[   76.556959][ T1468] cfg80211: failed to load regulatory.db
Warning: Permanently added '10.128.10.39' (ED25519) to the list of known hosts.
2023/12/29 07:21:30 ignoring optional flag "sandboxArg"="0"
2023/12/29 07:21:30 parsed 1 programs
2023/12/29 07:21:31 executed programs: 0
[   79.669232][ T5408] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   79.735155][ T5065] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   79.743075][ T5065] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   79.750655][ T5065] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   79.760571][ T5065] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   79.768199][ T5065] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   79.775505][ T5065] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   79.885833][ T5415] chnl_net:caif_netlink_parms(): no params data found
[   79.938299][ T5415] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.945498][ T5415] bridge0: port 1(bridge_slave_0) entered disabled state
[   79.952580][ T5415] bridge_slave_0: entered allmulticast mode
[   79.959273][ T5415] bridge_slave_0: entered promiscuous mode
[   79.967435][ T5415] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.974629][ T5415] bridge0: port 2(bridge_slave_1) entered disabled state
[   79.981874][ T5415] bridge_slave_1: entered allmulticast mode
[   79.988634][ T5415] bridge_slave_1: entered promiscuous mode
[   80.012347][ T5415] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   80.023669][ T5415] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   80.049720][ T5415] team0: Port device team_slave_0 added
[   80.058055][ T5415] team0: Port device team_slave_1 added
[   80.079668][ T5415] batman_adv: batadv0: Adding interface: batadv_slave_0
[   80.086769][ T5415] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   80.112731][ T5415] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   80.124870][ T5415] batman_adv: batadv0: Adding interface: batadv_slave_1
[   80.131816][ T5415] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   80.157883][ T5415] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   80.192093][ T5415] hsr_slave_0: entered promiscuous mode
[   80.198408][ T5415] hsr_slave_1: entered promiscuous mode
[   80.883352][ T5415] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   80.894091][ T5415] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   80.908602][ T5415] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   80.920797][ T5415] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   81.029218][ T5415] 8021q: adding VLAN 0 to HW filter on device bond0
[   81.052362][ T5415] 8021q: adding VLAN 0 to HW filter on device team0
[   81.068698][ T1468] bridge0: port 1(bridge_slave_0) entered blocking state
[   81.075932][ T1468] bridge0: port 1(bridge_slave_0) entered forwarding state
[   81.095852][ T5072] bridge0: port 2(bridge_slave_1) entered blocking state
[   81.103004][ T5072] bridge0: port 2(bridge_slave_1) entered forwarding state
[   81.317252][ T5415] 8021q: adding VLAN 0 to HW filter on device batadv0
[   81.374292][ T5415] veth0_vlan: entered promiscuous mode
[   81.390259][ T5415] veth1_vlan: entered promiscuous mode
[   81.431452][ T5415] veth0_macvtap: entered promiscuous mode
[   81.442909][ T5415] veth1_macvtap: entered promiscuous mode
[   81.467335][ T5415] batman_adv: batadv0: Interface activated: batadv_slave_0
[   81.484042][ T5415] batman_adv: batadv0: Interface activated: batadv_slave_1
[   81.497691][ T5415] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   81.508869][ T5415] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   81.518922][ T5415] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   81.527968][ T5415] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   81.602250][ T1261] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   81.618097][ T1261] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   81.648011][ T1261] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   81.658927][ T1261] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   81.771387][ T5482] loop0: detected capacity change from 0 to 4096
[   81.822191][ T5482] ntfs: volume version 3.1.
[   81.832168][ T5482] ==================================================================
[   81.840257][ T5482] BUG: KASAN: use-after-free in ntfs_lookup_inode_by_name+0xe86/0x2ca0
[   81.848511][ T5482] Read of size 8 at addr ffff8880698a855a by task syz-executor.0/5482
[   81.856757][ T5482] 
[   81.859082][ T5482] CPU: 0 PID: 5482 Comm: syz-executor.0 Not tainted 6.7.0-rc7-syzkaller-00029-g8735c7c84d1b #0
[   81.869418][ T5482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023
[   81.879479][ T5482] Call Trace:
[   81.882763][ T5482]  <TASK>
[   81.885699][ T5482]  dump_stack_lvl+0x1e7/0x2d0
[   81.890399][ T5482]  ? nf_tcp_handle_invalid+0x650/0x650
[   81.895876][ T5482]  ? panic+0x850/0x850
[   81.899977][ T5482]  ? _printk+0xd5/0x120
[   81.904150][ T5482]  print_report+0x163/0x540
[   81.908669][ T5482]  ? __virt_addr_valid+0x22f/0x2e0
[   81.913790][ T5482]  ? __phys_addr+0xba/0x170
[   81.918314][ T5482]  ? ntfs_lookup_inode_by_name+0xe86/0x2ca0
[   81.924217][ T5482]  kasan_report+0x142/0x170
[   81.928737][ T5482]  ? ntfs_lookup_inode_by_name+0xe86/0x2ca0
[   81.934646][ T5482]  ntfs_lookup_inode_by_name+0xe86/0x2ca0
[   81.940420][ T5482]  ? clear_nonspinnable+0x60/0x60
[   81.945459][ T5482]  check_windows_hibernation_status+0xf0/0x4c0
[   81.951628][ T5482]  ? load_and_check_logfile+0xd0/0xd0
[   81.957016][ T5482]  ? load_system_files+0x3519/0x4840
[   81.962313][ T5482]  ? rcu_is_watching+0x15/0xb0
[   81.967091][ T5482]  load_system_files+0x35db/0x4840
[   81.972221][ T5482]  ? ntfs_setup_allocators+0x2d0/0x2d0
[   81.977701][ T5482]  ? __asan_memset+0x23/0x40
[   81.982317][ T5482]  ? generate_default_upcase+0x8ed/0x940
[   81.987963][ T5482]  ntfs_fill_super+0x19b3/0x2bd0
[   81.992921][ T5482]  mount_bdev+0x237/0x300
[   81.997262][ T5482]  ? ntfs_mount+0x40/0x40
[   82.001681][ T5482]  ? get_tree_bdev+0x5b0/0x5b0
[   82.006449][ T5482]  ? vfs_parse_fs_string+0x190/0x230
[   82.011746][ T5482]  ? vfs_parse_fs_param+0x410/0x410
[   82.016961][ T5482]  ? cap_capable+0x1b4/0x240
[   82.021564][ T5482]  legacy_get_tree+0xef/0x190
[   82.026257][ T5482]  ? ntfs_rl_punch_nolock+0x15c0/0x15c0
[   82.031817][ T5482]  vfs_get_tree+0x8c/0x2a0
[   82.036248][ T5482]  do_new_mount+0x28f/0xae0
[   82.040766][ T5482]  ? do_move_mount_old+0x170/0x170
[   82.045893][ T5482]  __se_sys_mount+0x2d9/0x3c0
[   82.050582][ T5482]  ? __x64_sys_mount+0xc0/0xc0
[   82.055358][ T5482]  ? syscall_enter_from_user_mode+0xa4/0x2d0
[   82.061351][ T5482]  ? syscall_enter_from_user_mode+0xa4/0x2d0
[   82.067340][ T5482]  ? __x64_sys_mount+0x20/0xc0
[   82.072115][ T5482]  do_syscall_64+0x45/0x110
[   82.076634][ T5482]  entry_SYSCALL_64_after_hwframe+0x63/0x6b
[   82.082543][ T5482] RIP: 0033:0x7f4171e7e1ea
[   82.083296][ T5065] Bluetooth: hci0: command 0x0409 tx timeout
[   82.086949][ T5482] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 09 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[   82.086963][ T5482] RSP: 002b:00007f4172b65ee8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[   82.086983][ T5482] RAX: ffffffffffffffda RBX: 00007f4172b65f80 RCX: 00007f4171e7e1ea
[   82.086995][ T5482] RDX: 000000002001ec80 RSI: 000000002001ecc0 RDI: 00007f4172b65f40
[   82.087006][ T5482] RBP: 000000002001ec80 R08: 00007f4172b65f80 R09: 0000000000000000
[   82.087018][ T5482] R10: 0000000000000000 R11: 0000000000000246 R12: 000000002001ecc0
[   82.087027][ T5482] R13: 00007f4172b65f40 R14: 000000000001ec6a R15: 000000002001ed00
[   82.160885][ T5482]  </TASK>
[   82.163911][ T5482] 
[   82.166237][ T5482] The buggy address belongs to the physical page:
[   82.172646][ T5482] page:ffffea0001a62a00 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1 pfn:0x698a8
[   82.182892][ T5482] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[   82.189999][ T5482] page_type: 0xffffffff()
[   82.194336][ T5482] raw: 00fff00000000000 ffffea0001a9f7c8 ffffea0001a9f708 0000000000000000
[   82.202927][ T5482] raw: 0000000000000001 0000000000000000 00000000ffffffff 0000000000000000
[   82.211512][ T5482] page dumped because: kasan: bad access detected
[   82.217923][ T5482] page_owner tracks the page as freed
[   82.223291][ T5482] page last allocated via order 0, migratetype Movable, gfp_mask 0x140dca(GFP_HIGHUSER_MOVABLE|__GFP_COMP|__GFP_ZERO), pid 5480, tgid 5480 (rm), ts 81733916368, free_ts 81739034557
[   82.241099][ T5482]  post_alloc_hook+0x1e6/0x210
[   82.245875][ T5482]  get_page_from_freelist+0x33ea/0x3570
[   82.251428][ T5482]  __alloc_pages+0x255/0x680
[   82.256028][ T5482]  alloc_pages_mpol+0x3de/0x640
[   82.260886][ T5482]  vma_alloc_folio+0xf3/0x3f0
[   82.265570][ T5482]  handle_mm_fault+0x238a/0x6680
[   82.270518][ T5482]  exc_page_fault+0x456/0x870
[   82.275212][ T5482]  asm_exc_page_fault+0x26/0x30
[   82.280068][ T5482] page last free stack trace:
[   82.284740][ T5482]  free_unref_page_prepare+0x931/0xa60
[   82.290213][ T5482]  free_unref_page_list+0x5a0/0x840
[   82.295418][ T5482]  release_pages+0x2117/0x2400
[   82.300203][ T5482]  tlb_flush_mmu+0x34c/0x4e0
[   82.304799][ T5482]  tlb_finish_mmu+0xd4/0x1f0
[   82.309394][ T5482]  exit_mmap+0x4d3/0xc60
[   82.313645][ T5482]  __mmput+0x115/0x3c0
[   82.317723][ T5482]  exit_mm+0x21f/0x300
[   82.321804][ T5482]  do_exit+0x9af/0x2740
[   82.325969][ T5482]  do_group_exit+0x206/0x2c0
[   82.330566][ T5482]  __x64_sys_exit_group+0x3f/0x40
[   82.335604][ T5482]  do_syscall_64+0x45/0x110
[   82.340117][ T5482]  entry_SYSCALL_64_after_hwframe+0x63/0x6b
[   82.346025][ T5482] 
[   82.348356][ T5482] Memory state around the buggy address:
[   82.353985][ T5482]  ffff8880698a8400: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[   82.362049][ T5482]  ffff8880698a8480: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[   82.370111][ T5482] >ffff8880698a8500: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[   82.378178][ T5482]                                                     ^
[   82.385119][ T5482]  ffff8880698a8580: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[   82.393181][ T5482]  ffff8880698a8600: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[   82.401248][ T5482] ==================================================================
[   82.428664][ T5482] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[   82.435895][ T5482] CPU: 0 PID: 5482 Comm: syz-executor.0 Not tainted 6.7.0-rc7-syzkaller-00029-g8735c7c84d1b #0
[   82.446225][ T5482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023
[   82.456279][ T5482] Call Trace:
[   82.459561][ T5482]  <TASK>
[   82.462502][ T5482]  dump_stack_lvl+0x1e7/0x2d0
[   82.467202][ T5482]  ? nf_tcp_handle_invalid+0x650/0x650
[   82.472682][ T5482]  ? panic+0x850/0x850
[   82.476766][ T5482]  ? vscnprintf+0x5d/0x80
[   82.481111][ T5482]  panic+0x349/0x850
[   82.485024][ T5482]  ? check_panic_on_warn+0x21/0xa0
[   82.490147][ T5482]  ? __memcpy_flushcache+0x2b0/0x2b0
[   82.495447][ T5482]  ? _raw_spin_unlock_irqrestore+0x12c/0x140
[   82.501436][ T5482]  ? _raw_spin_unlock+0x40/0x40
[   82.506298][ T5482]  ? print_report+0x4fb/0x540
[   82.510992][ T5482]  check_panic_on_warn+0x82/0xa0
[   82.515938][ T5482]  ? ntfs_lookup_inode_by_name+0xe86/0x2ca0
[   82.521821][ T5482]  end_report+0x6e/0x140
[   82.526054][ T5482]  kasan_report+0x153/0x170
[   82.530550][ T5482]  ? ntfs_lookup_inode_by_name+0xe86/0x2ca0
[   82.536432][ T5482]  ntfs_lookup_inode_by_name+0xe86/0x2ca0
[   82.542143][ T5482]  ? clear_nonspinnable+0x60/0x60
[   82.547159][ T5482]  check_windows_hibernation_status+0xf0/0x4c0
[   82.553302][ T5482]  ? load_and_check_logfile+0xd0/0xd0
[   82.558667][ T5482]  ? load_system_files+0x3519/0x4840
[   82.563940][ T5482]  ? rcu_is_watching+0x15/0xb0
[   82.568698][ T5482]  load_system_files+0x35db/0x4840
[   82.573806][ T5482]  ? ntfs_setup_allocators+0x2d0/0x2d0
[   82.579257][ T5482]  ? __asan_memset+0x23/0x40
[   82.583838][ T5482]  ? generate_default_upcase+0x8ed/0x940
[   82.589465][ T5482]  ntfs_fill_super+0x19b3/0x2bd0
[   82.594397][ T5482]  mount_bdev+0x237/0x300
[   82.598715][ T5482]  ? ntfs_mount+0x40/0x40
[   82.603036][ T5482]  ? get_tree_bdev+0x5b0/0x5b0
[   82.607785][ T5482]  ? vfs_parse_fs_string+0x190/0x230
[   82.613059][ T5482]  ? vfs_parse_fs_param+0x410/0x410
[   82.618247][ T5482]  ? cap_capable+0x1b4/0x240
[   82.622830][ T5482]  legacy_get_tree+0xef/0x190
[   82.627503][ T5482]  ? ntfs_rl_punch_nolock+0x15c0/0x15c0
[   82.633037][ T5482]  vfs_get_tree+0x8c/0x2a0
[   82.637443][ T5482]  do_new_mount+0x28f/0xae0
[   82.641934][ T5482]  ? do_move_mount_old+0x170/0x170
[   82.647032][ T5482]  __se_sys_mount+0x2d9/0x3c0
[   82.651694][ T5482]  ? __x64_sys_mount+0xc0/0xc0
[   82.656446][ T5482]  ? syscall_enter_from_user_mode+0xa4/0x2d0
[   82.662499][ T5482]  ? syscall_enter_from_user_mode+0xa4/0x2d0
[   82.668465][ T5482]  ? __x64_sys_mount+0x20/0xc0
[   82.673213][ T5482]  do_syscall_64+0x45/0x110
[   82.677708][ T5482]  entry_SYSCALL_64_after_hwframe+0x63/0x6b
[   82.683591][ T5482] RIP: 0033:0x7f4171e7e1ea
[   82.687994][ T5482] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 09 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[   82.707593][ T5482] RSP: 002b:00007f4172b65ee8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[   82.715994][ T5482] RAX: ffffffffffffffda RBX: 00007f4172b65f80 RCX: 00007f4171e7e1ea
[   82.723953][ T5482] RDX: 000000002001ec80 RSI: 000000002001ecc0 RDI: 00007f4172b65f40
[   82.731909][ T5482] RBP: 000000002001ec80 R08: 00007f4172b65f80 R09: 0000000000000000
[   82.739866][ T5482] R10: 0000000000000000 R11: 0000000000000246 R12: 000000002001ecc0
[   82.747822][ T5482] R13: 00007f4172b65f40 R14: 000000000001ec6a R15: 000000002001ed00
[   82.755785][ T5482]  </TASK>
[   82.758991][ T5482] Kernel Offset: disabled
[   82.763319][ T5482] Rebooting in 86400 seconds..