Warning: Permanently added '10.128.0.70' (ED25519) to the list of known hosts.
2023/11/11 00:00:51 ignoring optional flag "sandboxArg"="0"
2023/11/11 00:00:51 parsed 1 programs
2023/11/11 00:00:51 executed programs: 0
[ 80.006024][ T4460] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 80.014832][ T4460] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 80.023345][ T4460] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 80.031285][ T4460] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 80.039892][ T4460] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 80.047289][ T4460] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 80.163882][ T5415] chnl_net:caif_netlink_parms(): no params data found
[ 80.217018][ T5415] bridge0: port 1(bridge_slave_0) entered blocking state
[ 80.224679][ T5415] bridge0: port 1(bridge_slave_0) entered disabled state
[ 80.232027][ T5415] bridge_slave_0: entered allmulticast mode
[ 80.238800][ T5415] bridge_slave_0: entered promiscuous mode
[ 80.246821][ T5415] bridge0: port 2(bridge_slave_1) entered blocking state
[ 80.254378][ T5415] bridge0: port 2(bridge_slave_1) entered disabled state
[ 80.261545][ T5415] bridge_slave_1: entered allmulticast mode
[ 80.268382][ T5415] bridge_slave_1: entered promiscuous mode
[ 80.292149][ T5415] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 80.305047][ T5415] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 80.332070][ T5415] team0: Port device team_slave_0 added
[ 80.339852][ T5415] team0: Port device team_slave_1 added
[ 80.361993][ T5415] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 80.369553][ T5415] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 80.396684][ T5415] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 80.409806][ T5415] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 80.416863][ T5415] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 80.443238][ T5415] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 80.478760][ T5415] hsr_slave_0: entered promiscuous mode
[ 80.485117][ T5415] hsr_slave_1: entered promiscuous mode
[ 81.227761][ T5415] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 81.240560][ T5415] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 81.251862][ T5415] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 81.265885][ T5415] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 81.378584][ T5415] 8021q: adding VLAN 0 to HW filter on device bond0
[ 81.407140][ T5415] 8021q: adding VLAN 0 to HW filter on device team0
[ 81.420667][ T5075] bridge0: port 1(bridge_slave_0) entered blocking state
[ 81.427893][ T5075] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 81.446520][ T5075] bridge0: port 2(bridge_slave_1) entered blocking state
[ 81.454002][ T5075] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 81.507811][ T5415] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 81.678251][ T5415] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 81.737642][ T5415] veth0_vlan: entered promiscuous mode
[ 81.754889][ T5415] veth1_vlan: entered promiscuous mode
[ 81.792086][ T5415] veth0_macvtap: entered promiscuous mode
[ 81.804789][ T5415] veth1_macvtap: entered promiscuous mode
[ 81.832014][ T5415] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 81.850633][ T5415] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 81.866179][ T5415] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 81.876372][ T5415] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 81.887589][ T5415] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 81.896999][ T5415] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 81.961986][ T27] cfg80211: failed to load regulatory.db
[ 81.996012][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 82.010453][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 82.045093][ T2422] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 82.055425][ T2422] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 82.123832][ T5068] Bluetooth: hci0: command 0x0409 tx timeout
[ 82.168057][ T5482] loop0: detected capacity change from 0 to 4096
[ 82.219055][ T5482] ntfs: volume version 3.1.
[ 82.231606][ T5482] ==================================================================
[ 82.239961][ T5482] BUG: KASAN: use-after-free in ntfs_lookup_inode_by_name+0xe86/0x2ca0
[ 82.248370][ T5482] Read of size 8 at addr ffff888069d4855a by task syz-executor.0/5482
[ 82.257411][ T5482]
[ 82.259741][ T5482] CPU: 1 PID: 5482 Comm: syz-executor.0 Not tainted 6.6.0-syzkaller-16153-g18553507f60f #0
[ 82.270086][ T5482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023
[ 82.280434][ T5482] Call Trace:
[ 82.283820][ T5482]
[ 82.287028][ T5482] dump_stack_lvl+0x1e7/0x2d0
[ 82.291873][ T5482] ? nf_tcp_handle_invalid+0x650/0x650
[ 82.298161][ T5482] ? panic+0x850/0x850
[ 82.302347][ T5482] ? _printk+0xd5/0x120
[ 82.306885][ T5482] print_report+0x163/0x540
[ 82.311510][ T5482] ? __virt_addr_valid+0x22f/0x2e0
[ 82.316738][ T5482] ? __phys_addr+0xba/0x170
[ 82.321473][ T5482] ? ntfs_lookup_inode_by_name+0xe86/0x2ca0
[ 82.327398][ T5482] kasan_report+0x142/0x170
[ 82.332128][ T5482] ? ntfs_lookup_inode_by_name+0xe86/0x2ca0
[ 82.338579][ T5482] ntfs_lookup_inode_by_name+0xe86/0x2ca0
[ 82.344864][ T5482] ? clear_nonspinnable+0x60/0x60
[ 82.350179][ T5482] check_windows_hibernation_status+0xf0/0x4c0
[ 82.356536][ T5482] ? load_and_check_logfile+0xd0/0xd0
[ 82.362302][ T5482] ? load_system_files+0x3519/0x4840
[ 82.367786][ T5482] ? rcu_is_watching+0x15/0xb0
[ 82.372847][ T5482] load_system_files+0x35db/0x4840
[ 82.378340][ T5482] ? ntfs_setup_allocators+0x2d0/0x2d0
[ 82.384882][ T5482] ? __asan_memset+0x23/0x40
[ 82.389704][ T5482] ? generate_default_upcase+0x8ed/0x940
[ 82.395624][ T5482] ntfs_fill_super+0x19b3/0x2bd0
[ 82.400602][ T5482] mount_bdev+0x237/0x300
[ 82.405045][ T5482] ? ntfs_mount+0x40/0x40
[ 82.409669][ T5482] ? get_tree_bdev+0x5b0/0x5b0
[ 82.414652][ T5482] ? vfs_parse_fs_string+0x190/0x230
[ 82.420670][ T5482] ? vfs_parse_fs_param+0x410/0x410
[ 82.426327][ T5482] ? cap_capable+0x1b4/0x240
[ 82.431204][ T5482] legacy_get_tree+0xef/0x190
[ 82.436258][ T5482] ? ntfs_rl_punch_nolock+0x15b0/0x15b0
[ 82.442003][ T5482] vfs_get_tree+0x8c/0x280
[ 82.446715][ T5482] do_new_mount+0x28f/0xae0
[ 82.451243][ T5482] ? do_move_mount_old+0x170/0x170
[ 82.456560][ T5482] __se_sys_mount+0x2d9/0x3c0
[ 82.461437][ T5482] ? __x64_sys_mount+0xc0/0xc0
[ 82.466755][ T5482] ? syscall_enter_from_user_mode+0x32/0x230
[ 82.472956][ T5482] ? lockdep_hardirqs_on+0x98/0x140
[ 82.478278][ T5482] ? __x64_sys_mount+0x20/0xc0
[ 82.483243][ T5482] do_syscall_64+0x44/0x110
[ 82.487946][ T5482] entry_SYSCALL_64_after_hwframe+0x63/0x6b
[ 82.494282][ T5482] RIP: 0033:0x7f224bc7e05a
[ 82.498818][ T5482] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 09 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[ 82.519230][ T5482] RSP: 002b:00007f224c96bee8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 82.528293][ T5482] RAX: ffffffffffffffda RBX: 00007f224c96bf80 RCX: 00007f224bc7e05a
[ 82.536493][ T5482] RDX: 000000002001ec80 RSI: 000000002001ecc0 RDI: 00007f224c96bf40
[ 82.545541][ T5482] RBP: 000000002001ec80 R08: 00007f224c96bf80 R09: 0000000000000000
[ 82.553624][ T5482] R10: 0000000000000000 R11: 0000000000000246 R12: 000000002001ecc0
[ 82.561973][ T5482] R13: 00007f224c96bf40 R14: 000000000001ec6a R15: 000000002001ed00
[ 82.570060][ T5482]
[ 82.573098][ T5482]
[ 82.575603][ T5482] The buggy address belongs to the physical page:
[ 82.582151][ T5482] page:ffffea0001a75200 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1 pfn:0x69d48
[ 82.592324][ T5482] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 82.599634][ T5482] page_type: 0xffffffff()
[ 82.603981][ T5482] raw: 00fff00000000000 ffffea0001a75248 ffffea0001a751c8 0000000000000000
[ 82.612929][ T5482] raw: 0000000000000001 0000000000000000 00000000ffffffff 0000000000000000
[ 82.621870][ T5482] page dumped because: kasan: bad access detected
[ 82.628298][ T5482] page_owner tracks the page as freed
[ 82.633698][ T5482] page last allocated via order 0, migratetype Movable, gfp_mask 0x8(__GFP_MOVABLE), pid 1, tgid 1 (swapper/0), ts 15182567873, free_ts 16611561804
[ 82.650562][ T5482] post_alloc_hook+0x1e6/0x210
[ 82.655453][ T5482] split_map_pages+0x24a/0x510
[ 82.660246][ T5482] isolate_freepages_range+0x476/0x4d0
[ 82.666016][ T5482] alloc_contig_range+0x62e/0x9a0
[ 82.671241][ T5482] alloc_contig_pages+0x3f4/0x4f0
[ 82.676921][ T5482] debug_vm_pgtable_alloc_huge_page+0xb9/0x110
[ 82.683324][ T5482] init_args+0x837/0xb10
[ 82.687773][ T5482] debug_vm_pgtable+0xe0/0x540
[ 82.693025][ T5482] do_one_initcall+0x234/0x800
[ 82.698082][ T5482] do_initcall_level+0x157/0x210
[ 82.703058][ T5482] do_initcalls+0x3f/0x80
[ 82.707683][ T5482] kernel_init_freeable+0x429/0x5c0
[ 82.713524][ T5482] kernel_init+0x1d/0x2a0
[ 82.718052][ T5482] ret_from_fork+0x48/0x80
[ 82.722488][ T5482] ret_from_fork_asm+0x11/0x20
[ 82.727364][ T5482] page last free stack trace:
[ 82.732133][ T5482] free_unref_page_prepare+0x92a/0xa50
[ 82.737611][ T5482] free_unref_page+0x37/0x3f0
[ 82.742324][ T5482] free_contig_range+0x9e/0x150
[ 82.747285][ T5482] destroy_args+0x8a/0x880
[ 82.752083][ T5482] debug_vm_pgtable+0x4ba/0x540
[ 82.756961][ T5482] do_one_initcall+0x234/0x800
[ 82.761793][ T5482] do_initcall_level+0x157/0x210
[ 82.766767][ T5482] do_initcalls+0x3f/0x80
[ 82.771118][ T5482] kernel_init_freeable+0x429/0x5c0
[ 82.776417][ T5482] kernel_init+0x1d/0x2a0
[ 82.781023][ T5482] ret_from_fork+0x48/0x80
[ 82.785543][ T5482] ret_from_fork_asm+0x11/0x20
[ 82.790326][ T5482]
[ 82.792660][ T5482] Memory state around the buggy address:
[ 82.798306][ T5482] ffff888069d48400: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 82.806730][ T5482] ffff888069d48480: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 82.815011][ T5482] >ffff888069d48500: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 82.823276][ T5482] ^
[ 82.830660][ T5482] ffff888069d48580: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 82.838918][ T5482] ffff888069d48600: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 82.847253][ T5482] ==================================================================
[ 82.878345][ T5482] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 82.886100][ T5482] CPU: 1 PID: 5482 Comm: syz-executor.0 Not tainted 6.6.0-syzkaller-16153-g18553507f60f #0
[ 82.896177][ T5482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023
[ 82.906246][ T5482] Call Trace:
[ 82.909532][ T5482]
[ 82.912474][ T5482] dump_stack_lvl+0x1e7/0x2d0
[ 82.917364][ T5482] ? nf_tcp_handle_invalid+0x650/0x650
[ 82.922869][ T5482] ? panic+0x850/0x850
[ 82.927573][ T5482] ? vscnprintf+0x5d/0x80
[ 82.931931][ T5482] panic+0x349/0x850
[ 82.935858][ T5482] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 82.942142][ T5482] ? check_panic_on_warn+0x21/0xa0
[ 82.947276][ T5482] ? __memcpy_flushcache+0x2b0/0x2b0
[ 82.952945][ T5482] ? _raw_spin_unlock_irqrestore+0x12c/0x140
[ 82.958943][ T5482] ? _raw_spin_unlock+0x40/0x40
[ 82.963865][ T5482] ? print_report+0x4fb/0x540
[ 82.968576][ T5482] check_panic_on_warn+0x82/0xa0
[ 82.973625][ T5482] ? ntfs_lookup_inode_by_name+0xe86/0x2ca0
[ 82.979639][ T5482] end_report+0x6e/0x130
[ 82.983908][ T5482] kasan_report+0x153/0x170
[ 82.988625][ T5482] ? ntfs_lookup_inode_by_name+0xe86/0x2ca0
[ 82.994619][ T5482] ntfs_lookup_inode_by_name+0xe86/0x2ca0
[ 83.000944][ T5482] ? clear_nonspinnable+0x60/0x60
[ 83.006198][ T5482] check_windows_hibernation_status+0xf0/0x4c0
[ 83.012526][ T5482] ? load_and_check_logfile+0xd0/0xd0
[ 83.018066][ T5482] ? load_system_files+0x3519/0x4840
[ 83.023352][ T5482] ? rcu_is_watching+0x15/0xb0
[ 83.028132][ T5482] load_system_files+0x35db/0x4840
[ 83.033328][ T5482] ? ntfs_setup_allocators+0x2d0/0x2d0
[ 83.039232][ T5482] ? __asan_memset+0x23/0x40
[ 83.045296][ T5482] ? generate_default_upcase+0x8ed/0x940
[ 83.051099][ T5482] ntfs_fill_super+0x19b3/0x2bd0
[ 83.056289][ T5482] mount_bdev+0x237/0x300
[ 83.060608][ T5482] ? ntfs_mount+0x40/0x40
[ 83.065188][ T5482] ? get_tree_bdev+0x5b0/0x5b0
[ 83.070983][ T5482] ? vfs_parse_fs_string+0x190/0x230
[ 83.076609][ T5482] ? vfs_parse_fs_param+0x410/0x410
[ 83.081822][ T5482] ? cap_capable+0x1b4/0x240
[ 83.086506][ T5482] legacy_get_tree+0xef/0x190
[ 83.091261][ T5482] ? ntfs_rl_punch_nolock+0x15b0/0x15b0
[ 83.097935][ T5482] vfs_get_tree+0x8c/0x280
[ 83.103435][ T5482] do_new_mount+0x28f/0xae0
[ 83.108039][ T5482] ? do_move_mount_old+0x170/0x170
[ 83.113316][ T5482] __se_sys_mount+0x2d9/0x3c0
[ 83.118073][ T5482] ? __x64_sys_mount+0xc0/0xc0
[ 83.123171][ T5482] ? syscall_enter_from_user_mode+0x32/0x230
[ 83.130024][ T5482] ? lockdep_hardirqs_on+0x98/0x140
[ 83.135395][ T5482] ? __x64_sys_mount+0x20/0xc0
[ 83.140321][ T5482] do_syscall_64+0x44/0x110
[ 83.145075][ T5482] entry_SYSCALL_64_after_hwframe+0x63/0x6b
[ 83.150990][ T5482] RIP: 0033:0x7f224bc7e05a
[ 83.155492][ T5482] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 09 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[ 83.180486][ T5482] RSP: 002b:00007f224c96bee8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 83.188984][ T5482] RAX: ffffffffffffffda RBX: 00007f224c96bf80 RCX: 00007f224bc7e05a
[ 83.197035][ T5482] RDX: 000000002001ec80 RSI: 000000002001ecc0 RDI: 00007f224c96bf40
[ 83.205013][ T5482] RBP: 000000002001ec80 R08: 00007f224c96bf80 R09: 0000000000000000
[ 83.213080][ T5482] R10: 0000000000000000 R11: 0000000000000246 R12: 000000002001ecc0
[ 83.221231][ T5482] R13: 00007f224c96bf40 R14: 000000000001ec6a R15: 000000002001ed00
[ 83.229317][ T5482]
[ 83.232643][ T5482] Kernel Offset: disabled
[ 83.236966][ T5482] Rebooting in 86400 seconds..