Warning: Permanently added '10.128.10.25' (ED25519) to the list of known hosts.
2026/01/15 10:41:18 parsed 1 programs
Setting up swapspace version 1, size = 127995904 bytes
[ 98.183669][ T4642] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS
[ 99.399328][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 99.413907][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 99.422317][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 99.424165][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 99.431678][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 99.447117][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 101.579604][ T4707] chnl_net:caif_netlink_parms(): no params data found
[ 101.737922][ T4707] bridge0: port 1(bridge_slave_0) entered blocking state
[ 101.745159][ T4707] bridge0: port 1(bridge_slave_0) entered disabled state
[ 101.753554][ T4707] device bridge_slave_0 entered promiscuous mode
[ 101.763545][ T4707] bridge0: port 2(bridge_slave_1) entered blocking state
[ 101.771341][ T4707] bridge0: port 2(bridge_slave_1) entered disabled state
[ 101.781262][ T4707] device bridge_slave_1 entered promiscuous mode
[ 101.806179][ T4707] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 101.818044][ T4707] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 101.839295][ T4707] team0: Port device team_slave_0 added
[ 101.847509][ T4707] team0: Port device team_slave_1 added
[ 101.864962][ T4707] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 101.872104][ T4707] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 101.899271][ T4707] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 101.911239][ T4707] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 101.918943][ T4707] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 101.946415][ T4707] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 101.976004][ T4707] device hsr_slave_0 entered promiscuous mode
[ 101.983299][ T4707] device hsr_slave_1 entered promiscuous mode
[ 102.489384][ T4707] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 102.499378][ T4707] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 102.509381][ T4707] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 102.521274][ T4707] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 102.677237][ T4707] 8021q: adding VLAN 0 to HW filter on device bond0
[ 102.692411][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 102.700834][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 102.713436][ T4707] 8021q: adding VLAN 0 to HW filter on device team0
[ 102.765324][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 102.777664][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 102.787471][ T155] bridge0: port 1(bridge_slave_0) entered blocking state
[ 102.795110][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 102.806394][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 102.815727][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 102.824363][ T155] bridge0: port 2(bridge_slave_1) entered blocking state
[ 102.831530][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 102.879062][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 102.888420][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 102.898317][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 102.916792][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 102.928248][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 102.940502][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 102.950288][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 103.013248][ T4707] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 103.024084][ T4707] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 103.037951][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 103.048674][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 103.057925][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 103.067192][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 103.077156][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 103.091627][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 103.242576][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 103.250684][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 103.263629][ T4707] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 103.290481][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 103.300412][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 103.361719][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 103.371214][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 103.383696][ T4707] device veth0_vlan entered promiscuous mode
[ 103.399488][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 103.408246][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 103.423613][ T4707] device veth1_vlan entered promiscuous mode
[ 103.465010][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 103.473910][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 103.484305][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 103.493859][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 103.510359][ T4707] device veth0_macvtap entered promiscuous mode
[ 103.528880][ T4707] device veth1_macvtap entered promiscuous mode
[ 103.567622][ T4707] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 103.584865][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 103.596515][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 103.615463][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 103.624573][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 103.648394][ T4707] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 103.658006][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 103.675396][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 103.692349][ T4707] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 103.708416][ T4707] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 103.717752][ T4707] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 103.734655][ T4707] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
2026/01/15 10:41:27 executed programs: 0
[ 104.847699][ T4844] chnl_net:caif_netlink_parms(): no params data found
[ 104.965671][ T4844] bridge0: port 1(bridge_slave_0) entered blocking state
[ 104.972976][ T4844] bridge0: port 1(bridge_slave_0) entered disabled state
[ 104.984042][ T4844] device bridge_slave_0 entered promiscuous mode
[ 104.994232][ T4844] bridge0: port 2(bridge_slave_1) entered blocking state
[ 105.006896][ T4844] bridge0: port 2(bridge_slave_1) entered disabled state
[ 105.015380][ T4844] device bridge_slave_1 entered promiscuous mode
[ 105.068404][ T4844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 105.080374][ T4844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 105.139199][ T4844] team0: Port device team_slave_0 added
[ 105.153241][ T4844] team0: Port device team_slave_1 added
[ 105.207681][ T4844] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 105.224720][ T4844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 105.284748][ T4844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 105.307874][ T4844] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 105.324540][ T4844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 105.351063][ T4844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 105.416632][ T4844] device hsr_slave_0 entered promiscuous mode
[ 105.423959][ T4844] device hsr_slave_1 entered promiscuous mode
[ 105.433449][ T4844] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 105.441821][ T4844] Cannot create hsr debugfs directory
[ 105.456776][ T145] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 106.644957][ T4726] Bluetooth: hci0: command 0x0409 tx timeout
[ 107.670679][ T145] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 107.973634][ T145] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 108.024746][ T145] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 108.725717][ T4725] Bluetooth: hci0: command 0x041b tx timeout
[ 108.820835][ T4844] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 108.831960][ T145] device hsr_slave_0 left promiscuous mode
[ 108.838671][ T145] device hsr_slave_1 left promiscuous mode
[ 108.845696][ T145] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 108.853262][ T145] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 108.861315][ T145] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 108.869194][ T145] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 108.877063][ T145] device bridge_slave_1 left promiscuous mode
[ 108.883964][ T145] bridge0: port 2(bridge_slave_1) entered disabled state
[ 108.893863][ T145] device bridge_slave_0 left promiscuous mode
[ 108.900571][ T145] bridge0: port 1(bridge_slave_0) entered disabled state
[ 108.911460][ T145] device veth1_macvtap left promiscuous mode
[ 108.918039][ T145] device veth0_macvtap left promiscuous mode
[ 108.924194][ T145] device veth1_vlan left promiscuous mode
[ 108.930041][ T145] device veth0_vlan left promiscuous mode
[ 109.071442][ T145] team0 (unregistering): Port device team_slave_1 removed
[ 109.084098][ T145] team0 (unregistering): Port device team_slave_0 removed
[ 109.098104][ T145] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 109.116663][ T145] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 109.163463][ T145] bond0 (unregistering): Released all slaves
[ 109.209412][ T4844] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 109.218992][ T4844] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 109.227634][ T4844] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 109.289597][ T4844] 8021q: adding VLAN 0 to HW filter on device bond0
[ 109.303244][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 109.311423][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 109.338093][ T4844] 8021q: adding VLAN 0 to HW filter on device team0
[ 109.347606][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 109.356643][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 109.365439][ T9] bridge0: port 1(bridge_slave_0) entered blocking state
[ 109.372626][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 109.380759][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 109.393569][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 109.403153][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 109.412121][ T4287] bridge0: port 2(bridge_slave_1) entered blocking state
[ 109.419314][ T4287] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 109.429733][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 109.445905][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 109.454888][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 109.464143][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 109.473391][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 109.482273][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 109.491572][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 109.506308][ T4844] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 109.517967][ T4844] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 109.530078][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 109.539432][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 109.548316][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 109.557149][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 109.565812][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 109.681582][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 109.690526][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 109.704420][ T4844] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 109.726085][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 109.736062][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 109.755569][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 109.764384][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 109.775616][ T4844] device veth0_vlan entered promiscuous mode
[ 109.789286][ T4844] device veth1_vlan entered promiscuous mode
[ 109.797692][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 109.807164][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 109.815641][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 109.836279][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 109.845995][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 109.855058][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 109.866391][ T4844] device veth0_macvtap entered promiscuous mode
[ 109.877260][ T4844] device veth1_macvtap entered promiscuous mode
[ 109.896322][ T4844] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 109.904514][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 109.915780][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 109.924198][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 109.934274][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 109.948120][ T4844] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 109.956513][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 109.967589][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 109.980397][ T4844] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 109.991012][ T4844] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 110.002658][ T4844] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 110.013711][ T4844] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 110.084220][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 110.097180][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 110.117929][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
2026/01/15 10:41:33 executed programs: 2
[ 110.128876][ T4287] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 110.140331][ T4287] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 110.151038][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 110.254169][ T5106] loop0: detected capacity change from 0 to 4096
[ 110.335363][ T5106] ntfs: (device loop0): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk.
[ 110.350614][ T5106] ntfs: (device loop0): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk.
[ 110.365818][ T5106] ntfs: (device loop0): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn.
[ 110.378748][ T5106] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk.
[ 110.393568][ T5106] ntfs: (device loop0): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default.
[ 110.409090][ T5106] ntfs: volume version 3.1.
[ 110.413955][ T5106] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt mapping pairs array in non-resident attribute.
[ 110.426758][ T5106] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0x2, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5).
[ 110.447821][ T5106] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt mapping pairs array in non-resident attribute.
[ 110.461153][ T5106] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0x2, attribute type 0x80, vcn 0x0, offset 0x800 because its location on disk could not be determined even after retrying (error code -5).
[ 110.482496][ T5106] ntfs: (device loop0): ntfs_check_logfile(): Error mapping $LogFile page (index 0).
[ 110.499279][ T5106] ==================================================================
[ 110.508202][ T5106] BUG: KASAN: slab-out-of-bounds in ntfs_readdir+0xdda/0x3550
[ 110.515696][ T5106] Read of size 1 at addr ffff888029e9b0e1 by task syz.0.17/5106
[ 110.524125][ T5106]
[ 110.526477][ T5106] CPU: 0 PID: 5106 Comm: syz.0.17 Not tainted syzkaller #0
[ 110.533760][ T5106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 110.543832][ T5106] Call Trace:
[ 110.547121][ T5106]
[ 110.550274][ T5106] dump_stack_lvl+0x168/0x230
[ 110.555157][ T5106] ? show_regs_print_info+0x20/0x20
[ 110.560466][ T5106] ? load_image+0x3b0/0x3b0
[ 110.565391][ T5106] ? _raw_spin_lock_irqsave+0xb0/0xf0
[ 110.570921][ T5106] print_address_description+0x60/0x2d0
[ 110.576576][ T5106] ? ntfs_readdir+0xdda/0x3550
[ 110.581611][ T5106] kasan_report+0xdf/0x130
[ 110.586181][ T5106] ? ntfs_readdir+0xdda/0x3550
[ 110.591002][ T5106] ? unmap_mft_record+0x171/0x2e0
[ 110.596036][ T5106] ntfs_readdir+0xdda/0x3550
[ 110.601044][ T5106] ? __might_sleep+0xf0/0xf0
[ 110.605740][ T5106] ? preempt_count_add+0x8d/0x190
[ 110.610982][ T5106] ? rwsem_write_trylock+0x12f/0x1b0
[ 110.616457][ T5106] ? clear_nonspinnable+0x60/0x60
[ 110.621477][ T5106] ? ntfs_unmap_page+0x200/0x200
[ 110.626562][ T5106] iterate_dir+0x218/0x560
[ 110.631329][ T5106] __se_sys_getdents64+0xe5/0x260
[ 110.636437][ T5106] ? __x64_sys_getdents64+0x80/0x80
[ 110.641715][ T5106] ? filldir+0x720/0x720
[ 110.646173][ T5106] ? vtime_user_exit+0x2dc/0x400
[ 110.651098][ T5106] ? lockdep_hardirqs_on+0x94/0x140
[ 110.656471][ T5106] do_syscall_64+0x4c/0xa0
[ 110.660970][ T5106] ? clear_bhb_loop+0x30/0x80
[ 110.665985][ T5106] ? clear_bhb_loop+0x30/0x80
[ 110.671086][ T5106] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 110.677121][ T5106] RIP: 0033:0x7f797859a749
[ 110.681738][ T5106] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 110.702211][ T5106] RSP: 002b:00007f7977c09038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9
[ 110.711106][ T5106] RAX: ffffffffffffffda RBX: 00007f79787f0fa0 RCX: 00007f797859a749
[ 110.719090][ T5106] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004
[ 110.727147][ T5106] RBP: 00007f797861ef91 R08: 0000000000000000 R09: 0000000000000000
[ 110.735294][ T5106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 110.743596][ T5106] R13: 00007f79787f1038 R14: 00007f79787f0fa0 R15: 00007ffc2dc75988
[ 110.751813][ T5106]
[ 110.754828][ T5106]
[ 110.757158][ T5106] Allocated by task 5106:
[ 110.761710][ T5106] __kasan_kmalloc+0xb5/0xf0
[ 110.766307][ T5106] ntfs_readdir+0x798/0x3550
[ 110.771359][ T5106] iterate_dir+0x218/0x560
[ 110.776181][ T5106] __se_sys_getdents64+0xe5/0x260
[ 110.781444][ T5106] do_syscall_64+0x4c/0xa0
[ 110.786158][ T5106] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 110.792293][ T5106]
[ 110.794705][ T5106] Last potentially related work creation:
[ 110.800795][ T5106] kasan_save_stack+0x35/0x60
[ 110.806302][ T5106] kasan_record_aux_stack+0xb8/0x100
[ 110.811905][ T5106] call_rcu+0x182/0x930
[ 110.816265][ T5106] mpls_dev_notify+0x56e/0x780
[ 110.821148][ T5106] raw_notifier_call_chain+0xcb/0x160
[ 110.826601][ T5106] unregister_netdevice_many+0xf57/0x18f0
[ 110.832511][ T5106] ip_tunnel_delete_nets+0x318/0x360
[ 110.837792][ T5106] cleanup_net+0x77b/0xb80
[ 110.842299][ T5106] process_one_work+0x863/0x1000
[ 110.847316][ T5106] worker_thread+0xaa8/0x12a0
[ 110.852095][ T5106] kthread+0x436/0x520
[ 110.856150][ T5106] ret_from_fork+0x1f/0x30
[ 110.860555][ T5106]
[ 110.863038][ T5106] The buggy address belongs to the object at ffff888029e9b080
[ 110.863038][ T5106] which belongs to the cache kmalloc-64 of size 64
[ 110.877308][ T5106] The buggy address is located 33 bytes to the right of
[ 110.877308][ T5106] 64-byte region [ffff888029e9b080, ffff888029e9b0c0)
[ 110.891184][ T5106] The buggy address belongs to the page:
[ 110.896836][ T5106] page:ffffea0000a7a6c0 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x29e9b
[ 110.907379][ T5106] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff)
[ 110.915451][ T5106] raw: 00fff00000000200 ffffea0000a7be80 0000000f0000000f ffff888016841640
[ 110.924167][ T5106] raw: 0000000000000000 0000000080200020 00000001ffffffff 0000000000000000
[ 110.932910][ T5106] page dumped because: kasan: bad access detected
[ 110.939506][ T5106] page_owner tracks the page as allocated
[ 110.945744][ T5106] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 1, ts 11666865897, free_ts 0
[ 110.960948][ T5106] get_page_from_freelist+0x1b77/0x1c60
[ 110.966500][ T5106] __alloc_pages+0x1e1/0x470
[ 110.971083][ T5106] alloc_page_interleave+0x24/0x1e0
[ 110.976369][ T5106] new_slab+0xc0/0x4b0
[ 110.980544][ T5106] ___slab_alloc+0x81e/0xdf0
[ 110.985403][ T5106] __kmalloc+0x1cd/0x330
[ 110.990045][ T5106] handler_new_ref+0x20b/0x950
[ 110.994824][ T5106] v4l2_ctrl_add_handler+0x197/0x280
[ 111.000119][ T5106] vivid_create_controls+0x2a90/0x33b0
[ 111.006292][ T5106] vivid_probe+0x3cde/0x6950
[ 111.011350][ T5106] platform_probe+0x137/0x1c0
[ 111.016226][ T5106] really_probe+0x284/0xc80
[ 111.020716][ T5106] __driver_probe_device+0x18c/0x330
[ 111.026077][ T5106] driver_probe_device+0x4f/0x420
[ 111.031085][ T5106] __driver_attach+0x46b/0x670
[ 111.035925][ T5106] bus_for_each_dev+0x175/0x1e0
[ 111.040783][ T5106] page_owner free stack trace missing
[ 111.046220][ T5106]
[ 111.048526][ T5106] Memory state around the buggy address:
[ 111.054158][ T5106] ffff888029e9af80: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[ 111.062494][ T5106] ffff888029e9b000: 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc
[ 111.070630][ T5106] >ffff888029e9b080: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc
[ 111.078758][ T5106] ^
[ 111.086292][ T5106] ffff888029e9b100: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[ 111.094428][ T5106] ffff888029e9b180: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[ 111.102647][ T5106] ==================================================================
[ 111.110799][ T5106] Disabling lock debugging due to kernel taint
[ 111.119235][ T4725] Bluetooth: hci0: command 0x040f tx timeout
[ 111.123795][ T5106] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 111.134355][ T5106] CPU: 1 PID: 5106 Comm: syz.0.17 Tainted: G B syzkaller #0
[ 111.143032][ T5106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 111.153103][ T5106] Call Trace:
[ 111.156485][ T5106]
[ 111.159503][ T5106] dump_stack_lvl+0x168/0x230
[ 111.164202][ T5106] ? show_regs_print_info+0x20/0x20
[ 111.169601][ T5106] ? load_image+0x3b0/0x3b0
[ 111.174103][ T5106] panic+0x2c9/0x7f0
[ 111.177983][ T5106] ? bpf_jit_dump+0xd0/0xd0
[ 111.182473][ T5106] ? _raw_spin_unlock_irqrestore+0xf6/0x100
[ 111.188536][ T5106] ? _raw_spin_unlock+0x40/0x40
[ 111.193720][ T5106] ? ntfs_readdir+0xdda/0x3550
[ 111.198478][ T5106] check_panic_on_warn+0x80/0xa0
[ 111.203657][ T5106] ? ntfs_readdir+0xdda/0x3550
[ 111.208595][ T5106] end_report+0x6d/0xf0
[ 111.212994][ T5106] kasan_report+0x102/0x130
[ 111.217502][ T5106] ? ntfs_readdir+0xdda/0x3550
[ 111.222275][ T5106] ? unmap_mft_record+0x171/0x2e0
[ 111.227306][ T5106] ntfs_readdir+0xdda/0x3550
[ 111.231980][ T5106] ? __might_sleep+0xf0/0xf0
[ 111.236573][ T5106] ? preempt_count_add+0x8d/0x190
[ 111.241593][ T5106] ? rwsem_write_trylock+0x12f/0x1b0
[ 111.247135][ T5106] ? clear_nonspinnable+0x60/0x60
[ 111.252242][ T5106] ? ntfs_unmap_page+0x200/0x200
[ 111.257319][ T5106] iterate_dir+0x218/0x560
[ 111.261849][ T5106] __se_sys_getdents64+0xe5/0x260
[ 111.267090][ T5106] ? __x64_sys_getdents64+0x80/0x80
[ 111.272461][ T5106] ? filldir+0x720/0x720
[ 111.276892][ T5106] ? vtime_user_exit+0x2dc/0x400
[ 111.281924][ T5106] ? lockdep_hardirqs_on+0x94/0x140
[ 111.287145][ T5106] do_syscall_64+0x4c/0xa0
[ 111.291719][ T5106] ? clear_bhb_loop+0x30/0x80
[ 111.296391][ T5106] ? clear_bhb_loop+0x30/0x80
[ 111.301062][ T5106] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 111.307682][ T5106] RIP: 0033:0x7f797859a749
[ 111.312188][ T5106] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 111.331950][ T5106] RSP: 002b:00007f7977c09038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9
[ 111.340553][ T5106] RAX: ffffffffffffffda RBX: 00007f79787f0fa0 RCX: 00007f797859a749
[ 111.348604][ T5106] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004
[ 111.357088][ T5106] RBP: 00007f797861ef91 R08: 0000000000000000 R09: 0000000000000000
[ 111.365142][ T5106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 111.373198][ T5106] R13: 00007f79787f1038 R14: 00007f79787f0fa0 R15: 00007ffc2dc75988
[ 111.381485][ T5106]
[ 111.385410][ T5106] Kernel Offset: disabled
[ 111.389756][ T5106] Rebooting in 86400 seconds..