Warning: Permanently added '10.128.10.24' (ED25519) to the list of known hosts. executing program [ 80.502719][ T4243] loop0: detected capacity change from 0 to 4096 [ 80.513943][ T4243] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 80.596951][ T4243] loop0: detected capacity change from 4096 to 0 [ 80.606639][ T4243] ================================================================== [ 80.614741][ T4243] BUG: KASAN: use-after-free in ntfs_set_ea+0x1394/0x1660 [ 80.621910][ T4243] Write of size 4 at addr ffff888141eb859c by task syz-executor202/4243 [ 80.630266][ T4243] [ 80.632599][ T4243] CPU: 1 PID: 4243 Comm: syz-executor202 Not tainted 6.1.117-syzkaller #0 [ 80.641100][ T4243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 80.651187][ T4243] Call Trace: [ 80.654558][ T4243] [ 80.657516][ T4243] dump_stack_lvl+0x1e3/0x2cb [ 80.662220][ T4243] ? nf_tcp_handle_invalid+0x642/0x642 [ 80.667779][ T4243] ? panic+0x764/0x764 [ 80.671858][ T4243] ? _printk+0xd1/0x111 [ 80.676053][ T4243] ? __virt_addr_valid+0x17f/0x530 [ 80.681176][ T4243] ? __virt_addr_valid+0x17f/0x530 [ 80.686294][ T4243] print_report+0x15f/0x4f0 [ 80.690815][ T4243] ? __virt_addr_valid+0x17f/0x530 [ 80.695959][ T4243] ? __virt_addr_valid+0x17f/0x530 [ 80.701183][ T4243] ? __virt_addr_valid+0x45b/0x530 [ 80.706312][ T4243] ? __phys_addr+0xb6/0x170 [ 80.710845][ T4243] ? ntfs_set_ea+0x1394/0x1660 [ 80.715652][ T4243] kasan_report+0x136/0x160 [ 80.720164][ T4243] ? ntfs_set_ea+0x1394/0x1660 [ 80.725028][ T4243] ntfs_set_ea+0x1394/0x1660 [ 80.729641][ T4243] ? trace_raw_output_contention_end+0xd0/0xd0 [ 80.735809][ T4243] ? ntfs_save_wsl_perm+0x490/0x490 [ 80.741030][ T4243] ? ntfs_save_wsl_perm+0x86/0x490 [ 80.746173][ T4243] ? mutex_lock_nested+0x10/0x10 [ 80.751116][ T4243] ? from_kuid+0x18d/0x6f0 [ 80.755563][ T4243] ? make_kuid+0x700/0x700 [ 80.760015][ T4243] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 80.766023][ T4243] ? print_irqtrace_events+0x210/0x210 [ 80.771510][ T4243] ntfs_save_wsl_perm+0x139/0x490 [ 80.776557][ T4243] ? ntfs_listxattr+0x660/0x660 [ 80.781417][ T4243] ? in_group_or_capable+0x2c/0x50 [ 80.786542][ T4243] ? setattr_copy+0x42f/0x580 [ 80.791231][ T4243] ? ntfs_acl_chmod+0x7a/0x100 [ 80.796002][ T4243] ntfs3_setattr+0x961/0xb70 [ 80.800611][ T4243] ? current_time+0x1fd/0x300 [ 80.805308][ T4243] ? put_page+0x250/0x250 [ 80.809649][ T4243] ? common_perm_cond+0x31b/0x3f0 [ 80.814688][ T4243] ? bpf_lsm_inode_setattr+0x5/0x10 [ 80.819919][ T4243] ? put_page+0x250/0x250 [ 80.824278][ T4243] notify_change+0xce3/0xfc0 [ 80.828890][ T4243] chmod_common+0x2a7/0x4b0 [ 80.833422][ T4243] ? __ia32_sys_chroot+0x40/0x40 [ 80.838374][ T4243] ? kasan_quarantine_put+0xd4/0x220 [ 80.843666][ T4243] ? lockdep_hardirqs_on+0x94/0x130 [ 80.848876][ T4243] ? user_path_at_empty+0x48/0x60 [ 80.853909][ T4243] __x64_sys_fchmodat+0x117/0x1a0 [ 80.858945][ T4243] ? __ia32_sys_fchmod+0x150/0x150 [ 80.864066][ T4243] ? syscall_enter_from_user_mode+0x2e/0x230 [ 80.870052][ T4243] ? lockdep_hardirqs_on+0x94/0x130 [ 80.875255][ T4243] ? syscall_enter_from_user_mode+0x2e/0x230 [ 80.881245][ T4243] do_syscall_64+0x3b/0xb0 [ 80.885667][ T4243] ? clear_bhb_loop+0x45/0xa0 [ 80.890349][ T4243] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 80.896256][ T4243] RIP: 0033:0x7fc702fccc59 [ 80.900689][ T4243] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 80.920323][ T4243] RSP: 002b:00007fffb50564c8 EFLAGS: 00000246 ORIG_RAX: 000000000000010c [ 80.928753][ T4243] RAX: ffffffffffffffda RBX: 0030656c69662f2e RCX: 00007fc702fccc59 [ 80.936732][ T4243] RDX: 0000000000000141 RSI: 0000000020000200 RDI: 00000000ffffff9c [ 80.944709][ T4243] RBP: 00007fc7030605f0 R08: 6c616b7a79732f2e R09: 6c616b7a79732f2e [ 80.952700][ T4243] R10: 6c616b7a79732f2e R11: 0000000000000246 R12: 0000000000000001 [ 80.960708][ T4243] R13: 00007fffb50566a8 R14: 0000000000000001 R15: 0000000000000001 [ 80.968699][ T4243] [ 80.971722][ T4243] [ 80.974066][ T4243] Allocated by task 1: [ 80.978159][ T4243] kasan_set_track+0x4b/0x70 [ 80.982790][ T4243] __kasan_kmalloc+0x97/0xb0 [ 80.987413][ T4243] call_usermodehelper_setup+0x8a/0x260 [ 80.992975][ T4243] kobject_uevent_env+0x688/0x8c0 [ 80.998011][ T4243] kernel_add_sysfs_param+0x106/0x126 [ 81.003394][ T4243] param_sysfs_builtin+0x16a/0x1e2 [ 81.008515][ T4243] param_sysfs_init+0x66/0x6a [ 81.013201][ T4243] do_one_initcall+0x265/0x8f0 [ 81.017992][ T4243] do_initcall_level+0x157/0x207 [ 81.022955][ T4243] do_initcalls+0x49/0x86 [ 81.027287][ T4243] kernel_init_freeable+0x45c/0x60f [ 81.032491][ T4243] kernel_init+0x19/0x290 [ 81.036830][ T4243] ret_from_fork+0x1f/0x30 [ 81.041259][ T4243] [ 81.043584][ T4243] The buggy address belongs to the object at ffff888141eb8500 [ 81.043584][ T4243] which belongs to the cache kmalloc-192 of size 192 [ 81.057659][ T4243] The buggy address is located 156 bytes inside of [ 81.057659][ T4243] 192-byte region [ffff888141eb8500, ffff888141eb85c0) [ 81.070935][ T4243] [ 81.073260][ T4243] The buggy address belongs to the physical page: [ 81.079680][ T4243] page:ffffea000507ae00 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888141eb8f00 pfn:0x141eb8 [ 81.091222][ T4243] flags: 0x57ff00000000200(slab|node=1|zone=2|lastcpupid=0x7ff) [ 81.098961][ T4243] raw: 057ff00000000200 ffffea000505a5c8 ffffea000507b148 ffff888017c41a00 [ 81.107548][ T4243] raw: ffff888141eb8f00 0000000000100001 00000001ffffffff 0000000000000000 [ 81.116138][ T4243] page dumped because: kasan: bad access detected [ 81.122562][ T4243] page_owner tracks the page as allocated [ 81.128274][ T4243] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 1, tgid 1 (swapper/0), ts 2652706099, free_ts 0 [ 81.144862][ T4243] post_alloc_hook+0x18d/0x1b0 [ 81.149648][ T4243] get_page_from_freelist+0x3731/0x38d0 [ 81.155201][ T4243] __alloc_pages+0x28d/0x770 [ 81.159802][ T4243] alloc_page_interleave+0x22/0x1c0 [ 81.165001][ T4243] alloc_slab_page+0x6a/0x150 [ 81.169689][ T4243] new_slab+0x84/0x2d0 [ 81.173766][ T4243] ___slab_alloc+0xc20/0x1270 [ 81.178450][ T4243] __kmem_cache_alloc_node+0x19f/0x260 [ 81.183916][ T4243] kmalloc_trace+0x26/0xe0 [ 81.188337][ T4243] call_usermodehelper_setup+0x8a/0x260 [ 81.193896][ T4243] kobject_uevent_env+0x688/0x8c0 [ 81.198927][ T4243] kernel_add_sysfs_param+0x106/0x126 [ 81.204308][ T4243] param_sysfs_builtin+0x16a/0x1e2 [ 81.209433][ T4243] param_sysfs_init+0x66/0x6a [ 81.214120][ T4243] do_one_initcall+0x265/0x8f0 [ 81.218895][ T4243] do_initcall_level+0x157/0x207 [ 81.223836][ T4243] page_owner free stack trace missing [ 81.229201][ T4243] [ 81.231526][ T4243] Memory state around the buggy address: [ 81.237154][ T4243] ffff888141eb8480: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 81.245220][ T4243] ffff888141eb8500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 81.253281][ T4243] >ffff888141eb8580: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 81.261340][ T4243] ^ [ 81.266190][ T4243] ffff888141eb8600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 81.274249][ T4243] ffff888141eb8680: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 81.282321][ T4243] ================================================================== [ 81.290624][ T4243] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 81.297838][ T4243] CPU: 0 PID: 4243 Comm: syz-executor202 Not tainted 6.1.117-syzkaller #0 [ 81.306341][ T4243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 81.316405][ T4243] Call Trace: [ 81.319692][ T4243] [ 81.322625][ T4243] dump_stack_lvl+0x1e3/0x2cb [ 81.327320][ T4243] ? nf_tcp_handle_invalid+0x642/0x642 [ 81.332920][ T4243] ? panic+0x764/0x764 [ 81.336997][ T4243] ? preempt_schedule_common+0xa6/0xd0 [ 81.342467][ T4243] ? vscnprintf+0x59/0x80 [ 81.346807][ T4243] panic+0x318/0x764 [ 81.350709][ T4243] ? check_panic_on_warn+0x1d/0xa0 [ 81.355913][ T4243] ? memcpy_page_flushcache+0xfc/0xfc [ 81.361380][ T4243] ? _raw_spin_unlock_irqrestore+0x128/0x130 [ 81.367389][ T4243] ? _raw_spin_unlock+0x40/0x40 [ 81.372247][ T4243] ? print_report+0x4a3/0x4f0 [ 81.376932][ T4243] check_panic_on_warn+0x7e/0xa0 [ 81.381907][ T4243] ? ntfs_set_ea+0x1394/0x1660 [ 81.386682][ T4243] end_report+0x66/0x110 [ 81.390941][ T4243] kasan_report+0x143/0x160 [ 81.395478][ T4243] ? ntfs_set_ea+0x1394/0x1660 [ 81.400275][ T4243] ntfs_set_ea+0x1394/0x1660 [ 81.404964][ T4243] ? trace_raw_output_contention_end+0xd0/0xd0 [ 81.411133][ T4243] ? ntfs_save_wsl_perm+0x490/0x490 [ 81.416400][ T4243] ? ntfs_save_wsl_perm+0x86/0x490 [ 81.421526][ T4243] ? mutex_lock_nested+0x10/0x10 [ 81.426467][ T4243] ? from_kuid+0x18d/0x6f0 [ 81.430892][ T4243] ? make_kuid+0x700/0x700 [ 81.435315][ T4243] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 81.441315][ T4243] ? print_irqtrace_events+0x210/0x210 [ 81.446798][ T4243] ntfs_save_wsl_perm+0x139/0x490 [ 81.451838][ T4243] ? ntfs_listxattr+0x660/0x660 [ 81.456722][ T4243] ? in_group_or_capable+0x2c/0x50 [ 81.461860][ T4243] ? setattr_copy+0x42f/0x580 [ 81.466558][ T4243] ? ntfs_acl_chmod+0x7a/0x100 [ 81.471374][ T4243] ntfs3_setattr+0x961/0xb70 [ 81.475991][ T4243] ? current_time+0x1fd/0x300 [ 81.480680][ T4243] ? put_page+0x250/0x250 [ 81.485023][ T4243] ? common_perm_cond+0x31b/0x3f0 [ 81.490059][ T4243] ? bpf_lsm_inode_setattr+0x5/0x10 [ 81.495289][ T4243] ? put_page+0x250/0x250 [ 81.499635][ T4243] notify_change+0xce3/0xfc0 [ 81.504495][ T4243] chmod_common+0x2a7/0x4b0 [ 81.509013][ T4243] ? __ia32_sys_chroot+0x40/0x40 [ 81.513960][ T4243] ? kasan_quarantine_put+0xd4/0x220 [ 81.519253][ T4243] ? lockdep_hardirqs_on+0x94/0x130 [ 81.524462][ T4243] ? user_path_at_empty+0x48/0x60 [ 81.529494][ T4243] __x64_sys_fchmodat+0x117/0x1a0 [ 81.534531][ T4243] ? __ia32_sys_fchmod+0x150/0x150 [ 81.539655][ T4243] ? syscall_enter_from_user_mode+0x2e/0x230 [ 81.545731][ T4243] ? lockdep_hardirqs_on+0x94/0x130 [ 81.550936][ T4243] ? syscall_enter_from_user_mode+0x2e/0x230 [ 81.556925][ T4243] do_syscall_64+0x3b/0xb0 [ 81.561347][ T4243] ? clear_bhb_loop+0x45/0xa0 [ 81.566026][ T4243] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 81.571931][ T4243] RIP: 0033:0x7fc702fccc59 [ 81.576353][ T4243] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 81.595967][ T4243] RSP: 002b:00007fffb50564c8 EFLAGS: 00000246 ORIG_RAX: 000000000000010c [ 81.604393][ T4243] RAX: ffffffffffffffda RBX: 0030656c69662f2e RCX: 00007fc702fccc59 [ 81.612379][ T4243] RDX: 0000000000000141 RSI: 0000000020000200 RDI: 00000000ffffff9c [ 81.620364][ T4243] RBP: 00007fc7030605f0 R08: 6c616b7a79732f2e R09: 6c616b7a79732f2e [ 81.628366][ T4243] R10: 6c616b7a79732f2e R11: 0000000000000246 R12: 0000000000000001 [ 81.636342][ T4243] R13: 00007fffb50566a8 R14: 0000000000000001 R15: 0000000000000001 [ 81.644360][ T4243] [ 81.647663][ T4243] Kernel Offset: disabled [ 81.652010][ T4243] Rebooting in 86400 seconds..