Warning: Permanently added '10.128.1.69' (ED25519) to the list of known hosts.
2025/12/21 01:36:11 parsed 1 programs
[ 90.740641][ T5776] cgroup: Unknown subsys name 'net'
[ 90.873029][ T5776] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[ 92.206822][ T8] cfg80211: failed to load regulatory.db
[ 92.648106][ T5776] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 96.193651][ T5813] chnl_net:caif_netlink_parms(): no params data found
[ 96.301455][ T5813] bridge0: port 1(bridge_slave_0) entered blocking state
[ 96.311916][ T5813] bridge0: port 1(bridge_slave_0) entered disabled state
[ 96.319307][ T5813] bridge_slave_0: entered allmulticast mode
[ 96.327087][ T5813] bridge_slave_0: entered promiscuous mode
[ 96.336844][ T5813] bridge0: port 2(bridge_slave_1) entered blocking state
[ 96.344084][ T5813] bridge0: port 2(bridge_slave_1) entered disabled state
[ 96.353020][ T5813] bridge_slave_1: entered allmulticast mode
[ 96.360803][ T5813] bridge_slave_1: entered promiscuous mode
[ 96.403767][ T5813] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 96.416142][ T5813] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 96.450539][ T5813] team0: Port device team_slave_0 added
[ 96.470640][ T5813] team0: Port device team_slave_1 added
[ 96.511539][ T5813] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 96.518678][ T5813] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 96.545189][ T5813] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 96.571184][ T5813] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 96.578261][ T5813] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 96.604282][ T5813] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 96.661758][ T5813] hsr_slave_0: entered promiscuous mode
[ 96.668762][ T5813] hsr_slave_1: entered promiscuous mode
[ 96.857920][ T5813] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 96.872378][ T5813] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 96.884034][ T5813] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 96.906382][ T5813] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 96.942394][ T5813] bridge0: port 2(bridge_slave_1) entered blocking state
[ 96.950123][ T5813] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 96.958272][ T5813] bridge0: port 1(bridge_slave_0) entered blocking state
[ 96.965650][ T5813] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 97.045353][ T5813] 8021q: adding VLAN 0 to HW filter on device bond0
[ 97.073540][ T3482] bridge0: port 1(bridge_slave_0) entered disabled state
[ 97.083337][ T3482] bridge0: port 2(bridge_slave_1) entered disabled state
[ 97.101927][ T5813] 8021q: adding VLAN 0 to HW filter on device team0
[ 97.120608][ T49] bridge0: port 1(bridge_slave_0) entered blocking state
[ 97.128485][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 97.149600][ T3482] bridge0: port 2(bridge_slave_1) entered blocking state
[ 97.156836][ T3482] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 97.363170][ T5813] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 97.411406][ T5813] veth0_vlan: entered promiscuous mode
[ 97.423879][ T5813] veth1_vlan: entered promiscuous mode
[ 97.456235][ T5813] veth0_macvtap: entered promiscuous mode
[ 97.466209][ T5813] veth1_macvtap: entered promiscuous mode
[ 97.486056][ T5813] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 97.501387][ T5813] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 97.514050][ T5813] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 97.523154][ T5813] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 97.533073][ T5813] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 97.542410][ T5813] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 97.697127][ T49] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 98.591822][ T1121] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 98.605886][ T1121] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 98.646539][ T1121] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 98.657415][ T1121] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 99.446546][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 99.457182][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 99.465818][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 99.474146][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 99.483127][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 99.490654][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
2025/12/21 01:36:23 executed programs: 0
[ 100.405804][ T5083] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 100.413850][ T5083] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 100.423554][ T5083] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 100.432289][ T5083] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 100.441602][ T5083] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 100.449156][ T5083] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 100.465762][ T49] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 100.637462][ T5882] chnl_net:caif_netlink_parms(): no params data found
[ 100.711047][ T5882] bridge0: port 1(bridge_slave_0) entered blocking state
[ 100.718416][ T5882] bridge0: port 1(bridge_slave_0) entered disabled state
[ 100.725804][ T5882] bridge_slave_0: entered allmulticast mode
[ 100.732902][ T5882] bridge_slave_0: entered promiscuous mode
[ 100.742528][ T5882] bridge0: port 2(bridge_slave_1) entered blocking state
[ 100.750669][ T5882] bridge0: port 2(bridge_slave_1) entered disabled state
[ 100.758074][ T5882] bridge_slave_1: entered allmulticast mode
[ 100.766276][ T5882] bridge_slave_1: entered promiscuous mode
[ 100.800563][ T5882] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 100.812457][ T5882] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 100.849026][ T5882] team0: Port device team_slave_0 added
[ 100.859060][ T5882] team0: Port device team_slave_1 added
[ 100.888064][ T5882] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 100.895633][ T5882] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 100.922509][ T5882] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 100.935821][ T5882] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 100.942817][ T5882] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 100.969629][ T5882] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 101.013182][ T5882] hsr_slave_0: entered promiscuous mode
[ 101.021640][ T5882] hsr_slave_1: entered promiscuous mode
[ 101.028453][ T5882] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 101.037302][ T5882] Cannot create hsr debugfs directory
[ 102.525145][ T51] Bluetooth: hci0: command tx timeout
[ 102.666329][ T49] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 102.711445][ T49] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 103.616169][ T5882] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 103.630015][ T5882] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 103.655018][ T5882] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 103.667714][ T5882] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 103.757265][ T49] hsr_slave_0: left promiscuous mode
[ 103.773916][ T49] hsr_slave_1: left promiscuous mode
[ 103.785679][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 103.793281][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 103.803999][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 103.812247][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 103.823310][ T49] bridge_slave_1: left allmulticast mode
[ 103.829426][ T49] bridge_slave_1: left promiscuous mode
[ 103.840002][ T49] bridge0: port 2(bridge_slave_1) entered disabled state
[ 103.853131][ T49] bridge_slave_0: left allmulticast mode
[ 103.862664][ T49] bridge_slave_0: left promiscuous mode
[ 103.870557][ T49] bridge0: port 1(bridge_slave_0) entered disabled state
[ 103.905838][ T49] veth1_macvtap: left promiscuous mode
[ 103.911857][ T49] veth0_macvtap: left promiscuous mode
[ 103.918204][ T49] veth1_vlan: left promiscuous mode
[ 103.923820][ T49] veth0_vlan: left promiscuous mode
[ 104.483881][ T49] team0 (unregistering): Port device team_slave_1 removed
[ 104.518267][ T49] team0 (unregistering): Port device team_slave_0 removed
[ 104.558987][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 104.593442][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 104.617366][ T51] Bluetooth: hci0: command tx timeout
[ 104.952726][ T49] bond0 (unregistering): Released all slaves
[ 105.073067][ T5882] 8021q: adding VLAN 0 to HW filter on device bond0
[ 105.108245][ T5882] 8021q: adding VLAN 0 to HW filter on device team0
[ 105.129660][ T3482] bridge0: port 1(bridge_slave_0) entered blocking state
[ 105.136942][ T3482] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 105.157883][ T992] bridge0: port 2(bridge_slave_1) entered blocking state
[ 105.165106][ T992] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 105.409228][ T5882] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 105.454809][ T5882] veth0_vlan: entered promiscuous mode
[ 105.472516][ T5882] veth1_vlan: entered promiscuous mode
[ 105.549999][ T5882] veth0_macvtap: entered promiscuous mode
[ 105.564082][ T5882] veth1_macvtap: entered promiscuous mode
[ 105.611675][ T5882] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 105.628442][ T5882] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 105.643482][ T5882] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 105.652882][ T5882] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 105.661869][ T5882] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 105.672966][ T5882] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 105.793722][ T1121] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 105.802624][ T1121] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 105.832121][ T3452] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 105.840193][ T3452] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
2025/12/21 01:36:29 executed programs: 2
[ 105.903678][ T5927] syz.0.17[5927]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set
[ 105.969275][ T5927] loop0: detected capacity change from 0 to 4096
[ 106.033985][ T5927] ntfs: (device loop0): parse_options(): NLS character set maccentHuro not found. Using previous one cp857.
[ 106.049585][ T5927] ntfs: (device loop0): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1.
[ 106.088824][ T5927] ntfs: volume version 3.1.
[ 106.099984][ T5927] ntfs: (device loop0): ntfs_index_lookup(): Corrupt index. Aborting lookup.
[ 106.110973][ T5927] ntfs: (device loop0): ntfs_mark_quotas_out_of_date(): Lookup of quota defaults entry failed.
[ 106.132022][ T5927] ntfs: (device loop0): load_system_files(): Failed to mark quotas out of date. Mounting read-only. Run chkdsk.
[ 106.145787][ T5927] ntfs: (device loop0): ntfs_lookup_inode_by_name(): Corrupt directory. Aborting lookup.
[ 106.157309][ T5927] ntfs: (device loop0): load_and_init_usnjrnl(): Failed to find inode number for $UsnJrnl.
[ 106.167730][ T5927] ntfs: (device loop0): load_system_files(): Failed to load $UsnJrnl. Will not be able to remount read-write. Run chkdsk.
[ 106.202200][ T5882] ntfs: (device loop0): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set cp857. You might want to try to use the mount option nls=utf8.
[ 106.241522][ T5882] ntfs: (device loop0): ntfs_filldir(): Skipping unrepresentable inode 0x4.
[ 106.261810][ T5882] ==================================================================
[ 106.269959][ T5882] BUG: KASAN: slab-out-of-bounds in ntfs_readdir+0xd6f/0x2970
[ 106.277483][ T5882] Read of size 1 at addr ffff88806015ad99 by task syz-executor/5882
[ 106.285483][ T5882]
[ 106.287850][ T5882] CPU: 1 PID: 5882 Comm: syz-executor Not tainted syzkaller #0
[ 106.295416][ T5882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 106.305510][ T5882] Call Trace:
[ 106.308846][ T5882]
[ 106.311809][ T5882] dump_stack_lvl+0x16c/0x230
[ 106.316531][ T5882] ? __lock_acquire+0x7c80/0x7c80
[ 106.321581][ T5882] ? show_regs_print_info+0x20/0x20
[ 106.326914][ T5882] ? load_image+0x3b0/0x3b0
[ 106.331477][ T5882] ? __virt_addr_valid+0x469/0x540
[ 106.336865][ T5882] print_report+0xac/0x220
[ 106.341317][ T5882] ? ntfs_readdir+0xd6f/0x2970
[ 106.346126][ T5882] kasan_report+0x117/0x150
[ 106.350658][ T5882] ? filldir64+0x462/0x680
[ 106.355102][ T5882] ? ntfs_readdir+0xd6f/0x2970
[ 106.359917][ T5882] ntfs_readdir+0xd6f/0x2970
[ 106.364548][ T5882] ? __might_sleep+0xe0/0xe0
[ 106.369184][ T5882] ? ntfs_dir_fsync+0x410/0x410
[ 106.374071][ T5882] ? down_write+0x162/0x1f0
[ 106.378596][ T5882] ? down_read_killable+0x340/0x340
[ 106.383814][ T5882] ? end_current_label_crit_section+0x149/0x170
[ 106.390081][ T5882] ? ntfs_dir_fsync+0x410/0x410
[ 106.394967][ T5882] wrap_directory_iterator+0x92/0xd0
[ 106.400293][ T5882] iterate_dir+0x1c2/0x580
[ 106.404737][ T5882] __se_sys_getdents64+0xe9/0x260
[ 106.409876][ T5882] ? __x64_sys_getdents64+0x80/0x80
[ 106.415120][ T5882] ? filldir+0x680/0x680
[ 106.419391][ T5882] ? lock_chain_count+0x20/0x20
[ 106.424273][ T5882] ? lockdep_hardirqs_on+0x98/0x150
[ 106.429507][ T5882] do_syscall_64+0x55/0xb0
[ 106.433943][ T5882] ? clear_bhb_loop+0x40/0x90
[ 106.438644][ T5882] ? clear_bhb_loop+0x40/0x90
[ 106.443346][ T5882] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 106.449263][ T5882] RIP: 0033:0x7fe565bc20b3
[ 106.453715][ T5882] Code: c1 66 0f 1f 44 00 00 48 83 c4 08 48 89 ef 5b 5d e9 62 3d f8 ff 66 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 a8 ff ff ff f7 d8
[ 106.473376][ T5882] RSP: 002b:00007ffc12290a68 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9
[ 106.481829][ T5882] RAX: ffffffffffffffda RBX: 000055559090e640 RCX: 00007fe565bc20b3
[ 106.489821][ T5882] RDX: 0000000000008000 RSI: 000055559090e640 RDI: 0000000000000006
[ 106.497818][ T5882] RBP: 000055559090e614 R08: 0000000000000000 R09: 0000000000000000
[ 106.505817][ T5882] R10: 0000000000001000 R11: 0000000000000293 R12: ffffffffffffffa8
[ 106.513828][ T5882] R13: 0000000000000016 R14: 000055559090e610 R15: 00007ffc12293e10
[ 106.521837][ T5882]
[ 106.524879][ T5882]
[ 106.527233][ T5882] Allocated by task 5882:
[ 106.531573][ T5882] kasan_set_track+0x4e/0x70
[ 106.536186][ T5882] __kasan_kmalloc+0x8f/0xa0
[ 106.540802][ T5882] __kmalloc+0xb4/0x240
[ 106.544981][ T5882] ntfs_readdir+0x754/0x2970
[ 106.549599][ T5882] wrap_directory_iterator+0x92/0xd0
[ 106.554906][ T5882] iterate_dir+0x1c2/0x580
[ 106.559355][ T5882] __se_sys_getdents64+0xe9/0x260
[ 106.564407][ T5882] do_syscall_64+0x55/0xb0
[ 106.568847][ T5882] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 106.574765][ T5882]
[ 106.577111][ T5882] The buggy address belongs to the object at ffff88806015ac00
[ 106.577111][ T5882] which belongs to the cache kmalloc-512 of size 512
[ 106.591186][ T5882] The buggy address is located 65 bytes to the right of
[ 106.591186][ T5882] allocated 344-byte region [ffff88806015ac00, ffff88806015ad58)
[ 106.605794][ T5882]
[ 106.608138][ T5882] The buggy address belongs to the physical page:
[ 106.614588][ T5882] page:ffffea0001805600 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x60158
[ 106.624770][ T5882] head:ffffea0001805600 order:2 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 106.633724][ T5882] flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff)
[ 106.641739][ T5882] page_type: 0xffffffff()
[ 106.646090][ T5882] raw: 00fff00000000840 ffff888017841c80 dead000000000122 0000000000000000
[ 106.654698][ T5882] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000
[ 106.663304][ T5882] page dumped because: kasan: bad access detected
[ 106.669751][ T5882] page_owner tracks the page as allocated
[ 106.675484][ T5882] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 5138, tgid 5138 (udevd), ts 105913993497, free_ts 105885039708
[ 106.697821][ T5882] post_alloc_hook+0x1cd/0x210
[ 106.702615][ T5882] get_page_from_freelist+0x195c/0x19f0
[ 106.708196][ T5882] __alloc_pages+0x1e3/0x460
[ 106.712821][ T5882] alloc_slab_page+0x5d/0x170
[ 106.717528][ T5882] new_slab+0x87/0x2e0
[ 106.721625][ T5882] ___slab_alloc+0xc6d/0x1300
[ 106.726336][ T5882] __kmem_cache_alloc_node+0x1a2/0x260
[ 106.731820][ T5882] kmalloc_trace+0x2a/0xe0
[ 106.736263][ T5882] kernfs_fop_open+0x3f5/0xcc0
[ 106.741058][ T5882] do_dentry_open+0x8c6/0x1500
[ 106.745843][ T5882] path_openat+0x274b/0x3190
[ 106.750467][ T5882] do_filp_open+0x1c5/0x3d0
[ 106.755000][ T5882] do_sys_openat2+0x12c/0x1c0
[ 106.759713][ T5882] __x64_sys_openat+0x139/0x160
[ 106.764599][ T5882] do_syscall_64+0x55/0xb0
[ 106.769048][ T5882] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 106.774971][ T5882] page last free stack trace:
[ 106.779662][ T5882] free_unref_page_prepare+0x7ce/0x8e0
[ 106.785149][ T5882] free_unref_page+0x32/0x2e0
[ 106.789854][ T5882] __stack_depot_save+0x572/0x630
[ 106.794924][ T5882] kasan_set_track+0x5f/0x70
[ 106.799531][ T5882] kasan_save_free_info+0x2e/0x50
[ 106.804609][ T5882] ____kasan_slab_free+0x126/0x1e0
[ 106.809749][ T5882] slab_free_freelist_hook+0x130/0x1b0
[ 106.815245][ T5882] kmem_cache_free+0xf8/0x280
[ 106.819944][ T5882] net_rx_action+0x41f/0xbf0
[ 106.824553][ T5882] handle_softirqs+0x280/0x820
[ 106.829331][ T5882] do_softirq+0xed/0x180
[ 106.833592][ T5882] __local_bh_enable_ip+0x178/0x1c0
[ 106.838816][ T5882] __dev_queue_xmit+0x1449/0x35a0
[ 106.843865][ T5882] ip6_finish_output2+0xe2e/0x1650
[ 106.849040][ T5882] ndisc_send_skb+0xbed/0x14b0
[ 106.853820][ T5882] ndisc_send_ns+0xcc/0x150
[ 106.858340][ T5882]
[ 106.860676][ T5882] Memory state around the buggy address:
[ 106.866326][ T5882] ffff88806015ac80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 106.874404][ T5882] ffff88806015ad00: 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc fc
[ 106.882495][ T5882] >ffff88806015ad80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 106.890592][ T5882] ^
[ 106.895457][ T5882] ffff88806015ae00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 106.903533][ T5882] ffff88806015ae80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 106.911615][ T5882] ==================================================================
[ 106.949567][ T51] Bluetooth: hci0: command tx timeout
[ 106.987339][ T5882] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 106.994691][ T5882] CPU: 0 PID: 5882 Comm: syz-executor Not tainted syzkaller #0
[ 107.002283][ T5882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 107.012384][ T5882] Call Trace:
[ 107.015697][ T5882]
[ 107.018661][ T5882] dump_stack_lvl+0x16c/0x230
[ 107.023391][ T5882] ? show_regs_print_info+0x20/0x20
[ 107.028641][ T5882] ? load_image+0x3b0/0x3b0
[ 107.033199][ T5882] panic+0x2c0/0x710
[ 107.037166][ T5882] ? bpf_jit_dump+0xd0/0xd0
[ 107.041720][ T5882] ? _raw_spin_unlock_irqrestore+0xfa/0x110
[ 107.047665][ T5882] ? _raw_spin_unlock+0x40/0x40
[ 107.052579][ T5882] ? print_memory_metadata+0x314/0x400
[ 107.058098][ T5882] ? ntfs_readdir+0xd6f/0x2970
[ 107.062926][ T5882] check_panic_on_warn+0x84/0xa0
[ 107.067916][ T5882] ? ntfs_readdir+0xd6f/0x2970
[ 107.072726][ T5882] end_report+0x6f/0x140
[ 107.077022][ T5882] kasan_report+0x128/0x150
[ 107.081564][ T5882] ? filldir64+0x462/0x680
[ 107.086030][ T5882] ? ntfs_readdir+0xd6f/0x2970
[ 107.090874][ T5882] ntfs_readdir+0xd6f/0x2970
[ 107.095521][ T5882] ? __might_sleep+0xe0/0xe0
[ 107.100163][ T5882] ? ntfs_dir_fsync+0x410/0x410
[ 107.105076][ T5882] ? down_write+0x162/0x1f0
[ 107.109653][ T5882] ? down_read_killable+0x340/0x340
[ 107.114889][ T5882] ? end_current_label_crit_section+0x149/0x170
[ 107.121184][ T5882] ? ntfs_dir_fsync+0x410/0x410
[ 107.126110][ T5882] wrap_directory_iterator+0x92/0xd0
[ 107.131450][ T5882] iterate_dir+0x1c2/0x580
[ 107.135925][ T5882] __se_sys_getdents64+0xe9/0x260
[ 107.141006][ T5882] ? __x64_sys_getdents64+0x80/0x80
[ 107.146256][ T5882] ? filldir+0x680/0x680
[ 107.150549][ T5882] ? lock_chain_count+0x20/0x20
[ 107.155452][ T5882] ? lockdep_hardirqs_on+0x98/0x150
[ 107.160709][ T5882] do_syscall_64+0x55/0xb0
[ 107.165145][ T5882] ? clear_bhb_loop+0x40/0x90
[ 107.169834][ T5882] ? clear_bhb_loop+0x40/0x90
[ 107.174523][ T5882] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 107.180539][ T5882] RIP: 0033:0x7fe565bc20b3
[ 107.184979][ T5882] Code: c1 66 0f 1f 44 00 00 48 83 c4 08 48 89 ef 5b 5d e9 62 3d f8 ff 66 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 a8 ff ff ff f7 d8
[ 107.204615][ T5882] RSP: 002b:00007ffc12290a68 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9
[ 107.213080][ T5882] RAX: ffffffffffffffda RBX: 000055559090e640 RCX: 00007fe565bc20b3
[ 107.221092][ T5882] RDX: 0000000000008000 RSI: 000055559090e640 RDI: 0000000000000006
[ 107.229112][ T5882] RBP: 000055559090e614 R08: 0000000000000000 R09: 0000000000000000
[ 107.237107][ T5882] R10: 0000000000001000 R11: 0000000000000293 R12: ffffffffffffffa8
[ 107.245093][ T5882] R13: 0000000000000016 R14: 000055559090e610 R15: 00007ffc12293e10
[ 107.253113][ T5882]
[ 107.256751][ T5882] Kernel Offset: disabled
[ 107.261096][ T5882] Rebooting in 86400 seconds..