Warning: Permanently added '10.128.1.63' (ED25519) to the list of known hosts. [ 65.488455][ T1152] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.501939][ T1152] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.512693][ T3293] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 65.526159][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 executing program [ 65.534030][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.542513][ T3293] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 65.722129][ T3546] loop0: detected capacity change from 0 to 32768 [ 65.734012][ T3546] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz-executor424 (3546) [ 65.757688][ T3546] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 65.768126][ T3546] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 65.777375][ T3546] BTRFS info (device loop0): disabling tree log [ 65.784054][ T3546] BTRFS info (device loop0): turning on flush-on-commit [ 65.791155][ T3546] BTRFS info (device loop0): turning off barriers [ 65.797784][ T3546] BTRFS info (device loop0): force clearing of disk cache [ 65.805161][ T3546] BTRFS info (device loop0): turning on barriers [ 65.811528][ T3546] BTRFS info (device loop0): using free space tree [ 65.839550][ T3546] BTRFS info (device loop0): enabling ssd optimizations [ 65.849301][ T3546] BTRFS info (device loop0): rebuilding free space tree [ 65.882253][ T3546] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 66.073623][ T3546] loop0: detected capacity change from 0 to 2048 [ 66.084737][ T3546] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=17146, location=17146 [ 66.099028][ T3546] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 66.237352][ T3546] ================================================================== [ 66.245473][ T3546] BUG: KASAN: use-after-free in udf_close_lvid+0x6a4/0x9a0 [ 66.252752][ T3546] Write of size 1 at addr ffff8881561b3dc0 by task syz-executor424/3546 [ 66.261079][ T3546] [ 66.263412][ T3546] CPU: 1 PID: 3546 Comm: syz-executor424 Not tainted 6.1.85-syzkaller #0 [ 66.271850][ T3546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 66.281921][ T3546] Call Trace: [ 66.285199][ T3546] [ 66.288129][ T3546] dump_stack_lvl+0x1e3/0x2cb [ 66.292830][ T3546] ? nf_tcp_handle_invalid+0x642/0x642 [ 66.298309][ T3546] ? panic+0x75d/0x75d [ 66.302395][ T3546] ? _printk+0xd1/0x111 [ 66.306550][ T3546] ? __virt_addr_valid+0x17f/0x520 [ 66.311684][ T3546] ? __virt_addr_valid+0x17f/0x520 [ 66.316799][ T3546] print_report+0x15f/0x4f0 [ 66.321314][ T3546] ? __virt_addr_valid+0x17f/0x520 [ 66.326691][ T3546] ? __virt_addr_valid+0x17f/0x520 [ 66.331804][ T3546] ? __virt_addr_valid+0x44a/0x520 [ 66.336916][ T3546] ? __phys_addr+0xb6/0x170 [ 66.341421][ T3546] ? udf_close_lvid+0x6a4/0x9a0 [ 66.346275][ T3546] kasan_report+0x136/0x160 [ 66.350776][ T3546] ? udf_close_lvid+0x6a4/0x9a0 [ 66.355637][ T3546] udf_close_lvid+0x6a4/0x9a0 [ 66.360337][ T3546] ? udf_open_lvid+0x5a0/0x5a0 [ 66.365131][ T3546] ? iput+0x3f7/0x980 [ 66.369119][ T3546] ? clear_inode+0x150/0x150 [ 66.373738][ T3546] ? module_put+0x15a/0x350 [ 66.378325][ T3546] udf_put_super+0xc9/0x160 [ 66.382876][ T3546] ? udf_free_in_core_inode+0x20/0x20 [ 66.388273][ T3546] generic_shutdown_super+0x130/0x340 [ 66.393679][ T3546] kill_block_super+0x7a/0xe0 [ 66.398482][ T3546] deactivate_locked_super+0xa0/0x110 [ 66.403881][ T3546] cleanup_mnt+0x490/0x520 [ 66.408305][ T3546] ? lockdep_hardirqs_on+0x94/0x130 [ 66.413503][ T3546] task_work_run+0x246/0x300 [ 66.418116][ T3546] ? kasan_quarantine_put+0xd4/0x220 [ 66.423420][ T3546] ? task_work_cancel+0x2b0/0x2b0 [ 66.428486][ T3546] ? kmem_cache_free+0x292/0x510 [ 66.433426][ T3546] ? do_exit+0xa6e/0x26a0 [ 66.437760][ T3546] do_exit+0xa73/0x26a0 [ 66.441949][ T3546] ? put_task_struct+0x80/0x80 [ 66.446719][ T3546] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 66.452720][ T3546] ? print_irqtrace_events+0x210/0x210 [ 66.458377][ T3546] ? _raw_spin_unlock_irq+0x1f/0x40 [ 66.463575][ T3546] ? lockdep_hardirqs_on+0x94/0x130 [ 66.468798][ T3546] do_group_exit+0x202/0x2b0 [ 66.473496][ T3546] __x64_sys_exit_group+0x3b/0x40 [ 66.478714][ T3546] do_syscall_64+0x3b/0xb0 [ 66.483134][ T3546] ? clear_bhb_loop+0x45/0xa0 [ 66.487813][ T3546] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 66.493710][ T3546] RIP: 0033:0x7fe0357bca79 [ 66.498132][ T3546] Code: Unable to access opcode bytes at 0x7fe0357bca4f. [ 66.505150][ T3546] RSP: 002b:00007ffffa5fe8c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 66.513598][ T3546] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007fe0357bca79 [ 66.521601][ T3546] RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000001 [ 66.529786][ T3546] RBP: 00007fe03583a390 R08: ffffffffffffffb8 R09: 000000000000000d [ 66.537804][ T3546] R10: 00000000200001c0 R11: 0000000000000246 R12: 00007fe03583a390 [ 66.545777][ T3546] R13: 0000000000000000 R14: 00007fe03583c160 R15: 00007fe035783170 [ 66.553755][ T3546] [ 66.556772][ T3546] [ 66.559090][ T3546] The buggy address belongs to the physical page: [ 66.565491][ T3546] page:ffffea0005586cc0 refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1561b3 [ 66.575727][ T3546] flags: 0x57ff80000000000(node=1|zone=2|lastcpupid=0xfff) [ 66.582926][ T3546] raw: 057ff80000000000 ffffea0005586cc8 ffffea0005586cc8 0000000000000000 [ 66.591509][ T3546] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 66.600097][ T3546] page dumped because: kasan: bad access detected [ 66.606526][ T3546] page_owner info is not present (never set?) [ 66.612598][ T3546] [ 66.614918][ T3546] Memory state around the buggy address: [ 66.620537][ T3546] ffff8881561b3c80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 66.628595][ T3546] ffff8881561b3d00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 66.636651][ T3546] >ffff8881561b3d80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 66.644705][ T3546] ^ [ 66.650953][ T3546] ffff8881561b3e00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 66.659024][ T3546] ffff8881561b3e80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 66.667099][ T3546] ================================================================== [ 66.675428][ T3546] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 66.682652][ T3546] CPU: 0 PID: 3546 Comm: syz-executor424 Not tainted 6.1.85-syzkaller #0 [ 66.691087][ T3546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 66.701172][ T3546] Call Trace: [ 66.704460][ T3546] [ 66.707393][ T3546] dump_stack_lvl+0x1e3/0x2cb [ 66.712106][ T3546] ? nf_tcp_handle_invalid+0x642/0x642 [ 66.717591][ T3546] ? panic+0x75d/0x75d [ 66.721673][ T3546] ? preempt_schedule_common+0xa6/0xd0 [ 66.727155][ T3546] ? vscnprintf+0x59/0x80 [ 66.731498][ T3546] panic+0x318/0x75d [ 66.735401][ T3546] ? check_panic_on_warn+0x1d/0xa0 [ 66.740542][ T3546] ? memcpy_page_flushcache+0xfc/0xfc [ 66.745932][ T3546] ? _raw_spin_unlock_irqrestore+0x128/0x130 [ 66.751929][ T3546] ? _raw_spin_unlock+0x40/0x40 [ 66.756810][ T3546] ? print_report+0x4a3/0x4f0 [ 66.761583][ T3546] check_panic_on_warn+0x7e/0xa0 [ 66.766546][ T3546] ? udf_close_lvid+0x6a4/0x9a0 [ 66.771408][ T3546] end_report+0x66/0x110 [ 66.775655][ T3546] kasan_report+0x143/0x160 [ 66.780166][ T3546] ? udf_close_lvid+0x6a4/0x9a0 [ 66.785059][ T3546] udf_close_lvid+0x6a4/0x9a0 [ 66.789754][ T3546] ? udf_open_lvid+0x5a0/0x5a0 [ 66.794531][ T3546] ? iput+0x3f7/0x980 [ 66.798525][ T3546] ? clear_inode+0x150/0x150 [ 66.803125][ T3546] ? module_put+0x15a/0x350 [ 66.807671][ T3546] udf_put_super+0xc9/0x160 [ 66.812226][ T3546] ? udf_free_in_core_inode+0x20/0x20 [ 66.817610][ T3546] generic_shutdown_super+0x130/0x340 [ 66.823009][ T3546] kill_block_super+0x7a/0xe0 [ 66.827700][ T3546] deactivate_locked_super+0xa0/0x110 [ 66.833079][ T3546] cleanup_mnt+0x490/0x520 [ 66.837512][ T3546] ? lockdep_hardirqs_on+0x94/0x130 [ 66.842715][ T3546] task_work_run+0x246/0x300 [ 66.847312][ T3546] ? kasan_quarantine_put+0xd4/0x220 [ 66.852604][ T3546] ? task_work_cancel+0x2b0/0x2b0 [ 66.857656][ T3546] ? kmem_cache_free+0x292/0x510 [ 66.862636][ T3546] ? do_exit+0xa6e/0x26a0 [ 66.866973][ T3546] do_exit+0xa73/0x26a0 [ 66.871157][ T3546] ? put_task_struct+0x80/0x80 [ 66.875932][ T3546] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 66.881924][ T3546] ? print_irqtrace_events+0x210/0x210 [ 66.887393][ T3546] ? _raw_spin_unlock_irq+0x1f/0x40 [ 66.892594][ T3546] ? lockdep_hardirqs_on+0x94/0x130 [ 66.897792][ T3546] do_group_exit+0x202/0x2b0 [ 66.902395][ T3546] __x64_sys_exit_group+0x3b/0x40 [ 66.907429][ T3546] do_syscall_64+0x3b/0xb0 [ 66.911853][ T3546] ? clear_bhb_loop+0x45/0xa0 [ 66.916539][ T3546] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 66.922466][ T3546] RIP: 0033:0x7fe0357bca79 [ 66.926883][ T3546] Code: Unable to access opcode bytes at 0x7fe0357bca4f. [ 66.933896][ T3546] RSP: 002b:00007ffffa5fe8c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 66.942339][ T3546] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007fe0357bca79 [ 66.950329][ T3546] RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000001 [ 66.958302][ T3546] RBP: 00007fe03583a390 R08: ffffffffffffffb8 R09: 000000000000000d [ 66.966277][ T3546] R10: 00000000200001c0 R11: 0000000000000246 R12: 00007fe03583a390 [ 66.974340][ T3546] R13: 0000000000000000 R14: 00007fe03583c160 R15: 00007fe035783170 [ 66.982320][ T3546] [ 66.985639][ T3546] Kernel Offset: disabled [ 66.989962][ T3546] Rebooting in 86400 seconds..