Warning: Permanently added '10.128.1.145' (ED25519) to the list of known hosts. executing program syzkaller login: [ 50.668927][ T3541] loop0: detected capacity change from 0 to 4096 [ 50.678463][ T3541] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 50.700699][ T3541] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 50.708870][ T3541] ntfs3: loop0: Failed to load $Extend. [ 50.725167][ T3541] ================================================================== [ 50.733352][ T3541] BUG: KASAN: slab-out-of-bounds in ntfs_listxattr+0x3b2/0x5b0 [ 50.740941][ T3541] Read of size 48 at addr ffff8880260096b0 by task syz-executor126/3541 [ 50.749358][ T3541] [ 50.751675][ T3541] CPU: 1 PID: 3541 Comm: syz-executor126 Not tainted 6.1.69-syzkaller #0 [ 50.760075][ T3541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 50.770133][ T3541] Call Trace: [ 50.773424][ T3541] [ 50.776369][ T3541] dump_stack_lvl+0x1e3/0x2cb [ 50.781069][ T3541] ? nf_tcp_handle_invalid+0x642/0x642 [ 50.786530][ T3541] ? panic+0x75d/0x75d [ 50.790597][ T3541] ? _printk+0xd1/0x111 [ 50.794748][ T3541] ? _raw_spin_lock_irqsave+0xac/0x120 [ 50.800217][ T3541] print_report+0x15f/0x4f0 [ 50.804829][ T3541] ? memset+0x1f/0x40 [ 50.808813][ T3541] ? __virt_addr_valid+0x22b/0x2e0 [ 50.813925][ T3541] ? __phys_addr+0xb6/0x170 [ 50.818432][ T3541] ? ntfs_listxattr+0x3b2/0x5b0 [ 50.823303][ T3541] kasan_report+0x136/0x160 [ 50.827812][ T3541] ? ntfs_listxattr+0x3b2/0x5b0 [ 50.832657][ T3541] kasan_check_range+0x27f/0x290 [ 50.837588][ T3541] ? ntfs_listxattr+0x3b2/0x5b0 [ 50.842440][ T3541] memcpy+0x25/0x60 [ 50.846259][ T3541] ntfs_listxattr+0x3b2/0x5b0 [ 50.850930][ T3541] ? ntfs_permission+0xf0/0xf0 [ 50.855697][ T3541] ? kvmalloc_node+0x6e/0x180 [ 50.860365][ T3541] ? kvmalloc_node+0x6e/0x180 [ 50.865033][ T3541] ? bpf_lsm_inode_listxattr+0x5/0x10 [ 50.870488][ T3541] listxattr+0x282/0x2e0 [ 50.874719][ T3541] ? ntfs_permission+0xf0/0xf0 [ 50.879473][ T3541] __x64_sys_listxattr+0x172/0x230 [ 50.884594][ T3541] ? print_irqtrace_events+0x210/0x210 [ 50.890061][ T3541] ? __ia32_sys_fgetxattr+0xa0/0xa0 [ 50.895262][ T3541] ? syscall_enter_from_user_mode+0x2e/0x220 [ 50.901234][ T3541] ? lockdep_hardirqs_on+0x94/0x130 [ 50.906423][ T3541] ? syscall_enter_from_user_mode+0x2e/0x220 [ 50.912393][ T3541] do_syscall_64+0x3d/0xb0 [ 50.917000][ T3541] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 50.922908][ T3541] RIP: 0033:0x7f68eaffa5f9 [ 50.927322][ T3541] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 50.946933][ T3541] RSP: 002b:00007fff6fab9998 EFLAGS: 00000246 ORIG_RAX: 00000000000000c2 [ 50.955343][ T3541] RAX: ffffffffffffffda RBX: 00007fff6fab9b78 RCX: 00007f68eaffa5f9 [ 50.963314][ T3541] RDX: 00000000000000ae RSI: 0000000020000080 RDI: 0000000020000000 [ 50.971271][ T3541] RBP: 00007f68eb08c610 R08: 000000000001f1e5 R09: 0000000000000000 [ 50.979243][ T3541] R10: 00007fff6fab9860 R11: 0000000000000246 R12: 0000000000000001 [ 50.987220][ T3541] R13: 00007fff6fab9b68 R14: 0000000000000001 R15: 0000000000000001 [ 50.995194][ T3541] [ 50.998203][ T3541] [ 51.000524][ T3541] Allocated by task 3541: [ 51.005006][ T3541] kasan_set_track+0x4b/0x70 [ 51.009592][ T3541] __kasan_kmalloc+0x97/0xb0 [ 51.014174][ T3541] __kmalloc+0xb2/0x230 [ 51.018318][ T3541] ntfs_read_ea+0x48a/0xa00 [ 51.022816][ T3541] ntfs_listxattr+0x179/0x5b0 [ 51.027486][ T3541] listxattr+0x282/0x2e0 [ 51.031714][ T3541] __x64_sys_listxattr+0x172/0x230 [ 51.036817][ T3541] do_syscall_64+0x3d/0xb0 [ 51.041230][ T3541] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 51.047112][ T3541] [ 51.049423][ T3541] The buggy address belongs to the object at ffff888026009680 [ 51.049423][ T3541] which belongs to the cache kmalloc-64 of size 64 [ 51.063287][ T3541] The buggy address is located 48 bytes inside of [ 51.063287][ T3541] 64-byte region [ffff888026009680, ffff8880260096c0) [ 51.076371][ T3541] [ 51.078689][ T3541] The buggy address belongs to the physical page: [ 51.085106][ T3541] page:ffffea0000980240 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x26009 [ 51.095377][ T3541] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 51.102910][ T3541] raw: 00fff00000000200 ffffea000099bf40 dead000000000004 ffff888012441640 [ 51.111576][ T3541] raw: 0000000000000000 0000000080200020 00000001ffffffff 0000000000000000 [ 51.120140][ T3541] page dumped because: kasan: bad access detected [ 51.126533][ T3541] page_owner tracks the page as allocated [ 51.132229][ T3541] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 1, tgid 1 (swapper/0), ts 8927623238, free_ts 0 [ 51.148970][ T3541] post_alloc_hook+0x18d/0x1b0 [ 51.153738][ T3541] get_page_from_freelist+0x31a1/0x3320 [ 51.159269][ T3541] __alloc_pages+0x28d/0x770 [ 51.163930][ T3541] alloc_page_interleave+0x22/0x1c0 [ 51.169119][ T3541] alloc_slab_page+0x6a/0x150 [ 51.173793][ T3541] new_slab+0x84/0x2d0 [ 51.177848][ T3541] ___slab_alloc+0xc20/0x1270 [ 51.182533][ T3541] __kmem_cache_alloc_node+0x19f/0x260 [ 51.187979][ T3541] kmalloc_trace+0x26/0xe0 [ 51.192452][ T3541] __kthread_create_on_node+0x106/0x520 [ 51.197992][ T3541] kthread_create_on_node+0xda/0x120 [ 51.203271][ T3541] cec_allocate_adapter+0x402/0x5e0 [ 51.208542][ T3541] vivid_cec_alloc_adap+0xf1/0x150 [ 51.213654][ T3541] vivid_probe+0x4f99/0x7420 [ 51.218321][ T3541] platform_probe+0x131/0x1b0 [ 51.222989][ T3541] really_probe+0x2ab/0xcb0 [ 51.227485][ T3541] page_owner free stack trace missing [ 51.232835][ T3541] [ 51.235146][ T3541] Memory state around the buggy address: [ 51.240759][ T3541] ffff888026009580: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc [ 51.248805][ T3541] ffff888026009600: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc [ 51.256851][ T3541] >ffff888026009680: 00 00 00 00 00 00 00 04 fc fc fc fc fc fc fc fc [ 51.264895][ T3541] ^ [ 51.270770][ T3541] ffff888026009700: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 51.278815][ T3541] ffff888026009780: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc [ 51.286870][ T3541] ================================================================== [ 51.295482][ T3541] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 51.302693][ T3541] CPU: 1 PID: 3541 Comm: syz-executor126 Not tainted 6.1.69-syzkaller #0 [ 51.311102][ T3541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 51.321152][ T3541] Call Trace: [ 51.324510][ T3541] [ 51.327431][ T3541] dump_stack_lvl+0x1e3/0x2cb [ 51.332104][ T3541] ? nf_tcp_handle_invalid+0x642/0x642 [ 51.337552][ T3541] ? panic+0x75d/0x75d [ 51.341616][ T3541] ? preempt_schedule_common+0xa6/0xd0 [ 51.347079][ T3541] ? vscnprintf+0x59/0x80 [ 51.351484][ T3541] panic+0x318/0x75d [ 51.355368][ T3541] ? check_panic_on_warn+0x1d/0xa0 [ 51.360466][ T3541] ? memcpy_page_flushcache+0xfc/0xfc [ 51.365844][ T3541] ? _raw_spin_unlock_irqrestore+0x128/0x130 [ 51.371830][ T3541] ? _raw_spin_unlock+0x40/0x40 [ 51.376704][ T3541] check_panic_on_warn+0x7e/0xa0 [ 51.381636][ T3541] ? ntfs_listxattr+0x3b2/0x5b0 [ 51.386481][ T3541] end_report+0x66/0x110 [ 51.390716][ T3541] kasan_report+0x143/0x160 [ 51.395215][ T3541] ? ntfs_listxattr+0x3b2/0x5b0 [ 51.400068][ T3541] kasan_check_range+0x27f/0x290 [ 51.404999][ T3541] ? ntfs_listxattr+0x3b2/0x5b0 [ 51.409851][ T3541] memcpy+0x25/0x60 [ 51.413649][ T3541] ntfs_listxattr+0x3b2/0x5b0 [ 51.418319][ T3541] ? ntfs_permission+0xf0/0xf0 [ 51.423161][ T3541] ? kvmalloc_node+0x6e/0x180 [ 51.427822][ T3541] ? kvmalloc_node+0x6e/0x180 [ 51.432492][ T3541] ? bpf_lsm_inode_listxattr+0x5/0x10 [ 51.437851][ T3541] listxattr+0x282/0x2e0 [ 51.442079][ T3541] ? ntfs_permission+0xf0/0xf0 [ 51.446831][ T3541] __x64_sys_listxattr+0x172/0x230 [ 51.451940][ T3541] ? print_irqtrace_events+0x210/0x210 [ 51.457486][ T3541] ? __ia32_sys_fgetxattr+0xa0/0xa0 [ 51.462791][ T3541] ? syscall_enter_from_user_mode+0x2e/0x220 [ 51.468755][ T3541] ? lockdep_hardirqs_on+0x94/0x130 [ 51.473939][ T3541] ? syscall_enter_from_user_mode+0x2e/0x220 [ 51.479903][ T3541] do_syscall_64+0x3d/0xb0 [ 51.484355][ T3541] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 51.490235][ T3541] RIP: 0033:0x7f68eaffa5f9 [ 51.494636][ T3541] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 51.514330][ T3541] RSP: 002b:00007fff6fab9998 EFLAGS: 00000246 ORIG_RAX: 00000000000000c2 [ 51.522738][ T3541] RAX: ffffffffffffffda RBX: 00007fff6fab9b78 RCX: 00007f68eaffa5f9 [ 51.530699][ T3541] RDX: 00000000000000ae RSI: 0000000020000080 RDI: 0000000020000000 [ 51.538654][ T3541] RBP: 00007f68eb08c610 R08: 000000000001f1e5 R09: 0000000000000000 [ 51.546613][ T3541] R10: 00007fff6fab9860 R11: 0000000000000246 R12: 0000000000000001 [ 51.554568][ T3541] R13: 00007fff6fab9b68 R14: 0000000000000001 R15: 0000000000000001 [ 51.562619][ T3541] [ 51.565807][ T3541] Kernel Offset: disabled [ 51.570116][ T3541] Rebooting in 86400 seconds..