[ 76.675690][ T2512] cfg80211: failed to load regulatory.db Warning: Permanently added '10.128.1.118' (ED25519) to the list of known hosts. 2023/08/22 13:52:33 ignoring optional flag "sandboxArg"="0" 2023/08/22 13:52:33 parsed 1 programs 2023/08/22 13:52:35 executed programs: 0 [ 79.382916][ T5363] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 79.435088][ T49] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 79.443036][ T49] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 79.451060][ T49] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 79.459774][ T49] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 79.468266][ T49] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 79.475721][ T49] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 79.569952][ T5370] chnl_net:caif_netlink_parms(): no params data found [ 79.608612][ T5370] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.616081][ T5370] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.623204][ T5370] bridge_slave_0: entered allmulticast mode [ 79.630017][ T5370] bridge_slave_0: entered promiscuous mode [ 79.637578][ T5370] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.645255][ T5370] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.652464][ T5370] bridge_slave_1: entered allmulticast mode [ 79.659169][ T5370] bridge_slave_1: entered promiscuous mode [ 79.679040][ T5370] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.690472][ T5370] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.712204][ T5370] team0: Port device team_slave_0 added [ 79.719776][ T5370] team0: Port device team_slave_1 added [ 79.738483][ T5370] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.745562][ T5370] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.771675][ T5370] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.784662][ T5370] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.791708][ T5370] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.817742][ T5370] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.846423][ T5370] hsr_slave_0: entered promiscuous mode [ 79.853212][ T5370] hsr_slave_1: entered promiscuous mode [ 80.451928][ T5370] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 80.463263][ T5370] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 80.475085][ T5370] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 80.486329][ T5370] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 80.511156][ T5370] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.518436][ T5370] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.525893][ T5370] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.533132][ T5370] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.601393][ T5370] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.609189][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.625822][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.660916][ T5370] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.674540][ T2512] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.681764][ T2512] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.705282][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.712545][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.912313][ T5370] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.957846][ T5370] veth0_vlan: entered promiscuous mode [ 80.970655][ T5370] veth1_vlan: entered promiscuous mode [ 81.004635][ T5370] veth0_macvtap: entered promiscuous mode [ 81.014915][ T5370] veth1_macvtap: entered promiscuous mode [ 81.034520][ T5370] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.051253][ T5370] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.065426][ T5370] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.075765][ T5370] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.085545][ T5370] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.094703][ T5370] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.156106][ T7] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.169664][ T7] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.196995][ T5029] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.206102][ T5029] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.303899][ T5427] loop0: detected capacity change from 0 to 4096 [ 81.319157][ T5427] syz-executor.0: attempt to access beyond end of device [ 81.319157][ T5427] loop0: rw=0, sector=32768, nr_sectors = 2 limit=4096 [ 81.333346][ T5427] ntfs: (device loop0): ntfs_end_buffer_async_read(): Buffer I/O error, logical block 0x4000. [ 81.345777][ T5427] syz-executor.0: attempt to access beyond end of device [ 81.345777][ T5427] loop0: rw=0, sector=32770, nr_sectors = 2 limit=4096 [ 81.360168][ T5427] ntfs: (device loop0): ntfs_end_buffer_async_read(): Buffer I/O error, logical block 0x4001. [ 81.371913][ T5427] syz-executor.0: attempt to access beyond end of device [ 81.371913][ T5427] loop0: rw=0, sector=32772, nr_sectors = 2 limit=4096 [ 81.387343][ T5427] ntfs: (device loop0): ntfs_end_buffer_async_read(): Buffer I/O error, logical block 0x4002. [ 81.399205][ T5427] syz-executor.0: attempt to access beyond end of device [ 81.399205][ T5427] loop0: rw=0, sector=32774, nr_sectors = 2 limit=4096 [ 81.414622][ T5427] ntfs: (device loop0): ntfs_end_buffer_async_read(): Buffer I/O error, logical block 0x4003. [ 81.425302][ T5427] ntfs: (device loop0): check_mft_mirror(): Failed to read $MFTMirr. [ 81.435457][ T5427] ntfs: (device loop0): load_system_files(): $MFTMirr does not match $MFT. Will not be able to remount read-write. Run ntfsfix and/or chkdsk. [ 81.450518][ T5427] ntfs: (device loop0): ntfs_attr_find(): Inode is corrupt. Run chkdsk. [ 81.460428][ T5427] ntfs: (device loop0): ntfs_read_locked_attr_inode(): Failed with error code -5 while reading attribute inode (mft_no 0x0, type 0xb0, name_len 0). Marking corrupt inode and base inode 0x0 as bad. Run chkdsk. [ 81.483314][ T5427] ntfs: (device loop0): load_system_files(): Failed to load $MFT/$BITMAP attribute. [ 81.493155][ T5427] ntfs: (device loop0): ntfs_fill_super(): Failed to load system files. [ 81.554609][ T4423] Bluetooth: hci0: command 0x0409 tx timeout [ 81.635667][ T5441] loop0: detected capacity change from 0 to 4096 [ 81.652574][ T5441] syz-executor.0: attempt to access beyond end of device [ 81.652574][ T5441] loop0: rw=0, sector=32768, nr_sectors = 2 limit=4096 [ 81.667023][ T5441] syz-executor.0: attempt to access beyond end of device [ 81.667023][ T5441] loop0: rw=0, sector=32770, nr_sectors = 2 limit=4096 [ 81.681026][ T5441] syz-executor.0: attempt to access beyond end of device [ 81.681026][ T5441] loop0: rw=0, sector=32772, nr_sectors = 2 limit=4096 [ 81.695509][ T5441] syz-executor.0: attempt to access beyond end of device [ 81.695509][ T5441] loop0: rw=0, sector=32774, nr_sectors = 2 limit=4096 [ 81.831863][ T5450] loop0: detected capacity change from 0 to 4096 [ 81.843176][ T5450] syz-executor.0: attempt to access beyond end of device [ 81.843176][ T5450] loop0: rw=0, sector=32768, nr_sectors = 2 limit=4096 [ 81.858875][ T5450] syz-executor.0: attempt to access beyond end of device [ 81.858875][ T5450] loop0: rw=0, sector=32770, nr_sectors = 2 limit=4096 [ 82.062669][ T5458] loop0: detected capacity change from 0 to 4096 [ 82.075784][ T5458] ================================================================== [ 82.083894][ T5458] BUG: KASAN: use-after-free in ntfs_attr_find+0x92c/0xd10 [ 82.091118][ T5458] Read of size 4 at addr ffff8880650dc14c by task syz-executor.0/5458 [ 82.099292][ T5458] [ 82.101722][ T5458] CPU: 0 PID: 5458 Comm: syz-executor.0 Not tainted 6.5.0-rc6-syzkaller-dirty #0 [ 82.110941][ T5458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 82.121111][ T5458] Call Trace: [ 82.124407][ T5458] [ 82.127352][ T5458] dump_stack_lvl+0x1e7/0x2d0 [ 82.132053][ T5458] ? irq_work_queue+0xca/0x150 [ 82.136852][ T5458] ? nf_tcp_handle_invalid+0x650/0x650 [ 82.142345][ T5458] ? panic+0x770/0x770 [ 82.146446][ T5458] ? _printk+0xd5/0x120 [ 82.150717][ T5458] print_report+0x163/0x540 [ 82.155241][ T5458] ? __virt_addr_valid+0x22f/0x2e0 [ 82.160380][ T5458] ? __phys_addr+0xba/0x170 [ 82.164924][ T5458] ? ntfs_attr_find+0x92c/0xd10 [ 82.169792][ T5458] kasan_report+0x175/0x1b0 [ 82.174400][ T5458] ? ntfs_attr_find+0x92c/0xd10 [ 82.179451][ T5458] ? do_new_mount+0x28f/0xae0 [ 82.184153][ T5458] ntfs_attr_find+0x92c/0xd10 [ 82.188939][ T5458] ntfs_attr_lookup+0x4e4/0x2390 [ 82.193907][ T5458] ? slab_post_alloc_hook+0x87/0x3b0 [ 82.199662][ T5458] ? ntfs_attr_reinit_search_ctx+0x2e0/0x2e0 [ 82.205663][ T5458] ? kmem_cache_alloc+0x152/0x300 [ 82.210717][ T5458] ? ntfs_attr_get_search_ctx+0x51/0x180 [ 82.216545][ T5458] ? __asan_memset+0x23/0x40 [ 82.221504][ T5458] ntfs_attr_iget+0x50a/0x2360 [ 82.226471][ T5458] ? ntfs_read_locked_inode+0x49c0/0x49c0 [ 82.232782][ T5458] ? ntfs_writepage+0x1ae0/0x1ae0 [ 82.238448][ T5458] load_system_files+0x1333/0x4840 [ 82.243594][ T5458] ? ntfs_setup_allocators+0x2d0/0x2d0 [ 82.249263][ T5458] ? generate_default_upcase+0x8ed/0x940 [ 82.255100][ T5458] ntfs_fill_super+0x19b3/0x2bd0 [ 82.260079][ T5458] mount_bdev+0x276/0x3b0 [ 82.264434][ T5458] ? ntfs_mount+0x40/0x40 [ 82.268793][ T5458] legacy_get_tree+0xef/0x190 [ 82.273584][ T5458] ? ntfs_rl_punch_nolock+0x15b0/0x15b0 [ 82.279153][ T5458] vfs_get_tree+0x8c/0x270 [ 82.283675][ T5458] do_new_mount+0x28f/0xae0 [ 82.288204][ T5458] ? do_move_mount_old+0x170/0x170 [ 82.293333][ T5458] ? user_path_at_empty+0x12f/0x180 [ 82.298895][ T5458] __se_sys_mount+0x2d9/0x3c0 [ 82.303593][ T5458] ? __x64_sys_mount+0xc0/0xc0 [ 82.308450][ T5458] ? syscall_enter_from_user_mode+0x32/0x230 [ 82.314558][ T5458] ? lockdep_hardirqs_on+0x98/0x140 [ 82.319864][ T5458] ? __x64_sys_mount+0x20/0xc0 [ 82.324660][ T5458] do_syscall_64+0x41/0xc0 [ 82.329212][ T5458] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 82.335332][ T5458] RIP: 0033:0x7f83fda7e1ea [ 82.339768][ T5458] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 09 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 82.359827][ T5458] RSP: 002b:00007f83fe78fee8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 82.368268][ T5458] RAX: ffffffffffffffda RBX: 00007f83fe78ff80 RCX: 00007f83fda7e1ea [ 82.376284][ T5458] RDX: 000000002001f6c0 RSI: 000000002001f640 RDI: 00007f83fe78ff40 [ 82.384279][ T5458] RBP: 000000002001f6c0 R08: 00007f83fe78ff80 R09: 0000000000008703 [ 82.392889][ T5458] R10: 0000000000008703 R11: 0000000000000246 R12: 000000002001f640 [ 82.400980][ T5458] R13: 00007f83fe78ff40 R14: 000000000001f621 R15: 000000002001f700 [ 82.409067][ T5458] [ 82.412098][ T5458] [ 82.414426][ T5458] The buggy address belongs to the physical page: [ 82.420925][ T5458] page:ffffea0001943700 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1 pfn:0x650dc [ 82.431180][ T5458] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 82.438392][ T5458] page_type: 0xffffffff() [ 82.442736][ T5458] raw: 00fff00000000000 ffffea0001943788 ffffea0001c13248 0000000000000000 [ 82.451483][ T5458] raw: 0000000000000001 0000000000000000 00000000ffffffff 0000000000000000 [ 82.460258][ T5458] page dumped because: kasan: bad access detected [ 82.466773][ T5458] page_owner tracks the page as freed [ 82.472156][ T5458] page last allocated via order 0, migratetype Movable, gfp_mask 0x140dca(GFP_HIGHUSER_MOVABLE|__GFP_COMP|__GFP_ZERO), pid 5436, tgid 5436 (dhcpcd-run-hook), ts 81549224797, free_ts 81897816074 [ 82.491289][ T5458] post_alloc_hook+0x1e6/0x210 [ 82.496076][ T5458] get_page_from_freelist+0x31e8/0x3370 [ 82.501643][ T5458] __alloc_pages+0x255/0x670 [ 82.506252][ T5458] __folio_alloc+0x13/0x30 [ 82.510773][ T5458] vma_alloc_folio+0x48a/0x9a0 [ 82.515561][ T5458] handle_mm_fault+0x20c7/0x5410 [ 82.520618][ T5458] exc_page_fault+0x3cf/0x7c0 [ 82.525315][ T5458] asm_exc_page_fault+0x26/0x30 [ 82.530188][ T5458] page last free stack trace: [ 82.534862][ T5458] free_unref_page_prepare+0x903/0xa30 [ 82.540343][ T5458] free_unref_page_list+0x596/0x830 [ 82.545646][ T5458] release_pages+0x2193/0x2470 [ 82.550435][ T5458] tlb_flush_mmu+0x100/0x210 [ 82.555044][ T5458] tlb_finish_mmu+0xd4/0x1f0 [ 82.559697][ T5458] exit_mmap+0x3e2/0xad0 [ 82.564123][ T5458] __mmput+0x115/0x3c0 [ 82.568205][ T5458] exit_mm+0x21f/0x300 [ 82.572378][ T5458] do_exit+0x612/0x2290 [ 82.576554][ T5458] do_group_exit+0x206/0x2c0 [ 82.581159][ T5458] __x64_sys_exit_group+0x3f/0x40 [ 82.586291][ T5458] do_syscall_64+0x41/0xc0 [ 82.590724][ T5458] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 82.596639][ T5458] [ 82.598971][ T5458] Memory state around the buggy address: [ 82.604611][ T5458] ffff8880650dc000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 82.612685][ T5458] ffff8880650dc080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 82.620761][ T5458] >ffff8880650dc100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 82.628838][ T5458] ^ [ 82.635354][ T5458] ffff8880650dc180: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 82.643951][ T5458] ffff8880650dc200: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 82.652914][ T5458] ================================================================== [ 82.709668][ T5458] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 82.716926][ T5458] CPU: 0 PID: 5458 Comm: syz-executor.0 Not tainted 6.5.0-rc6-syzkaller-dirty #0 [ 82.726050][ T5458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 82.736122][ T5458] Call Trace: [ 82.739420][ T5458] [ 82.742368][ T5458] dump_stack_lvl+0x1e7/0x2d0 [ 82.747067][ T5458] ? nf_tcp_handle_invalid+0x650/0x650 [ 82.752549][ T5458] ? panic+0x770/0x770 [ 82.756641][ T5458] ? preempt_schedule_common+0x83/0xc0 [ 82.762214][ T5458] ? vscnprintf+0x5d/0x80 [ 82.766580][ T5458] panic+0x30f/0x770 [ 82.770500][ T5458] ? check_panic_on_warn+0x21/0xa0 [ 82.775634][ T5458] ? __memcpy_flushcache+0x2b0/0x2b0 [ 82.780945][ T5458] ? _raw_spin_unlock_irqrestore+0x12c/0x140 [ 82.787044][ T5458] ? _raw_spin_unlock+0x40/0x40 [ 82.792273][ T5458] ? print_report+0x4fb/0x540 [ 82.796997][ T5458] check_panic_on_warn+0x82/0xa0 [ 82.802141][ T5458] ? ntfs_attr_find+0x92c/0xd10 [ 82.807018][ T5458] end_report+0x6e/0x130 [ 82.811288][ T5458] kasan_report+0x186/0x1b0 [ 82.815911][ T5458] ? ntfs_attr_find+0x92c/0xd10 [ 82.820885][ T5458] ? do_new_mount+0x28f/0xae0 [ 82.825586][ T5458] ntfs_attr_find+0x92c/0xd10 [ 82.830297][ T5458] ntfs_attr_lookup+0x4e4/0x2390 [ 82.835272][ T5458] ? slab_post_alloc_hook+0x87/0x3b0 [ 82.840697][ T5458] ? ntfs_attr_reinit_search_ctx+0x2e0/0x2e0 [ 82.846797][ T5458] ? kmem_cache_alloc+0x152/0x300 [ 82.851944][ T5458] ? ntfs_attr_get_search_ctx+0x51/0x180 [ 82.858138][ T5458] ? __asan_memset+0x23/0x40 [ 82.862760][ T5458] ntfs_attr_iget+0x50a/0x2360 [ 82.867554][ T5458] ? ntfs_read_locked_inode+0x49c0/0x49c0 [ 82.873303][ T5458] ? ntfs_writepage+0x1ae0/0x1ae0 [ 82.878358][ T5458] load_system_files+0x1333/0x4840 [ 82.883946][ T5458] ? ntfs_setup_allocators+0x2d0/0x2d0 [ 82.889528][ T5458] ? generate_default_upcase+0x8ed/0x940 [ 82.895296][ T5458] ntfs_fill_super+0x19b3/0x2bd0 [ 82.900276][ T5458] mount_bdev+0x276/0x3b0 [ 82.904948][ T5458] ? ntfs_mount+0x40/0x40 [ 82.909309][ T5458] legacy_get_tree+0xef/0x190 [ 82.914108][ T5458] ? ntfs_rl_punch_nolock+0x15b0/0x15b0 [ 82.919702][ T5458] vfs_get_tree+0x8c/0x270 [ 82.924146][ T5458] do_new_mount+0x28f/0xae0 [ 82.928767][ T5458] ? do_move_mount_old+0x170/0x170 [ 82.933907][ T5458] ? user_path_at_empty+0x12f/0x180 [ 82.939133][ T5458] __se_sys_mount+0x2d9/0x3c0 [ 82.943842][ T5458] ? __x64_sys_mount+0xc0/0xc0 [ 82.948825][ T5458] ? syscall_enter_from_user_mode+0x32/0x230 [ 82.955707][ T5458] ? lockdep_hardirqs_on+0x98/0x140 [ 82.961282][ T5458] ? __x64_sys_mount+0x20/0xc0 [ 82.966111][ T5458] do_syscall_64+0x41/0xc0 [ 82.970557][ T5458] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 82.976570][ T5458] RIP: 0033:0x7f83fda7e1ea [ 82.981115][ T5458] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 09 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 83.001871][ T5458] RSP: 002b:00007f83fe78fee8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 83.010752][ T5458] RAX: ffffffffffffffda RBX: 00007f83fe78ff80 RCX: 00007f83fda7e1ea [ 83.018925][ T5458] RDX: 000000002001f6c0 RSI: 000000002001f640 RDI: 00007f83fe78ff40 [ 83.027072][ T5458] RBP: 000000002001f6c0 R08: 00007f83fe78ff80 R09: 0000000000008703 [ 83.035333][ T5458] R10: 0000000000008703 R11: 0000000000000246 R12: 000000002001f640 [ 83.043329][ T5458] R13: 00007f83fe78ff40 R14: 000000000001f621 R15: 000000002001f700 [ 83.051344][ T5458] [ 83.054612][ T5458] Kernel Offset: disabled [ 83.058945][ T5458] Rebooting in 86400 seconds..