Warning: Permanently added '10.128.1.163' (ED25519) to the list of known hosts.
2026/10/06 10:39:36 parsed 1 programs
Setting up swapspace version 1, size = 127995904 bytes
[ 108.856399][ T4500] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS
[ 110.988704][ T3011] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 110.996869][ T3011] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 111.013964][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 111.026404][ T3011] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 111.035730][ T3011] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 111.044511][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 112.473269][ T4672] chnl_net:caif_netlink_parms(): no params data found
[ 112.545511][ T4672] bridge0: port 1(bridge_slave_0) entered blocking state
[ 112.554125][ T4672] bridge0: port 1(bridge_slave_0) entered disabled state
[ 112.562919][ T4672] device bridge_slave_0 entered promiscuous mode
[ 112.571934][ T4672] bridge0: port 2(bridge_slave_1) entered blocking state
[ 112.580812][ T4672] bridge0: port 2(bridge_slave_1) entered disabled state
[ 112.589379][ T4672] device bridge_slave_1 entered promiscuous mode
[ 112.626162][ T4672] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 112.638025][ T4672] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 112.681856][ T4672] team0: Port device team_slave_0 added
[ 112.694835][ T4672] team0: Port device team_slave_1 added
[ 112.717611][ T4672] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 112.724929][ T4672] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 112.752773][ T4672] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 112.767615][ T4672] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 112.775331][ T4672] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 112.802461][ T4672] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 112.844594][ T4672] device hsr_slave_0 entered promiscuous mode
[ 112.855151][ T4672] device hsr_slave_1 entered promiscuous mode
[ 113.391291][ T4672] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 113.402999][ T4672] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 113.439230][ T4672] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 113.450230][ T4672] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 113.479661][ T4672] bridge0: port 2(bridge_slave_1) entered blocking state
[ 113.487222][ T4672] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 113.494870][ T4672] bridge0: port 1(bridge_slave_0) entered blocking state
[ 113.502242][ T4672] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 113.548885][ T4314] bridge0: port 1(bridge_slave_0) entered disabled state
[ 113.556812][ T4314] bridge0: port 2(bridge_slave_1) entered disabled state
[ 113.637046][ T4672] 8021q: adding VLAN 0 to HW filter on device bond0
[ 113.652499][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 113.661092][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 113.673628][ T4672] 8021q: adding VLAN 0 to HW filter on device team0
[ 113.711931][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 113.721968][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 113.732271][ T4314] bridge0: port 1(bridge_slave_0) entered blocking state
[ 113.739630][ T4314] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 113.748019][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 113.758896][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 113.767578][ T4314] bridge0: port 2(bridge_slave_1) entered blocking state
[ 113.775202][ T4314] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 113.785392][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 113.830529][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 113.846988][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 113.860617][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 113.879443][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 113.889606][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 113.899415][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 113.908632][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 113.917420][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 113.929981][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 113.939233][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 113.949938][ T4672] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 114.137786][ T3011] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 114.147683][ T3011] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 114.172752][ T4672] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 114.196086][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 114.206894][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 114.248893][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 114.257923][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 114.269212][ T4672] device veth0_vlan entered promiscuous mode
[ 114.279366][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 114.288667][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 114.305876][ T4672] device veth1_vlan entered promiscuous mode
[ 114.361149][ T3011] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 114.371233][ T3011] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 114.380046][ T3011] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 114.390384][ T3011] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 114.402262][ T4672] device veth0_macvtap entered promiscuous mode
[ 114.432222][ T4672] device veth1_macvtap entered promiscuous mode
[ 114.467385][ T4672] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 114.489625][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 114.509930][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 114.529906][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 114.550124][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 114.568210][ T4672] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 114.576280][ T3011] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 114.589431][ T3011] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 114.601682][ T4672] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 114.612118][ T4672] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 114.621644][ T4672] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 114.633368][ T4672] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
2026/10/06 10:39:49 executed programs: 0
[ 116.421260][ T4790] chnl_net:caif_netlink_parms(): no params data found
[ 116.538452][ T4790] bridge0: port 1(bridge_slave_0) entered blocking state
[ 116.545902][ T4790] bridge0: port 1(bridge_slave_0) entered disabled state
[ 116.555262][ T4790] device bridge_slave_0 entered promiscuous mode
[ 116.564653][ T4790] bridge0: port 2(bridge_slave_1) entered blocking state
[ 116.578238][ T4790] bridge0: port 2(bridge_slave_1) entered disabled state
[ 116.587037][ T4790] device bridge_slave_1 entered promiscuous mode
[ 116.641197][ T4790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 116.652949][ T4790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 116.696465][ T4790] team0: Port device team_slave_0 added
[ 116.720307][ T4790] team0: Port device team_slave_1 added
[ 116.761938][ T4790] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 116.778196][ T4790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 116.838369][ T4790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 116.860056][ T4790] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 116.867147][ T4790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 116.903034][ T4790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 116.953867][ T4790] device hsr_slave_0 entered promiscuous mode
[ 116.964077][ T4790] device hsr_slave_1 entered promiscuous mode
[ 116.971562][ T4790] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 116.979714][ T4790] Cannot create hsr debugfs directory
[ 116.994461][ T9] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 118.230584][ T7] Bluetooth: hci0: command 0x0409 tx timeout
[ 118.994726][ T9] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 119.044999][ T9] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 119.106425][ T9] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 120.002800][ T4790] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 120.015421][ T4790] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 120.025903][ T4790] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 120.039427][ T4790] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 120.155965][ T4790] 8021q: adding VLAN 0 to HW filter on device bond0
[ 120.175711][ T3011] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 120.187531][ T3011] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 120.200538][ T4790] 8021q: adding VLAN 0 to HW filter on device team0
[ 120.216971][ T9] device hsr_slave_0 left promiscuous mode
[ 120.224205][ T9] device hsr_slave_1 left promiscuous mode
[ 120.232248][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 120.240286][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 120.248766][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 120.256572][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 120.267691][ T9] device bridge_slave_1 left promiscuous mode
[ 120.275557][ T9] bridge0: port 2(bridge_slave_1) entered disabled state
[ 120.285276][ T9] device bridge_slave_0 left promiscuous mode
[ 120.294526][ T9] bridge0: port 1(bridge_slave_0) entered disabled state
[ 120.308159][ T4216] Bluetooth: hci0: command 0x041b tx timeout
[ 120.316496][ T9] device veth1_macvtap left promiscuous mode
[ 120.322948][ T9] device veth0_macvtap left promiscuous mode
[ 120.332137][ T9] device veth1_vlan left promiscuous mode
[ 120.338672][ T9] device veth0_vlan left promiscuous mode
[ 120.500897][ T9] team0 (unregistering): Port device team_slave_1 removed
[ 120.514205][ T9] team0 (unregistering): Port device team_slave_0 removed
[ 120.526569][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 120.540774][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 120.596454][ T9] bond0 (unregistering): Released all slaves
[ 120.620914][ T3011] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 120.632016][ T3011] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 120.642410][ T3011] bridge0: port 1(bridge_slave_0) entered blocking state
[ 120.650466][ T3011] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 120.659757][ T3011] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 120.669194][ T3011] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 120.677822][ T3011] bridge0: port 2(bridge_slave_1) entered blocking state
[ 120.685447][ T3011] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 120.693393][ T3011] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 120.703340][ T3011] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 120.721193][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 120.733584][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 120.744036][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 120.757942][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 120.776704][ T4790] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 120.791301][ T4790] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 120.804332][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 120.817967][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 120.831304][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 120.841021][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 120.852626][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 120.862270][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 120.890897][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 121.033815][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 121.050255][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 121.068644][ T4790] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 121.093205][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 121.103148][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 121.124937][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 121.134001][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 121.145502][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 121.154061][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 121.165874][ T4790] device veth0_vlan entered promiscuous mode
[ 121.182293][ T4790] device veth1_vlan entered promiscuous mode
[ 121.206875][ T3011] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 121.216118][ T3011] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 121.248827][ T4790] device veth0_macvtap entered promiscuous mode
[ 121.268605][ T4790] device veth1_macvtap entered promiscuous mode
[ 121.310449][ T4790] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 121.317985][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 121.338904][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 121.347452][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 121.369102][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 121.388784][ T4790] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 121.396944][ T3011] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 121.412256][ T3011] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 121.425046][ T4790] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 121.448721][ T4790] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 121.457604][ T4790] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 121.475706][ T4790] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 121.549701][ T4313] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 121.557750][ T4313] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 121.570831][ T3011] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 121.609584][ T4313] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 121.617458][ T4313] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 121.629575][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
2026/10/06 10:39:54 executed programs: 2
[ 121.824444][ T5042] loop0: detected capacity change from 0 to 4096
[ 121.940403][ T5042] ==================================================================
[ 121.948643][ T5042] BUG: KASAN: use-after-free in ntfs_attr_find+0x763/0xbf0
[ 121.955908][ T5042] Read of size 2 at addr ffff888069b6f442 by task syz.0.17/5042
[ 121.964083][ T5042]
[ 121.966464][ T5042] CPU: 0 PID: 5042 Comm: syz.0.17 Not tainted syzkaller #0
[ 121.974152][ T5042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 121.984271][ T5042] Call Trace:
[ 121.987797][ T5042]
[ 121.990764][ T5042] dump_stack_lvl+0x188/0x250
[ 121.995595][ T5042] ? show_regs_print_info+0x20/0x20
[ 122.001407][ T5042] ? _printk+0xda/0x130
[ 122.005701][ T5042] ? ntfs_attr_find+0x763/0xbf0
[ 122.010610][ T5042] ? load_image+0x410/0x410
[ 122.015334][ T5042] print_address_description+0x60/0x2d0
[ 122.021047][ T5042] ? ntfs_attr_find+0x763/0xbf0
[ 122.026138][ T5042] kasan_report+0xdf/0x130
[ 122.031176][ T5042] ? ntfs_attr_find+0x763/0xbf0
[ 122.036360][ T5042] ? vfs_get_tree+0x88/0x270
[ 122.041346][ T5042] ntfs_attr_find+0x763/0xbf0
[ 122.046440][ T5042] ntfs_attr_lookup+0x21b/0x2310
[ 122.051507][ T5042] ? slab_post_alloc_hook+0x68/0x380
[ 122.056821][ T5042] ? ntfs_attr_reinit_search_ctx+0x2e0/0x2e0
[ 122.062851][ T5042] ? rcu_is_watching+0x11/0xa0
[ 122.067826][ T5042] ? ntfs_attr_get_search_ctx+0x4d/0x190
[ 122.073664][ T5042] ? kmem_cache_alloc+0x189/0x280
[ 122.079018][ T5042] ? memset+0x1e/0x40
[ 122.083144][ T5042] ntfs_read_locked_inode+0xa3a/0x4d30
[ 122.088725][ T5042] ? ntfs_iget+0x1a0/0x1a0
[ 122.093609][ T5042] ? ntfs_iget+0x1a0/0x1a0
[ 122.098096][ T5042] ntfs_iget+0x108/0x1a0
[ 122.102558][ T5042] ? ntfs_test_inode+0x2d0/0x2d0
[ 122.107733][ T5042] ? rcu_is_watching+0x11/0xa0
[ 122.112530][ T5042] ? lock_release+0xb5/0x8a0
[ 122.117367][ T5042] ? vmap_pages_range_noflush+0x6cd/0x750
[ 122.123144][ T5042] ? ntfs_fill_super+0x19c1/0x2c90
[ 122.128434][ T5042] load_system_files+0xe5/0x54b0
[ 122.133604][ T5042] ? ntfs_setup_allocators+0x2c0/0x2c0
[ 122.139718][ T5042] ? mutex_unlock+0x10/0x10
[ 122.144439][ T5042] ? memset+0x1e/0x40
[ 122.148968][ T5042] ? generate_default_upcase+0x84f/0x880
[ 122.154731][ T5042] ntfs_fill_super+0x19c9/0x2c90
[ 122.159817][ T5042] mount_bdev+0x28a/0x3c0
[ 122.164323][ T5042] ? ntfs_mount+0x40/0x40
[ 122.168757][ T5042] legacy_get_tree+0xe6/0x180
[ 122.173664][ T5042] ? ntfs_rl_punch_nolock+0x1480/0x1480
[ 122.179519][ T5042] vfs_get_tree+0x88/0x270
[ 122.184175][ T5042] do_new_mount+0x247/0xa40
[ 122.188899][ T5042] __se_sys_mount+0x2e3/0x3d0
[ 122.193881][ T5042] ? __x64_sys_mount+0xc0/0xc0
[ 122.198975][ T5042] ? lockdep_hardirqs_on+0x94/0x140
[ 122.204534][ T5042] ? __x64_sys_mount+0x1c/0xc0
[ 122.209348][ T5042] do_syscall_64+0x4c/0xa0
[ 122.213807][ T5042] ? clear_bhb_loop+0x30/0x80
[ 122.218528][ T5042] ? clear_bhb_loop+0x30/0x80
[ 122.223249][ T5042] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 122.229484][ T5042] RIP: 0033:0x7f65112e404a
[ 122.233945][ T5042] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 122.253995][ T5042] RSP: 002b:00007f6510943e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 122.262596][ T5042] RAX: ffffffffffffffda RBX: 00007f6510943ee0 RCX: 00007f65112e404a
[ 122.270799][ T5042] RDX: 000020000001f6c0 RSI: 0000200000000080 RDI: 00007f6510943ea0
[ 122.279028][ T5042] RBP: 000020000001f6c0 R08: 00007f6510943ee0 R09: 000000000000c70b
[ 122.287161][ T5042] R10: 000000000000c70b R11: 0000000000000246 R12: 0000200000000080
[ 122.295270][ T5042] R13: 00007f6510943ea0 R14: 000000000001f670 R15: 0000200000000040
[ 122.303376][ T5042]
[ 122.306524][ T5042]
[ 122.308874][ T5042] The buggy address belongs to the page:
[ 122.314696][ T5042] page:ffffea0001a6dbc0 refcount:1 mapcount:1 mapping:0000000000000000 index:0x7f2ed93d7 pfn:0x69b6f
[ 122.325590][ T5042] memcg:ffff888016e7c000
[ 122.329858][ T5042] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 122.337022][ T5042] raw: 00fff00000000000 ffffea0001a6dd08 ffffea0001a6d908 0000000000000000
[ 122.345895][ T5042] raw: 0000000000000001 0000000000000000 00000000ffffffff 0000000000000000
[ 122.354516][ T5042] page dumped because: kasan: bad access detected
[ 122.360979][ T5042] page_owner tracks the page as freed
[ 122.366393][ T5042] page last allocated via order 0, migratetype Movable, gfp_mask 0x1100dca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), pid 4682, ts 122194197550, free_ts 122326116141
[ 122.382948][ T5042] get_page_from_freelist+0x24f6/0x2670
[ 122.388927][ T5042] __alloc_pages+0x1ee/0x480
[ 122.390308][ T4678] Bluetooth: hci0: command 0x040f tx timeout
[ 122.393651][ T5042] alloc_pages_vma+0x2bc/0x790
[ 122.404776][ T5042] handle_mm_fault+0x23be/0x4440
[ 122.409939][ T5042] do_user_addr_fault+0x494/0xc90
[ 122.414999][ T5042] exc_page_fault+0x60/0x100
[ 122.419917][ T5042] asm_exc_page_fault+0x22/0x30
[ 122.424974][ T5042] copy_user_enhanced_fast_string+0xe/0x40
[ 122.430825][ T5042] copy_page_to_iter+0x4c9/0x930
[ 122.436060][ T5042] filemap_read+0x1e0a/0x2560
[ 122.440803][ T5042] blkdev_read_iter+0x11d/0x150
[ 122.445862][ T5042] vfs_read+0x75e/0xd50
[ 122.450231][ T5042] ksys_read+0x153/0x260
[ 122.454616][ T5042] do_syscall_64+0x4c/0xa0
[ 122.459158][ T5042] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 122.465126][ T5042] page last free stack trace:
[ 122.469962][ T5042] free_unref_page_prepare+0x637/0x6c0
[ 122.475573][ T5042] free_unref_page_list+0x119/0x830
[ 122.480949][ T5042] release_pages+0x185f/0x1bd0
[ 122.485845][ T5042] tlb_finish_mmu+0x1b4/0x370
[ 122.490557][ T5042] unmap_region+0x344/0x3b0
[ 122.495101][ T5042] __do_munmap+0xa29/0xe10
[ 122.499643][ T5042] __vm_munmap+0x13f/0x240
[ 122.504200][ T5042] __x64_sys_munmap+0x67/0x70
[ 122.508998][ T5042] do_syscall_64+0x4c/0xa0
[ 122.513748][ T5042] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 122.519767][ T5042]
[ 122.522116][ T5042] Memory state around the buggy address:
[ 122.527778][ T5042] ffff888069b6f300: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 122.535884][ T5042] ffff888069b6f380: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 122.544217][ T5042] >ffff888069b6f400: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 122.552611][ T5042] ^
[ 122.558810][ T5042] ffff888069b6f480: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 122.567023][ T5042] ffff888069b6f500: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 122.575371][ T5042] ==================================================================
[ 122.583612][ T5042] Disabling lock debugging due to kernel taint
[ 122.619577][ T5042] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 122.627036][ T5042] CPU: 0 PID: 5042 Comm: syz.0.17 Tainted: G B syzkaller #0
[ 122.636139][ T5042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 122.646605][ T5042] Call Trace:
[ 122.649947][ T5042]
[ 122.653168][ T5042] dump_stack_lvl+0x188/0x250
[ 122.657887][ T5042] ? show_regs_print_info+0x20/0x20
[ 122.663204][ T5042] ? load_image+0x410/0x410
[ 122.667745][ T5042] panic+0x2f8/0x850
[ 122.671674][ T5042] ? bpf_jit_dump+0xd0/0xd0
[ 122.676390][ T5042] ? _raw_spin_unlock_irqrestore+0x10d/0x120
[ 122.682410][ T5042] ? _raw_spin_unlock+0x40/0x40
[ 122.687382][ T5042] ? print_memory_metadata+0x314/0x400
[ 122.693043][ T5042] ? ntfs_attr_find+0x763/0xbf0
[ 122.698010][ T5042] check_panic_on_warn+0x80/0xa0
[ 122.703343][ T5042] ? ntfs_attr_find+0x763/0xbf0
[ 122.708319][ T5042] end_report+0x6d/0xf0
[ 122.712516][ T5042] kasan_report+0x102/0x130
[ 122.717278][ T5042] ? ntfs_attr_find+0x763/0xbf0
[ 122.722170][ T5042] ? vfs_get_tree+0x88/0x270
[ 122.726839][ T5042] ntfs_attr_find+0x763/0xbf0
[ 122.731570][ T5042] ntfs_attr_lookup+0x21b/0x2310
[ 122.736921][ T5042] ? slab_post_alloc_hook+0x68/0x380
[ 122.742250][ T5042] ? ntfs_attr_reinit_search_ctx+0x2e0/0x2e0
[ 122.748375][ T5042] ? rcu_is_watching+0x11/0xa0
[ 122.753180][ T5042] ? ntfs_attr_get_search_ctx+0x4d/0x190
[ 122.758940][ T5042] ? kmem_cache_alloc+0x189/0x280
[ 122.764007][ T5042] ? memset+0x1e/0x40
[ 122.768019][ T5042] ntfs_read_locked_inode+0xa3a/0x4d30
[ 122.773513][ T5042] ? ntfs_iget+0x1a0/0x1a0
[ 122.777970][ T5042] ? ntfs_iget+0x1a0/0x1a0
[ 122.782419][ T5042] ntfs_iget+0x108/0x1a0
[ 122.787010][ T5042] ? ntfs_test_inode+0x2d0/0x2d0
[ 122.791996][ T5042] ? rcu_is_watching+0x11/0xa0
[ 122.796926][ T5042] ? lock_release+0xb5/0x8a0
[ 122.801564][ T5042] ? vmap_pages_range_noflush+0x6cd/0x750
[ 122.807534][ T5042] ? ntfs_fill_super+0x19c1/0x2c90
[ 122.813073][ T5042] load_system_files+0xe5/0x54b0
[ 122.818079][ T5042] ? ntfs_setup_allocators+0x2c0/0x2c0
[ 122.823949][ T5042] ? mutex_unlock+0x10/0x10
[ 122.828680][ T5042] ? memset+0x1e/0x40
[ 122.832894][ T5042] ? generate_default_upcase+0x84f/0x880
[ 122.838564][ T5042] ntfs_fill_super+0x19c9/0x2c90
[ 122.843963][ T5042] mount_bdev+0x28a/0x3c0
[ 122.848569][ T5042] ? ntfs_mount+0x40/0x40
[ 122.853199][ T5042] legacy_get_tree+0xe6/0x180
[ 122.857922][ T5042] ? ntfs_rl_punch_nolock+0x1480/0x1480
[ 122.863704][ T5042] vfs_get_tree+0x88/0x270
[ 122.868931][ T5042] do_new_mount+0x247/0xa40
[ 122.873871][ T5042] __se_sys_mount+0x2e3/0x3d0
[ 122.878703][ T5042] ? __x64_sys_mount+0xc0/0xc0
[ 122.883901][ T5042] ? lockdep_hardirqs_on+0x94/0x140
[ 122.889337][ T5042] ? __x64_sys_mount+0x1c/0xc0
[ 122.894429][ T5042] do_syscall_64+0x4c/0xa0
[ 122.899287][ T5042] ? clear_bhb_loop+0x30/0x80
[ 122.904107][ T5042] ? clear_bhb_loop+0x30/0x80
[ 122.908824][ T5042] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 122.914851][ T5042] RIP: 0033:0x7f65112e404a
[ 122.919428][ T5042] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 122.939744][ T5042] RSP: 002b:00007f6510943e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 122.948193][ T5042] RAX: ffffffffffffffda RBX: 00007f6510943ee0 RCX: 00007f65112e404a
[ 122.956192][ T5042] RDX: 000020000001f6c0 RSI: 0000200000000080 RDI: 00007f6510943ea0
[ 122.964238][ T5042] RBP: 000020000001f6c0 R08: 00007f6510943ee0 R09: 000000000000c70b
[ 122.972273][ T5042] R10: 000000000000c70b R11: 0000000000000246 R12: 0000200000000080
[ 122.981315][ T5042] R13: 00007f6510943ea0 R14: 000000000001f670 R15: 0000200000000040
[ 122.989741][ T5042]
[ 122.993333][ T5042] Kernel Offset: disabled
[ 122.998298][ T5042] Rebooting in 86400 seconds..