[ 9.525308][ T3994] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: [ 9.559068][ T11] gvnic 0000:00:00.0 enp0s0: Device link is up. [ 9.567987][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): enp0s0: link becomes ready OK Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.233' (ED25519) to the list of known hosts. 1970/01/01 00:00:30 parsed 1 programs 1970/01/01 00:00:30 serving rpc on tcp://39033 syzkaller login: [ 31.738568][ T4340] cgroup: Unknown subsys name 'net' [ 31.997271][ T4340] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 32.270573][ T4340] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 34.673643][ T4360] chnl_net:caif_netlink_parms(): no params data found [ 34.690536][ T4360] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.691893][ T4360] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.693453][ T4360] device bridge_slave_0 entered promiscuous mode [ 34.697445][ T4360] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.698746][ T4360] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.700329][ T4360] device bridge_slave_1 entered promiscuous mode [ 34.706777][ T4360] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.709066][ T4360] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.715955][ T4360] team0: Port device team_slave_0 added [ 34.717730][ T4360] team0: Port device team_slave_1 added [ 34.722691][ T4360] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.723814][ T4360] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 34.728425][ T4360] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.731095][ T4360] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.732182][ T4360] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 34.736674][ T4360] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.815897][ T4360] device hsr_slave_0 entered promiscuous mode [ 34.854999][ T4360] device hsr_slave_1 entered promiscuous mode [ 34.928418][ T4360] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 34.967570][ T4360] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 34.995903][ T4360] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 35.046882][ T4360] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 35.114292][ T4360] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.115716][ T4360] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.117169][ T4360] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.118414][ T4360] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.135037][ T4360] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.139190][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 35.141730][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.143449][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.148703][ T4360] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.151708][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 35.153557][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.154723][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.159116][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 35.160668][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.161811][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.169148][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 35.170713][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 35.173843][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 35.177245][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 35.180021][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 35.182442][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 35.233104][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 35.234586][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 35.239527][ T4360] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.246041][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 35.251880][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 35.253565][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 35.255014][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 35.257375][ T4360] device veth0_vlan entered promiscuous mode [ 35.260443][ T4360] device veth1_vlan entered promiscuous mode [ 35.267361][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 35.268891][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 35.270583][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 35.273062][ T4360] device veth0_macvtap entered promiscuous mode [ 35.278290][ T4360] device veth1_macvtap entered promiscuous mode [ 35.283294][ T4360] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.284681][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 35.287813][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 35.290546][ T4360] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.292002][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 35.294461][ T4360] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.297796][ T4360] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.299143][ T4360] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.300543][ T4360] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.453901][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.455661][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.457778][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 35.464401][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.466132][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.467820][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 35.776579][ T249] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.202493][ T4407] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 36.204178][ T4407] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 36.206491][ T4407] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 36.208255][ T4407] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 36.209674][ T4407] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 36.211056][ T4407] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 1970/01/01 00:00:36 executed programs: 0 [ 36.754176][ T48] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 36.755996][ T48] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 36.757513][ T48] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 36.759014][ T48] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 36.760612][ T48] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 36.761964][ T48] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 36.810182][ T4427] chnl_net:caif_netlink_parms(): no params data found [ 36.830290][ T4427] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.831682][ T4427] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.833328][ T4427] device bridge_slave_0 entered promiscuous mode [ 36.835504][ T4427] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.836728][ T4427] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.838387][ T4427] device bridge_slave_1 entered promiscuous mode [ 36.845046][ T4427] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.847599][ T4427] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.853865][ T4427] team0: Port device team_slave_0 added [ 36.856118][ T4427] team0: Port device team_slave_1 added [ 36.861034][ T4427] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.862328][ T4427] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.867360][ T4427] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.869786][ T4427] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.870908][ T4427] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.876125][ T4427] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.896109][ T4427] device hsr_slave_0 entered promiscuous mode [ 36.945004][ T4427] device hsr_slave_1 entered promiscuous mode [ 36.984859][ T4427] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 36.986190][ T4427] Cannot create hsr debugfs directory [ 38.595782][ T249] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.795365][ T4407] Bluetooth: hci0: command 0x0409 tx timeout [ 40.885036][ T4407] Bluetooth: hci0: command 0x041b tx timeout [ 41.015934][ T249] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.096592][ T249] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.180066][ T4427] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 42.257959][ T4427] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 42.347758][ T4427] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 42.395963][ T4427] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 42.516357][ T4427] 8021q: adding VLAN 0 to HW filter on device bond0 [ 42.520049][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 42.521664][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 42.524204][ T4427] 8021q: adding VLAN 0 to HW filter on device team0 [ 42.558356][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 42.560163][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 42.561738][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.563008][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.564608][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 42.567578][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 42.569187][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 42.570827][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.572138][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.574616][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 42.577719][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 42.580467][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 42.582256][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 42.583867][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 42.586916][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 42.589389][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 42.592164][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 42.593776][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 42.597926][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 42.599591][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 42.602012][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 42.608185][ T249] device hsr_slave_0 left promiscuous mode [ 42.654902][ T249] device hsr_slave_1 left promiscuous mode [ 42.734835][ T249] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 42.736251][ T249] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 42.738044][ T249] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 42.739443][ T249] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 42.741034][ T249] device bridge_slave_1 left promiscuous mode [ 42.742290][ T249] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.775617][ T249] device bridge_slave_0 left promiscuous mode [ 42.776823][ T249] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.894977][ T249] device veth1_macvtap left promiscuous mode [ 42.896154][ T249] device veth0_macvtap left promiscuous mode [ 42.897251][ T249] device veth1_vlan left promiscuous mode [ 42.898360][ T249] device veth0_vlan left promiscuous mode [ 42.964794][ T48] Bluetooth: hci0: command 0x040f tx timeout [ 45.034961][ T4407] Bluetooth: hci0: command 0x0419 tx timeout [ 45.075861][ T249] team0 (unregistering): Port device team_slave_1 removed [ 45.235558][ T249] team0 (unregistering): Port device team_slave_0 removed [ 45.405266][ T249] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 45.645379][ T249] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 47.165618][ T249] bond0 (unregistering): Released all slaves [ 47.526545][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 47.528053][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 47.531779][ T4427] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.537439][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 47.539129][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 47.544541][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 47.547342][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 47.549012][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 47.550516][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 47.553247][ T4427] device veth0_vlan entered promiscuous mode [ 47.558915][ T4427] device veth1_vlan entered promiscuous mode [ 47.565487][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 47.567074][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 47.568692][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 47.570443][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 47.572793][ T4427] device veth0_macvtap entered promiscuous mode [ 47.575356][ T4427] device veth1_macvtap entered promiscuous mode [ 47.579956][ T4427] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.581328][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 47.582867][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 47.584446][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 47.586362][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 47.589153][ T4427] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.590586][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 47.592365][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 47.595080][ T4427] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.596433][ T4427] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.597881][ T4427] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.599330][ T4427] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.619355][ T4359] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.623313][ T4359] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.625858][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 47.631876][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.633244][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.635182][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 47.708966][ T4523] loop0: detected capacity change from 0 to 4096 [ 47.722319][ T4523] FAULT_INJECTION: forcing a failure. [ 47.722319][ T4523] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 47.725536][ T4523] CPU: 0 PID: 4523 Comm: syz.0.17 Not tainted syzkaller #0 [ 47.726745][ T4523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 47.728486][ T4523] Call trace: [ 47.729059][ T4523] dump_backtrace+0x1c4/0x1f0 [ 47.729898][ T4523] show_stack+0x2c/0x3c [ 47.730641][ T4523] __dump_stack+0x30/0x40 [ 47.731418][ T4523] dump_stack_lvl+0xf4/0x15c [ 47.732230][ T4523] dump_stack+0x1c/0x5c [ 47.732961][ T4523] should_fail_ex+0x3cc/0x524 [ 47.733800][ T4523] should_fail_alloc_page+0x74/0xb8 [ 47.734727][ T4523] prepare_alloc_pages+0x1b8/0x4f0 [ 47.735737][ T4523] __alloc_pages+0x134/0x544 [ 47.736612][ T4523] alloc_pages+0x434/0x6fc [ 47.737451][ T4523] folio_alloc+0x28/0x6c [ 47.738237][ T4523] filemap_alloc_folio+0xc4/0x42c [ 47.739144][ T4523] __filemap_get_folio+0x64c/0xaa8 [ 47.740105][ T4523] ntfs_lock_new_page+0x40/0x3e4 [ 47.741055][ T4523] ni_readpage_cmpr+0x278/0x778 [ 47.741990][ T4523] ntfs_read_folio+0x148/0x1bc [ 47.742912][ T4523] filemap_read_folio+0x134/0x384 [ 47.743890][ T4523] filemap_read+0xc78/0x20dc [ 47.744705][ T4523] generic_file_read_iter+0xf8/0x5ac [ 47.745705][ T4523] ntfs_file_read_iter+0x184/0x1e0 [ 47.746667][ T4523] vfs_read+0x3cc/0x7b8 [ 47.747457][ T4523] ksys_read+0x12c/0x228 [ 47.748252][ T4523] __arm64_sys_read+0x7c/0x90 [ 47.749138][ T4523] invoke_syscall+0x98/0x290 [ 47.750020][ T4523] el0_svc_common+0x13c/0x258 [ 47.750898][ T4523] do_el0_svc+0x5c/0x134 [ 47.751705][ T4523] el0_svc+0x58/0x128 [ 47.752463][ T4523] el0t_64_sync_handler+0x84/0xf0 [ 47.753394][ T4523] el0t_64_sync+0x18c/0x190 [ 47.756405][ T4523] Unable to handle kernel paging request at virtual address dfff800000000001 [ 47.757873][ T4523] KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f] [ 47.759261][ T4523] Mem abort info: [ 47.759899][ T4523] ESR = 0x0000000096000006 [ 47.760681][ T4523] EC = 0x25: DABT (current EL), IL = 32 bits [ 47.761698][ T4523] SET = 0, FnV = 0 [ 47.762373][ T4523] EA = 0, S1PTW = 0 [ 47.763056][ T4523] FSC = 0x06: level 2 translation fault [ 47.764016][ T4523] Data abort info: [ 47.764641][ T4523] ISV = 0, ISS = 0x00000006 [ 47.767494][ T4523] CM = 0, WnR = 0 [ 47.768128][ T4523] [dfff800000000001] address between user and kernel address ranges [ 47.769480][ T4523] Internal error: Oops: 0000000096000006 [#1] PREEMPT SMP [ 47.770603][ T4523] Modules linked in: [ 47.771253][ T4523] CPU: 0 PID: 4523 Comm: syz.0.17 Not tainted syzkaller #0 [ 47.772375][ T4523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 47.774088][ T4523] pstate: 02400005 (nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 47.775500][ T4523] pc : ntfs_lock_new_page+0x64/0x3e4 [ 47.776471][ T4523] lr : ntfs_lock_new_page+0x40/0x3e4 [ 47.777408][ T4523] sp : ffff800020be7490 [ 47.778141][ T4523] x29: ffff800020be7490 x28: 0000000000000001 x27: 0000000000100cca [ 47.779561][ T4523] x26: ffff0000d1d35600 x25: 000000000000000f x24: 0000000000000001 [ 47.780997][ T4523] x23: dfff800000000000 x22: 0000000000000008 x21: 0000000000000001 [ 47.782457][ T4523] x20: 0000000000100cca x19: 0000000000000000 x18: 1fffe00033e6df7e [ 47.783901][ T4523] x17: 0000000000000000 x16: ffff8000082dd25c x15: 0000000000000000 [ 47.785387][ T4523] x14: 0000000000000001 x13: 1ffff00002ac828a x12: 0000000000000000 [ 47.786904][ T4523] x11: ff008000086f2550 x10: 0000000000000000 x9 : 82d184a4d36b4800 [ 47.788411][ T4523] x8 : 82d184a4d36b4800 x7 : 0000000000000001 x6 : 0000000000000001 [ 47.789919][ T4523] x5 : ffff800020be6878 x4 : ffff800015484e80 x3 : ffff80000aae4838 [ 47.791353][ T4523] x2 : 0000000000000000 x1 : 0000000000000000 x0 : 0000000000000000 [ 47.792814][ T4523] Call trace: [ 47.793395][ T4523] ntfs_lock_new_page+0x64/0x3e4 [ 47.794290][ T4523] ni_readpage_cmpr+0x278/0x778 [ 47.795171][ T4523] ntfs_read_folio+0x148/0x1bc [ 47.796059][ T4523] filemap_read_folio+0x134/0x384 [ 47.796997][ T4523] filemap_read+0xc78/0x20dc [ 47.797865][ T4523] generic_file_read_iter+0xf8/0x5ac [ 47.798848][ T4523] ntfs_file_read_iter+0x184/0x1e0 [ 47.799826][ T4523] vfs_read+0x3cc/0x7b8 [ 47.800617][ T4523] ksys_read+0x12c/0x228 [ 47.801422][ T4523] __arm64_sys_read+0x7c/0x90 [ 47.802312][ T4523] invoke_syscall+0x98/0x290 [ 47.803183][ T4523] el0_svc_common+0x13c/0x258 [ 47.804071][ T4523] do_el0_svc+0x5c/0x134 [ 47.804853][ T4523] el0_svc+0x58/0x128 [ 47.805595][ T4523] el0t_64_sync_handler+0x84/0xf0 [ 47.806544][ T4523] el0t_64_sync+0x18c/0x190 [ 47.807373][ T4523] Code: 91002276 d2d00017 d343fed8 f2fbfff7 (38776b08) [ 47.808661][ T4523] ---[ end trace 0000000000000000 ]--- [ 48.016599][ T4523] Kernel panic - not syncing: Oops: Fatal exception [ 48.017751][ T4523] SMP: stopping secondary CPUs [ 48.018634][ T4523] Kernel Offset: disabled [ 48.019364][ T4523] CPU features: 0x0a0000,000f0097,a65bfea7 [ 48.020429][ T4523] Memory Limit: none [ 48.214460][ T4523] Rebooting in 86400 seconds..