Warning: Permanently added '10.128.0.31' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 65.351581][ T8473] loop0: detected capacity change from 264192 to 0 [ 65.374304][ T8473] ================================================================== [ 65.382567][ T8473] BUG: KASAN: slab-out-of-bounds in squashfs_export_iget+0x274/0x2a0 [ 65.390653][ T8473] Read of size 8 at addr ffff88801ba96700 by task syz-executor172/8473 [ 65.398883][ T8473] [ 65.401196][ T8473] CPU: 0 PID: 8473 Comm: syz-executor172 Not tainted 5.11.0-rc1-syzkaller #0 [ 65.409948][ T8473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 65.420167][ T8473] Call Trace: [ 65.423437][ T8473] dump_stack+0x107/0x163 [ 65.427765][ T8473] ? squashfs_export_iget+0x274/0x2a0 [ 65.433116][ T8473] ? squashfs_export_iget+0x274/0x2a0 [ 65.438462][ T8473] print_address_description.constprop.0.cold+0x5b/0x2f8 [ 65.445463][ T8473] ? squashfs_export_iget+0x274/0x2a0 [ 65.450810][ T8473] ? squashfs_export_iget+0x274/0x2a0 [ 65.456157][ T8473] kasan_report.cold+0x79/0xd5 [ 65.460896][ T8473] ? lock_downgrade+0x660/0x6d0 [ 65.465721][ T8473] ? squashfs_export_iget+0x274/0x2a0 [ 65.471417][ T8473] squashfs_export_iget+0x274/0x2a0 [ 65.476597][ T8473] ? squashfs_readdir+0xd70/0xd70 [ 65.481597][ T8473] ? _raw_spin_unlock_irqrestore+0x42/0x50 [ 65.487385][ T8473] ? lockdep_hardirqs_on+0x79/0x100 [ 65.492557][ T8473] ? _raw_spin_unlock_irqrestore+0x2f/0x50 [ 65.498339][ T8473] squashfs_fh_to_dentry+0x78/0xb0 [ 65.503433][ T8473] exportfs_decode_fh_raw+0x127/0x7a0 [ 65.508960][ T8473] ? drop_caches_sysctl_handler+0x110/0x110 [ 65.515004][ T8473] ? squashfs_get_parent+0xa0/0xa0 [ 65.520266][ T8473] ? reconnect_path+0x7e0/0x7e0 [ 65.525257][ T8473] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 65.531219][ T8473] ? find_held_lock+0x2d/0x110 [ 65.535957][ T8473] ? __might_fault+0xd3/0x180 [ 65.540796][ T8473] ? lock_downgrade+0x6d0/0x6d0 [ 65.545814][ T8473] ? drop_caches_sysctl_handler+0x110/0x110 [ 65.551685][ T8473] exportfs_decode_fh+0x38/0x90 [ 65.556515][ T8473] do_handle_open+0x2b6/0x7f0 [ 65.561166][ T8473] ? vfs_dentry_acceptable+0x10/0x10 [ 65.566426][ T8473] ? syscall_enter_from_user_mode+0x1d/0x50 [ 65.572296][ T8473] do_syscall_64+0x2d/0x70 [ 65.576684][ T8473] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 65.582549][ T8473] RIP: 0033:0x4443d9 [ 65.586420][ T8473] Code: 8d d7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b d7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 65.606156][ T8473] RSP: 002b:00007fffc3d35ac8 EFLAGS: 00000246 ORIG_RAX: 0000000000000130 [ 65.614801][ T8473] RAX: ffffffffffffffda RBX: 00000000004002e0 RCX: 00000000004443d9 [ 65.623086][ T8473] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000005 [ 65.631031][ T8473] RBP: 00000000006cf018 R08: 00007fff00000015 R09: 00000000004002e0 [ 65.638974][ T8473] R10: 00007fffc3d35970 R11: 0000000000000246 R12: 0000000000401fc0 [ 65.647095][ T8473] R13: 0000000000402050 R14: 0000000000000000 R15: 0000000000000000 [ 65.655050][ T8473] [ 65.657345][ T8473] Allocated by task 6487: [ 65.661640][ T8473] kasan_save_stack+0x1b/0x40 [ 65.666294][ T8473] ____kasan_kmalloc.constprop.0+0x82/0xa0 [ 65.672250][ T8473] security_prepare_creds+0x10e/0x190 [ 65.677597][ T8473] prepare_creds+0x509/0x730 [ 65.682165][ T8473] do_faccessat+0x3d7/0x820 [ 65.686643][ T8473] do_syscall_64+0x2d/0x70 [ 65.691036][ T8473] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 65.696901][ T8473] [ 65.699196][ T8473] Freed by task 6487: [ 65.703143][ T8473] kasan_save_stack+0x1b/0x40 [ 65.707791][ T8473] kasan_set_track+0x1c/0x30 [ 65.712354][ T8473] kasan_set_free_info+0x20/0x30 [ 65.717352][ T8473] ____kasan_slab_free+0xe1/0x110 [ 65.722433][ T8473] slab_free_freelist_hook+0x5d/0x150 [ 65.727952][ T8473] kfree+0xdb/0x360 [ 65.731730][ T8473] security_cred_free+0xc3/0x130 [ 65.736639][ T8473] put_cred_rcu+0x122/0x4e0 [ 65.741116][ T8473] __put_cred+0x1de/0x250 [ 65.745506][ T8473] revert_creds+0x1a8/0x1f0 [ 65.749983][ T8473] do_faccessat+0x2ca/0x820 [ 65.754458][ T8473] do_syscall_64+0x2d/0x70 [ 65.758904][ T8473] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 65.764805][ T8473] [ 65.767106][ T8473] The buggy address belongs to the object at ffff88801ba966e0 [ 65.767106][ T8473] which belongs to the cache kmalloc-8 of size 8 [ 65.780779][ T8473] The buggy address is located 24 bytes to the right of [ 65.780779][ T8473] 8-byte region [ffff88801ba966e0, ffff88801ba966e8) [ 65.794283][ T8473] The buggy address belongs to the page: [ 65.799883][ T8473] page:00000000327c546f refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88801ba965a0 pfn:0x1ba96 [ 65.811305][ T8473] flags: 0xfff00000000200(slab) [ 65.816133][ T8473] raw: 00fff00000000200 ffffea0000793300 0000000d0000000d ffff888010041c80 [ 65.825036][ T8473] raw: ffff88801ba965a0 000000008066005f 00000001ffffffff 0000000000000000 [ 65.833584][ T8473] page dumped because: kasan: bad access detected [ 65.839962][ T8473] [ 65.842258][ T8473] Memory state around the buggy address: [ 65.847856][ T8473] ffff88801ba96600: fc fc fc fa fc fc fc fc fb fc fc fc fc fa fc fc [ 65.855889][ T8473] ffff88801ba96680: fc fc fa fc fc fc fc 00 fc fc fc fc fa fc fc fc [ 65.863922][ T8473] >ffff88801ba96700: fc 00 fc fc fc fc fb fc fc fc fc fa fc fc fc fc [ 65.871951][ T8473] ^ [ 65.875987][ T8473] ffff88801ba96780: fa fc fc fc fc fa fc fc fc fc fa fc fc fc fc fa [ 65.884021][ T8473] ffff88801ba96800: fc fc fc fc fa fc fc fc fc fb fc fc fc fc fa fc [ 65.892049][ T8473] ================================================================== [ 65.900078][ T8473] Disabling lock debugging due to kernel taint [ 65.906784][ T8473] Kernel panic - not syncing: panic_on_warn set ... [ 65.913354][ T8473] CPU: 0 PID: 8473 Comm: syz-executor172 Tainted: G B 5.11.0-rc1-syzkaller #0 [ 65.923746][ T8473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 65.933771][ T8473] Call Trace: [ 65.937021][ T8473] dump_stack+0x107/0x163 [ 65.941324][ T8473] ? squashfs_export_iget+0x220/0x2a0 [ 65.946665][ T8473] panic+0x306/0x73d [ 65.950533][ T8473] ? __warn_printk+0xf3/0xf3 [ 65.955097][ T8473] ? preempt_schedule_common+0x59/0xc0 [ 65.960531][ T8473] ? squashfs_export_iget+0x274/0x2a0 [ 65.965874][ T8473] ? preempt_schedule_thunk+0x16/0x18 [ 65.971219][ T8473] ? trace_hardirqs_on+0x38/0x1c0 [ 65.976215][ T8473] ? trace_hardirqs_on+0x51/0x1c0 [ 65.981212][ T8473] ? squashfs_export_iget+0x274/0x2a0 [ 65.986563][ T8473] ? squashfs_export_iget+0x274/0x2a0 [ 65.991906][ T8473] end_report+0x58/0x5e [ 65.996032][ T8473] kasan_report.cold+0x67/0xd5 [ 66.000766][ T8473] ? lock_downgrade+0x660/0x6d0 [ 66.005586][ T8473] ? squashfs_export_iget+0x274/0x2a0 [ 66.010930][ T8473] squashfs_export_iget+0x274/0x2a0 [ 66.016099][ T8473] ? squashfs_readdir+0xd70/0xd70 [ 66.021096][ T8473] ? _raw_spin_unlock_irqrestore+0x42/0x50 [ 66.027048][ T8473] ? lockdep_hardirqs_on+0x79/0x100 [ 66.032214][ T8473] ? _raw_spin_unlock_irqrestore+0x2f/0x50 [ 66.037992][ T8473] squashfs_fh_to_dentry+0x78/0xb0 [ 66.043076][ T8473] exportfs_decode_fh_raw+0x127/0x7a0 [ 66.048424][ T8473] ? drop_caches_sysctl_handler+0x110/0x110 [ 66.054303][ T8473] ? squashfs_get_parent+0xa0/0xa0 [ 66.059389][ T8473] ? reconnect_path+0x7e0/0x7e0 [ 66.064209][ T8473] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 66.070163][ T8473] ? find_held_lock+0x2d/0x110 [ 66.074894][ T8473] ? __might_fault+0xd3/0x180 [ 66.079541][ T8473] ? lock_downgrade+0x6d0/0x6d0 [ 66.084373][ T8473] ? drop_caches_sysctl_handler+0x110/0x110 [ 66.090238][ T8473] exportfs_decode_fh+0x38/0x90 [ 66.095061][ T8473] do_handle_open+0x2b6/0x7f0 [ 66.099710][ T8473] ? vfs_dentry_acceptable+0x10/0x10 [ 66.104965][ T8473] ? syscall_enter_from_user_mode+0x1d/0x50 [ 66.110829][ T8473] do_syscall_64+0x2d/0x70 [ 66.115220][ T8473] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 66.121087][ T8473] RIP: 0033:0x4443d9 [ 66.125127][ T8473] Code: 8d d7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b d7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 66.144792][ T8473] RSP: 002b:00007fffc3d35ac8 EFLAGS: 00000246 ORIG_RAX: 0000000000000130 [ 66.153175][ T8473] RAX: ffffffffffffffda RBX: 00000000004002e0 RCX: 00000000004443d9 [ 66.161201][ T8473] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000005 [ 66.169141][ T8473] RBP: 00000000006cf018 R08: 00007fff00000015 R09: 00000000004002e0 [ 66.177171][ T8473] R10: 00007fffc3d35970 R11: 0000000000000246 R12: 0000000000401fc0 [ 66.185114][ T8473] R13: 0000000000402050 R14: 0000000000000000 R15: 0000000000000000 [ 66.197288][ T8473] Kernel Offset: disabled [ 66.201591][ T8473] Rebooting in 86400 seconds..