Warning: Permanently added '10.128.10.7' (ED25519) to the list of known hosts. 2023/09/29 03:34:13 ignoring optional flag "sandboxArg"="0" 2023/09/29 03:34:13 parsed 1 programs 2023/09/29 03:34:15 executed programs: 0 [ 103.660313][ T5403] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 103.726013][ T4448] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 103.734547][ T4448] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 103.743040][ T4448] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 103.751266][ T4448] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 103.759765][ T4448] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 103.767923][ T4448] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 103.927379][ T5410] chnl_net:caif_netlink_parms(): no params data found [ 104.001262][ T5410] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.008665][ T5410] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.015793][ T5410] bridge_slave_0: entered allmulticast mode [ 104.023157][ T5410] bridge_slave_0: entered promiscuous mode [ 104.031595][ T5410] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.038933][ T5410] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.046538][ T5410] bridge_slave_1: entered allmulticast mode [ 104.053668][ T5410] bridge_slave_1: entered promiscuous mode [ 104.087542][ T5410] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.099666][ T5410] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.134506][ T5410] team0: Port device team_slave_0 added [ 104.144344][ T5410] team0: Port device team_slave_1 added [ 104.174302][ T5410] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.181536][ T5410] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.207585][ T5410] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.220305][ T5410] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.227854][ T5410] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.254141][ T5410] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.300174][ T5410] hsr_slave_0: entered promiscuous mode [ 104.307380][ T5410] hsr_slave_1: entered promiscuous mode [ 105.200313][ T5410] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 105.210908][ T5410] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 105.223382][ T5410] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 105.236978][ T5410] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 105.388937][ T5410] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.423729][ T5410] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.444356][ T5431] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.451625][ T5431] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.482350][ T5431] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.489625][ T5431] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.789450][ T5410] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.827680][ T4448] Bluetooth: hci0: command 0x0409 tx timeout [ 105.862767][ T5410] veth0_vlan: entered promiscuous mode [ 105.880972][ T5410] veth1_vlan: entered promiscuous mode [ 105.933731][ T5410] veth0_macvtap: entered promiscuous mode [ 105.949543][ T5410] veth1_macvtap: entered promiscuous mode [ 105.980209][ T5410] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.001936][ T5410] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.020005][ T5410] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.030038][ T5410] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.042543][ T5410] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.052344][ T5410] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.164366][ T54] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.182118][ T54] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.228172][ T54] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.236410][ T54] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.409238][ T5469] loop0: detected capacity change from 0 to 4096 [ 106.428505][ T5469] ntfs: (device loop0): ntfs_is_extended_system_file(): Corrupt file name attribute. You should run chkdsk. [ 106.441950][ T5469] ntfs: (device loop0): ntfs_read_locked_inode(): $DATA attribute is missing. [ 106.452287][ T5469] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 106.467324][ T5469] ntfs: (device loop0): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 106.493053][ T5469] ntfs: volume version 3.1. [ 106.501088][ T5469] ntfs: (device loop0): ntfs_lookup_inode_by_name(): Corrupt directory. Aborting lookup. [ 106.512635][ T5469] ntfs: (device loop0): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 106.528111][ T5469] ntfs: (device loop0): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 106.560101][ T5469] ================================================================== [ 106.568381][ T5469] BUG: KASAN: slab-out-of-bounds in ntfs_readdir+0x1455/0x2b00 [ 106.576218][ T5469] Read of size 1 at addr ffff88814929eaf1 by task syz-executor.0/5469 [ 106.584391][ T5469] [ 106.586729][ T5469] CPU: 0 PID: 5469 Comm: syz-executor.0 Not tainted 6.6.0-rc3-next-20230928-syzkaller-08507-g719136e5c247 #0 [ 106.598343][ T5469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 106.609634][ T5469] Call Trace: [ 106.612934][ T5469] [ 106.615879][ T5469] dump_stack_lvl+0xd9/0x1b0 [ 106.620492][ T5469] print_report+0xc4/0x620 [ 106.625002][ T5469] ? __virt_addr_valid+0x5e/0x2d0 [ 106.630065][ T5469] ? __phys_addr+0xc6/0x140 [ 106.634587][ T5469] kasan_report+0xda/0x110 [ 106.639010][ T5469] ? ntfs_readdir+0x1455/0x2b00 [ 106.643963][ T5469] ? ntfs_readdir+0x1455/0x2b00 [ 106.648931][ T5469] ntfs_readdir+0x1455/0x2b00 [ 106.653628][ T5469] ? preempt_count_sub+0x150/0x150 [ 106.658849][ T5469] ? put_page+0x280/0x280 [ 106.663190][ T5469] ? down_read+0x470/0x470 [ 106.667695][ T5469] ? put_page+0x280/0x280 [ 106.672047][ T5469] wrap_directory_iterator+0xa5/0xe0 [ 106.677359][ T5469] iterate_dir+0x1e5/0x5f0 [ 106.681884][ T5469] __x64_sys_getdents64+0x14f/0x2e0 [ 106.687091][ T5469] ? __ia32_sys_getdents+0x2d0/0x2d0 [ 106.693291][ T5469] ? folio_memcg_unlock+0x2d0/0x2d0 [ 106.698843][ T5469] ? fillonedir+0x400/0x400 [ 106.703467][ T5469] ? syscall_enter_from_user_mode+0x26/0x80 [ 106.709644][ T5469] ? lockdep_hardirqs_on+0x7d/0x100 [ 106.714867][ T5469] do_syscall_64+0x38/0xb0 [ 106.719470][ T5469] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 106.725550][ T5469] RIP: 0033:0x7f8255a7cae9 [ 106.729968][ T5469] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 106.749929][ T5469] RSP: 002b:00007f82567950c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 106.758432][ T5469] RAX: ffffffffffffffda RBX: 00007f8255b9bf80 RCX: 00007f8255a7cae9 [ 106.766490][ T5469] RDX: 00000000000000ab RSI: 0000000020000080 RDI: 0000000000000004 [ 106.774547][ T5469] RBP: 00007f8255ac847a R08: 0000000000000000 R09: 0000000000000000 [ 106.782516][ T5469] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 106.790748][ T5469] R13: 000000000000000b R14: 00007f8255b9bf80 R15: 00007ffe33a91ec8 [ 106.799256][ T5469] [ 106.802270][ T5469] [ 106.804593][ T5469] Allocated by task 5469: [ 106.809194][ T5469] kasan_save_stack+0x33/0x50 [ 106.813967][ T5469] kasan_set_track+0x25/0x30 [ 106.818563][ T5469] __kasan_kmalloc+0xa2/0xb0 [ 106.823157][ T5469] __kmalloc+0x60/0x100 [ 106.827313][ T5469] ntfs_readdir+0x11a4/0x2b00 [ 106.832076][ T5469] wrap_directory_iterator+0xa5/0xe0 [ 106.837484][ T5469] iterate_dir+0x1e5/0x5f0 [ 106.841901][ T5469] __x64_sys_getdents64+0x14f/0x2e0 [ 106.847136][ T5469] do_syscall_64+0x38/0xb0 [ 106.851557][ T5469] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 106.857814][ T5469] [ 106.860134][ T5469] The buggy address belongs to the object at ffff88814929ea80 [ 106.860134][ T5469] which belongs to the cache kmalloc-64 of size 64 [ 106.874382][ T5469] The buggy address is located 57 bytes to the right of [ 106.874382][ T5469] allocated 56-byte region [ffff88814929ea80, ffff88814929eab8) [ 106.889073][ T5469] [ 106.891399][ T5469] The buggy address belongs to the physical page: [ 106.897981][ T5469] page:ffffea000524a780 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x14929e [ 106.908496][ T5469] flags: 0x57ff00000000800(slab|node=1|zone=2|lastcpupid=0x7ff) [ 106.916383][ T5469] page_type: 0xffffffff() [ 106.920714][ T5469] raw: 057ff00000000800 ffff888012c41640 dead000000000100 dead000000000122 [ 106.929412][ T5469] raw: 0000000000000000 0000000080200020 00000001ffffffff 0000000000000000 [ 106.938081][ T5469] page dumped because: kasan: bad access detected [ 106.944502][ T5469] page_owner tracks the page as allocated [ 106.950208][ T5469] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 1, tgid 1 (swapper/0), ts 22003395455, free_ts 0 [ 106.967055][ T5469] post_alloc_hook+0x2cf/0x340 [ 106.971836][ T5469] get_page_from_freelist+0x98f/0x32a0 [ 106.977296][ T5469] __alloc_pages+0x1d0/0x4a0 [ 106.982053][ T5469] alloc_page_interleave+0x1e/0x250 [ 106.987346][ T5469] alloc_pages+0x22a/0x270 [ 106.991758][ T5469] allocate_slab+0x251/0x380 [ 106.996357][ T5469] ___slab_alloc+0x8c7/0x1580 [ 107.001029][ T5469] __slab_alloc.constprop.0+0x56/0xa0 [ 107.006483][ T5469] __kmem_cache_alloc_node+0x131/0x330 [ 107.012026][ T5469] kmalloc_trace+0x25/0xe0 [ 107.016535][ T5469] add_sysfs_param+0x651/0x960 [ 107.021298][ T5469] param_sysfs_builtin_init+0x2ca/0x450 [ 107.026848][ T5469] do_one_initcall+0x11c/0x640 [ 107.031702][ T5469] kernel_init_freeable+0x5c2/0x900 [ 107.037083][ T5469] kernel_init+0x1c/0x2a0 [ 107.041498][ T5469] ret_from_fork+0x45/0x80 [ 107.046132][ T5469] page_owner free stack trace missing [ 107.051664][ T5469] [ 107.053983][ T5469] Memory state around the buggy address: [ 107.059616][ T5469] ffff88814929e980: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 107.067763][ T5469] ffff88814929ea00: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 107.075908][ T5469] >ffff88814929ea80: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc [ 107.084406][ T5469] ^ [ 107.092201][ T5469] ffff88814929eb00: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 107.100343][ T5469] ffff88814929eb80: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 107.108505][ T5469] ================================================================== [ 107.149531][ T5469] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 107.156942][ T5469] CPU: 1 PID: 5469 Comm: syz-executor.0 Not tainted 6.6.0-rc3-next-20230928-syzkaller-08507-g719136e5c247 #0 [ 107.168505][ T5469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 107.178670][ T5469] Call Trace: [ 107.181953][ T5469] [ 107.184880][ T5469] dump_stack_lvl+0xd9/0x1b0 [ 107.189484][ T5469] panic+0x6dc/0x790 [ 107.193391][ T5469] ? panic_smp_self_stop+0xa0/0xa0 [ 107.198507][ T5469] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 107.204673][ T5469] ? preempt_schedule_thunk+0x1a/0x30 [ 107.210057][ T5469] ? preempt_schedule_common+0x45/0xc0 [ 107.215527][ T5469] ? check_panic_on_warn+0x1f/0xb0 [ 107.220644][ T5469] check_panic_on_warn+0xab/0xb0 [ 107.225596][ T5469] end_report+0x108/0x150 [ 107.229938][ T5469] kasan_report+0xea/0x110 [ 107.234444][ T5469] ? ntfs_readdir+0x1455/0x2b00 [ 107.239340][ T5469] ? ntfs_readdir+0x1455/0x2b00 [ 107.244225][ T5469] ntfs_readdir+0x1455/0x2b00 [ 107.248908][ T5469] ? preempt_count_sub+0x150/0x150 [ 107.254034][ T5469] ? put_page+0x280/0x280 [ 107.258363][ T5469] ? down_read+0x470/0x470 [ 107.262779][ T5469] ? put_page+0x280/0x280 [ 107.267111][ T5469] wrap_directory_iterator+0xa5/0xe0 [ 107.272492][ T5469] iterate_dir+0x1e5/0x5f0 [ 107.276980][ T5469] __x64_sys_getdents64+0x14f/0x2e0 [ 107.282286][ T5469] ? __ia32_sys_getdents+0x2d0/0x2d0 [ 107.287586][ T5469] ? folio_memcg_unlock+0x2d0/0x2d0 [ 107.293018][ T5469] ? fillonedir+0x400/0x400 [ 107.297614][ T5469] ? syscall_enter_from_user_mode+0x26/0x80 [ 107.303519][ T5469] ? lockdep_hardirqs_on+0x7d/0x100 [ 107.308789][ T5469] do_syscall_64+0x38/0xb0 [ 107.313213][ T5469] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 107.319724][ T5469] RIP: 0033:0x7f8255a7cae9 [ 107.324136][ T5469] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 107.343916][ T5469] RSP: 002b:00007f82567950c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 107.352384][ T5469] RAX: ffffffffffffffda RBX: 00007f8255b9bf80 RCX: 00007f8255a7cae9 [ 107.360453][ T5469] RDX: 00000000000000ab RSI: 0000000020000080 RDI: 0000000000000004 [ 107.368431][ T5469] RBP: 00007f8255ac847a R08: 0000000000000000 R09: 0000000000000000 [ 107.376488][ T5469] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 107.384490][ T5469] R13: 000000000000000b R14: 00007f8255b9bf80 R15: 00007ffe33a91ec8 [ 107.392646][ T5469] [ 107.395879][ T5469] Kernel Offset: disabled [ 107.400194][ T5469] Rebooting in 86400 seconds..