Warning: Permanently added '10.128.0.15' (ED25519) to the list of known hosts. executing program [ 51.604153][ T3543] loop0: detected capacity change from 0 to 4096 [ 51.614298][ T3543] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 51.644089][ T3543] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 51.651745][ T3543] ================================================================== [ 51.659826][ T3543] BUG: KASAN: slab-out-of-bounds in ntfs_listxattr+0x3a2/0x5b0 [ 51.667399][ T3543] Read of size 48 at addr ffff8880289562b0 by task syz-executor326/3543 [ 51.675702][ T3543] [ 51.678010][ T3543] CPU: 1 PID: 3543 Comm: syz-executor326 Not tainted 6.1.53-syzkaller #0 [ 51.686413][ T3543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 51.696513][ T3543] Call Trace: [ 51.699784][ T3543] [ 51.702702][ T3543] dump_stack_lvl+0x1e3/0x2cb [ 51.707400][ T3543] ? nf_tcp_handle_invalid+0x642/0x642 [ 51.712855][ T3543] ? panic+0x75d/0x75d [ 51.716942][ T3543] ? _printk+0xd1/0x111 [ 51.721085][ T3543] ? _raw_spin_lock_irqsave+0xac/0x120 [ 51.726555][ T3543] print_report+0x15f/0x4f0 [ 51.731056][ T3543] ? memset+0x1f/0x40 [ 51.735023][ T3543] ? __virt_addr_valid+0x22b/0x2e0 [ 51.740124][ T3543] ? __phys_addr+0xb6/0x170 [ 51.744617][ T3543] ? ntfs_listxattr+0x3a2/0x5b0 [ 51.749457][ T3543] kasan_report+0x136/0x160 [ 51.753952][ T3543] ? ntfs_listxattr+0x3a2/0x5b0 [ 51.758796][ T3543] kasan_check_range+0x27f/0x290 [ 51.763721][ T3543] ? ntfs_listxattr+0x3a2/0x5b0 [ 51.768560][ T3543] memcpy+0x25/0x60 [ 51.772359][ T3543] ntfs_listxattr+0x3a2/0x5b0 [ 51.777042][ T3543] ? ntfs_permission+0xf0/0xf0 [ 51.781795][ T3543] ? kvmalloc_node+0x6e/0x180 [ 51.786890][ T3543] ? kvmalloc_node+0x6e/0x180 [ 51.791555][ T3543] ? bpf_lsm_inode_listxattr+0x5/0x10 [ 51.796920][ T3543] listxattr+0x282/0x2e0 [ 51.801151][ T3543] ? ntfs_permission+0xf0/0xf0 [ 51.805908][ T3543] __x64_sys_listxattr+0x172/0x230 [ 51.811007][ T3543] ? print_irqtrace_events+0x210/0x210 [ 51.816454][ T3543] ? __ia32_sys_fgetxattr+0xa0/0xa0 [ 51.821642][ T3543] ? syscall_enter_from_user_mode+0x2e/0x220 [ 51.827612][ T3543] ? lockdep_hardirqs_on+0x94/0x130 [ 51.832810][ T3543] ? syscall_enter_from_user_mode+0x2e/0x220 [ 51.838781][ T3543] do_syscall_64+0x3d/0xb0 [ 51.843185][ T3543] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 51.849064][ T3543] RIP: 0033:0x7f30dd1b15f9 [ 51.853468][ T3543] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 51.873064][ T3543] RSP: 002b:00007ffd93175f28 EFLAGS: 00000246 ORIG_RAX: 00000000000000c2 [ 51.881464][ T3543] RAX: ffffffffffffffda RBX: 0032656c69662f2e RCX: 00007f30dd1b15f9 [ 51.889428][ T3543] RDX: 0000000000000098 RSI: 0000000020000100 RDI: 0000000020000040 [ 51.897408][ T3543] RBP: 00007f30dd243610 R08: 000000000001f1b1 R09: 0000000000000000 [ 51.905370][ T3543] R10: 00007ffd93175df0 R11: 0000000000000246 R12: 0000000000000001 [ 51.913344][ T3543] R13: 00007ffd931760f8 R14: 0000000000000001 R15: 0000000000000001 [ 51.921308][ T3543] [ 51.924313][ T3543] [ 51.926620][ T3543] Allocated by task 3543: [ 51.930926][ T3543] kasan_set_track+0x4b/0x70 [ 51.935502][ T3543] __kasan_kmalloc+0x97/0xb0 [ 51.940073][ T3543] __kmalloc+0xb2/0x230 [ 51.944211][ T3543] ntfs_read_ea+0x48a/0xa00 [ 51.948701][ T3543] ntfs_listxattr+0x177/0x5b0 [ 51.953366][ T3543] listxattr+0x282/0x2e0 [ 51.957593][ T3543] __x64_sys_listxattr+0x172/0x230 [ 51.962688][ T3543] do_syscall_64+0x3d/0xb0 [ 51.967090][ T3543] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 51.972970][ T3543] [ 51.975281][ T3543] The buggy address belongs to the object at ffff888028956280 [ 51.975281][ T3543] which belongs to the cache kmalloc-64 of size 64 [ 51.989164][ T3543] The buggy address is located 48 bytes inside of [ 51.989164][ T3543] 64-byte region [ffff888028956280, ffff8880289562c0) [ 52.002246][ T3543] [ 52.004557][ T3543] The buggy address belongs to the physical page: [ 52.011033][ T3543] page:ffffea0000a25580 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x28956 [ 52.021189][ T3543] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 52.028721][ T3543] raw: 00fff00000000200 ffffea0000a22fc0 dead000000000002 ffff888012441640 [ 52.037289][ T3543] raw: 0000000000000000 0000000080200020 00000001ffffffff 0000000000000000 [ 52.045852][ T3543] page dumped because: kasan: bad access detected [ 52.052261][ T3543] page_owner tracks the page as allocated [ 52.057974][ T3543] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12c40(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY), pid 2973, tgid 2973 (mount), ts 13560365069, free_ts 12568336882 [ 52.075496][ T3543] post_alloc_hook+0x18d/0x1b0 [ 52.080264][ T3543] get_page_from_freelist+0x32ed/0x3480 [ 52.085796][ T3543] __alloc_pages+0x28d/0x770 [ 52.090372][ T3543] alloc_slab_page+0x6a/0x150 [ 52.095036][ T3543] new_slab+0x84/0x2d0 [ 52.099093][ T3543] ___slab_alloc+0xa71/0x1080 [ 52.103776][ T3543] __kmem_cache_alloc_node+0x19f/0x260 [ 52.109222][ T3543] __kmalloc+0xa1/0x230 [ 52.113370][ T3543] tomoyo_encode+0x26b/0x530 [ 52.117952][ T3543] tomoyo_realpath_from_path+0x594/0x5d0 [ 52.123574][ T3543] tomoyo_check_open_permission+0x22c/0x490 [ 52.129456][ T3543] security_file_open+0x5f/0xa0 [ 52.134311][ T3543] do_dentry_open+0x308/0x10f0 [ 52.139057][ T3543] path_openat+0x2644/0x2e60 [ 52.143638][ T3543] do_filp_open+0x230/0x480 [ 52.148128][ T3543] do_sys_openat2+0x13b/0x500 [ 52.152804][ T3543] page last free stack trace: [ 52.157480][ T3543] free_unref_page_prepare+0xf63/0x1120 [ 52.163023][ T3543] free_unref_page+0x98/0x570 [ 52.167692][ T3543] kasan_depopulate_vmalloc_pte+0x66/0x80 [ 52.173405][ T3543] __apply_to_page_range+0x9c5/0xcc0 [ 52.178700][ T3543] kasan_release_vmalloc+0x96/0xb0 [ 52.183804][ T3543] __purge_vmap_area_lazy+0x157c/0x1720 [ 52.189620][ T3543] _vm_unmap_aliases+0x44c/0x4b0 [ 52.194561][ T3543] change_page_attr_set_clr+0x308/0x1050 [ 52.200196][ T3543] set_memory_nx+0xee/0x130 [ 52.204707][ T3543] free_initmem+0x71/0xc0 [ 52.209037][ T3543] kernel_init+0x2d/0x290 [ 52.213365][ T3543] ret_from_fork+0x1f/0x30 [ 52.217778][ T3543] [ 52.220089][ T3543] Memory state around the buggy address: [ 52.225701][ T3543] ffff888028956180: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 52.233756][ T3543] ffff888028956200: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 52.241806][ T3543] >ffff888028956280: 00 00 00 00 00 00 00 04 fc fc fc fc fc fc fc fc [ 52.249853][ T3543] ^ [ 52.255731][ T3543] ffff888028956300: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 52.263775][ T3543] ffff888028956380: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 52.271841][ T3543] ================================================================== [ 52.281162][ T3543] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 52.288371][ T3543] CPU: 1 PID: 3543 Comm: syz-executor326 Not tainted 6.1.53-syzkaller #0 [ 52.296797][ T3543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/04/2023 [ 52.306865][ T3543] Call Trace: [ 52.310134][ T3543] [ 52.313049][ T3543] dump_stack_lvl+0x1e3/0x2cb [ 52.317723][ T3543] ? nf_tcp_handle_invalid+0x642/0x642 [ 52.323163][ T3543] ? panic+0x75d/0x75d [ 52.327229][ T3543] ? preempt_schedule_common+0xa6/0xd0 [ 52.332666][ T3543] ? vscnprintf+0x59/0x80 [ 52.336981][ T3543] panic+0x318/0x75d [ 52.340858][ T3543] ? check_panic_on_warn+0x1d/0xa0 [ 52.345955][ T3543] ? memcpy_page_flushcache+0xfc/0xfc [ 52.351307][ T3543] ? _raw_spin_unlock_irqrestore+0x128/0x130 [ 52.357273][ T3543] ? _raw_spin_unlock+0x40/0x40 [ 52.362106][ T3543] check_panic_on_warn+0x7e/0xa0 [ 52.367025][ T3543] ? ntfs_listxattr+0x3a2/0x5b0 [ 52.371860][ T3543] end_report+0x66/0x110 [ 52.376088][ T3543] kasan_report+0x143/0x160 [ 52.380572][ T3543] ? ntfs_listxattr+0x3a2/0x5b0 [ 52.385445][ T3543] kasan_check_range+0x27f/0x290 [ 52.390374][ T3543] ? ntfs_listxattr+0x3a2/0x5b0 [ 52.395219][ T3543] memcpy+0x25/0x60 [ 52.399014][ T3543] ntfs_listxattr+0x3a2/0x5b0 [ 52.403681][ T3543] ? ntfs_permission+0xf0/0xf0 [ 52.408430][ T3543] ? kvmalloc_node+0x6e/0x180 [ 52.413100][ T3543] ? kvmalloc_node+0x6e/0x180 [ 52.417773][ T3543] ? bpf_lsm_inode_listxattr+0x5/0x10 [ 52.423135][ T3543] listxattr+0x282/0x2e0 [ 52.427359][ T3543] ? ntfs_permission+0xf0/0xf0 [ 52.432122][ T3543] __x64_sys_listxattr+0x172/0x230 [ 52.437218][ T3543] ? print_irqtrace_events+0x210/0x210 [ 52.442668][ T3543] ? __ia32_sys_fgetxattr+0xa0/0xa0 [ 52.447847][ T3543] ? syscall_enter_from_user_mode+0x2e/0x220 [ 52.453808][ T3543] ? lockdep_hardirqs_on+0x94/0x130 [ 52.458988][ T3543] ? syscall_enter_from_user_mode+0x2e/0x220 [ 52.464949][ T3543] do_syscall_64+0x3d/0xb0 [ 52.469345][ T3543] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 52.475215][ T3543] RIP: 0033:0x7f30dd1b15f9 [ 52.479613][ T3543] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 52.499236][ T3543] RSP: 002b:00007ffd93175f28 EFLAGS: 00000246 ORIG_RAX: 00000000000000c2 [ 52.507641][ T3543] RAX: ffffffffffffffda RBX: 0032656c69662f2e RCX: 00007f30dd1b15f9 [ 52.515600][ T3543] RDX: 0000000000000098 RSI: 0000000020000100 RDI: 0000000020000040 [ 52.523563][ T3543] RBP: 00007f30dd243610 R08: 000000000001f1b1 R09: 0000000000000000 [ 52.531526][ T3543] R10: 00007ffd93175df0 R11: 0000000000000246 R12: 0000000000000001 [ 52.539485][ T3543] R13: 00007ffd931760f8 R14: 0000000000000001 R15: 0000000000000001 [ 52.547447][ T3543] [ 52.550727][ T3543] Kernel Offset: disabled [ 52.555033][ T3543] Rebooting in 86400 seconds..