Warning: Permanently added '10.128.0.79' (ED25519) to the list of known hosts. executing program [ 66.117737][ T3544] loop0: detected capacity change from 0 to 2048 [ 66.139930][ T3544] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 160: 0x52 != 0x00 [ 66.153821][ T3544] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 66.173230][ T3544] ================================================================== [ 66.181342][ T3544] BUG: KASAN: slab-out-of-bounds in udf_readdir+0xc5f/0x2240 [ 66.188945][ T3544] Write of size 201 at addr ffff888013a64636 by task syz-executor378/3544 [ 66.197444][ T3544] [ 66.199850][ T3544] CPU: 0 PID: 3544 Comm: syz-executor378 Not tainted 6.1.87-syzkaller #0 [ 66.208285][ T3544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 66.218340][ T3544] Call Trace: [ 66.221626][ T3544] [ 66.224571][ T3544] dump_stack_lvl+0x1e3/0x2cb [ 66.229285][ T3544] ? nf_tcp_handle_invalid+0x642/0x642 [ 66.234757][ T3544] ? panic+0x764/0x764 [ 66.238862][ T3544] ? _printk+0xd1/0x111 [ 66.243027][ T3544] ? __virt_addr_valid+0x17f/0x520 [ 66.248150][ T3544] ? __virt_addr_valid+0x17f/0x520 [ 66.253273][ T3544] print_report+0x15f/0x4f0 [ 66.257784][ T3544] ? __virt_addr_valid+0x17f/0x520 [ 66.262910][ T3544] ? __virt_addr_valid+0x17f/0x520 [ 66.268027][ T3544] ? __virt_addr_valid+0x44a/0x520 [ 66.273152][ T3544] ? __phys_addr+0xb6/0x170 [ 66.277665][ T3544] ? udf_readdir+0xc5f/0x2240 [ 66.282353][ T3544] kasan_report+0x136/0x160 [ 66.286862][ T3544] ? udf_readdir+0xc5f/0x2240 [ 66.291557][ T3544] kasan_check_range+0x27f/0x290 [ 66.296498][ T3544] ? udf_readdir+0xc5f/0x2240 [ 66.301183][ T3544] memcpy+0x3c/0x60 [ 66.304996][ T3544] udf_readdir+0xc5f/0x2240 [ 66.309520][ T3544] ? load_block_bitmap+0x4d0/0x4d0 [ 66.314639][ T3544] ? __might_sleep+0xb0/0xb0 [ 66.319253][ T3544] ? aa_file_perm+0x3e3/0xf60 [ 66.323961][ T3544] ? trace_raw_output_contention_end+0xd0/0xd0 [ 66.330161][ T3544] ? load_block_bitmap+0x4d0/0x4d0 [ 66.335295][ T3544] ? lockdep_hardirqs_on+0x94/0x130 [ 66.340502][ T3544] ? __fdget_pos+0x2ba/0x360 [ 66.345097][ T3544] ? end_current_label_crit_section+0x147/0x170 [ 66.351347][ T3544] ? common_file_perm+0x17d/0x1d0 [ 66.356385][ T3544] ? fsnotify_perm+0x42f/0x590 [ 66.361153][ T3544] iterate_dir+0x224/0x560 [ 66.365609][ T3544] ? load_block_bitmap+0x4d0/0x4d0 [ 66.370755][ T3544] __se_sys_getdents64+0x209/0x4f0 [ 66.375886][ T3544] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 66.381878][ T3544] ? __x64_sys_getdents64+0x80/0x80 [ 66.387095][ T3544] ? filldir+0x6f0/0x6f0 [ 66.391358][ T3544] ? syscall_enter_from_user_mode+0x2e/0x230 [ 66.397357][ T3544] ? lockdep_hardirqs_on+0x94/0x130 [ 66.402580][ T3544] ? syscall_enter_from_user_mode+0x2e/0x230 [ 66.408609][ T3544] do_syscall_64+0x3b/0xb0 [ 66.413046][ T3544] ? clear_bhb_loop+0x45/0xa0 [ 66.417740][ T3544] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 66.423671][ T3544] RIP: 0033:0x7f94dca6dab9 [ 66.428177][ T3544] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 66.447970][ T3544] RSP: 002b:00007fffaba83f68 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 66.456427][ T3544] RAX: ffffffffffffffda RBX: 0030656c69662f2e RCX: 00007f94dca6dab9 [ 66.464412][ T3544] RDX: 0000000000000ff9 RSI: 0000000020001280 RDI: 0000000000000005 [ 66.472395][ T3544] RBP: 00007f94dcae1610 R08: 0000000000000000 R09: 00007fffaba84138 [ 66.480369][ T3544] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 66.488362][ T3544] R13: 00007fffaba84128 R14: 0000000000000001 R15: 0000000000000001 [ 66.496347][ T3544] [ 66.499369][ T3544] [ 66.501693][ T3544] Allocated by task 3544: [ 66.506024][ T3544] kasan_set_track+0x4b/0x70 [ 66.510643][ T3544] __kasan_kmalloc+0x97/0xb0 [ 66.515233][ T3544] udf_readdir+0xb78/0x2240 [ 66.519832][ T3544] iterate_dir+0x224/0x560 [ 66.524247][ T3544] __se_sys_getdents64+0x209/0x4f0 [ 66.529369][ T3544] do_syscall_64+0x3b/0xb0 [ 66.533799][ T3544] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 66.539704][ T3544] [ 66.542031][ T3544] The buggy address belongs to the object at ffff888013a64600 [ 66.542031][ T3544] which belongs to the cache kmalloc-256 of size 256 [ 66.556083][ T3544] The buggy address is located 54 bytes inside of [ 66.556083][ T3544] 256-byte region [ffff888013a64600, ffff888013a64700) [ 66.569281][ T3544] [ 66.571616][ T3544] The buggy address belongs to the physical page: [ 66.578037][ T3544] page:ffffea00004e9900 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x13a64 [ 66.588197][ T3544] head:ffffea00004e9900 order:1 compound_mapcount:0 compound_pincount:0 [ 66.596543][ T3544] flags: 0xfff80000010200(slab|head|node=0|zone=1|lastcpupid=0xfff) [ 66.604530][ T3544] raw: 00fff80000010200 ffffea00004e9a80 dead000000000002 ffff888012441b40 [ 66.613116][ T3544] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 66.621695][ T3544] page dumped because: kasan: bad access detected [ 66.628114][ T3544] page_owner tracks the page as allocated [ 66.633834][ T3544] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 2528782905, free_ts 0 [ 66.653565][ T3544] post_alloc_hook+0x18d/0x1b0 [ 66.658340][ T3544] get_page_from_freelist+0x31a1/0x3320 [ 66.663891][ T3544] __alloc_pages+0x28d/0x770 [ 66.668485][ T3544] alloc_page_interleave+0x22/0x1c0 [ 66.673712][ T3544] alloc_slab_page+0x6a/0x150 [ 66.678484][ T3544] new_slab+0x84/0x2d0 [ 66.682593][ T3544] ___slab_alloc+0xc20/0x1270 [ 66.687273][ T3544] __kmem_cache_alloc_node+0x19f/0x260 [ 66.692751][ T3544] __kmalloc_node_track_caller+0xa0/0x220 [ 66.698482][ T3544] krealloc+0x61/0xf0 [ 66.702482][ T3544] add_sysfs_param+0xca/0x7f0 [ 66.707168][ T3544] kernel_add_sysfs_param+0xb0/0x126 [ 66.712465][ T3544] param_sysfs_builtin+0x16a/0x1e2 [ 66.717662][ T3544] param_sysfs_init+0x66/0x6a [ 66.722350][ T3544] do_one_initcall+0x265/0x8f0 [ 66.727118][ T3544] do_initcall_level+0x157/0x207 [ 66.732064][ T3544] page_owner free stack trace missing [ 66.737428][ T3544] [ 66.739748][ T3544] Memory state around the buggy address: [ 66.745377][ T3544] ffff888013a64580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 66.753437][ T3544] ffff888013a64600: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 66.761498][ T3544] >ffff888013a64680: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 06 [ 66.769561][ T3544] ^ [ 66.777534][ T3544] ffff888013a64700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 66.785600][ T3544] ffff888013a64780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 66.793708][ T3544] ================================================================== [ 66.802459][ T3544] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 66.809678][ T3544] CPU: 1 PID: 3544 Comm: syz-executor378 Not tainted 6.1.87-syzkaller #0 [ 66.818112][ T3544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 66.828171][ T3544] Call Trace: [ 66.831471][ T3544] [ 66.834404][ T3544] dump_stack_lvl+0x1e3/0x2cb [ 66.839182][ T3544] ? nf_tcp_handle_invalid+0x642/0x642 [ 66.844661][ T3544] ? panic+0x764/0x764 [ 66.848733][ T3544] ? preempt_schedule_common+0xa6/0xd0 [ 66.854398][ T3544] ? vscnprintf+0x59/0x80 [ 66.858740][ T3544] panic+0x318/0x764 [ 66.862848][ T3544] ? check_panic_on_warn+0x1d/0xa0 [ 66.867962][ T3544] ? memcpy_page_flushcache+0xfc/0xfc [ 66.873426][ T3544] ? _raw_spin_unlock_irqrestore+0x128/0x130 [ 66.879411][ T3544] ? _raw_spin_unlock+0x40/0x40 [ 66.884268][ T3544] check_panic_on_warn+0x7e/0xa0 [ 66.889235][ T3544] ? udf_readdir+0xc5f/0x2240 [ 66.893939][ T3544] end_report+0x66/0x110 [ 66.898192][ T3544] kasan_report+0x143/0x160 [ 66.902714][ T3544] ? udf_readdir+0xc5f/0x2240 [ 66.907494][ T3544] kasan_check_range+0x27f/0x290 [ 66.912438][ T3544] ? udf_readdir+0xc5f/0x2240 [ 66.917123][ T3544] memcpy+0x3c/0x60 [ 66.920937][ T3544] udf_readdir+0xc5f/0x2240 [ 66.925458][ T3544] ? load_block_bitmap+0x4d0/0x4d0 [ 66.930583][ T3544] ? __might_sleep+0xb0/0xb0 [ 66.935180][ T3544] ? aa_file_perm+0x3e3/0xf60 [ 66.939871][ T3544] ? trace_raw_output_contention_end+0xd0/0xd0 [ 66.946037][ T3544] ? load_block_bitmap+0x4d0/0x4d0 [ 66.951170][ T3544] ? lockdep_hardirqs_on+0x94/0x130 [ 66.956384][ T3544] ? __fdget_pos+0x2ba/0x360 [ 66.961009][ T3544] ? end_current_label_crit_section+0x147/0x170 [ 66.967381][ T3544] ? common_file_perm+0x17d/0x1d0 [ 66.972431][ T3544] ? fsnotify_perm+0x42f/0x590 [ 66.977212][ T3544] iterate_dir+0x224/0x560 [ 66.981637][ T3544] ? load_block_bitmap+0x4d0/0x4d0 [ 66.986770][ T3544] __se_sys_getdents64+0x209/0x4f0 [ 66.991908][ T3544] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 66.997910][ T3544] ? __x64_sys_getdents64+0x80/0x80 [ 67.003113][ T3544] ? filldir+0x6f0/0x6f0 [ 67.007362][ T3544] ? syscall_enter_from_user_mode+0x2e/0x230 [ 67.013353][ T3544] ? lockdep_hardirqs_on+0x94/0x130 [ 67.018558][ T3544] ? syscall_enter_from_user_mode+0x2e/0x230 [ 67.024564][ T3544] do_syscall_64+0x3b/0xb0 [ 67.029011][ T3544] ? clear_bhb_loop+0x45/0xa0 [ 67.033705][ T3544] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 67.039629][ T3544] RIP: 0033:0x7f94dca6dab9 [ 67.044051][ T3544] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 67.063662][ T3544] RSP: 002b:00007fffaba83f68 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 67.072090][ T3544] RAX: ffffffffffffffda RBX: 0030656c69662f2e RCX: 00007f94dca6dab9 [ 67.080062][ T3544] RDX: 0000000000000ff9 RSI: 0000000020001280 RDI: 0000000000000005 [ 67.088032][ T3544] RBP: 00007f94dcae1610 R08: 0000000000000000 R09: 00007fffaba84138 [ 67.096016][ T3544] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 67.103993][ T3544] R13: 00007fffaba84128 R14: 0000000000000001 R15: 0000000000000001 [ 67.111978][ T3544] [ 67.115209][ T3544] Kernel Offset: disabled [ 67.119568][ T3544] Rebooting in 86400 seconds..