Warning: Permanently added '10.128.1.103' (ED25519) to the list of known hosts. 2023/12/01 17:13:23 ignoring optional flag "sandboxArg"="0" 2023/12/01 17:13:23 parsed 1 programs 2023/12/01 17:13:23 executed programs: 0 [ 43.421520][ T1047] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 46.653071][ T1506] loop0: detected capacity change from 0 to 512 [ 46.674283][ T1506] EXT4-fs (loop0): Ignoring removed bh option [ 46.690950][ T1506] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 46.715278][ T1506] EXT4-fs (loop0): 1 truncate cleaned up [ 46.731313][ T1506] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,resgid=0x000000000000ee00,bh,noload,data_err=ignore,usrjquota=,,errors=continue. Quota mode: none. [ 46.775876][ T1506] ================================================================== [ 46.791966][ T1506] BUG: KASAN: slab-out-of-bounds in ext4_search_dir+0x1df/0x260 [ 46.810471][ T1506] Read of size 1 at addr ffff8881023e43ed by task syz-executor.0/1506 [ 46.831793][ T1506] [ 46.835663][ T1506] CPU: 1 PID: 1506 Comm: syz-executor.0 Not tainted 5.15.140-syzkaller #0 [ 46.859114][ T1506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 46.892713][ T1506] Call Trace: [ 46.901246][ T1506] [ 46.909002][ T1506] dump_stack_lvl+0x41/0x5e [ 46.922264][ T1506] print_address_description.constprop.0.cold+0x6c/0x309 [ 46.941188][ T1506] ? ext4_search_dir+0x1df/0x260 [ 46.955139][ T1506] ? ext4_search_dir+0x1df/0x260 [ 46.967922][ T1506] kasan_report.cold+0x83/0xdf [ 46.974242][ T1506] ? ext4_search_dir+0x1df/0x260 [ 46.985368][ T1506] ext4_search_dir+0x1df/0x260 [ 46.995842][ T1506] ext4_find_inline_entry+0x355/0x440 [ 47.006641][ T1506] ? tomoyo_path_number_perm+0x1d8/0x420 [ 47.018523][ T1506] ? ext4_try_create_inline_dir+0x290/0x290 [ 47.032790][ T1506] ? lock_downgrade+0x4f0/0x4f0 [ 47.047419][ T1506] __ext4_find_entry+0x84a/0xce0 [ 47.063627][ T1506] ? find_held_lock+0x2d/0x110 [ 47.073606][ T1506] ? ext4_dx_find_entry+0x570/0x570 [ 47.086707][ T1506] ? d_alloc_parallel+0x638/0x1010 [ 47.103303][ T1506] ext4_lookup+0x156/0x570 [ 47.123142][ T1506] ? userns_owner+0x30/0x30 [ 47.135067][ T1506] ? ext4_resetent+0x280/0x280 [ 47.149449][ T1506] ? apparmor_capget+0x6b0/0x6b0 [ 47.161649][ T1506] ? tomoyo_path_mknod+0xb5/0x130 [ 47.177060][ T1506] ? from_kgid+0x7f/0xc0 [ 47.189183][ T1506] ? ext4_resetent+0x280/0x280 [ 47.199514][ T1506] lookup_open.isra.0+0x808/0x1680 [ 47.221451][ T1506] ? vfs_tmpfile+0x2d0/0x2d0 [ 47.234260][ T1506] path_openat+0x800/0x24d0 [ 47.245506][ T1506] ? get_slabinfo+0xa1/0xf0 [ 47.256210][ T1506] ? __x64_sys_open+0xfd/0x1a0 [ 47.266814][ T1506] ? do_syscall_64+0x35/0x80 [ 47.275576][ T1506] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 47.298745][ T1506] ? path_lookupat+0x6b0/0x6b0 [ 47.309720][ T1506] ? futex_wait_restart+0x210/0x210 [ 47.320488][ T1506] ? stack_trace_save+0x8c/0xc0 [ 47.335353][ T1506] ? filter_irq_stacks+0x90/0x90 [ 47.350681][ T1506] ? kasan_save_stack+0x1b/0x40 [ 47.362149][ T1506] do_filp_open+0x199/0x3d0 [ 47.372619][ T1506] ? may_open_dev+0xd0/0xd0 [ 47.378600][ T1506] ? do_raw_spin_lock+0x120/0x2b0 [ 47.384954][ T1506] ? rwlock_bug.part.0+0x90/0x90 [ 47.392199][ T1506] ? lock_acquire+0x11a/0x230 [ 47.399281][ T1506] ? _raw_spin_unlock+0x1a/0x20 [ 47.410060][ T1506] ? alloc_fd+0x17c/0x4e0 [ 47.421032][ T1506] ? getname_flags.part.0+0x89/0x440 [ 47.427915][ T1506] do_sys_openat2+0x11e/0x400 [ 47.434813][ T1506] ? build_open_flags+0x490/0x490 [ 47.440930][ T1506] ? lock_downgrade+0x4f0/0x4f0 [ 47.447725][ T1506] __x64_sys_open+0xfd/0x1a0 [ 47.453987][ T1506] ? do_sys_open+0xe0/0xe0 [ 47.461766][ T1506] ? vtime_user_exit+0xde/0x180 [ 47.469165][ T1506] ? trace_user_exit.constprop.0+0x25/0xb0 [ 47.483901][ T1506] do_syscall_64+0x35/0x80 [ 47.492098][ T1506] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 47.501525][ T1506] RIP: 0033:0x7feab27eab29 [ 47.507353][ T1506] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 47.553972][ T1506] RSP: 002b:00007feab236d0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 47.566337][ T1506] RAX: ffffffffffffffda RBX: 00007feab2909f80 RCX: 00007feab27eab29 [ 47.580832][ T1506] RDX: 0000000000000000 RSI: 0000000000141042 RDI: 0000000020000100 [ 47.594844][ T1506] RBP: 00007feab283647a R08: 0000000000000000 R09: 0000000000000000 [ 47.605957][ T1506] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 47.615834][ T1506] R13: 0000000000000006 R14: 00007feab2909f80 R15: 00007ffdf7b333c8 [ 47.626133][ T1506] [ 47.631043][ T1506] [ 47.634160][ T1506] Allocated by task 0: [ 47.639877][ T1506] (stack is not available) [ 47.646688][ T1506] [ 47.650416][ T1506] The buggy address belongs to the object at ffff8881023e3300 [ 47.650416][ T1506] which belongs to the cache sgpool-128 of size 4096 [ 47.670829][ T1506] The buggy address is located 237 bytes to the right of [ 47.670829][ T1506] 4096-byte region [ffff8881023e3300, ffff8881023e4300) [ 47.704301][ T1506] The buggy address belongs to the page: [ 47.720596][ T1506] page:ffffea000408f800 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1023e0 [ 47.744801][ T1506] head:ffffea000408f800 order:3 compound_mapcount:0 compound_pincount:0 [ 47.761705][ T1506] flags: 0x200000000010200(slab|head|node=0|zone=2) [ 47.778356][ T1506] raw: 0200000000010200 0000000000000000 dead000000000122 ffff8881023bc140 [ 47.794771][ T1506] raw: 0000000000000000 0000000080070007 00000001ffffffff 0000000000000000 [ 47.810697][ T1506] page dumped because: kasan: bad access detected [ 47.826859][ T1506] page_owner tracks the page as allocated [ 47.842073][ T1506] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, ts 2299709791, free_ts 0 [ 47.884431][ T1506] get_page_from_freelist+0x166f/0x2910 [ 47.901159][ T1506] __alloc_pages+0x2b3/0x590 [ 47.915219][ T1506] alloc_page_interleave+0xf/0x160 [ 47.926518][ T1506] allocate_slab+0x2eb/0x430 [ 47.935648][ T1506] ___slab_alloc+0xb1c/0xf80 [ 47.948449][ T1506] kmem_cache_alloc+0x2d7/0x310 [ 47.963282][ T1506] mempool_init_node+0x296/0x5b0 [ 47.972965][ T1506] mempool_create+0x6c/0xa0 [ 47.982385][ T1506] sg_pool_init+0xe5/0x1a5 [ 47.989832][ T1506] do_one_initcall+0xb4/0x2e0 [ 48.005530][ T1506] kernel_init_freeable+0x519/0x57b [ 48.021840][ T1506] kernel_init+0x14/0x120 [ 48.033440][ T1506] ret_from_fork+0x1f/0x30 [ 48.043503][ T1506] page_owner free stack trace missing [ 48.065806][ T1506] [ 48.070655][ T1506] Memory state around the buggy address: [ 48.086943][ T1506] ffff8881023e4280: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 48.111462][ T1506] ffff8881023e4300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 48.130415][ T1506] >ffff8881023e4380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 48.153479][ T1506] ^ [ 48.166941][ T1506] ffff8881023e4400: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 48.178099][ T1506] ffff8881023e4480: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 48.191203][ T1506] ================================================================== [ 48.214707][ T1506] Disabling lock debugging due to kernel taint [ 48.228648][ T1506] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 48.250469][ T1506] Kernel Offset: disabled [ 48.263637][ T1506] Rebooting in 86400 seconds..