Warning: Permanently added '10.128.0.81' (ED25519) to the list of known hosts. executing program syzkaller login: [ 72.627071][ T4245] loop0: detected capacity change from 0 to 4096 [ 72.640215][ T4245] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 72.718076][ T4245] loop0: detected capacity change from 4096 to 0 [ 72.727725][ T4245] ================================================================== [ 72.735812][ T4245] BUG: KASAN: slab-out-of-bounds in ntfs_sb_write+0x2d1/0x480 [ 72.743285][ T4245] Read of size 3504 at addr ffff888141aa6bc0 by task syz-executor911/4245 [ 72.751780][ T4245] [ 72.754102][ T4245] CPU: 0 PID: 4245 Comm: syz-executor911 Not tainted 6.1.117-syzkaller #0 [ 72.762591][ T4245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 72.772826][ T4245] Call Trace: [ 72.776096][ T4245] [ 72.779021][ T4245] dump_stack_lvl+0x1e3/0x2cb [ 72.783698][ T4245] ? nf_tcp_handle_invalid+0x642/0x642 [ 72.789259][ T4245] ? panic+0x764/0x764 [ 72.793342][ T4245] ? _printk+0xd1/0x111 [ 72.797495][ T4245] ? __virt_addr_valid+0x17f/0x530 [ 72.802612][ T4245] ? __virt_addr_valid+0x17f/0x530 [ 72.807715][ T4245] print_report+0x15f/0x4f0 [ 72.812211][ T4245] ? __virt_addr_valid+0x17f/0x530 [ 72.817317][ T4245] ? __virt_addr_valid+0x17f/0x530 [ 72.822423][ T4245] ? __virt_addr_valid+0x45b/0x530 [ 72.827621][ T4245] ? __phys_addr+0xb6/0x170 [ 72.832122][ T4245] ? ntfs_sb_write+0x2d1/0x480 [ 72.836886][ T4245] kasan_report+0x136/0x160 [ 72.841381][ T4245] ? ntfs_sb_write+0x2d1/0x480 [ 72.846157][ T4245] kasan_check_range+0x27f/0x290 [ 72.851079][ T4245] ? ntfs_sb_write+0x2d1/0x480 [ 72.855852][ T4245] memcpy+0x25/0x60 [ 72.859655][ T4245] ntfs_sb_write+0x2d1/0x480 [ 72.864259][ T4245] ntfs_sb_write_run+0x29c/0x810 [ 72.869190][ T4245] ? ntfs_sb_write+0x480/0x480 [ 72.873949][ T4245] ? rcu_is_watching+0x11/0xb0 [ 72.878707][ T4245] ntfs_set_ea+0x11e6/0x1660 [ 72.883295][ T4245] ? ntfs_save_wsl_perm+0x490/0x490 [ 72.888489][ T4245] ? ntfs_save_wsl_perm+0x86/0x490 [ 72.893634][ T4245] ? mutex_lock_nested+0x10/0x10 [ 72.898577][ T4245] ? from_kuid+0x18d/0x6f0 [ 72.903016][ T4245] ? make_kuid+0x700/0x700 [ 72.907427][ T4245] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 72.913433][ T4245] ? print_irqtrace_events+0x210/0x210 [ 72.918888][ T4245] ntfs_save_wsl_perm+0x139/0x490 [ 72.923936][ T4245] ? ntfs_listxattr+0x660/0x660 [ 72.928796][ T4245] ? in_group_or_capable+0x2c/0x50 [ 72.933907][ T4245] ? setattr_copy+0x42f/0x580 [ 72.938583][ T4245] ? ntfs_acl_chmod+0x7a/0x100 [ 72.943342][ T4245] ntfs3_setattr+0x961/0xb70 [ 72.947938][ T4245] ? current_time+0x1fd/0x300 [ 72.952632][ T4245] ? put_page+0x250/0x250 [ 72.956963][ T4245] ? common_perm_cond+0x31b/0x3f0 [ 72.961990][ T4245] ? bpf_lsm_inode_setattr+0x5/0x10 [ 72.967203][ T4245] ? put_page+0x250/0x250 [ 72.971545][ T4245] notify_change+0xce3/0xfc0 [ 72.976134][ T4245] chmod_common+0x2a7/0x4b0 [ 72.980640][ T4245] ? __ia32_sys_chroot+0x40/0x40 [ 72.985569][ T4245] ? kasan_quarantine_put+0xd4/0x220 [ 72.990849][ T4245] ? lockdep_hardirqs_on+0x94/0x130 [ 72.996042][ T4245] ? user_path_at_empty+0x48/0x60 [ 73.001061][ T4245] __x64_sys_fchmodat+0x117/0x1a0 [ 73.006084][ T4245] ? __ia32_sys_fchmod+0x150/0x150 [ 73.011191][ T4245] ? syscall_enter_from_user_mode+0x2e/0x230 [ 73.017174][ T4245] ? lockdep_hardirqs_on+0x94/0x130 [ 73.022365][ T4245] ? syscall_enter_from_user_mode+0x2e/0x230 [ 73.028340][ T4245] do_syscall_64+0x3b/0xb0 [ 73.032742][ T4245] ? clear_bhb_loop+0x45/0xa0 [ 73.037403][ T4245] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 73.043292][ T4245] RIP: 0033:0x7f4f967c3b79 [ 73.047706][ T4245] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 73.067303][ T4245] RSP: 002b:00007fff5bc32428 EFLAGS: 00000246 ORIG_RAX: 000000000000010c [ 73.075706][ T4245] RAX: ffffffffffffffda RBX: 0030656c69662f2e RCX: 00007f4f967c3b79 [ 73.083669][ T4245] RDX: 0000000000000141 RSI: 0000000020000200 RDI: 00000000ffffff9c [ 73.091632][ T4245] RBP: 00007f4f96856610 R08: 00007fff5bc325f8 R09: 00007fff5bc325f8 [ 73.099598][ T4245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 73.107561][ T4245] R13: 00007fff5bc325e8 R14: 0000000000000001 R15: 0000000000000001 [ 73.115545][ T4245] [ 73.118572][ T4245] [ 73.120911][ T4245] Allocated by task 4245: [ 73.125229][ T4245] kasan_set_track+0x4b/0x70 [ 73.129822][ T4245] __kasan_kmalloc+0x97/0xb0 [ 73.134404][ T4245] __kmalloc+0xb2/0x230 [ 73.138582][ T4245] ntfs_set_ea+0x6d7/0x1660 [ 73.143084][ T4245] ntfs_save_wsl_perm+0x139/0x490 [ 73.148105][ T4245] ntfs3_setattr+0x961/0xb70 [ 73.152690][ T4245] notify_change+0xce3/0xfc0 [ 73.157266][ T4245] chmod_common+0x2a7/0x4b0 [ 73.161767][ T4245] __x64_sys_fchmodat+0x117/0x1a0 [ 73.166802][ T4245] do_syscall_64+0x3b/0xb0 [ 73.171213][ T4245] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 73.177103][ T4245] [ 73.179421][ T4245] The buggy address belongs to the object at ffff888141aa6bc0 [ 73.179421][ T4245] which belongs to the cache kmalloc-32 of size 32 [ 73.193464][ T4245] The buggy address is located 0 bytes inside of [ 73.193464][ T4245] 32-byte region [ffff888141aa6bc0, ffff888141aa6be0) [ 73.206466][ T4245] [ 73.208777][ T4245] The buggy address belongs to the physical page: [ 73.215183][ T4245] page:ffffea000506a980 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x141aa6 [ 73.225405][ T4245] flags: 0x57ff00000000200(slab|node=1|zone=2|lastcpupid=0x7ff) [ 73.233032][ T4245] raw: 057ff00000000200 ffffea000084c840 dead000000000004 ffff888017c41500 [ 73.241606][ T4245] raw: 0000000000000000 0000000080400040 00000001ffffffff 0000000000000000 [ 73.250178][ T4245] page dumped because: kasan: bad access detected [ 73.256580][ T4245] page_owner tracks the page as allocated [ 73.262287][ T4245] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 1, tgid 1 (swapper/0), ts 2477914335, free_ts 0 [ 73.278861][ T4245] post_alloc_hook+0x18d/0x1b0 [ 73.283620][ T4245] get_page_from_freelist+0x3731/0x38d0 [ 73.289245][ T4245] __alloc_pages+0x28d/0x770 [ 73.293828][ T4245] alloc_page_interleave+0x22/0x1c0 [ 73.299017][ T4245] alloc_slab_page+0x6a/0x150 [ 73.303710][ T4245] new_slab+0x84/0x2d0 [ 73.307778][ T4245] ___slab_alloc+0xc20/0x1270 [ 73.312445][ T4245] __kmem_cache_alloc_node+0x19f/0x260 [ 73.317912][ T4245] __kmalloc+0xa1/0x230 [ 73.322054][ T4245] kobject_get_path+0xb4/0x220 [ 73.326822][ T4245] kobject_uevent_env+0x29b/0x8c0 [ 73.331841][ T4245] kernel_add_sysfs_param+0x106/0x126 [ 73.337233][ T4245] param_sysfs_builtin+0x16a/0x1e2 [ 73.342359][ T4245] param_sysfs_init+0x66/0x6a [ 73.347029][ T4245] do_one_initcall+0x265/0x8f0 [ 73.351795][ T4245] do_initcall_level+0x157/0x207 [ 73.356725][ T4245] page_owner free stack trace missing [ 73.362076][ T4245] [ 73.364404][ T4245] Memory state around the buggy address: [ 73.370030][ T4245] ffff888141aa6a80: fb fb fb fb fc fc fc fc fb fb fb fb fc fc fc fc [ 73.378076][ T4245] ffff888141aa6b00: 00 00 00 fc fc fc fc fc 00 00 00 00 fc fc fc fc [ 73.386137][ T4245] >ffff888141aa6b80: fb fb fb fb fc fc fc fc 00 00 04 fc fc fc fc fc [ 73.394182][ T4245] ^ [ 73.400843][ T4245] ffff888141aa6c00: fb fb fb fb fc fc fc fc fb fb fb fb fc fc fc fc [ 73.408892][ T4245] ffff888141aa6c80: fa fb fb fb fc fc fc fc fa fb fb fb fc fc fc fc [ 73.416936][ T4245] ================================================================== [ 73.425336][ T4245] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 73.432544][ T4245] CPU: 0 PID: 4245 Comm: syz-executor911 Not tainted 6.1.117-syzkaller #0 [ 73.441041][ T4245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 73.451094][ T4245] Call Trace: [ 73.454372][ T4245] [ 73.457325][ T4245] dump_stack_lvl+0x1e3/0x2cb [ 73.462001][ T4245] ? nf_tcp_handle_invalid+0x642/0x642 [ 73.467452][ T4245] ? panic+0x764/0x764 [ 73.471523][ T4245] ? preempt_schedule_common+0xa6/0xd0 [ 73.476988][ T4245] ? vscnprintf+0x59/0x80 [ 73.481321][ T4245] panic+0x318/0x764 [ 73.485219][ T4245] ? check_panic_on_warn+0x1d/0xa0 [ 73.490326][ T4245] ? memcpy_page_flushcache+0xfc/0xfc [ 73.495699][ T4245] ? _raw_spin_unlock_irqrestore+0x128/0x130 [ 73.501691][ T4245] ? _raw_spin_unlock+0x40/0x40 [ 73.506549][ T4245] ? print_report+0x4a3/0x4f0 [ 73.511261][ T4245] check_panic_on_warn+0x7e/0xa0 [ 73.516202][ T4245] ? ntfs_sb_write+0x2d1/0x480 [ 73.520973][ T4245] end_report+0x66/0x110 [ 73.525220][ T4245] kasan_report+0x143/0x160 [ 73.529723][ T4245] ? ntfs_sb_write+0x2d1/0x480 [ 73.534497][ T4245] kasan_check_range+0x27f/0x290 [ 73.539464][ T4245] ? ntfs_sb_write+0x2d1/0x480 [ 73.544266][ T4245] memcpy+0x25/0x60 [ 73.548103][ T4245] ntfs_sb_write+0x2d1/0x480 [ 73.552704][ T4245] ntfs_sb_write_run+0x29c/0x810 [ 73.557651][ T4245] ? ntfs_sb_write+0x480/0x480 [ 73.562421][ T4245] ? rcu_is_watching+0x11/0xb0 [ 73.567186][ T4245] ntfs_set_ea+0x11e6/0x1660 [ 73.571792][ T4245] ? ntfs_save_wsl_perm+0x490/0x490 [ 73.577085][ T4245] ? ntfs_save_wsl_perm+0x86/0x490 [ 73.582243][ T4245] ? mutex_lock_nested+0x10/0x10 [ 73.587272][ T4245] ? from_kuid+0x18d/0x6f0 [ 73.591699][ T4245] ? make_kuid+0x700/0x700 [ 73.596118][ T4245] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 73.602107][ T4245] ? print_irqtrace_events+0x210/0x210 [ 73.607657][ T4245] ntfs_save_wsl_perm+0x139/0x490 [ 73.612688][ T4245] ? ntfs_listxattr+0x660/0x660 [ 73.617556][ T4245] ? in_group_or_capable+0x2c/0x50 [ 73.622668][ T4245] ? setattr_copy+0x42f/0x580 [ 73.627349][ T4245] ? ntfs_acl_chmod+0x7a/0x100 [ 73.632116][ T4245] ntfs3_setattr+0x961/0xb70 [ 73.636709][ T4245] ? current_time+0x1fd/0x300 [ 73.641390][ T4245] ? put_page+0x250/0x250 [ 73.645727][ T4245] ? common_perm_cond+0x31b/0x3f0 [ 73.650770][ T4245] ? bpf_lsm_inode_setattr+0x5/0x10 [ 73.655967][ T4245] ? put_page+0x250/0x250 [ 73.660297][ T4245] notify_change+0xce3/0xfc0 [ 73.664882][ T4245] chmod_common+0x2a7/0x4b0 [ 73.669404][ T4245] ? __ia32_sys_chroot+0x40/0x40 [ 73.674339][ T4245] ? kasan_quarantine_put+0xd4/0x220 [ 73.679630][ T4245] ? lockdep_hardirqs_on+0x94/0x130 [ 73.684833][ T4245] ? user_path_at_empty+0x48/0x60 [ 73.689906][ T4245] __x64_sys_fchmodat+0x117/0x1a0 [ 73.694935][ T4245] ? __ia32_sys_fchmod+0x150/0x150 [ 73.700062][ T4245] ? syscall_enter_from_user_mode+0x2e/0x230 [ 73.706042][ T4245] ? lockdep_hardirqs_on+0x94/0x130 [ 73.711236][ T4245] ? syscall_enter_from_user_mode+0x2e/0x230 [ 73.717220][ T4245] do_syscall_64+0x3b/0xb0 [ 73.721633][ T4245] ? clear_bhb_loop+0x45/0xa0 [ 73.726308][ T4245] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 73.732214][ T4245] RIP: 0033:0x7f4f967c3b79 [ 73.736642][ T4245] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 73.756250][ T4245] RSP: 002b:00007fff5bc32428 EFLAGS: 00000246 ORIG_RAX: 000000000000010c [ 73.764670][ T4245] RAX: ffffffffffffffda RBX: 0030656c69662f2e RCX: 00007f4f967c3b79 [ 73.772635][ T4245] RDX: 0000000000000141 RSI: 0000000020000200 RDI: 00000000ffffff9c [ 73.780600][ T4245] RBP: 00007f4f96856610 R08: 00007fff5bc325f8 R09: 00007fff5bc325f8 [ 73.788574][ T4245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 73.796539][ T4245] R13: 00007fff5bc325e8 R14: 0000000000000001 R15: 0000000000000001 [ 73.804518][ T4245] [ 73.807877][ T4245] Kernel Offset: disabled [ 73.812205][ T4245] Rebooting in 86400 seconds..