[ 86.748736][ T1325] cfg80211: failed to load regulatory.db Warning: Permanently added '10.128.0.4' (ED25519) to the list of known hosts. 2025/05/27 05:10:34 ignoring optional flag "sandboxArg"="0" 2025/05/27 05:10:34 ignoring optional flag "type"="gce" 2025/05/27 05:10:34 parsed 1 programs [ 93.221165][ T4576] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 93.475266][ T4610] chnl_net:caif_netlink_parms(): no params data found [ 93.529843][ T4610] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.537471][ T4610] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.545725][ T4610] device bridge_slave_0 entered promiscuous mode [ 93.554112][ T4610] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.561416][ T4610] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.570128][ T4610] device bridge_slave_1 entered promiscuous mode [ 93.595015][ T4610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.608133][ T4610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.636525][ T4610] team0: Port device team_slave_0 added [ 93.644791][ T4610] team0: Port device team_slave_1 added [ 93.668181][ T4610] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.676079][ T4610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.703341][ T4610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.716543][ T4610] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.724185][ T4610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.751748][ T4610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.786038][ T4610] device hsr_slave_0 entered promiscuous mode [ 93.793324][ T4610] device hsr_slave_1 entered promiscuous mode [ 94.503074][ T4610] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 94.525364][ T4610] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 94.544256][ T4610] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 94.556220][ T4610] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 94.658171][ T4610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.676533][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 94.685886][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 94.698542][ T4610] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.710720][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 94.722308][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 94.734382][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.741882][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.763065][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 94.773855][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 94.783318][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 94.794892][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.802230][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.810094][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 94.837618][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 94.847432][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 94.860108][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 94.871530][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 94.884648][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 94.895064][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 94.911630][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 94.926207][ T4610] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 94.940059][ T4610] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 94.950419][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 94.961255][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 94.970398][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 95.153257][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 95.160759][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 95.187666][ T4610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.210906][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 95.233890][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 95.258519][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 95.269263][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 95.282779][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 95.299819][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 95.309997][ T4610] device veth0_vlan entered promiscuous mode [ 95.325175][ T4610] device veth1_vlan entered promiscuous mode [ 95.349887][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 95.361387][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 95.370423][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 95.384886][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 95.397597][ T4610] device veth0_macvtap entered promiscuous mode [ 95.410812][ T4610] device veth1_macvtap entered promiscuous mode [ 95.430892][ T4610] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.441192][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 95.450640][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 95.459205][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 95.469270][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 95.489571][ T4610] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.508807][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 95.520045][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 95.533165][ T4610] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.543537][ T4610] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.552986][ T4610] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.561704][ T4610] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.838451][ T403] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.309311][ T403] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.530716][ T403] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.579435][ T403] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.348490][ T403] device hsr_slave_0 left promiscuous mode [ 101.372655][ T403] device hsr_slave_1 left promiscuous mode [ 101.392632][ T403] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 101.400606][ T403] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 101.423286][ T403] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 101.441857][ T403] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 101.452651][ T403] device bridge_slave_1 left promiscuous mode [ 101.459519][ T403] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.473873][ T403] device bridge_slave_0 left promiscuous mode [ 101.480890][ T403] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.512981][ T403] device veth1_macvtap left promiscuous mode [ 101.519744][ T403] device veth0_macvtap left promiscuous mode [ 101.532748][ T403] device veth1_vlan left promiscuous mode [ 101.539589][ T403] device veth0_vlan left promiscuous mode [ 101.729133][ T403] team0 (unregistering): Port device team_slave_1 removed [ 101.741453][ T403] team0 (unregistering): Port device team_slave_0 removed [ 101.760362][ T403] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 101.775135][ T403] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 101.837800][ T403] bond0 (unregistering): Released all slaves [ 102.476352][ T3054] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.491978][ T3054] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.501423][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 102.538846][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.548010][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.558891][ T3054] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 2025/05/27 05:10:46 executed programs: 0 [ 103.348377][ T5059] chnl_net:caif_netlink_parms(): no params data found [ 103.483768][ T5059] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.501934][ T5059] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.524423][ T5059] device bridge_slave_0 entered promiscuous mode [ 103.543142][ T5059] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.553303][ T5059] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.572177][ T5059] device bridge_slave_1 entered promiscuous mode [ 103.640176][ T5059] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.653325][ T5059] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.700108][ T5059] team0: Port device team_slave_0 added [ 103.719783][ T5059] team0: Port device team_slave_1 added [ 103.778902][ T5059] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.787510][ T5059] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.818261][ T5059] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.833627][ T5059] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.841283][ T5059] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.871575][ T5059] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.915026][ T5059] device hsr_slave_0 entered promiscuous mode [ 103.924046][ T5059] device hsr_slave_1 entered promiscuous mode [ 104.606950][ T5059] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 104.619064][ T5059] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 104.629631][ T5059] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 104.641121][ T5059] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 104.717579][ T5059] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.733548][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 104.745404][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 104.758379][ T5059] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.795668][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 104.814123][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 104.824453][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.831565][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.841279][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 104.861943][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 104.870729][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 104.879900][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.887049][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.897375][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 104.907450][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 104.935905][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 104.957897][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 104.968485][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 104.980244][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 104.990594][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 105.001345][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 105.044206][ T5059] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 105.056348][ T5059] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 105.066390][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 105.078408][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 105.087885][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 105.143513][ T5115] Bluetooth: hci0: command 0x0409 tx timeout [ 105.281143][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 105.290274][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 105.337226][ T5059] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.361077][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 105.371412][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 105.395544][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 105.405981][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 105.417179][ T5059] device veth0_vlan entered promiscuous mode [ 105.450502][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 105.460658][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 105.478012][ T5059] device veth1_vlan entered promiscuous mode [ 105.532152][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 105.540843][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 105.562505][ T5059] device veth0_macvtap entered promiscuous mode [ 105.575424][ T5059] device veth1_macvtap entered promiscuous mode [ 105.617275][ T5059] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.626268][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 105.637155][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 105.646300][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 105.655773][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 105.668550][ T5059] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.679145][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 105.689104][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 105.700124][ T5059] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.710754][ T5059] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.719987][ T5059] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.729419][ T5059] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.856363][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.870676][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.938149][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 105.963958][ T5172] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.976241][ T5172] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.987843][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 106.094748][ T5177] loop0: detected capacity change from 0 to 4096 [ 106.129141][ T5177] ntfs: (device loop0): is_boot_sector_ntfs(): Invalid end of sector marker. [ 106.153411][ T5177] ntfs: (device loop0): ntfs_attr_find(): Inode is corrupt. Run chkdsk. [ 106.183778][ T5177] ntfs: (device loop0): ntfs_read_locked_inode(): Failed to lookup attribute list attribute. [ 106.213946][ T5177] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x0 as bad. Run chkdsk. [ 106.238098][ T5177] ntfs: (device loop0): ntfs_read_inode_mount(): ntfs_read_inode() of $MFT failed. BUG or corrupt $MFT. Run chkdsk and if no errors are found, please report you saw this message to linux-ntfs-dev@lists.sourceforge.net [ 106.260771][ T5177] ntfs: (device loop0): ntfs_fill_super(): Failed to load essential metadata. [ 106.550413][ T5190] loop0: detected capacity change from 0 to 4096 [ 106.654920][ T5190] ntfs: (device loop0): is_boot_sector_ntfs(): Invalid end of sector marker. [ 106.683516][ T5190] ntfs: (device loop0): ntfs_is_extended_system_file(): Inode hard link count doesn't match number of name attributes. You should run chkdsk. [ 106.701266][ T5190] ntfs: (device loop0): ntfs_read_locked_inode(): $DATA attribute is missing. [ 106.710660][ T5190] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x0 as bad. Run chkdsk. [ 106.857597][ T5198] loop0: detected capacity change from 0 to 4096 [ 106.926030][ T5198] ================================================================== [ 106.934648][ T5198] BUG: KASAN: use-after-free in ntfs_attr_find+0x79e/0xc30 [ 106.942068][ T5198] Read of size 2 at addr ffff888062daa042 by task syz-executor/5198 [ 106.950154][ T5198] [ 106.952509][ T5198] CPU: 1 PID: 5198 Comm: syz-executor Not tainted 5.15.184-syzkaller #0 [ 106.961371][ T5198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 106.971642][ T5198] Call Trace: [ 106.974941][ T5198] [ 106.977898][ T5198] dump_stack_lvl+0x168/0x230 [ 106.982616][ T5198] ? show_regs_print_info+0x20/0x20 [ 106.987953][ T5198] ? _printk+0xcc/0x110 [ 106.992217][ T5198] ? ntfs_attr_find+0x79e/0xc30 [ 106.997105][ T5198] ? load_image+0x3b0/0x3b0 [ 107.001628][ T5198] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 107.007129][ T5198] ? _raw_spin_lock_irq+0xab/0xe0 [ 107.012266][ T5198] print_address_description+0x60/0x2d0 [ 107.017840][ T5198] ? ntfs_attr_find+0x79e/0xc30 [ 107.022856][ T5198] kasan_report+0xdf/0x130 [ 107.027405][ T5198] ? ntfs_attr_find+0x79e/0xc30 [ 107.032542][ T5198] ? __se_sys_mount+0x2d6/0x3c0 [ 107.037627][ T5198] ntfs_attr_find+0x79e/0xc30 [ 107.042441][ T5198] ntfs_attr_lookup+0x495/0x2240 [ 107.047555][ T5198] ? slab_post_alloc_hook+0x68/0x380 [ 107.052869][ T5198] ? ntfs_attr_get_search_ctx+0x4d/0x190 [ 107.058848][ T5198] ? ntfs_attr_reinit_search_ctx+0x2f0/0x2f0 [ 107.065027][ T5198] ? kmem_cache_alloc+0x133/0x290 [ 107.070072][ T5198] ? memset+0x1e/0x40 [ 107.074080][ T5198] ? ntfs_attr_reinit_search_ctx+0x4b/0x2f0 [ 107.080088][ T5198] ntfs_read_locked_inode+0xa97/0x4de0 [ 107.085674][ T5198] ntfs_read_inode_mount+0xd46/0x25d0 [ 107.091075][ T5198] ntfs_fill_super+0x18af/0x2c90 [ 107.096496][ T5198] mount_bdev+0x287/0x3c0 [ 107.100955][ T5198] ? ntfs_mount+0x40/0x40 [ 107.105314][ T5198] legacy_get_tree+0xe6/0x180 [ 107.110105][ T5198] ? ntfs_rl_punch_nolock+0x1470/0x1470 [ 107.115680][ T5198] vfs_get_tree+0x88/0x270 [ 107.120233][ T5198] do_new_mount+0x24a/0xa40 [ 107.124966][ T5198] __se_sys_mount+0x2d6/0x3c0 [ 107.129806][ T5198] ? __x64_sys_mount+0xc0/0xc0 [ 107.134802][ T5198] ? lockdep_hardirqs_on+0x94/0x140 [ 107.140033][ T5198] ? __x64_sys_mount+0x1c/0xc0 [ 107.147788][ T5198] do_syscall_64+0x4c/0xa0 [ 107.152238][ T5198] ? clear_bhb_loop+0x30/0x80 [ 107.157020][ T5198] ? clear_bhb_loop+0x30/0x80 [ 107.161891][ T5198] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 107.167820][ T5198] RIP: 0033:0x7fea02f585ea [ 107.172349][ T5198] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 09 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 107.192537][ T5198] RSP: 002b:00007fea022d7ef8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 107.201321][ T5198] RAX: ffffffffffffffda RBX: 00007fea022d7f80 RCX: 00007fea02f585ea [ 107.209490][ T5198] RDX: 00000000200000c0 RSI: 00000000200001c0 RDI: 00007fea022d7f40 [ 107.217603][ T5198] RBP: 00000000200000c0 R08: 00007fea022d7f80 R09: 0000000000000004 [ 107.225858][ T5198] R10: 0000000000000004 R11: 0000000000000246 R12: 00000000200001c0 [ 107.234201][ T5198] R13: 00007fea022d7f40 R14: 000000000001f640 R15: 0000000020000100 [ 107.242287][ T5198] [ 107.245321][ T5198] [ 107.247660][ T5198] The buggy address belongs to the page: [ 107.253318][ T5198] page:ffffea00018b6a80 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1 pfn:0x62daa [ 107.263671][ T5198] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 107.270814][ T5198] raw: 00fff00000000000 ffffea0001ae8188 ffffea00018b6ac8 0000000000000000 [ 107.279684][ T5198] raw: 0000000000000001 0000000000000000 00000000ffffffff 0000000000000000 [ 107.288594][ T5198] page dumped because: kasan: bad access detected [ 107.295298][ T5198] page_owner tracks the page as freed [ 107.301139][ T5198] page last allocated via order 0, migratetype Movable, gfp_mask 0x1100dca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), pid 5201, ts 106883996142, free_ts 106889968920 [ 107.317131][ T5198] get_page_from_freelist+0x1b77/0x1c60 [ 107.322896][ T5198] __alloc_pages+0x1e1/0x470 [ 107.327734][ T5198] alloc_pages_vma+0x393/0x7c0 [ 107.332527][ T5198] handle_mm_fault+0x2382/0x43c0 [ 107.337501][ T5198] do_user_addr_fault+0x489/0xc80 [ 107.342548][ T5198] exc_page_fault+0x60/0x100 [ 107.347354][ T5198] asm_exc_page_fault+0x22/0x30 [ 107.352310][ T5198] page last free stack trace: [ 107.357114][ T5198] free_unref_page_prepare+0x637/0x6c0 [ 107.362985][ T5198] free_unref_page_list+0x122/0x7e0 [ 107.368200][ T5198] release_pages+0x184b/0x1bb0 [ 107.372979][ T5198] tlb_finish_mmu+0x164/0x2e0 [ 107.377704][ T5198] exit_mmap+0x3a6/0x5f0 [ 107.382071][ T5198] __mmput+0x115/0x3b0 [ 107.386394][ T5198] exit_mm+0x567/0x6c0 [ 107.391121][ T5198] do_exit+0x599/0x20a0 [ 107.395305][ T5198] do_group_exit+0x12e/0x300 [ 107.400168][ T5198] __x64_sys_exit_group+0x3b/0x40 [ 107.405610][ T5198] do_syscall_64+0x4c/0xa0 [ 107.410049][ T5198] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 107.415973][ T5198] [ 107.418400][ T5198] Memory state around the buggy address: [ 107.424388][ T5198] ffff888062da9f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 107.432733][ T5198] ffff888062da9f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 107.440905][ T5198] >ffff888062daa000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 107.449065][ T5198] ^ [ 107.455255][ T5198] ffff888062daa080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 107.463424][ T5198] ffff888062daa100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 107.471491][ T5198] ================================================================== [ 107.479833][ T5198] Disabling lock debugging due to kernel taint [ 107.488882][ T4206] Bluetooth: hci0: command 0x041b tx timeout [ 107.503379][ T5198] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 107.511592][ T5198] CPU: 1 PID: 5198 Comm: syz-executor Tainted: G B 5.15.184-syzkaller #0 [ 107.521787][ T5198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 107.532263][ T5198] Call Trace: [ 107.535734][ T5198] [ 107.538675][ T5198] dump_stack_lvl+0x168/0x230 [ 107.543379][ T5198] ? show_regs_print_info+0x20/0x20 [ 107.548699][ T5198] ? load_image+0x3b0/0x3b0 [ 107.553240][ T5198] panic+0x2c9/0x7f0 [ 107.557363][ T5198] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 107.563666][ T5198] ? bpf_jit_dump+0xd0/0xd0 [ 107.568215][ T5198] ? _raw_spin_unlock_irqrestore+0xf6/0x100 [ 107.574443][ T5198] ? _raw_spin_unlock+0x40/0x40 [ 107.579597][ T5198] ? ntfs_attr_find+0x79e/0xc30 [ 107.584492][ T5198] check_panic_on_warn+0x80/0xa0 [ 107.589476][ T5198] ? ntfs_attr_find+0x79e/0xc30 [ 107.594532][ T5198] end_report+0x6d/0xf0 [ 107.598908][ T5198] kasan_report+0x102/0x130 [ 107.603692][ T5198] ? ntfs_attr_find+0x79e/0xc30 [ 107.608750][ T5198] ? __se_sys_mount+0x2d6/0x3c0 [ 107.613862][ T5198] ntfs_attr_find+0x79e/0xc30 [ 107.618665][ T5198] ntfs_attr_lookup+0x495/0x2240 [ 107.623951][ T5198] ? slab_post_alloc_hook+0x68/0x380 [ 107.629350][ T5198] ? ntfs_attr_get_search_ctx+0x4d/0x190 [ 107.635379][ T5198] ? ntfs_attr_reinit_search_ctx+0x2f0/0x2f0 [ 107.641473][ T5198] ? kmem_cache_alloc+0x133/0x290 [ 107.646618][ T5198] ? memset+0x1e/0x40 [ 107.650925][ T5198] ? ntfs_attr_reinit_search_ctx+0x4b/0x2f0 [ 107.656951][ T5198] ntfs_read_locked_inode+0xa97/0x4de0 [ 107.662529][ T5198] ntfs_read_inode_mount+0xd46/0x25d0 [ 107.668016][ T5198] ntfs_fill_super+0x18af/0x2c90 [ 107.673149][ T5198] mount_bdev+0x287/0x3c0 [ 107.677739][ T5198] ? ntfs_mount+0x40/0x40 [ 107.682190][ T5198] legacy_get_tree+0xe6/0x180 [ 107.687082][ T5198] ? ntfs_rl_punch_nolock+0x1470/0x1470 [ 107.693172][ T5198] vfs_get_tree+0x88/0x270 [ 107.697614][ T5198] do_new_mount+0x24a/0xa40 [ 107.702136][ T5198] __se_sys_mount+0x2d6/0x3c0 [ 107.706998][ T5198] ? __x64_sys_mount+0xc0/0xc0 [ 107.711931][ T5198] ? lockdep_hardirqs_on+0x94/0x140 [ 107.717341][ T5198] ? __x64_sys_mount+0x1c/0xc0 [ 107.722431][ T5198] do_syscall_64+0x4c/0xa0 [ 107.727192][ T5198] ? clear_bhb_loop+0x30/0x80 [ 107.731889][ T5198] ? clear_bhb_loop+0x30/0x80 [ 107.736664][ T5198] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 107.742743][ T5198] RIP: 0033:0x7fea02f585ea [ 107.747267][ T5198] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 09 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 107.767402][ T5198] RSP: 002b:00007fea022d7ef8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 107.776138][ T5198] RAX: ffffffffffffffda RBX: 00007fea022d7f80 RCX: 00007fea02f585ea [ 107.784209][ T5198] RDX: 00000000200000c0 RSI: 00000000200001c0 RDI: 00007fea022d7f40 [ 107.792345][ T5198] RBP: 00000000200000c0 R08: 00007fea022d7f80 R09: 0000000000000004 [ 107.800327][ T5198] R10: 0000000000000004 R11: 0000000000000246 R12: 00000000200001c0 [ 107.808310][ T5198] R13: 00007fea022d7f40 R14: 000000000001f640 R15: 0000000020000100 [ 107.816403][ T5198] [ 107.819848][ T5198] Kernel Offset: disabled [ 107.824672][ T5198] Rebooting in 86400 seconds..