[ 5780.262799] loop0: detected capacity change from 0 to 131072 [ 5780.263923] loop0: [ 5780.333023] loop0: [ 5780.635719] ntfs3(loop0): failed to convert "4342" to iso8859-1 [ 5780.641358] ================================================================== [ 5780.644897] BUG: KASAN: slab-out-of-bounds in ntfs_utf16_to_nls+0x24e/0x380 [ntfs3] [ 5780.648576] Read of size 2 at addr ffff88810d484400 by task ls/5057 [ 5780.652662] CPU: 3 UID: 1000 PID: 5057 Comm: ls Not tainted 7.0.0-kasan-kcov #15.15.kasan PREEMPT(lazy) [ 5780.652701] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 5780.652759] Call Trace: [ 5780.652771] [ 5780.652779] dump_stack_lvl+0xa7/0xf0 [ 5780.652825] ? ntfs_utf16_to_nls+0x24e/0x380 [ntfs3] [ 5780.652995] print_report+0x174/0x4f6 [ 5780.653025] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 5780.653058] ? ntfs_printk+0x110/0x160 [ntfs3] [ 5780.653233] ? __virt_addr_valid+0xdb/0x190 [ 5780.653253] ? ntfs_utf16_to_nls+0x24e/0x380 [ntfs3] [ 5780.653421] kasan_report+0xce/0x100 [ 5780.653452] ? ntfs_utf16_to_nls+0x24e/0x380 [ntfs3] [ 5780.653626] ntfs_utf16_to_nls+0x24e/0x380 [ntfs3] [ 5780.653799] ? __pfx_ntfs_utf16_to_nls+0x10/0x10 [ntfs3] [ 5780.653973] ntfs_read_hdr+0x43f/0x670 [ntfs3] [ 5780.654149] ntfs_readdir+0x875/0xab0 [ntfs3] [ 5780.654320] ? __pfx_begin_current_label_crit_section+0xc/0x10 [ 5780.654343] ? __pfx_begin_current_label_crit_section+0x10/0x10 [ 5780.654367] ? __pfx_ntfs_readdir+0x10/0x10 [ntfs3] [ 5780.654535] ? __pfx_down_read_killable+0x10/0x10 [ 5780.654560] ? selinux_file_permission+0x35/0x460 [ 5780.654585] iterate_dir+0x17f/0x570 [ 5780.654607] __x64_sys_getdents64+0x107/0x250 [ 5780.654628] ? __pfx___x64_sys_getdents64+0x10/0x10 [ 5780.654648] ? do_anonymous_page+0x301/0x11c0 [ 5780.654676] ? __pfx_filldir64+0x10/0x10 [ 5780.654697] ? fpregs_assert_state_consistent+0x98/0xe0 [ 5780.654737] do_syscall_64+0x120/0x1640 [ 5780.654759] ? __pfx___handle_mm_fault+0x10/0x10 [ 5780.654788] ? css_rstat_updated+0xfe/0x2a0 [ 5780.654808] ? __pfx_css_rstat_updated+0x10/0x10 [ 5780.654833] ? count_memcg_events+0x1c5/0x260 [ 5780.654867] ? __rcu_read_unlock+0x33/0x50 [ 5780.654885] ? handle_mm_fault+0x296/0x5d0 [ 5780.654914] ? do_user_addr_fault+0x3b0/0xbc0 [ 5780.654939] ? fpregs_assert_state_consistent+0x98/0xe0 [ 5780.654970] ? irqentry_exit+0x7b/0x590 [ 5780.654992] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 5780.655013] RIP: 0033:0x7fa52dcf67d7 [ 5780.655028] Code: 11 00 64 c7 00 16 00 00 00 31 c0 eb 9f e8 61 ec 04 00 90 f3 0f 1e fa b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 8b 15 01 b6 11 00 f7 d8 64 89 02 48 [ 5780.655052] RSP: 002b:00007ffc8752e578 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 5780.655070] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fa52dcf67d7 [ 5780.655084] RDX: 0000000000008000 RSI: 0000560f4e3c1490 RDI: 0000000000000003 [ 5780.655096] RBP: 00007ffc8752e5b0 R08: 0000560f4e3c1464 R09: 0000000000000000 [ 5780.655108] R10: 0000560f25b57676 R11: 0000000000000293 R12: 00007ffc8752e9a0 [ 5780.655121] R13: 00007ffc8752f4c8 R14: 0000560f4e3abc20 R15: 00007fa52df1f6f0 [ 5780.655143] [ 5780.753453] Allocated by task 5047: [ 5780.754798] kasan_save_stack+0x30/0x50 [ 5780.754833] kasan_save_track+0x14/0x30 [ 5780.754862] __kasan_kmalloc+0xaa/0xb0 [ 5780.754889] __kmalloc_noprof+0x1d8/0x590 [ 5780.754920] mi_init+0x4b/0x80 [ntfs3] [ 5780.755097] ntfs_iget5+0x300/0x2430 [ntfs3] [ 5780.755272] ntfs_fill_super+0x2665/0x2a90 [ntfs3] [ 5780.755448] get_tree_bdev_flags+0x2a8/0x3b0 [ 5780.755472] vfs_get_tree+0x51/0x190 [ 5780.755503] path_mount+0x6c3/0x1810 [ 5780.755531] __x64_sys_mount+0x22f/0x280 [ 5780.755559] do_syscall_64+0x120/0x1640 [ 5780.755580] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 5780.756388] The buggy address belongs to the object at ffff88810d484000 which belongs to the cache kmalloc-1k of size 1024 [ 5780.760278] The buggy address is located 0 bytes to the right of allocated 1024-byte region [ffff88810d484000, ffff88810d484400) [ 5780.765114] The buggy address belongs to the physical page: [ 5780.767022] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10d480 [ 5780.767059] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 5780.767079] flags: 0x17ffffc0000040(head|node=0|zone=2|lastcpupid=0x1fffff) [ 5780.767106] page_type: f5(slab) [ 5780.767133] raw: 0017ffffc0000040 ffff888100042dc0 dead000000000100 dead000000000122 [ 5780.767159] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 5780.767183] head: 0017ffffc0000040 ffff888100042dc0 dead000000000100 dead000000000122 [ 5780.767206] head: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 5780.767229] head: 0017ffffc0000003 ffffea0004352001 00000000ffffffff 00000000ffffffff [ 5780.767252] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 5780.767268] page dumped because: kasan: bad access detected [ 5780.768066] Memory state around the buggy address: [ 5780.769781] ffff88810d484300: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 5780.772165] ffff88810d484380: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 5780.774563] >ffff88810d484400: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 5780.776973] ^ [ 5780.778240] ffff88810d484480: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 5780.780628] ffff88810d484500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 5780.783035] ================================================================== [ 5780.786767] Disabling lock debugging due to kernel taint [ 5780.828302] ntfs3(loop0): failed to convert "4342" to iso8859-1