Warning: Permanently added '10.128.0.35' (ED25519) to the list of known hosts. 2026/04/02 08:26:57 parsed 1 programs Setting up swapspace version 1, size = 127995904 bytes [ 111.866484][ T4604] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 114.853021][ T1575] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.871185][ T1575] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.880163][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 114.904773][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.913608][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.922436][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 115.110325][ T4652] chnl_net:caif_netlink_parms(): no params data found [ 115.165240][ T4652] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.172484][ T4652] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.180537][ T4652] device bridge_slave_0 entered promiscuous mode [ 115.190041][ T4652] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.198846][ T4652] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.207672][ T4652] device bridge_slave_1 entered promiscuous mode [ 115.235765][ T4652] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 115.249119][ T4652] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 115.280206][ T4652] team0: Port device team_slave_0 added [ 115.289620][ T4652] team0: Port device team_slave_1 added [ 115.311622][ T4652] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 115.318623][ T4652] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.345104][ T4652] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 115.358147][ T4652] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 115.365365][ T4652] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.391534][ T4652] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 115.422696][ T4652] device hsr_slave_0 entered promiscuous mode [ 115.429734][ T4652] device hsr_slave_1 entered promiscuous mode [ 116.236201][ T4652] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 116.246414][ T4652] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 116.261333][ T4652] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 116.302391][ T4652] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 116.404888][ T4652] 8021q: adding VLAN 0 to HW filter on device bond0 [ 116.422902][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 116.431166][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 116.462450][ T4652] 8021q: adding VLAN 0 to HW filter on device team0 [ 116.474445][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 116.483852][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 116.493045][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.500153][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.550823][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 116.561854][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 116.571486][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 116.581716][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.588836][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.600656][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 116.609904][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 116.619978][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 116.631316][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 116.676295][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 116.685453][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 116.698042][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 116.707355][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 116.717725][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 116.729488][ T482] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 116.740069][ T482] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 116.773698][ T4652] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 116.912263][ T482] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 116.919776][ T482] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 116.935900][ T4652] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.990352][ T482] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 117.002128][ T482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 117.065313][ T482] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 117.074636][ T482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 117.087405][ T4652] device veth0_vlan entered promiscuous mode [ 117.095983][ T482] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 117.104764][ T482] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 117.121417][ T4652] device veth1_vlan entered promiscuous mode [ 117.173173][ T482] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 117.186856][ T482] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 117.204281][ T482] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 117.214097][ T482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 117.226719][ T4652] device veth0_macvtap entered promiscuous mode [ 117.239744][ T4652] device veth1_macvtap entered promiscuous mode [ 117.282824][ T4652] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 117.290321][ T482] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 117.305623][ T482] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 117.314551][ T482] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 117.325752][ T482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 117.338298][ T4652] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 117.362380][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 117.387725][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 117.399611][ T4652] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.420957][ T4652] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.429715][ T4652] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.451208][ T4652] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 2026/04/02 08:27:09 executed programs: 0 [ 119.626457][ T3043] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.753991][ T4811] chnl_net:caif_netlink_parms(): no params data found [ 119.822290][ T4811] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.829594][ T4811] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.839145][ T4811] device bridge_slave_0 entered promiscuous mode [ 119.849192][ T4811] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.857689][ T4811] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.867411][ T4811] device bridge_slave_1 entered promiscuous mode [ 119.898551][ T4811] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 119.913087][ T4811] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 119.945982][ T4811] team0: Port device team_slave_0 added [ 119.955805][ T4811] team0: Port device team_slave_1 added [ 119.987586][ T4811] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 119.996466][ T4811] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 120.025916][ T4811] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 120.038983][ T4811] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 120.048555][ T4811] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 120.075078][ T4811] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 120.115307][ T4811] device hsr_slave_0 entered promiscuous mode [ 120.122738][ T4811] device hsr_slave_1 entered promiscuous mode [ 120.129461][ T4811] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 120.137185][ T4811] Cannot create hsr debugfs directory [ 121.601110][ T4279] Bluetooth: hci0: command 0x0409 tx timeout [ 122.857149][ T3043] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.927536][ T3043] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.982795][ T3043] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.691001][ T4278] Bluetooth: hci0: command 0x041b tx timeout [ 123.796497][ T4811] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 123.808162][ T4811] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 123.818608][ T4811] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 123.834166][ T4811] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 123.903642][ T4811] 8021q: adding VLAN 0 to HW filter on device bond0 [ 123.917559][ T482] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 123.926261][ T482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 123.956890][ T4811] 8021q: adding VLAN 0 to HW filter on device team0 [ 123.967387][ T482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 123.977313][ T482] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 123.986365][ T482] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.993630][ T482] bridge0: port 1(bridge_slave_0) entered forwarding state [ 124.002374][ T482] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 124.028044][ T482] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 124.037006][ T482] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 124.046526][ T482] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.053843][ T482] bridge0: port 2(bridge_slave_1) entered forwarding state [ 124.065380][ T482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 124.077884][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 124.108030][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 124.117498][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 124.126626][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 124.137696][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 124.147380][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 124.171830][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 124.180515][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 124.193576][ T4811] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 124.206099][ T4811] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 124.215196][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 124.223978][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 124.242949][ T3043] device hsr_slave_0 left promiscuous mode [ 124.249463][ T3043] device hsr_slave_1 left promiscuous mode [ 124.258363][ T3043] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 124.267534][ T3043] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 124.277639][ T3043] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 124.286019][ T3043] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 124.294454][ T3043] device bridge_slave_1 left promiscuous mode [ 124.300769][ T3043] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.310064][ T3043] device bridge_slave_0 left promiscuous mode [ 124.318984][ T3043] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.333005][ T3043] device veth1_macvtap left promiscuous mode [ 124.339097][ T3043] device veth0_macvtap left promiscuous mode [ 124.345915][ T3043] device veth1_vlan left promiscuous mode [ 124.351934][ T3043] device veth0_vlan left promiscuous mode [ 124.517893][ T3043] team0 (unregistering): Port device team_slave_1 removed [ 124.535177][ T3043] team0 (unregistering): Port device team_slave_0 removed [ 124.548622][ T3043] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 124.565365][ T3043] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 124.626837][ T3043] bond0 (unregistering): Released all slaves [ 124.710505][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 124.718154][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 124.733988][ T4811] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 124.763170][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 124.772644][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 124.793245][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 124.802527][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 124.812691][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 124.820551][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 124.833151][ T4811] device veth0_vlan entered promiscuous mode [ 124.854501][ T4811] device veth1_vlan entered promiscuous mode [ 124.880054][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 124.888683][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 124.897352][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 124.906422][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 124.917460][ T4811] device veth0_macvtap entered promiscuous mode [ 124.931389][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 124.941523][ T4811] device veth1_macvtap entered promiscuous mode [ 124.966719][ T4811] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 124.974349][ T482] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 124.984795][ T482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 124.997271][ T4811] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 125.004938][ T482] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 125.013935][ T482] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 125.027909][ T4811] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.037918][ T4811] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.047359][ T4811] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.056589][ T4811] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.138546][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.154262][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.162626][ T482] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready 2026/04/02 08:27:15 executed programs: 2 [ 125.187146][ T482] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.195260][ T482] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.210220][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 125.321427][ T5051] loop0: detected capacity change from 0 to 4096 [ 125.337900][ T5051] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 125.379706][ T5051] ntfs: volume version 3.1. [ 125.566144][ T5053] loop0: detected capacity change from 0 to 4096 [ 125.586519][ T5053] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 125.643575][ T5053] ntfs: volume version 3.1. [ 125.667098][ T5053] ================================================================== [ 125.675455][ T5053] BUG: KASAN: use-after-free in ntfs_readpage+0x85a/0x2260 [ 125.682716][ T5053] Read of size 10 at addr ffff88805f2c5170 by task syz.0.18/5053 [ 125.690472][ T5053] [ 125.692844][ T5053] CPU: 1 PID: 5053 Comm: syz.0.18 Not tainted syzkaller #0 [ 125.700062][ T5053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 125.710248][ T5053] Call Trace: [ 125.713559][ T5053] [ 125.716514][ T5053] dump_stack_lvl+0x188/0x250 [ 125.721223][ T5053] ? show_regs_print_info+0x20/0x20 [ 125.726691][ T5053] ? _printk+0xda/0x130 [ 125.730892][ T5053] ? ntfs_readpage+0x85a/0x2260 [ 125.735943][ T5053] ? load_image+0x400/0x400 [ 125.740686][ T5053] print_address_description+0x60/0x2d0 [ 125.746291][ T5053] ? ntfs_readpage+0x85a/0x2260 [ 125.751203][ T5053] kasan_report+0xdf/0x130 [ 125.755730][ T5053] ? ntfs_readpage+0x85a/0x2260 [ 125.760657][ T5053] kasan_check_range+0x235/0x290 [ 125.765727][ T5053] ? ntfs_readpage+0x85a/0x2260 [ 125.770797][ T5053] memcpy+0x25/0x60 [ 125.774647][ T5053] ntfs_readpage+0x85a/0x2260 [ 125.777428][ T4279] Bluetooth: hci0: command 0x040f tx timeout [ 125.779356][ T5053] ? rcu_lock_release+0x5/0x20 [ 125.790230][ T5053] ? ntfs_writepage+0x1360/0x1360 [ 125.795298][ T5053] ? xa_load+0x276/0x2a0 [ 125.799581][ T5053] ? readahead_page+0x299/0x3d0 [ 125.804514][ T5053] ? ntfs_writepage+0x1360/0x1360 [ 125.809574][ T5053] read_pages+0x61f/0x930 [ 125.813957][ T5053] ? page_cache_ra_unbounded+0x940/0x940 [ 125.819651][ T5053] ? add_to_page_cache_lru+0x2a8/0x4a0 [ 125.825252][ T5053] page_cache_ra_unbounded+0x838/0x940 [ 125.830786][ T5053] ? read_cache_pages_invalidate_pages+0x1c0/0x1c0 [ 125.837550][ T5053] filemap_read+0x5de/0x2540 [ 125.842193][ T5053] ? rcu_lock_release+0x5/0x20 [ 125.847021][ T5053] ? find_get_pages_range_tag+0x470/0x470 [ 125.852891][ T5053] ? __kernel_text_address+0x9a/0x100 [ 125.858328][ T5053] ? unwind_get_return_address+0x49/0x80 [ 125.864304][ T5053] ? generic_file_read_iter+0x96/0x490 [ 125.869787][ T5053] ? memset+0x1e/0x40 [ 125.873976][ T5053] ? iov_iter_kvec+0xb4/0x170 [ 125.878695][ T5053] __kernel_read+0x517/0x960 [ 125.883498][ T5053] ? __kasan_kmalloc+0xcc/0xf0 [ 125.888300][ T5053] ? __kasan_kmalloc+0xb5/0xf0 [ 125.893100][ T5053] ? rw_verify_area+0x1b0/0x1b0 [ 125.898007][ T5053] integrity_kernel_read+0x86/0xd0 [ 125.903232][ T5053] ? integrity_inode_free+0x170/0x170 [ 125.908674][ T5053] ima_calc_file_hash+0x931/0x1920 [ 125.913823][ T5053] ? mark_lock+0x94/0x320 [ 125.918499][ T5053] ? __lock_acquire+0x13bc/0x7d10 [ 125.923566][ T5053] ? ima_alloc_tfm+0x2f0/0x2f0 [ 125.928574][ T5053] ? __mutex_trylock_common+0x155/0x260 [ 125.934164][ T5053] ? rcu_lock_release+0x20/0x20 [ 125.939515][ T5053] ima_collect_measurement+0x337/0x7c0 [ 125.945357][ T5053] ? ima_get_action+0xa0/0xa0 [ 125.950093][ T5053] process_measurement+0x113a/0x1ba0 [ 125.955429][ T5053] ? ima_file_mmap+0x150/0x150 [ 125.960221][ T5053] ? tomoyo_check_path_number_acl+0x280/0x280 [ 125.966465][ T5053] ima_file_check+0xc7/0x110 [ 125.971093][ T5053] ? ima_bprm_check+0x200/0x200 [ 125.975995][ T5053] path_openat+0x27a8/0x2fa0 [ 125.980713][ T5053] ? do_filp_open+0x410/0x410 [ 125.985438][ T5053] do_filp_open+0x1e2/0x410 [ 125.990004][ T5053] ? vfs_tmpfile+0x300/0x300 [ 125.995012][ T5053] ? _raw_spin_unlock+0x24/0x40 [ 125.999912][ T5053] ? alloc_fd+0x598/0x630 [ 126.004397][ T5053] do_sys_openat2+0x150/0x4b0 [ 126.009111][ T5053] ? __lock_acquire+0x7d10/0x7d10 [ 126.014195][ T5053] ? do_sys_open+0xe0/0xe0 [ 126.018648][ T5053] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 126.024775][ T5053] ? lock_chain_count+0x20/0x20 [ 126.029726][ T5053] ? vtime_user_exit+0x2c8/0x3e0 [ 126.034856][ T5053] __x64_sys_openat+0x135/0x160 [ 126.039919][ T5053] do_syscall_64+0x4c/0xa0 [ 126.044483][ T5053] ? clear_bhb_loop+0x30/0x80 [ 126.049202][ T5053] ? clear_bhb_loop+0x30/0x80 [ 126.053908][ T5053] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 126.059929][ T5053] RIP: 0033:0x7fdb34a69799 [ 126.064580][ T5053] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 126.084400][ T5053] RSP: 002b:00007fdb340cb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 126.092855][ T5053] RAX: ffffffffffffffda RBX: 00007fdb34ce2fa0 RCX: 00007fdb34a69799 [ 126.100860][ T5053] RDX: 0000000000141842 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 126.108876][ T5053] RBP: 00007fdb34affbd9 R08: 0000000000000000 R09: 0000000000000000 [ 126.116885][ T5053] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 126.124940][ T5053] R13: 00007fdb34ce3038 R14: 00007fdb34ce2fa0 R15: 00007fff64f58158 [ 126.132985][ T5053] [ 126.136036][ T5053] [ 126.138383][ T5053] The buggy address belongs to the page: [ 126.144038][ T5053] page:ffffea00017cb140 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1 pfn:0x5f2c5 [ 126.154221][ T5053] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 126.161393][ T5053] raw: 00fff00000000000 ffffea00017cb188 ffffea00017cb108 0000000000000000 [ 126.170023][ T5053] raw: 0000000000000001 0000000000000000 00000000ffffffff 0000000000000000 [ 126.178679][ T5053] page dumped because: kasan: bad access detected [ 126.185143][ T5053] page_owner tracks the page as freed [ 126.190532][ T5053] page last allocated via order 0, migratetype Movable, gfp_mask 0x1100cca(GFP_HIGHUSER_MOVABLE), pid 5053, ts 125619724642, free_ts 125626944234 [ 126.205324][ T5053] get_page_from_freelist+0x1bbd/0x1ca0 [ 126.210913][ T5053] __alloc_pages+0x1ee/0x480 [ 126.215540][ T5053] __page_cache_alloc+0xce/0x440 [ 126.220761][ T5053] do_read_cache_page+0x1da/0x1030 [ 126.225900][ T5053] ntfs_map_page+0x24/0x390 [ 126.230468][ T5053] load_system_files+0x1d47/0x55a0 [ 126.235623][ T5053] ntfs_fill_super+0x19e0/0x2c90 [ 126.240734][ T5053] mount_bdev+0x287/0x3c0 [ 126.245095][ T5053] legacy_get_tree+0xe6/0x180 [ 126.249797][ T5053] vfs_get_tree+0x88/0x270 [ 126.254328][ T5053] do_new_mount+0x24a/0xa40 [ 126.258865][ T5053] __se_sys_mount+0x2e3/0x3d0 [ 126.263575][ T5053] do_syscall_64+0x4c/0xa0 [ 126.268016][ T5053] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 126.274026][ T5053] page last free stack trace: [ 126.278825][ T5053] free_unref_page_prepare+0x637/0x6c0 [ 126.284323][ T5053] free_unref_page_list+0x119/0x820 [ 126.289558][ T5053] release_pages+0x186c/0x1be0 [ 126.294361][ T5053] __pagevec_release+0x6d/0xe0 [ 126.299194][ T5053] truncate_inode_pages_range+0x362/0xfe0 [ 126.304940][ T5053] ntfs_evict_big_inode+0x2d/0x4a0 [ 126.310088][ T5053] evict+0x4c9/0x8d0 [ 126.314014][ T5053] load_system_files+0x276a/0x55a0 [ 126.319158][ T5053] ntfs_fill_super+0x19e0/0x2c90 [ 126.324125][ T5053] mount_bdev+0x287/0x3c0 [ 126.328494][ T5053] legacy_get_tree+0xe6/0x180 [ 126.333197][ T5053] vfs_get_tree+0x88/0x270 [ 126.337645][ T5053] do_new_mount+0x24a/0xa40 [ 126.342281][ T5053] __se_sys_mount+0x2e3/0x3d0 [ 126.347105][ T5053] do_syscall_64+0x4c/0xa0 [ 126.351550][ T5053] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 126.357573][ T5053] [ 126.360026][ T5053] Memory state around the buggy address: [ 126.365849][ T5053] ffff88805f2c5000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 126.373941][ T5053] ffff88805f2c5080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 126.382126][ T5053] >ffff88805f2c5100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 126.390387][ T5053] ^ [ 126.398225][ T5053] ffff88805f2c5180: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 126.406539][ T5053] ffff88805f2c5200: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 126.414720][ T5053] ================================================================== [ 126.422810][ T5053] Disabling lock debugging due to kernel taint [ 126.429973][ T5053] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 126.437363][ T5053] CPU: 1 PID: 5053 Comm: syz.0.18 Tainted: G B syzkaller #0 [ 126.445978][ T5053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 126.456060][ T5053] Call Trace: [ 126.459523][ T5053] [ 126.462481][ T5053] dump_stack_lvl+0x188/0x250 [ 126.467276][ T5053] ? show_regs_print_info+0x20/0x20 [ 126.472616][ T5053] ? load_image+0x400/0x400 [ 126.477167][ T5053] panic+0x2e5/0x810 [ 126.481322][ T5053] ? bpf_jit_dump+0xd0/0xd0 [ 126.485876][ T5053] ? _raw_spin_unlock_irqrestore+0xbc/0x120 [ 126.491811][ T5053] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 126.497745][ T5053] ? _raw_spin_unlock+0x40/0x40 [ 126.502730][ T5053] ? print_memory_metadata+0x314/0x400 [ 126.508374][ T5053] ? ntfs_readpage+0x85a/0x2260 [ 126.513267][ T5053] check_panic_on_warn+0x80/0xa0 [ 126.518327][ T5053] ? ntfs_readpage+0x85a/0x2260 [ 126.523238][ T5053] end_report+0x6d/0xf0 [ 126.527450][ T5053] kasan_report+0x102/0x130 [ 126.532268][ T5053] ? ntfs_readpage+0x85a/0x2260 [ 126.537249][ T5053] kasan_check_range+0x235/0x290 [ 126.542245][ T5053] ? ntfs_readpage+0x85a/0x2260 [ 126.547142][ T5053] memcpy+0x25/0x60 [ 126.551097][ T5053] ntfs_readpage+0x85a/0x2260 [ 126.555923][ T5053] ? rcu_lock_release+0x5/0x20 [ 126.560822][ T5053] ? ntfs_writepage+0x1360/0x1360 [ 126.566129][ T5053] ? xa_load+0x276/0x2a0 [ 126.570412][ T5053] ? readahead_page+0x299/0x3d0 [ 126.575305][ T5053] ? ntfs_writepage+0x1360/0x1360 [ 126.580379][ T5053] read_pages+0x61f/0x930 [ 126.584753][ T5053] ? page_cache_ra_unbounded+0x940/0x940 [ 126.590431][ T5053] ? add_to_page_cache_lru+0x2a8/0x4a0 [ 126.595926][ T5053] page_cache_ra_unbounded+0x838/0x940 [ 126.601430][ T5053] ? read_cache_pages_invalidate_pages+0x1c0/0x1c0 [ 126.608003][ T5053] filemap_read+0x5de/0x2540 [ 126.612749][ T5053] ? rcu_lock_release+0x5/0x20 [ 126.617670][ T5053] ? find_get_pages_range_tag+0x470/0x470 [ 126.623458][ T5053] ? __kernel_text_address+0x9a/0x100 [ 126.628958][ T5053] ? unwind_get_return_address+0x49/0x80 [ 126.634723][ T5053] ? generic_file_read_iter+0x96/0x490 [ 126.640241][ T5053] ? memset+0x1e/0x40 [ 126.644257][ T5053] ? iov_iter_kvec+0xb4/0x170 [ 126.648982][ T5053] __kernel_read+0x517/0x960 [ 126.653605][ T5053] ? __kasan_kmalloc+0xcc/0xf0 [ 126.658429][ T5053] ? __kasan_kmalloc+0xb5/0xf0 [ 126.663237][ T5053] ? rw_verify_area+0x1b0/0x1b0 [ 126.668129][ T5053] integrity_kernel_read+0x86/0xd0 [ 126.673273][ T5053] ? integrity_inode_free+0x170/0x170 [ 126.678689][ T5053] ima_calc_file_hash+0x931/0x1920 [ 126.683840][ T5053] ? mark_lock+0x94/0x320 [ 126.688206][ T5053] ? __lock_acquire+0x13bc/0x7d10 [ 126.693264][ T5053] ? ima_alloc_tfm+0x2f0/0x2f0 [ 126.698089][ T5053] ? __mutex_trylock_common+0x155/0x260 [ 126.703691][ T5053] ? rcu_lock_release+0x20/0x20 [ 126.708581][ T5053] ima_collect_measurement+0x337/0x7c0 [ 126.714196][ T5053] ? ima_get_action+0xa0/0xa0 [ 126.718926][ T5053] process_measurement+0x113a/0x1ba0 [ 126.724258][ T5053] ? ima_file_mmap+0x150/0x150 [ 126.729112][ T5053] ? tomoyo_check_path_number_acl+0x280/0x280 [ 126.735317][ T5053] ima_file_check+0xc7/0x110 [ 126.739939][ T5053] ? ima_bprm_check+0x200/0x200 [ 126.747261][ T5053] path_openat+0x27a8/0x2fa0 [ 126.752137][ T5053] ? do_filp_open+0x410/0x410 [ 126.756861][ T5053] do_filp_open+0x1e2/0x410 [ 126.761459][ T5053] ? vfs_tmpfile+0x300/0x300 [ 126.766093][ T5053] ? _raw_spin_unlock+0x24/0x40 [ 126.771161][ T5053] ? alloc_fd+0x598/0x630 [ 126.775524][ T5053] do_sys_openat2+0x150/0x4b0 [ 126.780362][ T5053] ? __lock_acquire+0x7d10/0x7d10 [ 126.785456][ T5053] ? do_sys_open+0xe0/0xe0 [ 126.790008][ T5053] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 126.796276][ T5053] ? lock_chain_count+0x20/0x20 [ 126.801168][ T5053] ? vtime_user_exit+0x2c8/0x3e0 [ 126.806135][ T5053] __x64_sys_openat+0x135/0x160 [ 126.811101][ T5053] do_syscall_64+0x4c/0xa0 [ 126.815546][ T5053] ? clear_bhb_loop+0x30/0x80 [ 126.820251][ T5053] ? clear_bhb_loop+0x30/0x80 [ 126.824959][ T5053] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 126.830883][ T5053] RIP: 0033:0x7fdb34a69799 [ 126.835325][ T5053] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 126.855180][ T5053] RSP: 002b:00007fdb340cb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 126.863719][ T5053] RAX: ffffffffffffffda RBX: 00007fdb34ce2fa0 RCX: 00007fdb34a69799 [ 126.871718][ T5053] RDX: 0000000000141842 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 126.879720][ T5053] RBP: 00007fdb34affbd9 R08: 0000000000000000 R09: 0000000000000000 [ 126.887791][ T5053] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 126.895873][ T5053] R13: 00007fdb34ce3038 R14: 00007fdb34ce2fa0 R15: 00007fff64f58158 [ 126.903993][ T5053] [ 126.907358][ T5053] Kernel Offset: disabled [ 126.911732][ T5053] Rebooting in 86400 seconds..