forked to background, child pid 3183
no interfaces have a carrier
[ 22.250033][ T3184] 8021q: adding VLAN 0 to HW filter on device bond0
[ 22.261822][ T3184] eql: remember to turn off Van-Jacobson compression on your slave devices
Starting sshd: OK
syzkaller
Warning: Permanently added '10.128.0.242' (ECDSA) to the list of known hosts.
executing program
syzkaller login: [ 41.115552][ T3598] loop0: detected capacity change from 0 to 2316
[ 41.124402][ T3598] ntfs3: loop0: Different NTFS' sector size (2048) and media sector size (512)
[ 41.133428][ T3598] ntfs3: loop0: RAW NTFS volume: Filesystem size 0.00 Gb > volume size 0.00 Gb. Mount in read-only
[ 41.147210][ T3598] ntfs3: loop0: failed to read volume at offset 0x121800
[ 41.155439][ T3598] ==================================================================
[ 41.163496][ T3598] BUG: KASAN: use-after-free in run_unpack+0x8b7/0x970
[ 41.170377][ T3598] Read of size 1 at addr ffff8880176f0150 by task syz-executor310/3598
[ 41.178607][ T3598]
[ 41.180907][ T3598] CPU: 0 PID: 3598 Comm: syz-executor310 Not tainted 6.0.0-rc7-syzkaller-00220-gffb4d94b4314 #0
[ 41.191294][ T3598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022
[ 41.201324][ T3598] Call Trace:
[ 41.204581][ T3598]
[ 41.207497][ T3598] dump_stack_lvl+0xcd/0x134
[ 41.212076][ T3598] print_report.cold+0x2ba/0x719
[ 41.216994][ T3598] ? run_unpack+0x8b7/0x970
[ 41.221476][ T3598] kasan_report+0xb1/0x1e0
[ 41.225876][ T3598] ? run_unpack+0x8b7/0x970
[ 41.230359][ T3598] run_unpack+0x8b7/0x970
[ 41.234666][ T3598] ? run_pack+0x1100/0x1100
[ 41.239144][ T3598] ? ntfs_bread_run+0x310/0x310
[ 41.243968][ T3598] ? kfree+0x1fb/0x580
[ 41.248022][ T3598] run_unpack_ex+0xb0/0x7c0
[ 41.252517][ T3598] ? mi_enum_attr+0x34f/0x630
[ 41.257185][ T3598] ? ni_enum_attr_ex+0x281/0x400
[ 41.262109][ T3598] ? run_unpack+0x970/0x970
[ 41.266600][ T3598] ? ni_fname_type.part.0+0x1e0/0x1e0
[ 41.271961][ T3598] ? mi_read+0x27f/0x5b0
[ 41.276189][ T3598] ntfs_iget5+0xc20/0x3280
[ 41.280595][ T3598] ? ntfs_write_end+0x800/0x800
[ 41.285431][ T3598] ? ntfs_sync_fs+0x400/0x400
[ 41.290108][ T3598] ? destroy_inode+0xc4/0x1b0
[ 41.294953][ T3598] ? iput.part.0+0x55d/0x810
[ 41.299541][ T3598] ntfs_fill_super+0x1fd1/0x37f0
[ 41.304477][ T3598] ? put_ntfs+0x330/0x330
[ 41.308791][ T3598] ? set_blocksize+0x2e5/0x370
[ 41.313545][ T3598] get_tree_bdev+0x440/0x760
[ 41.318126][ T3598] ? put_ntfs+0x330/0x330
[ 41.322444][ T3598] vfs_get_tree+0x89/0x2f0
[ 41.326851][ T3598] path_mount+0x1326/0x1e20
[ 41.331347][ T3598] ? kmem_cache_free+0xeb/0x5b0
[ 41.336189][ T3598] ? finish_automount+0x960/0x960
[ 41.341201][ T3598] ? putname+0xfe/0x140
[ 41.345344][ T3598] __x64_sys_mount+0x27f/0x300
[ 41.350099][ T3598] ? copy_mnt_ns+0xae0/0xae0
[ 41.354679][ T3598] ? syscall_enter_from_user_mode+0x22/0xb0
[ 41.360566][ T3598] do_syscall_64+0x35/0xb0
[ 41.364972][ T3598] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 41.370853][ T3598] RIP: 0033:0x7f3e83fb01ba
[ 41.375255][ T3598] Code: 83 c4 08 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 41.394955][ T3598] RSP: 002b:00007ffff06182c8 EFLAGS: 00000286 ORIG_RAX: 00000000000000a5
[ 41.403357][ T3598] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f3e83fb01ba
[ 41.411313][ T3598] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007ffff06182e0
[ 41.419268][ T3598] RBP: 00007ffff06182e0 R08: 00007ffff0618320 R09: 0000555555adc2c0
[ 41.427226][ T3598] R10: 0000000000000000 R11: 0000000000000286 R12: 0000000000000004
[ 41.435185][ T3598] R13: 00007ffff0618320 R14: 000000000000000d R15: 0000000020000338
[ 41.443145][ T3598]
[ 41.446148][ T3598]
[ 41.448451][ T3598] Allocated by task 3308:
[ 41.452757][ T3598] kasan_save_stack+0x1e/0x40
[ 41.457422][ T3598] __kasan_slab_alloc+0x90/0xc0
[ 41.462260][ T3598] kmem_cache_alloc+0x267/0x3b0
[ 41.467182][ T3598] getname_flags.part.0+0x50/0x4f0
[ 41.472371][ T3598] getname+0x8e/0xd0
[ 41.476252][ T3598] do_sys_openat2+0xf5/0x4c0
[ 41.480827][ T3598] __x64_sys_openat+0x13f/0x1f0
[ 41.485662][ T3598] do_syscall_64+0x35/0xb0
[ 41.490066][ T3598] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 41.495943][ T3598]
[ 41.498250][ T3598] Freed by task 3308:
[ 41.502210][ T3598] kasan_save_stack+0x1e/0x40
[ 41.506871][ T3598] kasan_set_track+0x21/0x30
[ 41.511445][ T3598] kasan_set_free_info+0x20/0x30
[ 41.516369][ T3598] ____kasan_slab_free+0x166/0x1c0
[ 41.521464][ T3598] slab_free_freelist_hook+0x8b/0x1c0
[ 41.526819][ T3598] kmem_cache_free+0xeb/0x5b0
[ 41.531479][ T3598] putname+0xfe/0x140
[ 41.535445][ T3598] do_sys_openat2+0x153/0x4c0
[ 41.540107][ T3598] __x64_sys_openat+0x13f/0x1f0
[ 41.544942][ T3598] do_syscall_64+0x35/0xb0
[ 41.549348][ T3598] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 41.555226][ T3598]
[ 41.557529][ T3598] The buggy address belongs to the object at ffff8880176f0000
[ 41.557529][ T3598] which belongs to the cache names_cache of size 4096
[ 41.571652][ T3598] The buggy address is located 336 bytes inside of
[ 41.571652][ T3598] 4096-byte region [ffff8880176f0000, ffff8880176f1000)
[ 41.584993][ T3598]
[ 41.587302][ T3598] The buggy address belongs to the physical page:
[ 41.593690][ T3598] page:ffffea00005dbc00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x176f0
[ 41.603822][ T3598] head:ffffea00005dbc00 order:3 compound_mapcount:0 compound_pincount:0
[ 41.612128][ T3598] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff)
[ 41.620097][ T3598] raw: 00fff00000010200 0000000000000000 dead000000000122 ffff8880119db500
[ 41.628665][ T3598] raw: 0000000000000000 0000000000070007 00000001ffffffff 0000000000000000
[ 41.637224][ T3598] page dumped because: kasan: bad access detected
[ 41.643611][ T3598] page_owner tracks the page as allocated
[ 41.649308][ T3598] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 3308, tgid 3308 (dhcpcd-run-hook), ts 23023378253, free_ts 22996387883
[ 41.671173][ T3598] get_page_from_freelist+0x109b/0x2ce0
[ 41.676883][ T3598] __alloc_pages+0x1c7/0x510
[ 41.681459][ T3598] alloc_pages+0x1a6/0x270
[ 41.685859][ T3598] allocate_slab+0x27e/0x3d0
[ 41.690433][ T3598] ___slab_alloc+0x7f1/0xe10
[ 41.695005][ T3598] __slab_alloc.constprop.0+0x4d/0xa0
[ 41.700362][ T3598] kmem_cache_alloc+0x38c/0x3b0
[ 41.705196][ T3598] getname_flags.part.0+0x50/0x4f0
[ 41.710295][ T3598] getname+0x8e/0xd0
[ 41.714181][ T3598] do_sys_openat2+0xf5/0x4c0
[ 41.718752][ T3598] __x64_sys_openat+0x13f/0x1f0
[ 41.723587][ T3598] do_syscall_64+0x35/0xb0
[ 41.727989][ T3598] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 41.733865][ T3598] page last free stack trace:
[ 41.738513][ T3598] free_pcp_prepare+0x5e4/0xd20
[ 41.743348][ T3598] free_unref_page+0x19/0x4d0
[ 41.748009][ T3598] __unfreeze_partials+0x17c/0x1a0
[ 41.753110][ T3598] qlist_free_all+0x6a/0x170
[ 41.757686][ T3598] kasan_quarantine_reduce+0x180/0x200
[ 41.763131][ T3598] __kasan_slab_alloc+0xa2/0xc0
[ 41.767970][ T3598] kmem_cache_alloc+0x267/0x3b0
[ 41.772803][ T3598] getname_flags.part.0+0x50/0x4f0
[ 41.777900][ T3598] getname_flags+0x9a/0xe0
[ 41.782303][ T3598] vfs_fstatat+0x73/0xb0
[ 41.786527][ T3598] __do_sys_newfstatat+0x91/0x110
[ 41.791535][ T3598] do_syscall_64+0x35/0xb0
[ 41.795939][ T3598] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 41.801818][ T3598]
[ 41.804123][ T3598] Memory state around the buggy address:
[ 41.809734][ T3598] ffff8880176f0000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 41.817779][ T3598] ffff8880176f0080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 41.825823][ T3598] >ffff8880176f0100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 41.833868][ T3598] ^
[ 41.840520][ T3598] ffff8880176f0180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 41.848562][ T3598] ffff8880176f0200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 41.856605][ T3598] ==================================================================
[ 41.865115][ T3598] Kernel panic - not syncing: panic_on_warn set ...
[ 41.871708][ T3598] CPU: 0 PID: 3598 Comm: syz-executor310 Not tainted 6.0.0-rc7-syzkaller-00220-gffb4d94b4314 #0
[ 41.882123][ T3598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022
[ 41.892162][ T3598] Call Trace:
[ 41.895424][ T3598]
[ 41.898341][ T3598] dump_stack_lvl+0xcd/0x134
[ 41.902925][ T3598] panic+0x2c8/0x627
[ 41.906808][ T3598] ? panic_print_sys_info.part.0+0x10b/0x10b
[ 41.912779][ T3598] ? preempt_schedule_common+0x59/0xc0
[ 41.918228][ T3598] ? preempt_schedule_thunk+0x16/0x18
[ 41.923593][ T3598] ? run_unpack+0x8b7/0x970
[ 41.928082][ T3598] end_report.part.0+0x3f/0x7c
[ 41.932931][ T3598] kasan_report.cold+0xa/0xf
[ 41.937516][ T3598] ? run_unpack+0x8b7/0x970
[ 41.942008][ T3598] run_unpack+0x8b7/0x970
[ 41.946327][ T3598] ? run_pack+0x1100/0x1100
[ 41.950814][ T3598] ? ntfs_bread_run+0x310/0x310
[ 41.955654][ T3598] ? kfree+0x1fb/0x580
[ 41.959713][ T3598] run_unpack_ex+0xb0/0x7c0
[ 41.964365][ T3598] ? mi_enum_attr+0x34f/0x630
[ 41.969029][ T3598] ? ni_enum_attr_ex+0x281/0x400
[ 41.973951][ T3598] ? run_unpack+0x970/0x970
[ 41.978439][ T3598] ? ni_fname_type.part.0+0x1e0/0x1e0
[ 41.983800][ T3598] ? mi_read+0x27f/0x5b0
[ 41.988030][ T3598] ntfs_iget5+0xc20/0x3280
[ 41.992435][ T3598] ? ntfs_write_end+0x800/0x800
[ 41.997270][ T3598] ? ntfs_sync_fs+0x400/0x400
[ 42.001937][ T3598] ? destroy_inode+0xc4/0x1b0
[ 42.006606][ T3598] ? iput.part.0+0x55d/0x810
[ 42.011188][ T3598] ntfs_fill_super+0x1fd1/0x37f0
[ 42.016116][ T3598] ? put_ntfs+0x330/0x330
[ 42.020434][ T3598] ? set_blocksize+0x2e5/0x370
[ 42.025185][ T3598] get_tree_bdev+0x440/0x760
[ 42.029852][ T3598] ? put_ntfs+0x330/0x330
[ 42.034168][ T3598] vfs_get_tree+0x89/0x2f0
[ 42.038573][ T3598] path_mount+0x1326/0x1e20
[ 42.043072][ T3598] ? kmem_cache_free+0xeb/0x5b0
[ 42.047910][ T3598] ? finish_automount+0x960/0x960
[ 42.052923][ T3598] ? putname+0xfe/0x140
[ 42.057075][ T3598] __x64_sys_mount+0x27f/0x300
[ 42.061828][ T3598] ? copy_mnt_ns+0xae0/0xae0
[ 42.066410][ T3598] ? syscall_enter_from_user_mode+0x22/0xb0
[ 42.072298][ T3598] do_syscall_64+0x35/0xb0
[ 42.076702][ T3598] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 42.082581][ T3598] RIP: 0033:0x7f3e83fb01ba
[ 42.086982][ T3598] Code: 83 c4 08 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 42.106577][ T3598] RSP: 002b:00007ffff06182c8 EFLAGS: 00000286 ORIG_RAX: 00000000000000a5
[ 42.114973][ T3598] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f3e83fb01ba
[ 42.122931][ T3598] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007ffff06182e0
[ 42.130889][ T3598] RBP: 00007ffff06182e0 R08: 00007ffff0618320 R09: 0000555555adc2c0
[ 42.138844][ T3598] R10: 0000000000000000 R11: 0000000000000286 R12: 0000000000000004
[ 42.146797][ T3598] R13: 00007ffff0618320 R14: 000000000000000d R15: 0000000020000338
[ 42.154756][ T3598]
[ 42.158440][ T3598] Kernel Offset: disabled
[ 42.162746][ T3598] Rebooting in 86400 seconds..