Warning: Permanently added '10.128.10.6' (ED25519) to the list of known hosts.
[ 132.155747][ T1331] ieee802154 phy0 wpan0: encryption failed: -22
[ 132.155854][ T1331] ieee802154 phy1 wpan1: encryption failed: -22
[+] memfd_create successful.
[+] ftruncate successful.
[+] lseek successful.
[+] write successful.
[+] write_minimal_ntfs successful.
[+] open /dev/loop-control successful.
[+] ioctl LOOP_CTL_GET_FREE successful.
[+] close ctl_fd successful.
[+] open /dev/loop0 successful.
[+] ioctl LOOP_SET_FD successful.
[+] close img_fd successful.
[+] close loop_fd successful.
[+] mkdir ./mnt_dir successful.
[ 132.481364][ T6009] loop0: detected capacity change from 0 to 20481
[+] mount successful.
[+] pthread_create successful.
[ 133.350355][ T6018] ==================================================================
[ 133.350355][ T6018] ==================================================================
[ 133.350375][ T6018] BUG: KASAN: slab-use-after-free in ntfs_show_options+0x656/0x800
[ 133.350408][ T6018] Read of size 2 at addr ffff888030028d1c by task syz-executor377/6018
[ 133.350428][ T6018]
[ 133.350443][ T6018] CPU: 0 UID: 0 PID: 6018 Comm: syz-executor377 Not tainted syzkaller #0 PREEMPT_{RT,(full)}
[ 133.350471][ T6018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[ 133.350486][ T6018] Call Trace:
[ 133.350495][ T6018]
[ 133.350505][ T6018] dump_stack_lvl+0xe8/0x150
[ 133.350546][ T6018] print_address_description+0x55/0x1e0
[ 133.350584][ T6018] ? ntfs_show_options+0x656/0x800
[ 133.350608][ T6018] print_report+0x58/0x70
[ 133.350644][ T6018] kasan_report+0x117/0x150
[ 133.350677][ T6018] ? ntfs_show_options+0x656/0x800
[ 133.350707][ T6018] ntfs_show_options+0x656/0x800
[ 133.350731][ T6018] ? __pfx_ntfs_show_options+0x10/0x10
[ 133.350757][ T6018] show_vfsmnt+0x637/0x780
[ 133.350787][ T6018] ? __pfx_show_vfsmnt+0x10/0x10
[ 133.350818][ T6018] ? srso_alias_return_thunk+0x5/0xfbef5
[ 133.350852][ T6018] seq_read_iter+0x8d6/0xcb0
[ 133.350899][ T6018] vfs_read+0x59e/0xa90
[ 133.350931][ T6018] ? srso_alias_return_thunk+0x5/0xfbef5
[ 133.350966][ T6018] ? __pfx_vfs_read+0x10/0x10
[ 133.350999][ T6018] ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 133.351035][ T6018] ? srso_alias_return_thunk+0x5/0xfbef5
[ 133.351072][ T6018] ? lockdep_hardirqs_on+0x7a/0x110
[ 133.351109][ T6018] ? mutex_lock_nested+0x152/0x1d0
[ 133.351134][ T6018] ? fdget_pos+0x252/0x320
[ 133.351164][ T6018] ? srso_alias_return_thunk+0x5/0xfbef5
[ 133.351197][ T6018] ksys_read+0x156/0x270
[ 133.351230][ T6018] ? __pfx_ksys_read+0x10/0x10
[ 133.351268][ T6018] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 133.351294][ T6018] do_syscall_64+0x174/0x580
[ 133.351334][ T6018] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 133.351360][ T6018] RIP: 0033:0x7f12f25c661e
[ 133.351381][ T6018] Code: 08 0f 85 f5 e2 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 90 41 57 41 56 4d 89 c6 41 55 4d 89 cd 41 54 55 53 48 83 ec 08
[ 133.351402][ T6018] RSP: 002b:00007f12ef560198 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 133.351433][ T6018] RAX: ffffffffffffffda RBX: 00007f12ef5616c0 RCX: 00007f12f25c661e
[ 133.351452][ T6018] RDX: 0000000000001000 RSI: 00007f12ef560200 RDI: 0000000000000005
[ 133.351469][ T6018] RBP: 00007f12f260b03e R08: 0000000000000000 R09: 0000000000000000
[ 133.351485][ T6018] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f12ef560200
[ 133.351502][ T6018] R13: 0000000000000000 R14: 00007fff2ed6d880 R15: 00007fff2ed6d968
[ 133.351531][ T6018]
[ 133.351539][ T6018]
[ 133.351545][ T6018] Allocated by task 6027:
[ 133.351557][ T6018] kasan_save_track+0x3e/0x80
[ 133.351581][ T6018] __kasan_kmalloc+0x93/0xb0
[ 133.351606][ T6018] __kmalloc_cache_noprof+0x3d2/0x6b0
[ 133.351632][ T6018] ntfs_init_fs_context+0x55/0x570
[ 133.351670][ T6018] alloc_fs_context+0x9a3/0xd00
[ 133.351701][ T6018] path_mount+0xc5e/0x1040
[ 133.351723][ T6018] __se_sys_mount+0x31d/0x420
[ 133.351746][ T6018] do_syscall_64+0x174/0x580
[ 133.351779][ T6018] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 133.351802][ T6018]
[ 133.351808][ T6018] Freed by task 6026:
[ 133.351819][ T6018] kasan_save_track+0x3e/0x80
[ 133.351841][ T6018] kasan_save_free_info+0x40/0x50
[ 133.351875][ T6018] __kasan_slab_free+0x5c/0x80
[ 133.351899][ T6018] kfree+0x1c5/0x6c0
[ 133.351918][ T6018] put_fs_context+0x123/0xb00
[ 133.351949][ T6018] path_mount+0xef9/0x1040
[ 133.351970][ T6018] __se_sys_mount+0x31d/0x420
[ 133.351993][ T6018] do_syscall_64+0x174/0x580
[ 133.352026][ T6018] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 133.352049][ T6018]
[ 133.352065][ T6018] The buggy address belongs to the object at ffff888030028d00
[ 133.352065][ T6018] which belongs to the cache kmalloc-32 of size 32
[ 133.352085][ T6018] The buggy address is located 28 bytes inside of
[ 133.352085][ T6018] freed 32-byte region [ffff888030028d00, ffff888030028d20)
[ 133.352110][ T6018]
[ 133.352116][ T6018] The buggy address belongs to the physical page:
[ 133.352127][ T6018] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x30028
[ 133.352149][ T6018] flags: 0x80000000000000(node=0|zone=1)
[ 133.352166][ T6018] page_type: f5(slab)
[ 133.352188][ T6018] raw: 0080000000000000 ffff88813ffb2780 dead000000000100 dead000000000122
[ 133.352211][ T6018] raw: 0000000000000000 0000000800400040 00000000f5000000 0000000000000000
[ 133.352224][ T6018] page dumped because: kasan: bad access detected
[ 133.352235][ T6018] page_owner tracks the page as allocated
[ 133.352244][ T6018] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2800(GFP_NOWAIT|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 2774, tgid 2774 (kworker/u8:4), ts 16704250728, free_ts 0
[ 133.352284][ T6018] post_alloc_hook+0x1f9/0x250
[ 133.352306][ T6018] get_page_from_freelist+0x262a/0x26a0
[ 133.352336][ T6018] __alloc_frozen_pages_noprof+0x18d/0x380
[ 133.352364][ T6018] allocate_slab+0x79/0x5e0
[ 133.352397][ T6018] refill_objects+0x2d8/0x350
[ 133.352431][ T6018] __pcs_replace_empty_main+0x330/0x690
[ 133.352464][ T6018] __kmalloc_cache_noprof+0x468/0x6b0
[ 133.352490][ T6018] kmem_cache_free+0x156/0x6c0
[ 133.352516][ T6018] __fput_deferred+0x2df/0x3e0
[ 133.352542][ T6018] fput_close+0x11f/0x240
[ 133.352566][ T6018] path_openat+0x30d5/0x3850
[ 133.352596][ T6018] do_file_open+0x23e/0x4a0
[ 133.352625][ T6018] do_open_execat+0x12b/0x590
[ 133.352651][ T6018] alloc_bprm+0x24/0x640
[ 133.352680][ T6018] kernel_execve+0x85/0x9c0
[ 133.352707][ T6018] call_usermodehelper_exec_async+0x212/0x360
[ 133.352737][ T6018] page_owner free stack trace missing
[ 133.352745][ T6018]
[ 133.352751][ T6018] Memory state around the buggy address:
[ 133.352763][ T6018] ffff888030028c00: fa fb fb fb fc fc fc fc fa fb fb fb fc fc fc fc
[ 133.352780][ T6018] ffff888030028c80: 00 00 00 fc fc fc fc fc fa fb fb fb fc fc fc fc
[ 133.352797][ T6018] >ffff888030028d00: fa fb fb fb fc fc fc fc 00 00 04 fc fc fc fc fc
[ 133.352810][ T6018] ^
[ 133.352822][ T6018] ffff888030028d80: 00 00 07 fc fc fc fc fc 00 00 07 fc fc fc fc fc
[ 133.352839][ T6018] ffff888030028e00: 00 00 00 fc fc fc fc fc 00 00 00 fc fc fc fc fc
[ 133.352851][ T6018] ==================================================================
[ 133.363391][ T6018] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 133.363410][ T6018] CPU: 0 UID: 0 PID: 6018 Comm: syz-executor377 Not tainted syzkaller #0 PREEMPT_{RT,(full)}
[ 133.363437][ T6018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[ 133.363452][ T6018] Call Trace:
[ 133.363461][ T6018]
[ 133.363470][ T6018] vpanic+0x56c/0xa60
[ 133.363496][ T6018] ? rcu_is_watching+0x15/0xb0
[ 133.363528][ T6018] ? __pfx_vpanic+0x10/0x10
[ 133.363558][ T6018] panic+0xc5/0xd0
[ 133.363581][ T6018] ? __pfx_panic+0x10/0x10
[ 133.363606][ T6018] ? preempt_schedule_thunk+0x16/0x40
[ 133.363640][ T6018] ? srso_alias_return_thunk+0x5/0xfbef5
[ 133.363669][ T6018] ? preempt_schedule_thunk+0x16/0x40
[ 133.363701][ T6018] ? ntfs_show_options+0x656/0x800
[ 133.363725][ T6018] check_panic_on_warn+0x89/0xb0
[ 133.363751][ T6018] ? ntfs_show_options+0x656/0x800
[ 133.363775][ T6018] end_report+0x73/0x170
[ 133.363804][ T6018] ? ntfs_show_options+0x656/0x800
[ 133.363827][ T6018] kasan_report+0x128/0x150
[ 133.363858][ T6018] ? ntfs_show_options+0x656/0x800
[ 133.363887][ T6018] ntfs_show_options+0x656/0x800
[ 133.363911][ T6018] ? __pfx_ntfs_show_options+0x10/0x10
[ 133.363937][ T6018] show_vfsmnt+0x637/0x780
[ 133.363967][ T6018] ? __pfx_show_vfsmnt+0x10/0x10
[ 133.363996][ T6018] ? srso_alias_return_thunk+0x5/0xfbef5
[ 133.364029][ T6018] seq_read_iter+0x8d6/0xcb0
[ 133.364079][ T6018] vfs_read+0x59e/0xa90
[ 133.364109][ T6018] ? srso_alias_return_thunk+0x5/0xfbef5
[ 133.364144][ T6018] ? __pfx_vfs_read+0x10/0x10
[ 133.364176][ T6018] ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 133.364210][ T6018] ? srso_alias_return_thunk+0x5/0xfbef5
[ 133.364239][ T6018] ? lockdep_hardirqs_on+0x7a/0x110
[ 133.364274][ T6018] ? mutex_lock_nested+0x152/0x1d0
[ 133.364299][ T6018] ? fdget_pos+0x252/0x320
[ 133.364328][ T6018] ? srso_alias_return_thunk+0x5/0xfbef5
[ 133.364360][ T6018] ksys_read+0x156/0x270
[ 133.364393][ T6018] ? __pfx_ksys_read+0x10/0x10
[ 133.364433][ T6018] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 133.364463][ T6018] do_syscall_64+0x174/0x580
[ 133.364501][ T6018] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 133.364526][ T6018] RIP: 0033:0x7f12f25c661e
[ 133.364546][ T6018] Code: 08 0f 85 f5 e2 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 90 41 57 41 56 4d 89 c6 41 55 4d 89 cd 41 54 55 53 48 83 ec 08
[ 133.364566][ T6018] RSP: 002b:00007f12ef560198 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 133.364590][ T6018] RAX: ffffffffffffffda RBX: 00007f12ef5616c0 RCX: 00007f12f25c661e
[ 133.364609][ T6018] RDX: 0000000000001000 RSI: 00007f12ef560200 RDI: 0000000000000005
[ 133.364625][ T6018] RBP: 00007f12f260b03e R08: 0000000000000000 R09: 0000000000000000
[ 133.364641][ T6018] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f12ef560200
[ 133.364657][ T6018] R13: 0000000000000000 R14: 00007fff2ed6d880 R15: 00007fff2ed6d968
[ 133.364685][ T6018]
[ 133.364928][ T6018] Kernel Offset: disabled