Warning: Permanently added '10.128.1.190' (ED25519) to the list of known hosts. executing program [ 36.739125][ T4227] loop0: detected capacity change from 0 to 256 [ 36.744021][ T4227] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 36.747929][ T4227] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 36.750766][ T4227] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 36.752639][ T4227] UDF-fs: Scanning with blocksize 512 failed [ 36.755452][ T4227] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 36.759279][ T4227] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 36.772667][ T4227] ================================================================== [ 36.774642][ T4227] BUG: KASAN: slab-out-of-bounds in udf_write_aext+0x4c0/0x668 [ 36.776536][ T4227] Write of size 4 at addr ffff0000d75d07f0 by task syz-executor717/4227 [ 36.778624][ T4227] [ 36.779204][ T4227] CPU: 0 PID: 4227 Comm: syz-executor717 Not tainted 6.1.63-syzkaller #0 [ 36.781415][ T4227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 36.784011][ T4227] Call trace: [ 36.784863][ T4227] dump_backtrace+0x1c8/0x1f4 [ 36.786090][ T4227] show_stack+0x2c/0x3c [ 36.787129][ T4227] dump_stack_lvl+0x108/0x170 [ 36.788340][ T4227] print_report+0x174/0x4c0 [ 36.789531][ T4227] kasan_report+0xd4/0x130 [ 36.790657][ T4227] __asan_report_store_n_noabort+0x28/0x34 [ 36.792139][ T4227] udf_write_aext+0x4c0/0x668 [ 36.793323][ T4227] udf_add_entry+0x11e0/0x28b0 [ 36.794609][ T4227] udf_mkdir+0x158/0x7e0 [ 36.795669][ T4227] vfs_mkdir+0x334/0x4e4 [ 36.796712][ T4227] do_mkdirat+0x220/0x510 [ 36.797781][ T4227] __arm64_sys_mkdirat+0x90/0xa8 [ 36.799055][ T4227] invoke_syscall+0x98/0x2c0 [ 36.800250][ T4227] el0_svc_common+0x138/0x258 [ 36.801505][ T4227] do_el0_svc+0x64/0x218 [ 36.802631][ T4227] el0_svc+0x58/0x168 [ 36.803636][ T4227] el0t_64_sync_handler+0x84/0xf0 [ 36.804923][ T4227] el0t_64_sync+0x18c/0x190 [ 36.806117][ T4227] [ 36.806708][ T4227] Allocated by task 3832: [ 36.807828][ T4227] kasan_set_track+0x4c/0x80 [ 36.809048][ T4227] kasan_save_alloc_info+0x24/0x30 [ 36.810386][ T4227] __kasan_kmalloc+0xac/0xc4 [ 36.811639][ T4227] kmalloc_trace+0x7c/0x94 [ 36.812790][ T4227] syslog_print+0x10c/0x96c [ 36.814009][ T4227] do_syslog+0x304/0x784 [ 36.815109][ T4227] __arm64_sys_syslog+0x80/0x98 [ 36.816404][ T4227] invoke_syscall+0x98/0x2c0 [ 36.817683][ T4227] el0_svc_common+0x138/0x258 [ 36.818923][ T4227] do_el0_svc+0x64/0x218 [ 36.820055][ T4227] el0_svc+0x58/0x168 [ 36.821090][ T4227] el0t_64_sync_handler+0x84/0xf0 [ 36.822414][ T4227] el0t_64_sync+0x18c/0x190 [ 36.823588][ T4227] [ 36.824217][ T4227] The buggy address belongs to the object at ffff0000d75d0000 [ 36.824217][ T4227] which belongs to the cache kmalloc-1k of size 1024 [ 36.827904][ T4227] The buggy address is located 1008 bytes to the right of [ 36.827904][ T4227] 1024-byte region [ffff0000d75d0000, ffff0000d75d0400) [ 36.831576][ T4227] [ 36.832211][ T4227] The buggy address belongs to the physical page: [ 36.833864][ T4227] page:000000001fc8ac23 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1175d0 [ 36.836499][ T4227] head:000000001fc8ac23 order:3 compound_mapcount:0 compound_pincount:0 [ 36.838671][ T4227] flags: 0x5ffc00000010200(slab|head|node=0|zone=2|lastcpupid=0x7ff) [ 36.840756][ T4227] raw: 05ffc00000010200 0000000000000000 dead000000000001 ffff0000c0002780 [ 36.842966][ T4227] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 36.845208][ T4227] page dumped because: kasan: bad access detected [ 36.846907][ T4227] [ 36.847487][ T4227] Memory state around the buggy address: [ 36.848964][ T4227] ffff0000d75d0680: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 36.851075][ T4227] ffff0000d75d0700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 36.853188][ T4227] >ffff0000d75d0780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 36.855294][ T4227] ^ [ 36.857295][ T4227] ffff0000d75d0800: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 36.859387][ T4227] ffff0000d75d0880: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 36.861501][ T4227] ================================================================== [ 36.863938][ T4227] Disabling lock debugging due to kernel taint