Warning: Permanently added '10.128.0.85' (ED25519) to the list of known hosts. executing program [ 69.398899][ T5822] ================================================================== [ 69.406985][ T5822] BUG: KASAN: slab-out-of-bounds in strlen+0x93/0xa0 [ 69.413697][ T5822] Read of size 1 at addr ffff88814d695800 by task syz-executor153/5822 [ 69.421921][ T5822] [ 69.424247][ T5822] CPU: 0 UID: 0 PID: 5822 Comm: syz-executor153 Not tainted 6.13.0-rc3-syzkaller-00026-g59dbb9d81adf #0 [ 69.435358][ T5822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 69.445411][ T5822] Call Trace: [ 69.448701][ T5822] [ 69.451623][ T5822] dump_stack_lvl+0x116/0x1f0 [ 69.456328][ T5822] print_report+0xc3/0x620 [ 69.460739][ T5822] ? __virt_addr_valid+0x5e/0x590 [ 69.465754][ T5822] ? __phys_addr+0xc6/0x150 [ 69.470249][ T5822] kasan_report+0xd9/0x110 [ 69.474658][ T5822] ? strlen+0x93/0xa0 [ 69.478632][ T5822] ? strlen+0x93/0xa0 [ 69.482608][ T5822] strlen+0x93/0xa0 [ 69.486417][ T5822] kstrdup+0x29/0xb0 [ 69.490302][ T5822] debug_string_to_mask+0x82/0x570 [ 69.495412][ T5822] ? trace_lock_acquire+0x14e/0x1f0 [ 69.500618][ T5822] ? lock_acquire+0x2f/0xb0 [ 69.505121][ T5822] ? __might_fault+0xe3/0x190 [ 69.509807][ T5822] ? __pfx_debug_string_to_mask+0x10/0x10 [ 69.515534][ T5822] ? __might_fault+0xe3/0x190 [ 69.520228][ T5822] orangefs_debug_write+0x22e/0x780 [ 69.525435][ T5822] ? __pfx_orangefs_debug_write+0x10/0x10 [ 69.531169][ T5822] ? rcu_is_watching+0x12/0xc0 [ 69.535937][ T5822] ? trace_lock_acquire+0x14e/0x1f0 [ 69.541143][ T5822] full_proxy_write+0xfb/0x1b0 [ 69.545916][ T5822] ? __pfx_full_proxy_write+0x10/0x10 [ 69.551294][ T5822] vfs_write+0x24c/0x1150 [ 69.555631][ T5822] ? __pfx_vfs_write+0x10/0x10 [ 69.560396][ T5822] ? do_sys_openat2+0xb1/0x1e0 [ 69.565187][ T5822] ? __pfx_do_sys_openat2+0x10/0x10 [ 69.570392][ T5822] ? do_user_addr_fault+0xe50/0x13f0 [ 69.575678][ T5822] ? __pfx_lock_release+0x10/0x10 [ 69.580707][ T5822] ksys_write+0x12b/0x250 [ 69.585035][ T5822] ? __pfx_ksys_write+0x10/0x10 [ 69.589893][ T5822] do_syscall_64+0xcd/0x250 [ 69.594504][ T5822] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.600448][ T5822] RIP: 0033:0x7f11f9893a39 [ 69.604884][ T5822] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 69.624509][ T5822] RSP: 002b:00007ffc84d45838 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 69.632923][ T5822] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f11f9893a39 [ 69.640894][ T5822] RDX: 00000000fffffdef RSI: 0000000000000000 RDI: 0000000000000003 [ 69.648867][ T5822] RBP: 00007f11f99065f0 R08: 0000000000000000 R09: 0000000000000000 [ 69.656836][ T5822] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 69.664802][ T5822] R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001 [ 69.672775][ T5822] [ 69.675791][ T5822] [ 69.678109][ T5822] Allocated by task 5822: [ 69.682426][ T5822] kasan_save_stack+0x33/0x60 [ 69.687108][ T5822] kasan_save_track+0x14/0x30 [ 69.691803][ T5822] __kasan_kmalloc+0xaa/0xb0 [ 69.696406][ T5822] orangefs_debug_write+0x14c/0x780 [ 69.701621][ T5822] full_proxy_write+0xfb/0x1b0 [ 69.706394][ T5822] vfs_write+0x24c/0x1150 [ 69.710725][ T5822] ksys_write+0x12b/0x250 [ 69.715054][ T5822] do_syscall_64+0xcd/0x250 [ 69.719557][ T5822] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.725456][ T5822] [ 69.727776][ T5822] The buggy address belongs to the object at ffff88814d695000 [ 69.727776][ T5822] which belongs to the cache kmalloc-2k of size 2048 [ 69.741824][ T5822] The buggy address is located 0 bytes to the right of [ 69.741824][ T5822] allocated 2048-byte region [ffff88814d695000, ffff88814d695800) [ 69.756407][ T5822] [ 69.758724][ T5822] The buggy address belongs to the physical page: [ 69.765132][ T5822] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x14d690 [ 69.773981][ T5822] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 69.782479][ T5822] flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff) [ 69.790185][ T5822] page_type: f5(slab) [ 69.794179][ T5822] raw: 057ff00000000040 ffff88801ac42000 dead000000000100 dead000000000122 [ 69.802847][ T5822] raw: 0000000000000000 0000000080080008 00000001f5000000 0000000000000000 [ 69.811429][ T5822] head: 057ff00000000040 ffff88801ac42000 dead000000000100 dead000000000122 [ 69.820101][ T5822] head: 0000000000000000 0000000080080008 00000001f5000000 0000000000000000 [ 69.828773][ T5822] head: 057ff00000000003 ffffea000535a401 ffffffffffffffff 0000000000000000 [ 69.837438][ T5822] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 69.846184][ T5822] page dumped because: kasan: bad access detected [ 69.852593][ T5822] page_owner tracks the page as allocated [ 69.858295][ T5822] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 1, tgid 1 (swapper/0), ts 18983173250, free_ts 0 [ 69.875923][ T5822] post_alloc_hook+0x2d1/0x350 [ 69.880691][ T5822] get_page_from_freelist+0xfce/0x2f80 [ 69.886155][ T5822] __alloc_pages_noprof+0x223/0x25b0 [ 69.891443][ T5822] alloc_pages_mpol_noprof+0x2c9/0x610 [ 69.896907][ T5822] new_slab+0x2c9/0x410 [ 69.901062][ T5822] ___slab_alloc+0xce2/0x1650 [ 69.905738][ T5822] __slab_alloc.constprop.0+0x56/0xb0 [ 69.911114][ T5822] __kmalloc_cache_noprof+0xf6/0x420 [ 69.916398][ T5822] cfctrl_create+0x9b/0x320 [ 69.920901][ T5822] cfcnfg_create+0xb2/0x500 [ 69.925401][ T5822] caif_init_net+0x7d/0xe0 [ 69.929815][ T5822] ops_init+0x1df/0x5f0 [ 69.934059][ T5822] register_pernet_operations+0x3a1/0x6f0 [ 69.939781][ T5822] register_pernet_subsys+0x28/0x40 [ 69.944991][ T5822] caif_device_init+0x16/0x50 [ 69.949669][ T5822] do_one_initcall+0x128/0x630 [ 69.954438][ T5822] page_owner free stack trace missing [ 69.959792][ T5822] [ 69.962108][ T5822] Memory state around the buggy address: [ 69.967730][ T5822] ffff88814d695700: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 69.975786][ T5822] ffff88814d695780: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 69.983840][ T5822] >ffff88814d695800: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 69.991891][ T5822] ^ [ 69.995948][ T5822] ffff88814d695880: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 70.004003][ T5822] ffff88814d695900: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 70.012053][ T5822] ================================================================== [ 70.020341][ T5822] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 70.027550][ T5822] CPU: 1 UID: 0 PID: 5822 Comm: syz-executor153 Not tainted 6.13.0-rc3-syzkaller-00026-g59dbb9d81adf #0 [ 70.038662][ T5822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 70.048713][ T5822] Call Trace: [ 70.051987][ T5822] [ 70.054913][ T5822] dump_stack_lvl+0x3d/0x1f0 [ 70.059520][ T5822] panic+0x71d/0x800 [ 70.063422][ T5822] ? __pfx_panic+0x10/0x10 [ 70.067847][ T5822] ? preempt_schedule_thunk+0x1a/0x30 [ 70.073218][ T5822] ? preempt_schedule_common+0x44/0xc0 [ 70.078686][ T5822] ? check_panic_on_warn+0x1f/0xb0 [ 70.083804][ T5822] check_panic_on_warn+0xab/0xb0 [ 70.088748][ T5822] end_report+0x117/0x180 [ 70.093082][ T5822] kasan_report+0xe9/0x110 [ 70.097502][ T5822] ? strlen+0x93/0xa0 [ 70.101493][ T5822] ? strlen+0x93/0xa0 [ 70.105492][ T5822] strlen+0x93/0xa0 [ 70.109303][ T5822] kstrdup+0x29/0xb0 [ 70.113202][ T5822] debug_string_to_mask+0x82/0x570 [ 70.118322][ T5822] ? trace_lock_acquire+0x14e/0x1f0 [ 70.123531][ T5822] ? lock_acquire+0x2f/0xb0 [ 70.128032][ T5822] ? __might_fault+0xe3/0x190 [ 70.132714][ T5822] ? __pfx_debug_string_to_mask+0x10/0x10 [ 70.138437][ T5822] ? __might_fault+0xe3/0x190 [ 70.143133][ T5822] orangefs_debug_write+0x22e/0x780 [ 70.148340][ T5822] ? __pfx_orangefs_debug_write+0x10/0x10 [ 70.154064][ T5822] ? rcu_is_watching+0x12/0xc0 [ 70.158831][ T5822] ? trace_lock_acquire+0x14e/0x1f0 [ 70.164033][ T5822] full_proxy_write+0xfb/0x1b0 [ 70.168799][ T5822] ? __pfx_full_proxy_write+0x10/0x10 [ 70.174171][ T5822] vfs_write+0x24c/0x1150 [ 70.178502][ T5822] ? __pfx_vfs_write+0x10/0x10 [ 70.183266][ T5822] ? do_sys_openat2+0xb1/0x1e0 [ 70.188042][ T5822] ? __pfx_do_sys_openat2+0x10/0x10 [ 70.193261][ T5822] ? do_user_addr_fault+0xe50/0x13f0 [ 70.198544][ T5822] ? __pfx_lock_release+0x10/0x10 [ 70.203574][ T5822] ksys_write+0x12b/0x250 [ 70.207906][ T5822] ? __pfx_ksys_write+0x10/0x10 [ 70.212758][ T5822] do_syscall_64+0xcd/0x250 [ 70.217280][ T5822] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.223176][ T5822] RIP: 0033:0x7f11f9893a39 [ 70.227591][ T5822] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 c1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 70.247195][ T5822] RSP: 002b:00007ffc84d45838 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 70.255611][ T5822] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f11f9893a39 [ 70.263579][ T5822] RDX: 00000000fffffdef RSI: 0000000000000000 RDI: 0000000000000003 [ 70.271546][ T5822] RBP: 00007f11f99065f0 R08: 0000000000000000 R09: 0000000000000000 [ 70.279518][ T5822] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 70.287487][ T5822] R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001 [ 70.295466][ T5822] [ 70.298715][ T5822] Kernel Offset: disabled [ 70.303031][ T5822] Rebooting in 86400 seconds..