Warning: Permanently added '10.128.0.135' (ED25519) to the list of known hosts.
2025/12/03 08:08:32 parsed 1 programs
[ 91.945187][ T4602] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS
[ 94.873283][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 94.881236][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 94.900570][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 94.921885][ T4309] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 94.931385][ T4309] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 94.942334][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 95.220530][ T4663] chnl_net:caif_netlink_parms(): no params data found
[ 95.309685][ T4663] bridge0: port 1(bridge_slave_0) entered blocking state
[ 95.317104][ T4663] bridge0: port 1(bridge_slave_0) entered disabled state
[ 95.325488][ T4663] device bridge_slave_0 entered promiscuous mode
[ 95.333721][ T4663] bridge0: port 2(bridge_slave_1) entered blocking state
[ 95.341191][ T4663] bridge0: port 2(bridge_slave_1) entered disabled state
[ 95.349222][ T4663] device bridge_slave_1 entered promiscuous mode
[ 95.367110][ T4663] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 95.378320][ T4663] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 95.400751][ T4663] team0: Port device team_slave_0 added
[ 95.409030][ T4663] team0: Port device team_slave_1 added
[ 95.425695][ T4663] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 95.432801][ T4663] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 95.459299][ T4663] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 95.471117][ T4663] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 95.478165][ T4663] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 95.504579][ T4663] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 95.530545][ T4663] device hsr_slave_0 entered promiscuous mode
[ 95.537174][ T4663] device hsr_slave_1 entered promiscuous mode
[ 96.037032][ T4663] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 96.047398][ T4663] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 96.088237][ T4663] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 96.098348][ T4663] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 96.189666][ T4663] 8021q: adding VLAN 0 to HW filter on device bond0
[ 96.231182][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 96.240016][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 96.251812][ T4663] 8021q: adding VLAN 0 to HW filter on device team0
[ 96.264090][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 96.274461][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 96.285625][ T4309] bridge0: port 1(bridge_slave_0) entered blocking state
[ 96.292751][ T4309] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 96.302892][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 96.354678][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 96.363815][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 96.375423][ T144] bridge0: port 2(bridge_slave_1) entered blocking state
[ 96.382646][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 96.391809][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 96.401817][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 96.412409][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 96.422150][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 96.441098][ T4663] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 96.454867][ T4663] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 96.468949][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 96.477120][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 96.488050][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 96.498931][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 96.509023][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 96.518193][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 96.528451][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 96.545155][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 96.691030][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 96.699827][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 96.714702][ T4663] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 96.734673][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 96.744872][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 96.772958][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 96.782548][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 96.791124][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 96.801141][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 96.811405][ T4663] device veth0_vlan entered promiscuous mode
[ 96.847096][ T4663] device veth1_vlan entered promiscuous mode
[ 96.855311][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 96.925973][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 96.936219][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 96.946765][ T4663] device veth0_macvtap entered promiscuous mode
[ 96.968613][ T4663] device veth1_macvtap entered promiscuous mode
[ 97.003398][ T4663] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 97.010778][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 97.035174][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 97.043569][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 97.053774][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 97.066788][ T4663] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 97.082536][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 97.104400][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 97.125319][ T4663] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 97.140646][ T4663] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 97.149698][ T4663] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 97.158975][ T4663] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
2025/12/03 08:08:40 executed programs: 0
[ 98.051130][ T4787] chnl_net:caif_netlink_parms(): no params data found
[ 98.180931][ T4787] bridge0: port 1(bridge_slave_0) entered blocking state
[ 98.204814][ T4787] bridge0: port 1(bridge_slave_0) entered disabled state
[ 98.213264][ T4787] device bridge_slave_0 entered promiscuous mode
[ 98.235525][ T4787] bridge0: port 2(bridge_slave_1) entered blocking state
[ 98.247058][ T4787] bridge0: port 2(bridge_slave_1) entered disabled state
[ 98.257654][ T4787] device bridge_slave_1 entered promiscuous mode
[ 98.313859][ T4787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 98.329701][ T4787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 98.377185][ T4787] team0: Port device team_slave_0 added
[ 98.390332][ T4787] team0: Port device team_slave_1 added
[ 98.434362][ T4787] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 98.441338][ T4787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 98.512304][ T4787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 98.535024][ T4787] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 98.542001][ T4787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 98.602724][ T4787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 98.675747][ T4787] device hsr_slave_0 entered promiscuous mode
[ 98.693462][ T4787] device hsr_slave_1 entered promiscuous mode
[ 98.712786][ T4787] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 98.720478][ T4787] Cannot create hsr debugfs directory
[ 98.848219][ T4787] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 99.843001][ T4672] Bluetooth: hci0: command 0x0409 tx timeout
[ 101.467212][ T4787] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 101.504784][ T4787] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 101.587345][ T4787] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 101.677243][ T4787] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 101.689131][ T4787] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 101.703115][ T4787] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 101.712176][ T4787] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 101.761665][ T4787] 8021q: adding VLAN 0 to HW filter on device bond0
[ 101.777131][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 101.785127][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 101.803414][ T4787] 8021q: adding VLAN 0 to HW filter on device team0
[ 101.812578][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 101.821188][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 101.830269][ T154] bridge0: port 1(bridge_slave_0) entered blocking state
[ 101.837646][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 101.859720][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 101.867641][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 101.877078][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 101.886643][ T154] bridge0: port 2(bridge_slave_1) entered blocking state
[ 101.893745][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 101.901469][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 101.910533][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 101.920589][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 101.922504][ T7] Bluetooth: hci0: command 0x041b tx timeout
[ 101.929996][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 101.943746][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 101.963789][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 101.974750][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 101.986835][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 101.995709][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 102.008986][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 102.017611][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 102.033488][ T4787] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 102.058937][ T3065] device hsr_slave_0 left promiscuous mode
[ 102.065440][ T3065] device hsr_slave_1 left promiscuous mode
[ 102.071932][ T3065] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 102.081991][ T3065] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 102.090563][ T3065] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 102.098480][ T3065] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 102.106454][ T3065] device bridge_slave_1 left promiscuous mode
[ 102.113003][ T3065] bridge0: port 2(bridge_slave_1) entered disabled state
[ 102.121368][ T3065] device bridge_slave_0 left promiscuous mode
[ 102.127693][ T3065] bridge0: port 1(bridge_slave_0) entered disabled state
[ 102.138865][ T3065] device veth1_macvtap left promiscuous mode
[ 102.144958][ T3065] device veth0_macvtap left promiscuous mode
[ 102.151079][ T3065] device veth1_vlan left promiscuous mode
[ 102.157132][ T3065] device veth0_vlan left promiscuous mode
[ 102.269739][ T3065] team0 (unregistering): Port device team_slave_1 removed
[ 102.285242][ T3065] team0 (unregistering): Port device team_slave_0 removed
[ 102.297077][ T3065] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 102.309871][ T3065] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 102.358769][ T3065] bond0 (unregistering): Released all slaves
[ 102.440687][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 102.448314][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 102.461459][ T4787] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 102.482658][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 102.491562][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 102.511050][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 102.519324][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 102.527906][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 102.536844][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 102.548086][ T4787] device veth0_vlan entered promiscuous mode
[ 102.569280][ T4787] device veth1_vlan entered promiscuous mode
[ 102.588558][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 102.596808][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 102.605672][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 102.614579][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 102.625298][ T4787] device veth0_macvtap entered promiscuous mode
[ 102.636119][ T4787] device veth1_macvtap entered promiscuous mode
[ 102.653024][ T4787] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 102.660460][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 102.669284][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 102.677550][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 102.686309][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 102.697643][ T4787] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 102.705983][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 102.714856][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 102.726973][ T4787] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 102.736199][ T4787] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 102.745088][ T4787] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 102.753961][ T4787] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 102.806031][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 102.814708][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 102.843090][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
2025/12/03 08:08:45 executed programs: 2
[ 102.856017][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 102.865762][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 102.875825][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 102.971687][ T5054] loop0: detected capacity change from 0 to 4096
[ 103.061226][ T5054] ntfs: (device loop0): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1.
[ 103.112881][ T5054] ntfs: volume version 3.1.
[ 103.134632][ T5054] ntfs: (device loop0): ntfs_lookup_inode_by_name(): Corrupt directory. Aborting lookup.
[ 103.152598][ T5054] ntfs: (device loop0): load_and_init_usnjrnl(): Failed to find inode number for $UsnJrnl.
[ 103.177047][ T5054] ntfs: (device loop0): load_system_files(): Failed to load $UsnJrnl. Mounting read-only. Run chkdsk.
[ 103.229504][ T4787] ntfs: (device loop0): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set maccenteuro. You might want to try to use the mount option nls=utf8.
[ 103.275057][ T4787] ntfs: (device loop0): ntfs_filldir(): Skipping unrepresentable inode 0x4.
[ 103.289565][ T4787] ==================================================================
[ 103.297905][ T4787] BUG: KASAN: slab-out-of-bounds in ntfs_readdir+0xdda/0x3550
[ 103.305381][ T4787] Read of size 1 at addr ffff888024cc8599 by task syz-executor/4787
[ 103.313356][ T4787]
[ 103.315688][ T4787] CPU: 0 PID: 4787 Comm: syz-executor Not tainted syzkaller #0
[ 103.323232][ T4787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 103.333447][ T4787] Call Trace:
[ 103.336793][ T4787]
[ 103.339740][ T4787] dump_stack_lvl+0x168/0x230
[ 103.344443][ T4787] ? show_regs_print_info+0x20/0x20
[ 103.349652][ T4787] ? load_image+0x3b0/0x3b0
[ 103.354163][ T4787] ? _raw_spin_lock_irqsave+0xb0/0xf0
[ 103.359538][ T4787] print_address_description+0x60/0x2d0
[ 103.365086][ T4787] ? ntfs_readdir+0xdda/0x3550
[ 103.369957][ T4787] kasan_report+0xdf/0x130
[ 103.374388][ T4787] ? ntfs_readdir+0xdda/0x3550
[ 103.379165][ T4787] ntfs_readdir+0xdda/0x3550
[ 103.383777][ T4787] ? __might_sleep+0xf0/0xf0
[ 103.388378][ T4787] ? preempt_count_add+0x8d/0x190
[ 103.393397][ T4787] ? rwsem_write_trylock+0x12f/0x1b0
[ 103.398684][ T4787] ? clear_nonspinnable+0x60/0x60
[ 103.403715][ T4787] ? ntfs_unmap_page+0x200/0x200
[ 103.408723][ T4787] iterate_dir+0x218/0x560
[ 103.413261][ T4787] __se_sys_getdents64+0xe5/0x260
[ 103.418295][ T4787] ? __x64_sys_getdents64+0x80/0x80
[ 103.423668][ T4787] ? filldir+0x720/0x720
[ 103.427907][ T4787] ? vtime_user_exit+0x2dc/0x400
[ 103.432844][ T4787] ? lockdep_hardirqs_on+0x94/0x140
[ 103.438053][ T4787] do_syscall_64+0x4c/0xa0
[ 103.442465][ T4787] ? clear_bhb_loop+0x30/0x80
[ 103.447210][ T4787] ? clear_bhb_loop+0x30/0x80
[ 103.451902][ T4787] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 103.457805][ T4787] RIP: 0033:0x7fccb69f02d3
[ 103.462218][ T4787] Code: c1 66 0f 1f 44 00 00 48 83 c4 08 48 89 ef 5b 5d e9 52 3e f8 ff 66 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 a8 ff ff ff f7 d8
[ 103.481821][ T4787] RSP: 002b:00007fff831b8198 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9
[ 103.490243][ T4787] RAX: ffffffffffffffda RBX: 000055557b135640 RCX: 00007fccb69f02d3
[ 103.498299][ T4787] RDX: 0000000000008000 RSI: 000055557b135640 RDI: 0000000000000006
[ 103.506279][ T4787] RBP: 000055557b135614 R08: 0000000000000000 R09: 0000000000000000
[ 103.514254][ T4787] R10: 0000000000001000 R11: 0000000000000293 R12: ffffffffffffffa8
[ 103.522234][ T4787] R13: 0000000000000016 R14: 000055557b135610 R15: 00007fff831bb540
[ 103.530227][ T4787]
[ 103.533247][ T4787]
[ 103.535561][ T4787] Allocated by task 4787:
[ 103.539879][ T4787] __kasan_kmalloc+0xb5/0xf0
[ 103.544478][ T4787] ntfs_readdir+0x798/0x3550
[ 103.549075][ T4787] iterate_dir+0x218/0x560
[ 103.553490][ T4787] __se_sys_getdents64+0xe5/0x260
[ 103.558513][ T4787] do_syscall_64+0x4c/0xa0
[ 103.563189][ T4787] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 103.569077][ T4787]
[ 103.571387][ T4787] The buggy address belongs to the object at ffff888024cc8400
[ 103.571387][ T4787] which belongs to the cache kmalloc-512 of size 512
[ 103.585430][ T4787] The buggy address is located 409 bytes inside of
[ 103.585430][ T4787] 512-byte region [ffff888024cc8400, ffff888024cc8600)
[ 103.598830][ T4787] The buggy address belongs to the page:
[ 103.604476][ T4787] page:ffffea0000933200 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x24cc8
[ 103.614638][ T4787] head:ffffea0000933200 order:2 compound_mapcount:0 compound_pincount:0
[ 103.622961][ T4787] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff)
[ 103.630943][ T4787] raw: 00fff00000010200 dead000000000100 dead000000000122 ffff888016841c80
[ 103.639520][ T4787] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000
[ 103.648182][ T4787] page dumped because: kasan: bad access detected
[ 103.654697][ T4787] page_owner tracks the page as allocated
[ 103.660400][ T4787] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 4206, ts 59058537567, free_ts 16437133231
[ 103.681155][ T4787] get_page_from_freelist+0x1b77/0x1c60
[ 103.686712][ T4787] __alloc_pages+0x1e1/0x470
[ 103.691307][ T4787] new_slab+0xc0/0x4b0
[ 103.695369][ T4787] ___slab_alloc+0x81e/0xdf0
[ 103.699963][ T4787] __kmalloc+0x1cd/0x330
[ 103.704208][ T4787] ops_init+0x8b/0x600
[ 103.708364][ T4787] setup_net+0x38d/0x9f0
[ 103.712692][ T4787] copy_net_ns+0x348/0x5b0
[ 103.717098][ T4787] create_new_namespaces+0x3d3/0x6f0
[ 103.722375][ T4787] unshare_nsproxy_namespaces+0x116/0x160
[ 103.728176][ T4787] ksys_unshare+0x4bc/0x890
[ 103.732676][ T4787] __x64_sys_unshare+0x34/0x40
[ 103.737430][ T4787] do_syscall_64+0x4c/0xa0
[ 103.741830][ T4787] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 103.747711][ T4787] page last free stack trace:
[ 103.752365][ T4787] free_unref_page_prepare+0x637/0x6c0
[ 103.757806][ T4787] free_unref_page+0x94/0x280
[ 103.762460][ T4787] __unfreeze_partials+0x1a5/0x200
[ 103.767551][ T4787] put_cpu_partial+0x12d/0x190
[ 103.772292][ T4787] qlist_free_all+0x35/0x90
[ 103.776778][ T4787] kasan_quarantine_reduce+0x150/0x160
[ 103.782218][ T4787] __kasan_slab_alloc+0x2f/0xd0
[ 103.787142][ T4787] slab_post_alloc_hook+0x4c/0x380
[ 103.792241][ T4787] kmem_cache_alloc+0x100/0x290
[ 103.797211][ T4787] getname_flags+0xb5/0x500
[ 103.801867][ T4787] do_sys_openat2+0xcf/0x4a0
[ 103.806455][ T4787] __x64_sys_openat+0x135/0x160
[ 103.811294][ T4787] do_syscall_64+0x4c/0xa0
[ 103.815788][ T4787] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 103.821678][ T4787]
[ 103.823983][ T4787] Memory state around the buggy address:
[ 103.829711][ T4787] ffff888024cc8480: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 103.837771][ T4787] ffff888024cc8500: 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc fc
[ 103.845911][ T4787] >ffff888024cc8580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 103.853962][ T4787] ^
[ 103.858806][ T4787] ffff888024cc8600: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 103.866939][ T4787] ffff888024cc8680: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 103.875066][ T4787] ==================================================================
[ 103.883364][ T4787] Disabling lock debugging due to kernel taint
[ 103.908814][ T4787] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 103.916044][ T4787] CPU: 0 PID: 4787 Comm: syz-executor Tainted: G B syzkaller #0
[ 103.925290][ T4787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 103.935508][ T4787] Call Trace:
[ 103.938872][ T4787]
[ 103.941796][ T4787] dump_stack_lvl+0x168/0x230
[ 103.946474][ T4787] ? show_regs_print_info+0x20/0x20
[ 103.951838][ T4787] ? load_image+0x3b0/0x3b0
[ 103.956328][ T4787] panic+0x2c9/0x7f0
[ 103.960226][ T4787] ? bpf_jit_dump+0xd0/0xd0
[ 103.964707][ T4787] ? _raw_spin_unlock_irqrestore+0xf6/0x100
[ 103.970577][ T4787] ? _raw_spin_unlock+0x40/0x40
[ 103.975427][ T4787] ? ntfs_readdir+0xdda/0x3550
[ 103.980181][ T4787] check_panic_on_warn+0x80/0xa0
[ 103.985108][ T4787] ? ntfs_readdir+0xdda/0x3550
[ 103.989859][ T4787] end_report+0x6d/0xf0
[ 103.994002][ T4787] kasan_report+0x102/0x130
[ 103.998488][ T4787] ? ntfs_readdir+0xdda/0x3550
[ 104.003236][ T4787] ntfs_readdir+0xdda/0x3550
[ 104.007921][ T4787] ? __might_sleep+0xf0/0xf0
[ 104.012496][ T4787] ? preempt_count_add+0x8d/0x190
[ 104.017539][ T4787] ? rwsem_write_trylock+0x12f/0x1b0
[ 104.022952][ T4787] ? clear_nonspinnable+0x60/0x60
[ 104.028081][ T4787] ? ntfs_unmap_page+0x200/0x200
[ 104.033017][ T4787] iterate_dir+0x218/0x560
[ 104.037506][ T4787] __se_sys_getdents64+0xe5/0x260
[ 104.042528][ T4787] ? __x64_sys_getdents64+0x80/0x80
[ 104.047745][ T4787] ? filldir+0x720/0x720
[ 104.051985][ T4787] ? vtime_user_exit+0x2dc/0x400
[ 104.056913][ T4787] ? lockdep_hardirqs_on+0x94/0x140
[ 104.062090][ T4787] do_syscall_64+0x4c/0xa0
[ 104.066487][ T4787] ? clear_bhb_loop+0x30/0x80
[ 104.071147][ T4787] ? clear_bhb_loop+0x30/0x80
[ 104.075899][ T4787] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 104.081771][ T4787] RIP: 0033:0x7fccb69f02d3
[ 104.086181][ T4787] Code: c1 66 0f 1f 44 00 00 48 83 c4 08 48 89 ef 5b 5d e9 52 3e f8 ff 66 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 a8 ff ff ff f7 d8
[ 104.106041][ T4787] RSP: 002b:00007fff831b8198 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9
[ 104.114652][ T4787] RAX: ffffffffffffffda RBX: 000055557b135640 RCX: 00007fccb69f02d3
[ 104.122616][ T4787] RDX: 0000000000008000 RSI: 000055557b135640 RDI: 0000000000000006
[ 104.130647][ T4787] RBP: 000055557b135614 R08: 0000000000000000 R09: 0000000000000000
[ 104.138699][ T4787] R10: 0000000000001000 R11: 0000000000000293 R12: ffffffffffffffa8
[ 104.146667][ T4787] R13: 0000000000000016 R14: 000055557b135610 R15: 00007fff831bb540
[ 104.154735][ T4787]
[ 104.158063][ T4787] Kernel Offset: disabled
[ 104.162487][ T4787] Rebooting in 86400 seconds..