Warning: Permanently added '10.128.0.184' (ED25519) to the list of known hosts. 2025/09/16 13:22:20 parsed 1 programs [ 60.994310][ T4157] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 64.142349][ T4170] veth0_vlan: entered promiscuous mode 2025/09/16 13:22:24 executed programs: 0 [ 64.993759][ T390] veth0_vlan: left promiscuous mode [ 69.875167][ T4448] veth0_vlan: entered promiscuous mode [ 69.991285][ T4445] veth0_vlan: entered promiscuous mode [ 70.173971][ T4446] veth0_vlan: entered promiscuous mode [ 70.267893][ T4439] veth0_vlan: entered promiscuous mode 2025/09/16 13:22:31 executed programs: 8 [ 71.493322][ T5182] syz.3.20[5182]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 71.552734][ T5182] loop3: detected capacity change from 0 to 256 [ 71.586599][ T5189] loop1: detected capacity change from 0 to 256 [ 71.659685][ T5182] loop3: detected capacity change from 0 to 2048 [ 71.697534][ T5182] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 71.763431][ T5196] loop1: detected capacity change from 0 to 256 [ 71.914921][ T4448] ================================================================== [ 71.923210][ T5206] loop1: detected capacity change from 0 to 256 [ 71.923533][ T4448] BUG: KASAN: use-after-free in udf_unlink+0x533/0x630 [ 71.936769][ T4448] Read of size 4 at addr ffff888030757200 by task syz-executor/4448 [ 71.944741][ T4448] [ 71.947077][ T4448] CPU: 1 PID: 4448 Comm: syz-executor Not tainted syzkaller #0 [ 71.954613][ T4448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 71.964670][ T4448] Call Trace: [ 71.967961][ T4448] [ 71.970894][ T4448] dump_stack_lvl+0xe0/0x160 [ 71.975484][ T4448] ? show_regs_print_info+0x10/0x10 [ 71.980801][ T4448] ? load_image+0x550/0x550 [ 71.985315][ T4448] ? __virt_addr_valid+0x21e/0x270 [ 71.990517][ T4448] print_report+0xac/0x220 [ 71.994946][ T4448] ? udf_unlink+0x533/0x630 [ 71.999537][ T4448] kasan_report+0x117/0x150 [ 72.004056][ T4448] ? udf_unlink+0x533/0x630 [ 72.008652][ T4448] udf_unlink+0x533/0x630 [ 72.013034][ T4448] ? udf_link+0x490/0x490 [ 72.017455][ T4448] ? generic_permission+0xc6/0x440 [ 72.022555][ T4448] ? down_write+0x104/0x160 [ 72.027046][ T4448] ? down_read_killable+0x330/0x330 [ 72.032327][ T4448] vfs_unlink+0x27b/0x4a0 [ 72.036636][ T4448] do_unlinkat+0x311/0x4b0 [ 72.041035][ T4448] ? fsnotify_link_count+0xd0/0xd0 [ 72.046117][ T4448] ? getname_flags+0x115/0x440 [ 72.050851][ T4448] __x64_sys_unlink+0x44/0x50 [ 72.055529][ T4448] do_syscall_64+0x55/0xb0 [ 72.059919][ T4448] ? clear_bhb_loop+0x40/0x90 [ 72.064565][ T4448] ? clear_bhb_loop+0x40/0x90 [ 72.069228][ T4448] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 72.075090][ T4448] RIP: 0033:0x7f8edbb8e197 [ 72.079486][ T4448] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 57 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 72.099333][ T4448] RSP: 002b:00007ffd2fa9af18 EFLAGS: 00000206 ORIG_RAX: 0000000000000057 [ 72.107724][ T4448] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f8edbb8e197 [ 72.115675][ T4448] RDX: 00007ffd2fa9af40 RSI: 00007ffd2fa9afd0 RDI: 00007ffd2fa9afd0 [ 72.123640][ T4448] RBP: 00007ffd2fa9afd0 R08: 0000000000000000 R09: 0000000000000000 [ 72.131612][ T4448] R10: 0000000000000100 R11: 0000000000000206 R12: 00007ffd2fa9c0c0 [ 72.139579][ T4448] R13: 00007f8edbc11c05 R14: 0000000000011835 R15: 00007ffd2fa9e280 [ 72.147538][ T4448] [ 72.150560][ T4448] [ 72.152863][ T4448] The buggy address belongs to the physical page: [ 72.159256][ T4448] page:ffffea0000c1d5c0 refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x30757 [ 72.169551][ T4448] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 72.176640][ T4448] page_type: 0xffffffff() [ 72.180962][ T4448] raw: 00fff00000000000 ffffea0000c1d5c8 ffffea0000c1d5c8 0000000000000000 [ 72.189530][ T4448] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 72.198536][ T4448] page dumped because: kasan: bad access detected [ 72.204938][ T4448] page_owner info is not present (never set?) [ 72.211007][ T4448] [ 72.213304][ T4448] Memory state around the buggy address: [ 72.218904][ T4448] ffff888030757100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 72.226935][ T4448] ffff888030757180: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 72.234966][ T4448] >ffff888030757200: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 72.243113][ T4448] ^ [ 72.247150][ T4448] ffff888030757280: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 72.255267][ T4448] ffff888030757300: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 72.263295][ T4448] ================================================================== [ 72.277622][ T4448] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 72.278259][ T5210] loop2: detected capacity change from 0 to 256 [ 72.291072][ T4448] CPU: 0 PID: 4448 Comm: syz-executor Not tainted syzkaller #0 [ 72.298703][ T4448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 72.308761][ T4448] Call Trace: [ 72.312039][ T4448] [ 72.315053][ T4448] dump_stack_lvl+0xe0/0x160 [ 72.319653][ T4448] ? show_regs_print_info+0x10/0x10 [ 72.324851][ T4448] ? load_image+0x550/0x550 [ 72.329666][ T4448] ? vsnprintf+0x799/0x1b70 [ 72.334165][ T4448] panic+0x1be/0x480 [ 72.338070][ T4448] ? ptdump_walk_pgd_level_checkwx+0x1b0/0x1b0 [ 72.344223][ T4448] ? _raw_spin_unlock_irqrestore+0xed/0x100 [ 72.350119][ T4448] ? _raw_spin_unlock+0x40/0x40 [ 72.354964][ T4448] ? print_memory_metadata+0x314/0x400 [ 72.360422][ T4448] ? udf_unlink+0x533/0x630 [ 72.364922][ T4448] check_panic_on_warn+0x5a/0x80 [ 72.369857][ T4448] end_report+0x6f/0x140 [ 72.374105][ T4448] kasan_report+0x128/0x150 [ 72.378582][ T4448] ? udf_unlink+0x533/0x630 [ 72.383079][ T4448] udf_unlink+0x533/0x630 [ 72.387415][ T4448] ? udf_link+0x490/0x490 [ 72.391772][ T4448] ? generic_permission+0xc6/0x440 [ 72.396895][ T4448] ? down_write+0x104/0x160 [ 72.401405][ T4448] ? down_read_killable+0x330/0x330 [ 72.406600][ T4448] vfs_unlink+0x27b/0x4a0 [ 72.410913][ T4448] do_unlinkat+0x311/0x4b0 [ 72.415388][ T4448] ? fsnotify_link_count+0xd0/0xd0 [ 72.420768][ T4448] ? getname_flags+0x115/0x440 [ 72.425503][ T4448] __x64_sys_unlink+0x44/0x50 [ 72.430153][ T4448] do_syscall_64+0x55/0xb0 [ 72.434540][ T4448] ? clear_bhb_loop+0x40/0x90 [ 72.439187][ T4448] ? clear_bhb_loop+0x40/0x90 [ 72.443849][ T4448] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 72.449715][ T4448] RIP: 0033:0x7f8edbb8e197 [ 72.454100][ T4448] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 57 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 72.473707][ T4448] RSP: 002b:00007ffd2fa9af18 EFLAGS: 00000206 ORIG_RAX: 0000000000000057 [ 72.482091][ T4448] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f8edbb8e197 [ 72.490033][ T4448] RDX: 00007ffd2fa9af40 RSI: 00007ffd2fa9afd0 RDI: 00007ffd2fa9afd0 [ 72.498005][ T4448] RBP: 00007ffd2fa9afd0 R08: 0000000000000000 R09: 0000000000000000 [ 72.505964][ T4448] R10: 0000000000000100 R11: 0000000000000206 R12: 00007ffd2fa9c0c0 [ 72.513907][ T4448] R13: 00007f8edbc11c05 R14: 0000000000011835 R15: 00007ffd2fa9e280 [ 72.521890][ T4448] [ 72.525136][ T4448] Kernel Offset: disabled [ 72.529439][ T4448] Rebooting in 86400 seconds..