Warning: Permanently added '10.128.0.71' (ED25519) to the list of known hosts. 2026/08/03 18:37:33 parsed 1 programs [ 108.976833][ T4493] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 111.244578][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.259826][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.278851][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 111.305470][ T4321] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.314726][ T4321] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.326883][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 114.273517][ T4686] chnl_net:caif_netlink_parms(): no params data found [ 114.322138][ T4686] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.329763][ T4686] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.337991][ T4686] device bridge_slave_0 entered promiscuous mode [ 114.366276][ T4686] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.375280][ T4686] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.384661][ T4686] device bridge_slave_1 entered promiscuous mode [ 114.434729][ T4686] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 114.447720][ T4686] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 114.480325][ T4686] team0: Port device team_slave_0 added [ 114.503089][ T4686] team0: Port device team_slave_1 added [ 114.525717][ T4686] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 114.533708][ T4686] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.561196][ T4686] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 114.575470][ T4686] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 114.583392][ T4686] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.610991][ T4686] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 114.666085][ T4686] device hsr_slave_0 entered promiscuous mode [ 114.673862][ T4686] device hsr_slave_1 entered promiscuous mode [ 115.207228][ T4686] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 115.266571][ T4686] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 115.278158][ T4686] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 115.319990][ T4686] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 115.469304][ T4686] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.505799][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 115.526910][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 115.543580][ T4686] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.564328][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 115.590180][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 115.599934][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.607326][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.649022][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 115.659163][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 115.670321][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 115.682368][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.690075][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.701318][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 115.711672][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 115.746621][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 115.757476][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 115.766931][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 115.780217][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 115.790095][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 115.800564][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 115.815496][ T4686] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 115.827907][ T4686] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 115.838893][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 115.847554][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 115.856880][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 116.080426][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 116.088049][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 116.106199][ T4686] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.136477][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 116.159033][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 116.195427][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 116.219158][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 116.228736][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 116.248685][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 116.276177][ T4686] device veth0_vlan entered promiscuous mode [ 116.294116][ T4686] device veth1_vlan entered promiscuous mode [ 116.311872][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 116.329241][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 116.352303][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 116.362031][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 116.375559][ T4686] device veth0_macvtap entered promiscuous mode [ 116.398115][ T4686] device veth1_macvtap entered promiscuous mode [ 116.421038][ T4686] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 116.432683][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 116.442342][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 116.456457][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 116.467447][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 116.496348][ T4686] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 116.508608][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 116.528766][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 116.554127][ T4686] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.579329][ T4686] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.599080][ T4686] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.608084][ T4686] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 2026/08/03 18:37:47 executed programs: 0 [ 117.991521][ T1236] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.061346][ T4779] chnl_net:caif_netlink_parms(): no params data found [ 118.132250][ T4779] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.140983][ T4779] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.150365][ T4779] device bridge_slave_0 entered promiscuous mode [ 118.160068][ T4779] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.167781][ T4779] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.177039][ T4779] device bridge_slave_1 entered promiscuous mode [ 118.212975][ T4779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 118.225225][ T4779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 118.262678][ T4779] team0: Port device team_slave_0 added [ 118.272054][ T4779] team0: Port device team_slave_1 added [ 118.298465][ T4779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 118.306350][ T4779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.334214][ T4779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 118.349444][ T4779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 118.357097][ T4779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.385324][ T4779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 118.436698][ T4779] device hsr_slave_0 entered promiscuous mode [ 118.447134][ T4779] device hsr_slave_1 entered promiscuous mode [ 118.455585][ T4779] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 118.467262][ T4779] Cannot create hsr debugfs directory [ 119.829421][ T4270] Bluetooth: hci0: command 0x0409 tx timeout [ 120.216603][ T1236] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.786417][ T1236] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.857441][ T1236] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.698053][ T4779] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 121.714235][ T4779] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 121.752235][ T4779] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 121.763720][ T4779] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 121.909014][ T23] Bluetooth: hci0: command 0x041b tx timeout [ 121.921161][ T4779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 121.949647][ T1236] device hsr_slave_0 left promiscuous mode [ 121.956598][ T1236] device hsr_slave_1 left promiscuous mode [ 121.965508][ T1236] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 121.974751][ T1236] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 121.983679][ T1236] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 121.993032][ T1236] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 122.002745][ T1236] device bridge_slave_1 left promiscuous mode [ 122.011548][ T1236] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.023458][ T1236] device bridge_slave_0 left promiscuous mode [ 122.032129][ T1236] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.049096][ T1236] device veth1_macvtap left promiscuous mode [ 122.055399][ T1236] device veth0_macvtap left promiscuous mode [ 122.063434][ T1236] device veth1_vlan left promiscuous mode [ 122.071685][ T1236] device veth0_vlan left promiscuous mode [ 122.340613][ T1236] team0 (unregistering): Port device team_slave_1 removed [ 122.364949][ T1236] team0 (unregistering): Port device team_slave_0 removed [ 122.380094][ T1236] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 122.401080][ T1236] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 122.512086][ T1236] bond0 (unregistering): Released all slaves [ 122.591920][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 122.609050][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 122.639566][ T4779] 8021q: adding VLAN 0 to HW filter on device team0 [ 122.662153][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 122.679568][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 122.706111][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.715523][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.733866][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 122.750641][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 122.764949][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 122.777852][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.789412][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.809279][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 122.848069][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 122.859423][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 122.871618][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 122.901183][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 122.929596][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 122.940610][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 122.952821][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 122.964196][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 122.978175][ T4779] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 122.994659][ T4779] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 123.008090][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 123.031069][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 123.183068][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 123.192186][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 123.213546][ T4779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 123.247291][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 123.261147][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 123.287886][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 123.301960][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 123.321944][ T4779] device veth0_vlan entered promiscuous mode [ 123.330243][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 123.346033][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 123.361434][ T4779] device veth1_vlan entered promiscuous mode [ 123.406717][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 123.429655][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 123.448791][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 123.465041][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 123.491766][ T4779] device veth0_macvtap entered promiscuous mode [ 123.505573][ T4779] device veth1_macvtap entered promiscuous mode [ 123.544782][ T4779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 123.555578][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 123.567187][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 123.599166][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 123.619032][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 123.649584][ T4779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 123.662423][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 123.673793][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 123.689273][ T4779] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.702345][ T4779] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.713453][ T4779] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.726063][ T4779] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.844985][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.858695][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.874582][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready 2026/08/03 18:37:53 executed programs: 2 [ 123.902098][ T4321] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.915042][ T4321] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.927712][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 124.003117][ T4275] Bluetooth: hci0: command 0x040f tx timeout [ 124.091833][ T5039] loop0: detected capacity change from 0 to 4096 [ 124.196833][ T5039] ntfs: (device loop0): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 124.261154][ T5039] ntfs: volume version 3.1. [ 124.286166][ T5039] ntfs: (device loop0): ntfs_lookup_inode_by_name(): Corrupt directory. Aborting lookup. [ 124.308392][ T5039] ntfs: (device loop0): load_and_init_usnjrnl(): Failed to find inode number for $UsnJrnl. [ 124.332377][ T5039] ntfs: (device loop0): load_system_files(): Failed to load $UsnJrnl. Mounting read-only. Run chkdsk. [ 124.360042][ T4779] ntfs: (device loop0): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set maccenteuro. You might want to try to use the mount option nls=utf8. [ 124.402832][ T4779] ntfs: (device loop0): ntfs_filldir(): Skipping unrepresentable inode 0x4. [ 124.434697][ T4779] ================================================================== [ 124.443968][ T4779] BUG: KASAN: slab-out-of-bounds in ntfs_readdir+0xe21/0x3660 [ 124.451861][ T4779] Read of size 1 at addr ffff88802488a199 by task syz-executor/4779 [ 124.460121][ T4779] [ 124.462581][ T4779] CPU: 1 PID: 4779 Comm: syz-executor Not tainted syzkaller #0 [ 124.470169][ T4779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 124.480900][ T4779] Call Trace: [ 124.484586][ T4779] [ 124.487673][ T4779] dump_stack_lvl+0x188/0x250 [ 124.493323][ T4779] ? show_regs_print_info+0x20/0x20 [ 124.498848][ T4779] ? load_image+0x410/0x410 [ 124.503740][ T4779] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 124.509557][ T4779] ? uni2char+0x83/0xf0 [ 124.513856][ T4779] print_address_description+0x60/0x2d0 [ 124.522359][ T4779] ? ntfs_readdir+0xe21/0x3660 [ 124.527459][ T4779] kasan_report+0xdf/0x130 [ 124.533221][ T4779] ? ntfs_readdir+0xe21/0x3660 [ 124.538423][ T4779] ntfs_readdir+0xe21/0x3660 [ 124.544646][ T4779] ? aa_file_perm+0x38b/0xe80 [ 124.550278][ T4779] ? handle_mm_fault+0x2be3/0x4440 [ 124.555909][ T4779] ? rwsem_write_trylock+0x135/0x1c0 [ 124.562842][ T4779] ? ntfs_unmap_page+0x200/0x200 [ 124.568196][ T4779] ? end_current_label_crit_section+0x14b/0x170 [ 124.579392][ T4779] ? common_file_perm+0x171/0x1c0 [ 124.585968][ T4779] ? iterate_dir+0x133/0x550 [ 124.593464][ T4779] iterate_dir+0x213/0x550 [ 124.598797][ T4779] __se_sys_getdents64+0xf2/0x270 [ 124.605226][ T4779] ? __x64_sys_getdents64+0x80/0x80 [ 124.612543][ T4779] ? filldir+0x700/0x700 [ 124.618415][ T4779] ? lockdep_hardirqs_on+0x94/0x140 [ 124.624381][ T4779] do_syscall_64+0x4c/0xa0 [ 124.629376][ T4779] ? clear_bhb_loop+0x30/0x80 [ 124.634536][ T4779] ? clear_bhb_loop+0x30/0x80 [ 124.639488][ T4779] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 124.645524][ T4779] RIP: 0033:0x7ff2e0f28d73 [ 124.650487][ T4779] Code: c7 c0 e8 ff ff ff 64 c7 00 16 00 00 00 31 c0 eb 9e e8 81 9b fd ff 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 e8 ff ff ff f7 d8 [ 124.672991][ T4779] RSP: 002b:00007ffdb3b31f08 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 124.683578][ T4779] RAX: ffffffffffffffda RBX: 0000555572a68a90 RCX: 00007ff2e0f28d73 [ 124.693599][ T4779] RDX: 0000000000008000 RSI: 0000555572a68ac0 RDI: 0000000000000006 [ 124.704113][ T4779] RBP: 0000555572a68ac0 R08: 00007ff2e10d3ca0 R09: 0000000000000001 [ 124.714085][ T4779] R10: 0000000000000000 R11: 0000000000000293 R12: 0000555572a68a94 [ 124.724885][ T4779] R13: ffffffffffffffe8 R14: 0000000000000016 R15: 0000000000000001 [ 124.734072][ T4779] [ 124.737457][ T4779] [ 124.740207][ T4779] Allocated by task 4779: [ 124.746528][ T4779] __kasan_kmalloc+0xaf/0xe0 [ 124.752325][ T4779] ntfs_readdir+0x77a/0x3660 [ 124.757842][ T4779] iterate_dir+0x213/0x550 [ 124.763166][ T4779] __se_sys_getdents64+0xf2/0x270 [ 124.772352][ T4779] do_syscall_64+0x4c/0xa0 [ 124.778379][ T4779] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 124.789720][ T4779] [ 124.792994][ T4779] The buggy address belongs to the object at ffff88802488a000 [ 124.792994][ T4779] which belongs to the cache kmalloc-512 of size 512 [ 124.811705][ T4779] The buggy address is located 409 bytes inside of [ 124.811705][ T4779] 512-byte region [ffff88802488a000, ffff88802488a200) [ 124.827495][ T4779] The buggy address belongs to the page: [ 124.834316][ T4779] page:ffffea0000922200 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x24888 [ 124.846317][ T4779] head:ffffea0000922200 order:2 compound_mapcount:0 compound_pincount:0 [ 124.855994][ T4779] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 124.864975][ T4779] raw: 00fff00000010200 dead000000000100 dead000000000122 ffff888016c41c80 [ 124.874285][ T4779] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 124.884394][ T4779] page dumped because: kasan: bad access detected [ 124.891596][ T4779] page_owner tracks the page as allocated [ 124.898805][ T4779] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1843, ts 15995010182, free_ts 0 [ 124.920158][ T4779] get_page_from_freelist+0x24f6/0x2670 [ 124.927636][ T4779] __alloc_pages+0x1ee/0x480 [ 124.935922][ T4779] new_slab+0xc0/0x4b0 [ 124.941669][ T4779] ___slab_alloc+0x807/0xdd0 [ 124.947451][ T4779] kmem_cache_alloc_trace+0xf9/0x290 [ 124.954346][ T4779] alloc_bprm+0x56/0x690 [ 124.959788][ T4779] kernel_execve+0x49/0x8e0 [ 124.966147][ T4779] call_usermodehelper_exec_async+0x207/0x350 [ 124.972700][ T4779] ret_from_fork+0x1f/0x30 [ 124.977619][ T4779] page_owner free stack trace missing [ 124.983675][ T4779] [ 124.986544][ T4779] Memory state around the buggy address: [ 124.993579][ T4779] ffff88802488a080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 125.002225][ T4779] ffff88802488a100: 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc fc [ 125.010988][ T4779] >ffff88802488a180: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 125.020929][ T4779] ^ [ 125.026260][ T4779] ffff88802488a200: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 125.035584][ T4779] ffff88802488a280: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 125.044140][ T4779] ================================================================== [ 125.052613][ T4779] Disabling lock debugging due to kernel taint [ 125.080733][ T4779] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 125.089353][ T4779] CPU: 0 PID: 4779 Comm: syz-executor Tainted: G B syzkaller #0 [ 125.099738][ T4779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 125.112713][ T4779] Call Trace: [ 125.116425][ T4779] [ 125.120732][ T4779] dump_stack_lvl+0x188/0x250 [ 125.128102][ T4779] ? show_regs_print_info+0x20/0x20 [ 125.133916][ T4779] ? load_image+0x410/0x410 [ 125.139069][ T4779] panic+0x2f8/0x850 [ 125.143701][ T4779] ? bpf_jit_dump+0xd0/0xd0 [ 125.149679][ T4779] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 125.157169][ T4779] ? _raw_spin_unlock+0x40/0x40 [ 125.163223][ T4779] ? ntfs_readdir+0xe21/0x3660 [ 125.168857][ T4779] check_panic_on_warn+0x80/0xa0 [ 125.174472][ T4779] ? ntfs_readdir+0xe21/0x3660 [ 125.179926][ T4779] end_report+0x6d/0xf0 [ 125.184971][ T4779] kasan_report+0x102/0x130 [ 125.190944][ T4779] ? ntfs_readdir+0xe21/0x3660 [ 125.196155][ T4779] ntfs_readdir+0xe21/0x3660 [ 125.201489][ T4779] ? aa_file_perm+0x38b/0xe80 [ 125.206490][ T4779] ? handle_mm_fault+0x2be3/0x4440 [ 125.212619][ T4779] ? rwsem_write_trylock+0x135/0x1c0 [ 125.218750][ T4779] ? ntfs_unmap_page+0x200/0x200 [ 125.224611][ T4779] ? end_current_label_crit_section+0x14b/0x170 [ 125.231629][ T4779] ? common_file_perm+0x171/0x1c0 [ 125.237209][ T4779] ? iterate_dir+0x133/0x550 [ 125.242382][ T4779] iterate_dir+0x213/0x550 [ 125.247394][ T4779] __se_sys_getdents64+0xf2/0x270 [ 125.252841][ T4779] ? __x64_sys_getdents64+0x80/0x80 [ 125.258350][ T4779] ? filldir+0x700/0x700 [ 125.262909][ T4779] ? lockdep_hardirqs_on+0x94/0x140 [ 125.268312][ T4779] do_syscall_64+0x4c/0xa0 [ 125.274283][ T4779] ? clear_bhb_loop+0x30/0x80 [ 125.279410][ T4779] ? clear_bhb_loop+0x30/0x80 [ 125.285552][ T4779] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 125.293509][ T4779] RIP: 0033:0x7ff2e0f28d73 [ 125.298632][ T4779] Code: c7 c0 e8 ff ff ff 64 c7 00 16 00 00 00 31 c0 eb 9e e8 81 9b fd ff 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 e8 ff ff ff f7 d8 [ 125.322285][ T4779] RSP: 002b:00007ffdb3b31f08 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 125.331208][ T4779] RAX: ffffffffffffffda RBX: 0000555572a68a90 RCX: 00007ff2e0f28d73 [ 125.339754][ T4779] RDX: 0000000000008000 RSI: 0000555572a68ac0 RDI: 0000000000000006 [ 125.348468][ T4779] RBP: 0000555572a68ac0 R08: 00007ff2e10d3ca0 R09: 0000000000000001 [ 125.357684][ T4779] R10: 0000000000000000 R11: 0000000000000293 R12: 0000555572a68a94 [ 125.366315][ T4779] R13: ffffffffffffffe8 R14: 0000000000000016 R15: 0000000000000001 [ 125.375345][ T4779] [ 125.378996][ T4779] Kernel Offset: disabled [ 125.383950][ T4779] Rebooting in 86400 seconds..