Warning: Permanently added '10.128.0.148' (ECDSA) to the list of known hosts.
executing program
syzkaller login: [ 53.996939][ T3499] loop0: detected capacity change from 0 to 8192
[ 54.007545][ T3499] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found
[ 54.015283][ T3499] UDF-fs: Scanning with blocksize 512 failed
[ 54.022269][ T3499] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found
[ 54.029767][ T3499] UDF-fs: Scanning with blocksize 1024 failed
[ 54.036370][ T3499] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found
[ 54.044113][ T3499] UDF-fs: Scanning with blocksize 2048 failed
[ 54.052353][ T3499] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 54.067790][ T3499] ==================================================================
[ 54.076017][ T3499] BUG: KASAN: slab-out-of-bounds in udf_write_aext+0x5e9/0x7a0
[ 54.083618][ T3499] Write of size 4 at addr ffff88807986bff0 by task syz-executor123/3499
[ 54.091961][ T3499]
[ 54.094307][ T3499] CPU: 1 PID: 3499 Comm: syz-executor123 Not tainted 5.15.118-syzkaller #0
[ 54.102911][ T3499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023
[ 54.112980][ T3499] Call Trace:
[ 54.116413][ T3499]
[ 54.119349][ T3499] dump_stack_lvl+0x1e3/0x2cb
[ 54.124041][ T3499] ? io_uring_drop_tctx_refs+0x19d/0x19d
[ 54.129681][ T3499] ? _printk+0xd1/0x111
[ 54.133835][ T3499] ? __wake_up_klogd+0xcc/0x100
[ 54.138677][ T3499] ? panic+0x84d/0x84d
[ 54.142732][ T3499] ? _raw_spin_lock_irqsave+0xdd/0x120
[ 54.148189][ T3499] print_address_description+0x63/0x3b0
[ 54.153738][ T3499] ? udf_write_aext+0x5e9/0x7a0
[ 54.158581][ T3499] kasan_report+0x16b/0x1c0
[ 54.163081][ T3499] ? udf_write_aext+0x5e9/0x7a0
[ 54.167945][ T3499] udf_write_aext+0x5e9/0x7a0
[ 54.172620][ T3499] udf_add_entry+0x17b7/0x3350
[ 54.177387][ T3499] ? rcu_is_watching+0x11/0xa0
[ 54.182149][ T3499] ? udf_add_nondir+0x5d0/0x5d0
[ 54.186990][ T3499] ? udf_new_inode+0xaf9/0xf10
[ 54.191762][ T3499] udf_mkdir+0x1a8/0xaa0
[ 54.196009][ T3499] ? udf_symlink+0x1690/0x1690
[ 54.200765][ T3499] ? from_kgid+0x1a3/0x730
[ 54.205263][ T3499] ? make_kgid+0x6f0/0x6f0
[ 54.209702][ T3499] ? inode_permission+0xf7/0x450
[ 54.214654][ T3499] ? bpf_lsm_inode_mkdir+0x5/0x10
[ 54.219680][ T3499] ? security_inode_mkdir+0xb4/0x100
[ 54.225060][ T3499] vfs_mkdir+0x419/0x640
[ 54.229303][ T3499] do_mkdirat+0x260/0x520
[ 54.233630][ T3499] ? vfs_mkdir+0x640/0x640
[ 54.238038][ T3499] ? getname_flags+0x1ec/0x4e0
[ 54.242797][ T3499] __x64_sys_mkdirat+0x85/0x90
[ 54.247557][ T3499] do_syscall_64+0x3d/0xb0
[ 54.251977][ T3499] entry_SYSCALL_64_after_hwframe+0x61/0xcb
[ 54.258036][ T3499] RIP: 0033:0x7f20005ccae9
[ 54.266263][ T3499] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 54.285864][ T3499] RSP: 002b:00007ffc1d2a8648 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[ 54.294283][ T3499] RAX: ffffffffffffffda RBX: 0031656c69662f2e RCX: 00007f20005ccae9
[ 54.302258][ T3499] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 00000000ffffff9c
[ 54.310224][ T3499] RBP: 00007f200058c0f0 R08: 0000000000000000 R09: 0000000000000000
[ 54.318187][ T3499] R10: 00000000000018a0 R11: 0000000000000246 R12: 00007f200058c180
[ 54.326163][ T3499] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 54.334136][ T3499]
[ 54.337145][ T3499]
[ 54.339458][ T3499] Allocated by task 3499:
[ 54.343779][ T3499] ____kasan_kmalloc+0xba/0xf0
[ 54.348545][ T3499] kmem_cache_alloc_trace+0x143/0x290
[ 54.355214][ T3499] tomoyo_init_log+0x1bf/0x1fe0
[ 54.360058][ T3499] tomoyo_supervisor+0x3b8/0x12c0
[ 54.365072][ T3499] tomoyo_path_number_perm+0x5ba/0x810
[ 54.370522][ T3499] tomoyo_path_mkdir+0xe3/0x120
[ 54.375360][ T3499] security_path_mkdir+0xdc/0x130
[ 54.380378][ T3499] do_mkdirat+0x19f/0x520
[ 54.384805][ T3499] __x64_sys_mkdirat+0x85/0x90
[ 54.389647][ T3499] do_syscall_64+0x3d/0xb0
[ 54.394052][ T3499] entry_SYSCALL_64_after_hwframe+0x61/0xcb
[ 54.399936][ T3499]
[ 54.402250][ T3499] Freed by task 3499:
[ 54.406212][ T3499] kasan_set_track+0x4b/0x80
[ 54.410805][ T3499] kasan_set_free_info+0x1f/0x40
[ 54.415734][ T3499] ____kasan_slab_free+0xd8/0x120
[ 54.420754][ T3499] slab_free_freelist_hook+0xdd/0x160
[ 54.426115][ T3499] kfree+0xf1/0x270
[ 54.429914][ T3499] tomoyo_init_log+0x1ca0/0x1fe0
[ 54.434839][ T3499] tomoyo_supervisor+0x3b8/0x12c0
[ 54.439853][ T3499] tomoyo_path_number_perm+0x5ba/0x810
[ 54.445474][ T3499] tomoyo_path_mkdir+0xe3/0x120
[ 54.450312][ T3499] security_path_mkdir+0xdc/0x130
[ 54.455325][ T3499] do_mkdirat+0x19f/0x520
[ 54.459669][ T3499] __x64_sys_mkdirat+0x85/0x90
[ 54.464424][ T3499] do_syscall_64+0x3d/0xb0
[ 54.468830][ T3499] entry_SYSCALL_64_after_hwframe+0x61/0xcb
[ 54.474718][ T3499]
[ 54.477034][ T3499] The buggy address belongs to the object at ffff88807986a000
[ 54.477034][ T3499] which belongs to the cache kmalloc-4k of size 4096
[ 54.491073][ T3499] The buggy address is located 4080 bytes to the right of
[ 54.491073][ T3499] 4096-byte region [ffff88807986a000, ffff88807986b000)
[ 54.505033][ T3499] The buggy address belongs to the page:
[ 54.510653][ T3499] page:ffffea0001e61a00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x79868
[ 54.520790][ T3499] head:ffffea0001e61a00 order:3 compound_mapcount:0 compound_pincount:0
[ 54.529106][ T3499] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff)
[ 54.537082][ T3499] raw: 00fff00000010200 0000000000000000 dead000000000122 ffff888011c42140
[ 54.545652][ T3499] raw: 0000000000000000 0000000080040004 00000001ffffffff 0000000000000000
[ 54.554222][ T3499] page dumped because: kasan: bad access detected
[ 54.560624][ T3499] page_owner tracks the page as allocated
[ 54.566322][ T3499] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 3499, ts 54067281352, free_ts 53948223741
[ 54.584634][ T3499] get_page_from_freelist+0x322a/0x33c0
[ 54.590177][ T3499] __alloc_pages+0x272/0x700
[ 54.594767][ T3499] new_slab+0xbb/0x4b0
[ 54.598823][ T3499] ___slab_alloc+0x6f6/0xe10
[ 54.603397][ T3499] __kmalloc+0x1c9/0x300
[ 54.607625][ T3499] tomoyo_realpath_from_path+0xd8/0x5e0
[ 54.613158][ T3499] tomoyo_path_number_perm+0x225/0x810
[ 54.618607][ T3499] tomoyo_path_mkdir+0xe3/0x120
[ 54.623531][ T3499] security_path_mkdir+0xdc/0x130
[ 54.628554][ T3499] do_mkdirat+0x19f/0x520
[ 54.632873][ T3499] __x64_sys_mkdirat+0x85/0x90
[ 54.637626][ T3499] do_syscall_64+0x3d/0xb0
[ 54.642033][ T3499] entry_SYSCALL_64_after_hwframe+0x61/0xcb
[ 54.647913][ T3499] page last free stack trace:
[ 54.652571][ T3499] free_unref_page_prepare+0xc34/0xcf0
[ 54.658117][ T3499] free_unref_page+0x95/0x2d0
[ 54.662781][ T3499] __unfreeze_partials+0x1b7/0x210
[ 54.667879][ T3499] put_cpu_partial+0x132/0x1a0
[ 54.672634][ T3499] ___cache_free+0xe3/0x100
[ 54.677123][ T3499] qlist_free_all+0x36/0x90
[ 54.681613][ T3499] kasan_quarantine_reduce+0x162/0x180
[ 54.687057][ T3499] __kasan_slab_alloc+0x2f/0xc0
[ 54.692071][ T3499] slab_post_alloc_hook+0x53/0x380
[ 54.697171][ T3499] __kmalloc+0x120/0x300
[ 54.701402][ T3499] tomoyo_supervisor+0xe67/0x12c0
[ 54.706418][ T3499] tomoyo_env_perm+0x174/0x210
[ 54.711170][ T3499] tomoyo_find_next_domain+0x137e/0x1cf0
[ 54.716810][ T3499] tomoyo_bprm_check_security+0xdb/0x120
[ 54.722433][ T3499] security_bprm_check+0x5f/0xa0
[ 54.727365][ T3499] bprm_execve+0x84e/0x17c0
[ 54.731857][ T3499]
[ 54.734170][ T3499] Memory state around the buggy address:
[ 54.739785][ T3499] ffff88807986be80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 54.747849][ T3499] ffff88807986bf00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 54.755901][ T3499] >ffff88807986bf80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 54.763942][ T3499] ^
[ 54.771641][ T3499] ffff88807986c000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 54.779691][ T3499] ffff88807986c080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 54.787733][ T3499] ==================================================================
[ 54.795783][ T3499] Disabling lock debugging due to kernel taint
[ 54.803245][ T3499] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 54.810466][ T3499] CPU: 0 PID: 3499 Comm: syz-executor123 Tainted: G B 5.15.118-syzkaller #0
[ 54.820454][ T3499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023
[ 54.830505][ T3499] Call Trace:
[ 54.833778][ T3499]
[ 54.836700][ T3499] dump_stack_lvl+0x1e3/0x2cb
[ 54.841371][ T3499] ? io_uring_drop_tctx_refs+0x19d/0x19d
[ 54.847001][ T3499] ? panic+0x84d/0x84d
[ 54.851060][ T3499] ? rcu_is_watching+0x11/0xa0
[ 54.855813][ T3499] ? preempt_schedule_common+0xa6/0xd0
[ 54.861264][ T3499] panic+0x318/0x84d
[ 54.865149][ T3499] ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 54.871300][ T3499] ? check_panic_on_warn+0x1d/0xa0
[ 54.876401][ T3499] ? fb_is_primary_device+0xcc/0xcc
[ 54.881593][ T3499] ? _raw_spin_unlock_irqrestore+0x128/0x130
[ 54.887561][ T3499] ? _raw_spin_unlock+0x40/0x40
[ 54.892521][ T3499] check_panic_on_warn+0x7e/0xa0
[ 54.897470][ T3499] ? udf_write_aext+0x5e9/0x7a0
[ 54.902320][ T3499] end_report+0x6d/0xf0
[ 54.906469][ T3499] kasan_report+0x18e/0x1c0
[ 54.910966][ T3499] ? udf_write_aext+0x5e9/0x7a0
[ 54.915812][ T3499] udf_write_aext+0x5e9/0x7a0
[ 54.920481][ T3499] udf_add_entry+0x17b7/0x3350
[ 54.925240][ T3499] ? rcu_is_watching+0x11/0xa0
[ 54.929994][ T3499] ? udf_add_nondir+0x5d0/0x5d0
[ 54.934832][ T3499] ? udf_new_inode+0xaf9/0xf10
[ 54.939594][ T3499] udf_mkdir+0x1a8/0xaa0
[ 54.943829][ T3499] ? udf_symlink+0x1690/0x1690
[ 54.948587][ T3499] ? from_kgid+0x1a3/0x730
[ 54.952999][ T3499] ? make_kgid+0x6f0/0x6f0
[ 54.957419][ T3499] ? inode_permission+0xf7/0x450
[ 54.962349][ T3499] ? bpf_lsm_inode_mkdir+0x5/0x10
[ 54.967363][ T3499] ? security_inode_mkdir+0xb4/0x100
[ 54.972644][ T3499] vfs_mkdir+0x419/0x640
[ 54.976882][ T3499] do_mkdirat+0x260/0x520
[ 54.981219][ T3499] ? vfs_mkdir+0x640/0x640
[ 54.985644][ T3499] ? getname_flags+0x1ec/0x4e0
[ 54.990413][ T3499] __x64_sys_mkdirat+0x85/0x90
[ 54.995173][ T3499] do_syscall_64+0x3d/0xb0
[ 54.999587][ T3499] entry_SYSCALL_64_after_hwframe+0x61/0xcb
[ 55.005471][ T3499] RIP: 0033:0x7f20005ccae9
[ 55.009966][ T3499] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 55.029558][ T3499] RSP: 002b:00007ffc1d2a8648 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[ 55.038750][ T3499] RAX: ffffffffffffffda RBX: 0031656c69662f2e RCX: 00007f20005ccae9
[ 55.046740][ T3499] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 00000000ffffff9c
[ 55.054718][ T3499] RBP: 00007f200058c0f0 R08: 0000000000000000 R09: 0000000000000000
[ 55.062704][ T3499] R10: 00000000000018a0 R11: 0000000000000246 R12: 00007f200058c180
[ 55.070677][ T3499] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 55.078655][ T3499]
[ 55.081942][ T3499] Kernel Offset: disabled
[ 55.086271][ T3499] Rebooting in 86400 seconds..