Warning: Permanently added '10.128.1.249' (ED25519) to the list of known hosts. 2025/11/30 01:40:06 parsed 1 programs [ 62.351519][ T4267] cgroup: Unknown subsys name 'net' [ 62.512967][ T4267] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 63.774545][ T4267] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 65.226516][ T4277] chnl_net:caif_netlink_parms(): no params data found [ 65.270508][ T4277] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.278034][ T4277] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.285786][ T4277] device bridge_slave_0 entered promiscuous mode [ 65.294295][ T4277] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.301748][ T4277] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.309586][ T4277] device bridge_slave_1 entered promiscuous mode [ 65.330016][ T4277] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.340696][ T4277] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.362134][ T4277] team0: Port device team_slave_0 added [ 65.372522][ T4277] team0: Port device team_slave_1 added [ 65.388379][ T4277] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.395339][ T4277] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.421327][ T4277] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.433399][ T4277] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.440396][ T4277] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.466399][ T4277] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.493690][ T4277] device hsr_slave_0 entered promiscuous mode [ 65.500434][ T4277] device hsr_slave_1 entered promiscuous mode [ 65.580941][ T4277] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 65.591735][ T4277] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 65.605044][ T4277] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 65.613536][ T4277] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 65.634764][ T4277] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.642201][ T4277] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.650191][ T4277] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.657255][ T4277] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.695672][ T4277] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.710596][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.721452][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.729905][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.744524][ T4277] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.756949][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.765643][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.772746][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.784355][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.793134][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.800662][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.820954][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.830232][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.842323][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.854865][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.866334][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.877794][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.044238][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.052273][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.064053][ T4277] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.078693][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.096320][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.105348][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.114381][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.124012][ T4277] device veth0_vlan entered promiscuous mode [ 66.135765][ T4277] device veth1_vlan entered promiscuous mode [ 66.143398][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.163509][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.173048][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.183866][ T4277] device veth0_macvtap entered promiscuous mode [ 66.192738][ T4277] device veth1_macvtap entered promiscuous mode [ 66.206254][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.215632][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.223857][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.232096][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.241303][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.253523][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.262014][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.270958][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.281289][ T4277] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.290437][ T4277] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.299317][ T4277] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.308316][ T4277] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.429022][ T46] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.430595][ T4323] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 67.441722][ T4323] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 67.449590][ T4323] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 67.457592][ T4323] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 67.465603][ T4323] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 67.473073][ T4323] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 67.650291][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.662930][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.674305][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.689803][ T4330] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.697778][ T4330] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.706627][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 2025/11/30 01:40:14 executed programs: 0 [ 68.633788][ T48] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 68.642446][ T48] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 68.651310][ T48] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 68.659901][ T48] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 68.667450][ T48] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 68.674789][ T48] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 68.767564][ T4355] chnl_net:caif_netlink_parms(): no params data found [ 68.809386][ T46] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.826307][ T4355] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.834162][ T4355] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.842496][ T4355] device bridge_slave_0 entered promiscuous mode [ 68.850432][ T4355] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.857511][ T4355] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.866168][ T4355] device bridge_slave_1 entered promiscuous mode [ 68.884310][ T4355] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.894966][ T4355] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.915339][ T4355] team0: Port device team_slave_0 added [ 68.922233][ T4355] team0: Port device team_slave_1 added [ 68.938156][ T4355] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.945147][ T4355] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.972878][ T4355] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.985468][ T4355] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.992566][ T4355] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.018550][ T4355] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.043880][ T4355] device hsr_slave_0 entered promiscuous mode [ 69.051136][ T4355] device hsr_slave_1 entered promiscuous mode [ 69.057563][ T4355] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.065480][ T4355] Cannot create hsr debugfs directory [ 70.718868][ T4325] Bluetooth: hci0: command 0x0409 tx timeout [ 71.040163][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.046869][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.306011][ T46] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.379922][ T46] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.225419][ T4355] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 72.236499][ T4355] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 72.255344][ T46] device hsr_slave_0 left promiscuous mode [ 72.264950][ T46] device hsr_slave_1 left promiscuous mode [ 72.273110][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 72.283348][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 72.292426][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 72.300456][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 72.309662][ T46] device bridge_slave_1 left promiscuous mode [ 72.316562][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.326925][ T46] device bridge_slave_0 left promiscuous mode [ 72.334297][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.351311][ T46] device veth1_macvtap left promiscuous mode [ 72.357481][ T46] device veth0_macvtap left promiscuous mode [ 72.363802][ T46] device veth1_vlan left promiscuous mode [ 72.369732][ T46] device veth0_vlan left promiscuous mode [ 72.631797][ T46] team0 (unregistering): Port device team_slave_1 removed [ 72.657753][ T46] team0 (unregistering): Port device team_slave_0 removed [ 72.682766][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 72.710476][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 72.799209][ T48] Bluetooth: hci0: command 0x041b tx timeout [ 72.946685][ T46] bond0 (unregistering): Released all slaves [ 73.024839][ T4355] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 73.033825][ T4355] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 73.086814][ T4355] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.112167][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.120275][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.130794][ T4355] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.140420][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.149558][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.158236][ T4330] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.165336][ T4330] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.173455][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.200656][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.209832][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.219666][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.226753][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.234480][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.245277][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.256338][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 73.266115][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.291364][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.299650][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.309775][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.323320][ T4355] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 73.334429][ T4355] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.345989][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.354893][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.364805][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.373733][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.382374][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.606865][ T4355] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.615998][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.624845][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.649117][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.662303][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.685042][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.698449][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.712254][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.720453][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.733517][ T4355] device veth0_vlan entered promiscuous mode [ 73.746454][ T4355] device veth1_vlan entered promiscuous mode [ 73.781907][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.790525][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.801045][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.817091][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.828512][ T4355] device veth0_macvtap entered promiscuous mode [ 73.842096][ T4355] device veth1_macvtap entered promiscuous mode [ 73.867834][ T4355] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.875436][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.884299][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.897796][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.906394][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.916964][ T4355] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.926096][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.934971][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.945812][ T4355] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.955366][ T4355] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.964239][ T4355] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.973627][ T4355] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.021716][ T4330] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.041498][ T4330] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.051794][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.061501][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 2025/11/30 01:40:20 executed programs: 2 [ 74.069841][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.079506][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.154014][ T4429] loop0: detected capacity change from 0 to 4096 [ 74.164513][ T4429] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 74.247215][ T4429] ntfs: (device loop0): parse_options(): NLS character set macgre˙ not found. Using previous one utf8. [ 74.262786][ T4429] ntfs: (device loop0): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 74.272794][ T4429] ntfs: (device loop0): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 74.292137][ T4429] ntfs: volume version 3.1. [ 74.303891][ T4429] ntfs: (device loop0): ntfs_index_lookup(): Corrupt index. Aborting lookup. [ 74.312965][ T4429] ntfs: (device loop0): ntfs_mark_quotas_out_of_date(): Lookup of quota defaults entry failed. [ 74.325277][ T4429] ntfs: (device loop0): load_system_files(): Failed to mark quotas out of date. Mounting read-only. Run chkdsk. [ 74.338577][ T4429] ntfs: (device loop0): ntfs_read_locked_attr_inode(): Failed with error code -2 while reading attribute inode (mft_no 0x1a, type 0x80, name_len 4). Marking corrupt inode and base inode 0x1a as bad. Run chkdsk. [ 74.360983][ T4429] ntfs: (device loop0): load_and_init_usnjrnl(): Failed to load $UsnJrnl/$DATA/$Max attribute. [ 74.372187][ T4429] ntfs: (device loop0): load_system_files(): Failed to load $UsnJrnl. Will not be able to remount read-write. Run chkdsk. [ 74.509212][ T4431] loop0: detected capacity change from 0 to 4096 [ 74.629527][ T4431] ================================================================== [ 74.637665][ T4431] BUG: KASAN: use-after-free in ntfs_read_folio+0x9bb/0x2980 [ 74.645209][ T4431] Read of size 80 at addr ffff8880694794b0 by task syz.0.18/4431 [ 74.653131][ T4431] [ 74.655485][ T4431] CPU: 1 PID: 4431 Comm: syz.0.18 Not tainted syzkaller #0 [ 74.662888][ T4431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 74.672976][ T4431] Call Trace: [ 74.676285][ T4431] [ 74.679259][ T4431] dump_stack_lvl+0x168/0x22e [ 74.683995][ T4431] ? __lock_acquire+0x7c50/0x7c50 [ 74.689061][ T4431] ? show_regs_print_info+0x12/0x12 [ 74.694377][ T4431] ? load_image+0x3b0/0x3b0 [ 74.699005][ T4431] ? __virt_addr_valid+0x465/0x540 [ 74.704160][ T4431] ? ntfs_read_folio+0x9bb/0x2980 [ 74.709221][ T4431] print_report+0xa8/0x210 [ 74.713660][ T4431] kasan_report+0x10b/0x140 [ 74.718199][ T4431] ? _raw_read_unlock_irqrestore+0x82/0x100 [ 74.724123][ T4431] ? ntfs_read_folio+0x9bb/0x2980 [ 74.729187][ T4431] ? ntfs_read_folio+0x9bb/0x2980 [ 74.734328][ T4431] kasan_check_range+0x27b/0x290 [ 74.739301][ T4431] memcpy+0x25/0x60 [ 74.743154][ T4431] ntfs_read_folio+0x9bb/0x2980 [ 74.747998][ T4431] ? rcu_is_watching+0x11/0xa0 [ 74.752850][ T4431] ? rcu_is_watching+0x11/0xa0 [ 74.757712][ T4431] ? ntfs_writepage+0x1650/0x1650 [ 74.762720][ T4431] ? folio_add_lru+0x316/0xd50 [ 74.767478][ T4431] ? __lock_acquire+0x7c50/0x7c50 [ 74.772675][ T4431] ? folio_put+0xd0/0xd0 [ 74.776983][ T4431] ? filemap_alloc_folio+0xdb/0x460 [ 74.782168][ T4431] filemap_read_folio+0x160/0x760 [ 74.787188][ T4431] ? folio_batch_add_and_move+0x14a/0x250 [ 74.792903][ T4431] ? ntfs_writepage+0x1650/0x1650 [ 74.797938][ T4431] ? maybe_unlock_mmap_for_io+0x140/0x140 [ 74.803674][ T4431] do_read_cache_folio+0x2a0/0x760 [ 74.808782][ T4431] ? ntfs_writepage+0x1650/0x1650 [ 74.813793][ T4431] do_read_cache_page+0x32/0x220 [ 74.818712][ T4431] load_system_files+0x15d3/0x4460 [ 74.823809][ T4431] ? ntfs_setup_allocators+0x2c0/0x2c0 [ 74.829249][ T4431] ? generate_default_upcase+0xb46/0xb90 [ 74.834876][ T4431] ntfs_fill_super+0x182a/0x2a60 [ 74.839884][ T4431] mount_bdev+0x287/0x3c0 [ 74.844196][ T4431] ? ntfs_mount+0x40/0x40 [ 74.848692][ T4431] legacy_get_tree+0xe6/0x180 [ 74.853437][ T4431] ? ntfs_rl_punch_nolock+0x1470/0x1470 [ 74.858973][ T4431] vfs_get_tree+0x88/0x270 [ 74.863378][ T4431] do_new_mount+0x24a/0xa40 [ 74.867949][ T4431] __se_sys_mount+0x2d6/0x3c0 [ 74.872781][ T4431] ? __x64_sys_mount+0xc0/0xc0 [ 74.877535][ T4431] ? lockdep_hardirqs_on+0x94/0x140 [ 74.882733][ T4431] ? __x64_sys_mount+0x1c/0xc0 [ 74.887574][ T4431] do_syscall_64+0x4c/0xa0 [ 74.891981][ T4431] ? clear_bhb_loop+0x60/0xb0 [ 74.896762][ T4431] ? clear_bhb_loop+0x60/0xb0 [ 74.901608][ T4431] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 74.907500][ T4431] RIP: 0033:0x7f7e02190eea [ 74.911905][ T4431] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 74.931489][ T4431] RSP: 002b:00007ffd9d2b5ee8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 74.939968][ T4431] RAX: ffffffffffffffda RBX: 00007ffd9d2b5f70 RCX: 00007f7e02190eea [ 74.948096][ T4431] RDX: 0000200000000080 RSI: 000020000001ecc0 RDI: 00007ffd9d2b5f30 [ 74.956160][ T4431] RBP: 0000200000000080 R08: 00007ffd9d2b5f70 R09: 0000000002a10000 [ 74.964111][ T4431] R10: 0000000002a10000 R11: 0000000000000246 R12: 000020000001ecc0 [ 74.972147][ T4431] R13: 00007ffd9d2b5f30 R14: 000000000001eca1 R15: 00002000000000c0 [ 74.980189][ T4431] [ 74.983201][ T4431] [ 74.985501][ T4431] The buggy address belongs to the physical page: [ 74.991898][ T4431] page:ffffea0001a51e40 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1 pfn:0x69479 [ 75.002047][ T4431] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 75.009156][ T4431] raw: 00fff00000000000 ffffea0001a51e88 ffffea0001a51e08 0000000000000000 [ 75.017821][ T4431] raw: 0000000000000001 0000000000000000 00000000ffffffff 0000000000000000 [ 75.026513][ T4431] page dumped because: kasan: bad access detected [ 75.032910][ T4431] page_owner tracks the page as freed [ 75.038272][ T4431] page last allocated via order 0, migratetype Movable, gfp_mask 0x140dca(GFP_HIGHUSER_MOVABLE|__GFP_COMP|__GFP_ZERO), pid 4269, tgid 4269 (udevd), ts 74661347601, free_ts 74711170636 [ 75.056434][ T4431] post_alloc_hook+0x173/0x1a0 [ 75.061284][ T4431] get_page_from_freelist+0x1a26/0x1ac0 [ 75.066919][ T4431] __alloc_pages+0x1df/0x4e0 [ 75.071574][ T4431] __folio_alloc+0xe/0x30 [ 75.075882][ T4431] vma_alloc_folio+0x4a3/0x900 [ 75.080635][ T4431] handle_mm_fault+0x2237/0x3e60 [ 75.085559][ T4431] do_user_addr_fault+0x51f/0xb10 [ 75.090579][ T4431] exc_page_fault+0x60/0x100 [ 75.095235][ T4431] asm_exc_page_fault+0x22/0x30 [ 75.100073][ T4431] page last free stack trace: [ 75.104733][ T4431] free_unref_page_prepare+0x8b4/0x9a0 [ 75.110281][ T4431] free_unref_page_list+0xbb/0x8e0 [ 75.115379][ T4431] release_pages+0x1f92/0x2200 [ 75.120154][ T4431] tlb_flush_mmu+0xff/0x210 [ 75.124676][ T4431] tlb_finish_mmu+0xbd/0x1c0 [ 75.129255][ T4431] unmap_region+0x272/0x2c0 [ 75.133735][ T4431] do_mas_align_munmap+0xc57/0x1220 [ 75.139190][ T4431] do_mas_munmap+0x240/0x2b0 [ 75.143760][ T4431] __vm_munmap+0x18d/0x290 [ 75.148682][ T4431] __x64_sys_munmap+0x5c/0x70 [ 75.153389][ T4431] do_syscall_64+0x4c/0xa0 [ 75.157791][ T4431] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 75.163663][ T4431] [ 75.165967][ T4431] Memory state around the buggy address: [ 75.171572][ T4431] ffff888069479380: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 75.179698][ T4431] ffff888069479400: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 75.187732][ T4431] >ffff888069479480: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 75.195854][ T4431] ^ [ 75.201576][ T4431] ffff888069479500: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 75.209628][ T4431] ffff888069479580: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 75.217792][ T4431] ================================================================== [ 75.226800][ T4431] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 75.234022][ T4431] CPU: 1 PID: 4431 Comm: syz.0.18 Not tainted syzkaller #0 [ 75.241310][ T4431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 75.251377][ T4431] Call Trace: [ 75.254776][ T4431] [ 75.257783][ T4431] dump_stack_lvl+0x168/0x22e [ 75.262475][ T4431] ? memcpy+0x3c/0x60 [ 75.266463][ T4431] ? show_regs_print_info+0x12/0x12 [ 75.271663][ T4431] ? load_image+0x3b0/0x3b0 [ 75.276174][ T4431] panic+0x2c9/0x710 [ 75.280076][ T4431] ? bpf_jit_dump+0xd0/0xd0 [ 75.284675][ T4431] ? _raw_spin_unlock_irqrestore+0xa5/0x100 [ 75.290577][ T4431] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 75.296478][ T4431] ? _raw_spin_unlock+0x40/0x40 [ 75.301332][ T4431] ? print_memory_metadata+0x314/0x400 [ 75.306804][ T4431] check_panic_on_warn+0x80/0xa0 [ 75.311834][ T4431] ? ntfs_read_folio+0x9bb/0x2980 [ 75.316870][ T4431] end_report+0x66/0x110 [ 75.321120][ T4431] kasan_report+0x118/0x140 [ 75.325628][ T4431] ? _raw_read_unlock_irqrestore+0x82/0x100 [ 75.331795][ T4431] ? ntfs_read_folio+0x9bb/0x2980 [ 75.336921][ T4431] ? ntfs_read_folio+0x9bb/0x2980 [ 75.342039][ T4431] kasan_check_range+0x27b/0x290 [ 75.346984][ T4431] memcpy+0x25/0x60 [ 75.350883][ T4431] ntfs_read_folio+0x9bb/0x2980 [ 75.355805][ T4431] ? rcu_is_watching+0x11/0xa0 [ 75.360663][ T4431] ? rcu_is_watching+0x11/0xa0 [ 75.365435][ T4431] ? ntfs_writepage+0x1650/0x1650 [ 75.370471][ T4431] ? folio_add_lru+0x316/0xd50 [ 75.375238][ T4431] ? __lock_acquire+0x7c50/0x7c50 [ 75.380268][ T4431] ? folio_put+0xd0/0xd0 [ 75.384512][ T4431] ? filemap_alloc_folio+0xdb/0x460 [ 75.389711][ T4431] filemap_read_folio+0x160/0x760 [ 75.398884][ T4431] ? folio_batch_add_and_move+0x14a/0x250 [ 75.404632][ T4431] ? ntfs_writepage+0x1650/0x1650 [ 75.409857][ T4431] ? maybe_unlock_mmap_for_io+0x140/0x140 [ 75.415587][ T4431] do_read_cache_folio+0x2a0/0x760 [ 75.421057][ T4431] ? ntfs_writepage+0x1650/0x1650 [ 75.426179][ T4431] do_read_cache_page+0x32/0x220 [ 75.431127][ T4431] load_system_files+0x15d3/0x4460 [ 75.436340][ T4431] ? ntfs_setup_allocators+0x2c0/0x2c0 [ 75.441821][ T4431] ? generate_default_upcase+0xb46/0xb90 [ 75.447463][ T4431] ntfs_fill_super+0x182a/0x2a60 [ 75.452410][ T4431] mount_bdev+0x287/0x3c0 [ 75.456749][ T4431] ? ntfs_mount+0x40/0x40 [ 75.461171][ T4431] legacy_get_tree+0xe6/0x180 [ 75.465850][ T4431] ? ntfs_rl_punch_nolock+0x1470/0x1470 [ 75.471402][ T4431] vfs_get_tree+0x88/0x270 [ 75.475818][ T4431] do_new_mount+0x24a/0xa40 [ 75.480334][ T4431] __se_sys_mount+0x2d6/0x3c0 [ 75.485012][ T4431] ? __x64_sys_mount+0xc0/0xc0 [ 75.489775][ T4431] ? lockdep_hardirqs_on+0x94/0x140 [ 75.494982][ T4431] ? __x64_sys_mount+0x1c/0xc0 [ 75.499749][ T4431] do_syscall_64+0x4c/0xa0 [ 75.504284][ T4431] ? clear_bhb_loop+0x60/0xb0 [ 75.508986][ T4431] ? clear_bhb_loop+0x60/0xb0 [ 75.513694][ T4431] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 75.519594][ T4431] RIP: 0033:0x7f7e02190eea [ 75.524013][ T4431] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.543714][ T4431] RSP: 002b:00007ffd9d2b5ee8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 75.552135][ T4431] RAX: ffffffffffffffda RBX: 00007ffd9d2b5f70 RCX: 00007f7e02190eea [ 75.560109][ T4431] RDX: 0000200000000080 RSI: 000020000001ecc0 RDI: 00007ffd9d2b5f30 [ 75.568207][ T4431] RBP: 0000200000000080 R08: 00007ffd9d2b5f70 R09: 0000000002a10000 [ 75.576180][ T4431] R10: 0000000002a10000 R11: 0000000000000246 R12: 000020000001ecc0 [ 75.584161][ T4431] R13: 00007ffd9d2b5f30 R14: 000000000001eca1 R15: 00002000000000c0 [ 75.592147][ T4431] [ 75.595404][ T4431] Kernel Offset: disabled [ 75.599721][ T4431] Rebooting in 86400 seconds..