Warning: Permanently added '10.128.0.242' (ED25519) to the list of known hosts. Setting up swapspace version 1, size = 127995904 bytes [ 37.783975][ T4221] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 37.855029][ T4225] chnl_net:caif_netlink_parms(): no params data found [ 37.887616][ T4225] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.889768][ T4225] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.893148][ T4225] device bridge_slave_0 entered promiscuous mode [ 37.897492][ T4225] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.899619][ T4225] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.902032][ T4225] device bridge_slave_1 entered promiscuous mode [ 37.914981][ T4225] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.919275][ T4225] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.933039][ T4225] team0: Port device team_slave_0 added [ 37.936200][ T4225] team0: Port device team_slave_1 added [ 37.948333][ T4225] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.950328][ T4225] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.957582][ T4225] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.962002][ T4225] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.963927][ T4225] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.972205][ T4225] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.048381][ T4225] device hsr_slave_0 entered promiscuous mode [ 38.086652][ T4225] device hsr_slave_1 entered promiscuous mode [ 38.189307][ T4225] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 38.228657][ T4225] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 38.268948][ T4225] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 38.308911][ T4225] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 38.371245][ T4225] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.373250][ T4225] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.375560][ T4225] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.377564][ T4225] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.413857][ T4225] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.421313][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 38.425420][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.430520][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.433324][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 38.440661][ T4225] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.448549][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 38.450840][ T22] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.452742][ T22] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.454947][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 38.458639][ T22] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.460533][ T22] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.473972][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 38.477773][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 38.487963][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 38.490817][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 38.497188][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 38.502224][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 38.515073][ T4225] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.518362][ T1510] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 38.520426][ T1510] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 38.531988][ T1510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 38.544669][ T4225] device veth0_vlan entered promiscuous mode [ 38.548283][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 38.551201][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 38.553843][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 38.560910][ T4225] device veth1_vlan entered promiscuous mode [ 38.575596][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 38.578816][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 38.581637][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 38.586469][ T4225] device veth0_macvtap entered promiscuous mode [ 38.590827][ T4225] device veth1_macvtap entered promiscuous mode [ 38.603225][ T4225] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.605393][ T1510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 38.610157][ T1510] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 38.615818][ T4225] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.620162][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 38.623534][ T4225] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.625891][ T4225] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.628396][ T4225] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.630644][ T4225] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.672536][ T122] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.674594][ T122] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.677753][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 38.692302][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.694531][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.697856][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready executing program [ 38.731784][ T4225] loop0: detected capacity change from 0 to 4096 [ 38.734770][ T4225] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 38.760247][ T4225] ntfs: volume version 3.1. [ 38.767064][ T4225] ================================================================== [ 38.769328][ T4225] BUG: KASAN: use-after-free in ntfs_perform_write+0x4288/0x6ef4 [ 38.771450][ T4225] Write of size 1 at addr ffff0000e2cc4170 by task syz-executor217/4225 [ 38.773792][ T4225] [ 38.774415][ T4225] CPU: 1 PID: 4225 Comm: syz-executor217 Not tainted 6.1.88-syzkaller #0 [ 38.776709][ T4225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 38.779538][ T4225] Call trace: [ 38.780423][ T4225] dump_backtrace+0x1c8/0x1f4 [ 38.781724][ T4225] show_stack+0x2c/0x3c [ 38.782858][ T4225] dump_stack_lvl+0x108/0x170 [ 38.784129][ T4225] print_report+0x174/0x4c0 [ 38.785366][ T4225] kasan_report+0xd4/0x130 [ 38.786612][ T4225] kasan_check_range+0x264/0x2a4 [ 38.787943][ T4225] memcpy+0x60/0x90 [ 38.788985][ T4225] ntfs_perform_write+0x4288/0x6ef4 [ 38.790345][ T4225] ntfs_file_write_iter+0xf78/0x17b0 [ 38.791795][ T4225] vfs_write+0x610/0x914 [ 38.792943][ T4225] ksys_write+0x15c/0x26c [ 38.794104][ T4225] __arm64_sys_write+0x7c/0x90 [ 38.795390][ T4225] invoke_syscall+0x98/0x2c0 [ 38.796690][ T4225] el0_svc_common+0x138/0x258 [ 38.798010][ T4225] do_el0_svc+0x64/0x218 [ 38.799131][ T4225] el0_svc+0x58/0x168 [ 38.800244][ T4225] el0t_64_sync_handler+0x84/0xf0 [ 38.801573][ T4225] el0t_64_sync+0x18c/0x190 [ 38.802728][ T4225] [ 38.803301][ T4225] The buggy address belongs to the physical page: [ 38.805002][ T4225] page:0000000029e56da4 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1 pfn:0x122cc4 [ 38.807834][ T4225] flags: 0x5ffe00000000000(node=0|zone=2|lastcpupid=0xfff) [ 38.809752][ T4225] raw: 05ffe00000000000 fffffc00038b3148 fffffc00038b30c8 0000000000000000 [ 38.812167][ T4225] raw: 0000000000000001 0000000000000000 00000000ffffffff 0000000000000000 [ 38.814433][ T4225] page dumped because: kasan: bad access detected [ 38.816103][ T4225] [ 38.816705][ T4225] Memory state around the buggy address: [ 38.818196][ T4225] ffff0000e2cc4000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 38.820449][ T4225] ffff0000e2cc4080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 38.822696][ T4225] >ffff0000e2cc4100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 38.824877][ T4225] ^ [ 38.827013][ T4225] ffff0000e2cc4180: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 38.829270][ T4225] ffff0000e2cc4200: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 38.831498][ T4225] ================================================================== [ 38.833926][ T4225] Disabling lock debugging due to kernel taint