Warning: Permanently added '10.128.0.57' (ECDSA) to the list of known hosts. executing program [ 44.355201][ T6866] ================================================================== [ 44.363340][ T6866] BUG: KASAN: slab-out-of-bounds in squashfs_get_id+0xb9/0x1c0 [ 44.370857][ T6866] Read of size 8 at addr ffff88809a7707d8 by task syz-executor474/6866 [ 44.379062][ T6866] [ 44.381369][ T6866] CPU: 0 PID: 6866 Comm: syz-executor474 Not tainted 5.9.0-rc7-syzkaller #0 [ 44.390009][ T6866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 44.400038][ T6866] Call Trace: [ 44.403396][ T6866] dump_stack+0x1d6/0x29e [ 44.407746][ T6866] print_address_description+0x66/0x620 [ 44.413279][ T6866] ? printk+0x62/0x83 [ 44.417237][ T6866] ? _raw_spin_lock_irqsave+0x84/0xd0 [ 44.422589][ T6866] ? vprintk_emit+0x2f0/0x370 [ 44.427253][ T6866] kasan_report+0x132/0x1d0 [ 44.431732][ T6866] ? squashfs_get_id+0xb9/0x1c0 [ 44.436553][ T6866] ? _raw_spin_unlock+0x24/0x40 [ 44.441385][ T6866] squashfs_get_id+0xb9/0x1c0 [ 44.446073][ T6866] squashfs_read_inode+0x155/0x2170 [ 44.451248][ T6866] ? _raw_spin_unlock+0x24/0x40 [ 44.456072][ T6866] ? new_inode+0x1be/0x1d0 [ 44.460473][ T6866] squashfs_fill_super+0x1478/0x1790 [ 44.465751][ T6866] get_tree_bdev+0x3e9/0x5f0 [ 44.470325][ T6866] ? squashfs_reconfigure+0xa0/0xa0 [ 44.475514][ T6866] vfs_get_tree+0x88/0x270 [ 44.479914][ T6866] path_mount+0x179d/0x29e0 [ 44.484404][ T6866] __se_sys_mount+0x126/0x180 [ 44.489062][ T6866] do_syscall_64+0x31/0x70 [ 44.493457][ T6866] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 44.499324][ T6866] RIP: 0033:0x446d4a [ 44.503279][ T6866] Code: b8 08 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 fd ad fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 da ad fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 44.522908][ T6866] RSP: 002b:00007ffe8651e1c8 EFLAGS: 00000293 ORIG_RAX: 00000000000000a5 [ 44.531298][ T6866] RAX: ffffffffffffffda RBX: 00007ffe8651e220 RCX: 0000000000446d4a [ 44.539243][ T6866] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007ffe8651e1e0 [ 44.547187][ T6866] RBP: 00007ffe8651e1e0 R08: 00007ffe8651e220 R09: 00007ffe00000015 [ 44.555131][ T6866] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 44.563075][ T6866] R13: 0000000000000004 R14: 0000000000000003 R15: 0000000000000003 [ 44.571028][ T6866] [ 44.573330][ T6866] Allocated by task 1: [ 44.577373][ T6866] __kasan_kmalloc+0x100/0x130 [ 44.582107][ T6866] kvmalloc_node+0x81/0x110 [ 44.586595][ T6866] __list_lru_init+0x3b1/0x940 [ 44.591328][ T6866] alloc_super+0x726/0x870 [ 44.595719][ T6866] sget_fc+0x257/0x670 [ 44.599769][ T6866] get_tree_nodev+0x26/0x160 [ 44.604329][ T6866] vfs_get_tree+0x88/0x270 [ 44.608727][ T6866] path_mount+0x179d/0x29e0 [ 44.613211][ T6866] __se_sys_mount+0x126/0x180 [ 44.617860][ T6866] do_syscall_64+0x31/0x70 [ 44.622258][ T6866] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 44.628124][ T6866] [ 44.630427][ T6866] The buggy address belongs to the object at ffff88809a7707c0 [ 44.630427][ T6866] which belongs to the cache kmalloc-32 of size 32 [ 44.644274][ T6866] The buggy address is located 24 bytes inside of [ 44.644274][ T6866] 32-byte region [ffff88809a7707c0, ffff88809a7707e0) [ 44.657340][ T6866] The buggy address belongs to the page: [ 44.662945][ T6866] page:00000000d2916126 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88809a770fc1 pfn:0x9a770 [ 44.674363][ T6866] flags: 0xfffe0000000200(slab) [ 44.679220][ T6866] raw: 00fffe0000000200 ffffea000289f608 ffffea00026e1888 ffff8880aa440100 [ 44.687794][ T6866] raw: ffff88809a770fc1 ffff88809a770000 000000010000003c 0000000000000000 [ 44.696366][ T6866] page dumped because: kasan: bad access detected [ 44.702748][ T6866] [ 44.705049][ T6866] Memory state around the buggy address: [ 44.710650][ T6866] ffff88809a770680: 00 fc fc fc fc fc fc fc 00 00 01 fc fc fc fc fc [ 44.719043][ T6866] ffff88809a770700: 00 fc fc fc fc fc fc fc 00 01 fc fc fc fc fc fc [ 44.727074][ T6866] >ffff88809a770780: 06 fc fc fc fc fc fc fc 00 00 fc fc fc fc fc fc [ 44.735102][ T6866] ^ [ 44.742007][ T6866] ffff88809a770800: 00 00 fc fc fc fc fc fc 00 00 fc fc fc fc fc fc [ 44.750051][ T6866] ffff88809a770880: 00 00 fc fc fc fc fc fc 00 00 fc fc fc fc fc fc [ 44.758079][ T6866] ================================================================== [ 44.766108][ T6866] Disabling lock debugging due to kernel taint [ 44.773449][ T6866] Kernel panic - not syncing: panic_on_warn set ... [ 44.780053][ T6866] CPU: 0 PID: 6866 Comm: syz-executor474 Tainted: G B 5.9.0-rc7-syzkaller #0 [ 44.790096][ T6866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 44.800139][ T6866] Call Trace: [ 44.803402][ T6866] dump_stack+0x1d6/0x29e [ 44.807703][ T6866] panic+0x2c0/0x800 [ 44.811565][ T6866] ? trace_hardirqs_on+0x30/0x80 [ 44.816480][ T6866] kasan_report+0x1c9/0x1d0 [ 44.821069][ T6866] ? squashfs_get_id+0xb9/0x1c0 [ 44.825934][ T6866] ? _raw_spin_unlock+0x24/0x40 [ 44.830769][ T6866] squashfs_get_id+0xb9/0x1c0 [ 44.835420][ T6866] squashfs_read_inode+0x155/0x2170 [ 44.840637][ T6866] ? _raw_spin_unlock+0x24/0x40 [ 44.845458][ T6866] ? new_inode+0x1be/0x1d0 [ 44.849842][ T6866] squashfs_fill_super+0x1478/0x1790 [ 44.855095][ T6866] get_tree_bdev+0x3e9/0x5f0 [ 44.859694][ T6866] ? squashfs_reconfigure+0xa0/0xa0 [ 44.864914][ T6866] vfs_get_tree+0x88/0x270 [ 44.869303][ T6866] path_mount+0x179d/0x29e0 [ 44.873777][ T6866] __se_sys_mount+0x126/0x180 [ 44.878424][ T6866] do_syscall_64+0x31/0x70 [ 44.882813][ T6866] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 44.888681][ T6866] RIP: 0033:0x446d4a [ 44.892545][ T6866] Code: b8 08 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 fd ad fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 da ad fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 44.912117][ T6866] RSP: 002b:00007ffe8651e1c8 EFLAGS: 00000293 ORIG_RAX: 00000000000000a5 [ 44.920623][ T6866] RAX: ffffffffffffffda RBX: 00007ffe8651e220 RCX: 0000000000446d4a [ 44.928608][ T6866] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007ffe8651e1e0 [ 44.936555][ T6866] RBP: 00007ffe8651e1e0 R08: 00007ffe8651e220 R09: 00007ffe00000015 [ 44.944495][ T6866] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 44.952437][ T6866] R13: 0000000000000004 R14: 0000000000000003 R15: 0000000000000003 [ 44.961491][ T6866] Kernel Offset: disabled [ 44.965800][ T6866] Rebooting in 86400 seconds..