Warning: Permanently added '10.128.0.114' (ED25519) to the list of known hosts.
[*] Generating minimal NTFS image...
[+] Image generated successfully.
[ 113.783983][ T6053] loop0: detected capacity change from 0 to 32768
[+] Loop device /dev/loop0 setup successfully.
[+] Mounted successfully.
[+] Target files opened successfully.
[*] Racing for 20 seconds...
[ 114.880891][ T6088] ==================================================================
[ 114.880916][ T6088] BUG: KASAN: slab-use-after-free in ntfs_show_options+0x682/0x860
[ 114.880947][ T6088] Read of size 4 at addr ffff888075ed5194 by task syz-executor106/6088
[ 114.880966][ T6088]
[ 114.880978][ T6088] CPU: 0 UID: 0 PID: 6088 Comm: syz-executor106 Not tainted syzkaller #0 PREEMPT(full)
[ 114.881005][ T6088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[ 114.881019][ T6088] Call Trace:
[ 114.881029][ T6088]
[ 114.881039][ T6088] dump_stack_lvl+0xe8/0x150
[ 114.881075][ T6088] print_address_description+0x55/0x1e0
[ 114.881110][ T6088] ? ntfs_show_options+0x682/0x860
[ 114.881133][ T6088] print_report+0x58/0x70
[ 114.881164][ T6088] kasan_report+0x117/0x150
[ 114.881193][ T6088] ? ntfs_show_options+0x682/0x860
[ 114.881223][ T6088] ntfs_show_options+0x682/0x860
[ 114.881249][ T6088] ? __pfx_ntfs_show_options+0x10/0x10
[ 114.881273][ T6088] show_mountinfo+0x983/0xb70
[ 114.881310][ T6088] ? __pfx_show_mountinfo+0x10/0x10
[ 114.881341][ T6088] ? down_read+0x2be/0x330
[ 114.881373][ T6088] ? srso_alias_return_thunk+0x5/0xfbef5
[ 114.881406][ T6088] seq_read_iter+0x8d5/0xca0
[ 114.881439][ T6088] vfs_read+0x595/0xa80
[ 114.881477][ T6088] ? __pfx_vfs_read+0x10/0x10
[ 114.881530][ T6088] ? __fget_files+0x2a/0x420
[ 114.881563][ T6088] ? srso_alias_return_thunk+0x5/0xfbef5
[ 114.881594][ T6088] ksys_read+0x150/0x270
[ 114.881627][ T6088] ? __pfx_ksys_read+0x10/0x10
[ 114.881658][ T6088] ? srso_alias_return_thunk+0x5/0xfbef5
[ 114.881694][ T6088] do_syscall_64+0x166/0x520
[ 114.881720][ T6088] ? trace_irq_disable+0x3b/0x140
[ 114.881744][ T6088] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 114.881772][ T6088] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 114.881797][ T6088] RIP: 0033:0x7f066d6993fe
[ 114.881817][ T6088] Code: 08 0f 85 f5 e2 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 90 41 57 41 56 4d 89 c6 41 55 4d 89 cd 41 54 55 53 48 83 ec 08
[ 114.881837][ T6088] RSP: 002b:00007f066762d198 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 114.881863][ T6088] RAX: ffffffffffffffda RBX: 00007f066762e6c0 RCX: 00007f066d6993fe
[ 114.881881][ T6088] RDX: 0000000000001000 RSI: 00007f066762d200 RDI: 000000000000000d
[ 114.881897][ T6088] RBP: 00007f066d6de056 R08: 0000000000000000 R09: 0000000000000000
[ 114.881912][ T6088] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f066762d200
[ 114.881928][ T6088] R13: 0000000000000011 R14: 00007ffd5dd7ef60 R15: 00007ffd5dd7f048
[ 114.881956][ T6088]
[ 114.881965][ T6088]
[ 114.881971][ T6088] Allocated by task 6093:
[ 114.881982][ T6088] kasan_save_track+0x3e/0x80
[ 114.882003][ T6088] __kasan_kmalloc+0x93/0xb0
[ 114.882025][ T6088] __kmalloc_cache_noprof+0x321/0x600
[ 114.882060][ T6088] ntfs_init_fs_context+0x55/0x570
[ 114.882096][ T6088] alloc_fs_context+0x9a3/0xd00
[ 114.882130][ T6088] path_mount+0xc5e/0x1050
[ 114.882155][ T6088] __se_sys_mount+0x31d/0x420
[ 114.882182][ T6088] do_syscall_64+0x166/0x520
[ 114.882206][ T6088] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 114.882232][ T6088]
[ 114.882238][ T6088] Freed by task 6094:
[ 114.882249][ T6088] kasan_save_track+0x3e/0x80
[ 114.882268][ T6088] kasan_save_free_info+0x40/0x50
[ 114.882298][ T6088] __kasan_slab_free+0x5c/0x80
[ 114.882319][ T6088] kfree+0x1c5/0x650
[ 114.882348][ T6088] put_fs_context+0x123/0xb00
[ 114.882382][ T6088] path_mount+0xefc/0x1050
[ 114.882407][ T6088] __se_sys_mount+0x31d/0x420
[ 114.882433][ T6088] do_syscall_64+0x166/0x520
[ 114.882456][ T6088] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 114.882492][ T6088]
[ 114.882498][ T6088] The buggy address belongs to the object at ffff888075ed5180
[ 114.882498][ T6088] which belongs to the cache kmalloc-32 of size 32
[ 114.882517][ T6088] The buggy address is located 20 bytes inside of
[ 114.882517][ T6088] freed 32-byte region [ffff888075ed5180, ffff888075ed51a0)
[ 114.882541][ T6088]
[ 114.882547][ T6088] The buggy address belongs to the physical page:
[ 114.882557][ T6088] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x75ed5
[ 114.882578][ T6088] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 114.882597][ T6088] page_type: f5(slab)
[ 114.882618][ T6088] raw: 00fff00000000000 ffff88801b041780 dead000000000100 dead000000000122
[ 114.882638][ T6088] raw: 0000000000000000 0000000000400040 00000000f5000000 0000000000000000
[ 114.882651][ T6088] page dumped because: kasan: bad access detected
[ 114.882661][ T6088] page_owner tracks the page as allocated
[ 114.882670][ T6088] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2800(GFP_NOWAIT|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5404, tgid 5404 (dhcpcd-run-hook), ts 51425941294
[ 114.882704][ T6088] post_alloc_hook+0x1f9/0x250
[ 114.882736][ T6088] get_page_from_freelist+0x2209/0x2280
[ 114.882758][ T6088] __alloc_frozen_pages_noprof+0x217/0x5a0
[ 114.882779][ T6088] allocate_slab+0x7d/0x620
[ 114.882805][ T6088] refill_objects+0x2d5/0x350
[ 114.882832][ T6088] __pcs_replace_empty_main+0x2c8/0x6c0
[ 114.882858][ T6088] __kmalloc_cache_noprof+0x39b/0x600
[ 114.882893][ T6088] kmem_cache_free+0x156/0x650
[ 114.882928][ T6088] vms_complete_munmap_vmas+0x897/0xbe0
[ 114.882960][ T6088] __mmap_complete+0xab/0x4b0
[ 114.882986][ T6088] mmap_region+0x1182/0x2230
[ 114.883011][ T6088] do_mmap+0xe0a/0x1300
[ 114.883037][ T6088] vm_mmap_pgoff+0x272/0x4e0
[ 114.883060][ T6088] ksys_mmap_pgoff+0x4dc/0x760
[ 114.883087][ T6088] do_syscall_64+0x166/0x520
[ 114.883110][ T6088] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 114.883133][ T6088] page last free pid 24 tgid 24 ts 51184098355 stack trace:
[ 114.883149][ T6088] __free_frozen_pages+0xc93/0xd90
[ 114.883181][ T6088] tlb_remove_table_rcu+0x85/0x100
[ 114.883216][ T6088] rcu_core+0x926/0x1260
[ 114.883238][ T6088] handle_softirqs+0x226/0x860
[ 114.883267][ T6088] run_ksoftirqd+0x36/0x60
[ 114.883300][ T6088] smpboot_thread_fn+0x565/0xa70
[ 114.883334][ T6088] kthread+0x38b/0x480
[ 114.883353][ T6088] ret_from_fork+0x514/0xb70
[ 114.883373][ T6088] ret_from_fork_asm+0x1a/0x30
[ 114.883408][ T6088]
[ 114.883414][ T6088] Memory state around the buggy address:
[ 114.883426][ T6088] ffff888075ed5080: fa fb fb fb fc fc fc fc fa fb fb fb fc fc fc fc
[ 114.883442][ T6088] ffff888075ed5100: fa fb fb fb fc fc fc fc fa fb fb fb fc fc fc fc
[ 114.883458][ T6088] >ffff888075ed5180: fa fb fb fb fc fc fc fc fa fb fb fb fc fc fc fc
[ 114.883470][ T6088] ^
[ 114.883497][ T6088] ffff888075ed5200: fa fb fb fb fc fc fc fc fa fb fb fb fc fc fc fc
[ 114.883513][ T6088] ffff888075ed5280: fa fb fb fb fc fc fc fc fa fb fb fb fc fc fc fc
[ 114.883525][ T6088] ==================================================================
[ 115.129169][ T6088] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 115.558532][ T6088] CPU: 0 UID: 0 PID: 6088 Comm: syz-executor106 Not tainted syzkaller #0 PREEMPT(full)
[ 115.568263][ T6088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026
[ 115.578318][ T6088] Call Trace:
[ 115.581630][ T6088]
[ 115.584610][ T6088] vpanic+0x56d/0xa60
[ 115.588619][ T6088] ? __pfx_vpanic+0x10/0x10
[ 115.593143][ T6088] panic+0xc5/0xd0
[ 115.596961][ T6088] ? __pfx_panic+0x10/0x10
[ 115.601386][ T6088] ? preempt_schedule_thunk+0x16/0x40
[ 115.606810][ T6088] ? srso_alias_return_thunk+0x5/0xfbef5
[ 115.612443][ T6088] ? preempt_schedule_thunk+0x16/0x40
[ 115.617823][ T6088] ? ntfs_show_options+0x682/0x860
[ 115.622985][ T6088] check_panic_on_warn+0x89/0xb0
[ 115.627930][ T6088] ? ntfs_show_options+0x682/0x860
[ 115.633049][ T6088] end_report+0x73/0x170
[ 115.637302][ T6088] ? ntfs_show_options+0x682/0x860
[ 115.642418][ T6088] kasan_report+0x128/0x150
[ 115.647108][ T6088] ? ntfs_show_options+0x682/0x860
[ 115.652247][ T6088] ntfs_show_options+0x682/0x860
[ 115.657402][ T6088] ? __pfx_ntfs_show_options+0x10/0x10
[ 115.662869][ T6088] show_mountinfo+0x983/0xb70
[ 115.667578][ T6088] ? __pfx_show_mountinfo+0x10/0x10
[ 115.672871][ T6088] ? down_read+0x2be/0x330
[ 115.677327][ T6088] ? srso_alias_return_thunk+0x5/0xfbef5
[ 115.683006][ T6088] seq_read_iter+0x8d5/0xca0
[ 115.687706][ T6088] vfs_read+0x595/0xa80
[ 115.691880][ T6088] ? __pfx_vfs_read+0x10/0x10
[ 115.696699][ T6088] ? __fget_files+0x2a/0x420
[ 115.701307][ T6088] ? srso_alias_return_thunk+0x5/0xfbef5
[ 115.706955][ T6088] ksys_read+0x150/0x270
[ 115.711229][ T6088] ? __pfx_ksys_read+0x10/0x10
[ 115.716011][ T6088] ? srso_alias_return_thunk+0x5/0xfbef5
[ 115.721836][ T6088] do_syscall_64+0x166/0x520
[ 115.726439][ T6088] ? trace_irq_disable+0x3b/0x140
[ 115.731467][ T6088] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 115.737558][ T6088] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 115.743568][ T6088] RIP: 0033:0x7f066d6993fe
[ 115.748000][ T6088] Code: 08 0f 85 f5 e2 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 90 41 57 41 56 4d 89 c6 41 55 4d 89 cd 41 54 55 53 48 83 ec 08
[ 115.767788][ T6088] RSP: 002b:00007f066762d198 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 115.776219][ T6088] RAX: ffffffffffffffda RBX: 00007f066762e6c0 RCX: 00007f066d6993fe
[ 115.784196][ T6088] RDX: 0000000000001000 RSI: 00007f066762d200 RDI: 000000000000000d
[ 115.792167][ T6088] RBP: 00007f066d6de056 R08: 0000000000000000 R09: 0000000000000000
[ 115.800141][ T6088] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f066762d200
[ 115.808111][ T6088] R13: 0000000000000011 R14: 00007ffd5dd7ef60 R15: 00007ffd5dd7f048
[ 115.816124][ T6088]
[ 115.819360][ T6088] Kernel Offset: disabled
[ 115.823672][ T6088] Rebooting in 86400 seconds..