603][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 95.871672][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 95.879624][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 95.888535][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 95.901350][ T4785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.908864][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 95.918357][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 95.929616][ T4785] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.939012][ T4785] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.948191][ T4785] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.958385][ T4785] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.010130][ T1227] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.023426][ T1227] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.040107][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready 2026/02/13 02:47:29 executed programs: 2 [ 96.054595][ T1167] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.062793][ T1167] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.070298][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 96.152385][ T5103] loop0: detected capacity change from 0 to 4096 [ 96.279294][ T5103] ntfs: (device loop0): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 96.307274][ T5103] ntfs: volume version 3.1. [ 96.316305][ T5103] ntfs: (device loop0): ntfs_lookup_inode_by_name(): Corrupt directory. Aborting lookup. [ 96.328007][ T5103] ntfs: (device loop0): load_and_init_usnjrnl(): Failed to find inode number for $UsnJrnl. [ 96.339550][ T5103] ntfs: (device loop0): load_system_files(): Failed to load $UsnJrnl. Mounting read-only. Run chkdsk. [ 96.359554][ T4785] ntfs: (device loop0): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set maccenteuro. You might want to try to use the mount option nls=utf8. [ 96.380033][ T4785] ntfs: (device loop0): ntfs_filldir(): Skipping unrepresentable inode 0x4. [ 96.393216][ T4785] ================================================================== [ 96.401437][ T4785] BUG: KASAN: slab-out-of-bounds in ntfs_readdir+0xe19/0x35e0 [ 96.408914][ T4785] Read of size 1 at addr ffff888072dd4599 by task syz-executor/4785 [ 96.416891][ T4785] [ 96.419226][ T4785] CPU: 0 PID: 4785 Comm: syz-executor Not tainted syzkaller #0 [ 96.426848][ T4785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 96.436907][ T4785] Call Trace: [ 96.440181][ T4785] [ 96.443148][ T4785] dump_stack_lvl+0x188/0x250 [ 96.447830][ T4785] ? show_regs_print_info+0x20/0x20 [ 96.453034][ T4785] ? load_image+0x400/0x400 [ 96.457542][ T4785] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 96.463015][ T4785] print_address_description+0x60/0x2d0 [ 96.468566][ T4785] ? ntfs_readdir+0xe19/0x35e0 [ 96.473328][ T4785] kasan_report+0xdf/0x130 [ 96.477742][ T4785] ? ntfs_readdir+0xe19/0x35e0 [ 96.482504][ T4785] ntfs_readdir+0xe19/0x35e0 [ 96.487110][ T4785] ? rwsem_write_trylock+0x135/0x1c0 [ 96.492389][ T4785] ? clear_nonspinnable+0x60/0x60 [ 96.497405][ T4785] ? ntfs_unmap_page+0x200/0x200 [ 96.502351][ T4785] iterate_dir+0x218/0x560 [ 96.506770][ T4785] __se_sys_getdents64+0xf2/0x270 [ 96.511790][ T4785] ? __x64_sys_getdents64+0x80/0x80 [ 96.516984][ T4785] ? filldir+0x720/0x720 [ 96.521222][ T4785] ? vtime_user_exit+0x2c8/0x3e0 [ 96.526163][ T4785] ? lockdep_hardirqs_on+0x94/0x140 [ 96.531360][ T4785] do_syscall_64+0x4c/0xa0 [ 96.535771][ T4785] ? clear_bhb_loop+0x30/0x80 [ 96.540443][ T4785] ? clear_bhb_loop+0x30/0x80 [ 96.545114][ T4785] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 96.551012][ T4785] RIP: 0033:0x7f45c4da5d73 [ 96.555427][ T4785] Code: c7 c0 e8 ff ff ff 64 c7 00 16 00 00 00 31 c0 eb 9e e8 81 9b fd ff 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 e8 ff ff ff f7 d8 [ 96.575033][ T4785] RSP: 002b:00007ffcb57f2c98 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 96.583453][ T4785] RAX: ffffffffffffffda RBX: 0000555584273a70 RCX: 00007f45c4da5d73 [ 96.591418][ T4785] RDX: 0000000000008000 RSI: 0000555584273aa0 RDI: 0000000000000006 [ 96.599387][ T4785] RBP: 0000555584273aa0 R08: 00007f45c4f50ca0 R09: 0000000000000001 [ 96.607358][ T4785] R10: 0000000000000000 R11: 0000000000000293 R12: 0000555584273a74 [ 96.615324][ T4785] R13: ffffffffffffffe8 R14: 0000000000000016 R15: 0000000000000001 [ 96.623321][ T4785] [ 96.626329][ T4785] [ 96.628656][ T4785] Allocated by task 4785: [ 96.632970][ T4785] __kasan_kmalloc+0xb5/0xf0 [ 96.637554][ T4785] ntfs_readdir+0x765/0x35e0 [ 96.642133][ T4785] iterate_dir+0x218/0x560 [ 96.646536][ T4785] __se_sys_getdents64+0xf2/0x270 [ 96.651546][ T4785] do_syscall_64+0x4c/0xa0 [ 96.655946][ T4785] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 96.661818][ T4785] [ 96.664124][ T4785] The buggy address belongs to the object at ffff888072dd4400 [ 96.664124][ T4785] which belongs to the cache kmalloc-512 of size 512 [ 96.678154][ T4785] The buggy address is located 409 bytes inside of [ 96.678154][ T4785] 512-byte region [ffff888072dd4400, ffff888072dd4600) [ 96.691405][ T4785] The buggy address belongs to the page: [ 96.697033][ T4785] page:ffffea0001cb7500 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x72dd4 [ 96.707163][ T4785] head:ffffea0001cb7500 order:2 compound_mapcount:0 compound_pincount:0 [ 96.715549][ T4785] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 96.723524][ T4785] raw: 00fff00000010200 ffffea0001e57d00 0000000600000006 ffff888016c41c80 [ 96.732086][ T4785] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 96.740642][ T4785] page dumped because: kasan: bad access detected [ 96.747039][ T4785] page_owner tracks the page as allocated [ 96.752730][ T4785] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 4230, ts 53343375583, free_ts 52593731917 [ 96.773194][ T4785] get_page_from_freelist+0x1bbd/0x1ca0 [ 96.778788][ T4785] __alloc_pages+0x1ee/0x480 [ 96.783359][ T4785] new_slab+0xc0/0x4b0 [ 96.787411][ T4785] ___slab_alloc+0x80a/0xdd0 [ 96.792070][ T4785] __kmalloc_node_track_caller+0x1fc/0x3a0 [ 96.797854][ T4785] __alloc_skb+0x22c/0x750 [ 96.802269][ T4785] inet_netconf_notify_devconf+0x16f/0x230 [ 96.808144][ T4785] __devinet_sysctl_register+0x32a/0x3a0 [ 96.813757][ T4785] devinet_sysctl_register+0x17c/0x1f0 [ 96.819194][ T4785] inetdev_init+0x28c/0x4d0 [ 96.823675][ T4785] inetdev_event+0x26f/0x1370 [ 96.828337][ T4785] raw_notifier_call_chain+0xcb/0x160 [ 96.833684][ T4785] register_netdevice+0x12a6/0x1710 [ 96.838861][ T4785] macvlan_common_newlink+0x1095/0x1810 [ 96.844388][ T4785] macvtap_newlink+0x150/0x1d0 [ 96.849129][ T4785] rtnl_newlink+0x1359/0x1a50 [ 96.853783][ T4785] page last free stack trace: [ 96.858432][ T4785] free_unref_page_prepare+0x637/0x6c0 [ 96.863868][ T4785] free_unref_page+0x8f/0x2a0 [ 96.868522][ T4785] __vunmap+0x8b9/0xa50 [ 96.872655][ T4785] kcov_close+0x27/0x50 [ 96.876794][ T4785] __fput+0x234/0x930 [ 96.880756][ T4785] task_work_run+0x125/0x1a0 [ 96.885326][ T4785] do_exit+0x626/0x20c0 [ 96.889457][ T4785] do_group_exit+0x12e/0x300 [ 96.894025][ T4785] get_signal+0x6ca/0x12c0 [ 96.898418][ T4785] arch_do_signal_or_restart+0xe7/0x12c0 [ 96.904036][ T4785] exit_to_user_mode_loop+0x9e/0x130 [ 96.909298][ T4785] exit_to_user_mode_prepare+0xee/0x180 [ 96.914820][ T4785] syscall_exit_to_user_mode+0x16/0x40 [ 96.920261][ T4785] do_syscall_64+0x58/0xa0 [ 96.924659][ T4785] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 96.930626][ T4785] [ 96.932932][ T4785] Memory state around the buggy address: [ 96.938538][ T4785] ffff888072dd4480: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 96.946575][ T4785] ffff888072dd4500: 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc fc [ 96.954614][ T4785] >ffff888072dd4580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 96.962655][ T4785] ^ [ 96.967482][ T4785] ffff888072dd4600: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 96.975519][ T4785] ffff888072dd4680: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 96.983553][ T4785] ================================================================== [ 96.991591][ T4785] Disabling lock debugging due to kernel taint [ 96.998691][ T4679] Bluetooth: hci0: command 0x040f tx timeout [ 97.009024][ T4785] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 97.016224][ T4785] CPU: 1 PID: 4785 Comm: syz-executor Tainted: G B syzkaller #0 [ 97.025167][ T4785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 97.035213][ T4785] Call Trace: [ 97.038475][ T4785] [ 97.041425][ T4785] dump_stack_lvl+0x188/0x250 [ 97.046085][ T4785] ? show_regs_print_info+0x20/0x20 [ 97.051258][ T4785] ? load_image+0x400/0x400 [ 97.055739][ T4785] panic+0x2e5/0x810 [ 97.059608][ T4785] ? bpf_jit_dump+0xd0/0xd0 [ 97.064097][ T4785] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 97.070052][ T4785] ? _raw_spin_unlock+0x40/0x40 [ 97.074876][ T4785] ? ntfs_readdir+0xe19/0x35e0 [ 97.079614][ T4785] check_panic_on_warn+0x80/0xa0 [ 97.084528][ T4785] ? ntfs_readdir+0xe19/0x35e0 [ 97.089265][ T4785] end_report+0x6d/0xf0 [ 97.093397][ T4785] kasan_report+0x102/0x130 [ 97.097878][ T4785] ? ntfs_readdir+0xe19/0x35e0 [ 97.102623][ T4785] ntfs_readdir+0xe19/0x35e0 [ 97.107192][ T4785] ? rwsem_write_trylock+0x135/0x1c0 [ 97.112449][ T4785] ? clear_nonspinnable+0x60/0x60 [ 97.117450][ T4785] ? ntfs_unmap_page+0x200/0x200 [ 97.122476][ T4785] iterate_dir+0x218/0x560 [ 97.126893][ T4785] __se_sys_getdents64+0xf2/0x270 [ 97.131891][ T4785] ? __x64_sys_getdents64+0x80/0x80 [ 97.137061][ T4785] ? filldir+0x720/0x720 [ 97.141277][ T4785] ? vtime_user_exit+0x2c8/0x3e0 [ 97.146190][ T4785] ? lockdep_hardirqs_on+0x94/0x140 [ 97.151364][ T4785] do_syscall_64+0x4c/0xa0 [ 97.155750][ T4785] ? clear_bhb_loop+0x30/0x80 [ 97.160395][ T4785] ? clear_bhb_loop+0x30/0x80 [ 97.165041][ T4785] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 97.170911][ T4785] RIP: 0033:0x7f45c4da5d73 [ 97.175317][ T4785] Code: c7 c0 e8 ff ff ff 64 c7 00 16 00 00 00 31 c0 eb 9e e8 81 9b fd ff 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 e8 ff ff ff f7 d8 [ 97.194935][ T4785] RSP: 002b:00007ffcb57f2c98 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 97.203325][ T4785] RAX: ffffffffffffffda RBX: 0000555584273a70 RCX: 00007f45c4da5d73 [ 97.211273][ T4785] RDX: 0000000000008000 RSI: 0000555584273aa0 RDI: 0000000000000006 [ 97.219216][ T4785] RBP: 0000555584273aa0 R08: 00007f45c4f50ca0 R09: 0000000000000001 [ 97.227162][ T4785] R10: 0000000000000000 R11: 0000000000000293 R12: 0000555584273a74 [ 97.235193][ T4785] R13: ffffffffffffffe8 R14: 0000000000000016 R15: 0000000000000001 [ 97.243143][ T4785] [ 97.246528][ T4785] Kernel Offset: disabled [ 97.250834][ T4785] Rebooting in 86400 seconds..