Warning: Permanently added '10.128.0.227' (ED25519) to the list of known hosts. 2025/11/23 02:33:55 parsed 1 programs [ 66.008447][ T4160] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 69.060371][ T4172] veth0_vlan: entered promiscuous mode 2025/11/23 02:33:59 executed programs: 0 [ 70.269019][ T11] veth0_vlan: left promiscuous mode [ 75.440103][ T4448] veth0_vlan: entered promiscuous mode [ 75.500968][ T4452] veth0_vlan: entered promiscuous mode [ 75.511954][ T4446] veth0_vlan: entered promiscuous mode [ 75.621361][ T4443] veth0_vlan: entered promiscuous mode 2025/11/23 02:34:06 executed programs: 8 [ 77.062933][ T5188] syz.2.19[5188]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 77.099215][ T5188] loop2: detected capacity change from 0 to 256 [ 77.231616][ T5188] loop2: detected capacity change from 0 to 2048 [ 77.261576][ T5204] loop5: detected capacity change from 0 to 256 [ 77.268886][ T5203] loop3: detected capacity change from 0 to 256 [ 77.277523][ T5188] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 77.396316][ T5189] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 77.415771][ T5204] loop5: detected capacity change from 0 to 2048 [ 77.419975][ T5203] loop3: detected capacity change from 0 to 2048 [ 77.434648][ T5189] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 77.448206][ T5189] Buffer I/O error on dev loop5, logical block 0, async page read [ 77.450735][ T5203] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 77.476706][ T4448] ================================================================== [ 77.484820][ T4448] BUG: KASAN: slab-use-after-free in udf_unlink+0x533/0x630 [ 77.492191][ T4448] Read of size 4 at addr ffff88807deba200 by task syz-executor/4448 [ 77.500157][ T4448] [ 77.502471][ T4448] CPU: 1 PID: 4448 Comm: syz-executor Not tainted syzkaller #0 [ 77.510096][ T4448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 77.520313][ T4448] Call Trace: [ 77.523584][ T4448] [ 77.526506][ T4448] dump_stack_lvl+0xe0/0x160 [ 77.531098][ T4448] ? show_regs_print_info+0x10/0x10 [ 77.536290][ T4448] ? load_image+0x550/0x550 [ 77.540773][ T4448] ? __virt_addr_valid+0x21e/0x270 [ 77.545876][ T4448] print_report+0xac/0x220 [ 77.550362][ T4448] ? udf_unlink+0x533/0x630 [ 77.554852][ T4448] kasan_report+0x117/0x150 [ 77.559344][ T4448] ? udf_unlink+0x533/0x630 [ 77.563939][ T4448] udf_unlink+0x533/0x630 [ 77.568257][ T4448] ? udf_link+0x490/0x490 [ 77.572570][ T4448] ? generic_permission+0xc6/0x440 [ 77.577671][ T4448] ? down_write+0x104/0x160 [ 77.582156][ T4448] ? down_read_killable+0x330/0x330 [ 77.587339][ T4448] vfs_unlink+0x27b/0x4a0 [ 77.591651][ T4448] do_unlinkat+0x311/0x4b0 [ 77.596052][ T4448] ? fsnotify_link_count+0xd0/0xd0 [ 77.601149][ T4448] ? getname_flags+0x115/0x440 [ 77.606007][ T4448] __x64_sys_unlink+0x44/0x50 [ 77.610685][ T4448] do_syscall_64+0x55/0xb0 [ 77.615097][ T4448] ? clear_bhb_loop+0x40/0x90 [ 77.619760][ T4448] ? clear_bhb_loop+0x40/0x90 [ 77.624432][ T4448] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 77.630309][ T4448] RIP: 0033:0x7f21d5f8e197 [ 77.634723][ T4448] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 57 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 77.654408][ T4448] RSP: 002b:00007fffdc5d38d8 EFLAGS: 00000206 ORIG_RAX: 0000000000000057 [ 77.662808][ T4448] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f21d5f8e197 [ 77.670780][ T4448] RDX: 00007fffdc5d3900 RSI: 00007fffdc5d3990 RDI: 00007fffdc5d3990 [ 77.678835][ T4448] RBP: 00007fffdc5d3990 R08: 0000000000000000 R09: 0000000000000000 [ 77.686802][ T4448] R10: 0000000000000100 R11: 0000000000000206 R12: 00007fffdc5d4a80 [ 77.694956][ T4448] R13: 00007f21d6011c05 R14: 0000000000012dd7 R15: 00007fffdc5d6c40 [ 77.702915][ T4448] [ 77.705924][ T4448] [ 77.708240][ T4448] Allocated by task 5028: [ 77.712587][ T4448] kasan_set_track+0x4e/0x70 [ 77.717168][ T4448] __kasan_slab_alloc+0x6c/0x80 [ 77.722021][ T4448] slab_post_alloc_hook+0x66/0x430 [ 77.727129][ T4448] kmem_cache_alloc+0x11e/0x2d0 [ 77.731975][ T4448] getname_flags+0xa4/0x440 [ 77.736464][ T4448] user_path_at_empty+0x1f/0x50 [ 77.741302][ T4448] __se_sys_chdir+0x90/0x220 [ 77.745876][ T4448] do_syscall_64+0x55/0xb0 [ 77.750281][ T4448] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 77.756158][ T4448] [ 77.758483][ T4448] Freed by task 5028: [ 77.762449][ T4448] kasan_set_track+0x4e/0x70 [ 77.767029][ T4448] kasan_save_free_info+0x2e/0x50 [ 77.772036][ T4448] ____kasan_slab_free+0x126/0x1e0 [ 77.777131][ T4448] slab_free_freelist_hook+0x130/0x1b0 [ 77.782585][ T4448] kmem_cache_free+0xf8/0x280 [ 77.787248][ T4448] user_path_at_empty+0x3f/0x50 [ 77.792079][ T4448] __se_sys_chdir+0x90/0x220 [ 77.796708][ T4448] do_syscall_64+0x55/0xb0 [ 77.801108][ T4448] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 77.806982][ T4448] [ 77.809297][ T4448] The buggy address belongs to the object at ffff88807deba200 [ 77.809297][ T4448] which belongs to the cache names_cache of size 4096 [ 77.823607][ T4448] The buggy address is located 0 bytes inside of [ 77.823607][ T4448] freed 4096-byte region [ffff88807deba200, ffff88807debb200) [ 77.837299][ T4448] [ 77.839621][ T4448] The buggy address belongs to the physical page: [ 77.846112][ T4448] page:ffffea0001f7ae00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7deb8 [ 77.856266][ T4448] head:ffffea0001f7ae00 order:3 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 77.865266][ T4448] anon flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 77.873669][ T4448] page_type: 0xffffffff() [ 77.877993][ T4448] raw: 00fff00000000840 ffff88801024d640 0000000000000000 0000000000000001 [ 77.886568][ T4448] raw: 0000000000000000 0000000000070007 00000001ffffffff 0000000000000000 [ 77.895653][ T4448] page dumped because: kasan: bad access detected [ 77.902135][ T4448] page_owner tracks the page as allocated [ 77.907835][ T4448] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 4584, tgid 4584 (modprobe), ts 71269003576, free_ts 71228965085 [ 77.930393][ T4448] post_alloc_hook+0xed/0x120 [ 77.935056][ T4448] get_page_from_freelist+0x2423/0x2560 [ 77.940607][ T4448] __alloc_pages+0x1e3/0x460 [ 77.945362][ T4448] alloc_slab_page+0x5d/0x170 [ 77.950108][ T4448] new_slab+0x87/0x280 [ 77.954248][ T4448] ___slab_alloc+0xa32/0xfe0 [ 77.958825][ T4448] kmem_cache_alloc+0x1ad/0x2d0 [ 77.963659][ T4448] getname_flags+0xa4/0x440 [ 77.968151][ T4448] do_sys_openat2+0xb1/0x180 [ 77.972728][ T4448] __x64_sys_openat+0xf4/0x120 [ 77.977473][ T4448] do_syscall_64+0x55/0xb0 [ 77.982308][ T4448] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 77.988187][ T4448] page last free stack trace: [ 77.992933][ T4448] free_unref_page_prepare+0x6f9/0x810 [ 77.998405][ T4448] free_unref_page+0x32/0x290 [ 78.003064][ T4448] __slab_free+0x2d8/0x380 [ 78.007481][ T4448] qlist_free_all+0x75/0xe0 [ 78.011987][ T4448] kasan_quarantine_reduce+0x143/0x160 [ 78.017441][ T4448] __kasan_slab_alloc+0x22/0x80 [ 78.022366][ T4448] slab_post_alloc_hook+0x66/0x430 [ 78.027478][ T4448] __kmem_cache_alloc_node+0x13e/0x250 [ 78.032930][ T4448] kmalloc_trace+0x2a/0xe0 [ 78.037333][ T4448] kobject_uevent_env+0x2d7/0x6f0 [ 78.042341][ T4448] __kobject_del+0xae/0x2c0 [ 78.046920][ T4448] kobject_put+0x19a/0x3c0 [ 78.051407][ T4448] net_rx_queue_update_kobjects+0x34e/0x470 [ 78.057545][ T4448] netif_set_real_num_rx_queues+0xa9/0x190 [ 78.063428][ T4448] veth_newlink+0x73e/0xa20 [ 78.067921][ T4448] rtnl_newlink+0x112b/0x1b60 [ 78.072590][ T4448] [ 78.074914][ T4448] Memory state around the buggy address: [ 78.080532][ T4448] ffff88807deba100: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 78.088580][ T4448] ffff88807deba180: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 78.097058][ T4448] >ffff88807deba200: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 78.105106][ T4448] ^ [ 78.109157][ T4448] ffff88807deba280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 78.117302][ T4448] ffff88807deba300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 78.125347][ T4448] ================================================================== [ 78.146972][ T5204] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 78.181052][ T5215] loop4: detected capacity change from 0 to 256 [ 78.194071][ T4448] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 78.201312][ T4448] CPU: 0 PID: 4448 Comm: syz-executor Not tainted syzkaller #0 [ 78.208873][ T4448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 78.219033][ T4448] Call Trace: [ 78.222329][ T4448] [ 78.225270][ T4448] dump_stack_lvl+0xe0/0x160 [ 78.229942][ T4448] ? show_regs_print_info+0x10/0x10 [ 78.235235][ T4448] ? load_image+0x550/0x550 [ 78.239749][ T4448] ? vsnprintf+0x799/0x1b70 [ 78.244269][ T4448] panic+0x1be/0x480 [ 78.248182][ T4448] ? ptdump_walk_pgd_level_checkwx+0x1b0/0x1b0 [ 78.254353][ T4448] ? _raw_spin_unlock_irqrestore+0xed/0x100 [ 78.260444][ T4448] ? _raw_spin_unlock+0x40/0x40 [ 78.265412][ T4448] ? print_memory_metadata+0x314/0x400 [ 78.270980][ T4448] ? udf_unlink+0x533/0x630 [ 78.275504][ T4448] check_panic_on_warn+0x5a/0x80 [ 78.280556][ T4448] end_report+0x6f/0x140 [ 78.284820][ T4448] kasan_report+0x128/0x150 [ 78.289334][ T4448] ? udf_unlink+0x533/0x630 [ 78.293848][ T4448] udf_unlink+0x533/0x630 [ 78.298279][ T4448] ? udf_link+0x490/0x490 [ 78.302615][ T4448] ? generic_permission+0xc6/0x440 [ 78.307741][ T4448] ? down_write+0x104/0x160 [ 78.312263][ T4448] ? down_read_killable+0x330/0x330 [ 78.317473][ T4448] vfs_unlink+0x27b/0x4a0 [ 78.321812][ T4448] do_unlinkat+0x311/0x4b0 [ 78.326239][ T4448] ? fsnotify_link_count+0xd0/0xd0 [ 78.331362][ T4448] ? getname_flags+0x115/0x440 [ 78.336136][ T4448] __x64_sys_unlink+0x44/0x50 [ 78.339950][ T4452] ------------[ cut here ]------------ [ 78.339955][ T4452] WARNING: CPU: 1 PID: 4452 at fs/udf/udfdecl.h:123 udf_unlink+0x4e6/0x630 [ 78.339972][ T4452] Modules linked in: [ 78.339979][ T4452] CPU: 1 PID: 4452 Comm: syz-executor Not tainted syzkaller #0 [ 78.339985][ T4452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 78.339989][ T4452] RIP: 0010:udf_unlink+0x4e6/0x630 [ 78.339996][ T4452] Code: 00 00 41 c6 44 0e 1f 00 65 48 8b 0c 25 28 00 00 00 48 3b 8c 24 40 01 00 00 75 16 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 <0f> 0b e9 c4 fe ff ff e8 ce 29 11 04 89 d1 80 e1 07 80 c1 03 38 c1 [ 78.340002][ T4452] RSP: 0018:ffffc90002e0fc00 EFLAGS: 00010286 [ 78.340007][ T4452] RAX: 0000000000000000 RBX: ffff88806d51001c RCX: ffffffff8244bc53 [ 78.340012][ T4452] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff88807e8f2200 [ 78.340015][ T4452] RBP: ffffc90002e0fd88 R08: ffffffff88e77def R09: 1ffffffff11cefbd [ 78.340019][ T4452] R10: dffffc0000000000 R11: fffffbfff11cefbe R12: dffffc0000000000 [ 78.340022][ T4452] R13: ffff88806d51001f R14: 1ffff920005c1f88 R15: ffff88807e52a618 [ 78.340026][ T4452] FS: 0000555562d50500(0000) GS:ffff8880ba100000(0000) knlGS:0000000000000000 [ 78.340031][ T4452] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 78.340036][ T4452] CR2: 00007fed759f3000 CR3: 00000000673c2000 CR4: 00000000003506e0 [ 78.340045][ T4452] Call Trace: [ 78.340048][ T4452] [ 78.340051][ T4452] ? udf_link+0x490/0x490 [ 78.340058][ T4452] ? generic_permission+0xc6/0x440 [ 78.340068][ T4452] ? down_write+0x104/0x160 [ 78.340074][ T4452] ? down_read_killable+0x330/0x330 [ 78.340081][ T4452] vfs_unlink+0x27b/0x4a0 [ 78.340087][ T4452] do_unlinkat+0x311/0x4b0 [ 78.340093][ T4452] ? fsnotify_link_count+0xd0/0xd0 [ 78.340099][ T4452] ? getname_flags+0x115/0x440 [ 78.340106][ T4452] __x64_sys_unlink+0x44/0x50 [ 78.340111][ T4452] do_syscall_64+0x55/0xb0 [ 78.340117][ T4452] ? clear_bhb_loop+0x40/0x90 [ 78.340123][ T4452] ? clear_bhb_loop+0x40/0x90 [ 78.340129][ T4452] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 78.340134][ T4452] RIP: 0033:0x7fbd4ff8e197 [ 78.340139][ T4452] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 57 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 78.340143][ T4452] RSP: 002b:00007ffec2631218 EFLAGS: 00000206 ORIG_RAX: 0000000000000057 [ 78.340149][ T4452] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fbd4ff8e197 [ 78.340153][ T4452] RDX: 00007ffec2631240 RSI: 00007ffec26312d0 RDI: 00007ffec26312d0 [ 78.340157][ T4452] RBP: 00007ffec26312d0 R08: 0000000000000000 R09: 0000000000000000 [ 78.340160][ T4452] R10: 0000000000000100 R11: 0000000000000206 R12: 00007ffec26323c0 [ 78.340164][ T4452] R13: 00007fbd50011c05 R14: 0000000000013132 R15: 00007ffec2634580 [ 78.340169][ T4452] [ 78.340171][ T4452] ---[ end trace 0000000000000000 ]--- [ 78.340246][ T4452] ------------[ cut here ]------------ [ 78.340248][ T4452] WARNING: CPU: 1 PID: 4452 at fs/udf/udfdecl.h:123 udf_free_blocks+0xc68/0x1120 [ 78.340257][ T4452] Modules linked in: [ 78.340260][ T4452] CPU: 1 PID: 4452 Comm: syz-executor Tainted: G W syzkaller #0 [ 78.340265][ T4452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 78.340267][ T4452] RIP: 0010:udf_free_blocks+0xc68/0x1120 [ 78.340274][ T4452] Code: 84 c0 0f 85 83 00 00 00 83 3b 00 75 1d 48 8b 44 24 20 42 80 3c 28 00 0f 84 ca fb ff ff 4c 89 e7 e8 ad 16 5d ff e9 bd fb ff ff <0f> 0b eb df 48 8b 4c 24 48 80 e1 07 fe c1 38 c1 0f 8c f8 fe ff ff [ 78.340278][ T4452] RSP: 0018:ffffc90002e0f640 EFLAGS: 00010286 [ 78.340282][ T4452] RAX: 0000000000000000 RBX: ffff88806d51001c RCX: ffffffff82433af0 [ 78.340285][ T4452] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffff88806a778020 [ 78.340289][ T4452] RBP: ffffc90002e0f850 R08: ffff88806a778027 R09: 1ffff1100d4ef004 [ 78.340292][ T4452] R10: dffffc0000000000 R11: ffffed100d4ef005 R12: ffff88807e52a618 [ 78.340295][ T4452] R13: dffffc0000000000 R14: ffff88806d51001f R15: 0000000000000123 [ 78.340299][ T4452] FS: 0000555562d50500(0000) GS:ffff8880ba100000(0000) knlGS:0000000000000000 [ 78.340303][ T4452] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 78.340307][ T4452] CR2: 00007fed759f3000 CR3: 00000000673c2000 CR4: 00000000003506e0 [ 78.340315][ T4452] Call Trace: [ 78.340317][ T4452] [ 78.340319][ T4452] ? __lock_acquire+0x67b/0xee0 [ 78.340328][ T4452] ? orangefs_cancel_op_in_progress+0x410/0x410 [ 78.340335][ T4452] ? rcu_is_watching+0x1f/0x90 [ 78.340341][ T4452] ? __mark_inode_dirty+0x20a/0x880 [ 78.340348][ T4452] ? rcu_is_watching+0x1f/0x90 [ 78.340353][ T4452] ? __mark_inode_dirty+0x20a/0x880 [ 78.340359][ T4452] extent_trunc+0x226/0x300 [ 78.340365][ T4452] ? udf_truncate_tail_extent+0x4b0/0x4b0 [ 78.340371][ T4452] udf_truncate_extents+0x2cd/0xd30 [ 78.340377][ T4452] ? udf_discard_prealloc+0x400/0x400 [ 78.340383][ T4452] ? udf_setsize+0x40c/0xd90 [ 78.340389][ T4452] ? __lock_acquire+0xee0/0xee0 [ 78.340395][ T4452] ? do_raw_spin_lock+0x121/0x2c0 [ 78.340400][ T4452] ? __rwlock_init+0xb0/0x150 [ 78.340405][ T4452] ? do_raw_spin_unlock+0x121/0x230 [ 78.340410][ T4452] udf_setsize+0x414/0xd90 [ 78.340417][ T4452] ? do_raw_spin_unlock+0x121/0x230 [ 78.340421][ T4452] ? _raw_spin_unlock+0x28/0x40 [ 78.340428][ T4452] ? inode_wait_for_writeback+0x16d/0x1c0 [ 78.340434][ T4452] ? udf_evict_inode+0x330/0x330 [ 78.340440][ T4452] ? sb_clear_inode_writeback+0x2a0/0x2a0 [ 78.340446][ T4452] ? do_raw_spin_lock+0x121/0x2c0 [ 78.340450][ T4452] ? bit_waitqueue+0x30/0x30 [ 78.340458][ T4452] udf_evict_inode+0x57/0x330 [ 78.340464][ T4452] ? udf_new_inode+0xbf0/0xbf0 [ 78.340470][ T4452] evict+0x407/0x750 [ 78.340476][ T4452] ? __lock_acquire+0xee0/0xee0 [ 78.340483][ T4452] ? proc_nr_inodes+0x1b0/0x1b0 [ 78.340489][ T4452] ? do_raw_spin_unlock+0x121/0x230 [ 78.340494][ T4452] ? _raw_spin_unlock+0x28/0x40 [ 78.340500][ T4452] ? iput+0x4b8/0x650 [ 78.340505][ T4452] do_unlinkat+0x362/0x4b0 [ 78.340511][ T4452] ? fsnotify_link_count+0xd0/0xd0 [ 78.340517][ T4452] ? getname_flags+0x115/0x440 [ 78.340523][ T4452] __x64_sys_unlink+0x44/0x50 [ 78.340528][ T4452] do_syscall_64+0x55/0xb0 [ 78.340534][ T4452] ? clear_bhb_loop+0x40/0x90 [ 78.340539][ T4452] ? clear_bhb_loop+0x40/0x90 [ 78.340544][ T4452] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 78.340549][ T4452] RIP: 0033:0x7fbd4ff8e197 [ 78.340553][ T4452] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 57 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 78.340557][ T4452] RSP: 002b:00007ffec2631218 EFLAGS: 00000206 ORIG_RAX: 0000000000000057 [ 78.340562][ T4452] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fbd4ff8e197 [ 78.340565][ T4452] RDX: 00007ffec2631240 RSI: 00007ffec26312d0 RDI: 00007ffec26312d0 [ 78.340569][ T4452] RBP: 00007ffec26312d0 R08: 0000000000000000 R09: 0000000000000000 [ 78.340572][ T4452] R10: 0000000000000100 R11: 0000000000000206 R12: 00007ffec26323c0 [ 78.340575][ T4452] R13: 00007fbd50011c05 R14: 0000000000013132 R15: 00007ffec2634580 [ 78.340580][ T4452] [ 78.340581][ T4452] ---[ end trace 0000000000000000 ]--- [ 78.341714][ T4452] ------------[ cut here ]------------ [ 78.341717][ T4452] WARNING: CPU: 1 PID: 4452 at fs/udf/udfdecl.h:123 udf_rmdir+0x643/0x710 [ 78.341729][ T4452] Modules linked in: [ 78.341734][ T4452] CPU: 1 PID: 4452 Comm: syz-executor Tainted: G W syzkaller #0 [ 78.341739][ T4452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 78.341741][ T4452] RIP: 0010:udf_rmdir+0x643/0x710 [ 78.341748][ T4452] Code: 7c fb ff ff 80 bc 24 a3 00 00 00 00 74 bf f6 84 24 a2 00 00 00 04 75 b5 4c 89 f7 e8 67 5a 01 00 b8 d9 ff ff ff e9 21 ff ff ff <0f> 0b e9 0c fe ff ff e8 d1 07 11 04 89 d9 80 e1 07 80 c1 03 38 c1 [ 78.341752][ T4452] RSP: 0018:ffffc90002e0fb60 EFLAGS: 00010286 [ 78.341758][ T4452] RAX: 0000000000000000 RBX: ffff88806d51001f RCX: ffffffff8244de62 [ 78.341761][ T4452] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff88807e8f2204 [ 78.341764][ T4452] RBP: ffffc90002e0fda0 R08: ffffffff88e77def R09: 1ffffffff11cefbd [ 78.341768][ T4452] R10: dffffc0000000000 R11: fffffbfff11cefbe R12: ffff88807e52a618 [ 78.341772][ T4452] R13: ffff88806d51001c R14: dffffc0000000000 R15: 1ffff920005c1f70 [ 78.341775][ T4452] FS: 0000555562d50500(0000) GS:ffff8880ba100000(0000) knlGS:0000000000000000 [ 78.341780][ T4452] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 78.341783][ T4452] CR2: 00007fed759f0000 CR3: 00000000673c2000 CR4: 00000000003506e0 [ 78.341791][ T4452] Call Trace: [ 78.341794][ T4452] [ 78.341796][ T4452] ? udf_mkdir+0x5d0/0x5d0 [ 78.341805][ T4452] ? down_write+0x104/0x160 [ 78.341812][ T4452] ? down_read_killable+0x330/0x330 [ 78.341818][ T4452] ? do_raw_spin_unlock+0x121/0x230 [ 78.341823][ T4452] vfs_rmdir+0x199/0x3c0 [ 78.341830][ T4452] do_rmdir+0x213/0x490 [ 78.341835][ T4452] ? d_delete_notify+0x120/0x120 [ 78.341841][ T4452] ? getname_flags+0x115/0x440 [ 78.341848][ T4452] __x64_sys_unlinkat+0x94/0xb0 [ 78.341854][ T4452] do_syscall_64+0x55/0xb0 [ 78.341860][ T4452] ? clear_bhb_loop+0x40/0x90 [ 78.341866][ T4452] ? clear_bhb_loop+0x40/0x90 [ 78.341871][ T4452] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 78.341876][ T4452] RIP: 0033:0x7fbd4ff8e1c7 [ 78.341880][ T4452] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 78.341884][ T4452] RSP: 002b:00007ffec2631218 EFLAGS: 00000207 ORIG_RAX: 0000000000000107 [ 78.341889][ T4452] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007fbd4ff8e1c7 [ 78.341893][ T4452] RDX: 0000000000000200 RSI: 00007ffec26323c0 RDI: 00000000ffffff9c [ 78.341896][ T4452] RBP: 00007fbd50011c05 R08: 0000000000000000 R09: 0000000000000000 [ 78.341900][ T4452] R10: 0000000000000100 R11: 0000000000000207 R12: 00007ffec26323c0 [ 78.341903][ T4452] R13: 00007fbd50011c05 R14: 0000000000013132 R15: 00007ffec2634580 [ 78.341907][ T4452] [ 78.341910][ T4452] ---[ end trace 0000000000000000 ]--- [ 79.314454][ T4448] do_syscall_64+0x55/0xb0 [ 79.318958][ T4448] ? clear_bhb_loop+0x40/0x90 [ 79.323970][ T4448] ? clear_bhb_loop+0x40/0x90 [ 79.328720][ T4448] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 79.334604][ T4448] RIP: 0033:0x7f21d5f8e197 [ 79.339010][ T4448] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 57 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 79.358951][ T4448] RSP: 002b:00007fffdc5d38d8 EFLAGS: 00000206 ORIG_RAX: 0000000000000057 [ 79.367351][ T4448] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f21d5f8e197 [ 79.375317][ T4448] RDX: 00007fffdc5d3900 RSI: 00007fffdc5d3990 RDI: 00007fffdc5d3990 [ 79.383274][ T4448] RBP: 00007fffdc5d3990 R08: 0000000000000000 R09: 0000000000000000 [ 79.391239][ T4448] R10: 0000000000000100 R11: 0000000000000206 R12: 00007fffdc5d4a80 [ 79.399213][ T4448] R13: 00007f21d6011c05 R14: 0000000000012dd7 R15: 00007fffdc5d6c40 [ 79.407201][ T4448] [ 79.410461][ T4448] Kernel Offset: disabled [ 79.414764][ T4448] Rebooting in 86400 seconds..