Warning: Permanently added '10.128.10.5' (ED25519) to the list of known hosts.
2026/09/01 23:11:52 parsed 1 programs
Setting up swapspace version 1, size = 127995904 bytes
[ 94.601210][ T4656] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS
[ 96.731886][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 96.740026][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 96.761821][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 96.773613][ T416] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 96.781543][ T416] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 96.802301][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 98.318174][ T154] ODEBUG: Out of memory. ODEBUG disabled
[ 99.065762][ T4849] chnl_net:caif_netlink_parms(): no params data found
[ 99.099465][ T4849] bridge0: port 1(bridge_slave_0) entered blocking state
[ 99.108049][ T4849] bridge0: port 1(bridge_slave_0) entered disabled state
[ 99.115973][ T4849] device bridge_slave_0 entered promiscuous mode
[ 99.137397][ T4849] bridge0: port 2(bridge_slave_1) entered blocking state
[ 99.144815][ T4849] bridge0: port 2(bridge_slave_1) entered disabled state
[ 99.153137][ T4849] device bridge_slave_1 entered promiscuous mode
[ 99.170405][ T4849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 99.181795][ T4849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 99.214736][ T4849] team0: Port device team_slave_0 added
[ 99.222793][ T4849] team0: Port device team_slave_1 added
[ 99.237630][ T4849] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 99.245226][ T4849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 99.271851][ T4849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 99.284448][ T4849] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 99.291509][ T4849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 99.318728][ T4849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 99.359721][ T4849] device hsr_slave_0 entered promiscuous mode
[ 99.366750][ T4849] device hsr_slave_1 entered promiscuous mode
[ 99.806955][ T4849] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 99.816797][ T4849] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 99.827122][ T4849] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 99.847880][ T4849] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 99.869547][ T4849] bridge0: port 2(bridge_slave_1) entered blocking state
[ 99.876673][ T4849] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 99.884108][ T4849] bridge0: port 1(bridge_slave_0) entered blocking state
[ 99.891196][ T4849] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 99.967380][ T4849] 8021q: adding VLAN 0 to HW filter on device bond0
[ 100.017688][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 100.026400][ T1240] bridge0: port 1(bridge_slave_0) entered disabled state
[ 100.037235][ T1240] bridge0: port 2(bridge_slave_1) entered disabled state
[ 100.051401][ T4849] 8021q: adding VLAN 0 to HW filter on device team0
[ 100.076188][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 100.085927][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 100.095218][ T1240] bridge0: port 1(bridge_slave_0) entered blocking state
[ 100.102439][ T1240] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 100.131654][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 100.141432][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 100.150507][ T1240] bridge0: port 2(bridge_slave_1) entered blocking state
[ 100.157667][ T1240] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 100.168580][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 100.177972][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 100.204005][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 100.224531][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 100.238899][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 100.251879][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 100.272396][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 100.293096][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 100.312532][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 100.334399][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 100.352384][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 100.363543][ T4849] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 100.513397][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 100.520886][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 100.544363][ T4849] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 100.564274][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 100.575529][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 100.596384][ T416] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 100.605852][ T416] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 100.620014][ T4849] device veth0_vlan entered promiscuous mode
[ 100.627746][ T416] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 100.637814][ T416] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 100.651043][ T4849] device veth1_vlan entered promiscuous mode
[ 100.676079][ T416] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 100.687290][ T416] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 100.697398][ T416] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 100.706990][ T416] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 100.719380][ T4849] device veth0_macvtap entered promiscuous mode
[ 100.738265][ T4849] device veth1_macvtap entered promiscuous mode
[ 100.768783][ T4849] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 100.789045][ T416] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 100.800214][ T416] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 100.822686][ T416] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 100.833244][ T416] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 100.849602][ T4849] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 100.859964][ T416] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 100.882612][ T416] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 100.909234][ T4849] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 100.927569][ T4849] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 100.936877][ T4849] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 100.945957][ T4849] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
2026/09/01 23:12:02 executed programs: 0
[ 101.799010][ T154] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 101.887447][ T4945] chnl_net:caif_netlink_parms(): no params data found
[ 101.945413][ T4945] bridge0: port 1(bridge_slave_0) entered blocking state
[ 101.955251][ T4945] bridge0: port 1(bridge_slave_0) entered disabled state
[ 101.964035][ T4945] device bridge_slave_0 entered promiscuous mode
[ 101.972984][ T4945] bridge0: port 2(bridge_slave_1) entered blocking state
[ 101.980140][ T4945] bridge0: port 2(bridge_slave_1) entered disabled state
[ 101.990879][ T4945] device bridge_slave_1 entered promiscuous mode
[ 102.016254][ T4945] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 102.027862][ T4945] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 102.064322][ T4945] team0: Port device team_slave_0 added
[ 102.073037][ T4945] team0: Port device team_slave_1 added
[ 102.094572][ T4945] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 102.101631][ T4945] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 102.131049][ T4945] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 102.144289][ T4945] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 102.151344][ T4945] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 102.180120][ T4945] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 102.222478][ T4945] device hsr_slave_0 entered promiscuous mode
[ 102.229415][ T4945] device hsr_slave_1 entered promiscuous mode
[ 102.236464][ T4945] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 102.244795][ T4945] Cannot create hsr debugfs directory
[ 103.792537][ T4280] Bluetooth: hci0: command 0x0409 tx timeout
[ 104.316886][ T154] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 105.872025][ T4430] Bluetooth: hci0: command 0x041b tx timeout
[ 106.025904][ T154] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 106.066470][ T154] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 106.936746][ T4945] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 106.946559][ T4945] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 106.955751][ T4945] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 106.966271][ T4945] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 107.013104][ T4945] 8021q: adding VLAN 0 to HW filter on device bond0
[ 107.026191][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 107.034930][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 107.045813][ T4945] 8021q: adding VLAN 0 to HW filter on device team0
[ 107.056022][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 107.065182][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 107.073769][ T144] bridge0: port 1(bridge_slave_0) entered blocking state
[ 107.081012][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 107.093194][ T154] device hsr_slave_0 left promiscuous mode
[ 107.099773][ T154] device hsr_slave_1 left promiscuous mode
[ 107.106336][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 107.113915][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 107.121638][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 107.129164][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 107.136870][ T154] device bridge_slave_1 left promiscuous mode
[ 107.143167][ T154] bridge0: port 2(bridge_slave_1) entered disabled state
[ 107.153375][ T154] device bridge_slave_0 left promiscuous mode
[ 107.160491][ T154] bridge0: port 1(bridge_slave_0) entered disabled state
[ 107.171873][ T154] device veth1_macvtap left promiscuous mode
[ 107.177938][ T154] device veth0_macvtap left promiscuous mode
[ 107.184181][ T154] device veth1_vlan left promiscuous mode
[ 107.190230][ T154] device veth0_vlan left promiscuous mode
[ 107.288440][ T154] team0 (unregistering): Port device team_slave_1 removed
[ 107.300994][ T154] team0 (unregistering): Port device team_slave_0 removed
[ 107.313492][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 107.325808][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 107.367891][ T154] bond0 (unregistering): Released all slaves
[ 107.432776][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 107.440936][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 107.450392][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 107.460249][ T144] bridge0: port 2(bridge_slave_1) entered blocking state
[ 107.467536][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 107.476483][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 107.485721][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 107.495640][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 107.504677][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 107.513500][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 107.522535][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 107.531160][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 107.539868][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 107.549629][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 107.557737][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 107.566314][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 107.593157][ T4945] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 107.672196][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 107.679666][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 107.693100][ T4945] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 107.713036][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 107.721987][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 107.737768][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 107.746047][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 107.755412][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 107.763879][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 107.773700][ T4945] device veth0_vlan entered promiscuous mode
[ 107.784228][ T4945] device veth1_vlan entered promiscuous mode
[ 107.799269][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 107.807920][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 107.816328][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 107.825265][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 107.836640][ T4945] device veth0_macvtap entered promiscuous mode
[ 107.846512][ T4945] device veth1_macvtap entered promiscuous mode
[ 107.864330][ T4945] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 107.872062][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 107.880748][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 107.889329][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 107.899360][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 107.911977][ T4945] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 107.919368][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 107.928740][ T1240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 107.940331][ T4945] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 107.949984][ T4945] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 107.959014][ T4809] Bluetooth: hci0: command 0x040f tx timeout
[ 107.966166][ T4945] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 107.975787][ T4945] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 108.035465][ T1240] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 108.047701][ T1240] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 108.056929][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 108.077689][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
2026/09/01 23:12:08 executed programs: 2
[ 108.086358][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 108.096896][ T416] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 108.186085][ T5244] loop0: detected capacity change from 0 to 4096
[ 108.287240][ T5244] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[ 108.332462][ T5244] ntfs: volume version 3.1.
[ 108.521486][ T5246] loop0: detected capacity change from 0 to 4096
[ 108.532634][ T5246] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[ 108.580223][ T5246] ntfs: volume version 3.1.
[ 108.606380][ T5246] ==================================================================
[ 108.614656][ T5246] BUG: KASAN: use-after-free in ntfs_readpage+0x7f6/0x2140
[ 108.621967][ T5246] Read of size 10 at addr ffff888069932170 by task syz.0.18/5246
[ 108.629685][ T5246]
[ 108.632101][ T5246] CPU: 1 PID: 5246 Comm: syz.0.18 Not tainted syzkaller #0
[ 108.639736][ T5246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 108.650174][ T5246] Call Trace:
[ 108.653461][ T5246]
[ 108.656398][ T5246] dump_stack_lvl+0x188/0x250
[ 108.661328][ T5246] ? show_regs_print_info+0x20/0x20
[ 108.666824][ T5246] ? _printk+0xda/0x130
[ 108.671239][ T5246] ? ntfs_readpage+0x7f6/0x2140
[ 108.676407][ T5246] ? load_image+0x410/0x410
[ 108.680962][ T5246] print_address_description+0x60/0x2d0
[ 108.686882][ T5246] ? ntfs_readpage+0x7f6/0x2140
[ 108.691799][ T5246] kasan_report+0xdf/0x130
[ 108.696227][ T5246] ? ntfs_readpage+0x7f6/0x2140
[ 108.701174][ T5246] kasan_check_range+0x235/0x290
[ 108.706137][ T5246] ? ntfs_readpage+0x7f6/0x2140
[ 108.711009][ T5246] memcpy+0x25/0x60
[ 108.714830][ T5246] ntfs_readpage+0x7f6/0x2140
[ 108.719528][ T5246] ? __lock_acquire+0x7b50/0x7b50
[ 108.724663][ T5246] ? ntfs_writepage+0x1360/0x1360
[ 108.729779][ T5246] ? xa_load+0x276/0x2a0
[ 108.734053][ T5246] ? readahead_page+0x295/0x3d0
[ 108.738925][ T5246] ? ntfs_writepage+0x1360/0x1360
[ 108.743954][ T5246] read_pages+0x60a/0x920
[ 108.748310][ T5246] ? page_cache_ra_unbounded+0x8f0/0x8f0
[ 108.754074][ T5246] ? add_to_page_cache_lru+0x2ad/0x4a0
[ 108.759645][ T5246] page_cache_ra_unbounded+0x7f4/0x8f0
[ 108.765316][ T5246] ? read_cache_pages_invalidate_pages+0x1c0/0x1c0
[ 108.772299][ T5246] ? blk_cgroup_congested+0x30b/0x390
[ 108.777704][ T5246] filemap_read+0x5ef/0x2560
[ 108.782310][ T5246] ? rcu_lock_release+0x5/0x20
[ 108.787212][ T5246] ? find_get_pages_range_tag+0x450/0x450
[ 108.792922][ T5246] ? __kernel_text_address+0x9a/0x100
[ 108.798317][ T5246] ? unwind_get_return_address+0x49/0x80
[ 108.803954][ T5246] ? generic_file_read_iter+0x94/0x480
[ 108.809413][ T5246] ? iov_iter_kvec+0xb4/0x170
[ 108.814100][ T5246] __kernel_read+0x51d/0x980
[ 108.818700][ T5246] ? __kasan_kmalloc+0xc6/0xe0
[ 108.823458][ T5246] ? __kasan_kmalloc+0xaf/0xe0
[ 108.828430][ T5246] ? rw_verify_area+0x1b0/0x1b0
[ 108.833286][ T5246] integrity_kernel_read+0x86/0xd0
[ 108.838390][ T5246] ? integrity_inode_free+0x170/0x170
[ 108.843769][ T5246] ima_calc_file_hash+0x946/0x1940
[ 108.848959][ T5246] ? mark_lock+0x94/0x320
[ 108.853280][ T5246] ? __lock_acquire+0x13dc/0x7b50
[ 108.858317][ T5246] ? ima_alloc_tfm+0x2f0/0x2f0
[ 108.863073][ T5246] ? __kernel_text_address+0x9a/0x100
[ 108.868465][ T5246] ? __mutex_trylock_common+0x15c/0x260
[ 108.874006][ T5246] ? rcu_lock_release+0x20/0x20
[ 108.878856][ T5246] ima_collect_measurement+0x335/0x7e0
[ 108.884343][ T5246] ? ima_get_action+0xa0/0xa0
[ 108.889009][ T5246] ? is_bad_inode+0x9/0x40
[ 108.893421][ T5246] process_measurement+0x1185/0x1c20
[ 108.898701][ T5246] ? ima_file_mmap+0x140/0x140
[ 108.903453][ T5246] ? tomoyo_check_path_number_acl+0x280/0x280
[ 108.909664][ T5246] ima_file_check+0xc7/0x110
[ 108.914270][ T5246] ? ima_bprm_check+0x200/0x200
[ 108.919120][ T5246] ? vfs_open+0x2b/0x80
[ 108.923271][ T5246] path_openat+0x27cf/0x2fb0
[ 108.927873][ T5246] ? do_filp_open+0x400/0x400
[ 108.932548][ T5246] do_filp_open+0x1df/0x400
[ 108.937062][ T5246] ? vfs_tmpfile+0x300/0x300
[ 108.941655][ T5246] ? _raw_spin_unlock+0x24/0x40
[ 108.946530][ T5246] ? alloc_fd+0x59e/0x650
[ 108.950959][ T5246] do_sys_openat2+0x14b/0x500
[ 108.955743][ T5246] ? __lock_acquire+0x7b50/0x7b50
[ 108.960856][ T5246] ? do_sys_open+0xe0/0xe0
[ 108.965263][ T5246] ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[ 108.971236][ T5246] ? lock_chain_count+0x20/0x20
[ 108.976079][ T5246] __x64_sys_openat+0x135/0x160
[ 108.980919][ T5246] do_syscall_64+0x4c/0xa0
[ 108.985319][ T5246] ? clear_bhb_loop+0x30/0x80
[ 108.989985][ T5246] ? clear_bhb_loop+0x30/0x80
[ 108.994665][ T5246] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 109.000558][ T5246] RIP: 0033:0x7f3062ea9629
[ 109.004968][ T5246] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 109.026936][ T5246] RSP: 002b:00007f306250b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 109.035439][ T5246] RAX: ffffffffffffffda RBX: 00007f3063122fa0 RCX: 00007f3062ea9629
[ 109.043398][ T5246] RDX: 0000000000000000 RSI: 0000200000000100 RDI: ffffffffffffff9c
[ 109.051358][ T5246] RBP: 00007f3062f3fb39 R08: 0000000000000000 R09: 0000000000000000
[ 109.059490][ T5246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 109.067533][ T5246] R13: 00007f3063123038 R14: 00007f3063122fa0 R15: 00007fff8b9f6328
[ 109.075587][ T5246]
[ 109.078598][ T5246]
[ 109.080922][ T5246] The buggy address belongs to the page:
[ 109.086551][ T5246] page:ffffea0001a64c80 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1 pfn:0x69932
[ 109.096795][ T5246] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 109.103912][ T5246] raw: 00fff00000000000 ffffea0001a64cc8 ffffea0001a64c48 0000000000000000
[ 109.112505][ T5246] raw: 0000000000000001 0000000000000000 00000000ffffffff 0000000000000000
[ 109.121174][ T5246] page dumped because: kasan: bad access detected
[ 109.127594][ T5246] page_owner tracks the page as freed
[ 109.132946][ T5246] page last allocated via order 0, migratetype Movable, gfp_mask 0x1100cca(GFP_HIGHUSER_MOVABLE), pid 5246, ts 108567038741, free_ts 108578258177
[ 109.147699][ T5246] get_page_from_freelist+0x24f6/0x2670
[ 109.153255][ T5246] __alloc_pages+0x1ee/0x480
[ 109.157876][ T5246] __page_cache_alloc+0xce/0x440
[ 109.162895][ T5246] do_read_cache_page+0x1d4/0x1010
[ 109.168088][ T5246] ntfs_map_page+0x24/0x390
[ 109.172745][ T5246] load_system_files+0x1ca7/0x54b0
[ 109.177858][ T5246] ntfs_fill_super+0x19c9/0x2c90
[ 109.183092][ T5246] mount_bdev+0x28a/0x3c0
[ 109.187876][ T5246] legacy_get_tree+0xe6/0x180
[ 109.192558][ T5246] vfs_get_tree+0x88/0x270
[ 109.196960][ T5246] do_new_mount+0x247/0xa40
[ 109.201446][ T5246] __se_sys_mount+0x2e3/0x3d0
[ 109.206111][ T5246] do_syscall_64+0x4c/0xa0
[ 109.210690][ T5246] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 109.216758][ T5246] page last free stack trace:
[ 109.221412][ T5246] free_unref_page_prepare+0x637/0x6c0
[ 109.226881][ T5246] free_unref_page_list+0x119/0x830
[ 109.232074][ T5246] release_pages+0x185f/0x1bd0
[ 109.236819][ T5246] __pagevec_release+0x6d/0xe0
[ 109.241562][ T5246] truncate_inode_pages_range+0x335/0xf90
[ 109.247269][ T5246] ntfs_evict_big_inode+0x2c/0x490
[ 109.252539][ T5246] evict+0x4b6/0x8b0
[ 109.256414][ T5246] load_system_files+0x26b6/0x54b0
[ 109.261512][ T5246] ntfs_fill_super+0x19c9/0x2c90
[ 109.266538][ T5246] mount_bdev+0x28a/0x3c0
[ 109.270852][ T5246] legacy_get_tree+0xe6/0x180
[ 109.275605][ T5246] vfs_get_tree+0x88/0x270
[ 109.280214][ T5246] do_new_mount+0x247/0xa40
[ 109.284706][ T5246] __se_sys_mount+0x2e3/0x3d0
[ 109.289369][ T5246] do_syscall_64+0x4c/0xa0
[ 109.293863][ T5246] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 109.299835][ T5246]
[ 109.302149][ T5246] Memory state around the buggy address:
[ 109.307767][ T5246] ffff888069932000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 109.315809][ T5246] ffff888069932080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 109.323852][ T5246] >ffff888069932100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 109.331894][ T5246] ^
[ 109.339613][ T5246] ffff888069932180: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 109.347771][ T5246] ffff888069932200: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 109.355822][ T5246] ==================================================================
[ 109.364039][ T5246] Disabling lock debugging due to kernel taint
[ 109.370933][ T5246] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 109.378222][ T5246] CPU: 1 PID: 5246 Comm: syz.0.18 Tainted: G B syzkaller #0
[ 109.386808][ T5246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 109.397308][ T5246] Call Trace:
[ 109.400593][ T5246]
[ 109.403625][ T5246] dump_stack_lvl+0x188/0x250
[ 109.408320][ T5246] ? show_regs_print_info+0x20/0x20
[ 109.413539][ T5246] ? load_image+0x410/0x410
[ 109.418266][ T5246] panic+0x2f8/0x850
[ 109.422190][ T5246] ? bpf_jit_dump+0xd0/0xd0
[ 109.426706][ T5246] ? _raw_spin_unlock_irqrestore+0xbc/0x120
[ 109.433312][ T5246] ? _raw_spin_unlock_irqrestore+0xc1/0x120
[ 109.439217][ T5246] ? _raw_spin_unlock+0x40/0x40
[ 109.444255][ T5246] ? print_memory_metadata+0x314/0x400
[ 109.449730][ T5246] ? ntfs_readpage+0x7f6/0x2140
[ 109.454604][ T5246] check_panic_on_warn+0x80/0xa0
[ 109.459553][ T5246] ? ntfs_readpage+0x7f6/0x2140
[ 109.464412][ T5246] end_report+0x6d/0xf0
[ 109.468713][ T5246] kasan_report+0x102/0x130
[ 109.473224][ T5246] ? ntfs_readpage+0x7f6/0x2140
[ 109.478134][ T5246] kasan_check_range+0x235/0x290
[ 109.483068][ T5246] ? ntfs_readpage+0x7f6/0x2140
[ 109.487902][ T5246] memcpy+0x25/0x60
[ 109.491746][ T5246] ntfs_readpage+0x7f6/0x2140
[ 109.496458][ T5246] ? __lock_acquire+0x7b50/0x7b50
[ 109.501484][ T5246] ? ntfs_writepage+0x1360/0x1360
[ 109.506543][ T5246] ? xa_load+0x276/0x2a0
[ 109.510872][ T5246] ? readahead_page+0x295/0x3d0
[ 109.515882][ T5246] ? ntfs_writepage+0x1360/0x1360
[ 109.521068][ T5246] read_pages+0x60a/0x920
[ 109.525525][ T5246] ? page_cache_ra_unbounded+0x8f0/0x8f0
[ 109.531181][ T5246] ? add_to_page_cache_lru+0x2ad/0x4a0
[ 109.536722][ T5246] page_cache_ra_unbounded+0x7f4/0x8f0
[ 109.542630][ T5246] ? read_cache_pages_invalidate_pages+0x1c0/0x1c0
[ 109.549208][ T5246] ? blk_cgroup_congested+0x30b/0x390
[ 109.554677][ T5246] filemap_read+0x5ef/0x2560
[ 109.559356][ T5246] ? rcu_lock_release+0x5/0x20
[ 109.564111][ T5246] ? find_get_pages_range_tag+0x450/0x450
[ 109.569901][ T5246] ? __kernel_text_address+0x9a/0x100
[ 109.575271][ T5246] ? unwind_get_return_address+0x49/0x80
[ 109.580906][ T5246] ? generic_file_read_iter+0x94/0x480
[ 109.586364][ T5246] ? iov_iter_kvec+0xb4/0x170
[ 109.591316][ T5246] __kernel_read+0x51d/0x980
[ 109.595999][ T5246] ? __kasan_kmalloc+0xc6/0xe0
[ 109.600935][ T5246] ? __kasan_kmalloc+0xaf/0xe0
[ 109.605704][ T5246] ? rw_verify_area+0x1b0/0x1b0
[ 109.610581][ T5246] integrity_kernel_read+0x86/0xd0
[ 109.615818][ T5246] ? integrity_inode_free+0x170/0x170
[ 109.621203][ T5246] ima_calc_file_hash+0x946/0x1940
[ 109.626314][ T5246] ? mark_lock+0x94/0x320
[ 109.630726][ T5246] ? __lock_acquire+0x13dc/0x7b50
[ 109.635752][ T5246] ? ima_alloc_tfm+0x2f0/0x2f0
[ 109.640512][ T5246] ? __kernel_text_address+0x9a/0x100
[ 109.646074][ T5246] ? __mutex_trylock_common+0x15c/0x260
[ 109.651623][ T5246] ? rcu_lock_release+0x20/0x20
[ 109.656562][ T5246] ima_collect_measurement+0x335/0x7e0
[ 109.662019][ T5246] ? ima_get_action+0xa0/0xa0
[ 109.666773][ T5246] ? is_bad_inode+0x9/0x40
[ 109.671291][ T5246] process_measurement+0x1185/0x1c20
[ 109.676690][ T5246] ? ima_file_mmap+0x140/0x140
[ 109.681709][ T5246] ? tomoyo_check_path_number_acl+0x280/0x280
[ 109.687829][ T5246] ima_file_check+0xc7/0x110
[ 109.692416][ T5246] ? ima_bprm_check+0x200/0x200
[ 109.697268][ T5246] ? vfs_open+0x2b/0x80
[ 109.701402][ T5246] path_openat+0x27cf/0x2fb0
[ 109.706165][ T5246] ? do_filp_open+0x400/0x400
[ 109.710838][ T5246] do_filp_open+0x1df/0x400
[ 109.715348][ T5246] ? vfs_tmpfile+0x300/0x300
[ 109.719959][ T5246] ? _raw_spin_unlock+0x24/0x40
[ 109.725054][ T5246] ? alloc_fd+0x59e/0x650
[ 109.729383][ T5246] do_sys_openat2+0x14b/0x500
[ 109.734931][ T5246] ? __lock_acquire+0x7b50/0x7b50
[ 109.739968][ T5246] ? do_sys_open+0xe0/0xe0
[ 109.744376][ T5246] ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[ 109.750480][ T5246] ? lock_chain_count+0x20/0x20
[ 109.755322][ T5246] __x64_sys_openat+0x135/0x160
[ 109.760160][ T5246] do_syscall_64+0x4c/0xa0
[ 109.764556][ T5246] ? clear_bhb_loop+0x30/0x80
[ 109.769226][ T5246] ? clear_bhb_loop+0x30/0x80
[ 109.773905][ T5246] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 109.779874][ T5246] RIP: 0033:0x7f3062ea9629
[ 109.784401][ T5246] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 109.804428][ T5246] RSP: 002b:00007f306250b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 109.813061][ T5246] RAX: ffffffffffffffda RBX: 00007f3063122fa0 RCX: 00007f3062ea9629
[ 109.821068][ T5246] RDX: 0000000000000000 RSI: 0000200000000100 RDI: ffffffffffffff9c
[ 109.829056][ T5246] RBP: 00007f3062f3fb39 R08: 0000000000000000 R09: 0000000000000000
[ 109.837125][ T5246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 109.845170][ T5246] R13: 00007f3063123038 R14: 00007f3063122fa0 R15: 00007fff8b9f6328
[ 109.853153][ T5246]
[ 109.856433][ T5246] Kernel Offset: disabled
[ 109.860972][ T5246] Rebooting in 86400 seconds..