Warning: Permanently added '10.128.0.50' (ED25519) to the list of known hosts. 2026/05/03 13:28:45 parsed 1 programs [ 53.169286][ T4201] cgroup: Unknown subsys name 'net' [ 53.311639][ T4201] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 54.540795][ T4201] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 56.012953][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.021161][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.037808][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 56.053112][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.061193][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.069288][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.350021][ T4247] chnl_net:caif_netlink_parms(): no params data found [ 57.408990][ T4247] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.416822][ T4247] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.424920][ T4247] device bridge_slave_0 entered promiscuous mode [ 57.434877][ T4247] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.442659][ T4247] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.452085][ T4247] device bridge_slave_1 entered promiscuous mode [ 57.474566][ T4247] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.486200][ T4247] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.508188][ T4247] team0: Port device team_slave_0 added [ 57.516667][ T4247] team0: Port device team_slave_1 added [ 57.536810][ T4247] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.544122][ T4247] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.570225][ T4247] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.585100][ T4247] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.592306][ T4247] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.618451][ T4247] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.647228][ T4247] device hsr_slave_0 entered promiscuous mode [ 57.654334][ T4247] device hsr_slave_1 entered promiscuous mode [ 57.787256][ T4247] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 57.828439][ T4247] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 57.847125][ T4247] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 57.863184][ T4247] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 57.914168][ T4247] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.921376][ T4247] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.929344][ T4247] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.936658][ T4247] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.973909][ T4247] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.988197][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.997375][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.005622][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.020554][ T4247] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.031157][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.040180][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.047358][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.067282][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.077372][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.084455][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.093405][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.102860][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.111466][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.122299][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.134496][ T4247] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 58.146390][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.155332][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.226454][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.234290][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.248386][ T4247] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.279596][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.288492][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.305146][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.313807][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.322589][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.331566][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.341891][ T4247] device veth0_vlan entered promiscuous mode [ 58.366749][ T4247] device veth1_vlan entered promiscuous mode [ 58.383258][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 58.391590][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 58.399948][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.409392][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.420227][ T4247] device veth0_macvtap entered promiscuous mode [ 58.431323][ T4247] device veth1_macvtap entered promiscuous mode [ 58.465681][ T4247] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.474523][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.483714][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.492147][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.502522][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.513425][ T4247] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.535641][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.544246][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.555135][ T4247] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.565211][ T4247] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.574544][ T4247] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.583338][ T4247] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.702749][ T4247] syz-executor (4247) used greatest stack depth: 20592 bytes left 2026/05/03 13:28:53 executed programs: 0 [ 60.094547][ T4302] chnl_net:caif_netlink_parms(): no params data found [ 60.153508][ T4302] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.162966][ T4302] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.171121][ T4302] device bridge_slave_0 entered promiscuous mode [ 60.182610][ T4302] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.189791][ T4302] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.201269][ T4302] device bridge_slave_1 entered promiscuous mode [ 60.225630][ T4302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.237454][ T4302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.264423][ T4302] team0: Port device team_slave_0 added [ 60.273292][ T4302] team0: Port device team_slave_1 added [ 60.298619][ T4302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.305589][ T4302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.331659][ T4302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.345115][ T4302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.352383][ T4302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.380139][ T4302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.413625][ T4302] device hsr_slave_0 entered promiscuous mode [ 60.421191][ T4302] device hsr_slave_1 entered promiscuous mode [ 60.427879][ T4302] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.437481][ T4302] Cannot create hsr debugfs directory [ 60.530623][ T4302] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.037261][ T4267] Bluetooth: hci0: command 0x0409 tx timeout [ 63.563074][ T4302] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.651655][ T4302] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.713047][ T4302] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.791319][ T4302] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 63.801776][ T4302] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 63.811248][ T4302] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 63.831336][ T4302] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 63.887294][ T4302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.899889][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.907868][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.918700][ T4302] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.940943][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.950576][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.959942][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.967054][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.975072][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.986976][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.995611][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.004436][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.011558][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.027239][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.037773][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.050951][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.059638][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.068529][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.087318][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.097157][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.108350][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.116662][ T4267] Bluetooth: hci0: command 0x041b tx timeout [ 64.117303][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.135250][ T4302] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.146613][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.155152][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.163958][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.259074][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.266742][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.280701][ T4302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.306202][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.314854][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.332349][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.341967][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.351122][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.359963][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.379721][ T4302] device veth0_vlan entered promiscuous mode [ 64.390353][ T4302] device veth1_vlan entered promiscuous mode [ 64.408049][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 64.417692][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 64.425852][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.434279][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.446429][ T4302] device veth0_macvtap entered promiscuous mode [ 64.454828][ T4302] device veth1_macvtap entered promiscuous mode [ 64.469185][ T1413] device hsr_slave_0 left promiscuous mode [ 64.476262][ T1413] device hsr_slave_1 left promiscuous mode [ 64.483127][ T1413] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 64.490916][ T1413] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 64.500889][ T1413] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 64.508351][ T1413] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 64.516868][ T1413] device bridge_slave_1 left promiscuous mode [ 64.523929][ T1413] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.538741][ T1413] device bridge_slave_0 left promiscuous mode [ 64.544920][ T1413] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.561715][ T1413] device veth1_macvtap left promiscuous mode [ 64.568612][ T1413] device veth0_macvtap left promiscuous mode [ 64.574646][ T1413] device veth1_vlan left promiscuous mode [ 64.582071][ T1413] device veth0_vlan left promiscuous mode [ 64.715334][ T1413] team0 (unregistering): Port device team_slave_1 removed [ 64.727623][ T1413] team0 (unregistering): Port device team_slave_0 removed [ 64.740395][ T1413] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 64.754981][ T1413] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 64.802726][ T1413] bond0 (unregistering): Released all slaves [ 64.848791][ T4302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.856234][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.864223][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 64.872634][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 64.882190][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 64.894079][ T4302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.903124][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 64.911704][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 64.922464][ T4302] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.933678][ T4302] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.942616][ T4302] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.952102][ T4302] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.019431][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.029399][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.037879][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 65.065473][ T1154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.073676][ T1154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.082147][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 65.158941][ T4324] loop0: detected capacity change from 0 to 4096 [ 65.220454][ T4324] ================================================================== [ 65.228546][ T4324] BUG: KASAN: use-after-free in ntfs_attr_find+0x79e/0xc30 [ 65.235959][ T4324] Read of size 2 at addr ffff888058c4d442 by task syz.0.17/4324 [ 65.243870][ T4324] [ 65.246228][ T4324] CPU: 1 PID: 4324 Comm: syz.0.17 Not tainted syzkaller #0 [ 65.253515][ T4324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 65.263679][ T4324] Call Trace: [ 65.266983][ T4324] [ 65.269917][ T4324] dump_stack_lvl+0x188/0x250 [ 65.274604][ T4324] ? show_regs_print_info+0x20/0x20 [ 65.279804][ T4324] ? _printk+0xda/0x130 [ 65.283966][ T4324] ? ntfs_attr_find+0x79e/0xc30 [ 65.288909][ T4324] ? load_image+0x400/0x400 [ 65.293411][ T4324] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 65.298873][ T4324] print_address_description+0x60/0x2d0 [ 65.304426][ T4324] ? ntfs_attr_find+0x79e/0xc30 [ 65.309476][ T4324] kasan_report+0xdf/0x130 [ 65.313982][ T4324] ? ntfs_attr_find+0x79e/0xc30 [ 65.318817][ T4324] ? do_new_mount+0x24a/0xa40 [ 65.323615][ T4324] ntfs_attr_find+0x79e/0xc30 [ 65.328384][ T4324] ntfs_attr_lookup+0x212/0x2290 [ 65.333350][ T4324] ? slab_post_alloc_hook+0x68/0x380 [ 65.338655][ T4324] ? ntfs_attr_get_search_ctx+0x4d/0x190 [ 65.344273][ T4324] ? ntfs_attr_reinit_search_ctx+0x2f0/0x2f0 [ 65.350324][ T4324] ? kmem_cache_alloc+0x133/0x290 [ 65.355330][ T4324] ? memset+0x1e/0x40 [ 65.359288][ T4324] ? ntfs_attr_reinit_search_ctx+0x4b/0x2f0 [ 65.365259][ T4324] ntfs_read_locked_inode+0xa97/0x4de0 [ 65.370785][ T4324] ? lock_page+0xd0/0xd0 [ 65.375013][ T4324] ? iget5_locked+0x12e/0x250 [ 65.379671][ T4324] ? ntfs_iget+0x1a0/0x1a0 [ 65.384067][ T4324] ntfs_iget+0x108/0x1a0 [ 65.388290][ T4324] ? ntfs_test_inode+0x2d0/0x2d0 [ 65.393204][ T4324] ? rcu_is_watching+0x11/0xa0 [ 65.397956][ T4324] ? lock_release+0xb5/0x8a0 [ 65.402525][ T4324] ? ntfs_fill_super+0x19d8/0x2c90 [ 65.407623][ T4324] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 65.413580][ T4324] load_system_files+0xd8/0x55a0 [ 65.418505][ T4324] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 65.424131][ T4324] ? ntfs_setup_allocators+0x2c0/0x2c0 [ 65.429761][ T4324] ? mutex_unlock+0x10/0x10 [ 65.434556][ T4324] ? generate_default_upcase+0xf3/0x990 [ 65.440197][ T4324] ntfs_fill_super+0x19e0/0x2c90 [ 65.445237][ T4324] mount_bdev+0x287/0x3c0 [ 65.449547][ T4324] ? ntfs_mount+0x40/0x40 [ 65.453885][ T4324] legacy_get_tree+0xe6/0x180 [ 65.458540][ T4324] ? ntfs_rl_punch_nolock+0x1470/0x1470 [ 65.464066][ T4324] vfs_get_tree+0x88/0x270 [ 65.468459][ T4324] do_new_mount+0x24a/0xa40 [ 65.472941][ T4324] __se_sys_mount+0x2e3/0x3d0 [ 65.477600][ T4324] ? __x64_sys_mount+0xc0/0xc0 [ 65.482346][ T4324] ? lockdep_hardirqs_on+0x94/0x140 [ 65.487524][ T4324] ? __x64_sys_mount+0x1c/0xc0 [ 65.492268][ T4324] do_syscall_64+0x4c/0xa0 [ 65.496690][ T4324] ? clear_bhb_loop+0x30/0x80 [ 65.501359][ T4324] ? clear_bhb_loop+0x30/0x80 [ 65.506014][ T4324] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 65.511920][ T4324] RIP: 0033:0x7f1b10c4c04a [ 65.516313][ T4324] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 65.536079][ T4324] RSP: 002b:00007ffe65ea50d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 65.544485][ T4324] RAX: ffffffffffffffda RBX: 00007ffe65ea5160 RCX: 00007f1b10c4c04a [ 65.552651][ T4324] RDX: 000020000001f6c0 RSI: 0000200000000080 RDI: 00007ffe65ea5120 [ 65.560625][ T4324] RBP: 000020000001f6c0 R08: 00007ffe65ea5160 R09: 000000000000c70b [ 65.568581][ T4324] R10: 000000000000c70b R11: 0000000000000246 R12: 0000200000000080 [ 65.576542][ T4324] R13: 00007ffe65ea5120 R14: 000000000001f670 R15: 0000200000000040 [ 65.584509][ T4324] [ 65.587526][ T4324] [ 65.589899][ T4324] The buggy address belongs to the page: [ 65.595511][ T4324] page:ffffea0001631340 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1 pfn:0x58c4d [ 65.605639][ T4324] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 65.612829][ T4324] raw: 00fff00000000000 ffffea0001631388 ffff8880b91409a0 0000000000000000 [ 65.621548][ T4324] raw: 0000000000000001 0000000000000000 00000000ffffffff 0000000000000000 [ 65.630115][ T4324] page dumped because: kasan: bad access detected [ 65.636524][ T4324] page_owner tracks the page as freed [ 65.641875][ T4324] page last allocated via order 0, migratetype Movable, gfp_mask 0x1100dca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), pid 4324, ts 65126565528, free_ts 65154924968 [ 65.657528][ T4324] get_page_from_freelist+0x1bbd/0x1ca0 [ 65.663078][ T4324] __alloc_pages+0x1ee/0x480 [ 65.668013][ T4324] alloc_pages_vma+0x393/0x7c0 [ 65.672917][ T4324] handle_mm_fault+0x23be/0x4410 [ 65.677873][ T4324] do_user_addr_fault+0x489/0xc80 [ 65.683009][ T4324] exc_page_fault+0x60/0x100 [ 65.687783][ T4324] asm_exc_page_fault+0x22/0x30 [ 65.692735][ T4324] page last free stack trace: [ 65.697396][ T4324] free_unref_page_prepare+0x637/0x6c0 [ 65.702839][ T4324] free_unref_page_list+0x119/0x820 [ 65.708022][ T4324] release_pages+0x186c/0x1be0 [ 65.712797][ T4324] tlb_finish_mmu+0x1b4/0x370 [ 65.717512][ T4324] unmap_region+0x344/0x3b0 [ 65.722001][ T4324] __do_munmap+0x9f8/0xdf0 [ 65.726491][ T4324] __vm_munmap+0x140/0x240 [ 65.730906][ T4324] __x64_sys_munmap+0x67/0x70 [ 65.735566][ T4324] do_syscall_64+0x4c/0xa0 [ 65.739976][ T4324] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 65.745938][ T4324] [ 65.748240][ T4324] Memory state around the buggy address: [ 65.754293][ T4324] ffff888058c4d300: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 65.762347][ T4324] ffff888058c4d380: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 65.770385][ T4324] >ffff888058c4d400: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 65.778506][ T4324] ^ [ 65.784637][ T4324] ffff888058c4d480: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 65.792694][ T4324] ffff888058c4d500: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 65.800736][ T4324] ================================================================== [ 65.809043][ T4324] Disabling lock debugging due to kernel taint [ 65.823241][ T4324] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 65.830456][ T4324] CPU: 1 PID: 4324 Comm: syz.0.17 Tainted: G B syzkaller #0 [ 65.839313][ T4324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 65.849541][ T4324] Call Trace: [ 65.852969][ T4324] [ 65.855896][ T4324] dump_stack_lvl+0x188/0x250 [ 65.860662][ T4324] ? show_regs_print_info+0x20/0x20 [ 65.865927][ T4324] ? load_image+0x400/0x400 [ 65.870427][ T4324] panic+0x2e5/0x810 [ 65.874304][ T4324] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 65.880448][ T4324] ? bpf_jit_dump+0xd0/0xd0 [ 65.884951][ T4324] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 65.890914][ T4324] ? _raw_spin_unlock+0x40/0x40 [ 65.895747][ T4324] ? ntfs_attr_find+0x79e/0xc30 [ 65.900606][ T4324] check_panic_on_warn+0x80/0xa0 [ 65.905719][ T4324] ? ntfs_attr_find+0x79e/0xc30 [ 65.910553][ T4324] end_report+0x6d/0xf0 [ 65.914702][ T4324] kasan_report+0x102/0x130 [ 65.919182][ T4324] ? ntfs_attr_find+0x79e/0xc30 [ 65.924011][ T4324] ? do_new_mount+0x24a/0xa40 [ 65.928667][ T4324] ntfs_attr_find+0x79e/0xc30 [ 65.933415][ T4324] ntfs_attr_lookup+0x212/0x2290 [ 65.938351][ T4324] ? slab_post_alloc_hook+0x68/0x380 [ 65.943632][ T4324] ? ntfs_attr_get_search_ctx+0x4d/0x190 [ 65.949278][ T4324] ? ntfs_attr_reinit_search_ctx+0x2f0/0x2f0 [ 65.955326][ T4324] ? kmem_cache_alloc+0x133/0x290 [ 65.960421][ T4324] ? memset+0x1e/0x40 [ 65.964394][ T4324] ? ntfs_attr_reinit_search_ctx+0x4b/0x2f0 [ 65.970362][ T4324] ntfs_read_locked_inode+0xa97/0x4de0 [ 65.975898][ T4324] ? lock_page+0xd0/0xd0 [ 65.980225][ T4324] ? iget5_locked+0x12e/0x250 [ 65.984927][ T4324] ? ntfs_iget+0x1a0/0x1a0 [ 65.989333][ T4324] ntfs_iget+0x108/0x1a0 [ 65.993553][ T4324] ? ntfs_test_inode+0x2d0/0x2d0 [ 65.998554][ T4324] ? rcu_is_watching+0x11/0xa0 [ 66.003299][ T4324] ? lock_release+0xb5/0x8a0 [ 66.007875][ T4324] ? ntfs_fill_super+0x19d8/0x2c90 [ 66.012977][ T4324] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 66.018939][ T4324] load_system_files+0xd8/0x55a0 [ 66.023885][ T4324] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 66.029587][ T4324] ? ntfs_setup_allocators+0x2c0/0x2c0 [ 66.035037][ T4324] ? mutex_unlock+0x10/0x10 [ 66.039525][ T4324] ? generate_default_upcase+0xf3/0x990 [ 66.045070][ T4324] ntfs_fill_super+0x19e0/0x2c90 [ 66.050011][ T4324] mount_bdev+0x287/0x3c0 [ 66.054317][ T4324] ? ntfs_mount+0x40/0x40 [ 66.058620][ T4324] legacy_get_tree+0xe6/0x180 [ 66.063276][ T4324] ? ntfs_rl_punch_nolock+0x1470/0x1470 [ 66.068798][ T4324] vfs_get_tree+0x88/0x270 [ 66.073202][ T4324] do_new_mount+0x24a/0xa40 [ 66.077686][ T4324] __se_sys_mount+0x2e3/0x3d0 [ 66.082354][ T4324] ? __x64_sys_mount+0xc0/0xc0 [ 66.087099][ T4324] ? lockdep_hardirqs_on+0x94/0x140 [ 66.092298][ T4324] ? __x64_sys_mount+0x1c/0xc0 [ 66.097049][ T4324] do_syscall_64+0x4c/0xa0 [ 66.101482][ T4324] ? clear_bhb_loop+0x30/0x80 [ 66.106134][ T4324] ? clear_bhb_loop+0x30/0x80 [ 66.110786][ T4324] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 66.116653][ T4324] RIP: 0033:0x7f1b10c4c04a [ 66.121132][ T4324] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 66.140785][ T4324] RSP: 002b:00007ffe65ea50d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 66.149197][ T4324] RAX: ffffffffffffffda RBX: 00007ffe65ea5160 RCX: 00007f1b10c4c04a [ 66.157163][ T4324] RDX: 000020000001f6c0 RSI: 0000200000000080 RDI: 00007ffe65ea5120 [ 66.165110][ T4324] RBP: 000020000001f6c0 R08: 00007ffe65ea5160 R09: 000000000000c70b [ 66.173064][ T4324] R10: 000000000000c70b R11: 0000000000000246 R12: 0000200000000080 [ 66.181017][ T4324] R13: 00007ffe65ea5120 R14: 000000000001f670 R15: 0000200000000040 [ 66.188972][ T4324] [ 66.193093][ T4324] Kernel Offset: disabled [ 66.197512][ T4324] Rebooting in 86400 seconds..