Warning: Permanently added '10.128.1.128' (ED25519) to the list of known hosts. executing program [ 61.748920][ T3511] loop0: detected capacity change from 0 to 8192 [ 61.759631][ T3511] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 61.767175][ T3511] UDF-fs: Scanning with blocksize 512 failed [ 61.774016][ T3511] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 61.781531][ T3511] UDF-fs: Scanning with blocksize 1024 failed [ 61.788158][ T3511] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 61.795662][ T3511] UDF-fs: Scanning with blocksize 2048 failed [ 61.804727][ T3511] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 61.829001][ T3511] ================================================================== [ 61.837124][ T3511] BUG: KASAN: slab-out-of-bounds in udf_write_aext+0x5e9/0x7a0 [ 61.844729][ T3511] Write of size 4 at addr ffff88807db51ff0 by task syz-executor163/3511 [ 61.853074][ T3511] [ 61.855411][ T3511] CPU: 1 PID: 3511 Comm: syz-executor163 Not tainted 6.1.45-syzkaller #0 [ 61.863825][ T3511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 61.873880][ T3511] Call Trace: [ 61.877158][ T3511] [ 61.880092][ T3511] dump_stack_lvl+0x1e3/0x2cb [ 61.884792][ T3511] ? irq_work_queue+0xc6/0x150 [ 61.889562][ T3511] ? nf_tcp_handle_invalid+0x642/0x642 [ 61.895039][ T3511] ? panic+0x75d/0x75d [ 61.901022][ T3511] ? _printk+0xd1/0x111 [ 61.905181][ T3511] ? _raw_spin_lock_irqsave+0xac/0x120 [ 61.910648][ T3511] print_report+0x15f/0x4f0 [ 61.915166][ T3511] ? __virt_addr_valid+0x22b/0x2e0 [ 61.920292][ T3511] ? __phys_addr+0xb6/0x170 [ 61.924807][ T3511] ? udf_write_aext+0x5e9/0x7a0 [ 61.929663][ T3511] kasan_report+0x136/0x160 [ 61.934166][ T3511] ? udf_write_aext+0x5e9/0x7a0 [ 61.939031][ T3511] udf_write_aext+0x5e9/0x7a0 [ 61.943718][ T3511] udf_add_entry+0x17b7/0x3350 [ 61.948492][ T3511] ? rcu_is_watching+0x11/0xb0 [ 61.953271][ T3511] ? udf_add_nondir+0x5d0/0x5d0 [ 61.958140][ T3511] ? udf_new_inode+0xaf9/0xf10 [ 61.962923][ T3511] udf_mkdir+0x1a8/0xaa0 [ 61.967180][ T3511] ? udf_symlink+0x1690/0x1690 [ 61.971964][ T3511] ? from_kgid+0x1a3/0x730 [ 61.976401][ T3511] ? make_kgid+0x6f0/0x6f0 [ 61.980840][ T3511] ? inode_permission+0xf7/0x450 [ 61.985790][ T3511] ? bpf_lsm_inode_mkdir+0x5/0x10 [ 61.990836][ T3511] ? security_inode_mkdir+0xb4/0x100 [ 61.996127][ T3511] vfs_mkdir+0x3b6/0x590 [ 62.000382][ T3511] do_mkdirat+0x260/0x520 [ 62.004719][ T3511] ? vfs_mkdir+0x590/0x590 [ 62.009141][ T3511] ? getname_flags+0x1ec/0x4e0 [ 62.013910][ T3511] __x64_sys_mkdirat+0x85/0x90 [ 62.018682][ T3511] do_syscall_64+0x3d/0xb0 [ 62.023108][ T3511] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 62.029009][ T3511] RIP: 0033:0x7fa61cc4e939 [ 62.033429][ T3511] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 62.053055][ T3511] RSP: 002b:00007ffc112e5ac8 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 62.061488][ T3511] RAX: ffffffffffffffda RBX: 0031656c69662f2e RCX: 00007fa61cc4e939 [ 62.069489][ T3511] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 00000000ffffff9c [ 62.077483][ T3511] RBP: 00007fa61ccc3610 R08: 0000000000000000 R09: 0000000000000000 [ 62.085468][ T3511] R10: 00000000000018a0 R11: 0000000000000246 R12: 0000000000000001 [ 62.093455][ T3511] R13: 00007ffc112e5c98 R14: 0000000000000001 R15: 0000000000000001 [ 62.101463][ T3511] [ 62.104577][ T3511] [ 62.107508][ T3511] Allocated by task 3225: [ 62.111838][ T3511] kasan_set_track+0x4b/0x70 [ 62.116463][ T3511] __kasan_kmalloc+0x97/0xb0 [ 62.121070][ T3511] __kmalloc+0xb2/0x230 [ 62.125228][ T3511] tomoyo_realpath_from_path+0xcb/0x5d0 [ 62.130780][ T3511] tomoyo_check_open_permission+0x22c/0x490 [ 62.136718][ T3511] security_file_open+0x5f/0xa0 [ 62.141578][ T3511] do_dentry_open+0x308/0x10f0 [ 62.146358][ T3511] path_openat+0x2644/0x2e60 [ 62.150967][ T3511] do_filp_open+0x230/0x480 [ 62.155491][ T3511] do_sys_openat2+0x13b/0x500 [ 62.160166][ T3511] __x64_sys_openat+0x243/0x290 [ 62.165016][ T3511] do_syscall_64+0x3d/0xb0 [ 62.169445][ T3511] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 62.175379][ T3511] [ 62.177708][ T3511] The buggy address belongs to the object at ffff88807db50000 [ 62.177708][ T3511] which belongs to the cache kmalloc-4k of size 4096 [ 62.191774][ T3511] The buggy address is located 4080 bytes to the right of [ 62.191774][ T3511] 4096-byte region [ffff88807db50000, ffff88807db51000) [ 62.205752][ T3511] [ 62.208078][ T3511] The buggy address belongs to the physical page: [ 62.214484][ T3511] page:ffffea0001f6d400 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7db50 [ 62.224634][ T3511] head:ffffea0001f6d400 order:3 compound_mapcount:0 compound_pincount:0 [ 62.232955][ T3511] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 62.242160][ T3511] raw: 00fff00000010200 ffffea00006bde00 dead000000000003 ffff888012442140 [ 62.252404][ T3511] raw: 0000000000000000 0000000080040004 00000001ffffffff 0000000000000000 [ 62.260985][ T3511] page dumped because: kasan: bad access detected [ 62.267393][ T3511] page_owner tracks the page as allocated [ 62.273104][ T3511] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 3225, tgid 3225 (dhcpcd-run-hook), ts 35513490693, free_ts 35479936442 [ 62.293947][ T3511] post_alloc_hook+0x18d/0x1b0 [ 62.298727][ T3511] get_page_from_freelist+0x32ed/0x3480 [ 62.304278][ T3511] __alloc_pages+0x28d/0x770 [ 62.308872][ T3511] alloc_slab_page+0x6a/0x150 [ 62.313563][ T3511] new_slab+0x84/0x2d0 [ 62.317643][ T3511] ___slab_alloc+0xa71/0x1080 [ 62.322592][ T3511] __kmem_cache_alloc_node+0x19f/0x260 [ 62.328058][ T3511] __kmalloc+0xa1/0x230 [ 62.332212][ T3511] tomoyo_realpath_from_path+0xcb/0x5d0 [ 62.337781][ T3511] tomoyo_check_open_permission+0x22c/0x490 [ 62.343681][ T3511] security_file_open+0x5f/0xa0 [ 62.348540][ T3511] do_dentry_open+0x308/0x10f0 [ 62.353316][ T3511] path_openat+0x2644/0x2e60 [ 62.357915][ T3511] do_filp_open+0x230/0x480 [ 62.362425][ T3511] do_sys_openat2+0x13b/0x500 [ 62.367101][ T3511] __x64_sys_openat+0x243/0x290 [ 62.371957][ T3511] page last free stack trace: [ 62.376626][ T3511] free_unref_page_prepare+0xf63/0x1120 [ 62.382173][ T3511] free_unref_page+0x98/0x570 [ 62.386852][ T3511] __unfreeze_partials+0x1b7/0x210 [ 62.391974][ T3511] put_cpu_partial+0x116/0x180 [ 62.396745][ T3511] qlist_free_all+0x22/0x60 [ 62.401258][ T3511] kasan_quarantine_reduce+0x162/0x180 [ 62.406722][ T3511] __kasan_slab_alloc+0x1f/0x70 [ 62.411571][ T3511] slab_post_alloc_hook+0x50/0x370 [ 62.416688][ T3511] kmem_cache_alloc+0x10c/0x2d0 [ 62.421549][ T3511] vm_area_alloc+0x20/0xe0 [ 62.425968][ T3511] mmap_region+0xcbb/0x1fa0 [ 62.432650][ T3511] do_mmap+0x8c5/0xf60 [ 62.436731][ T3511] vm_mmap_pgoff+0x1ca/0x2d0 [ 62.441324][ T3511] elf_map+0x1a6/0x300 [ 62.445408][ T3511] load_elf_binary+0xf8b/0x2750 [ 62.450274][ T3511] bprm_execve+0x8ff/0x1820 [ 62.454781][ T3511] [ 62.457106][ T3511] Memory state around the buggy address: [ 62.462734][ T3511] ffff88807db51e80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 62.470794][ T3511] ffff88807db51f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 62.478855][ T3511] >ffff88807db51f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 62.486915][ T3511] ^ [ 62.494638][ T3511] ffff88807db52000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 62.502703][ T3511] ffff88807db52080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 62.510760][ T3511] ================================================================== [ 62.524175][ T3511] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 62.531405][ T3511] CPU: 1 PID: 3511 Comm: syz-executor163 Not tainted 6.1.45-syzkaller #0 [ 62.539875][ T3511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 62.549941][ T3511] Call Trace: [ 62.553226][ T3511] [ 62.556168][ T3511] dump_stack_lvl+0x1e3/0x2cb [ 62.560865][ T3511] ? nf_tcp_handle_invalid+0x642/0x642 [ 62.566344][ T3511] ? panic+0x75d/0x75d [ 62.570423][ T3511] ? preempt_schedule_common+0xa6/0xd0 [ 62.575890][ T3511] ? vscnprintf+0x59/0x80 [ 62.580229][ T3511] panic+0x318/0x75d [ 62.584127][ T3511] ? check_panic_on_warn+0x1d/0xa0 [ 62.589252][ T3511] ? memcpy_page_flushcache+0xfc/0xfc [ 62.594637][ T3511] ? _raw_spin_unlock_irqrestore+0x128/0x130 [ 62.600628][ T3511] ? _raw_spin_unlock+0x40/0x40 [ 62.605490][ T3511] ? print_report+0x4a3/0x4f0 [ 62.610184][ T3511] check_panic_on_warn+0x7e/0xa0 [ 62.615130][ T3511] ? udf_write_aext+0x5e9/0x7a0 [ 62.619992][ T3511] end_report+0x66/0x110 [ 62.624242][ T3511] kasan_report+0x143/0x160 [ 62.628755][ T3511] ? udf_write_aext+0x5e9/0x7a0 [ 62.633617][ T3511] udf_write_aext+0x5e9/0x7a0 [ 62.638323][ T3511] udf_add_entry+0x17b7/0x3350 [ 62.643106][ T3511] ? rcu_is_watching+0x11/0xb0 [ 62.647884][ T3511] ? udf_add_nondir+0x5d0/0x5d0 [ 62.652746][ T3511] ? udf_new_inode+0xaf9/0xf10 [ 62.657531][ T3511] udf_mkdir+0x1a8/0xaa0 [ 62.661793][ T3511] ? udf_symlink+0x1690/0x1690 [ 62.666568][ T3511] ? from_kgid+0x1a3/0x730 [ 62.670989][ T3511] ? make_kgid+0x6f0/0x6f0 [ 62.675414][ T3511] ? inode_permission+0xf7/0x450 [ 62.680363][ T3511] ? bpf_lsm_inode_mkdir+0x5/0x10 [ 62.685403][ T3511] ? security_inode_mkdir+0xb4/0x100 [ 62.690700][ T3511] vfs_mkdir+0x3b6/0x590 [ 62.694958][ T3511] do_mkdirat+0x260/0x520 [ 62.699303][ T3511] ? vfs_mkdir+0x590/0x590 [ 62.703725][ T3511] ? getname_flags+0x1ec/0x4e0 [ 62.708498][ T3511] __x64_sys_mkdirat+0x85/0x90 [ 62.713273][ T3511] do_syscall_64+0x3d/0xb0 [ 62.717702][ T3511] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 62.723605][ T3511] RIP: 0033:0x7fa61cc4e939 [ 62.728022][ T3511] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 62.747641][ T3511] RSP: 002b:00007ffc112e5ac8 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 62.756063][ T3511] RAX: ffffffffffffffda RBX: 0031656c69662f2e RCX: 00007fa61cc4e939 [ 62.764040][ T3511] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 00000000ffffff9c [ 62.772017][ T3511] RBP: 00007fa61ccc3610 R08: 0000000000000000 R09: 0000000000000000 [ 62.779993][ T3511] R10: 00000000000018a0 R11: 0000000000000246 R12: 0000000000000001 [ 62.787972][ T3511] R13: 00007ffc112e5c98 R14: 0000000000000001 R15: 0000000000000001 [ 62.795955][ T3511] [ 62.799079][ T3511] Kernel Offset: disabled [ 62.803405][ T3511] Rebooting in 86400 seconds..