Warning: Permanently added '10.128.1.153' (ED25519) to the list of known hosts. executing program [ 85.270171][ T5024] memfd_create() without MFD_EXEC nor MFD_NOEXEC_SEAL, pid=5024 'syz-executor337' [ 85.303299][ T5024] loop0: detected capacity change from 0 to 2048 [ 85.318875][ T5024] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 85.862011][ T5023] ================================================================== [ 85.871222][ T5023] BUG: KASAN: use-after-free in udf_close_lvid+0x508/0x5c0 [ 85.878455][ T5023] Write of size 1 at addr ffff88815febc068 by task syz-executor337/5023 [ 85.886808][ T5023] [ 85.889166][ T5023] CPU: 0 PID: 5023 Comm: syz-executor337 Not tainted 6.5.0-rc1-next-20230714-syzkaller #0 [ 85.899072][ T5023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 85.909146][ T5023] Call Trace: [ 85.912438][ T5023] [ 85.915384][ T5023] dump_stack_lvl+0xd9/0x1b0 [ 85.920021][ T5023] print_report+0xc4/0x620 [ 85.924480][ T5023] ? __virt_addr_valid+0x5e/0x2d0 [ 85.929618][ T5023] ? __phys_addr+0xc6/0x140 [ 85.934167][ T5023] kasan_report+0xda/0x110 [ 85.938642][ T5023] ? udf_close_lvid+0x508/0x5c0 [ 85.943524][ T5023] ? udf_close_lvid+0x508/0x5c0 [ 85.948419][ T5023] udf_close_lvid+0x508/0x5c0 [ 85.953128][ T5023] udf_put_super+0x19c/0x200 [ 85.957741][ T5023] ? udf_close_lvid+0x5c0/0x5c0 [ 85.962631][ T5023] generic_shutdown_super+0x158/0x480 [ 85.968049][ T5023] kill_block_super+0x64/0xb0 [ 85.972766][ T5023] deactivate_locked_super+0x9a/0x170 [ 85.978190][ T5023] deactivate_super+0xde/0x100 [ 85.983072][ T5023] cleanup_mnt+0x222/0x3d0 [ 85.987520][ T5023] task_work_run+0x14d/0x240 [ 85.992152][ T5023] ? task_work_cancel+0x30/0x30 [ 85.997051][ T5023] ? __x64_sys_umount+0x128/0x1a0 [ 86.002117][ T5023] exit_to_user_mode_prepare+0x210/0x240 [ 86.007781][ T5023] syscall_exit_to_user_mode+0x1d/0x50 [ 86.013295][ T5023] do_syscall_64+0x44/0xb0 [ 86.017741][ T5023] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 86.023667][ T5023] RIP: 0033:0x7fadd3b3d6c7 [ 86.028102][ T5023] Code: 08 00 48 83 c4 08 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 [ 86.047820][ T5023] RSP: 002b:00007ffc262d9ad8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a6 [ 86.056293][ T5023] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fadd3b3d6c7 [ 86.064368][ T5023] RDX: 0000000000000000 RSI: 000000000000000a RDI: 00007ffc262d9b90 [ 86.072356][ T5023] RBP: 00007ffc262d9b90 R08: 0000000000000000 R09: 0000000000000000 [ 86.080348][ T5023] R10: 00000000ffffffff R11: 0000000000000206 R12: 00007ffc262dac00 [ 86.088339][ T5023] R13: 0000555555f416c0 R14: 431bde82d7b634db R15: 00007ffc262dac20 [ 86.096341][ T5023] [ 86.099371][ T5023] [ 86.101702][ T5023] The buggy address belongs to the physical page: [ 86.108121][ T5023] page:ffffea00057faf00 refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x15febc [ 86.118418][ T5023] flags: 0x57ff00000000000(node=1|zone=2|lastcpupid=0x7ff) [ 86.125649][ T5023] page_type: 0xffffffff() [ 86.130005][ T5023] raw: 057ff00000000000 ffffea00057faf08 ffffea00057faf08 0000000000000000 [ 86.138621][ T5023] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 86.147238][ T5023] page dumped because: kasan: bad access detected [ 86.153657][ T5023] page_owner info is not present (never set?) [ 86.159724][ T5023] [ 86.162059][ T5023] Memory state around the buggy address: [ 86.167701][ T5023] ffff88815febbf00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 86.175778][ T5023] ffff88815febbf80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 86.183855][ T5023] >ffff88815febc000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 86.191944][ T5023] ^ [ 86.199426][ T5023] ffff88815febc080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 86.207597][ T5023] ffff88815febc100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 86.215868][ T5023] ================================================================== [ 86.224646][ T5023] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 86.231875][ T5023] CPU: 0 PID: 5023 Comm: syz-executor337 Not tainted 6.5.0-rc1-next-20230714-syzkaller #0 [ 86.242831][ T5023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 86.252933][ T5023] Call Trace: [ 86.256234][ T5023] [ 86.259179][ T5023] dump_stack_lvl+0xd9/0x1b0 [ 86.263809][ T5023] panic+0x6a4/0x750 [ 86.267818][ T5023] ? panic_smp_self_stop+0xa0/0xa0 [ 86.272979][ T5023] ? preempt_schedule_thunk+0x1a/0x30 [ 86.278400][ T5023] ? preempt_schedule_common+0x45/0xc0 [ 86.283899][ T5023] check_panic_on_warn+0xab/0xb0 [ 86.288890][ T5023] end_report+0x108/0x150 [ 86.293526][ T5023] kasan_report+0xea/0x110 [ 86.297996][ T5023] ? udf_close_lvid+0x508/0x5c0 [ 86.302888][ T5023] ? udf_close_lvid+0x508/0x5c0 [ 86.307855][ T5023] udf_close_lvid+0x508/0x5c0 [ 86.312564][ T5023] udf_put_super+0x19c/0x200 [ 86.317178][ T5023] ? udf_close_lvid+0x5c0/0x5c0 [ 86.322056][ T5023] generic_shutdown_super+0x158/0x480 [ 86.327458][ T5023] kill_block_super+0x64/0xb0 [ 86.332157][ T5023] deactivate_locked_super+0x9a/0x170 [ 86.337563][ T5023] deactivate_super+0xde/0x100 [ 86.342361][ T5023] cleanup_mnt+0x222/0x3d0 [ 86.346814][ T5023] task_work_run+0x14d/0x240 [ 86.351446][ T5023] ? task_work_cancel+0x30/0x30 [ 86.356338][ T5023] ? __x64_sys_umount+0x128/0x1a0 [ 86.361394][ T5023] exit_to_user_mode_prepare+0x210/0x240 [ 86.367074][ T5023] syscall_exit_to_user_mode+0x1d/0x50 [ 86.372577][ T5023] do_syscall_64+0x44/0xb0 [ 86.377114][ T5023] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 86.383037][ T5023] RIP: 0033:0x7fadd3b3d6c7 [ 86.387487][ T5023] Code: 08 00 48 83 c4 08 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 [ 86.407119][ T5023] RSP: 002b:00007ffc262d9ad8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a6 [ 86.415554][ T5023] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fadd3b3d6c7 [ 86.423554][ T5023] RDX: 0000000000000000 RSI: 000000000000000a RDI: 00007ffc262d9b90 [ 86.431564][ T5023] RBP: 00007ffc262d9b90 R08: 0000000000000000 R09: 0000000000000000 [ 86.439553][ T5023] R10: 00000000ffffffff R11: 0000000000000206 R12: 00007ffc262dac00 [ 86.447548][ T5023] R13: 0000555555f416c0 R14: 431bde82d7b634db R15: 00007ffc262dac20 [ 86.455569][ T5023] [ 86.458888][ T5023] Kernel Offset: disabled [ 86.463334][ T5023] Rebooting in 86400 seconds..