Warning: Permanently added '10.128.0.108' (ED25519) to the list of known hosts. 2025/06/05 14:11:33 ignoring optional flag "sandboxArg"="0" 2025/06/05 14:11:34 parsed 1 programs [ 117.469291][ T6265] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 121.020395][ T6297] chnl_net:caif_netlink_parms(): no params data found [ 121.089882][ T6297] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.097560][ T6297] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.105318][ T6297] bridge_slave_0: entered allmulticast mode [ 121.112474][ T6297] bridge_slave_0: entered promiscuous mode [ 121.120817][ T6297] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.128149][ T6297] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.135651][ T6297] bridge_slave_1: entered allmulticast mode [ 121.143359][ T6297] bridge_slave_1: entered promiscuous mode [ 121.174246][ T6297] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 121.186176][ T6297] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 121.215968][ T6297] team0: Port device team_slave_0 added [ 121.225370][ T6297] team0: Port device team_slave_1 added [ 121.250313][ T6297] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 121.257861][ T6297] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 121.284368][ T6297] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 121.297180][ T6297] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 121.304241][ T6297] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 121.330483][ T6297] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 121.370164][ T6297] hsr_slave_0: entered promiscuous mode [ 121.376512][ T6297] hsr_slave_1: entered promiscuous mode [ 121.989429][ T6297] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 122.003343][ T6297] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 122.014642][ T6297] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 122.028575][ T6297] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 122.147089][ T6297] 8021q: adding VLAN 0 to HW filter on device bond0 [ 122.171872][ T6297] 8021q: adding VLAN 0 to HW filter on device team0 [ 122.188091][ T1036] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.195327][ T1036] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.218919][ T1036] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.226346][ T1036] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.281147][ T6297] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 122.516691][ T6297] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 122.577766][ T6297] veth0_vlan: entered promiscuous mode [ 122.591997][ T6297] veth1_vlan: entered promiscuous mode [ 122.636795][ T6297] veth0_macvtap: entered promiscuous mode [ 122.648093][ T6297] veth1_macvtap: entered promiscuous mode [ 122.676898][ T6297] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 122.697290][ T6297] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 122.716288][ T6297] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.725960][ T6297] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.738196][ T6297] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.747948][ T6297] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.954851][ T1155] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.027211][ T1155] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.090733][ T1155] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.165277][ T1155] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.443984][ T1036] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.452054][ T1036] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.482839][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.490707][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.082620][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 124.093153][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 124.101409][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 124.111748][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 124.122687][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 125.219995][ T1155] bridge_slave_1: left allmulticast mode [ 125.232026][ T1155] bridge_slave_1: left promiscuous mode [ 125.237846][ T1155] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.305435][ T1155] bridge_slave_0: left allmulticast mode [ 125.311147][ T1155] bridge_slave_0: left promiscuous mode [ 125.332255][ T1155] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.732123][ T1155] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 125.743219][ T1155] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 125.753592][ T1155] bond0 (unregistering): Released all slaves [ 125.883800][ T1155] hsr_slave_0: left promiscuous mode [ 125.905389][ T1155] hsr_slave_1: left promiscuous mode [ 125.911600][ T1155] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 125.933521][ T1155] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 125.947633][ T1155] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 125.956407][ T1155] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 126.004682][ T1155] veth1_macvtap: left promiscuous mode [ 126.010287][ T1155] veth0_macvtap: left promiscuous mode [ 126.037694][ T1155] veth1_vlan: left promiscuous mode [ 126.043843][ T1155] veth0_vlan: left promiscuous mode [ 126.839478][ T1155] team0 (unregistering): Port device team_slave_1 removed [ 126.878232][ T1155] team0 (unregistering): Port device team_slave_0 removed 2025/06/05 14:11:49 executed programs: 0 [ 128.428458][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 128.436830][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 128.446117][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 128.457235][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 128.465078][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 128.892743][ T6521] chnl_net:caif_netlink_parms(): no params data found [ 129.092544][ T6521] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.099820][ T6521] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.116225][ T6521] bridge_slave_0: entered allmulticast mode [ 129.124083][ T6521] bridge_slave_0: entered promiscuous mode [ 129.134463][ T6521] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.141741][ T6521] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.149025][ T6521] bridge_slave_1: entered allmulticast mode [ 129.156822][ T6521] bridge_slave_1: entered promiscuous mode [ 129.241492][ T6521] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 129.269829][ T6521] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 129.343972][ T6521] team0: Port device team_slave_0 added [ 129.355572][ T6521] team0: Port device team_slave_1 added [ 129.419337][ T6521] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 129.428701][ T6521] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 129.455187][ T6521] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 129.467851][ T6521] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 129.475626][ T6521] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 129.502123][ T6521] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 129.638478][ T6521] hsr_slave_0: entered promiscuous mode [ 129.645944][ T6521] hsr_slave_1: entered promiscuous mode [ 130.138343][ T6521] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 130.151073][ T6521] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 130.163038][ T6521] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 130.177757][ T6521] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 130.278340][ T6521] 8021q: adding VLAN 0 to HW filter on device bond0 [ 130.306686][ T6521] 8021q: adding VLAN 0 to HW filter on device team0 [ 130.321042][ T1155] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.328302][ T1155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 130.357080][ T1155] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.364307][ T1155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 130.533060][ T5144] Bluetooth: hci0: command tx timeout [ 130.617989][ T6521] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 130.671408][ T6521] veth0_vlan: entered promiscuous mode [ 130.687749][ T6521] veth1_vlan: entered promiscuous mode [ 130.733203][ T6521] veth0_macvtap: entered promiscuous mode [ 130.746672][ T6521] veth1_macvtap: entered promiscuous mode [ 130.775084][ T6521] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 130.790963][ T6521] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 130.808253][ T6521] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.818703][ T6521] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.828706][ T6521] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.839955][ T6521] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.937691][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.958543][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.994640][ T1036] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.003911][ T1036] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.130444][ T6595] loop0: detected capacity change from 0 to 4096 [ 131.178785][ T6595] ntfs3(loop0): Failed to initialize $Extend/$ObjId. [ 131.236921][ T6595] keysize: 82, name len: 8, nls: ffffffff8e445280, fn: $, ntfs_dir_emit [ 131.246595][ T6595] nl: 8, name: $AttrDef, ntfs_dir_emit [ 131.252828][ T6595] keysize: 82, name len: 8, nls: ffffffff8e445280, fn: $, ntfs_dir_emit [ 131.261210][ T6595] nl: 8, name: $BadClus, ntfs_dir_emit [ 131.267172][ T6595] keysize: 80, name len: 7, nls: ffffffff8e445280, fn: $, ntfs_dir_emit [ 131.276381][ T6595] nl: 7, name: $Bitmap, ntfs_dir_emit [ 131.282909][ T6595] keysize: 76, name len: 5, nls: ffffffff8e445280, fn: $, ntfs_dir_emit [ 131.291294][ T6595] nl: 5, name: $Boot, ntfs_dir_emit [ 131.297144][ T6595] keysize: 80, name len: 7, nls: ffffffff8e445280, fn: $, ntfs_dir_emit [ 131.305986][ T6595] nl: 7, name: $Extend, ntfs_dir_emit [ 131.311390][ T6595] keysize: 82, name len: 8, nls: ffffffff8e445280, fn: $, ntfs_dir_emit [ 131.320255][ T6595] nl: 8, name: $LogFile, ntfs_dir_emit [ 131.326359][ T6595] keysize: 74, name len: 4, nls: ffffffff8e445280, fn: $, ntfs_dir_emit [ 131.335319][ T6595] nl: 4, name: $MFT, ntfs_dir_emit [ 131.340476][ T6595] keysize: 82, name len: 8, nls: ffffffff8e445280, fn: $, ntfs_dir_emit [ 131.349336][ T6595] nl: 8, name: $MFTMirr, ntfs_dir_emit [ 131.355235][ T6595] keysize: 80, name len: 7, nls: ffffffff8e445280, fn: $, ntfs_dir_emit [ 131.364036][ T6595] nl: 7, name: $Secure, ntfs_dir_emit [ 131.369529][ T6595] keysize: 80, name len: 7, nls: ffffffff8e445280, fn: $, ntfs_dir_emit [ 131.378593][ T6595] nl: 7, name: $UpCase, ntfs_dir_emit [ 131.384427][ T6595] keysize: 80, name len: 7, nls: ffffffff8e445280, fn: $, ntfs_dir_emit [ 131.393269][ T6595] nl: 7, name: $Volume, ntfs_dir_emit [ 131.398681][ T6595] keysize: 84, name len: 9, nls: ffffffff8e445280, fn: f, ntfs_dir_emit [ 131.407456][ T6595] nl: 9, name: file.cold, ntfs_dir_emit [ 131.414248][ T6595] keysize: 76, name len: 5, nls: ffffffff8e445280, fn: f, ntfs_dir_emit [ 131.423012][ T6595] nl: 5, name: file0, ntfs_dir_emit [ 131.428458][ T6595] keysize: 562, name len: 248, nls: ffffffff8e445280, fn: f, ntfs_dir_emit [ 131.437599][ T6595] nl: 248, name: file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa, ntfs_dir_emit [ 131.464887][ T6595] keysize: 566, name len: 250, nls: ffffffff8e445280, fn: f, ntfs_dir_emit [ 131.474720][ T6595] nl: 250, name: file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa, ntfs_dir_emit [ 131.505185][ T6595] keysize: 570, name len: 252, nls: ffffffff8e445280, fn: f, ntfs_dir_emit [ 131.514125][ T6595] nl: 252, name: file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa, ntfs_dir_emit [ 131.542864][ T6595] keysize: 574, name len: 254, nls: ffffffff8e445280, fn: f, ntfs_dir_emit [ 131.551878][ T6595] nl: 254, name: file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa, ntfs_dir_emit [ 131.579148][ T6595] keysize: 76, name len: 255, nls: ffffffff8e445280, fn: f, ntfs_dir_emit [ 131.587819][ T6595] ntfs3(loop0): failed to convert "0000" to maccroatian [ 131.594981][ T6595] ================================================================== [ 131.603066][ T6595] BUG: KASAN: slab-out-of-bounds in ntfs_utf16_to_nls+0x3c9/0x5a0 [ 131.611095][ T6595] Read of size 2 at addr ffff888033905000 by task syz.0.16/6595 [ 131.618741][ T6595] [ 131.621096][ T6595] CPU: 1 UID: 0 PID: 6595 Comm: syz.0.16 Not tainted 6.15.0-syzkaller-12141-gec7714e49479-dirty #0 PREEMPT(full) [ 131.621117][ T6595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 131.621132][ T6595] Call Trace: [ 131.621142][ T6595] [ 131.621151][ T6595] dump_stack_lvl+0x189/0x250 [ 131.621178][ T6595] ? __virt_addr_valid+0x1c8/0x5c0 [ 131.621195][ T6595] ? rcu_is_watching+0x15/0xb0 [ 131.621216][ T6595] ? __kasan_check_byte+0x12/0x40 [ 131.621236][ T6595] ? __pfx_dump_stack_lvl+0x10/0x10 [ 131.621257][ T6595] ? rcu_is_watching+0x15/0xb0 [ 131.621278][ T6595] ? lock_release+0x4b/0x3e0 [ 131.621300][ T6595] ? __virt_addr_valid+0x1c8/0x5c0 [ 131.621315][ T6595] ? __virt_addr_valid+0x4a5/0x5c0 [ 131.621331][ T6595] print_report+0xd2/0x2b0 [ 131.621349][ T6595] ? ntfs_utf16_to_nls+0x3c9/0x5a0 [ 131.621369][ T6595] kasan_report+0x118/0x150 [ 131.621388][ T6595] ? ntfs_utf16_to_nls+0x3c9/0x5a0 [ 131.621411][ T6595] ntfs_utf16_to_nls+0x3c9/0x5a0 [ 131.621437][ T6595] ? __pfx_ntfs_utf16_to_nls+0x10/0x10 [ 131.621468][ T6595] ntfs_read_hdr+0x6b5/0xca0 [ 131.621494][ T6595] ntfs_readdir+0xa5c/0xdd0 [ 131.621522][ T6595] ? __pfx_ntfs_readdir+0x10/0x10 [ 131.621545][ T6595] ? iterate_dir+0x49f/0x770 [ 131.621562][ T6595] ? down_read_killable+0x1d1/0x350 [ 131.621585][ T6595] iterate_dir+0x5ac/0x770 [ 131.621606][ T6595] __se_sys_getdents64+0xe4/0x260 [ 131.621626][ T6595] ? __pfx___se_sys_getdents64+0x10/0x10 [ 131.621643][ T6595] ? __pfx_filldir64+0x10/0x10 [ 131.621663][ T6595] ? rcu_is_watching+0x15/0xb0 [ 131.621684][ T6595] ? do_syscall_64+0xbe/0x3b0 [ 131.621705][ T6595] do_syscall_64+0xfa/0x3b0 [ 131.621721][ T6595] ? lockdep_hardirqs_on+0x9c/0x150 [ 131.621740][ T6595] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.621756][ T6595] ? clear_bhb_loop+0x60/0xb0 [ 131.621775][ T6595] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.621791][ T6595] RIP: 0033:0x7f414938e969 [ 131.621816][ T6595] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 131.621831][ T6595] RSP: 002b:00007f414a2cd038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 131.621850][ T6595] RAX: ffffffffffffffda RBX: 00007f41495b5fa0 RCX: 00007f414938e969 [ 131.621863][ T6595] RDX: 0000000000001000 RSI: 0000200000000f80 RDI: 0000000000000004 [ 131.621874][ T6595] RBP: 00007f4149410ab1 R08: 0000000000000000 R09: 0000000000000000 [ 131.621886][ T6595] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 131.621896][ T6595] R13: 0000000000000000 R14: 00007f41495b5fa0 R15: 00007fffafbf4148 [ 131.621915][ T6595] [ 131.621921][ T6595] [ 131.882255][ T6595] Allocated by task 6595: [ 131.886595][ T6595] kasan_save_track+0x3e/0x80 [ 131.891294][ T6595] __kasan_kmalloc+0x93/0xb0 [ 131.895906][ T6595] __kmalloc_noprof+0x27a/0x4f0 [ 131.900788][ T6595] indx_read+0x27c/0xc20 [ 131.905053][ T6595] ntfs_readdir+0x9d8/0xdd0 [ 131.909757][ T6595] iterate_dir+0x5ac/0x770 [ 131.914208][ T6595] __se_sys_getdents64+0xe4/0x260 [ 131.919377][ T6595] do_syscall_64+0xfa/0x3b0 [ 131.923900][ T6595] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.930081][ T6595] [ 131.932416][ T6595] The buggy address belongs to the object at ffff888033904000 [ 131.932416][ T6595] which belongs to the cache kmalloc-4k of size 4096 [ 131.946578][ T6595] The buggy address is located 0 bytes to the right of [ 131.946578][ T6595] allocated 4096-byte region [ffff888033904000, ffff888033905000) [ 131.961186][ T6595] [ 131.963528][ T6595] The buggy address belongs to the physical page: [ 131.969946][ T6595] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x33900 [ 131.978725][ T6595] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 131.987245][ T6595] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 131.994816][ T6595] page_type: f5(slab) [ 131.998895][ T6595] raw: 00fff00000000040 ffff88801a442140 dead000000000122 0000000000000000 [ 132.007501][ T6595] raw: 0000000000000000 0000000080040004 00000000f5000000 0000000000000000 [ 132.016102][ T6595] head: 00fff00000000040 ffff88801a442140 dead000000000122 0000000000000000 [ 132.024791][ T6595] head: 0000000000000000 0000000080040004 00000000f5000000 0000000000000000 [ 132.033573][ T6595] head: 00fff00000000003 ffffea0000ce4001 00000000ffffffff 00000000ffffffff [ 132.042357][ T6595] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 132.051040][ T6595] page dumped because: kasan: bad access detected [ 132.057491][ T6595] page_owner tracks the page as allocated [ 132.063218][ T6595] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6595, tgid 6594 (syz.0.16), ts 131229531839, free_ts 131158758528 [ 132.083650][ T6595] post_alloc_hook+0x240/0x2a0 [ 132.088439][ T6595] get_page_from_freelist+0x21d5/0x22b0 [ 132.094009][ T6595] __alloc_frozen_pages_noprof+0x181/0x370 [ 132.099924][ T6595] alloc_pages_mpol+0x232/0x4a0 [ 132.104808][ T6595] allocate_slab+0x8a/0x3b0 [ 132.109319][ T6595] ___slab_alloc+0xbfc/0x1480 [ 132.114116][ T6595] __kmalloc_noprof+0x305/0x4f0 [ 132.119020][ T6595] indx_read+0x27c/0xc20 [ 132.123284][ T6595] indx_find+0x4bb/0xba0 [ 132.127546][ T6595] indx_insert_entry+0x4f1/0x720 [ 132.132950][ T6595] ntfs_create_inode+0x2317/0x3340 [ 132.138189][ T6595] ntfs_mknod+0x3b/0x50 [ 132.142363][ T6595] vfs_mknod+0x37f/0x3c0 [ 132.146630][ T6595] do_mknodat+0x385/0x4d0 [ 132.150974][ T6595] __x64_sys_mknod+0x8c/0xa0 [ 132.155584][ T6595] do_syscall_64+0xfa/0x3b0 [ 132.160129][ T6595] page last free pid 6275 tgid 6275 stack trace: [ 132.166475][ T6595] __free_frozen_pages+0xc65/0xe60 [ 132.171609][ T6595] __put_partials+0x161/0x1c0 [ 132.176314][ T6595] put_cpu_partial+0x17c/0x250 [ 132.181124][ T6595] __slab_free+0x2f7/0x400 [ 132.185559][ T6595] qlist_free_all+0x97/0x140 [ 132.190174][ T6595] kasan_quarantine_reduce+0x148/0x160 [ 132.195658][ T6595] __kasan_slab_alloc+0x22/0x80 [ 132.200531][ T6595] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 132.206103][ T6595] __anon_vma_prepare+0xcb/0x4a0 [ 132.211109][ T6595] __handle_mm_fault+0x4d02/0x5620 [ 132.216247][ T6595] handle_mm_fault+0x2d5/0x7f0 [ 132.221012][ T6595] do_user_addr_fault+0x764/0x1390 [ 132.226372][ T6595] exc_page_fault+0x76/0xf0 [ 132.230863][ T6595] asm_exc_page_fault+0x26/0x30 [ 132.235704][ T6595] [ 132.238016][ T6595] Memory state around the buggy address: [ 132.243721][ T6595] ffff888033904f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 132.251768][ T6595] ffff888033904f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 132.260135][ T6595] >ffff888033905000: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 132.268283][ T6595] ^ [ 132.272429][ T6595] ffff888033905080: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 132.280484][ T6595] ffff888033905100: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 132.288533][ T6595] ================================================================== [ 132.310773][ T6595] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 132.318290][ T6595] CPU: 1 UID: 0 PID: 6595 Comm: syz.0.16 Not tainted 6.15.0-syzkaller-12141-gec7714e49479-dirty #0 PREEMPT(full) [ 132.330373][ T6595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 132.340451][ T6595] Call Trace: [ 132.343743][ T6595] [ 132.346780][ T6595] dump_stack_lvl+0x99/0x250 [ 132.351395][ T6595] ? __asan_memcpy+0x40/0x70 [ 132.356062][ T6595] ? __pfx_dump_stack_lvl+0x10/0x10 [ 132.361283][ T6595] ? __pfx__printk+0x10/0x10 [ 132.365896][ T6595] panic+0x2db/0x790 [ 132.369901][ T6595] ? __pfx_panic+0x10/0x10 [ 132.374429][ T6595] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 132.380349][ T6595] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 132.386709][ T6595] ? print_memory_metadata+0x314/0x400 [ 132.392207][ T6595] ? ntfs_utf16_to_nls+0x3c9/0x5a0 [ 132.397434][ T6595] check_panic_on_warn+0x89/0xb0 [ 132.402583][ T6595] ? ntfs_utf16_to_nls+0x3c9/0x5a0 [ 132.407810][ T6595] end_report+0x78/0x160 [ 132.412102][ T6595] kasan_report+0x129/0x150 [ 132.416643][ T6595] ? ntfs_utf16_to_nls+0x3c9/0x5a0 [ 132.421786][ T6595] ntfs_utf16_to_nls+0x3c9/0x5a0 [ 132.426767][ T6595] ? __pfx_ntfs_utf16_to_nls+0x10/0x10 [ 132.432255][ T6595] ntfs_read_hdr+0x6b5/0xca0 [ 132.436886][ T6595] ntfs_readdir+0xa5c/0xdd0 [ 132.441420][ T6595] ? __pfx_ntfs_readdir+0x10/0x10 [ 132.446484][ T6595] ? iterate_dir+0x49f/0x770 [ 132.451125][ T6595] ? down_read_killable+0x1d1/0x350 [ 132.456363][ T6595] iterate_dir+0x5ac/0x770 [ 132.460822][ T6595] __se_sys_getdents64+0xe4/0x260 [ 132.465885][ T6595] ? __pfx___se_sys_getdents64+0x10/0x10 [ 132.471555][ T6595] ? __pfx_filldir64+0x10/0x10 [ 132.476342][ T6595] ? rcu_is_watching+0x15/0xb0 [ 132.481149][ T6595] ? do_syscall_64+0xbe/0x3b0 [ 132.486028][ T6595] do_syscall_64+0xfa/0x3b0 [ 132.490746][ T6595] ? lockdep_hardirqs_on+0x9c/0x150 [ 132.496134][ T6595] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.502576][ T6595] ? clear_bhb_loop+0x60/0xb0 [ 132.507282][ T6595] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.513203][ T6595] RIP: 0033:0x7f414938e969 [ 132.517818][ T6595] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 132.537888][ T6595] RSP: 002b:00007f414a2cd038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 132.546330][ T6595] RAX: ffffffffffffffda RBX: 00007f41495b5fa0 RCX: 00007f414938e969 [ 132.554413][ T6595] RDX: 0000000000001000 RSI: 0000200000000f80 RDI: 0000000000000004 [ 132.562405][ T6595] RBP: 00007f4149410ab1 R08: 0000000000000000 R09: 0000000000000000 [ 132.570400][ T6595] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 132.578408][ T6595] R13: 0000000000000000 R14: 00007f41495b5fa0 R15: 00007fffafbf4148 [ 132.586411][ T6595] [ 132.589763][ T6595] Kernel Offset: disabled [ 132.594107][ T6595] Rebooting in 86400 seconds..