Warning: Permanently added '10.128.1.88' (ED25519) to the list of known hosts. Setting up swapspace version 1, size = 127995904 bytes [ 72.142420][ T4244] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 72.169268][ T4248] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 72.177113][ T4248] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 72.185142][ T4248] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 72.193174][ T4248] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 72.201269][ T4248] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 72.208594][ T4248] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 72.302342][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.317915][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.329346][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 72.340716][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 executing program [ 72.349084][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.357713][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.422581][ T4253] loop0: detected capacity change from 0 to 4096 [ 72.433081][ T4253] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 72.514803][ T4253] loop0: detected capacity change from 4096 to 0 [ 72.525151][ T4254] ================================================================== [ 72.533260][ T4254] BUG: KASAN: slab-out-of-bounds in ntfs_set_ea+0x1394/0x1660 [ 72.540785][ T4254] Write of size 4 at addr ffff888027d2f71c by task syz-executor527/4254 [ 72.549116][ T4254] [ 72.551450][ T4254] CPU: 1 PID: 4254 Comm: syz-executor527 Not tainted 6.1.117-syzkaller #0 [ 72.560049][ T4254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 72.570114][ T4254] Call Trace: [ 72.573388][ T4254] [ 72.576364][ T4254] dump_stack_lvl+0x1e3/0x2cb [ 72.581099][ T4254] ? nf_tcp_handle_invalid+0x642/0x642 [ 72.586589][ T4254] ? panic+0x764/0x764 [ 72.590659][ T4254] ? _printk+0xd1/0x111 [ 72.594812][ T4254] ? __virt_addr_valid+0x17f/0x530 [ 72.599923][ T4254] ? __virt_addr_valid+0x17f/0x530 [ 72.605035][ T4254] print_report+0x15f/0x4f0 [ 72.609537][ T4254] ? __virt_addr_valid+0x17f/0x530 [ 72.614648][ T4254] ? __virt_addr_valid+0x17f/0x530 [ 72.619783][ T4254] ? __virt_addr_valid+0x45b/0x530 [ 72.624894][ T4254] ? __phys_addr+0xb6/0x170 [ 72.629416][ T4254] ? ntfs_set_ea+0x1394/0x1660 [ 72.634182][ T4254] kasan_report+0x136/0x160 [ 72.638710][ T4254] ? ntfs_set_ea+0x1394/0x1660 [ 72.643480][ T4254] ntfs_set_ea+0x1394/0x1660 [ 72.648079][ T4254] ? trace_raw_output_contention_end+0xd0/0xd0 [ 72.654240][ T4254] ? ntfs_save_wsl_perm+0x490/0x490 [ 72.659440][ T4254] ? ntfs_save_wsl_perm+0x86/0x490 [ 72.664561][ T4254] ? mutex_lock_nested+0x10/0x10 [ 72.669493][ T4254] ? from_kuid+0x18d/0x6f0 [ 72.673921][ T4254] ? make_kuid+0x700/0x700 [ 72.678363][ T4254] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 72.684401][ T4254] ? print_irqtrace_events+0x210/0x210 [ 72.689885][ T4254] ntfs_save_wsl_perm+0x139/0x490 [ 72.694922][ T4254] ? ntfs_listxattr+0x660/0x660 [ 72.699805][ T4254] ? in_group_or_capable+0x2c/0x50 [ 72.704925][ T4254] ? setattr_copy+0x42f/0x580 [ 72.709604][ T4254] ? ntfs_acl_chmod+0x7a/0x100 [ 72.714389][ T4254] ntfs3_setattr+0x961/0xb70 [ 72.719012][ T4254] ? current_time+0x1fd/0x300 [ 72.723779][ T4254] ? put_page+0x250/0x250 [ 72.728152][ T4254] ? common_perm_cond+0x31b/0x3f0 [ 72.733185][ T4254] ? bpf_lsm_inode_setattr+0x5/0x10 [ 72.738401][ T4254] ? put_page+0x250/0x250 [ 72.742764][ T4254] notify_change+0xce3/0xfc0 [ 72.747377][ T4254] chmod_common+0x2a7/0x4b0 [ 72.751893][ T4254] ? __ia32_sys_chroot+0x40/0x40 [ 72.756835][ T4254] ? kasan_quarantine_put+0xd4/0x220 [ 72.762131][ T4254] ? lockdep_hardirqs_on+0x94/0x130 [ 72.767433][ T4254] ? user_path_at_empty+0x48/0x60 [ 72.772470][ T4254] __x64_sys_fchmodat+0x117/0x1a0 [ 72.777540][ T4254] ? __ia32_sys_fchmod+0x150/0x150 [ 72.782672][ T4254] ? syscall_enter_from_user_mode+0x2e/0x230 [ 72.788684][ T4254] ? lockdep_hardirqs_on+0x94/0x130 [ 72.793892][ T4254] ? syscall_enter_from_user_mode+0x2e/0x230 [ 72.799875][ T4254] do_syscall_64+0x3b/0xb0 [ 72.804287][ T4254] ? clear_bhb_loop+0x45/0xa0 [ 72.808978][ T4254] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 72.814875][ T4254] RIP: 0033:0x7fd767ffa1e9 [ 72.819297][ T4254] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 1f 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 72.839356][ T4254] RSP: 002b:00007fd767789168 EFLAGS: 00000246 ORIG_RAX: 000000000000010c [ 72.847774][ T4254] RAX: ffffffffffffffda RBX: 00007fd76809b6f8 RCX: 00007fd767ffa1e9 [ 72.855750][ T4254] RDX: 0000000000000141 RSI: 0000000020000200 RDI: 00000000ffffff9c [ 72.863719][ T4254] RBP: 00007fd76809b6f0 R08: 00007ffe7722bd17 R09: 0000000000000000 [ 72.871694][ T4254] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd76809b6fc [ 72.879662][ T4254] R13: 000000000000006e R14: 00007ffe7722bc30 R15: 00007ffe7722bd18 [ 72.887748][ T4254] [ 72.890766][ T4254] [ 72.893084][ T4254] Allocated by task 1: [ 72.897137][ T4254] kasan_set_track+0x4b/0x70 [ 72.901745][ T4254] __kasan_slab_alloc+0x65/0x70 [ 72.906629][ T4254] slab_post_alloc_hook+0x52/0x3a0 [ 72.911743][ T4254] kmem_cache_alloc+0x10c/0x2d0 [ 72.916601][ T4254] __kernfs_new_node+0xd4/0x870 [ 72.921465][ T4254] kernfs_new_node+0x136/0x230 [ 72.926226][ T4254] __kernfs_create_file+0x45/0x2e0 [ 72.931339][ T4254] sysfs_add_file_mode_ns+0x246/0x300 [ 72.936713][ T4254] sysfs_create_file_ns+0x193/0x2a0 [ 72.941915][ T4254] usb_add_hcd+0x9e2/0x1250 [ 72.946424][ T4254] dummy_hcd_probe+0x154/0x2a0 [ 72.951181][ T4254] platform_probe+0x131/0x1b0 [ 72.955849][ T4254] really_probe+0x2ab/0xcb0 [ 72.960352][ T4254] __driver_probe_device+0x1a2/0x3d0 [ 72.965633][ T4254] driver_probe_device+0x50/0x420 [ 72.970679][ T4254] __device_attach_driver+0x2cf/0x510 [ 72.976057][ T4254] bus_for_each_drv+0x183/0x200 [ 72.980904][ T4254] __device_attach+0x359/0x570 [ 72.985684][ T4254] bus_probe_device+0xba/0x1e0 [ 72.990468][ T4254] device_add+0xb48/0xfd0 [ 72.994820][ T4254] platform_device_add+0x46e/0x7d0 [ 72.999947][ T4254] dummy_hcd_init+0x83b/0x1069 [ 73.004722][ T4254] do_one_initcall+0x265/0x8f0 [ 73.009498][ T4254] do_initcall_level+0x157/0x207 [ 73.014437][ T4254] do_initcalls+0x49/0x86 [ 73.018766][ T4254] kernel_init_freeable+0x45c/0x60f [ 73.023958][ T4254] kernel_init+0x19/0x290 [ 73.028302][ T4254] ret_from_fork+0x1f/0x30 [ 73.032715][ T4254] [ 73.035035][ T4254] The buggy address belongs to the object at ffff888027d2f658 [ 73.035035][ T4254] which belongs to the cache kernfs_node_cache of size 168 [ 73.049629][ T4254] The buggy address is located 28 bytes to the right of [ 73.049629][ T4254] 168-byte region [ffff888027d2f658, ffff888027d2f700) [ 73.063338][ T4254] [ 73.065747][ T4254] The buggy address belongs to the physical page: [ 73.072157][ T4254] page:ffffea00009f4bc0 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x27d2f [ 73.082303][ T4254] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 73.089861][ T4254] raw: 00fff00000000200 0000000000000000 dead000000000122 ffff888140009c80 [ 73.098442][ T4254] raw: 0000000000000000 0000000000110011 00000001ffffffff 0000000000000000 [ 73.107054][ T4254] page dumped because: kasan: bad access detected [ 73.113474][ T4254] page_owner tracks the page as allocated [ 73.119187][ T4254] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 1, tgid 1 (swapper/0), ts 10685540547, free_ts 10682585233 [ 73.136751][ T4254] post_alloc_hook+0x18d/0x1b0 [ 73.141532][ T4254] get_page_from_freelist+0x3731/0x38d0 [ 73.147077][ T4254] __alloc_pages+0x28d/0x770 [ 73.151681][ T4254] alloc_page_interleave+0x22/0x1c0 [ 73.156871][ T4254] alloc_slab_page+0x6a/0x150 [ 73.161560][ T4254] new_slab+0x84/0x2d0 [ 73.165642][ T4254] ___slab_alloc+0xc20/0x1270 [ 73.170346][ T4254] kmem_cache_alloc+0x1a5/0x2d0 [ 73.175195][ T4254] __kernfs_new_node+0xd4/0x870 [ 73.180046][ T4254] kernfs_new_node+0x136/0x230 [ 73.184918][ T4254] __kernfs_create_file+0x45/0x2e0 [ 73.190068][ T4254] sysfs_add_file_mode_ns+0x246/0x300 [ 73.195461][ T4254] sysfs_merge_group+0x1f9/0x440 [ 73.200395][ T4254] dpm_sysfs_add+0xcf/0x270 [ 73.204912][ T4254] device_add+0x702/0xfd0 [ 73.209233][ T4254] device_create+0x253/0x2e0 [ 73.213820][ T4254] page last free stack trace: [ 73.218496][ T4254] free_unref_page_prepare+0xf63/0x1120 [ 73.224040][ T4254] free_unref_page+0x33/0x3e0 [ 73.228709][ T4254] __mmdrop+0xb2/0x470 [ 73.232779][ T4254] free_bprm+0x135/0x2f0 [ 73.237015][ T4254] kernel_execve+0x8f1/0xa10 [ 73.241595][ T4254] call_usermodehelper_exec_async+0x22f/0x370 [ 73.247665][ T4254] ret_from_fork+0x1f/0x30 [ 73.252082][ T4254] [ 73.254396][ T4254] Memory state around the buggy address: [ 73.260015][ T4254] ffff888027d2f600: 00 00 00 fc fc fc fc fc fc fc fc 00 00 00 00 00 [ 73.268068][ T4254] ffff888027d2f680: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 73.276120][ T4254] >ffff888027d2f700: fc fc fc fc fc fc fc fc 00 00 00 00 00 00 00 00 [ 73.284180][ T4254] ^ [ 73.289034][ T4254] ffff888027d2f780: 00 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc [ 73.297121][ T4254] ffff888027d2f800: fc fc fc fc fc 00 00 00 00 00 00 00 00 00 00 00 [ 73.305523][ T4254] ================================================================== [ 73.314521][ T4254] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 73.321740][ T4254] CPU: 1 PID: 4254 Comm: syz-executor527 Not tainted 6.1.117-syzkaller #0 [ 73.330247][ T4254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 73.340867][ T4254] Call Trace: [ 73.344146][ T4254] [ 73.347078][ T4254] dump_stack_lvl+0x1e3/0x2cb [ 73.351763][ T4254] ? nf_tcp_handle_invalid+0x642/0x642 [ 73.357223][ T4254] ? panic+0x764/0x764 [ 73.361295][ T4254] ? preempt_schedule_common+0xa6/0xd0 [ 73.366763][ T4254] ? vscnprintf+0x59/0x80 [ 73.371097][ T4254] panic+0x318/0x764 [ 73.374997][ T4254] ? check_panic_on_warn+0x1d/0xa0 [ 73.380115][ T4254] ? memcpy_page_flushcache+0xfc/0xfc [ 73.385493][ T4254] ? _raw_spin_unlock_irqrestore+0x128/0x130 [ 73.391505][ T4254] ? _raw_spin_unlock+0x40/0x40 [ 73.396360][ T4254] ? print_report+0x4a3/0x4f0 [ 73.401040][ T4254] check_panic_on_warn+0x7e/0xa0 [ 73.406006][ T4254] ? ntfs_set_ea+0x1394/0x1660 [ 73.410782][ T4254] end_report+0x66/0x110 [ 73.415030][ T4254] kasan_report+0x143/0x160 [ 73.419537][ T4254] ? ntfs_set_ea+0x1394/0x1660 [ 73.424326][ T4254] ntfs_set_ea+0x1394/0x1660 [ 73.429011][ T4254] ? trace_raw_output_contention_end+0xd0/0xd0 [ 73.435177][ T4254] ? ntfs_save_wsl_perm+0x490/0x490 [ 73.440385][ T4254] ? ntfs_save_wsl_perm+0x86/0x490 [ 73.445502][ T4254] ? mutex_lock_nested+0x10/0x10 [ 73.450440][ T4254] ? from_kuid+0x18d/0x6f0 [ 73.454859][ T4254] ? make_kuid+0x700/0x700 [ 73.459277][ T4254] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 73.465265][ T4254] ? print_irqtrace_events+0x210/0x210 [ 73.470739][ T4254] ntfs_save_wsl_perm+0x139/0x490 [ 73.475773][ T4254] ? ntfs_listxattr+0x660/0x660 [ 73.480633][ T4254] ? in_group_or_capable+0x2c/0x50 [ 73.485761][ T4254] ? setattr_copy+0x42f/0x580 [ 73.490444][ T4254] ? ntfs_acl_chmod+0x7a/0x100 [ 73.495211][ T4254] ntfs3_setattr+0x961/0xb70 [ 73.499817][ T4254] ? current_time+0x1fd/0x300 [ 73.504502][ T4254] ? put_page+0x250/0x250 [ 73.508840][ T4254] ? common_perm_cond+0x31b/0x3f0 [ 73.513878][ T4254] ? bpf_lsm_inode_setattr+0x5/0x10 [ 73.519080][ T4254] ? put_page+0x250/0x250 [ 73.523421][ T4254] notify_change+0xce3/0xfc0 [ 73.528015][ T4254] chmod_common+0x2a7/0x4b0 [ 73.532554][ T4254] ? __ia32_sys_chroot+0x40/0x40 [ 73.537508][ T4254] ? kasan_quarantine_put+0xd4/0x220 [ 73.542800][ T4254] ? lockdep_hardirqs_on+0x94/0x130 [ 73.548012][ T4254] ? user_path_at_empty+0x48/0x60 [ 73.553047][ T4254] __x64_sys_fchmodat+0x117/0x1a0 [ 73.558243][ T4254] ? __ia32_sys_fchmod+0x150/0x150 [ 73.563363][ T4254] ? syscall_enter_from_user_mode+0x2e/0x230 [ 73.569349][ T4254] ? lockdep_hardirqs_on+0x94/0x130 [ 73.574555][ T4254] ? syscall_enter_from_user_mode+0x2e/0x230 [ 73.580545][ T4254] do_syscall_64+0x3b/0xb0 [ 73.584964][ T4254] ? clear_bhb_loop+0x45/0xa0 [ 73.589643][ T4254] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 73.595558][ T4254] RIP: 0033:0x7fd767ffa1e9 [ 73.599975][ T4254] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 1f 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 73.619584][ T4254] RSP: 002b:00007fd767789168 EFLAGS: 00000246 ORIG_RAX: 000000000000010c [ 73.628000][ T4254] RAX: ffffffffffffffda RBX: 00007fd76809b6f8 RCX: 00007fd767ffa1e9 [ 73.635973][ T4254] RDX: 0000000000000141 RSI: 0000000020000200 RDI: 00000000ffffff9c [ 73.643965][ T4254] RBP: 00007fd76809b6f0 R08: 00007ffe7722bd17 R09: 0000000000000000 [ 73.651945][ T4254] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd76809b6fc [ 73.659917][ T4254] R13: 000000000000006e R14: 00007ffe7722bc30 R15: 00007ffe7722bd18 [ 73.667986][ T4254] [ 73.671344][ T4254] Kernel Offset: disabled [ 73.675672][ T4254] Rebooting in 86400 seconds..