Warning: Permanently added '10.128.1.100' (ED25519) to the list of known hosts. 2024/02/01 21:56:26 ignoring optional flag "sandboxArg"="0" 2024/02/01 21:56:26 parsed 1 programs 2024/02/01 21:56:26 executed programs: 0 [ 57.543766][ T1996] loop0: detected capacity change from 0 to 4096 [ 57.563105][ T1996] ntfs: volume version 3.1. [ 57.569736][ T1996] ================================================================== [ 57.578291][ T1996] BUG: KASAN: use-after-free in ntfs_lookup_inode_by_name+0xfd8/0x2e80 [ 57.586765][ T1996] Read of size 8 at addr ffff88806b06f55a by task syz-executor.0/1996 [ 57.594979][ T1996] [ 57.597369][ T1996] CPU: 0 PID: 1996 Comm: syz-executor.0 Not tainted 6.1.76-syzkaller #0 [ 57.606552][ T1996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 57.617187][ T1996] Call Trace: [ 57.620802][ T1996] [ 57.623716][ T1996] dump_stack_lvl+0xf4/0x251 [ 57.628297][ T1996] ? nf_tcp_handle_invalid+0x2f3/0x2f3 [ 57.634161][ T1996] ? panic+0x3f7/0x3f7 [ 57.638580][ T1996] ? lock_acquire+0xbe/0x390 [ 57.643404][ T1996] ? read_lock_is_recursive+0x10/0x10 [ 57.648921][ T1996] ? __virt_addr_valid+0x137/0x210 [ 57.654100][ T1996] ? __virt_addr_valid+0x1d6/0x210 [ 57.659359][ T1996] print_report+0x15f/0x4f0 [ 57.663935][ T1996] ? __virt_addr_valid+0x137/0x210 [ 57.669119][ T1996] ? __virt_addr_valid+0x1d6/0x210 [ 57.674549][ T1996] ? ntfs_lookup_inode_by_name+0xfd8/0x2e80 [ 57.680721][ T1996] kasan_report+0x136/0x160 [ 57.685201][ T1996] ? ntfs_lookup_inode_by_name+0xfd8/0x2e80 [ 57.691329][ T1996] ntfs_lookup_inode_by_name+0xfd8/0x2e80 [ 57.697107][ T1996] ? rcu_is_watching+0x1b/0x90 [ 57.701842][ T1996] ? lock_acquire+0xbe/0x390 [ 57.706487][ T1996] ? __down_write_common+0x12a/0x1e0 [ 57.711832][ T1996] check_windows_hibernation_status+0xfc/0x560 [ 57.718131][ T1996] ? ntfs_test_inode+0x230/0x230 [ 57.723128][ T1996] ? load_and_check_logfile+0xc0/0xc0 [ 57.728469][ T1996] ? load_system_files+0x34e8/0x4880 [ 57.733814][ T1996] ? rcu_is_watching+0x1b/0x90 [ 57.738557][ T1996] load_system_files+0x35a0/0x4880 [ 57.743728][ T1996] ? ntfs_setup_allocators+0x250/0x250 [ 57.749445][ T1996] ? generate_default_upcase+0x66/0x8e0 [ 57.755054][ T1996] ? vmalloc+0x70/0x80 [ 57.759100][ T1996] ntfs_fill_super+0x1239/0x23c0 [ 57.764183][ T1996] mount_bdev+0x26b/0x340 [ 57.768492][ T1996] ? ntfs_mount+0x10/0x10 [ 57.772791][ T1996] legacy_get_tree+0xe5/0x170 [ 57.777443][ T1996] ? ntfs_rl_punch_nolock+0x1130/0x1130 [ 57.782958][ T1996] vfs_get_tree+0x7a/0x170 [ 57.787346][ T1996] do_new_mount+0x21a/0x910 [ 57.791825][ T1996] ? do_move_mount_old+0x120/0x120 [ 57.797084][ T1996] __se_sys_mount+0x23e/0x2d0 [ 57.801730][ T1996] ? __x64_sys_mount+0xc0/0xc0 [ 57.806467][ T1996] ? fpregs_assert_state_consistent+0x43/0x50 [ 57.812596][ T1996] do_syscall_64+0x3d/0x80 [ 57.817178][ T1996] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 57.824111][ T1996] RIP: 0033:0x7fcc0c87e05a [ 57.828589][ T1996] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 09 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 57.848525][ T1996] RSP: 002b:00007fcc0d54bee8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 57.857623][ T1996] RAX: ffffffffffffffda RBX: 00007fcc0d54bf80 RCX: 00007fcc0c87e05a [ 57.865612][ T1996] RDX: 000000002001ec80 RSI: 000000002001ecc0 RDI: 00007fcc0d54bf40 [ 57.874256][ T1996] RBP: 000000002001ec80 R08: 00007fcc0d54bf80 R09: 0000000000000000 [ 57.882743][ T1996] R10: 0000000000000000 R11: 0000000000000246 R12: 000000002001ecc0 [ 57.890867][ T1996] R13: 00007fcc0d54bf40 R14: 000000000001ec6a R15: 000000002001ed00 [ 57.899042][ T1996] [ 57.902311][ T1996] [ 57.905072][ T1996] The buggy address belongs to the physical page: [ 57.911462][ T1996] page:ffffea0001ac1bc0 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1 pfn:0x6b06f [ 57.921673][ T1996] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 57.928931][ T1996] raw: 00fff00000000000 ffffea0001ac1c08 ffffea0001ac1b88 0000000000000000 [ 57.937917][ T1996] raw: 0000000000000001 0000000000000000 00000000ffffffff 0000000000000000 [ 57.947306][ T1996] page dumped because: kasan: bad access detected [ 57.953887][ T1996] page_owner tracks the page as freed [ 57.959490][ T1996] page last allocated via order 0, migratetype Movable, gfp_mask 0x8(__GFP_MOVABLE), pid 1, tgid 1 (swapper/0), ts 6627918557, free_ts 7626118807 [ 57.974397][ T1996] post_alloc_hook+0x286/0x2b0 [ 57.979226][ T1996] split_map_pages+0x22a/0x480 [ 57.984050][ T1996] isolate_freepages_range+0x2a4/0x460 [ 57.989663][ T1996] alloc_contig_range+0x60a/0x930 [ 57.994755][ T1996] alloc_contig_pages+0x3ef/0x4f0 [ 57.999843][ T1996] debug_vm_pgtable_alloc_huge_page+0x7d/0xd7 [ 58.005974][ T1996] init_args+0x8a5/0xaa9 [ 58.010281][ T1996] debug_vm_pgtable+0xa5/0x5ad [ 58.015189][ T1996] do_one_initcall+0x19f/0x4c0 [ 58.021139][ T1996] do_initcall_level+0x11e/0x1cd [ 58.026068][ T1996] do_initcalls+0x46/0x74 [ 58.030373][ T1996] kernel_init_freeable+0x375/0x4e4 [ 58.035820][ T1996] kernel_init+0x14/0x190 [ 58.040903][ T1996] ret_from_fork+0x1f/0x30 [ 58.045393][ T1996] page last free stack trace: [ 58.050062][ T1996] free_unref_page_prepare+0xd4b/0xee0 [ 58.055513][ T1996] free_unref_page+0x33/0x390 [ 58.060311][ T1996] free_contig_range+0x8d/0x130 [ 58.065155][ T1996] destroy_args+0xde/0x79f [ 58.069576][ T1996] debug_vm_pgtable+0x373/0x5ad [ 58.075452][ T1996] do_one_initcall+0x19f/0x4c0 [ 58.080978][ T1996] do_initcall_level+0x11e/0x1cd [ 58.086513][ T1996] do_initcalls+0x46/0x74 [ 58.091289][ T1996] kernel_init_freeable+0x375/0x4e4 [ 58.096567][ T1996] kernel_init+0x14/0x190 [ 58.100877][ T1996] ret_from_fork+0x1f/0x30 [ 58.105270][ T1996] [ 58.107596][ T1996] Memory state around the buggy address: [ 58.113568][ T1996] ffff88806b06f400: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 58.121621][ T1996] ffff88806b06f480: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 58.129746][ T1996] >ffff88806b06f500: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 58.138038][ T1996] ^ [ 58.145377][ T1996] ffff88806b06f580: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 58.154019][ T1996] ffff88806b06f600: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 58.162288][ T1996] ================================================================== [ 58.170675][ T1996] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 58.178848][ T1996] Kernel Offset: disabled [ 58.183237][ T1996] Rebooting in 86400 seconds..