Warning: Permanently added '10.128.0.87' (ECDSA) to the list of known hosts. executing program [ 36.905793] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 36.928581] ================================================================== [ 36.936213] BUG: KASAN: slab-out-of-bounds in udf_write_aext+0x780/0x860 [ 36.943058] Write of size 4 at addr ffff8880b4fa9070 by task syz-executor156/8126 [ 36.950689] [ 36.952314] CPU: 0 PID: 8126 Comm: syz-executor156 Not tainted 4.19.211-syzkaller #0 [ 36.960173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 36.969506] Call Trace: [ 36.972082] dump_stack+0x1fc/0x2ef [ 36.975692] print_address_description.cold+0x54/0x219 [ 36.980961] kasan_report_error.cold+0x8a/0x1b9 [ 36.985638] ? udf_write_aext+0x780/0x860 [ 36.989835] __asan_report_store_n_noabort+0x8b/0xa0 [ 36.994947] ? udf_get_pblock_spar15+0x131/0x4a0 [ 36.999688] ? udf_write_aext+0x780/0x860 [ 37.003827] udf_write_aext+0x780/0x860 [ 37.007782] udf_add_entry+0xdab/0x2a20 [ 37.011755] ? udf_write_fi+0xf40/0xf40 [ 37.015733] ? udf_new_inode+0xa7b/0xf30 [ 37.019785] udf_mkdir+0x145/0x650 [ 37.023305] ? map_id_up+0x178/0x2f0 [ 37.026997] ? udf_create+0x180/0x180 [ 37.030779] ? putname+0xe1/0x120 [ 37.034312] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 37.039313] ? generic_permission+0x116/0x4d0 [ 37.043790] ? security_inode_permission+0xc5/0xf0 [ 37.048702] ? inode_permission.part.0+0x10c/0x450 [ 37.053636] vfs_mkdir+0x508/0x7a0 [ 37.057181] do_mkdirat+0x262/0x2d0 [ 37.060806] ? __ia32_sys_mknod+0x120/0x120 [ 37.065118] ? trace_hardirqs_off_caller+0x6e/0x210 [ 37.070116] ? do_syscall_64+0x21/0x620 [ 37.074071] do_syscall_64+0xf9/0x620 [ 37.077873] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 37.083043] RIP: 0033:0x7ff635e416b7 [ 37.086809] Code: ff ff ff ff c3 66 0f 1f 44 00 00 48 c7 c0 c0 ff ff ff 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 37.105699] RSP: 002b:00007ffc9ec283d8 EFLAGS: 00000286 ORIG_RAX: 0000000000000053 [ 37.113390] RAX: ffffffffffffffda RBX: 00005555556bc380 RCX: 00007ff635e416b7 [ 37.120641] RDX: 1100000000000000 RSI: 00000000000001ff RDI: 0000000020000100 [ 37.127893] RBP: 00007ffc9ec28470 R08: 0000000000000000 R09: 0000000000000000 [ 37.135412] R10: 0000000000010012 R11: 0000000000000286 R12: 00000000ffffffff [ 37.142661] R13: 0000000020000100 R14: 0000000020000000 R15: 0000000000000000 [ 37.149925] [ 37.151536] Allocated by task 8126: [ 37.155146] __kmalloc+0x15a/0x3c0 [ 37.158668] udf_new_inode+0x220/0xf30 [ 37.162534] udf_mkdir+0xa8/0x650 [ 37.165973] vfs_mkdir+0x508/0x7a0 [ 37.169490] do_mkdirat+0x262/0x2d0 [ 37.173098] do_syscall_64+0xf9/0x620 [ 37.176901] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 37.182952] [ 37.184561] Freed by task 6220: [ 37.187821] kfree+0xcc/0x210 [ 37.190910] skb_release_data+0x6de/0x920 [ 37.195037] consume_skb+0x113/0x3d0 [ 37.198748] skb_free_datagram+0x16/0xf0 [ 37.202793] netlink_recvmsg+0x627/0xea0 [ 37.206833] sock_recvmsg+0xca/0x110 [ 37.210524] ___sys_recvmsg+0x255/0x570 [ 37.214479] __x64_sys_recvmsg+0x12f/0x220 [ 37.218693] do_syscall_64+0xf9/0x620 [ 37.222476] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 37.227639] [ 37.229247] The buggy address belongs to the object at ffff8880b4fa9080 [ 37.229247] which belongs to the cache kmalloc-512 of size 512 [ 37.241883] The buggy address is located 16 bytes to the left of [ 37.241883] 512-byte region [ffff8880b4fa9080, ffff8880b4fa9280) [ 37.254080] The buggy address belongs to the page: [ 37.258991] page:ffffea0002d3ea40 count:1 mapcount:0 mapping:ffff88813bff0940 index:0x0 [ 37.267138] flags: 0xfff00000000100(slab) [ 37.271269] raw: 00fff00000000100 ffffea00027f2fc8 ffffea0002a42cc8 ffff88813bff0940 [ 37.279147] raw: 0000000000000000 ffff8880b4fa9080 0000000100000006 0000000000000000 [ 37.287005] page dumped because: kasan: bad access detected [ 37.292687] [ 37.294292] Memory state around the buggy address: [ 37.299199] ffff8880b4fa8f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 37.306539] ffff8880b4fa8f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 37.313878] >ffff8880b4fa9000: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 37.321215] ^ [ 37.328207] ffff8880b4fa9080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 37.335553] ffff8880b4fa9100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 37.342890] ================================================================== [ 37.350228] Disabling lock debugging due to kernel taint [ 37.372627] Kernel panic - not syncing: panic_on_warn set ... [ 37.372627] [ 37.380027] CPU: 1 PID: 8126 Comm: syz-executor156 Tainted: G B 4.19.211-syzkaller #0 [ 37.389298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 37.398640] Call Trace: [ 37.401303] dump_stack+0x1fc/0x2ef [ 37.404910] panic+0x26a/0x50e [ 37.408082] ? __warn_printk+0xf3/0xf3 [ 37.411949] ? preempt_schedule_common+0x45/0xc0 [ 37.416685] ? ___preempt_schedule+0x16/0x18 [ 37.421073] ? trace_hardirqs_on+0x55/0x210 [ 37.425375] kasan_end_report+0x43/0x49 [ 37.429330] kasan_report_error.cold+0xa7/0x1b9 [ 37.433983] ? udf_write_aext+0x780/0x860 [ 37.438112] __asan_report_store_n_noabort+0x8b/0xa0 [ 37.443192] ? udf_get_pblock_spar15+0x131/0x4a0 [ 37.447926] ? udf_write_aext+0x780/0x860 [ 37.452049] udf_write_aext+0x780/0x860 [ 37.456006] udf_add_entry+0xdab/0x2a20 [ 37.459965] ? udf_write_fi+0xf40/0xf40 [ 37.463920] ? udf_new_inode+0xa7b/0xf30 [ 37.467968] udf_mkdir+0x145/0x650 [ 37.471517] ? map_id_up+0x178/0x2f0 [ 37.475210] ? udf_create+0x180/0x180 [ 37.478991] ? putname+0xe1/0x120 [ 37.482422] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 37.487418] ? generic_permission+0x116/0x4d0 [ 37.491893] ? security_inode_permission+0xc5/0xf0 [ 37.496803] ? inode_permission.part.0+0x10c/0x450 [ 37.501974] vfs_mkdir+0x508/0x7a0 [ 37.505494] do_mkdirat+0x262/0x2d0 [ 37.509109] ? __ia32_sys_mknod+0x120/0x120 [ 37.513410] ? trace_hardirqs_off_caller+0x6e/0x210 [ 37.518406] ? do_syscall_64+0x21/0x620 [ 37.522362] do_syscall_64+0xf9/0x620 [ 37.526158] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 37.531327] RIP: 0033:0x7ff635e416b7 [ 37.535023] Code: ff ff ff ff c3 66 0f 1f 44 00 00 48 c7 c0 c0 ff ff ff 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 37.553904] RSP: 002b:00007ffc9ec283d8 EFLAGS: 00000286 ORIG_RAX: 0000000000000053 [ 37.561591] RAX: ffffffffffffffda RBX: 00005555556bc380 RCX: 00007ff635e416b7 [ 37.568838] RDX: 1100000000000000 RSI: 00000000000001ff RDI: 0000000020000100 [ 37.576090] RBP: 00007ffc9ec28470 R08: 0000000000000000 R09: 0000000000000000 [ 37.583337] R10: 0000000000010012 R11: 0000000000000286 R12: 00000000ffffffff [ 37.590588] R13: 0000000020000100 R14: 0000000020000000 R15: 0000000000000000 [ 37.598034] Kernel Offset: disabled [ 37.601649] Rebooting in 86400 seconds..