Warning: Permanently added '10.128.1.106' (ED25519) to the list of known hosts. executing program [ 64.707781][ T3546] loop0: detected capacity change from 0 to 32768 [ 64.729098][ T3546] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz-executor326 (3546) [ 64.753935][ T3546] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 64.764791][ T3546] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 64.773586][ T3546] BTRFS info (device loop0): disabling tree log [ 64.780578][ T3546] BTRFS info (device loop0): turning on flush-on-commit [ 64.788316][ T3546] BTRFS info (device loop0): turning off barriers [ 64.795221][ T3546] BTRFS info (device loop0): force clearing of disk cache [ 64.802396][ T3546] BTRFS info (device loop0): turning on barriers [ 64.809512][ T3546] BTRFS info (device loop0): using free space tree [ 64.839980][ T3546] BTRFS info (device loop0): enabling ssd optimizations [ 64.850140][ T3546] BTRFS info (device loop0): rebuilding free space tree [ 64.883957][ T3546] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 65.061745][ T3546] loop0: detected capacity change from 0 to 2048 [ 65.075136][ T3546] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=17146, location=17146 [ 65.088518][ T3546] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 65.232680][ T3546] ================================================================== [ 65.241092][ T3546] BUG: KASAN: use-after-free in udf_close_lvid+0x6a4/0x9a0 [ 65.248353][ T3546] Write of size 1 at addr ffff88816162ddc0 by task syz-executor326/3546 [ 65.256973][ T3546] [ 65.259305][ T3546] CPU: 1 PID: 3546 Comm: syz-executor326 Not tainted 6.1.85-syzkaller #0 [ 65.267723][ T3546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 65.277784][ T3546] Call Trace: [ 65.281064][ T3546] [ 65.284000][ T3546] dump_stack_lvl+0x1e3/0x2cb [ 65.288732][ T3546] ? nf_tcp_handle_invalid+0x642/0x642 [ 65.294210][ T3546] ? panic+0x75d/0x75d [ 65.298413][ T3546] ? _printk+0xd1/0x111 [ 65.302753][ T3546] ? __virt_addr_valid+0x17f/0x520 [ 65.308137][ T3546] ? __virt_addr_valid+0x17f/0x520 [ 65.313258][ T3546] print_report+0x15f/0x4f0 [ 65.317770][ T3546] ? __virt_addr_valid+0x17f/0x520 [ 65.322993][ T3546] ? __virt_addr_valid+0x17f/0x520 [ 65.328112][ T3546] ? __virt_addr_valid+0x44a/0x520 [ 65.333231][ T3546] ? __phys_addr+0xb6/0x170 [ 65.337748][ T3546] ? udf_close_lvid+0x6a4/0x9a0 [ 65.342632][ T3546] kasan_report+0x136/0x160 [ 65.347144][ T3546] ? udf_close_lvid+0x6a4/0x9a0 [ 65.352010][ T3546] udf_close_lvid+0x6a4/0x9a0 [ 65.356709][ T3546] ? udf_open_lvid+0x5a0/0x5a0 [ 65.361489][ T3546] ? iput+0x3f7/0x980 [ 65.365483][ T3546] ? clear_inode+0x150/0x150 [ 65.370096][ T3546] ? module_put+0x15a/0x350 [ 65.374609][ T3546] udf_put_super+0xc9/0x160 [ 65.379125][ T3546] ? udf_free_in_core_inode+0x20/0x20 [ 65.384507][ T3546] generic_shutdown_super+0x130/0x340 [ 65.389892][ T3546] kill_block_super+0x7a/0xe0 [ 65.394580][ T3546] deactivate_locked_super+0xa0/0x110 [ 65.399993][ T3546] cleanup_mnt+0x490/0x520 [ 65.404423][ T3546] ? lockdep_hardirqs_on+0x94/0x130 [ 65.409640][ T3546] task_work_run+0x246/0x300 [ 65.414332][ T3546] ? kasan_quarantine_put+0xd4/0x220 [ 65.419725][ T3546] ? task_work_cancel+0x2b0/0x2b0 [ 65.424795][ T3546] ? kmem_cache_free+0x292/0x510 [ 65.429746][ T3546] ? do_exit+0xa6e/0x26a0 [ 65.434096][ T3546] do_exit+0xa73/0x26a0 [ 65.438277][ T3546] ? put_task_struct+0x80/0x80 [ 65.443139][ T3546] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 65.449134][ T3546] ? print_irqtrace_events+0x210/0x210 [ 65.454695][ T3546] ? _raw_spin_unlock_irq+0x1f/0x40 [ 65.459917][ T3546] ? lockdep_hardirqs_on+0x94/0x130 [ 65.465125][ T3546] do_group_exit+0x202/0x2b0 [ 65.469734][ T3546] __x64_sys_exit_group+0x3b/0x40 [ 65.474771][ T3546] do_syscall_64+0x3b/0xb0 [ 65.479201][ T3546] ? clear_bhb_loop+0x45/0xa0 [ 65.483899][ T3546] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 65.489804][ T3546] RIP: 0033:0x7f763f3d9049 [ 65.494237][ T3546] Code: Unable to access opcode bytes at 0x7f763f3d901f. [ 65.501348][ T3546] RSP: 002b:00007ffe9b95ce28 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 65.509777][ T3546] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007f763f3d9049 [ 65.517753][ T3546] RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000001 [ 65.525732][ T3546] RBP: 00007f763f45b390 R08: ffffffffffffffb8 R09: 00000000000000a0 [ 65.533709][ T3546] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f763f45b390 [ 65.541708][ T3546] R13: 0000000000000000 R14: 00007f763f45c100 R15: 00007f763f3a7330 [ 65.549733][ T3546] [ 65.552780][ T3546] [ 65.555124][ T3546] The buggy address belongs to the physical page: [ 65.561532][ T3546] page:ffffea0005858b40 refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x16162d [ 65.571773][ T3546] flags: 0x57ff80000000000(node=1|zone=2|lastcpupid=0xfff) [ 65.578981][ T3546] raw: 057ff80000000000 ffffea0005858b48 ffffea0005858b48 0000000000000000 [ 65.587574][ T3546] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 65.596158][ T3546] page dumped because: kasan: bad access detected [ 65.602671][ T3546] page_owner info is not present (never set?) [ 65.608731][ T3546] [ 65.611074][ T3546] Memory state around the buggy address: [ 65.616701][ T3546] ffff88816162dc80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 65.624761][ T3546] ffff88816162dd00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 65.632847][ T3546] >ffff88816162dd80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 65.640902][ T3546] ^ [ 65.647051][ T3546] ffff88816162de00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 65.655112][ T3546] ffff88816162de80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 65.663254][ T3546] ================================================================== [ 65.671870][ T3546] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 65.679091][ T3546] CPU: 1 PID: 3546 Comm: syz-executor326 Not tainted 6.1.85-syzkaller #0 [ 65.687557][ T3546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 65.697716][ T3546] Call Trace: [ 65.701006][ T3546] [ 65.703940][ T3546] dump_stack_lvl+0x1e3/0x2cb [ 65.708722][ T3546] ? nf_tcp_handle_invalid+0x642/0x642 [ 65.714191][ T3546] ? panic+0x75d/0x75d [ 65.718263][ T3546] ? preempt_schedule_common+0xa6/0xd0 [ 65.723825][ T3546] ? vscnprintf+0x59/0x80 [ 65.728253][ T3546] panic+0x318/0x75d [ 65.732152][ T3546] ? check_panic_on_warn+0x1d/0xa0 [ 65.737271][ T3546] ? memcpy_page_flushcache+0xfc/0xfc [ 65.742650][ T3546] ? _raw_spin_unlock_irqrestore+0x128/0x130 [ 65.748725][ T3546] ? _raw_spin_unlock+0x40/0x40 [ 65.753581][ T3546] ? print_report+0x4a3/0x4f0 [ 65.758634][ T3546] check_panic_on_warn+0x7e/0xa0 [ 65.763579][ T3546] ? udf_close_lvid+0x6a4/0x9a0 [ 65.768449][ T3546] end_report+0x66/0x110 [ 65.772696][ T3546] kasan_report+0x143/0x160 [ 65.777204][ T3546] ? udf_close_lvid+0x6a4/0x9a0 [ 65.782098][ T3546] udf_close_lvid+0x6a4/0x9a0 [ 65.786804][ T3546] ? udf_open_lvid+0x5a0/0x5a0 [ 65.791758][ T3546] ? iput+0x3f7/0x980 [ 65.795752][ T3546] ? clear_inode+0x150/0x150 [ 65.800439][ T3546] ? module_put+0x15a/0x350 [ 65.804950][ T3546] udf_put_super+0xc9/0x160 [ 65.809554][ T3546] ? udf_free_in_core_inode+0x20/0x20 [ 65.815026][ T3546] generic_shutdown_super+0x130/0x340 [ 65.820410][ T3546] kill_block_super+0x7a/0xe0 [ 65.825212][ T3546] deactivate_locked_super+0xa0/0x110 [ 65.830603][ T3546] cleanup_mnt+0x490/0x520 [ 65.835034][ T3546] ? lockdep_hardirqs_on+0x94/0x130 [ 65.840238][ T3546] task_work_run+0x246/0x300 [ 65.844841][ T3546] ? kasan_quarantine_put+0xd4/0x220 [ 65.850135][ T3546] ? task_work_cancel+0x2b0/0x2b0 [ 65.855190][ T3546] ? kmem_cache_free+0x292/0x510 [ 65.860135][ T3546] ? do_exit+0xa6e/0x26a0 [ 65.864486][ T3546] do_exit+0xa73/0x26a0 [ 65.868661][ T3546] ? put_task_struct+0x80/0x80 [ 65.873438][ T3546] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 65.879433][ T3546] ? print_irqtrace_events+0x210/0x210 [ 65.884918][ T3546] ? _raw_spin_unlock_irq+0x1f/0x40 [ 65.890143][ T3546] ? lockdep_hardirqs_on+0x94/0x130 [ 65.895347][ T3546] do_group_exit+0x202/0x2b0 [ 65.899982][ T3546] __x64_sys_exit_group+0x3b/0x40 [ 65.905025][ T3546] do_syscall_64+0x3b/0xb0 [ 65.909491][ T3546] ? clear_bhb_loop+0x45/0xa0 [ 65.914266][ T3546] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 65.920256][ T3546] RIP: 0033:0x7f763f3d9049 [ 65.924673][ T3546] Code: Unable to access opcode bytes at 0x7f763f3d901f. [ 65.931869][ T3546] RSP: 002b:00007ffe9b95ce28 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 65.940478][ T3546] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007f763f3d9049 [ 65.948714][ T3546] RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000001 [ 65.956863][ T3546] RBP: 00007f763f45b390 R08: ffffffffffffffb8 R09: 00000000000000a0 [ 65.964926][ T3546] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f763f45b390 [ 65.972992][ T3546] R13: 0000000000000000 R14: 00007f763f45c100 R15: 00007f763f3a7330 [ 65.980976][ T3546] [ 65.984319][ T3546] Kernel Offset: disabled [ 65.988644][ T3546] Rebooting in 86400 seconds..