Warning: Permanently added '10.128.1.63' (ED25519) to the list of known hosts. executing program [ 55.677358][ T5052] loop0: detected capacity change from 0 to 4096 [ 55.685757][ T5052] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 55.718822][ T5052] ntfs: volume version 3.1. [ 55.731110][ T5052] ================================================================== [ 55.739663][ T5052] BUG: KASAN: out-of-bounds in ntfs_read_folio+0x9be/0x23e0 [ 55.747062][ T5052] Read of size 10 at addr ffff888075c75170 by task syz-executor337/5052 [ 55.755389][ T5052] [ 55.757715][ T5052] CPU: 0 PID: 5052 Comm: syz-executor337 Not tainted 6.7.0-rc7-syzkaller-00027-g505e701c0b2c #0 [ 55.768307][ T5052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 55.778454][ T5052] Call Trace: [ 55.781746][ T5052] [ 55.784710][ T5052] dump_stack_lvl+0x1e7/0x2d0 [ 55.789402][ T5052] ? nf_tcp_handle_invalid+0x650/0x650 [ 55.794979][ T5052] ? panic+0x850/0x850 [ 55.799051][ T5052] ? _printk+0xd5/0x120 [ 55.803233][ T5052] print_report+0x163/0x540 [ 55.807744][ T5052] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 55.813724][ T5052] ? __virt_addr_valid+0x22f/0x2e0 [ 55.819010][ T5052] ? __phys_addr+0xba/0x170 [ 55.823693][ T5052] ? ntfs_read_folio+0x9be/0x23e0 [ 55.828715][ T5052] kasan_report+0x142/0x170 [ 55.833302][ T5052] ? ntfs_read_folio+0x9be/0x23e0 [ 55.838430][ T5052] kasan_check_range+0x27e/0x290 [ 55.843581][ T5052] ? ntfs_read_folio+0x9be/0x23e0 [ 55.848603][ T5052] __asan_memcpy+0x29/0x70 [ 55.853032][ T5052] ntfs_read_folio+0x9be/0x23e0 [ 55.857967][ T5052] ? xa_load+0x153/0x480 [ 55.862326][ T5052] ? xas_find_conflict+0x8a0/0x8a0 [ 55.867606][ T5052] ? ntfs_writepage+0x1630/0x1630 [ 55.872648][ T5052] ? folio_add_lru+0x27b/0x9d0 [ 55.877407][ T5052] ? __lock_acquire+0x1fd0/0x1fd0 [ 55.882650][ T5052] ? readahead_folio+0x326/0x610 [ 55.887596][ T5052] ? ntfs_writepage+0x1630/0x1630 [ 55.892633][ T5052] read_pages+0x5f0/0x830 [ 55.897061][ T5052] ? folio_add_lru+0x9d0/0x9d0 [ 55.901831][ T5052] ? folio_add_lru+0x27b/0x9d0 [ 55.906646][ T5052] ? page_cache_ra_unbounded+0x7c0/0x7c0 [ 55.912421][ T5052] ? filemap_add_folio+0x228/0x570 [ 55.917532][ T5052] ? __filemap_add_folio+0x1ad0/0x1ad0 [ 55.922996][ T5052] ? page_cache_ra_order+0xb1a/0xcc0 [ 55.928304][ T5052] page_cache_ra_unbounded+0x68e/0x7c0 [ 55.933779][ T5052] filemap_get_pages+0x49c/0x2080 [ 55.938927][ T5052] ? __lock_acquire+0x1345/0x1fd0 [ 55.943984][ T5052] ? filemap_read+0xec0/0xec0 [ 55.948726][ T5052] ? is_bpf_text_address+0x26/0x2a0 [ 55.954021][ T5052] ? __lock_acquire+0x1fd0/0x1fd0 [ 55.959123][ T5052] ? __might_sleep+0xe0/0xe0 [ 55.963720][ T5052] filemap_read+0x41b/0xec0 [ 55.968235][ T5052] ? stack_trace_save+0x1c0/0x1c0 [ 55.973365][ T5052] ? kernel_text_address+0xa3/0xe0 [ 55.978577][ T5052] ? filemap_get_folios_contig+0xb70/0xb70 [ 55.984404][ T5052] ? generic_file_read_iter+0x98/0x550 [ 55.989979][ T5052] __kernel_read+0x425/0x8b0 [ 55.994584][ T5052] ? kasan_set_track+0x4f/0x70 [ 55.999345][ T5052] ? rw_verify_area+0x1a0/0x1a0 [ 56.004194][ T5052] integrity_kernel_read+0xb0/0xf0 [ 56.009302][ T5052] ? integrity_inode_free+0x170/0x170 [ 56.014711][ T5052] ima_calc_file_hash+0xad1/0x1b30 [ 56.019813][ T5052] ? add_lock_to_list+0x1de/0x2e0 [ 56.024835][ T5052] ? validate_chain+0x15c6/0x5ab0 [ 56.029876][ T5052] ? reacquire_held_locks+0x690/0x690 [ 56.035233][ T5052] ? ima_alloc_tfm+0x310/0x310 [ 56.040035][ T5052] ? mark_lock+0x9a/0x350 [ 56.044365][ T5052] ? __lock_acquire+0x1345/0x1fd0 [ 56.049458][ T5052] ? make_vfsgid+0x6f/0xb0 [ 56.054127][ T5052] ? generic_fillattr+0x50a/0x730 [ 56.059164][ T5052] ima_collect_measurement+0x554/0xb30 [ 56.064646][ T5052] ? ima_get_action+0xb0/0xb0 [ 56.069323][ T5052] ? __mutex_lock+0x2ee/0xd60 [ 56.074020][ T5052] ? ima_get_cache_status+0x1e0/0x1e0 [ 56.079399][ T5052] process_measurement+0x1373/0x21c0 [ 56.084700][ T5052] ? ima_file_mmap+0x2b0/0x2b0 [ 56.089548][ T5052] ? smk_access+0x4e0/0x4e0 [ 56.094115][ T5052] ? tomoyo_check_path_number_acl+0x280/0x280 [ 56.100182][ T5052] ? smk_access+0x4ab/0x4e0 [ 56.104973][ T5052] ? mnt_get_write_access+0x68/0x2a0 [ 56.110257][ T5052] ? smack_current_getsecid_subj+0x22/0xf0 [ 56.116076][ T5052] ima_file_check+0xf1/0x170 [ 56.120670][ T5052] ? ima_bprm_check+0x2b0/0x2b0 [ 56.125526][ T5052] path_openat+0x2897/0x3290 [ 56.130117][ T5052] ? do_filp_open+0x490/0x490 [ 56.134798][ T5052] do_filp_open+0x234/0x490 [ 56.139388][ T5052] ? vfs_tmpfile+0x500/0x500 [ 56.144095][ T5052] ? _raw_spin_unlock+0x28/0x40 [ 56.149288][ T5052] ? alloc_fd+0x59c/0x640 [ 56.153629][ T5052] do_sys_openat2+0x13e/0x1d0 [ 56.158746][ T5052] ? do_sys_open+0x230/0x230 [ 56.163428][ T5052] __x64_sys_openat+0x247/0x290 [ 56.169588][ T5052] ? __ia32_sys_open+0x270/0x270 [ 56.174560][ T5052] ? syscall_enter_from_user_mode+0xa4/0x2d0 [ 56.180542][ T5052] ? syscall_enter_from_user_mode+0xa4/0x2d0 [ 56.186601][ T5052] do_syscall_64+0x45/0x110 [ 56.191129][ T5052] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 56.197015][ T5052] RIP: 0033:0x7f911a608e89 [ 56.201422][ T5052] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 1b 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 56.221023][ T5052] RSP: 002b:00007ffc6a5ddc38 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 56.229604][ T5052] RAX: ffffffffffffffda RBX: 00007ffc6a5ddd50 RCX: 00007f911a608e89 [ 56.238011][ T5052] RDX: 0000000000141842 RSI: 0000000020000100 RDI: 00000000ffffff9c [ 56.245987][ T5052] RBP: 00007ffc6a5ddd50 R08: 000000000001ee7c R09: 0000000000000000 [ 56.253953][ T5052] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc6a5ddd58 [ 56.261915][ T5052] R13: 000000000000000c R14: 0000000000000003 R15: 0000000000000004 [ 56.269904][ T5052] [ 56.273104][ T5052] [ 56.275458][ T5052] The buggy address belongs to the physical page: [ 56.281986][ T5052] page:ffffea0001d71d40 refcount:1 mapcount:1 mapping:0000000000000000 index:0x562868dac pfn:0x75c75 [ 56.293062][ T5052] memcg:ffff888016262000 [ 56.297373][ T5052] anon flags: 0xfff000000a0028(uptodate|lru|mappedtodisk|swapbacked|node=0|zone=1|lastcpupid=0x7ff) [ 56.308373][ T5052] page_type: 0x0() [ 56.312100][ T5052] raw: 00fff000000a0028 ffffea0001d71d08 ffffea0001d71d88 ffff888028bc6441 [ 56.320705][ T5052] raw: 0000000562868dac 0000000000000000 0000000100000000 ffff888016262000 [ 56.329347][ T5052] page dumped because: kasan: bad access detected [ 56.335747][ T5052] page_owner tracks the page as allocated [ 56.341476][ T5052] page last allocated via order 0, migratetype Movable, gfp_mask 0x140cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP), pid 4514, tgid 4514 (udevd), ts 55731614139, free_ts 47405087441 [ 56.358658][ T5052] post_alloc_hook+0x1e6/0x210 [ 56.363414][ T5052] get_page_from_freelist+0x33ea/0x3570 [ 56.369321][ T5052] __alloc_pages+0x255/0x680 [ 56.373982][ T5052] alloc_pages_mpol+0x3de/0x640 [ 56.378997][ T5052] vma_alloc_folio+0xf3/0x3f0 [ 56.383690][ T5052] do_wp_page+0x125e/0x4d40 [ 56.388285][ T5052] handle_mm_fault+0x1b1c/0x6680 [ 56.393252][ T5052] exc_page_fault+0x456/0x870 [ 56.397942][ T5052] asm_exc_page_fault+0x26/0x30 [ 56.402782][ T5052] page last free stack trace: [ 56.407523][ T5052] free_unref_page_prepare+0x931/0xa60 [ 56.413147][ T5052] free_unref_page_list+0x5a0/0x840 [ 56.418432][ T5052] release_pages+0x2117/0x2400 [ 56.423204][ T5052] tlb_flush_mmu+0x34c/0x4e0 [ 56.427810][ T5052] tlb_finish_mmu+0xd4/0x1f0 [ 56.432492][ T5052] unmap_region+0x300/0x350 [ 56.437106][ T5052] do_vmi_align_munmap+0x1223/0x1860 [ 56.442443][ T5052] do_vmi_munmap+0x24d/0x2d0 [ 56.448617][ T5052] __vm_munmap+0x230/0x450 [ 56.453137][ T5052] __x64_sys_munmap+0x69/0x80 [ 56.458121][ T5052] do_syscall_64+0x45/0x110 [ 56.462735][ T5052] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 56.468651][ T5052] [ 56.470973][ T5052] Memory state around the buggy address: [ 56.476682][ T5052] ffff888075c75080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 56.485267][ T5052] ffff888075c75100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 56.493414][ T5052] >ffff888075c75180: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 56.501570][ T5052] ^ [ 56.505627][ T5052] ffff888075c75200: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 56.513899][ T5052] ffff888075c75280: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 56.522314][ T5052] ================================================================== [ 56.530886][ T5052] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 56.538116][ T5052] CPU: 0 PID: 5052 Comm: syz-executor337 Not tainted 6.7.0-rc7-syzkaller-00027-g505e701c0b2c #0 [ 56.548653][ T5052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 56.558706][ T5052] Call Trace: [ 56.561984][ T5052] [ 56.565078][ T5052] dump_stack_lvl+0x1e7/0x2d0 [ 56.569756][ T5052] ? nf_tcp_handle_invalid+0x650/0x650 [ 56.575213][ T5052] ? panic+0x850/0x850 [ 56.579546][ T5052] ? vscnprintf+0x5d/0x80 [ 56.583960][ T5052] panic+0x349/0x850 [ 56.588207][ T5052] ? check_panic_on_warn+0x21/0xa0 [ 56.593336][ T5052] ? __memcpy_flushcache+0x2b0/0x2b0 [ 56.598915][ T5052] ? mark_lock+0x9a/0x350 [ 56.603262][ T5052] ? _raw_spin_unlock_irqrestore+0xd8/0x140 [ 56.609333][ T5052] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 56.615249][ T5052] ? _raw_spin_unlock+0x40/0x40 [ 56.620293][ T5052] ? print_report+0x4fb/0x540 [ 56.625938][ T5052] check_panic_on_warn+0x82/0xa0 [ 56.630890][ T5052] ? ntfs_read_folio+0x9be/0x23e0 [ 56.635989][ T5052] end_report+0x6e/0x140 [ 56.640339][ T5052] kasan_report+0x153/0x170 [ 56.645279][ T5052] ? ntfs_read_folio+0x9be/0x23e0 [ 56.650912][ T5052] kasan_check_range+0x27e/0x290 [ 56.655945][ T5052] ? ntfs_read_folio+0x9be/0x23e0 [ 56.660978][ T5052] __asan_memcpy+0x29/0x70 [ 56.665579][ T5052] ntfs_read_folio+0x9be/0x23e0 [ 56.670618][ T5052] ? xa_load+0x153/0x480 [ 56.674951][ T5052] ? xas_find_conflict+0x8a0/0x8a0 [ 56.680947][ T5052] ? ntfs_writepage+0x1630/0x1630 [ 56.686330][ T5052] ? folio_add_lru+0x27b/0x9d0 [ 56.691277][ T5052] ? __lock_acquire+0x1fd0/0x1fd0 [ 56.696516][ T5052] ? readahead_folio+0x326/0x610 [ 56.701458][ T5052] ? ntfs_writepage+0x1630/0x1630 [ 56.706677][ T5052] read_pages+0x5f0/0x830 [ 56.711187][ T5052] ? folio_add_lru+0x9d0/0x9d0 [ 56.716055][ T5052] ? folio_add_lru+0x27b/0x9d0 [ 56.721083][ T5052] ? page_cache_ra_unbounded+0x7c0/0x7c0 [ 56.726812][ T5052] ? filemap_add_folio+0x228/0x570 [ 56.731962][ T5052] ? __filemap_add_folio+0x1ad0/0x1ad0 [ 56.737623][ T5052] ? page_cache_ra_order+0xb1a/0xcc0 [ 56.745293][ T5052] page_cache_ra_unbounded+0x68e/0x7c0 [ 56.750898][ T5052] filemap_get_pages+0x49c/0x2080 [ 56.756032][ T5052] ? __lock_acquire+0x1345/0x1fd0 [ 56.761332][ T5052] ? filemap_read+0xec0/0xec0 [ 56.766010][ T5052] ? is_bpf_text_address+0x26/0x2a0 [ 56.771213][ T5052] ? __lock_acquire+0x1fd0/0x1fd0 [ 56.776232][ T5052] ? __might_sleep+0xe0/0xe0 [ 56.781087][ T5052] filemap_read+0x41b/0xec0 [ 56.785846][ T5052] ? stack_trace_save+0x1c0/0x1c0 [ 56.790867][ T5052] ? kernel_text_address+0xa3/0xe0 [ 56.796066][ T5052] ? filemap_get_folios_contig+0xb70/0xb70 [ 56.801975][ T5052] ? generic_file_read_iter+0x98/0x550 [ 56.809085][ T5052] __kernel_read+0x425/0x8b0 [ 56.814193][ T5052] ? kasan_set_track+0x4f/0x70 [ 56.819212][ T5052] ? rw_verify_area+0x1a0/0x1a0 [ 56.824065][ T5052] integrity_kernel_read+0xb0/0xf0 [ 56.829267][ T5052] ? integrity_inode_free+0x170/0x170 [ 56.835240][ T5052] ima_calc_file_hash+0xad1/0x1b30 [ 56.840344][ T5052] ? add_lock_to_list+0x1de/0x2e0 [ 56.845422][ T5052] ? validate_chain+0x15c6/0x5ab0 [ 56.850613][ T5052] ? reacquire_held_locks+0x690/0x690 [ 56.856075][ T5052] ? ima_alloc_tfm+0x310/0x310 [ 56.861386][ T5052] ? mark_lock+0x9a/0x350 [ 56.865798][ T5052] ? __lock_acquire+0x1345/0x1fd0 [ 56.870994][ T5052] ? make_vfsgid+0x6f/0xb0 [ 56.875418][ T5052] ? generic_fillattr+0x50a/0x730 [ 56.882227][ T5052] ima_collect_measurement+0x554/0xb30 [ 56.888130][ T5052] ? ima_get_action+0xb0/0xb0 [ 56.892799][ T5052] ? __mutex_lock+0x2ee/0xd60 [ 56.897483][ T5052] ? ima_get_cache_status+0x1e0/0x1e0 [ 56.902959][ T5052] process_measurement+0x1373/0x21c0 [ 56.908275][ T5052] ? ima_file_mmap+0x2b0/0x2b0 [ 56.913047][ T5052] ? smk_access+0x4e0/0x4e0 [ 56.917583][ T5052] ? tomoyo_check_path_number_acl+0x280/0x280 [ 56.923749][ T5052] ? smk_access+0x4ab/0x4e0 [ 56.928266][ T5052] ? mnt_get_write_access+0x68/0x2a0 [ 56.933587][ T5052] ? smack_current_getsecid_subj+0x22/0xf0 [ 56.939625][ T5052] ima_file_check+0xf1/0x170 [ 56.944297][ T5052] ? ima_bprm_check+0x2b0/0x2b0 [ 56.949141][ T5052] path_openat+0x2897/0x3290 [ 56.953782][ T5052] ? do_filp_open+0x490/0x490 [ 56.958450][ T5052] do_filp_open+0x234/0x490 [ 56.963030][ T5052] ? vfs_tmpfile+0x500/0x500 [ 56.967623][ T5052] ? _raw_spin_unlock+0x28/0x40 [ 56.972468][ T5052] ? alloc_fd+0x59c/0x640 [ 56.976793][ T5052] do_sys_openat2+0x13e/0x1d0 [ 56.981462][ T5052] ? do_sys_open+0x230/0x230 [ 56.986044][ T5052] __x64_sys_openat+0x247/0x290 [ 56.990920][ T5052] ? __ia32_sys_open+0x270/0x270 [ 56.995902][ T5052] ? syscall_enter_from_user_mode+0xa4/0x2d0 [ 57.001895][ T5052] ? syscall_enter_from_user_mode+0xa4/0x2d0 [ 57.007869][ T5052] do_syscall_64+0x45/0x110 [ 57.012374][ T5052] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 57.018264][ T5052] RIP: 0033:0x7f911a608e89 [ 57.022673][ T5052] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 1b 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 57.042296][ T5052] RSP: 002b:00007ffc6a5ddc38 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 57.050888][ T5052] RAX: ffffffffffffffda RBX: 00007ffc6a5ddd50 RCX: 00007f911a608e89 [ 57.058847][ T5052] RDX: 0000000000141842 RSI: 0000000020000100 RDI: 00000000ffffff9c [ 57.066809][ T5052] RBP: 00007ffc6a5ddd50 R08: 000000000001ee7c R09: 0000000000000000 [ 57.074944][ T5052] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc6a5ddd58 [ 57.082989][ T5052] R13: 000000000000000c R14: 0000000000000003 R15: 0000000000000004 [ 57.090955][ T5052] [ 57.094179][ T5052] Kernel Offset: disabled [ 57.098484][ T5052] Rebooting in 86400 seconds..