Warning: Permanently added '10.128.1.2' (ED25519) to the list of known hosts. executing program syzkaller login: [ 69.641303][ T4250] loop0: detected capacity change from 0 to 4096 [ 69.653170][ T4250] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 69.734204][ T4250] loop0: detected capacity change from 4096 to 0 [ 69.743399][ T4250] ================================================================== [ 69.751475][ T4250] BUG: KASAN: slab-out-of-bounds in ntfs_sb_write+0x2d1/0x480 [ 69.758958][ T4250] Read of size 3504 at addr ffff888142b18cc0 by task syz-executor363/4250 [ 69.767442][ T4250] [ 69.769758][ T4250] CPU: 0 PID: 4250 Comm: syz-executor363 Not tainted 6.1.117-syzkaller #0 [ 69.778241][ T4250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 69.788306][ T4250] Call Trace: [ 69.791570][ T4250] [ 69.794488][ T4250] dump_stack_lvl+0x1e3/0x2cb [ 69.799160][ T4250] ? nf_tcp_handle_invalid+0x642/0x642 [ 69.804633][ T4250] ? panic+0x764/0x764 [ 69.808729][ T4250] ? _printk+0xd1/0x111 [ 69.812875][ T4250] ? __virt_addr_valid+0x17f/0x530 [ 69.817978][ T4250] ? __virt_addr_valid+0x17f/0x530 [ 69.823108][ T4250] print_report+0x15f/0x4f0 [ 69.827606][ T4250] ? __virt_addr_valid+0x17f/0x530 [ 69.832735][ T4250] ? __virt_addr_valid+0x17f/0x530 [ 69.837836][ T4250] ? __virt_addr_valid+0x45b/0x530 [ 69.842946][ T4250] ? __phys_addr+0xb6/0x170 [ 69.847441][ T4250] ? ntfs_sb_write+0x2d1/0x480 [ 69.852207][ T4250] kasan_report+0x136/0x160 [ 69.856802][ T4250] ? ntfs_sb_write+0x2d1/0x480 [ 69.861567][ T4250] kasan_check_range+0x27f/0x290 [ 69.866494][ T4250] ? ntfs_sb_write+0x2d1/0x480 [ 69.871254][ T4250] memcpy+0x25/0x60 [ 69.875056][ T4250] ntfs_sb_write+0x2d1/0x480 [ 69.879645][ T4250] ntfs_sb_write_run+0x29c/0x810 [ 69.884585][ T4250] ? ntfs_sb_write+0x480/0x480 [ 69.889344][ T4250] ? rcu_is_watching+0x11/0xb0 [ 69.894097][ T4250] ntfs_set_ea+0x11e6/0x1660 [ 69.898682][ T4250] ? ntfs_save_wsl_perm+0x490/0x490 [ 69.903873][ T4250] ? ntfs_save_wsl_perm+0x86/0x490 [ 69.908980][ T4250] ? mutex_lock_nested+0x10/0x10 [ 69.913922][ T4250] ? from_kuid+0x18d/0x6f0 [ 69.918328][ T4250] ? make_kuid+0x700/0x700 [ 69.922758][ T4250] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 69.928734][ T4250] ? print_irqtrace_events+0x210/0x210 [ 69.934196][ T4250] ntfs_save_wsl_perm+0x139/0x490 [ 69.939231][ T4250] ? ntfs_listxattr+0x660/0x660 [ 69.944098][ T4250] ? in_group_or_capable+0x2c/0x50 [ 69.949205][ T4250] ? setattr_copy+0x42f/0x580 [ 69.953875][ T4250] ? ntfs_acl_chmod+0x7a/0x100 [ 69.958631][ T4250] ntfs3_setattr+0x961/0xb70 [ 69.963223][ T4250] ? current_time+0x1fd/0x300 [ 69.967914][ T4250] ? put_page+0x250/0x250 [ 69.972239][ T4250] ? common_perm_cond+0x31b/0x3f0 [ 69.977257][ T4250] ? bpf_lsm_inode_setattr+0x5/0x10 [ 69.982449][ T4250] ? put_page+0x250/0x250 [ 69.986797][ T4250] notify_change+0xce3/0xfc0 [ 69.991381][ T4250] chmod_common+0x2a7/0x4b0 [ 69.995885][ T4250] ? __ia32_sys_chroot+0x40/0x40 [ 70.000818][ T4250] ? kasan_quarantine_put+0xd4/0x220 [ 70.006098][ T4250] ? lockdep_hardirqs_on+0x94/0x130 [ 70.011297][ T4250] ? user_path_at_empty+0x48/0x60 [ 70.016317][ T4250] __x64_sys_fchmodat+0x117/0x1a0 [ 70.021339][ T4250] ? __ia32_sys_fchmod+0x150/0x150 [ 70.026462][ T4250] ? syscall_enter_from_user_mode+0x2e/0x230 [ 70.032436][ T4250] ? lockdep_hardirqs_on+0x94/0x130 [ 70.037629][ T4250] ? syscall_enter_from_user_mode+0x2e/0x230 [ 70.043612][ T4250] do_syscall_64+0x3b/0xb0 [ 70.048038][ T4250] ? clear_bhb_loop+0x45/0xa0 [ 70.052703][ T4250] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 70.058599][ T4250] RIP: 0033:0x7fb3f74b2639 [ 70.063017][ T4250] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 70.082613][ T4250] RSP: 002b:00007ffd2f037d98 EFLAGS: 00000246 ORIG_RAX: 000000000000010c [ 70.091012][ T4250] RAX: ffffffffffffffda RBX: 00007ffd2f037da0 RCX: 00007fb3f74b2639 [ 70.098974][ T4250] RDX: 0000000000000141 RSI: 0000000020000200 RDI: 00000000ffffff9c [ 70.106930][ T4250] RBP: 00007ffd2f037da8 R08: 00007fb3f747e430 R09: 00007fb3f747e430 [ 70.114925][ T4250] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 70.122895][ T4250] R13: 00007ffd2f038008 R14: 0000000000000001 R15: 0000000000000001 [ 70.130871][ T4250] [ 70.133878][ T4250] [ 70.136189][ T4250] Allocated by task 4250: [ 70.140526][ T4250] kasan_set_track+0x4b/0x70 [ 70.145112][ T4250] __kasan_kmalloc+0x97/0xb0 [ 70.149688][ T4250] __kmalloc+0xb2/0x230 [ 70.153833][ T4250] ntfs_set_ea+0x6d7/0x1660 [ 70.158322][ T4250] ntfs_save_wsl_perm+0x139/0x490 [ 70.163330][ T4250] ntfs3_setattr+0x961/0xb70 [ 70.167913][ T4250] notify_change+0xce3/0xfc0 [ 70.172512][ T4250] chmod_common+0x2a7/0x4b0 [ 70.177018][ T4250] __x64_sys_fchmodat+0x117/0x1a0 [ 70.182034][ T4250] do_syscall_64+0x3b/0xb0 [ 70.186458][ T4250] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 70.192376][ T4250] [ 70.194691][ T4250] The buggy address belongs to the object at ffff888142b18cc0 [ 70.194691][ T4250] which belongs to the cache kmalloc-32 of size 32 [ 70.208561][ T4250] The buggy address is located 0 bytes inside of [ 70.208561][ T4250] 32-byte region [ffff888142b18cc0, ffff888142b18ce0) [ 70.221612][ T4250] [ 70.223944][ T4250] The buggy address belongs to the physical page: [ 70.230371][ T4250] page:ffffea00050ac600 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x142b18 [ 70.240591][ T4250] flags: 0x57ff00000000200(slab|node=1|zone=2|lastcpupid=0x7ff) [ 70.248213][ T4250] raw: 057ff00000000200 ffffea000072b900 dead000000000002 ffff888017c41500 [ 70.256789][ T4250] raw: 0000000000000000 0000000080400040 00000001ffffffff 0000000000000000 [ 70.265354][ T4250] page dumped because: kasan: bad access detected [ 70.271752][ T4250] page_owner tracks the page as allocated [ 70.277446][ T4250] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 1, tgid 1 (swapper/0), ts 7805511413, free_ts 0 [ 70.294026][ T4250] post_alloc_hook+0x18d/0x1b0 [ 70.298779][ T4250] get_page_from_freelist+0x3731/0x38d0 [ 70.304311][ T4250] __alloc_pages+0x28d/0x770 [ 70.308883][ T4250] alloc_page_interleave+0x22/0x1c0 [ 70.314069][ T4250] alloc_slab_page+0x6a/0x150 [ 70.318740][ T4250] new_slab+0x84/0x2d0 [ 70.322816][ T4250] ___slab_alloc+0xc20/0x1270 [ 70.327485][ T4250] __kmem_cache_alloc_node+0x19f/0x260 [ 70.332931][ T4250] __kmalloc+0xa1/0x230 [ 70.337074][ T4250] kobject_get_path+0xb4/0x220 [ 70.341843][ T4250] kobject_uevent_env+0x29b/0x8c0 [ 70.346860][ T4250] tty_register_device_attr+0x582/0x960 [ 70.352398][ T4250] tty_register_driver+0x5f6/0xc50 [ 70.357503][ T4250] legacy_pty_init+0x3c7/0x602 [ 70.362293][ T4250] pty_init+0xa/0x12 [ 70.366179][ T4250] do_one_initcall+0x265/0x8f0 [ 70.370938][ T4250] page_owner free stack trace missing [ 70.376290][ T4250] [ 70.378619][ T4250] Memory state around the buggy address: [ 70.384241][ T4250] ffff888142b18b80: fa fb fb fb fc fc fc fc fa fb fb fb fc fc fc fc [ 70.392290][ T4250] ffff888142b18c00: fa fb fb fb fc fc fc fc fa fb fb fb fc fc fc fc [ 70.400348][ T4250] >ffff888142b18c80: fa fb fb fb fc fc fc fc 00 00 04 fc fc fc fc fc [ 70.408398][ T4250] ^ [ 70.415090][ T4250] ffff888142b18d00: fb fb fb fb fc fc fc fc fb fb fb fb fc fc fc fc [ 70.423137][ T4250] ffff888142b18d80: fb fb fb fb fc fc fc fc 00 00 00 00 fc fc fc fc [ 70.431186][ T4250] ================================================================== [ 70.439951][ T4250] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 70.447167][ T4250] CPU: 0 PID: 4250 Comm: syz-executor363 Not tainted 6.1.117-syzkaller #0 [ 70.455669][ T4250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 70.465723][ T4250] Call Trace: [ 70.469011][ T4250] [ 70.471949][ T4250] dump_stack_lvl+0x1e3/0x2cb [ 70.476623][ T4250] ? nf_tcp_handle_invalid+0x642/0x642 [ 70.482095][ T4250] ? panic+0x764/0x764 [ 70.486158][ T4250] ? preempt_schedule_common+0xa6/0xd0 [ 70.491610][ T4250] ? vscnprintf+0x59/0x80 [ 70.495935][ T4250] panic+0x318/0x764 [ 70.499850][ T4250] ? check_panic_on_warn+0x1d/0xa0 [ 70.505058][ T4250] ? memcpy_page_flushcache+0xfc/0xfc [ 70.510439][ T4250] ? _raw_spin_unlock_irqrestore+0x128/0x130 [ 70.516424][ T4250] ? _raw_spin_unlock+0x40/0x40 [ 70.521268][ T4250] ? print_report+0x4a3/0x4f0 [ 70.525958][ T4250] check_panic_on_warn+0x7e/0xa0 [ 70.530894][ T4250] ? ntfs_sb_write+0x2d1/0x480 [ 70.535653][ T4250] end_report+0x66/0x110 [ 70.539903][ T4250] kasan_report+0x143/0x160 [ 70.544430][ T4250] ? ntfs_sb_write+0x2d1/0x480 [ 70.549190][ T4250] kasan_check_range+0x27f/0x290 [ 70.554119][ T4250] ? ntfs_sb_write+0x2d1/0x480 [ 70.558879][ T4250] memcpy+0x25/0x60 [ 70.562676][ T4250] ntfs_sb_write+0x2d1/0x480 [ 70.567279][ T4250] ntfs_sb_write_run+0x29c/0x810 [ 70.572217][ T4250] ? ntfs_sb_write+0x480/0x480 [ 70.577067][ T4250] ? rcu_is_watching+0x11/0xb0 [ 70.581837][ T4250] ntfs_set_ea+0x11e6/0x1660 [ 70.586434][ T4250] ? ntfs_save_wsl_perm+0x490/0x490 [ 70.591646][ T4250] ? ntfs_save_wsl_perm+0x86/0x490 [ 70.596754][ T4250] ? mutex_lock_nested+0x10/0x10 [ 70.601700][ T4250] ? from_kuid+0x18d/0x6f0 [ 70.606113][ T4250] ? make_kuid+0x700/0x700 [ 70.610525][ T4250] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 70.616505][ T4250] ? print_irqtrace_events+0x210/0x210 [ 70.621982][ T4250] ntfs_save_wsl_perm+0x139/0x490 [ 70.627017][ T4250] ? ntfs_listxattr+0x660/0x660 [ 70.631858][ T4250] ? in_group_or_capable+0x2c/0x50 [ 70.636966][ T4250] ? setattr_copy+0x42f/0x580 [ 70.641637][ T4250] ? ntfs_acl_chmod+0x7a/0x100 [ 70.646396][ T4250] ntfs3_setattr+0x961/0xb70 [ 70.650989][ T4250] ? current_time+0x1fd/0x300 [ 70.655663][ T4250] ? put_page+0x250/0x250 [ 70.659988][ T4250] ? common_perm_cond+0x31b/0x3f0 [ 70.665011][ T4250] ? bpf_lsm_inode_setattr+0x5/0x10 [ 70.670197][ T4250] ? put_page+0x250/0x250 [ 70.674539][ T4250] notify_change+0xce3/0xfc0 [ 70.679122][ T4250] chmod_common+0x2a7/0x4b0 [ 70.683735][ T4250] ? __ia32_sys_chroot+0x40/0x40 [ 70.688694][ T4250] ? kasan_quarantine_put+0xd4/0x220 [ 70.693970][ T4250] ? lockdep_hardirqs_on+0x94/0x130 [ 70.699181][ T4250] ? user_path_at_empty+0x48/0x60 [ 70.704204][ T4250] __x64_sys_fchmodat+0x117/0x1a0 [ 70.709241][ T4250] ? __ia32_sys_fchmod+0x150/0x150 [ 70.714381][ T4250] ? syscall_enter_from_user_mode+0x2e/0x230 [ 70.720368][ T4250] ? lockdep_hardirqs_on+0x94/0x130 [ 70.725564][ T4250] ? syscall_enter_from_user_mode+0x2e/0x230 [ 70.731552][ T4250] do_syscall_64+0x3b/0xb0 [ 70.735963][ T4250] ? clear_bhb_loop+0x45/0xa0 [ 70.740632][ T4250] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 70.746521][ T4250] RIP: 0033:0x7fb3f74b2639 [ 70.750927][ T4250] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 70.770537][ T4250] RSP: 002b:00007ffd2f037d98 EFLAGS: 00000246 ORIG_RAX: 000000000000010c [ 70.778954][ T4250] RAX: ffffffffffffffda RBX: 00007ffd2f037da0 RCX: 00007fb3f74b2639 [ 70.786926][ T4250] RDX: 0000000000000141 RSI: 0000000020000200 RDI: 00000000ffffff9c [ 70.794885][ T4250] RBP: 00007ffd2f037da8 R08: 00007fb3f747e430 R09: 00007fb3f747e430 [ 70.802841][ T4250] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 70.810796][ T4250] R13: 00007ffd2f038008 R14: 0000000000000001 R15: 0000000000000001 [ 70.818757][ T4250] [ 70.822173][ T4250] Kernel Offset: disabled [ 70.826501][ T4250] Rebooting in 86400 seconds..