Warning: Permanently added '10.128.0.228' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 55.997558][ T7020] IPVS: ftp: loaded support on port[0] = 21 [ 56.035508][ T26] audit: type=1800 audit(1589506217.390:2): pid=7020 uid=0 auid=0 ses=5 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor974" name="file0" dev="sda1" ino=15706 res=0 [ 56.042518][ T7020] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 56.067834][ T7020] Process accounting resumed [ 56.074180][ T7020] ================================================================== [ 56.082544][ T7020] BUG: KASAN: use-after-free in get_block+0x110f/0x1380 [ 56.089478][ T7020] Read of size 2 at addr ffff888089cf5bb8 by task syz-executor974/7020 [ 56.097726][ T7020] [ 56.100060][ T7020] CPU: 1 PID: 7020 Comm: syz-executor974 Not tainted 5.7.0-rc5-syzkaller #0 [ 56.108729][ T7020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 56.118780][ T7020] Call Trace: [ 56.122074][ T7020] dump_stack+0x188/0x20d [ 56.126415][ T7020] print_address_description.constprop.0.cold+0xd3/0x315 [ 56.133438][ T7020] ? get_block+0x110f/0x1380 [ 56.138039][ T7020] __kasan_report.cold+0x35/0x4d [ 56.142997][ T7020] ? get_block+0x110f/0x1380 [ 56.147626][ T7020] ? get_block+0x110f/0x1380 [ 56.152205][ T7020] kasan_report+0x33/0x50 [ 56.156542][ T7020] get_block+0x110f/0x1380 [ 56.160980][ T7020] ? block_to_path.isra.0+0x300/0x300 [ 56.166372][ T7020] ? create_empty_buffers+0x590/0x8c0 [ 56.171744][ T7020] ? __alloc_pages_nodemask+0x5f4/0x810 [ 56.177326][ T7020] ? do_raw_spin_unlock+0x171/0x260 [ 56.182531][ T7020] minix_get_block+0xe5/0x110 [ 56.187223][ T7020] __block_write_begin_int+0x490/0x1b00 [ 56.192772][ T7020] ? minix_rename+0x8c0/0x8c0 [ 56.197577][ T7020] ? remove_inode_buffers+0x1c0/0x1c0 [ 56.202952][ T7020] ? pagecache_get_page+0x204/0xa10 [ 56.208326][ T7020] ? wait_for_stable_page+0x11c/0x1e0 [ 56.213709][ T7020] ? minix_rename+0x8c0/0x8c0 [ 56.218374][ T7020] block_write_begin+0x58/0x2e0 [ 56.223225][ T7020] minix_write_begin+0x35/0xe0 [ 56.227984][ T7020] generic_perform_write+0x20a/0x4e0 [ 56.233255][ T7020] ? __mnt_drop_write+0x50/0x80 [ 56.238083][ T7020] ? trace_event_raw_event_file_check_and_advance_wb_err+0x4a0/0x4a0 [ 56.246122][ T7020] ? update_time+0xc0/0xc0 [ 56.250532][ T7020] ? down_write+0xdb/0x150 [ 56.254962][ T7020] __generic_file_write_iter+0x24c/0x610 [ 56.261186][ T7020] generic_file_write_iter+0x3f3/0x630 [ 56.266644][ T7020] ? __generic_file_write_iter+0x610/0x610 [ 56.272425][ T7020] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 56.277863][ T7020] ? preempt_schedule_irq+0xee/0x150 [ 56.283126][ T7020] new_sync_write+0x4a2/0x700 [ 56.287797][ T7020] ? new_sync_read+0x7a0/0x7a0 [ 56.292552][ T7020] __vfs_write+0xc9/0x100 [ 56.296872][ T7020] __kernel_write+0x11c/0x3a0 [ 56.301529][ T7020] do_acct_process+0xcdc/0x10e0 [ 56.306367][ T7020] ? acct_on+0x770/0x770 [ 56.310610][ T7020] acct_process+0x50e/0x5b7 [ 56.315112][ T7020] ? acct_collect+0x800/0x800 [ 56.319818][ T7020] ? fput_many+0x2f/0x1a0 [ 56.324136][ T7020] do_exit+0x1ac0/0x2dd0 [ 56.328365][ T7020] ? mm_update_next_owner+0x7a0/0x7a0 [ 56.333727][ T7020] ? up_read+0x1ab/0x750 [ 56.337982][ T7020] ? down_read_nested+0x420/0x420 [ 56.343090][ T7020] ? handle_mm_fault+0x29e/0x660 [ 56.348021][ T7020] do_group_exit+0x125/0x340 [ 56.352871][ T7020] __x64_sys_exit_group+0x3a/0x50 [ 56.357876][ T7020] do_syscall_64+0xf6/0x7d0 [ 56.362362][ T7020] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 56.368231][ T7020] RIP: 0033:0x444458 [ 56.372241][ T7020] Code: Bad RIP value. [ 56.376281][ T7020] RSP: 002b:00007ffd788d1ac8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 56.385017][ T7020] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 0000000000444458 [ 56.392988][ T7020] RDX: 0000000000000001 RSI: 000000000000003c RDI: 0000000000000001 [ 56.401021][ T7020] RBP: 00000000004c7010 R08: 00000000000000e7 R09: ffffffffffffffd4 [ 56.408967][ T7020] R10: 00007ffd788d19e0 R11: 0000000000000246 R12: 0000000000000001 [ 56.416922][ T7020] R13: 00000000006d9a40 R14: 0000000000000000 R15: 0000000000000000 [ 56.424916][ T7020] [ 56.427216][ T7020] The buggy address belongs to the page: [ 56.432836][ T7020] page:ffffea0002273d40 refcount:0 mapcount:0 mapping:00000000e66568da index:0x1 [ 56.441911][ T7020] flags: 0xfffe0000000000() [ 56.446388][ T7020] raw: 00fffe0000000000 ffffea00021b99c8 ffffea0002278f48 0000000000000000 [ 56.454944][ T7020] raw: 0000000000000001 0000000000000000 00000000ffffffff 0000000000000000 [ 56.463510][ T7020] page dumped because: kasan: bad access detected [ 56.469905][ T7020] [ 56.472206][ T7020] Memory state around the buggy address: [ 56.477821][ T7020] ffff888089cf5a80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 56.485898][ T7020] ffff888089cf5b00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 56.493956][ T7020] >ffff888089cf5b80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 56.502010][ T7020] ^ [ 56.507880][ T7020] ffff888089cf5c00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 56.515920][ T7020] ffff888089cf5c80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 56.523966][ T7020] ================================================================== [ 56.532521][ T7020] Disabling lock debugging due to kernel taint [ 56.538878][ T7020] Kernel panic - not syncing: panic_on_warn set ... [ 56.545507][ T7020] CPU: 1 PID: 7020 Comm: syz-executor974 Tainted: G B 5.7.0-rc5-syzkaller #0 [ 56.555554][ T7020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 56.565605][ T7020] Call Trace: [ 56.568877][ T7020] dump_stack+0x188/0x20d [ 56.573185][ T7020] panic+0x2e3/0x75c [ 56.577054][ T7020] ? add_taint.cold+0x16/0x16 [ 56.581706][ T7020] ? get_block+0x110f/0x1380 [ 56.586268][ T7020] ? trace_hardirqs_on+0x55/0x220 [ 56.591300][ T7020] ? get_block+0x110f/0x1380 [ 56.595872][ T7020] end_report+0x4d/0x53 [ 56.600000][ T7020] __kasan_report.cold+0xd/0x4d [ 56.604823][ T7020] ? get_block+0x110f/0x1380 [ 56.609393][ T7020] ? get_block+0x110f/0x1380 [ 56.613958][ T7020] kasan_report+0x33/0x50 [ 56.619039][ T7020] get_block+0x110f/0x1380 [ 56.623443][ T7020] ? block_to_path.isra.0+0x300/0x300 [ 56.628803][ T7020] ? create_empty_buffers+0x590/0x8c0 [ 56.634148][ T7020] ? __alloc_pages_nodemask+0x5f4/0x810 [ 56.639665][ T7020] ? do_raw_spin_unlock+0x171/0x260 [ 56.644834][ T7020] minix_get_block+0xe5/0x110 [ 56.649830][ T7020] __block_write_begin_int+0x490/0x1b00 [ 56.655370][ T7020] ? minix_rename+0x8c0/0x8c0 [ 56.660033][ T7020] ? remove_inode_buffers+0x1c0/0x1c0 [ 56.665701][ T7020] ? pagecache_get_page+0x204/0xa10 [ 56.670893][ T7020] ? wait_for_stable_page+0x11c/0x1e0 [ 56.676387][ T7020] ? minix_rename+0x8c0/0x8c0 [ 56.681047][ T7020] block_write_begin+0x58/0x2e0 [ 56.686149][ T7020] minix_write_begin+0x35/0xe0 [ 56.690904][ T7020] generic_perform_write+0x20a/0x4e0 [ 56.696190][ T7020] ? __mnt_drop_write+0x50/0x80 [ 56.701020][ T7020] ? trace_event_raw_event_file_check_and_advance_wb_err+0x4a0/0x4a0 [ 56.709059][ T7020] ? update_time+0xc0/0xc0 [ 56.713519][ T7020] ? down_write+0xdb/0x150 [ 56.717935][ T7020] __generic_file_write_iter+0x24c/0x610 [ 56.723549][ T7020] generic_file_write_iter+0x3f3/0x630 [ 56.728981][ T7020] ? __generic_file_write_iter+0x610/0x610 [ 56.734909][ T7020] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 56.740348][ T7020] ? preempt_schedule_irq+0xee/0x150 [ 56.745614][ T7020] new_sync_write+0x4a2/0x700 [ 56.750265][ T7020] ? new_sync_read+0x7a0/0x7a0 [ 56.755005][ T7020] __vfs_write+0xc9/0x100 [ 56.759317][ T7020] __kernel_write+0x11c/0x3a0 [ 56.763967][ T7020] do_acct_process+0xcdc/0x10e0 [ 56.768810][ T7020] ? acct_on+0x770/0x770 [ 56.773027][ T7020] acct_process+0x50e/0x5b7 [ 56.777502][ T7020] ? acct_collect+0x800/0x800 [ 56.782151][ T7020] ? fput_many+0x2f/0x1a0 [ 56.786549][ T7020] do_exit+0x1ac0/0x2dd0 [ 56.790767][ T7020] ? mm_update_next_owner+0x7a0/0x7a0 [ 56.796119][ T7020] ? up_read+0x1ab/0x750 [ 56.800366][ T7020] ? down_read_nested+0x420/0x420 [ 56.805377][ T7020] ? handle_mm_fault+0x29e/0x660 [ 56.810286][ T7020] do_group_exit+0x125/0x340 [ 56.814851][ T7020] __x64_sys_exit_group+0x3a/0x50 [ 56.819891][ T7020] do_syscall_64+0xf6/0x7d0 [ 56.824419][ T7020] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 56.830330][ T7020] RIP: 0033:0x444458 [ 56.834224][ T7020] Code: Bad RIP value. [ 56.838258][ T7020] RSP: 002b:00007ffd788d1ac8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 56.846662][ T7020] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 0000000000444458 [ 56.854626][ T7020] RDX: 0000000000000001 RSI: 000000000000003c RDI: 0000000000000001 [ 56.862625][ T7020] RBP: 00000000004c7010 R08: 00000000000000e7 R09: ffffffffffffffd4 [ 56.870592][ T7020] R10: 00007ffd788d19e0 R11: 0000000000000246 R12: 0000000000000001 [ 56.878547][ T7020] R13: 00000000006d9a40 R14: 0000000000000000 R15: 0000000000000000 [ 56.888095][ T7020] Kernel Offset: disabled [ 56.892570][ T7020] Rebooting in 86400 seconds..