Warning: Permanently added '10.128.0.143' (ED25519) to the list of known hosts. executing program syzkaller login: [ 70.914954][ T4249] loop0: detected capacity change from 0 to 4096 [ 70.926988][ T4249] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 71.014115][ T4249] loop0: detected capacity change from 4096 to 0 [ 71.024523][ T4249] ================================================================== [ 71.032610][ T4249] BUG: KASAN: slab-out-of-bounds in ntfs_sb_write+0x2d1/0x480 [ 71.040083][ T4249] Read of size 3504 at addr ffff8880192a2e00 by task syz-executor221/4249 [ 71.048567][ T4249] [ 71.050887][ T4249] CPU: 0 PID: 4249 Comm: syz-executor221 Not tainted 6.1.117-syzkaller #0 [ 71.059371][ T4249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 71.069439][ T4249] Call Trace: [ 71.072724][ T4249] [ 71.075643][ T4249] dump_stack_lvl+0x1e3/0x2cb [ 71.080314][ T4249] ? nf_tcp_handle_invalid+0x642/0x642 [ 71.085760][ T4249] ? panic+0x764/0x764 [ 71.089820][ T4249] ? _printk+0xd1/0x111 [ 71.093967][ T4249] ? __virt_addr_valid+0x17f/0x530 [ 71.099074][ T4249] ? __virt_addr_valid+0x17f/0x530 [ 71.104180][ T4249] print_report+0x15f/0x4f0 [ 71.108707][ T4249] ? __virt_addr_valid+0x17f/0x530 [ 71.113812][ T4249] ? __virt_addr_valid+0x17f/0x530 [ 71.118935][ T4249] ? __virt_addr_valid+0x45b/0x530 [ 71.124072][ T4249] ? __phys_addr+0xb6/0x170 [ 71.128570][ T4249] ? ntfs_sb_write+0x2d1/0x480 [ 71.133355][ T4249] kasan_report+0x136/0x160 [ 71.137875][ T4249] ? ntfs_sb_write+0x2d1/0x480 [ 71.142704][ T4249] kasan_check_range+0x27f/0x290 [ 71.147644][ T4249] ? ntfs_sb_write+0x2d1/0x480 [ 71.152433][ T4249] memcpy+0x25/0x60 [ 71.156242][ T4249] ntfs_sb_write+0x2d1/0x480 [ 71.160830][ T4249] ntfs_sb_write_run+0x29c/0x810 [ 71.165767][ T4249] ? ntfs_sb_write+0x480/0x480 [ 71.170535][ T4249] ? rcu_is_watching+0x11/0xb0 [ 71.175293][ T4249] ntfs_set_ea+0x11e6/0x1660 [ 71.179899][ T4249] ? ntfs_save_wsl_perm+0x490/0x490 [ 71.185113][ T4249] ? ntfs_save_wsl_perm+0x86/0x490 [ 71.190228][ T4249] ? mutex_lock_nested+0x10/0x10 [ 71.195157][ T4249] ? from_kuid+0x18d/0x6f0 [ 71.199571][ T4249] ? make_kuid+0x700/0x700 [ 71.204024][ T4249] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 71.210126][ T4249] ? print_irqtrace_events+0x210/0x210 [ 71.215613][ T4249] ntfs_save_wsl_perm+0x139/0x490 [ 71.220644][ T4249] ? ntfs_listxattr+0x660/0x660 [ 71.225583][ T4249] ? in_group_or_capable+0x2c/0x50 [ 71.230693][ T4249] ? setattr_copy+0x42f/0x580 [ 71.235390][ T4249] ? ntfs_acl_chmod+0x7a/0x100 [ 71.240173][ T4249] ntfs3_setattr+0x961/0xb70 [ 71.244768][ T4249] ? current_time+0x1fd/0x300 [ 71.249450][ T4249] ? put_page+0x250/0x250 [ 71.253814][ T4249] ? common_perm_cond+0x31b/0x3f0 [ 71.258860][ T4249] ? bpf_lsm_inode_setattr+0x5/0x10 [ 71.264054][ T4249] ? put_page+0x250/0x250 [ 71.268386][ T4249] notify_change+0xce3/0xfc0 [ 71.272970][ T4249] chmod_common+0x2a7/0x4b0 [ 71.277494][ T4249] ? __ia32_sys_chroot+0x40/0x40 [ 71.282430][ T4249] ? kasan_quarantine_put+0xd4/0x220 [ 71.287709][ T4249] ? lockdep_hardirqs_on+0x94/0x130 [ 71.292918][ T4249] ? user_path_at_empty+0x48/0x60 [ 71.297947][ T4249] __x64_sys_fchmodat+0x117/0x1a0 [ 71.303240][ T4249] ? __ia32_sys_fchmod+0x150/0x150 [ 71.308372][ T4249] ? syscall_enter_from_user_mode+0x2e/0x230 [ 71.314352][ T4249] ? lockdep_hardirqs_on+0x94/0x130 [ 71.319643][ T4249] ? syscall_enter_from_user_mode+0x2e/0x230 [ 71.325636][ T4249] do_syscall_64+0x3b/0xb0 [ 71.330140][ T4249] ? clear_bhb_loop+0x45/0xa0 [ 71.334813][ T4249] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 71.340715][ T4249] RIP: 0033:0x7fa14cf72b79 [ 71.345138][ T4249] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 71.364998][ T4249] RSP: 002b:00007ffc67811eb8 EFLAGS: 00000246 ORIG_RAX: 000000000000010c [ 71.373426][ T4249] RAX: ffffffffffffffda RBX: 0030656c69662f2e RCX: 00007fa14cf72b79 [ 71.381396][ T4249] RDX: 0000000000000141 RSI: 0000000020000200 RDI: 00000000ffffff9c [ 71.389362][ T4249] RBP: 00007fa14d005610 R08: 00007ffc67812088 R09: 00007ffc67812088 [ 71.397330][ T4249] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 71.405300][ T4249] R13: 00007ffc67812078 R14: 0000000000000001 R15: 0000000000000001 [ 71.413368][ T4249] [ 71.416379][ T4249] [ 71.418704][ T4249] Allocated by task 4249: [ 71.423032][ T4249] kasan_set_track+0x4b/0x70 [ 71.427634][ T4249] __kasan_kmalloc+0x97/0xb0 [ 71.432229][ T4249] __kmalloc+0xb2/0x230 [ 71.436378][ T4249] ntfs_set_ea+0x6d7/0x1660 [ 71.440881][ T4249] ntfs_save_wsl_perm+0x139/0x490 [ 71.445920][ T4249] ntfs3_setattr+0x961/0xb70 [ 71.450525][ T4249] notify_change+0xce3/0xfc0 [ 71.455107][ T4249] chmod_common+0x2a7/0x4b0 [ 71.459711][ T4249] __x64_sys_fchmodat+0x117/0x1a0 [ 71.464752][ T4249] do_syscall_64+0x3b/0xb0 [ 71.469153][ T4249] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 71.475042][ T4249] [ 71.477353][ T4249] The buggy address belongs to the object at ffff8880192a2e00 [ 71.477353][ T4249] which belongs to the cache kmalloc-32 of size 32 [ 71.491218][ T4249] The buggy address is located 0 bytes inside of [ 71.491218][ T4249] 32-byte region [ffff8880192a2e00, ffff8880192a2e20) [ 71.504219][ T4249] [ 71.506541][ T4249] The buggy address belongs to the physical page: [ 71.512940][ T4249] page:ffffea000064a880 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x192a2 [ 71.523078][ T4249] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 71.530624][ T4249] raw: 00fff00000000200 ffffea0000c2b980 dead000000000002 ffff888017c41500 [ 71.539195][ T4249] raw: 0000000000000000 0000000080400040 00000001ffffffff 0000000000000000 [ 71.547762][ T4249] page dumped because: kasan: bad access detected [ 71.554279][ T4249] page_owner tracks the page as allocated [ 71.559975][ T4249] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 1, tgid 1 (swapper/0), ts 2356417453, free_ts 0 [ 71.576645][ T4249] post_alloc_hook+0x18d/0x1b0 [ 71.581399][ T4249] get_page_from_freelist+0x3731/0x38d0 [ 71.586964][ T4249] __alloc_pages+0x28d/0x770 [ 71.591542][ T4249] alloc_page_interleave+0x22/0x1c0 [ 71.596728][ T4249] alloc_slab_page+0x6a/0x150 [ 71.601399][ T4249] new_slab+0x84/0x2d0 [ 71.605460][ T4249] ___slab_alloc+0xc20/0x1270 [ 71.610126][ T4249] __kmem_cache_alloc_node+0x19f/0x260 [ 71.615575][ T4249] __kmalloc_node_track_caller+0xa0/0x220 [ 71.621288][ T4249] krealloc+0x71/0x110 [ 71.625349][ T4249] add_sysfs_param+0x137/0x7f0 [ 71.630109][ T4249] kernel_add_sysfs_param+0xb0/0x126 [ 71.635388][ T4249] param_sysfs_builtin+0x16a/0x1e2 [ 71.640520][ T4249] param_sysfs_init+0x66/0x6a [ 71.645189][ T4249] do_one_initcall+0x265/0x8f0 [ 71.649966][ T4249] do_initcall_level+0x157/0x207 [ 71.654892][ T4249] page_owner free stack trace missing [ 71.660244][ T4249] [ 71.662562][ T4249] Memory state around the buggy address: [ 71.668180][ T4249] ffff8880192a2d00: fb fb fb fb fc fc fc fc 00 00 00 00 fc fc fc fc [ 71.676228][ T4249] ffff8880192a2d80: fa fb fb fb fc fc fc fc 00 00 00 fc fc fc fc fc [ 71.684288][ T4249] >ffff8880192a2e00: 00 00 04 fc fc fc fc fc fb fb fb fb fc fc fc fc [ 71.692331][ T4249] ^ [ 71.696903][ T4249] ffff8880192a2e80: fb fb fb fb fc fc fc fc fb fb fb fb fc fc fc fc [ 71.704955][ T4249] ffff8880192a2f00: fb fb fb fb fc fc fc fc fb fb fb fb fc fc fc fc [ 71.713003][ T4249] ================================================================== [ 71.724308][ T4249] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 71.731586][ T4249] CPU: 0 PID: 4249 Comm: syz-executor221 Not tainted 6.1.117-syzkaller #0 [ 71.740100][ T4249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 71.750155][ T4249] Call Trace: [ 71.753438][ T4249] [ 71.756376][ T4249] dump_stack_lvl+0x1e3/0x2cb [ 71.761068][ T4249] ? nf_tcp_handle_invalid+0x642/0x642 [ 71.766522][ T4249] ? panic+0x764/0x764 [ 71.770584][ T4249] ? preempt_schedule_common+0xa6/0xd0 [ 71.776046][ T4249] ? vscnprintf+0x59/0x80 [ 71.780395][ T4249] panic+0x318/0x764 [ 71.784464][ T4249] ? check_panic_on_warn+0x1d/0xa0 [ 71.789580][ T4249] ? memcpy_page_flushcache+0xfc/0xfc [ 71.794956][ T4249] ? _raw_spin_unlock_irqrestore+0x128/0x130 [ 71.800964][ T4249] ? _raw_spin_unlock+0x40/0x40 [ 71.805812][ T4249] ? print_report+0x4a3/0x4f0 [ 71.810497][ T4249] check_panic_on_warn+0x7e/0xa0 [ 71.815432][ T4249] ? ntfs_sb_write+0x2d1/0x480 [ 71.820186][ T4249] end_report+0x66/0x110 [ 71.824426][ T4249] kasan_report+0x143/0x160 [ 71.828931][ T4249] ? ntfs_sb_write+0x2d1/0x480 [ 71.833698][ T4249] kasan_check_range+0x27f/0x290 [ 71.838636][ T4249] ? ntfs_sb_write+0x2d1/0x480 [ 71.843404][ T4249] memcpy+0x25/0x60 [ 71.847223][ T4249] ntfs_sb_write+0x2d1/0x480 [ 71.851840][ T4249] ntfs_sb_write_run+0x29c/0x810 [ 71.856791][ T4249] ? ntfs_sb_write+0x480/0x480 [ 71.861557][ T4249] ? rcu_is_watching+0x11/0xb0 [ 71.866315][ T4249] ntfs_set_ea+0x11e6/0x1660 [ 71.870914][ T4249] ? ntfs_save_wsl_perm+0x490/0x490 [ 71.876115][ T4249] ? ntfs_save_wsl_perm+0x86/0x490 [ 71.881235][ T4249] ? mutex_lock_nested+0x10/0x10 [ 71.886170][ T4249] ? from_kuid+0x18d/0x6f0 [ 71.890583][ T4249] ? make_kuid+0x700/0x700 [ 71.894998][ T4249] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 71.900983][ T4249] ? print_irqtrace_events+0x210/0x210 [ 71.906448][ T4249] ntfs_save_wsl_perm+0x139/0x490 [ 71.911485][ T4249] ? ntfs_listxattr+0x660/0x660 [ 71.916337][ T4249] ? in_group_or_capable+0x2c/0x50 [ 71.921451][ T4249] ? setattr_copy+0x42f/0x580 [ 71.926131][ T4249] ? ntfs_acl_chmod+0x7a/0x100 [ 71.930893][ T4249] ntfs3_setattr+0x961/0xb70 [ 71.935495][ T4249] ? current_time+0x1fd/0x300 [ 71.940181][ T4249] ? put_page+0x250/0x250 [ 71.944518][ T4249] ? common_perm_cond+0x31b/0x3f0 [ 71.949633][ T4249] ? bpf_lsm_inode_setattr+0x5/0x10 [ 71.954850][ T4249] ? put_page+0x250/0x250 [ 71.959186][ T4249] notify_change+0xce3/0xfc0 [ 71.963780][ T4249] chmod_common+0x2a7/0x4b0 [ 71.968293][ T4249] ? __ia32_sys_chroot+0x40/0x40 [ 71.973237][ T4249] ? kasan_quarantine_put+0xd4/0x220 [ 71.978545][ T4249] ? lockdep_hardirqs_on+0x94/0x130 [ 71.983762][ T4249] ? user_path_at_empty+0x48/0x60 [ 71.988800][ T4249] __x64_sys_fchmodat+0x117/0x1a0 [ 71.993862][ T4249] ? __ia32_sys_fchmod+0x150/0x150 [ 71.998996][ T4249] ? syscall_enter_from_user_mode+0x2e/0x230 [ 72.004990][ T4249] ? lockdep_hardirqs_on+0x94/0x130 [ 72.010199][ T4249] ? syscall_enter_from_user_mode+0x2e/0x230 [ 72.016185][ T4249] do_syscall_64+0x3b/0xb0 [ 72.020599][ T4249] ? clear_bhb_loop+0x45/0xa0 [ 72.025269][ T4249] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 72.031183][ T4249] RIP: 0033:0x7fa14cf72b79 [ 72.035600][ T4249] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 72.055375][ T4249] RSP: 002b:00007ffc67811eb8 EFLAGS: 00000246 ORIG_RAX: 000000000000010c [ 72.063848][ T4249] RAX: ffffffffffffffda RBX: 0030656c69662f2e RCX: 00007fa14cf72b79 [ 72.071837][ T4249] RDX: 0000000000000141 RSI: 0000000020000200 RDI: 00000000ffffff9c [ 72.079809][ T4249] RBP: 00007fa14d005610 R08: 00007ffc67812088 R09: 00007ffc67812088 [ 72.087780][ T4249] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 72.095749][ T4249] R13: 00007ffc67812078 R14: 0000000000000001 R15: 0000000000000001 [ 72.103723][ T4249] [ 72.107053][ T4249] Kernel Offset: disabled [ 72.111379][ T4249] Rebooting in 86400 seconds..