Warning: Permanently added '10.128.1.48' (ED25519) to the list of known hosts.
[+] memfd_create successful.
[+] ftruncate successful.
[+] lseek successful.
[+] write successful.
[+] write_minimal_ntfs successful.
[+] open /dev/loop-control successful.
[+] ioctl LOOP_CTL_GET_FREE successful.
[+] close ctl_fd successful.
[+] open /dev/loop0 successful.
[+] ioctl LOOP_SET_FD successful.
[+] close img_fd successful.
[+] close loop_fd successful.
[+] mkdir ./mnt_dir successful.
[ 114.435342][ T6000] loop0: detected capacity change from 0 to 20481
[+] mount successful.
[+] pthread_create successful.
[ 114.616888][ T6012] ==================================================================
[ 114.616913][ T6012] BUG: KASAN: slab-use-after-free in ntfs_show_options+0x69f/0x860
[ 114.616947][ T6012] Read of size 2 at addr ffff88807cd7b89c by task syz-executor420/6012
[ 114.616967][ T6012]
[ 114.616981][ T6012] CPU: 1 UID: 0 PID: 6012 Comm: syz-executor420 Not tainted syzkaller #0 PREEMPT(full)
[ 114.617007][ T6012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[ 114.617022][ T6012] Call Trace:
[ 114.617031][ T6012]
[ 114.617041][ T6012] dump_stack_lvl+0xe8/0x150
[ 114.617079][ T6012] print_address_description+0x55/0x1e0
[ 114.617115][ T6012] ? ntfs_show_options+0x69f/0x860
[ 114.617139][ T6012] print_report+0x58/0x70
[ 114.617170][ T6012] kasan_report+0x117/0x150
[ 114.617200][ T6012] ? ntfs_show_options+0x69f/0x860
[ 114.617229][ T6012] ntfs_show_options+0x69f/0x860
[ 114.617253][ T6012] ? __pfx_ntfs_show_options+0x10/0x10
[ 114.617279][ T6012] show_vfsmnt+0x646/0x790
[ 114.617313][ T6012] ? __pfx_show_vfsmnt+0x10/0x10
[ 114.617344][ T6012] ? down_read+0x2be/0x330
[ 114.617375][ T6012] ? srso_alias_return_thunk+0x5/0xfbef5
[ 114.617408][ T6012] seq_read_iter+0x8d5/0xca0
[ 114.617440][ T6012] vfs_read+0x595/0xa80
[ 114.617477][ T6012] ? __pfx_vfs_read+0x10/0x10
[ 114.617515][ T6012] ? __fget_files+0x2a/0x420
[ 114.617548][ T6012] ? srso_alias_return_thunk+0x5/0xfbef5
[ 114.617579][ T6012] ksys_read+0x150/0x270
[ 114.617613][ T6012] ? __pfx_ksys_read+0x10/0x10
[ 114.617643][ T6012] ? srso_alias_return_thunk+0x5/0xfbef5
[ 114.617679][ T6012] do_syscall_64+0x166/0x520
[ 114.617705][ T6012] ? trace_irq_disable+0x3b/0x140
[ 114.617729][
** replaying previous printk message **
[ 114.617729][ T6012] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 114.617758][ T6012] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 114.617792][ T6012] RIP: 0033:0x7f90dd8ad61e
[ 114.617812][ T6012] Code: 08 0f 85 f5 e2 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 90 41 57 41 56 4d 89 c6 41 55 4d 89 cd 41 54 55 53 48 83 ec 08
[ 114.617832][ T6012] RSP: 002b:00007f90dd04c198 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 114.617858][ T6012] RAX: ffffffffffffffda RBX: 00007f90dd04d6c0 RCX: 00007f90dd8ad61e
[ 114.617876][ T6012] RDX: 0000000000001000 RSI: 00007f90dd04c200 RDI: 0000000000000005
[ 114.617892][ T6012] RBP: 00007f90dd8f203e R08: 0000000000000000 R09: 0000000000000000
[ 114.617908][ T6012] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f90dd04c200
[ 114.617924][ T6012] R13: 0000000000000000 R14: 00007ffe29b2b870 R15: 00007ffe29b2b958
[ 114.617952][ T6012]
[ 114.617960][ T6012]
[ 114.617967][ T6012] Allocated by task 6019:
[ 114.617978][ T6012] kasan_save_track+0x3e/0x80
[ 114.617999][ T6012] __kasan_kmalloc+0x93/0xb0
[ 114.618021][ T6012] __kmalloc_cache_noprof+0x321/0x600
[ 114.618056][ T6012] ntfs_init_fs_context+0x55/0x570
[ 114.618093][ T6012] alloc_fs_context+0x9a3/0xd00
[ 114.618127][ T6012] path_mount+0xc5e/0x1050
[ 114.618151][ T6012] __se_sys_mount+0x31d/0x420
[ 114.618178][ T6012] do_syscall_64+0x166/0x520
[ 114.618202][ T6012] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 114.618225][ T6012]
[ 114.618231][ T6012] Freed by task 6023:
[ 114.618241][ T6012] kasan_save_track+0x3e/0x80
[ 114.618261][ T6012] kasan_save_free_info+0x40/0x50
[ 114.618291][ T6012] __kasan_slab_free+0x5c/0x80
[ 114.618312][ T6012] kfree+0x1c5/0x650
[ 114.618340][ T6012] put_fs_context+0x123/0xb00
[ 114.618378][ T6012] path_mount+0xefc/0x1050
[ 114.618402][ T6012] __se_sys_mount+0x31d/0x420
[ 114.618428][ T6012] do_syscall_64+0x166/0x520
[ 114.618451][ T6012] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 114.618474][ T6012]
[ 114.618480][ T6012] The buggy address belongs to the object at ffff88807cd7b880
[ 114.618480][ T6012] which belongs to the cache kmalloc-32 of size 32
[ 114.618499][ T6012] The buggy address is located 28 bytes inside of
[ 114.618499][ T6012] freed 32-byte region [ffff88807cd7b880, ffff88807cd7b8a0)
[ 114.618522][ T6012]
[ 114.618528][ T6012] The buggy address belongs to the physical page:
[ 114.618539][ T6012] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7cd7b
[ 114.618560][ T6012] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 114.618579][ T6012] page_type: f5(slab)
[ 114.618601][ T6012] raw: 00fff00000000000 ffff88801b041780 dead000000000100 dead000000000122
[ 114.618622][ T6012] raw: 0000000000000000 0000000000400040 00000000f5000000 0000000000000000
[ 114.618635][ T6012] page dumped because: kasan: bad access detected
[ 114.618646][ T6012] page_owner tracks the page as allocated
[ 114.618655][ T6012] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2800(GFP_NOWAIT|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5350, tgid 5350 (start-stop-daem), ts 50764153307
[ 114.618690][ T6012] post_alloc_hook+0x1f9/0x250
[ 114.618723][ T6012] get_page_from_freelist+0x2209/0x2280
[ 114.618745][ T6012] __alloc_frozen_pages_noprof+0x217/0x5a0
[ 114.618775][ T6012] allocate_slab+0x7d/0x620
[ 114.618802][ T6012] refill_objects+0x2d5/0x350
[ 114.618829][ T6012] __pcs_replace_empty_main+0x2c8/0x6c0
[ 114.618855][ T6012] __kmalloc_cache_noprof+0x39b/0x600
[ 114.618890][ T6012] kmem_cache_free+0x156/0x650
[ 114.618926][ T6012] task_work_run+0x1d9/0x270
[ 114.618950][ T6012] do_exit+0x73a/0x2360
[ 114.618970][ T6012] do_group_exit+0x22d/0x2f0
[ 114.618991][ T6012] __x64_sys_exit_group+0x3f/0x40
[ 114.619014][ T6012] x64_sys_call+0x18c6/0x18d0
[ 114.619034][ T6012] do_syscall_64+0x166/0x520
[ 114.619058][ T6012] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 114.619081][ T6012] page last free pid 5350 tgid 5350 ts 50761077561 stack trace:
[ 114.619097][ T6012] __free_frozen_pages+0xc93/0xd90
[ 114.619128][ T6012] tlb_finish_mmu+0x13e/0x220
[ 114.619163][ T6012] exit_mmap+0x4b2/0x9f0
[ 114.619192][ T6012] __mmput+0x118/0x420
[ 114.619218][ T6012] exit_mm+0x221/0x2d0
[ 114.619238][ T6012] do_exit+0x6cd/0x2360
[ 114.619257][ T6012] do_group_exit+0x22d/0x2f0
[ 114.619279][ T6012] __x64_sys_exit_group+0x3f/0x40
[ 114.619301][ T6012] x64_sys_call+0x18c6/0x18d0
[ 114.619320][ T6012] do_syscall_64+0x166/0x520
[ 114.619343][ T6012] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 114.619366][ T6012]
[ 114.619372][ T6012] Memory state around the buggy address:
[ 114.619384][ T6012] ffff88807cd7b780: fa fb fb fb fc fc fc fc 00 00 00 fc fc fc fc fc
[ 114.619399][ T6012] ffff88807cd7b800: fa fb fb fb fc fc fc fc 00 00 00 fc fc fc fc fc
[ 114.619414][ T6012] >ffff88807cd7b880: fa fb fb fb fc fc fc fc 00 00 00 00 fc fc fc fc
[ 114.619426][ T6012] ^
[ 114.619437][ T6012] ffff88807cd7b900: 00 00 00 00 fc fc fc fc fa fb fb fb fc fc fc fc
[ 114.619452][ T6012] ffff88807cd7b980: fa fb fb fb fc fc fc fc 00 00 00 fc fc fc fc fc
[ 114.619464][ T6012] ==================================================================
[ 114.796138][ T6012] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 115.294048][ T6012] CPU: 1 UID: 0 PID: 6012 Comm: syz-executor420 Not tainted syzkaller #0 PREEMPT(full)
[ 115.303793][ T6012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[ 115.313861][ T6012] Call Trace:
[ 115.317140][ T6012]
[ 115.320068][ T6012] vpanic+0x56d/0xa60
[ 115.324059][ T6012] ? rcu_is_watching+0x16/0xb0
[ 115.328828][ T6012] ? __pfx_vpanic+0x10/0x10
[ 115.333347][ T6012] panic+0xc5/0xd0
[ 115.337133][ T6012] ? __pfx_panic+0x10/0x10
[ 115.341564][ T6012] ? preempt_schedule_thunk+0x16/0x40
[ 115.346951][ T6012] ? srso_alias_return_thunk+0x5/0xfbef5
[ 115.352583][ T6012] ? preempt_schedule_thunk+0x16/0x40
[ 115.357954][ T6012] ? ntfs_show_options+0x69f/0x860
[ 115.363068][ T6012] check_panic_on_warn+0x89/0xb0
[ 115.368003][ T6012] ? ntfs_show_options+0x69f/0x860
[ 115.373283][ T6012] end_report+0x73/0x170
[ 115.377528][ T6012] ? ntfs_show_options+0x69f/0x860
[ 115.382629][ T6012] kasan_report+0x128/0x150
[ 115.387126][ T6012] ? ntfs_show_options+0x69f/0x860
[ 115.392230][ T6012] ntfs_show_options+0x69f/0x860
[ 115.397160][ T6012] ? __pfx_ntfs_show_options+0x10/0x10
[ 115.402785][ T6012] show_vfsmnt+0x646/0x790
[ 115.407213][ T6012] ? __pfx_show_vfsmnt+0x10/0x10
[ 115.412150][ T6012] ? down_read+0x2be/0x330
[ 115.416568][ T6012] ? srso_alias_return_thunk+0x5/0xfbef5
[ 115.422202][ T6012] seq_read_iter+0x8d5/0xca0
[ 115.426807][ T6012] vfs_read+0x595/0xa80
[ 115.430988][ T6012] ? __pfx_vfs_read+0x10/0x10
[ 115.435671][ T6012] ? __fget_files+0x2a/0x420
[ 115.440266][ T6012] ? srso_alias_return_thunk+0x5/0xfbef5
[ 115.445901][ T6012] ksys_read+0x150/0x270
[ 115.450150][ T6012] ? __pfx_ksys_read+0x10/0x10
[ 115.454916][ T6012] ? srso_alias_return_thunk+0x5/0xfbef5
[ 115.460557][ T6012] do_syscall_64+0x166/0x520
[ 115.465148][ T6012] ? trace_irq_disable+0x3b/0x140
[ 115.470239][ T6012] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 115.476303][ T6012] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 115.482198][ T6012] RIP: 0033:0x7f90dd8ad61e
[ 115.486606][ T6012] Code: 08 0f 85 f5 e2 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 90 41 57 41 56 4d 89 c6 41 55 4d 89 cd 41 54 55 53 48 83 ec 08
[ 115.506299][ T6012] RSP: 002b:00007f90dd04c198 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 115.514718][ T6012] RAX: ffffffffffffffda RBX: 00007f90dd04d6c0 RCX: 00007f90dd8ad61e
[ 115.522691][ T6012] RDX: 0000000000001000 RSI: 00007f90dd04c200 RDI: 0000000000000005
[ 115.530674][ T6012] RBP: 00007f90dd8f203e R08: 0000000000000000 R09: 0000000000000000
[ 115.538642][ T6012] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f90dd04c200
[ 115.546605][ T6012] R13: 0000000000000000 R14: 00007ffe29b2b870 R15: 00007ffe29b2b958
[ 115.554581][ T6012]
[ 115.557841][ T6012] Kernel Offset: disabled
[ 115.562152][ T6012] Rebooting in 86400 seconds..