Warning: Permanently added '10.128.0.48' (ED25519) to the list of known hosts. executing program syzkaller login: [ 77.126281][ T5069] loop0: detected capacity change from 0 to 32768 [ 77.155575][ T5069] ================================================================== [ 77.163706][ T5069] BUG: KASAN: slab-out-of-bounds in diWrite+0xde3/0x19b0 [ 77.170806][ T5069] Write of size 32 at addr ffff888020fb60c0 by task syz-executor151/5069 [ 77.179255][ T5069] [ 77.181606][ T5069] CPU: 0 PID: 5069 Comm: syz-executor151 Not tainted 6.9.0-rc5-syzkaller #0 [ 77.190315][ T5069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 77.200408][ T5069] Call Trace: [ 77.203702][ T5069] [ 77.206646][ T5069] dump_stack_lvl+0x241/0x360 [ 77.211361][ T5069] ? __pfx_dump_stack_lvl+0x10/0x10 [ 77.216586][ T5069] ? __pfx__printk+0x10/0x10 [ 77.221192][ T5069] ? _printk+0xd5/0x120 [ 77.225358][ T5069] ? __virt_addr_valid+0x183/0x520 [ 77.230483][ T5069] ? __virt_addr_valid+0x183/0x520 [ 77.235609][ T5069] print_report+0x169/0x550 [ 77.240125][ T5069] ? __virt_addr_valid+0x183/0x520 [ 77.245252][ T5069] ? __virt_addr_valid+0x183/0x520 [ 77.250406][ T5069] ? __virt_addr_valid+0x44e/0x520 [ 77.255533][ T5069] ? __phys_addr+0xba/0x170 [ 77.260057][ T5069] ? diWrite+0xde3/0x19b0 [ 77.264399][ T5069] kasan_report+0x143/0x180 [ 77.268920][ T5069] ? diWrite+0xde3/0x19b0 [ 77.273291][ T5069] kasan_check_range+0x282/0x290 [ 77.278245][ T5069] ? diWrite+0xde3/0x19b0 [ 77.282597][ T5069] __asan_memcpy+0x40/0x70 [ 77.287022][ T5069] diWrite+0xde3/0x19b0 [ 77.291202][ T5069] txCommit+0xa1a/0x6a20 [ 77.295463][ T5069] ? add_index+0x34c/0x1620 [ 77.299990][ T5069] ? __pfx_add_index+0x10/0x10 [ 77.304764][ T5069] ? lockdep_unlock+0x16a/0x300 [ 77.309630][ T5069] ? __pfx_txCommit+0x10/0x10 [ 77.314323][ T5069] ? rcu_is_watching+0x15/0xb0 [ 77.319096][ T5069] ? __mark_inode_dirty+0x41c/0xe20 [ 77.324334][ T5069] jfs_readdir+0x28e9/0x4660 [ 77.328948][ T5069] ? __pfx_jfs_readdir+0x10/0x10 [ 77.333911][ T5069] ? __pfx___down_write_common+0x10/0x10 [ 77.339559][ T5069] ? __pfx___mutex_lock+0x10/0x10 [ 77.344596][ T5069] ? __pfx_jfs_readdir+0x10/0x10 [ 77.349539][ T5069] wrap_directory_iterator+0x94/0xe0 [ 77.354839][ T5069] iterate_dir+0x539/0x6f0 [ 77.359292][ T5069] __se_sys_getdents64+0x20d/0x4f0 [ 77.364416][ T5069] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 77.370426][ T5069] ? __pfx___se_sys_getdents64+0x10/0x10 [ 77.376073][ T5069] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 77.382061][ T5069] ? __pfx_filldir64+0x10/0x10 [ 77.386841][ T5069] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 77.393180][ T5069] ? exc_page_fault+0x585/0x8e0 [ 77.398049][ T5069] ? do_syscall_64+0xb6/0x240 [ 77.402741][ T5069] do_syscall_64+0xf5/0x240 [ 77.407263][ T5069] ? clear_bhb_loop+0x35/0x90 [ 77.411953][ T5069] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.417876][ T5069] RIP: 0033:0x7f0fcc027ad9 [ 77.422301][ T5069] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 77.441916][ T5069] RSP: 002b:00007ffe74170c18 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 77.450341][ T5069] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f0fcc027ad9 [ 77.458317][ T5069] RDX: 000000000000005d RSI: 00000000200002c0 RDI: 0000000000000005 [ 77.466319][ T5069] RBP: 00007f0fcc0a05f0 R08: 000055557fa294c0 R09: 000055557fa294c0 [ 77.474297][ T5069] R10: 000055557fa294c0 R11: 0000000000000246 R12: 00007ffe74170c40 [ 77.482273][ T5069] R13: 00007ffe74170e68 R14: 431bde82d7b634db R15: 00007f0fcc07003b [ 77.490260][ T5069] [ 77.493282][ T5069] [ 77.495634][ T5069] Allocated by task 5069: [ 77.499959][ T5069] kasan_save_track+0x3f/0x80 [ 77.504649][ T5069] __kasan_slab_alloc+0x66/0x80 [ 77.509522][ T5069] kmem_cache_alloc+0x174/0x340 [ 77.514389][ T5069] ima_inode_get+0xf3/0x4b0 [ 77.518900][ T5069] process_measurement+0x45d/0x1f60 [ 77.524109][ T5069] ima_file_check+0xf2/0x170 [ 77.528706][ T5069] security_file_post_open+0x6d/0xa0 [ 77.533999][ T5069] path_openat+0x28b7/0x3240 [ 77.538636][ T5069] do_filp_open+0x235/0x490 [ 77.543148][ T5069] do_sys_openat2+0x13e/0x1d0 [ 77.547833][ T5069] __x64_sys_openat+0x247/0x2a0 [ 77.552688][ T5069] do_syscall_64+0xf5/0x240 [ 77.557212][ T5069] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.563111][ T5069] [ 77.565438][ T5069] The buggy address belongs to the object at ffff888020fb6000 [ 77.565438][ T5069] which belongs to the cache ima_iint_cache of size 200 [ 77.579756][ T5069] The buggy address is located 192 bytes inside of [ 77.579756][ T5069] allocated 200-byte region [ffff888020fb6000, ffff888020fb60c8) [ 77.593902][ T5069] [ 77.596226][ T5069] The buggy address belongs to the physical page: [ 77.602639][ T5069] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x20fb6 [ 77.611402][ T5069] flags: 0xfff80000000800(slab|node=0|zone=1|lastcpupid=0xfff) [ 77.618947][ T5069] page_type: 0xffffffff() [ 77.623283][ T5069] raw: 00fff80000000800 ffff8880162a7640 dead000000000122 0000000000000000 [ 77.631872][ T5069] raw: 0000000000000000 00000000800f000f 00000001ffffffff 0000000000000000 [ 77.640451][ T5069] page dumped because: kasan: bad access detected [ 77.646858][ T5069] page_owner tracks the page as allocated [ 77.652570][ T5069] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12c40(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY), pid 5069, tgid -154916118 (syz-executor151), ts 5069, free_ts 70835926294 [ 77.670895][ T5069] post_alloc_hook+0x1ea/0x210 [ 77.675673][ T5069] get_page_from_freelist+0x3410/0x35b0 [ 77.681237][ T5069] __alloc_pages+0x256/0x6c0 [ 77.685838][ T5069] alloc_slab_page+0x5f/0x160 [ 77.690524][ T5069] new_slab+0x84/0x2f0 [ 77.694597][ T5069] ___slab_alloc+0xc73/0x1260 [ 77.699278][ T5069] kmem_cache_alloc+0x252/0x340 [ 77.704143][ T5069] ima_inode_get+0xf3/0x4b0 [ 77.708654][ T5069] process_measurement+0x45d/0x1f60 [ 77.713864][ T5069] ima_file_check+0xf2/0x170 [ 77.718457][ T5069] security_file_post_open+0x6d/0xa0 [ 77.723749][ T5069] path_openat+0x28b7/0x3240 [ 77.728346][ T5069] do_filp_open+0x235/0x490 [ 77.732862][ T5069] do_sys_openat2+0x13e/0x1d0 [ 77.737542][ T5069] __x64_sys_openat+0x247/0x2a0 [ 77.742419][ T5069] do_syscall_64+0xf5/0x240 [ 77.747029][ T5069] page last free pid 5063 tgid 5063 stack trace: [ 77.753354][ T5069] free_unref_page_prepare+0x97b/0xaa0 [ 77.758834][ T5069] free_unref_page+0x37/0x3f0 [ 77.763521][ T5069] __put_partials+0xeb/0x130 [ 77.768117][ T5069] put_cpu_partial+0x17c/0x250 [ 77.772895][ T5069] __slab_free+0x2ea/0x3d0 [ 77.777352][ T5069] qlist_free_all+0x5e/0xc0 [ 77.781904][ T5069] kasan_quarantine_reduce+0x14f/0x170 [ 77.787406][ T5069] __kasan_slab_alloc+0x23/0x80 [ 77.792281][ T5069] kmem_cache_alloc+0x174/0x340 [ 77.797149][ T5069] getname_flags+0xbd/0x4f0 [ 77.801667][ T5069] vfs_fstatat+0x11c/0x190 [ 77.806093][ T5069] __x64_sys_newfstatat+0x117/0x190 [ 77.811297][ T5069] do_syscall_64+0xf5/0x240 [ 77.815811][ T5069] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.821736][ T5069] [ 77.824060][ T5069] Memory state around the buggy address: [ 77.829697][ T5069] ffff888020fb5f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 77.837763][ T5069] ffff888020fb6000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 77.845844][ T5069] >ffff888020fb6080: 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc [ 77.853904][ T5069] ^ [ 77.860315][ T5069] ffff888020fb6100: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 77.868383][ T5069] ffff888020fb6180: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 77.876440][ T5069] ================================================================== [ 77.891783][ T5069] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 77.899028][ T5069] CPU: 0 PID: 5069 Comm: syz-executor151 Not tainted 6.9.0-rc5-syzkaller #0 [ 77.907716][ T5069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 77.917905][ T5069] Call Trace: [ 77.921192][ T5069] [ 77.924128][ T5069] dump_stack_lvl+0x241/0x360 [ 77.928824][ T5069] ? __pfx_dump_stack_lvl+0x10/0x10 [ 77.934048][ T5069] ? __pfx__printk+0x10/0x10 [ 77.938663][ T5069] ? preempt_schedule+0xe1/0xf0 [ 77.943535][ T5069] ? vscnprintf+0x5d/0x90 [ 77.947872][ T5069] panic+0x349/0x860 [ 77.951780][ T5069] ? check_panic_on_warn+0x21/0xb0 [ 77.956909][ T5069] ? __pfx_panic+0x10/0x10 [ 77.961353][ T5069] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 77.967347][ T5069] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 77.973684][ T5069] ? print_report+0x502/0x550 [ 77.978371][ T5069] check_panic_on_warn+0x86/0xb0 [ 77.983319][ T5069] ? diWrite+0xde3/0x19b0 [ 77.987656][ T5069] end_report+0x77/0x160 [ 77.991929][ T5069] kasan_report+0x154/0x180 [ 77.996491][ T5069] ? diWrite+0xde3/0x19b0 [ 78.000853][ T5069] kasan_check_range+0x282/0x290 [ 78.005825][ T5069] ? diWrite+0xde3/0x19b0 [ 78.010167][ T5069] __asan_memcpy+0x40/0x70 [ 78.014590][ T5069] diWrite+0xde3/0x19b0 [ 78.018765][ T5069] txCommit+0xa1a/0x6a20 [ 78.023026][ T5069] ? add_index+0x34c/0x1620 [ 78.027537][ T5069] ? __pfx_add_index+0x10/0x10 [ 78.032329][ T5069] ? lockdep_unlock+0x16a/0x300 [ 78.037238][ T5069] ? __pfx_txCommit+0x10/0x10 [ 78.041947][ T5069] ? rcu_is_watching+0x15/0xb0 [ 78.046728][ T5069] ? __mark_inode_dirty+0x41c/0xe20 [ 78.051967][ T5069] jfs_readdir+0x28e9/0x4660 [ 78.056633][ T5069] ? __pfx_jfs_readdir+0x10/0x10 [ 78.061607][ T5069] ? __pfx___down_write_common+0x10/0x10 [ 78.067255][ T5069] ? __pfx___mutex_lock+0x10/0x10 [ 78.072306][ T5069] ? __pfx_jfs_readdir+0x10/0x10 [ 78.077262][ T5069] wrap_directory_iterator+0x94/0xe0 [ 78.082580][ T5069] iterate_dir+0x539/0x6f0 [ 78.087011][ T5069] __se_sys_getdents64+0x20d/0x4f0 [ 78.092140][ T5069] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 78.098127][ T5069] ? __pfx___se_sys_getdents64+0x10/0x10 [ 78.103770][ T5069] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 78.109942][ T5069] ? __pfx_filldir64+0x10/0x10 [ 78.114763][ T5069] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 78.121100][ T5069] ? exc_page_fault+0x585/0x8e0 [ 78.125964][ T5069] ? do_syscall_64+0xb6/0x240 [ 78.130667][ T5069] do_syscall_64+0xf5/0x240 [ 78.135185][ T5069] ? clear_bhb_loop+0x35/0x90 [ 78.139870][ T5069] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.145774][ T5069] RIP: 0033:0x7f0fcc027ad9 [ 78.150195][ T5069] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 78.169812][ T5069] RSP: 002b:00007ffe74170c18 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 78.178235][ T5069] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f0fcc027ad9 [ 78.186210][ T5069] RDX: 000000000000005d RSI: 00000000200002c0 RDI: 0000000000000005 [ 78.194190][ T5069] RBP: 00007f0fcc0a05f0 R08: 000055557fa294c0 R09: 000055557fa294c0 [ 78.202187][ T5069] R10: 000055557fa294c0 R11: 0000000000000246 R12: 00007ffe74170c40 [ 78.210163][ T5069] R13: 00007ffe74170e68 R14: 431bde82d7b634db R15: 00007f0fcc07003b [ 78.218149][ T5069] [ 78.221510][ T5069] Kernel Offset: disabled [ 78.225842][ T5069] Rebooting in 86400 seconds..