Warning: Permanently added '10.128.0.77' (ED25519) to the list of known hosts. executing program [ 35.994148][ T6411] loop0: detected capacity change from 0 to 131072 [ 36.000114][ T6411] F2FS-fs (loop0): inline encryption not supported [ 36.002235][ T6411] F2FS-fs (loop0): heap/no_heap options were deprecated [ 36.003986][ T6411] F2FS-fs (loop0): QUOTA feature is enabled, so ignore jquota_fmt [ 36.006918][ T6411] F2FS-fs (loop0): invalid crc value [ 36.018873][ T6411] F2FS-fs (loop0): Found nat_bits in checkpoint [ 36.031293][ T6411] F2FS-fs (loop0): Mounted with checkpoint version = 1b41e954 [ 36.044275][ T6411] ================================================================== [ 36.045964][ T6411] BUG: KASAN: slab-out-of-bounds in f2fs_getxattr+0xf5c/0x1064 [ 36.047535][ T6411] Read of size 4 at addr ffff0000cc3a9318 by task syz-executor364/6411 [ 36.049213][ T6411] [ 36.049738][ T6411] CPU: 1 UID: 0 PID: 6411 Comm: syz-executor364 Not tainted 6.13.0-rc3-syzkaller-g573067a5a685 #0 [ 36.051873][ T6411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 36.053978][ T6411] Call trace: [ 36.054681][ T6411] show_stack+0x2c/0x3c (C) [ 36.055632][ T6411] dump_stack_lvl+0xe4/0x150 [ 36.056587][ T6411] print_report+0x198/0x538 [ 36.057534][ T6411] kasan_report+0xd8/0x138 [ 36.058483][ T6411] __asan_report_load4_noabort+0x20/0x2c [ 36.059647][ T6411] f2fs_getxattr+0xf5c/0x1064 [ 36.060638][ T6411] f2fs_xattr_generic_get+0x130/0x174 [ 36.061760][ T6411] __vfs_getxattr+0x394/0x3c0 [ 36.062724][ T6411] smk_fetch+0xc8/0x150 [ 36.063594][ T6411] smack_d_instantiate+0x594/0x880 [ 36.064636][ T6411] security_d_instantiate+0x100/0x204 [ 36.065728][ T6411] d_splice_alias+0x70/0x310 [ 36.066658][ T6411] f2fs_lookup+0x4c8/0x948 [ 36.067549][ T6411] path_openat+0xf7c/0x2b14 [ 36.068477][ T6411] do_filp_open+0x1e8/0x404 [ 36.069410][ T6411] do_sys_openat2+0x124/0x1b8 [ 36.070365][ T6411] __arm64_sys_openat+0x1f0/0x240 [ 36.071409][ T6411] invoke_syscall+0x98/0x2b8 [ 36.072342][ T6411] el0_svc_common+0x130/0x23c [ 36.073276][ T6411] do_el0_svc+0x48/0x58 [ 36.074125][ T6411] el0_svc+0x54/0x168 [ 36.074942][ T6411] el0t_64_sync_handler+0x84/0x108 [ 36.075965][ T6411] el0t_64_sync+0x198/0x19c [ 36.076870][ T6411] [ 36.077333][ T6411] Allocated by task 6411: [ 36.078225][ T6411] kasan_save_track+0x40/0x78 [ 36.079196][ T6411] kasan_save_alloc_info+0x40/0x50 [ 36.080247][ T6411] __kasan_kmalloc+0xac/0xc4 [ 36.081216][ T6411] __kmalloc_noprof+0x32c/0x54c [ 36.082234][ T6411] f2fs_kzalloc+0x124/0x254 [ 36.083142][ T6411] f2fs_getxattr+0xc60/0x1064 [ 36.084073][ T6411] f2fs_xattr_generic_get+0x130/0x174 [ 36.085135][ T6411] __vfs_getxattr+0x394/0x3c0 [ 36.086075][ T6411] smk_fetch+0xc8/0x150 [ 36.086931][ T6411] smack_d_instantiate+0x594/0x880 [ 36.087957][ T6411] security_d_instantiate+0x100/0x204 [ 36.089039][ T6411] d_splice_alias+0x70/0x310 [ 36.089975][ T6411] f2fs_lookup+0x4c8/0x948 [ 36.090880][ T6411] path_openat+0xf7c/0x2b14 [ 36.091830][ T6411] do_filp_open+0x1e8/0x404 [ 36.092749][ T6411] do_sys_openat2+0x124/0x1b8 [ 36.093716][ T6411] __arm64_sys_openat+0x1f0/0x240 [ 36.094740][ T6411] invoke_syscall+0x98/0x2b8 [ 36.095667][ T6411] el0_svc_common+0x130/0x23c [ 36.096616][ T6411] do_el0_svc+0x48/0x58 [ 36.097460][ T6411] el0_svc+0x54/0x168 [ 36.098292][ T6411] el0t_64_sync_handler+0x84/0x108 [ 36.099331][ T6411] el0t_64_sync+0x198/0x19c [ 36.100245][ T6411] [ 36.100723][ T6411] The buggy address belongs to the object at ffff0000cc3a9300 [ 36.100723][ T6411] which belongs to the cache kmalloc-16 of size 16 [ 36.103555][ T6411] The buggy address is located 1