Warning: Permanently added '10.128.0.132' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 54.210946][ T3541] loop0: detected capacity change from 0 to 2048 [ 54.221640][ T3541] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 54.234601][ T3541] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 54.307214][ T3541] ================================================================== [ 54.315574][ T3541] BUG: KASAN: use-after-free in udf_close_lvid+0x6a4/0x9a0 [ 54.322952][ T3541] Write of size 1 at addr ffff8880b0f56980 by task syz-executor302/3541 [ 54.331603][ T3541] [ 54.333910][ T3541] CPU: 0 PID: 3541 Comm: syz-executor302 Not tainted 6.1.33-syzkaller #0 [ 54.342299][ T3541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 54.352436][ T3541] Call Trace: [ 54.355711][ T3541] [ 54.358635][ T3541] dump_stack_lvl+0x1e3/0x2cb [ 54.363754][ T3541] ? irq_work_queue+0xc6/0x150 [ 54.368515][ T3541] ? nf_tcp_handle_invalid+0x642/0x642 [ 54.374052][ T3541] ? panic+0x75d/0x75d [ 54.378104][ T3541] ? _printk+0xd1/0x111 [ 54.382251][ T3541] ? _raw_spin_lock_irqsave+0xac/0x120 [ 54.387690][ T3541] print_report+0x15f/0x4f0 [ 54.392213][ T3541] ? hook_sb_delete+0x728/0xb30 [ 54.397134][ T3541] ? __virt_addr_valid+0x22b/0x2e0 [ 54.402237][ T3541] ? __phys_addr+0xb6/0x170 [ 54.406822][ T3541] ? udf_close_lvid+0x6a4/0x9a0 [ 54.411658][ T3541] kasan_report+0x136/0x160 [ 54.416238][ T3541] ? udf_close_lvid+0x6a4/0x9a0 [ 54.421167][ T3541] udf_close_lvid+0x6a4/0x9a0 [ 54.425920][ T3541] ? udf_open_lvid+0x5a0/0x5a0 [ 54.430760][ T3541] ? iput+0x3f7/0x980 [ 54.434722][ T3541] ? clear_inode+0x150/0x150 [ 54.439300][ T3541] ? module_put+0x15a/0x350 [ 54.443785][ T3541] udf_put_super+0xc9/0x160 [ 54.448377][ T3541] ? udf_free_in_core_inode+0x20/0x20 [ 54.453733][ T3541] generic_shutdown_super+0x130/0x340 [ 54.459089][ T3541] kill_block_super+0x7a/0xe0 [ 54.463750][ T3541] deactivate_locked_super+0xa0/0x110 [ 54.469103][ T3541] cleanup_mnt+0x490/0x520 [ 54.473499][ T3541] ? lockdep_hardirqs_on+0x94/0x130 [ 54.478684][ T3541] task_work_run+0x246/0x300 [ 54.483258][ T3541] ? kasan_quarantine_put+0xd4/0x220 [ 54.488614][ T3541] ? task_work_cancel+0x2b0/0x2b0 [ 54.493707][ T3541] ? kmem_cache_free+0x292/0x510 [ 54.499667][ T3541] ? do_exit+0x6f6/0x2300 [ 54.503978][ T3541] do_exit+0x6fb/0x2300 [ 54.508116][ T3541] ? do_group_exit+0x1f2/0x2b0 [ 54.512863][ T3541] ? put_task_struct+0x80/0x80 [ 54.517875][ T3541] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 54.523920][ T3541] ? print_irqtrace_events+0x210/0x210 [ 54.529358][ T3541] ? _raw_spin_unlock_irq+0x1f/0x40 [ 54.534536][ T3541] ? lockdep_hardirqs_on+0x94/0x130 [ 54.539804][ T3541] do_group_exit+0x202/0x2b0 [ 54.544465][ T3541] __x64_sys_exit_group+0x3b/0x40 [ 54.549479][ T3541] do_syscall_64+0x3d/0xb0 [ 54.553878][ T3541] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 54.559753][ T3541] RIP: 0033:0x7f1380487249 [ 54.564147][ T3541] Code: Unable to access opcode bytes at 0x7f138048721f. [ 54.571225][ T3541] RSP: 002b:00007ffc815e1588 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 54.579618][ T3541] RAX: ffffffffffffffda RBX: 00007f138051b330 RCX: 00007f1380487249 [ 54.587584][ T3541] RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000001 [ 54.595540][ T3541] RBP: 0000000000000001 R08: ffffffffffffffc0 R09: 0000000000000000 [ 54.603496][ T3541] R10: 0000000000000022 R11: 0000000000000246 R12: 00007f138051b330 [ 54.611451][ T3541] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000001 [ 54.620187][ T3541] [ 54.623205][ T3541] [ 54.625507][ T3541] The buggy address belongs to the physical page: [ 54.631900][ T3541] page:ffffea0002c3d580 refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0xb0f56 [ 54.642028][ T3541] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 54.649124][ T3541] raw: 00fff00000000000 ffffea0002c3d588 ffffea0002c3d588 0000000000000000 [ 54.657699][ T3541] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 54.666271][ T3541] page dumped because: kasan: bad access detected [ 54.672760][ T3541] page_owner info is not present (never set?) [ 54.678800][ T3541] [ 54.681100][ T3541] Memory state around the buggy address: [ 54.686704][ T3541] ffff8880b0f56880: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 54.694947][ T3541] ffff8880b0f56900: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 54.702995][ T3541] >ffff8880b0f56980: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 54.711046][ T3541] ^ [ 54.715099][ T3541] ffff8880b0f56a00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 54.723140][ T3541] ffff8880b0f56a80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 54.731174][ T3541] ================================================================== [ 54.739582][ T3541] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 54.746805][ T3541] CPU: 1 PID: 3541 Comm: syz-executor302 Not tainted 6.1.33-syzkaller #0 [ 54.755228][ T3541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 54.765372][ T3541] Call Trace: [ 54.768644][ T3541] [ 54.771571][ T3541] dump_stack_lvl+0x1e3/0x2cb [ 54.776243][ T3541] ? nf_tcp_handle_invalid+0x642/0x642 [ 54.782477][ T3541] ? panic+0x75d/0x75d [ 54.786533][ T3541] ? preempt_schedule_common+0xa6/0xd0 [ 54.791981][ T3541] ? vscnprintf+0x59/0x80 [ 54.796299][ T3541] panic+0x318/0x75d [ 54.800271][ T3541] ? check_panic_on_warn+0x1d/0xa0 [ 54.805460][ T3541] ? memcpy_page_flushcache+0xfc/0xfc [ 54.810826][ T3541] ? _raw_spin_unlock_irqrestore+0x128/0x130 [ 54.816792][ T3541] ? _raw_spin_unlock+0x40/0x40 [ 54.821628][ T3541] ? print_report+0x4a3/0x4f0 [ 54.826732][ T3541] check_panic_on_warn+0x7e/0xa0 [ 54.831660][ T3541] ? udf_close_lvid+0x6a4/0x9a0 [ 54.836503][ T3541] end_report+0x66/0x110 [ 54.840736][ T3541] kasan_report+0x143/0x160 [ 54.845252][ T3541] ? udf_close_lvid+0x6a4/0x9a0 [ 54.850095][ T3541] udf_close_lvid+0x6a4/0x9a0 [ 54.854763][ T3541] ? udf_open_lvid+0x5a0/0x5a0 [ 54.859516][ T3541] ? iput+0x3f7/0x980 [ 54.863500][ T3541] ? clear_inode+0x150/0x150 [ 54.868079][ T3541] ? module_put+0x15a/0x350 [ 54.872787][ T3541] udf_put_super+0xc9/0x160 [ 54.877364][ T3541] ? udf_free_in_core_inode+0x20/0x20 [ 54.882812][ T3541] generic_shutdown_super+0x130/0x340 [ 54.888176][ T3541] kill_block_super+0x7a/0xe0 [ 54.892855][ T3541] deactivate_locked_super+0xa0/0x110 [ 54.898215][ T3541] cleanup_mnt+0x490/0x520 [ 54.902624][ T3541] ? lockdep_hardirqs_on+0x94/0x130 [ 54.907812][ T3541] task_work_run+0x246/0x300 [ 54.912396][ T3541] ? kasan_quarantine_put+0xd4/0x220 [ 54.917671][ T3541] ? task_work_cancel+0x2b0/0x2b0 [ 54.922706][ T3541] ? kmem_cache_free+0x292/0x510 [ 54.927980][ T3541] ? do_exit+0x6f6/0x2300 [ 54.932300][ T3541] do_exit+0x6fb/0x2300 [ 54.936447][ T3541] ? do_group_exit+0x1f2/0x2b0 [ 54.941203][ T3541] ? put_task_struct+0x80/0x80 [ 54.946043][ T3541] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 54.952196][ T3541] ? print_irqtrace_events+0x210/0x210 [ 54.957651][ T3541] ? _raw_spin_unlock_irq+0x1f/0x40 [ 54.962841][ T3541] ? lockdep_hardirqs_on+0x94/0x130 [ 54.968030][ T3541] do_group_exit+0x202/0x2b0 [ 54.972616][ T3541] __x64_sys_exit_group+0x3b/0x40 [ 54.977981][ T3541] do_syscall_64+0x3d/0xb0 [ 54.982394][ T3541] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 54.988283][ T3541] RIP: 0033:0x7f1380487249 [ 54.992685][ T3541] Code: Unable to access opcode bytes at 0x7f138048721f. [ 54.999686][ T3541] RSP: 002b:00007ffc815e1588 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 55.008259][ T3541] RAX: ffffffffffffffda RBX: 00007f138051b330 RCX: 00007f1380487249 [ 55.016387][ T3541] RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000001 [ 55.024342][ T3541] RBP: 0000000000000001 R08: ffffffffffffffc0 R09: 0000000000000000 [ 55.032387][ T3541] R10: 0000000000000022 R11: 0000000000000246 R12: 00007f138051b330 [ 55.040606][ T3541] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000001 [ 55.048655][ T3541] [ 55.051728][ T3541] Kernel Offset: disabled [ 55.056042][ T3541] Rebooting in 86400 seconds..