Warning: Permanently added '10.128.1.45' (ED25519) to the list of known hosts. 2025/08/31 11:42:35 parsed 1 programs [ 61.375319][ T4188] cgroup: Unknown subsys name 'net' [ 61.514358][ T4188] cgroup: Unknown subsys name 'rlimit' [ 62.740425][ T4188] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 65.029465][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.037652][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.064413][ T1134] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 65.084087][ T1134] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.092850][ T1134] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.102761][ T4221] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.277779][ T4245] chnl_net:caif_netlink_parms(): no params data found [ 66.336309][ T4245] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.344225][ T4245] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.352462][ T4245] device bridge_slave_0 entered promiscuous mode [ 66.362552][ T4245] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.369916][ T4245] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.377757][ T4245] device bridge_slave_1 entered promiscuous mode [ 66.395625][ T4245] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.408566][ T4245] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.430996][ T4245] team0: Port device team_slave_0 added [ 66.438670][ T4245] team0: Port device team_slave_1 added [ 66.454800][ T4245] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.462723][ T4245] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.491060][ T4245] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.505495][ T4245] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.512874][ T4245] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.540967][ T4245] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.569050][ T4245] device hsr_slave_0 entered promiscuous mode [ 66.576870][ T4245] device hsr_slave_1 entered promiscuous mode [ 66.650350][ T4245] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 66.663620][ T4245] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 66.672180][ T4245] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 66.681932][ T4245] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 66.705099][ T4245] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.712594][ T4245] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.721060][ T4245] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.729318][ T4245] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.767685][ T4245] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.785080][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.796305][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.807707][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.822233][ T4245] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.852915][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.862131][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.869184][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.883765][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.894197][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.901919][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.920744][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.954707][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.967387][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.000943][ T4221] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.014012][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.024761][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.112949][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.121611][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.134174][ T4245] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.168084][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.177650][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.194720][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.204184][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.213431][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.221783][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.231591][ T4245] device veth0_vlan entered promiscuous mode [ 67.243497][ T4245] device veth1_vlan entered promiscuous mode [ 67.281729][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.291391][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.300050][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.308813][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.321125][ T4245] device veth0_macvtap entered promiscuous mode [ 67.331188][ T4245] device veth1_macvtap entered promiscuous mode [ 67.368384][ T4245] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.376201][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.385751][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.395002][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.405844][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.417420][ T4245] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.426478][ T1134] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.435807][ T1134] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.448289][ T4245] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.457901][ T4245] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.467213][ T4245] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.476820][ T4245] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.584370][ T4245] syz-executor (4245) used greatest stack depth: 20448 bytes left 2025/08/31 11:42:43 executed programs: 0 [ 68.622449][ T4297] chnl_net:caif_netlink_parms(): no params data found [ 68.697801][ T4297] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.705340][ T4297] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.716907][ T4297] device bridge_slave_0 entered promiscuous mode [ 68.728788][ T4297] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.738901][ T4297] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.753250][ T4297] device bridge_slave_1 entered promiscuous mode [ 68.796773][ T4297] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.809039][ T4297] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.842081][ T4297] team0: Port device team_slave_0 added [ 68.851534][ T4297] team0: Port device team_slave_1 added [ 68.877348][ T4297] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.884782][ T4297] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.911601][ T4297] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.924709][ T4297] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.932521][ T4297] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.960454][ T4297] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.005252][ T4297] device hsr_slave_0 entered promiscuous mode [ 69.015178][ T4297] device hsr_slave_1 entered promiscuous mode [ 69.022394][ T4297] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.033304][ T4297] Cannot create hsr debugfs directory [ 69.147116][ T4297] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.470377][ T4265] Bluetooth: hci0: command 0x0409 tx timeout [ 71.512192][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.518691][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.325664][ T4297] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.549682][ T4264] Bluetooth: hci0: command 0x041b tx timeout [ 72.645837][ T4297] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.716469][ T4297] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.845337][ T4297] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 72.854953][ T4297] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 72.865253][ T4297] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 72.880365][ T4297] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 72.931739][ T4297] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.946319][ T1134] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.956009][ T1134] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.977165][ T4297] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.986171][ T1134] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.995994][ T1134] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.005639][ T1134] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.013402][ T1134] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.022074][ T1134] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.045486][ T1134] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.054442][ T1134] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.064786][ T1134] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.072220][ T1134] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.099323][ T4297] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 73.110714][ T4297] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.126709][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.137148][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.147961][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.158739][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.168231][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.177781][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.187848][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.197120][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.206215][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.214600][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.224285][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.232761][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.308949][ T1134] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.317667][ T1134] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.330415][ T4297] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.345718][ T154] device hsr_slave_0 left promiscuous mode [ 73.352643][ T154] device hsr_slave_1 left promiscuous mode [ 73.359449][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 73.368030][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 73.377303][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 73.387103][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 73.395359][ T154] device bridge_slave_1 left promiscuous mode [ 73.403187][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.415647][ T154] device bridge_slave_0 left promiscuous mode [ 73.422122][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.439197][ T154] device veth1_macvtap left promiscuous mode [ 73.446191][ T154] device veth0_macvtap left promiscuous mode [ 73.453221][ T154] device veth1_vlan left promiscuous mode [ 73.460283][ T154] device veth0_vlan left promiscuous mode [ 73.578522][ T154] team0 (unregistering): Port device team_slave_1 removed [ 73.598919][ T154] team0 (unregistering): Port device team_slave_0 removed [ 73.616317][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 73.629428][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 73.685010][ T154] bond0 (unregistering): Released all slaves [ 73.729124][ T1134] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.738670][ T1134] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.757055][ T1134] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.766563][ T1134] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.777456][ T1134] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.786044][ T1134] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.796750][ T4297] device veth0_vlan entered promiscuous mode [ 73.810705][ T4297] device veth1_vlan entered promiscuous mode [ 73.837938][ T1134] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.847143][ T1134] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.856804][ T1134] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.865781][ T1134] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.876683][ T4297] device veth0_macvtap entered promiscuous mode [ 73.887518][ T4297] device veth1_macvtap entered promiscuous mode [ 73.905744][ T4297] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.917921][ T4297] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.927462][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.936473][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.945654][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.954815][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.964491][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.975509][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.986830][ T4297] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.996463][ T4297] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.005964][ T4297] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.015523][ T4297] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.081164][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.089983][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.105252][ T4221] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.119888][ T4221] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.128773][ T4221] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.138317][ T4221] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 2025/08/31 11:42:49 executed programs: 2 [ 74.234234][ T4320] loop0: detected capacity change from 0 to 4096 [ 74.365999][ T4320] ntfs: (device loop0): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 74.399226][ T4320] ntfs: (device loop0): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 74.430349][ T4320] ntfs: (device loop0): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 74.459593][ T4320] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 74.477007][ T4320] ntfs: (device loop0): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 74.513991][ T4320] ntfs: volume version 3.1. [ 74.522025][ T4320] ntfs: (device loop0): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 74.546572][ T4320] ntfs: (device loop0): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 74.560915][ T4320] ntfs: (device loop0): ntfs_lookup_inode_by_name(): Corrupt directory. Aborting lookup. [ 74.572192][ T4320] ntfs: (device loop0): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 74.584684][ T4320] ntfs: (device loop0): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 74.624569][ T4297] ================================================================== [ 74.633694][ T4297] BUG: KASAN: slab-out-of-bounds in ntfs_readdir+0xdda/0x3550 [ 74.642239][ T4297] Read of size 1 at addr ffff888023c284e1 by task syz-executor/4297 [ 74.651270][ T4297] [ 74.653966][ T4297] CPU: 1 PID: 4297 Comm: syz-executor Not tainted syzkaller #0 [ 74.662228][ T4297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 74.669975][ T4285] Bluetooth: hci0: command 0x040f tx timeout [ 74.672938][ T4297] Call Trace: [ 74.682714][ T4297] [ 74.685842][ T4297] dump_stack_lvl+0x168/0x230 [ 74.690812][ T4297] ? show_regs_print_info+0x20/0x20 [ 74.696325][ T4297] ? load_image+0x3b0/0x3b0 [ 74.701401][ T4297] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 74.707617][ T4297] print_address_description+0x60/0x2d0 [ 74.714247][ T4297] ? ntfs_readdir+0xdda/0x3550 [ 74.719231][ T4297] kasan_report+0xdf/0x130 [ 74.723856][ T4297] ? ntfs_readdir+0xdda/0x3550 [ 74.729209][ T4297] ? unmap_mft_record+0x171/0x2e0 [ 74.734855][ T4297] ntfs_readdir+0xdda/0x3550 [ 74.739800][ T4297] ? lock_acquire+0x1f2/0x3f0 [ 74.744850][ T4297] ? __might_sleep+0xf0/0xf0 [ 74.750248][ T4297] ? preempt_count_add+0x8d/0x190 [ 74.755737][ T4297] ? rwsem_write_trylock+0x12f/0x1b0 [ 74.761397][ T4297] ? clear_nonspinnable+0x60/0x60 [ 74.767690][ T4297] ? ntfs_unmap_page+0x200/0x200 [ 74.773412][ T4297] iterate_dir+0x218/0x560 [ 74.778264][ T4297] __se_sys_getdents64+0xe5/0x260 [ 74.783989][ T4297] ? lockdep_hardirqs_on+0x94/0x140 [ 74.790145][ T4297] ? __x64_sys_getdents64+0x80/0x80 [ 74.796079][ T4297] ? filldir+0x720/0x720 [ 74.801109][ T4297] ? syscall_enter_from_user_mode+0x2a/0x70 [ 74.807332][ T4297] do_syscall_64+0x4c/0xa0 [ 74.812079][ T4297] ? clear_bhb_loop+0x30/0x80 [ 74.817648][ T4297] ? clear_bhb_loop+0x30/0x80 [ 74.823492][ T4297] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 74.829782][ T4297] RIP: 0033:0x7efd55581553 [ 74.834489][ T4297] Code: c1 66 0f 1f 44 00 00 48 83 c4 08 48 89 ef 5b 5d e9 52 3e f8 ff 66 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 a8 ff ff ff f7 d8 [ 74.857120][ T4297] RSP: 002b:00007ffc910fc388 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 74.867263][ T4297] RAX: ffffffffffffffda RBX: 0000555561a15600 RCX: 00007efd55581553 [ 74.876345][ T4297] RDX: 0000000000008000 RSI: 0000555561a15600 RDI: 0000000000000005 [ 74.884797][ T4297] RBP: 0000555561a155d4 R08: 0000000000028a41 R09: 0000000000000000 [ 74.894294][ T4297] R10: 00007efd55757cc0 R11: 0000000000000293 R12: ffffffffffffffa8 [ 74.902634][ T4297] R13: 0000000000000010 R14: 0000555561a155d0 R15: 00007ffc910fe640 [ 74.910835][ T4297] [ 74.913956][ T4297] [ 74.916292][ T4297] Allocated by task 4297: [ 74.920727][ T4297] __kasan_kmalloc+0xb5/0xf0 [ 74.925480][ T4297] ntfs_readdir+0x798/0x3550 [ 74.930271][ T4297] iterate_dir+0x218/0x560 [ 74.934915][ T4297] __se_sys_getdents64+0xe5/0x260 [ 74.940217][ T4297] do_syscall_64+0x4c/0xa0 [ 74.945188][ T4297] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 74.951638][ T4297] [ 74.953985][ T4297] The buggy address belongs to the object at ffff888023c28480 [ 74.953985][ T4297] which belongs to the cache kmalloc-64 of size 64 [ 74.968627][ T4297] The buggy address is located 33 bytes to the right of [ 74.968627][ T4297] 64-byte region [ffff888023c28480, ffff888023c284c0) [ 74.984239][ T4297] The buggy address belongs to the page: [ 74.990259][ T4297] page:ffffea00008f0a00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x23c28 [ 75.002527][ T4297] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 75.011455][ T4297] raw: 00fff00000000200 0000000000000000 0000001b00000001 ffff888016841640 [ 75.021522][ T4297] raw: 0000000000000000 0000000080200020 00000001ffffffff 0000000000000000 [ 75.032356][ T4297] page dumped because: kasan: bad access detected [ 75.039631][ T4297] page_owner tracks the page as allocated [ 75.045670][ T4297] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 1, ts 9795279320, free_ts 0 [ 75.062198][ T4297] get_page_from_freelist+0x1b77/0x1c60 [ 75.068704][ T4297] __alloc_pages+0x1e1/0x470 [ 75.073522][ T4297] alloc_page_interleave+0x24/0x1e0 [ 75.079184][ T4297] new_slab+0xc0/0x4b0 [ 75.083378][ T4297] ___slab_alloc+0x81e/0xdf0 [ 75.088093][ T4297] __kmalloc+0x1cd/0x330 [ 75.092884][ T4297] kobject_get_path+0xae/0x210 [ 75.097839][ T4297] kobject_uevent_env+0x290/0x890 [ 75.103853][ T4297] device_add+0x91c/0xfb0 [ 75.120806][ T4297] usb_new_device+0xd53/0x1640 [ 75.126416][ T4297] register_root_hub+0x278/0x580 [ 75.132365][ T4297] usb_add_hcd+0xa88/0xef0 [ 75.137317][ T4297] dummy_hcd_probe+0x130/0x260 [ 75.142383][ T4297] platform_probe+0x137/0x1c0 [ 75.147098][ T4297] really_probe+0x284/0xc80 [ 75.152423][ T4297] __driver_probe_device+0x18c/0x330 [ 75.158477][ T4297] page_owner free stack trace missing [ 75.164132][ T4297] [ 75.166576][ T4297] Memory state around the buggy address: [ 75.172636][ T4297] ffff888023c28380: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 75.181067][ T4297] ffff888023c28400: 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc [ 75.189674][ T4297] >ffff888023c28480: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc [ 75.197824][ T4297] ^ [ 75.205634][ T4297] ffff888023c28500: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 75.214284][ T4297] ffff888023c28580: 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc [ 75.223350][ T4297] ================================================================== [ 75.231771][ T4297] Disabling lock debugging due to kernel taint [ 75.248198][ T4297] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 75.255886][ T4297] CPU: 0 PID: 4297 Comm: syz-executor Tainted: G B syzkaller #0 [ 75.265309][ T4297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 75.276537][ T4297] Call Trace: [ 75.280380][ T4297] [ 75.283321][ T4297] dump_stack_lvl+0x168/0x230 [ 75.288586][ T4297] ? show_regs_print_info+0x20/0x20 [ 75.294696][ T4297] ? load_image+0x3b0/0x3b0 [ 75.299530][ T4297] panic+0x2c9/0x7f0 [ 75.303804][ T4297] ? bpf_jit_dump+0xd0/0xd0 [ 75.308907][ T4297] ? _raw_spin_unlock_irqrestore+0xf6/0x100 [ 75.315796][ T4297] ? _raw_spin_unlock+0x40/0x40 [ 75.322814][ T4297] ? ntfs_readdir+0xdda/0x3550 [ 75.331502][ T4297] check_panic_on_warn+0x80/0xa0 [ 75.336688][ T4297] ? ntfs_readdir+0xdda/0x3550 [ 75.342618][ T4297] end_report+0x6d/0xf0 [ 75.347245][ T4297] kasan_report+0x102/0x130 [ 75.352157][ T4297] ? ntfs_readdir+0xdda/0x3550 [ 75.357218][ T4297] ? unmap_mft_record+0x171/0x2e0 [ 75.363231][ T4297] ntfs_readdir+0xdda/0x3550 [ 75.368200][ T4297] ? lock_acquire+0x1f2/0x3f0 [ 75.374166][ T4297] ? __might_sleep+0xf0/0xf0 [ 75.379291][ T4297] ? preempt_count_add+0x8d/0x190 [ 75.385097][ T4297] ? rwsem_write_trylock+0x12f/0x1b0 [ 75.390605][ T4297] ? clear_nonspinnable+0x60/0x60 [ 75.396517][ T4297] ? ntfs_unmap_page+0x200/0x200 [ 75.402031][ T4297] iterate_dir+0x218/0x560 [ 75.406724][ T4297] __se_sys_getdents64+0xe5/0x260 [ 75.412495][ T4297] ? lockdep_hardirqs_on+0x94/0x140 [ 75.417822][ T4297] ? __x64_sys_getdents64+0x80/0x80 [ 75.423624][ T4297] ? filldir+0x720/0x720 [ 75.428350][ T4297] ? syscall_enter_from_user_mode+0x2a/0x70 [ 75.435835][ T4297] do_syscall_64+0x4c/0xa0 [ 75.441229][ T4297] ? clear_bhb_loop+0x30/0x80 [ 75.446796][ T4297] ? clear_bhb_loop+0x30/0x80 [ 75.452522][ T4297] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 75.459167][ T4297] RIP: 0033:0x7efd55581553 [ 75.464440][ T4297] Code: c1 66 0f 1f 44 00 00 48 83 c4 08 48 89 ef 5b 5d e9 52 3e f8 ff 66 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 a8 ff ff ff f7 d8 [ 75.486880][ T4297] RSP: 002b:00007ffc910fc388 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 75.496289][ T4297] RAX: ffffffffffffffda RBX: 0000555561a15600 RCX: 00007efd55581553 [ 75.506031][ T4297] RDX: 0000000000008000 RSI: 0000555561a15600 RDI: 0000000000000005 [ 75.515973][ T4297] RBP: 0000555561a155d4 R08: 0000000000028a41 R09: 0000000000000000 [ 75.525044][ T4297] R10: 00007efd55757cc0 R11: 0000000000000293 R12: ffffffffffffffa8 [ 75.536251][ T4297] R13: 0000000000000010 R14: 0000555561a155d0 R15: 00007ffc910fe640 [ 75.544742][ T4297] [ 75.548326][ T4297] Kernel Offset: disabled [ 75.553487][ T4297] Rebooting in 86400 seconds..