Warning: Permanently added '10.128.10.43' (ED25519) to the list of known hosts. 2025/03/15 08:16:40 ignoring optional flag "sandboxArg"="0" 2025/03/15 08:16:40 ignoring optional flag "type"="gce" 2025/03/15 08:16:41 parsed 1 programs [ 92.252720][ T4556] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 92.647060][ T4601] chnl_net:caif_netlink_parms(): no params data found [ 92.695904][ T4601] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.703116][ T4601] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.710937][ T4601] device bridge_slave_0 entered promiscuous mode [ 92.719981][ T4601] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.727183][ T4601] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.735370][ T4601] device bridge_slave_1 entered promiscuous mode [ 92.759499][ T4601] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.770707][ T4601] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.795002][ T4601] team0: Port device team_slave_0 added [ 92.805005][ T4601] team0: Port device team_slave_1 added [ 92.824271][ T4601] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.831233][ T4601] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.857660][ T4601] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.870189][ T4601] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.877365][ T4601] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.903711][ T4601] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.944102][ T4601] device hsr_slave_0 entered promiscuous mode [ 92.950995][ T4601] device hsr_slave_1 entered promiscuous mode [ 93.631272][ T4601] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 93.657001][ T4601] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 93.681105][ T4601] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 93.705930][ T4601] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 93.846346][ T4601] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.870311][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 93.895739][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 93.906809][ T4601] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.928024][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 93.939859][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 93.967135][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.974282][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.004092][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 94.023750][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 94.053475][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 94.062182][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.069332][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.094706][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 94.115134][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 94.154563][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 94.186742][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 94.195809][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 94.206266][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 94.215221][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 94.225376][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 94.239531][ T4601] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 94.252475][ T4601] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 94.261784][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 94.273204][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 94.281652][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 94.468205][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 94.480900][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 94.498634][ T4601] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.521010][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 94.532205][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 94.558613][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 94.567992][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 94.580047][ T4601] device veth0_vlan entered promiscuous mode [ 94.588628][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 94.596830][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 94.616698][ T4601] device veth1_vlan entered promiscuous mode [ 94.668060][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 94.677035][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 94.693653][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 94.713665][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 94.735353][ T4601] device veth0_macvtap entered promiscuous mode [ 94.744504][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 94.776207][ T4601] device veth1_macvtap entered promiscuous mode [ 94.811803][ T4601] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.833719][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 94.843278][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 94.864952][ T4601] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.875787][ T4601] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.885215][ T4601] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.894071][ T4601] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.902793][ T4601] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.916206][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 94.925997][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 96.975335][ T893] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.001062][ T893] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.021429][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 97.039060][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.048891][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.060293][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 2025/03/15 08:16:48 executed programs: 0 [ 97.446546][ T4790] chnl_net:caif_netlink_parms(): no params data found [ 97.550924][ T4790] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.561607][ T4790] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.570707][ T4790] device bridge_slave_0 entered promiscuous mode [ 97.590999][ T4236] ODEBUG: Out of memory. ODEBUG disabled [ 97.600463][ T4790] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.613381][ T4790] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.646027][ T4790] device bridge_slave_1 entered promiscuous mode [ 97.685840][ T4790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.705311][ T4790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.720892][ T4236] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.765587][ T4790] team0: Port device team_slave_0 added [ 97.774600][ T4790] team0: Port device team_slave_1 added [ 97.799808][ T4790] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.807023][ T4790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.833371][ T4790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.846030][ T4790] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.853458][ T4790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.880150][ T4790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.922617][ T4790] device hsr_slave_0 entered promiscuous mode [ 97.932022][ T4790] device hsr_slave_1 entered promiscuous mode [ 97.939395][ T4790] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 97.949917][ T4790] Cannot create hsr debugfs directory [ 99.313012][ T13] Bluetooth: hci0: command 0x0409 tx timeout [ 100.206939][ T4236] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.288726][ T4236] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.329520][ T4236] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.220846][ T4790] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 101.229732][ T4790] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 101.239629][ T4790] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 101.251429][ T4790] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 101.306311][ T4790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.319402][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 101.328147][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 101.352683][ T4790] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.362558][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 101.371569][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 101.380144][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.387225][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.394946][ T5010] Bluetooth: hci0: command 0x041b tx timeout [ 101.395468][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 101.414096][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 101.423465][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 101.431922][ T893] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.439026][ T893] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.468416][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 101.480819][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 101.492079][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 101.503700][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 101.512215][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 101.541582][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 101.550697][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 101.562675][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 101.571342][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 101.585035][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 101.593807][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 101.619173][ T4790] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 101.699029][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 101.707173][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 101.728561][ T4790] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.745204][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 101.754182][ T893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 101.787453][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 101.795991][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 101.805027][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 101.812795][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 101.824305][ T4790] device veth0_vlan entered promiscuous mode [ 101.844991][ T4236] device hsr_slave_0 left promiscuous mode [ 101.851231][ T4236] device hsr_slave_1 left promiscuous mode [ 101.857953][ T4236] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 101.865633][ T4236] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 101.874528][ T4236] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 101.882015][ T4236] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 101.890095][ T4236] device bridge_slave_1 left promiscuous mode [ 101.896387][ T4236] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.905046][ T4236] device bridge_slave_0 left promiscuous mode [ 101.911218][ T4236] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.922479][ T4236] device veth1_macvtap left promiscuous mode [ 101.928635][ T4236] device veth0_macvtap left promiscuous mode [ 101.935114][ T4236] device veth1_vlan left promiscuous mode [ 101.940891][ T4236] device veth0_vlan left promiscuous mode [ 102.090283][ T4236] team0 (unregistering): Port device team_slave_1 removed [ 102.104089][ T4236] team0 (unregistering): Port device team_slave_0 removed [ 102.116884][ T4236] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 102.130746][ T4236] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 102.185018][ T4236] bond0 (unregistering): Released all slaves [ 102.230646][ T4790] device veth1_vlan entered promiscuous mode [ 102.251642][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 102.260045][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 102.268874][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 102.277793][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 102.289317][ T4790] device veth0_macvtap entered promiscuous mode [ 102.299987][ T4790] device veth1_macvtap entered promiscuous mode [ 102.319016][ T4790] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.333946][ T4790] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.341873][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 102.350454][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 102.359271][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 102.368385][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 102.377506][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 102.386745][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 102.398822][ T4790] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.408245][ T4790] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.417396][ T4790] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.426466][ T4790] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.482271][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.497217][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.517456][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.519411][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 102.533145][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.554074][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 102.631046][ T5039] loop0: detected capacity change from 0 to 4096 [ 102.692852][ T5039] ntfs: (device loop0): is_boot_sector_ntfs(): Invalid end of sector marker. [ 102.713642][ T5039] ntfs: (device loop0): ntfs_attr_find(): Inode is corrupt. Run chkdsk. [ 102.722277][ T5039] ntfs: (device loop0): ntfs_read_locked_inode(): Failed to lookup attribute list attribute. [ 102.733143][ T5039] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x0 as bad. Run chkdsk. [ 102.746891][ T5039] ntfs: (device loop0): ntfs_read_inode_mount(): ntfs_read_inode() of $MFT failed. BUG or corrupt $MFT. Run chkdsk and if no errors are found, please report you saw this message to linux-ntfs-dev@lists.sourceforge.net [ 102.768873][ T5039] ntfs: (device loop0): ntfs_fill_super(): Failed to load essential metadata. 2025/03/15 08:16:53 executed programs: 1 [ 102.985009][ T5041] loop0: detected capacity change from 0 to 4096 [ 103.016451][ T5041] ntfs: (device loop0): is_boot_sector_ntfs(): Invalid end of sector marker. [ 103.027088][ T5041] ================================================================== [ 103.035175][ T5041] BUG: KASAN: use-after-free in ntfs_attr_find+0x7d6/0xd50 [ 103.042409][ T5041] Read of size 2 at addr ffff88806ef72042 by task syz-executor/5041 [ 103.050393][ T5041] [ 103.052740][ T5041] CPU: 1 PID: 5041 Comm: syz-executor Not tainted 5.15.179-syzkaller #0 [ 103.061066][ T5041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 103.071129][ T5041] Call Trace: [ 103.074410][ T5041] [ 103.077341][ T5041] dump_stack_lvl+0x1e3/0x2d0 [ 103.082041][ T5041] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 103.087689][ T5041] ? _printk+0xd1/0x120 [ 103.091872][ T5041] ? __wake_up_klogd+0xcc/0x100 [ 103.096738][ T5041] ? panic+0x860/0x860 [ 103.100810][ T5041] ? _raw_spin_lock_irqsave+0xdd/0x120 [ 103.106274][ T5041] ? _raw_spin_lock_irq+0xdb/0x110 [ 103.111408][ T5041] print_address_description+0x63/0x3b0 [ 103.116969][ T5041] ? ntfs_attr_find+0x7d6/0xd50 [ 103.121917][ T5041] kasan_report+0x16b/0x1c0 [ 103.126427][ T5041] ? ntfs_attr_find+0x7d6/0xd50 [ 103.131286][ T5041] ? mount_bdev+0x2c9/0x3f0 [ 103.135816][ T5041] ntfs_attr_find+0x7d6/0xd50 [ 103.140511][ T5041] ntfs_attr_lookup+0x4e0/0x2390 [ 103.145469][ T5041] ? slab_post_alloc_hook+0x73/0x380 [ 103.150760][ T5041] ? ntfs_attr_reinit_search_ctx+0x2e0/0x2e0 [ 103.156746][ T5041] ? ntfs_attr_get_search_ctx+0x4d/0x180 [ 103.162410][ T5041] ? kmem_cache_alloc+0x128/0x280 [ 103.167448][ T5041] ? memset+0x1f/0x40 [ 103.171523][ T5041] ? ntfs_attr_reinit_search_ctx+0x4b/0x2e0 [ 103.177431][ T5041] ntfs_read_locked_inode+0xa34/0x49c0 [ 103.182919][ T5041] ntfs_read_inode_mount+0xda2/0x2660 [ 103.188404][ T5041] ntfs_fill_super+0x1a16/0x2e20 [ 103.193373][ T5041] mount_bdev+0x2c9/0x3f0 [ 103.197708][ T5041] ? ntfs_mount+0x40/0x40 [ 103.202045][ T5041] legacy_get_tree+0xeb/0x180 [ 103.206806][ T5041] ? ntfs_rl_punch_nolock+0x15b0/0x15b0 [ 103.212468][ T5041] vfs_get_tree+0x88/0x270 [ 103.217002][ T5041] do_new_mount+0x2ba/0xb40 [ 103.221511][ T5041] ? do_move_mount_old+0x160/0x160 [ 103.226747][ T5041] ? user_path_at_empty+0x12b/0x180 [ 103.231953][ T5041] __se_sys_mount+0x2d5/0x3c0 [ 103.236648][ T5041] ? __x64_sys_mount+0xc0/0xc0 [ 103.241431][ T5041] ? syscall_enter_from_user_mode+0x2e/0x240 [ 103.247428][ T5041] ? lockdep_hardirqs_on+0x94/0x130 [ 103.252642][ T5041] ? __x64_sys_mount+0x1c/0xc0 [ 103.257412][ T5041] do_syscall_64+0x3b/0xb0 [ 103.261836][ T5041] ? clear_bhb_loop+0x15/0x70 [ 103.266603][ T5041] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 103.272505][ T5041] RIP: 0033:0x7f40d828d5ea [ 103.276934][ T5041] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 09 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 103.296632][ T5041] RSP: 002b:00007f40d760cef8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 103.305062][ T5041] RAX: ffffffffffffffda RBX: 00007f40d760cf80 RCX: 00007f40d828d5ea [ 103.313226][ T5041] RDX: 00000000200000c0 RSI: 00000000200001c0 RDI: 00007f40d760cf40 [ 103.321215][ T5041] RBP: 00000000200000c0 R08: 00007f40d760cf80 R09: 0000000000000004 [ 103.329285][ T5041] R10: 0000000000000004 R11: 0000000000000246 R12: 00000000200001c0 [ 103.337276][ T5041] R13: 00007f40d760cf40 R14: 000000000001f640 R15: 0000000020000100 [ 103.345270][ T5041] [ 103.348294][ T5041] [ 103.350612][ T5041] The buggy address belongs to the page: [ 103.356247][ T5041] page:ffffea0001bbdc80 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1 pfn:0x6ef72 [ 103.366528][ T5041] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 103.373671][ T5041] raw: 00fff00000000000 ffffea000192d588 ffffea0001c27748 0000000000000000 [ 103.382264][ T5041] raw: 0000000000000001 0000000000000000 00000000ffffffff 0000000000000000 [ 103.390848][ T5041] page dumped because: kasan: bad access detected [ 103.397279][ T5041] page_owner tracks the page as freed [ 103.402646][ T5041] page last allocated via order 0, migratetype Movable, gfp_mask 0x1100dca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), pid 5041, ts 102931894341, free_ts 102981323203 [ 103.418362][ T5041] get_page_from_freelist+0x3b78/0x3d40 [ 103.423920][ T5041] __alloc_pages+0x272/0x700 [ 103.428515][ T5041] alloc_pages_vma+0x39a/0x800 [ 103.433279][ T5041] handle_mm_fault+0x2f49/0x5960 [ 103.438226][ T5041] exc_page_fault+0x271/0x700 [ 103.442926][ T5041] asm_exc_page_fault+0x22/0x30 [ 103.447788][ T5041] page last free stack trace: [ 103.452457][ T5041] free_unref_page_prepare+0xc34/0xcf0 [ 103.457918][ T5041] free_unref_page_list+0x1f7/0x8e0 [ 103.463294][ T5041] release_pages+0x1bb9/0x1f40 [ 103.468102][ T5041] tlb_finish_mmu+0x177/0x320 [ 103.472786][ T5041] unmap_region+0x304/0x350 [ 103.477296][ T5041] __do_munmap+0x130a/0x1710 [ 103.481896][ T5041] __vm_munmap+0x134/0x230 [ 103.485269][ T5007] Bluetooth: hci0: command 0x040f tx timeout [ 103.486318][ T5041] __x64_sys_munmap+0x67/0x70 [ 103.496966][ T5041] do_syscall_64+0x3b/0xb0 [ 103.501393][ T5041] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 103.507297][ T5041] [ 103.509621][ T5041] Memory state around the buggy address: [ 103.515247][ T5041] ffff88806ef71f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 103.523310][ T5041] ffff88806ef71f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 103.532066][ T5041] >ffff88806ef72000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 103.540125][ T5041] ^ [ 103.546285][ T5041] ffff88806ef72080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 103.554361][ T5041] ffff88806ef72100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 103.562431][ T5041] ================================================================== [ 103.570487][ T5041] Disabling lock debugging due to kernel taint [ 103.594785][ T5041] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 103.602013][ T5041] CPU: 1 PID: 5041 Comm: syz-executor Tainted: G B 5.15.179-syzkaller #0 [ 103.611835][ T5041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 103.621996][ T5041] Call Trace: [ 103.625304][ T5041] [ 103.628243][ T5041] dump_stack_lvl+0x1e3/0x2d0 [ 103.633045][ T5041] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 103.638769][ T5041] ? panic+0x860/0x860 [ 103.642830][ T5041] ? rcu_is_watching+0x11/0xa0 [ 103.647596][ T5041] ? preempt_schedule_common+0xa6/0xd0 [ 103.653054][ T5041] panic+0x318/0x860 [ 103.656942][ T5041] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 103.663087][ T5041] ? check_panic_on_warn+0x1d/0xa0 [ 103.668281][ T5041] ? fb_is_primary_device+0xd0/0xd0 [ 103.673480][ T5041] ? _raw_spin_unlock_irqrestore+0x128/0x130 [ 103.679454][ T5041] ? _raw_spin_unlock+0x40/0x40 [ 103.684734][ T5041] check_panic_on_warn+0x7e/0xa0 [ 103.689668][ T5041] ? ntfs_attr_find+0x7d6/0xd50 [ 103.694511][ T5041] end_report+0x6d/0xf0 [ 103.698660][ T5041] kasan_report+0x18e/0x1c0 [ 103.703163][ T5041] ? ntfs_attr_find+0x7d6/0xd50 [ 103.708009][ T5041] ? mount_bdev+0x2c9/0x3f0 [ 103.712504][ T5041] ntfs_attr_find+0x7d6/0xd50 [ 103.717179][ T5041] ntfs_attr_lookup+0x4e0/0x2390 [ 103.722121][ T5041] ? slab_post_alloc_hook+0x73/0x380 [ 103.727402][ T5041] ? ntfs_attr_reinit_search_ctx+0x2e0/0x2e0 [ 103.733376][ T5041] ? ntfs_attr_get_search_ctx+0x4d/0x180 [ 103.739000][ T5041] ? kmem_cache_alloc+0x128/0x280 [ 103.744017][ T5041] ? memset+0x1f/0x40 [ 103.747993][ T5041] ? ntfs_attr_reinit_search_ctx+0x4b/0x2e0 [ 103.753878][ T5041] ntfs_read_locked_inode+0xa34/0x49c0 [ 103.759357][ T5041] ntfs_read_inode_mount+0xda2/0x2660 [ 103.764731][ T5041] ntfs_fill_super+0x1a16/0x2e20 [ 103.769671][ T5041] mount_bdev+0x2c9/0x3f0 [ 103.773996][ T5041] ? ntfs_mount+0x40/0x40 [ 103.778322][ T5041] legacy_get_tree+0xeb/0x180 [ 103.782993][ T5041] ? ntfs_rl_punch_nolock+0x15b0/0x15b0 [ 103.788533][ T5041] vfs_get_tree+0x88/0x270 [ 103.792944][ T5041] do_new_mount+0x2ba/0xb40 [ 103.797438][ T5041] ? do_move_mount_old+0x160/0x160 [ 103.802541][ T5041] ? user_path_at_empty+0x12b/0x180 [ 103.807738][ T5041] __se_sys_mount+0x2d5/0x3c0 [ 103.812678][ T5041] ? __x64_sys_mount+0xc0/0xc0 [ 103.817432][ T5041] ? syscall_enter_from_user_mode+0x2e/0x240 [ 103.823414][ T5041] ? lockdep_hardirqs_on+0x94/0x130 [ 103.828677][ T5041] ? __x64_sys_mount+0x1c/0xc0 [ 103.833435][ T5041] do_syscall_64+0x3b/0xb0 [ 103.837843][ T5041] ? clear_bhb_loop+0x15/0x70 [ 103.842527][ T5041] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 103.848443][ T5041] RIP: 0033:0x7f40d828d5ea [ 103.852869][ T5041] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 09 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 103.872479][ T5041] RSP: 002b:00007f40d760cef8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 103.880903][ T5041] RAX: ffffffffffffffda RBX: 00007f40d760cf80 RCX: 00007f40d828d5ea [ 103.888885][ T5041] RDX: 00000000200000c0 RSI: 00000000200001c0 RDI: 00007f40d760cf40 [ 103.896850][ T5041] RBP: 00000000200000c0 R08: 00007f40d760cf80 R09: 0000000000000004 [ 103.904815][ T5041] R10: 0000000000000004 R11: 0000000000000246 R12: 00000000200001c0 [ 103.912781][ T5041] R13: 00007f40d760cf40 R14: 000000000001f640 R15: 0000000020000100 [ 103.921015][ T5041] [ 103.924214][ T5041] Kernel Offset: disabled [ 103.928562][ T5041] Rebooting in 86400 seconds..