[ 76.361609][ T7] cfg80211: failed to load regulatory.db Warning: Permanently added '10.128.10.27' (ED25519) to the list of known hosts. 2026/05/24 04:34:05 ignoring optional flag "type"="gce" 2026/05/24 04:34:05 parsed 1 programs [ 80.334466][ T4627] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 80.499364][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.507310][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.515261][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 80.535506][ T1281] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.543354][ T1281] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.551349][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 81.849933][ T4678] chnl_net:caif_netlink_parms(): no params data found [ 81.906465][ T4678] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.913650][ T4678] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.923586][ T4678] device bridge_slave_0 entered promiscuous mode [ 81.932286][ T4678] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.940707][ T4678] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.949253][ T4678] device bridge_slave_1 entered promiscuous mode [ 81.973087][ T4678] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.984524][ T4678] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.013778][ T4678] team0: Port device team_slave_0 added [ 82.021558][ T4678] team0: Port device team_slave_1 added [ 82.040361][ T4678] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.047419][ T4678] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.074188][ T4678] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.086262][ T4678] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.093228][ T4678] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.119317][ T4678] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.156109][ T4678] device hsr_slave_0 entered promiscuous mode [ 82.163016][ T4678] device hsr_slave_1 entered promiscuous mode [ 82.792294][ T4678] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 82.802497][ T4678] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 82.831994][ T4678] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 82.842627][ T4678] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 82.940077][ T4678] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.973484][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 82.981700][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 82.994438][ T4678] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.035526][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 83.045743][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 83.055307][ T1281] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.062382][ T1281] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.072904][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 83.082530][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 83.091350][ T1281] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.098471][ T1281] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.106955][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 83.116006][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 83.151676][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 83.165334][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 83.176923][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 83.187285][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 83.197647][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 83.206745][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 83.217529][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 83.230262][ T4678] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 83.242726][ T4678] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 83.253943][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 83.262849][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 83.271668][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 83.449107][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 83.457391][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 83.470525][ T4678] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.491963][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 83.502031][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 83.538520][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 83.547901][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 83.559943][ T4678] device veth0_vlan entered promiscuous mode [ 83.568690][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 83.577316][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 83.601006][ T4678] device veth1_vlan entered promiscuous mode [ 83.622983][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 83.631350][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 83.641175][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 83.651842][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 83.662617][ T4678] device veth0_macvtap entered promiscuous mode [ 83.690077][ T4678] device veth1_macvtap entered promiscuous mode [ 83.719902][ T4678] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.729039][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 83.738192][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 83.749448][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 83.765031][ T4678] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.784677][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 83.806303][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 83.819066][ T4678] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.828458][ T4678] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.837282][ T4678] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.846218][ T4678] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 2026/05/24 04:34:11 executed programs: 0 [ 84.509792][ T4791] chnl_net:caif_netlink_parms(): no params data found [ 84.631738][ T4791] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.654663][ T4791] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.662761][ T4791] device bridge_slave_0 entered promiscuous mode [ 84.679418][ T4791] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.704638][ T4791] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.712776][ T4791] device bridge_slave_1 entered promiscuous mode [ 84.755340][ T4791] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.766567][ T4791] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.810847][ T4791] team0: Port device team_slave_0 added [ 84.821115][ T4791] team0: Port device team_slave_1 added [ 84.867323][ T4791] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.874314][ T4791] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.936763][ T4791] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.960100][ T4791] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.984602][ T4791] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.046833][ T4791] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.128725][ T4791] device hsr_slave_0 entered promiscuous mode [ 85.137390][ T4791] device hsr_slave_1 entered promiscuous mode [ 85.151654][ T4791] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.165193][ T4791] Cannot create hsr debugfs directory [ 85.316088][ T4791] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.364986][ T7] Bluetooth: hci0: command 0x0409 tx timeout [ 88.434819][ T4697] Bluetooth: hci0: command 0x041b tx timeout [ 88.838970][ T4791] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.048340][ T4791] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.150992][ T4791] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.263043][ T4791] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 89.273154][ T4791] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 89.282653][ T4791] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 89.294682][ T4791] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 89.339069][ T4791] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.351485][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 89.359481][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 89.370351][ T4791] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.385845][ T897] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 89.394862][ T897] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 89.403180][ T897] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.410270][ T897] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.418536][ T897] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 89.434037][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 89.443352][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 89.452261][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.459373][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.470759][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 89.487500][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 89.498673][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 89.508229][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 89.517301][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 89.531534][ T897] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 89.540589][ T897] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 89.554069][ T4791] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 89.566862][ T4791] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 89.578819][ T897] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 89.587475][ T897] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 89.596649][ T897] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 89.605107][ T897] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 89.613301][ T897] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 89.625231][ T1282] device hsr_slave_0 left promiscuous mode [ 89.631713][ T1282] device hsr_slave_1 left promiscuous mode [ 89.638381][ T1282] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 89.645881][ T1282] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 89.653701][ T1282] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 89.661277][ T1282] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 89.668790][ T1282] device bridge_slave_1 left promiscuous mode [ 89.675199][ T1282] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.683190][ T1282] device bridge_slave_0 left promiscuous mode [ 89.689686][ T1282] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.701339][ T1282] device veth1_macvtap left promiscuous mode [ 89.707680][ T1282] device veth0_macvtap left promiscuous mode [ 89.713780][ T1282] device veth1_vlan left promiscuous mode [ 89.721922][ T1282] device veth0_vlan left promiscuous mode [ 89.834098][ T1282] team0 (unregistering): Port device team_slave_1 removed [ 89.846989][ T1282] team0 (unregistering): Port device team_slave_0 removed [ 89.858223][ T1282] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 89.872670][ T1282] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 89.919246][ T1282] bond0 (unregistering): Released all slaves [ 90.040676][ T897] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 90.048299][ T897] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 90.061288][ T4791] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.076582][ T897] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 90.085451][ T897] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 90.111601][ T897] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 90.120711][ T897] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 90.129762][ T897] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 90.137633][ T897] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 90.147046][ T4791] device veth0_vlan entered promiscuous mode [ 90.157541][ T4791] device veth1_vlan entered promiscuous mode [ 90.187354][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 90.195724][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 90.203623][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 90.213147][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 90.223106][ T4791] device veth0_macvtap entered promiscuous mode [ 90.233972][ T4791] device veth1_macvtap entered promiscuous mode [ 90.249704][ T4791] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.257365][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 90.266039][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 90.273822][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 90.282421][ T1281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 90.300527][ T4791] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.310171][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 90.319099][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 90.329800][ T4791] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.338850][ T4791] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.348176][ T4791] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.357731][ T4791] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.411533][ T1281] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.424308][ T1281] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.444799][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.445809][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 90.452633][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.468919][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 90.515089][ T4695] Bluetooth: hci0: command 0x040f tx timeout [ 90.550646][ T5057] loop0: detected capacity change from 0 to 4096 [ 90.643768][ T5057] ntfs: (device loop0): is_boot_sector_ntfs(): Invalid end of sector marker. [ 90.666868][ T5057] ntfs: (device loop0): ntfs_is_extended_system_file(): Inode hard link count doesn't match number of name attributes. You should run chkdsk. [ 90.714912][ T5057] ntfs: (device loop0): ntfs_read_locked_inode(): $DATA attribute is missing. [ 90.723804][ T5057] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x0 as bad. Run chkdsk. [ 90.741298][ T5057] ntfs: (device loop0): ntfs_read_inode_mount(): ntfs_read_inode() of $MFT failed. BUG or corrupt $MFT. Run chkdsk and if no errors are found, please report you saw this message to linux-ntfs-dev@lists.sourceforge.net 2026/05/24 04:34:17 executed programs: 1 [ 90.768246][ T5057] ntfs: (device loop0): ntfs_fill_super(): Failed to load essential metadata. [ 90.888206][ T5060] loop0: detected capacity change from 0 to 4096 [ 90.977603][ T5060] ntfs: (device loop0): is_boot_sector_ntfs(): Invalid end of sector marker. [ 90.988670][ T5060] ntfs: (device loop0): ntfs_is_extended_system_file(): Inode hard link count doesn't match number of name attributes. You should run chkdsk. [ 91.006333][ T5060] ntfs: (device loop0): ntfs_read_locked_inode(): $DATA attribute is missing. [ 91.016802][ T5060] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x0 as bad. Run chkdsk. [ 91.208563][ T5065] loop0: detected capacity change from 0 to 4096 [ 91.218933][ T5065] ================================================================== [ 91.227109][ T5065] BUG: KASAN: use-after-free in ntfs_attr_find+0x79e/0xc30 [ 91.234326][ T5065] Read of size 2 at addr ffff888068141042 by task syz-executor/5065 [ 91.242300][ T5065] [ 91.244640][ T5065] CPU: 1 PID: 5065 Comm: syz-executor Not tainted syzkaller #0 [ 91.252179][ T5065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 91.262232][ T5065] Call Trace: [ 91.265503][ T5065] [ 91.268432][ T5065] dump_stack_lvl+0x188/0x250 [ 91.273114][ T5065] ? show_regs_print_info+0x20/0x20 [ 91.278302][ T5065] ? _printk+0xda/0x130 [ 91.282454][ T5065] ? ntfs_attr_find+0x79e/0xc30 [ 91.287310][ T5065] ? load_image+0x400/0x400 [ 91.291809][ T5065] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 91.297257][ T5065] print_address_description+0x60/0x2d0 [ 91.302789][ T5065] ? ntfs_attr_find+0x79e/0xc30 [ 91.307637][ T5065] kasan_report+0xdf/0x130 [ 91.312038][ T5065] ? ntfs_attr_find+0x79e/0xc30 [ 91.316864][ T5065] ? __se_sys_mount+0x2e3/0x3d0 [ 91.321694][ T5065] ntfs_attr_find+0x79e/0xc30 [ 91.326358][ T5065] ntfs_attr_lookup+0x212/0x2290 [ 91.331281][ T5065] ? slab_post_alloc_hook+0x68/0x380 [ 91.336549][ T5065] ? ntfs_attr_get_search_ctx+0x4d/0x190 [ 91.342253][ T5065] ? ntfs_attr_reinit_search_ctx+0x2f0/0x2f0 [ 91.348214][ T5065] ? kmem_cache_alloc+0x133/0x290 [ 91.353221][ T5065] ? memset+0x1e/0x40 [ 91.357184][ T5065] ? ntfs_attr_reinit_search_ctx+0x4b/0x2f0 [ 91.363058][ T5065] ntfs_read_locked_inode+0xa97/0x4de0 [ 91.368504][ T5065] ntfs_read_inode_mount+0xd46/0x25d0 [ 91.373862][ T5065] ntfs_fill_super+0x18af/0x2c90 [ 91.378788][ T5065] mount_bdev+0x287/0x3c0 [ 91.383102][ T5065] ? ntfs_mount+0x40/0x40 [ 91.387412][ T5065] legacy_get_tree+0xe6/0x180 [ 91.392070][ T5065] ? ntfs_rl_punch_nolock+0x1470/0x1470 [ 91.397598][ T5065] vfs_get_tree+0x88/0x270 [ 91.401998][ T5065] do_new_mount+0x24a/0xa40 [ 91.406484][ T5065] __se_sys_mount+0x2e3/0x3d0 [ 91.411160][ T5065] ? __x64_sys_mount+0xc0/0xc0 [ 91.415906][ T5065] ? lockdep_hardirqs_on+0x94/0x140 [ 91.421086][ T5065] ? __x64_sys_mount+0x1c/0xc0 [ 91.425829][ T5065] do_syscall_64+0x4c/0xa0 [ 91.430225][ T5065] ? clear_bhb_loop+0x30/0x80 [ 91.434891][ T5065] ? clear_bhb_loop+0x30/0x80 [ 91.439546][ T5065] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 91.445429][ T5065] RIP: 0033:0x7f16a1a7408a [ 91.449829][ T5065] Code: 48 c7 c2 d0 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d0 ff ff ff f7 d8 64 89 01 48 [ 91.469411][ T5065] RSP: 002b:00007f16a0e02ee8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 91.477808][ T5065] RAX: ffffffffffffffda RBX: 00007f16a0e02f70 RCX: 00007f16a1a7408a [ 91.486735][ T5065] RDX: 00000000200000c0 RSI: 00000000200001c0 RDI: 00007f16a0e02f30 [ 91.494776][ T5065] RBP: 00000000200000c0 R08: 00007f16a0e02f70 R09: 0000000000000004 [ 91.502731][ T5065] R10: 0000000000000004 R11: 0000000000000246 R12: 00000000200001c0 [ 91.510797][ T5065] R13: 00007f16a0e02f30 R14: 000000000001f640 R15: 0000000020000100 [ 91.518756][ T5065] [ 91.521754][ T5065] [ 91.524055][ T5065] The buggy address belongs to the page: [ 91.529668][ T5065] page:ffffea0001a05040 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1 pfn:0x68141 [ 91.539824][ T5065] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 91.547005][ T5065] raw: 00fff00000000000 ffffea0001a05088 ffff8880b91409a0 0000000000000000 [ 91.555569][ T5065] raw: 0000000000000001 0000000000000000 00000000ffffffff 0000000000000000 [ 91.564210][ T5065] page dumped because: kasan: bad access detected [ 91.570606][ T5065] page_owner tracks the page as freed [ 91.575948][ T5065] page last allocated via order 0, migratetype Movable, gfp_mask 0x1100dca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), pid 5065, ts 91171543278, free_ts 91207992316 [ 91.591489][ T5065] get_page_from_freelist+0x1bbd/0x1ca0 [ 91.597019][ T5065] __alloc_pages+0x1ee/0x480 [ 91.601601][ T5065] alloc_pages_vma+0x393/0x7c0 [ 91.606346][ T5065] handle_mm_fault+0x23be/0x4410 [ 91.611264][ T5065] do_user_addr_fault+0x489/0xc80 [ 91.616277][ T5065] exc_page_fault+0x60/0x100 [ 91.620850][ T5065] asm_exc_page_fault+0x22/0x30 [ 91.625681][ T5065] page last free stack trace: [ 91.630338][ T5065] free_unref_page_prepare+0x637/0x6c0 [ 91.635778][ T5065] free_unref_page_list+0x119/0x820 [ 91.640955][ T5065] release_pages+0x186c/0x1be0 [ 91.645699][ T5065] tlb_finish_mmu+0x1b4/0x370 [ 91.650369][ T5065] unmap_region+0x344/0x3b0 [ 91.654850][ T5065] __do_munmap+0x9f8/0xdf0 [ 91.659247][ T5065] __vm_munmap+0x140/0x240 [ 91.663639][ T5065] __x64_sys_munmap+0x67/0x70 [ 91.668295][ T5065] do_syscall_64+0x4c/0xa0 [ 91.672692][ T5065] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 91.678573][ T5065] [ 91.680885][ T5065] Memory state around the buggy address: [ 91.686495][ T5065] ffff888068140f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 91.694546][ T5065] ffff888068140f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 91.702588][ T5065] >ffff888068141000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 91.710626][ T5065] ^ [ 91.716754][ T5065] ffff888068141080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 91.724796][ T5065] ffff888068141100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 91.732835][ T5065] ================================================================== [ 91.740871][ T5065] Disabling lock debugging due to kernel taint [ 91.760378][ T5065] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 91.767591][ T5065] CPU: 1 PID: 5065 Comm: syz-executor Tainted: G B syzkaller #0 [ 91.776608][ T5065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 91.786665][ T5065] Call Trace: [ 91.789947][ T5065] [ 91.792872][ T5065] dump_stack_lvl+0x188/0x250 [ 91.797555][ T5065] ? show_regs_print_info+0x20/0x20 [ 91.802759][ T5065] ? load_image+0x400/0x400 [ 91.807267][ T5065] panic+0x2e5/0x810 [ 91.811171][ T5065] ? bpf_jit_dump+0xd0/0xd0 [ 91.815675][ T5065] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 91.821405][ T5065] ? check_panic_on_warn+0x6c/0xa0 [ 91.826705][ T5065] ? ntfs_attr_find+0x79e/0xc30 [ 91.831555][ T5065] check_panic_on_warn+0x80/0xa0 [ 91.836494][ T5065] ? ntfs_attr_find+0x79e/0xc30 [ 91.841345][ T5065] end_report+0x6d/0xf0 [ 91.845506][ T5065] kasan_report+0x102/0x130 [ 91.850010][ T5065] ? ntfs_attr_find+0x79e/0xc30 [ 91.854857][ T5065] ? __se_sys_mount+0x2e3/0x3d0 [ 91.859711][ T5065] ntfs_attr_find+0x79e/0xc30 [ 91.864433][ T5065] ntfs_attr_lookup+0x212/0x2290 [ 91.869380][ T5065] ? slab_post_alloc_hook+0x68/0x380 [ 91.874669][ T5065] ? ntfs_attr_get_search_ctx+0x4d/0x190 [ 91.880306][ T5065] ? ntfs_attr_reinit_search_ctx+0x2f0/0x2f0 [ 91.886287][ T5065] ? kmem_cache_alloc+0x133/0x290 [ 91.891312][ T5065] ? memset+0x1e/0x40 [ 91.895277][ T5065] ? ntfs_attr_reinit_search_ctx+0x4b/0x2f0 [ 91.901147][ T5065] ntfs_read_locked_inode+0xa97/0x4de0 [ 91.906760][ T5065] ntfs_read_inode_mount+0xd46/0x25d0 [ 91.912113][ T5065] ntfs_fill_super+0x18af/0x2c90 [ 91.917049][ T5065] mount_bdev+0x287/0x3c0 [ 91.921355][ T5065] ? ntfs_mount+0x40/0x40 [ 91.925766][ T5065] legacy_get_tree+0xe6/0x180 [ 91.930422][ T5065] ? ntfs_rl_punch_nolock+0x1470/0x1470 [ 91.936039][ T5065] vfs_get_tree+0x88/0x270 [ 91.940442][ T5065] do_new_mount+0x24a/0xa40 [ 91.945024][ T5065] __se_sys_mount+0x2e3/0x3d0 [ 91.949701][ T5065] ? __x64_sys_mount+0xc0/0xc0 [ 91.954478][ T5065] ? lockdep_hardirqs_on+0x94/0x140 [ 91.959688][ T5065] ? __x64_sys_mount+0x1c/0xc0 [ 91.964467][ T5065] do_syscall_64+0x4c/0xa0 [ 91.968866][ T5065] ? clear_bhb_loop+0x30/0x80 [ 91.973532][ T5065] ? clear_bhb_loop+0x30/0x80 [ 91.978186][ T5065] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 91.984060][ T5065] RIP: 0033:0x7f16a1a7408a [ 91.988459][ T5065] Code: 48 c7 c2 d0 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d0 ff ff ff f7 d8 64 89 01 48 [ 92.008048][ T5065] RSP: 002b:00007f16a0e02ee8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 92.016454][ T5065] RAX: ffffffffffffffda RBX: 00007f16a0e02f70 RCX: 00007f16a1a7408a [ 92.024413][ T5065] RDX: 00000000200000c0 RSI: 00000000200001c0 RDI: 00007f16a0e02f30 [ 92.032361][ T5065] RBP: 00000000200000c0 R08: 00007f16a0e02f70 R09: 0000000000000004 [ 92.040313][ T5065] R10: 0000000000000004 R11: 0000000000000246 R12: 00000000200001c0 [ 92.048270][ T5065] R13: 00007f16a0e02f30 R14: 000000000001f640 R15: 0000000020000100 [ 92.056230][ T5065] [ 92.059486][ T5065] Kernel Offset: disabled [ 92.063805][ T5065] Rebooting in 86400 seconds..