DUID 00:04:ac:9c:ad:00:31:f9:28:39:b7:1b:44:5e:fd:4e:f2:12
forked to background, child pid 3915
[ 47.826371][ T3916] 8021q: adding VLAN 0 to HW filter on device bond0
[ 47.836520][ T3916] eql: remember to turn off Van-Jacobson compression on your slave devices
Starting sshd: OK
syzkaller
Warning: Permanently added '10.128.1.43' (ED25519) to the list of known hosts.
executing program
syzkaller login: [ 76.274674][ T4251] loop0: detected capacity change from 0 to 4096
[ 76.286969][ T4251] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512)
[ 76.380705][ T4251] loop0: detected capacity change from 4096 to 0
[ 76.390174][ T4251] ==================================================================
[ 76.398281][ T4251] BUG: KASAN: slab-out-of-bounds in ntfs_set_ea+0x1394/0x1660
[ 76.405815][ T4251] Write of size 4 at addr ffff8880246c4a1c by task syz-executor521/4251
[ 76.414251][ T4251]
[ 76.416587][ T4251] CPU: 1 PID: 4251 Comm: syz-executor521 Not tainted 6.1.117-syzkaller #0
[ 76.425089][ T4251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024
[ 76.435151][ T4251] Call Trace:
[ 76.438428][ T4251]
[ 76.441360][ T4251] dump_stack_lvl+0x1e3/0x2cb
[ 76.446132][ T4251] ? nf_tcp_handle_invalid+0x642/0x642
[ 76.451591][ T4251] ? panic+0x764/0x764
[ 76.455662][ T4251] ? _printk+0xd1/0x111
[ 76.459815][ T4251] ? __virt_addr_valid+0x17f/0x530
[ 76.464929][ T4251] ? __virt_addr_valid+0x17f/0x530
[ 76.470050][ T4251] print_report+0x15f/0x4f0
[ 76.474589][ T4251] ? __virt_addr_valid+0x17f/0x530
[ 76.479724][ T4251] ? __virt_addr_valid+0x17f/0x530
[ 76.484840][ T4251] ? __virt_addr_valid+0x45b/0x530
[ 76.489959][ T4251] ? __phys_addr+0xb6/0x170
[ 76.494485][ T4251] ? ntfs_set_ea+0x1394/0x1660
[ 76.499273][ T4251] kasan_report+0x136/0x160
[ 76.503794][ T4251] ? ntfs_set_ea+0x1394/0x1660
[ 76.508575][ T4251] ntfs_set_ea+0x1394/0x1660
[ 76.513184][ T4251] ? trace_raw_output_contention_end+0xd0/0xd0
[ 76.519354][ T4251] ? ntfs_save_wsl_perm+0x490/0x490
[ 76.524568][ T4251] ? ntfs_save_wsl_perm+0x86/0x490
[ 76.529689][ T4251] ? mutex_lock_nested+0x10/0x10
[ 76.534642][ T4251] ? from_kuid+0x18d/0x6f0
[ 76.539076][ T4251] ? make_kuid+0x700/0x700
[ 76.543502][ T4251] ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[ 76.549495][ T4251] ? print_irqtrace_events+0x210/0x210
[ 76.555138][ T4251] ntfs_save_wsl_perm+0x139/0x490
[ 76.560216][ T4251] ? ntfs_listxattr+0x660/0x660
[ 76.565078][ T4251] ? in_group_or_capable+0x2c/0x50
[ 76.570211][ T4251] ? setattr_copy+0x42f/0x580
[ 76.575332][ T4251] ? ntfs_acl_chmod+0x7a/0x100
[ 76.580152][ T4251] ntfs3_setattr+0x961/0xb70
[ 76.584782][ T4251] ? current_time+0x1fd/0x300
[ 76.589503][ T4251] ? put_page+0x250/0x250
[ 76.593944][ T4251] ? common_perm_cond+0x31b/0x3f0
[ 76.598990][ T4251] ? bpf_lsm_inode_setattr+0x5/0x10
[ 76.604223][ T4251] ? put_page+0x250/0x250
[ 76.608570][ T4251] notify_change+0xce3/0xfc0
[ 76.613174][ T4251] chmod_common+0x2a7/0x4b0
[ 76.617695][ T4251] ? __ia32_sys_chroot+0x40/0x40
[ 76.622646][ T4251] ? kasan_quarantine_put+0xd4/0x220
[ 76.627950][ T4251] ? lockdep_hardirqs_on+0x94/0x130
[ 76.633195][ T4251] ? user_path_at_empty+0x48/0x60
[ 76.638252][ T4251] __x64_sys_fchmodat+0x117/0x1a0
[ 76.643305][ T4251] ? __ia32_sys_fchmod+0x150/0x150
[ 76.648424][ T4251] ? syscall_enter_from_user_mode+0x2e/0x230
[ 76.654410][ T4251] ? lockdep_hardirqs_on+0x94/0x130
[ 76.659610][ T4251] ? syscall_enter_from_user_mode+0x2e/0x230
[ 76.665594][ T4251] do_syscall_64+0x3b/0xb0
[ 76.670019][ T4251] ? clear_bhb_loop+0x45/0xa0
[ 76.674729][ T4251] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 76.680636][ T4251] RIP: 0033:0x7ff43de64b79
[ 76.685071][ T4251] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 76.704701][ T4251] RSP: 002b:00007fffb9026678 EFLAGS: 00000246 ORIG_RAX: 000000000000010c
[ 76.713122][ T4251] RAX: ffffffffffffffda RBX: 0030656c69662f2e RCX: 00007ff43de64b79
[ 76.721095][ T4251] RDX: 0000000000000141 RSI: 0000000020000200 RDI: 00000000ffffff9c
[ 76.729081][ T4251] RBP: 00007ff43def7610 R08: 00007fffb9026848 R09: 00007fffb9026848
[ 76.737073][ T4251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 76.745049][ T4251] R13: 00007fffb9026838 R14: 0000000000000001 R15: 0000000000000001
[ 76.753056][ T4251]
[ 76.756091][ T4251]
[ 76.758414][ T4251] Allocated by task 3975:
[ 76.762746][ T4251] kasan_set_track+0x4b/0x70
[ 76.767352][ T4251] __kasan_slab_alloc+0x65/0x70
[ 76.772211][ T4251] slab_post_alloc_hook+0x52/0x3a0
[ 76.777338][ T4251] kmem_cache_alloc+0x10c/0x2d0
[ 76.782196][ T4251] vm_area_dup+0x23/0x1b0
[ 76.786532][ T4251] __split_vma+0xcc/0x530
[ 76.790872][ T4251] do_mas_align_munmap+0x953/0x15f0
[ 76.796074][ T4251] do_mas_munmap+0x246/0x2b0
[ 76.800664][ T4251] mmap_region+0x8e6/0x1fa0
[ 76.805181][ T4251] do_mmap+0x8c5/0xf60
[ 76.809253][ T4251] vm_mmap_pgoff+0x1ca/0x2d0
[ 76.813849][ T4251] ksys_mmap_pgoff+0x4f5/0x6d0
[ 76.818624][ T4251] do_syscall_64+0x3b/0xb0
[ 76.823122][ T4251] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 76.829089][ T4251]
[ 76.831416][ T4251] Freed by task 3975:
[ 76.835389][ T4251] kasan_set_track+0x4b/0x70
[ 76.839996][ T4251] kasan_save_free_info+0x27/0x40
[ 76.845033][ T4251] ____kasan_slab_free+0xd6/0x120
[ 76.850061][ T4251] kmem_cache_free+0x292/0x510
[ 76.854839][ T4251] do_mas_align_munmap+0x1290/0x15f0
[ 76.860125][ T4251] do_mas_munmap+0x246/0x2b0
[ 76.864711][ T4251] mmap_region+0x8e6/0x1fa0
[ 76.869223][ T4251] do_mmap+0x8c5/0xf60
[ 76.873297][ T4251] vm_mmap_pgoff+0x1ca/0x2d0
[ 76.877896][ T4251] ksys_mmap_pgoff+0x4f5/0x6d0
[ 76.882676][ T4251] do_syscall_64+0x3b/0xb0
[ 76.887177][ T4251] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 76.893078][ T4251]
[ 76.895422][ T4251] The buggy address belongs to the object at ffff8880246c4948
[ 76.895422][ T4251] which belongs to the cache vm_area_struct of size 152
[ 76.909821][ T4251] The buggy address is located 60 bytes to the right of
[ 76.909821][ T4251] 152-byte region [ffff8880246c4948, ffff8880246c49e0)
[ 76.923614][ T4251]
[ 76.925939][ T4251] The buggy address belongs to the physical page:
[ 76.932352][ T4251] page:ffffea000091b100 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x246c4
[ 76.942506][ T4251] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff)
[ 76.950072][ T4251] raw: 00fff00000000200 0000000000000000 dead000000000122 ffff888140008b40
[ 76.958674][ T4251] raw: 0000000000000000 0000000000120012 00000001ffffffff 0000000000000000
[ 76.967339][ T4251] page dumped because: kasan: bad access detected
[ 76.973795][ T4251] page_owner tracks the page as allocated
[ 76.979501][ T4251] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 3975, tgid 3975 (dhcpcd-run-hook), ts 47486671894, free_ts 47409212743
[ 76.998192][ T4251] post_alloc_hook+0x18d/0x1b0
[ 77.002963][ T4251] get_page_from_freelist+0x3731/0x38d0
[ 77.008514][ T4251] __alloc_pages+0x28d/0x770
[ 77.013133][ T4251] alloc_slab_page+0x6a/0x150
[ 77.017819][ T4251] new_slab+0x84/0x2d0
[ 77.021888][ T4251] ___slab_alloc+0xc20/0x1270
[ 77.026564][ T4251] kmem_cache_alloc+0x1a5/0x2d0
[ 77.031416][ T4251] vm_area_dup+0x23/0x1b0
[ 77.035752][ T4251] __split_vma+0xcc/0x530
[ 77.040082][ T4251] do_mas_align_munmap+0x953/0x15f0
[ 77.045276][ T4251] do_mas_munmap+0x246/0x2b0
[ 77.049858][ T4251] mmap_region+0x8e6/0x1fa0
[ 77.054370][ T4251] do_mmap+0x8c5/0xf60
[ 77.058441][ T4251] vm_mmap_pgoff+0x1ca/0x2d0
[ 77.063068][ T4251] ksys_mmap_pgoff+0x4f5/0x6d0
[ 77.067851][ T4251] do_syscall_64+0x3b/0xb0
[ 77.072265][ T4251] page last free stack trace:
[ 77.076929][ T4251] free_unref_page_prepare+0xf63/0x1120
[ 77.082473][ T4251] free_unref_page_list+0x663/0x900
[ 77.087692][ T4251] release_pages+0x2836/0x2b40
[ 77.092617][ T4251] tlb_flush_mmu+0xfc/0x210
[ 77.097124][ T4251] tlb_finish_mmu+0xce/0x1f0
[ 77.101720][ T4251] exit_mmap+0x3c3/0x9f0
[ 77.105966][ T4251] __mmput+0x115/0x3c0
[ 77.110034][ T4251] exec_mmap+0x4fa/0x5b0
[ 77.114283][ T4251] begin_new_exec+0xaf9/0x1dd0
[ 77.119041][ T4251] load_elf_binary+0x955/0x2720
[ 77.123895][ T4251] bprm_execve+0x96a/0x18a0
[ 77.128392][ T4251] do_execveat_common+0x580/0x720
[ 77.133414][ T4251] __x64_sys_execve+0x8e/0xa0
[ 77.138086][ T4251] do_syscall_64+0x3b/0xb0
[ 77.142497][ T4251] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 77.148393][ T4251]
[ 77.150747][ T4251] Memory state around the buggy address:
[ 77.156367][ T4251] ffff8880246c4900: fb fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb
[ 77.164435][ T4251] ffff8880246c4980: fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc
[ 77.172514][ T4251] >ffff8880246c4a00: fc fc fc fc fa fb fb fb fb fb fb fb fb fb fb fb
[ 77.180571][ T4251] ^
[ 77.185412][ T4251] ffff8880246c4a80: fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc fa
[ 77.193487][ T4251] ffff8880246c4b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 77.201541][ T4251] ==================================================================
[ 77.209884][ T4251] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 77.217104][ T4251] CPU: 1 PID: 4251 Comm: syz-executor521 Not tainted 6.1.117-syzkaller #0
[ 77.225788][ T4251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024
[ 77.235853][ T4251] Call Trace:
[ 77.239137][ T4251]
[ 77.242073][ T4251] dump_stack_lvl+0x1e3/0x2cb
[ 77.246760][ T4251] ? nf_tcp_handle_invalid+0x642/0x642
[ 77.252224][ T4251] ? panic+0x764/0x764
[ 77.256304][ T4251] ? preempt_schedule_common+0xa6/0xd0
[ 77.261772][ T4251] ? vscnprintf+0x59/0x80
[ 77.266198][ T4251] panic+0x318/0x764
[ 77.270104][ T4251] ? check_panic_on_warn+0x1d/0xa0
[ 77.275223][ T4251] ? memcpy_page_flushcache+0xfc/0xfc
[ 77.280631][ T4251] ? _raw_spin_unlock_irqrestore+0x128/0x130
[ 77.286627][ T4251] ? _raw_spin_unlock+0x40/0x40
[ 77.291486][ T4251] ? print_report+0x4a3/0x4f0
[ 77.296168][ T4251] check_panic_on_warn+0x7e/0xa0
[ 77.301204][ T4251] ? ntfs_set_ea+0x1394/0x1660
[ 77.305983][ T4251] end_report+0x66/0x110
[ 77.310230][ T4251] kasan_report+0x143/0x160
[ 77.314740][ T4251] ? ntfs_set_ea+0x1394/0x1660
[ 77.319527][ T4251] ntfs_set_ea+0x1394/0x1660
[ 77.324132][ T4251] ? trace_raw_output_contention_end+0xd0/0xd0
[ 77.330303][ T4251] ? ntfs_save_wsl_perm+0x490/0x490
[ 77.335560][ T4251] ? ntfs_save_wsl_perm+0x86/0x490
[ 77.340684][ T4251] ? mutex_lock_nested+0x10/0x10
[ 77.345634][ T4251] ? from_kuid+0x18d/0x6f0
[ 77.350097][ T4251] ? make_kuid+0x700/0x700
[ 77.354523][ T4251] ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[ 77.360528][ T4251] ? print_irqtrace_events+0x210/0x210
[ 77.366003][ T4251] ntfs_save_wsl_perm+0x139/0x490
[ 77.371046][ T4251] ? ntfs_listxattr+0x660/0x660
[ 77.375995][ T4251] ? in_group_or_capable+0x2c/0x50
[ 77.381120][ T4251] ? setattr_copy+0x42f/0x580
[ 77.385898][ T4251] ? ntfs_acl_chmod+0x7a/0x100
[ 77.390785][ T4251] ntfs3_setattr+0x961/0xb70
[ 77.395394][ T4251] ? current_time+0x1fd/0x300
[ 77.400089][ T4251] ? put_page+0x250/0x250
[ 77.404474][ T4251] ? common_perm_cond+0x31b/0x3f0
[ 77.409512][ T4251] ? bpf_lsm_inode_setattr+0x5/0x10
[ 77.414725][ T4251] ? put_page+0x250/0x250
[ 77.419072][ T4251] notify_change+0xce3/0xfc0
[ 77.423669][ T4251] chmod_common+0x2a7/0x4b0
[ 77.428193][ T4251] ? __ia32_sys_chroot+0x40/0x40
[ 77.433147][ T4251] ? kasan_quarantine_put+0xd4/0x220
[ 77.438439][ T4251] ? lockdep_hardirqs_on+0x94/0x130
[ 77.443655][ T4251] ? user_path_at_empty+0x48/0x60
[ 77.448727][ T4251] __x64_sys_fchmodat+0x117/0x1a0
[ 77.453768][ T4251] ? __ia32_sys_fchmod+0x150/0x150
[ 77.458894][ T4251] ? syscall_enter_from_user_mode+0x2e/0x230
[ 77.464894][ T4251] ? lockdep_hardirqs_on+0x94/0x130
[ 77.470102][ T4251] ? syscall_enter_from_user_mode+0x2e/0x230
[ 77.476178][ T4251] do_syscall_64+0x3b/0xb0
[ 77.480597][ T4251] ? clear_bhb_loop+0x45/0xa0
[ 77.485277][ T4251] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 77.491208][ T4251] RIP: 0033:0x7ff43de64b79
[ 77.495642][ T4251] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 77.515256][ T4251] RSP: 002b:00007fffb9026678 EFLAGS: 00000246 ORIG_RAX: 000000000000010c
[ 77.523694][ T4251] RAX: ffffffffffffffda RBX: 0030656c69662f2e RCX: 00007ff43de64b79
[ 77.531720][ T4251] RDX: 0000000000000141 RSI: 0000000020000200 RDI: 00000000ffffff9c
[ 77.540312][ T4251] RBP: 00007ff43def7610 R08: 00007fffb9026848 R09: 00007fffb9026848
[ 77.548289][ T4251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 77.556263][ T4251] R13: 00007fffb9026838 R14: 0000000000000001 R15: 0000000000000001
[ 77.564245][ T4251]
[ 77.567558][ T4251] Kernel Offset: disabled
[ 77.571908][ T4251] Rebooting in 86400 seconds..