Warning: Permanently added '10.128.1.182' (ED25519) to the list of known hosts. executing program [ 93.772994][ T27] audit: type=1400 audit(1702019530.593:83): avc: denied { execmem } for pid=5058 comm="syz-executor393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 93.811341][ T5059] loop0: detected capacity change from 0 to 2048 [ 93.812368][ T27] audit: type=1400 audit(1702019530.593:84): avc: denied { read write } for pid=5058 comm="syz-executor393" name="loop0" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 93.842942][ T27] audit: type=1400 audit(1702019530.593:85): avc: denied { open } for pid=5058 comm="syz-executor393" path="/dev/loop0" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 93.867879][ T27] audit: type=1400 audit(1702019530.593:86): avc: denied { ioctl } for pid=5058 comm="syz-executor393" path="/dev/loop0" dev="devtmpfs" ino=648 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 93.872097][ T5059] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 93.893957][ T27] audit: type=1400 audit(1702019530.633:87): avc: denied { mounton } for pid=5059 comm="syz-executor393" path="/root/syzkaller.tSBOhB/0/file0" dev="sda1" ino=1929 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 93.942412][ T27] audit: type=1400 audit(1702019530.723:88): avc: denied { mount } for pid=5059 comm="syz-executor393" name="/" dev="loop0" ino=1376 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 93.965841][ T27] audit: type=1400 audit(1702019530.723:89): avc: denied { mounton } for pid=5059 comm="syz-executor393" path="/root/syzkaller.tSBOhB/0/bus" dev="sda1" ino=1930 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=file permissive=1 [ 94.376136][ T27] audit: type=1400 audit(1702019531.193:90): avc: denied { unmount } for pid=5058 comm="syz-executor393" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 94.403239][ T27] audit: type=1400 audit(1702019531.213:91): avc: denied { unmount } for pid=5058 comm="syz-executor393" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 94.404878][ T5058] ================================================================== [ 94.431528][ T5058] BUG: KASAN: use-after-free in udf_close_lvid+0x508/0x5c0 [ 94.438754][ T5058] Write of size 1 at addr ffff8881804ebcd8 by task syz-executor393/5058 [ 94.447061][ T5058] [ 94.449369][ T5058] CPU: 0 PID: 5058 Comm: syz-executor393 Not tainted 6.7.0-rc4-syzkaller-00039-g9ace34a8e446 #0 [ 94.459767][ T5058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 94.469819][ T5058] Call Trace: [ 94.473092][ T5058] [ 94.474590][ T27] audit: type=1400 audit(1702019531.293:92): avc: denied { append } for pid=4493 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 94.476016][ T5058] dump_stack_lvl+0xd9/0x1b0 [ 94.502635][ T5058] print_report+0xc4/0x620 [ 94.507064][ T5058] ? __virt_addr_valid+0x5e/0x2d0 [ 94.512080][ T5058] ? __phys_addr+0xc6/0x140 [ 94.516572][ T5058] kasan_report+0xda/0x110 [ 94.520976][ T5058] ? udf_close_lvid+0x508/0x5c0 [ 94.525820][ T5058] ? udf_close_lvid+0x508/0x5c0 [ 94.530661][ T5058] udf_close_lvid+0x508/0x5c0 [ 94.535330][ T5058] ? fscrypt_destroy_keyring+0x1e/0x3d0 [ 94.540867][ T5058] udf_put_super+0x19c/0x200 [ 94.545446][ T5058] ? udf_close_lvid+0x5c0/0x5c0 [ 94.550370][ T5058] generic_shutdown_super+0x161/0x3d0 [ 94.555739][ T5058] kill_block_super+0x3b/0x90 [ 94.560405][ T5058] deactivate_locked_super+0xbc/0x1a0 [ 94.565771][ T5058] deactivate_super+0xde/0x100 [ 94.570530][ T5058] cleanup_mnt+0x222/0x450 [ 94.574939][ T5058] task_work_run+0x14d/0x240 [ 94.579609][ T5058] ? task_work_cancel+0x30/0x30 [ 94.584474][ T5058] ? __x64_sys_umount+0x128/0x1a0 [ 94.589495][ T5058] exit_to_user_mode_prepare+0x217/0x240 [ 94.595118][ T5058] syscall_exit_to_user_mode+0x1e/0x60 [ 94.600572][ T5058] do_syscall_64+0x4d/0x110 [ 94.605065][ T5058] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 94.610955][ T5058] RIP: 0033:0x7f998bcf48c7 [ 94.615375][ T5058] Code: 07 00 48 83 c4 08 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 [ 94.635054][ T5058] RSP: 002b:00007ffd6a0adef8 EFLAGS: 00000202 ORIG_RAX: 00000000000000a6 [ 94.643451][ T5058] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f998bcf48c7 [ 94.651407][ T5058] RDX: 0000000000000000 RSI: 000000000000000a RDI: 00007ffd6a0adfb0 [ 94.659461][ T5058] RBP: 00007ffd6a0adfb0 R08: 0000000000000000 R09: 0000000000000000 [ 94.667415][ T5058] R10: 00000000ffffffff R11: 0000000000000202 R12: 00007ffd6a0af020 [ 94.675373][ T5058] R13: 0000555556d226c0 R14: 431bde82d7b634db R15: 00007ffd6a0af040 [ 94.683332][ T5058] [ 94.686332][ T5058] [ 94.688634][ T5058] The buggy address belongs to the physical page: [ 94.695025][ T5058] page:ffffea0006013ac0 refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1804eb [ 94.705260][ T5058] flags: 0x57ff00000000000(node=1|zone=2|lastcpupid=0x7ff) [ 94.712434][ T5058] page_type: 0xffffffff() [ 94.716747][ T5058] raw: 057ff00000000000 ffffea0006013ac8 ffffea0006013ac8 0000000000000000 [ 94.725312][ T5058] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 94.733871][ T5058] page dumped because: kasan: bad access detected [ 94.740268][ T5058] page_owner info is not present (never set?) [ 94.746308][ T5058] [ 94.748611][ T5058] Memory state around the buggy address: [ 94.754215][ T5058] ffff8881804ebb80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 94.762253][ T5058] ffff8881804ebc00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 94.770331][ T5058] >ffff8881804ebc80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 94.778383][ T5058] ^ [ 94.785307][ T5058] ffff8881804ebd00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 94.793349][ T5058] ffff8881804ebd80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 94.801402][ T5058] ================================================================== [ 94.810825][ T5058] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 94.818124][ T5058] CPU: 0 PID: 5058 Comm: syz-executor393 Not tainted 6.7.0-rc4-syzkaller-00039-g9ace34a8e446 #0 [ 94.828542][ T5058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 94.838581][ T5058] Call Trace: [ 94.841844][ T5058] [ 94.844758][ T5058] dump_stack_lvl+0xd9/0x1b0 [ 94.849337][ T5058] panic+0x6dc/0x790 [ 94.853219][ T5058] ? panic_smp_self_stop+0xa0/0xa0 [ 94.858313][ T5058] ? preempt_schedule_thunk+0x1a/0x30 [ 94.863678][ T5058] ? preempt_schedule_common+0x45/0xc0 [ 94.869125][ T5058] ? check_panic_on_warn+0x1f/0xb0 [ 94.874221][ T5058] check_panic_on_warn+0xab/0xb0 [ 94.879162][ T5058] end_report+0x108/0x150 [ 94.883476][ T5058] kasan_report+0xea/0x110 [ 94.887874][ T5058] ? udf_close_lvid+0x508/0x5c0 [ 94.892727][ T5058] ? udf_close_lvid+0x508/0x5c0 [ 94.897576][ T5058] udf_close_lvid+0x508/0x5c0 [ 94.902253][ T5058] ? fscrypt_destroy_keyring+0x1e/0x3d0 [ 94.907800][ T5058] udf_put_super+0x19c/0x200 [ 94.912393][ T5058] ? udf_close_lvid+0x5c0/0x5c0 [ 94.917244][ T5058] generic_shutdown_super+0x161/0x3d0 [ 94.922615][ T5058] kill_block_super+0x3b/0x90 [ 94.927294][ T5058] deactivate_locked_super+0xbc/0x1a0 [ 94.932656][ T5058] deactivate_super+0xde/0x100 [ 94.937411][ T5058] cleanup_mnt+0x222/0x450 [ 94.941816][ T5058] task_work_run+0x14d/0x240 [ 94.946414][ T5058] ? task_work_cancel+0x30/0x30 [ 94.951269][ T5058] ? __x64_sys_umount+0x128/0x1a0 [ 94.956293][ T5058] exit_to_user_mode_prepare+0x217/0x240 [ 94.961949][ T5058] syscall_exit_to_user_mode+0x1e/0x60 [ 94.967406][ T5058] do_syscall_64+0x4d/0x110 [ 94.972013][ T5058] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 94.977913][ T5058] RIP: 0033:0x7f998bcf48c7 [ 94.982318][ T5058] Code: 07 00 48 83 c4 08 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 [ 95.001922][ T5058] RSP: 002b:00007ffd6a0adef8 EFLAGS: 00000202 ORIG_RAX: 00000000000000a6 [ 95.010329][ T5058] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f998bcf48c7 [ 95.018285][ T5058] RDX: 0000000000000000 RSI: 000000000000000a RDI: 00007ffd6a0adfb0 [ 95.026240][ T5058] RBP: 00007ffd6a0adfb0 R08: 0000000000000000 R09: 0000000000000000 [ 95.034223][ T5058] R10: 00000000ffffffff R11: 0000000000000202 R12: 00007ffd6a0af020 [ 95.042216][ T5058] R13: 0000555556d226c0 R14: 431bde82d7b634db R15: 00007ffd6a0af040 [ 95.050183][ T5058] [ 95.053376][ T5058] Kernel Offset: disabled [ 95.057685][ T5058] Rebooting in 86400 seconds..