Warning: Permanently added '10.128.0.230' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 70.845911][ T8488] loop0: detected capacity change from 264192 to 0 [ 70.865120][ T8488] ================================================================== [ 70.873779][ T8488] BUG: KASAN: slab-out-of-bounds in squashfs_export_iget+0x274/0x2a0 [ 70.881974][ T8488] Read of size 8 at addr ffff88801c6f6e08 by task syz-executor839/8488 [ 70.890210][ T8488] [ 70.892557][ T8488] CPU: 0 PID: 8488 Comm: syz-executor839 Not tainted 5.10.0-rc7-next-20201208-syzkaller #0 [ 70.902533][ T8488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 70.912627][ T8488] Call Trace: [ 70.915940][ T8488] dump_stack+0x107/0x163 [ 70.920289][ T8488] ? squashfs_export_iget+0x274/0x2a0 [ 70.925672][ T8488] ? squashfs_export_iget+0x274/0x2a0 [ 70.931053][ T8488] print_address_description.constprop.0.cold+0x5b/0x2f8 [ 70.938089][ T8488] ? squashfs_export_iget+0x274/0x2a0 [ 70.943471][ T8488] ? squashfs_export_iget+0x274/0x2a0 [ 70.948853][ T8488] kasan_report.cold+0x79/0xd5 [ 70.953629][ T8488] ? lock_downgrade+0x620/0x6d0 [ 70.958487][ T8488] ? squashfs_export_iget+0x274/0x2a0 [ 70.963872][ T8488] squashfs_export_iget+0x274/0x2a0 [ 70.969084][ T8488] ? squashfs_readdir+0xd70/0xd70 [ 70.974124][ T8488] ? _raw_spin_unlock_irqrestore+0x42/0x50 [ 70.979945][ T8488] ? lockdep_hardirqs_on+0x79/0x100 [ 70.985157][ T8488] ? _raw_spin_unlock_irqrestore+0x2f/0x50 [ 70.990989][ T8488] squashfs_fh_to_dentry+0x78/0xb0 [ 70.996122][ T8488] exportfs_decode_fh_raw+0x127/0x7a0 [ 71.002547][ T8488] ? drop_caches_sysctl_handler+0x110/0x110 [ 71.008451][ T8488] ? squashfs_get_parent+0xa0/0xa0 [ 71.013579][ T8488] ? reconnect_path+0x7e0/0x7e0 [ 71.018444][ T8488] ? lockdep_hardirqs_on_prepare+0x420/0x420 [ 71.024429][ T8488] ? __lock_acquire+0x16c2/0x54b0 [ 71.029478][ T8488] ? find_held_lock+0x2d/0x110 [ 71.034273][ T8488] ? __might_fault+0xd3/0x180 [ 71.038959][ T8488] ? lock_downgrade+0x6d0/0x6d0 [ 71.043870][ T8488] ? drop_caches_sysctl_handler+0x110/0x110 [ 71.049794][ T8488] exportfs_decode_fh+0x38/0x90 [ 71.054634][ T8488] do_handle_open+0x2b6/0x7f0 [ 71.059353][ T8488] ? vfs_dentry_acceptable+0x10/0x10 [ 71.064626][ T8488] ? syscall_enter_from_user_mode+0x1d/0x50 [ 71.070509][ T8488] do_syscall_64+0x2d/0x70 [ 71.074912][ T8488] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 71.080790][ T8488] RIP: 0033:0x4443d9 [ 71.084668][ T8488] Code: 8d d7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b d7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 71.104255][ T8488] RSP: 002b:00007ffd937fcd78 EFLAGS: 00000246 ORIG_RAX: 0000000000000130 [ 71.112847][ T8488] RAX: ffffffffffffffda RBX: 00000000004002e0 RCX: 00000000004443d9 [ 71.120800][ T8488] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000005 [ 71.128754][ T8488] RBP: 00000000006cf018 R08: 00007ffd00000015 R09: 00000000004002e0 [ 71.136709][ T8488] R10: 00007ffd937fcc20 R11: 0000000000000246 R12: 0000000000401fc0 [ 71.144659][ T8488] R13: 0000000000402050 R14: 0000000000000000 R15: 0000000000000000 [ 71.152631][ T8488] [ 71.154939][ T8488] Allocated by task 6500: [ 71.159254][ T8488] kasan_save_stack+0x1b/0x40 [ 71.164018][ T8488] ____kasan_kmalloc.constprop.0+0xa0/0xd0 [ 71.169806][ T8488] security_prepare_creds+0x10e/0x190 [ 71.175156][ T8488] prepare_creds+0x509/0x730 [ 71.179742][ T8488] do_faccessat+0x3d7/0x870 [ 71.184235][ T8488] do_syscall_64+0x2d/0x70 [ 71.188632][ T8488] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 71.194499][ T8488] [ 71.196829][ T8488] The buggy address belongs to the object at ffff88801c6f6de8 [ 71.196829][ T8488] which belongs to the cache kmalloc-8 of size 8 [ 71.210517][ T8488] The buggy address is located 24 bytes to the right of [ 71.210517][ T8488] 8-byte region [ffff88801c6f6de8, ffff88801c6f6df0) [ 71.224023][ T8488] The buggy address belongs to the page: [ 71.229639][ T8488] page:0000000061a643f0 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88801c6f6de8 pfn:0x1c6f6 [ 71.241079][ T8488] flags: 0xfff00000000200(slab) [ 71.245913][ T8488] raw: 00fff00000000200 ffffea0000625500 0000000500000005 ffff888010841c80 [ 71.254479][ T8488] raw: ffff88801c6f6de8 000000008066005d 00000001ffffffff 0000000000000000 [ 71.263058][ T8488] page dumped because: kasan: bad access detected [ 71.269462][ T8488] [ 71.271784][ T8488] Memory state around the buggy address: [ 71.277407][ T8488] ffff88801c6f6d00: fc fc fc fc fb fc fc fc fc fb fc fc fc fc fb fc [ 71.285463][ T8488] ffff88801c6f6d80: fc fc fc fb fc fc fc fc fa fc fc fc fc fb fc fc [ 71.293517][ T8488] >ffff88801c6f6e00: fc fc 00 fc fc fc fc fa fc fc fc fc fb fc fc fc [ 71.301566][ T8488] ^ [ 71.305883][ T8488] ffff88801c6f6e80: fc 00 fc fc fc fc fa fc fc fc fc fb fc fc fc fc [ 71.313934][ T8488] ffff88801c6f6f00: 00 fc fc fc fc fa fc fc fc fc fb fc fc fc fc fb [ 71.322008][ T8488] ================================================================== [ 71.330049][ T8488] Disabling lock debugging due to kernel taint [ 71.337813][ T8488] Kernel panic - not syncing: panic_on_warn set ... [ 71.344409][ T8488] CPU: 0 PID: 8488 Comm: syz-executor839 Tainted: G B 5.10.0-rc7-next-20201208-syzkaller #0 [ 71.355767][ T8488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 71.365828][ T8488] Call Trace: [ 71.369102][ T8488] dump_stack+0x107/0x163 [ 71.373429][ T8488] panic+0x343/0x77f [ 71.377301][ T8488] ? __warn_printk+0xf3/0xf3 [ 71.381869][ T8488] ? preempt_schedule_common+0x59/0xc0 [ 71.387305][ T8488] ? squashfs_export_iget+0x274/0x2a0 [ 71.392651][ T8488] ? preempt_schedule_thunk+0x16/0x18 [ 71.398025][ T8488] ? trace_hardirqs_on+0x38/0x1c0 [ 71.403036][ T8488] ? trace_hardirqs_on+0x51/0x1c0 [ 71.408039][ T8488] ? squashfs_export_iget+0x274/0x2a0 [ 71.413403][ T8488] ? squashfs_export_iget+0x274/0x2a0 [ 71.418762][ T8488] end_report+0x58/0x5e [ 71.422902][ T8488] kasan_report.cold+0x67/0xd5 [ 71.427645][ T8488] ? lock_downgrade+0x620/0x6d0 [ 71.432483][ T8488] ? squashfs_export_iget+0x274/0x2a0 [ 71.437837][ T8488] squashfs_export_iget+0x274/0x2a0 [ 71.443016][ T8488] ? squashfs_readdir+0xd70/0xd70 [ 71.448047][ T8488] ? _raw_spin_unlock_irqrestore+0x42/0x50 [ 71.453833][ T8488] ? lockdep_hardirqs_on+0x79/0x100 [ 71.459128][ T8488] ? _raw_spin_unlock_irqrestore+0x2f/0x50 [ 71.464916][ T8488] squashfs_fh_to_dentry+0x78/0xb0 [ 71.470009][ T8488] exportfs_decode_fh_raw+0x127/0x7a0 [ 71.475361][ T8488] ? drop_caches_sysctl_handler+0x110/0x110 [ 71.481233][ T8488] ? squashfs_get_parent+0xa0/0xa0 [ 71.486352][ T8488] ? reconnect_path+0x7e0/0x7e0 [ 71.491182][ T8488] ? lockdep_hardirqs_on_prepare+0x420/0x420 [ 71.497135][ T8488] ? __lock_acquire+0x16c2/0x54b0 [ 71.502134][ T8488] ? find_held_lock+0x2d/0x110 [ 71.506873][ T8488] ? __might_fault+0xd3/0x180 [ 71.511524][ T8488] ? lock_downgrade+0x6d0/0x6d0 [ 71.516351][ T8488] ? drop_caches_sysctl_handler+0x110/0x110 [ 71.522221][ T8488] exportfs_decode_fh+0x38/0x90 [ 71.527068][ T8488] do_handle_open+0x2b6/0x7f0 [ 71.531721][ T8488] ? vfs_dentry_acceptable+0x10/0x10 [ 71.537003][ T8488] ? syscall_enter_from_user_mode+0x1d/0x50 [ 71.542871][ T8488] do_syscall_64+0x2d/0x70 [ 71.547267][ T8488] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 71.553133][ T8488] RIP: 0033:0x4443d9 [ 71.557007][ T8488] Code: 8d d7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 5b d7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 71.576586][ T8488] RSP: 002b:00007ffd937fcd78 EFLAGS: 00000246 ORIG_RAX: 0000000000000130 [ 71.584973][ T8488] RAX: ffffffffffffffda RBX: 00000000004002e0 RCX: 00000000004443d9 [ 71.596324][ T8488] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000005 [ 71.604272][ T8488] RBP: 00000000006cf018 R08: 00007ffd00000015 R09: 00000000004002e0 [ 71.612225][ T8488] R10: 00007ffd937fcc20 R11: 0000000000000246 R12: 0000000000401fc0 [ 71.620189][ T8488] R13: 0000000000402050 R14: 0000000000000000 R15: 0000000000000000 [ 71.628746][ T8488] Kernel Offset: disabled [ 71.633067][ T8488] Rebooting in 86400 seconds..