Warning: Permanently added '10.128.1.162' (ED25519) to the list of known hosts. executing program [ 71.483873][ T4245] loop0: detected capacity change from 0 to 2048 [ 71.497652][ T4245] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 71.509831][ T4245] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 71.827500][ T4244] UDF-fs: error (device loop0): udf_read_inode: (ino 1345) failed !bh [ 71.836843][ T4244] UDF-fs: error (device loop0): udf_read_inode: (ino 1345) failed !bh [ 71.899899][ T4244] ================================================================== [ 71.908016][ T4244] BUG: KASAN: slab-out-of-bounds in crc_itu_t+0x218/0x2a0 [ 71.915181][ T4244] Read of size 1 at addr ffff88802f9950a8 by task syz-executor169/4244 [ 71.923411][ T4244] [ 71.925736][ T4244] CPU: 1 PID: 4244 Comm: syz-executor169 Not tainted 6.1.123-syzkaller #0 [ 71.934226][ T4244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 71.944279][ T4244] Call Trace: [ 71.947552][ T4244] [ 71.950476][ T4244] dump_stack_lvl+0x1e3/0x2cb [ 71.955164][ T4244] ? nf_tcp_handle_invalid+0x642/0x642 [ 71.960624][ T4244] ? panic+0x764/0x764 [ 71.964691][ T4244] ? _printk+0xd1/0x111 [ 71.968840][ T4244] ? __virt_addr_valid+0x17f/0x530 [ 71.973960][ T4244] ? __virt_addr_valid+0x17f/0x530 [ 71.979068][ T4244] print_report+0x15f/0x4f0 [ 71.983565][ T4244] ? __virt_addr_valid+0x17f/0x530 [ 71.988683][ T4244] ? __virt_addr_valid+0x17f/0x530 [ 71.993792][ T4244] ? __virt_addr_valid+0x45b/0x530 [ 71.998906][ T4244] ? __phys_addr+0xb6/0x170 [ 72.003417][ T4244] ? crc_itu_t+0x218/0x2a0 [ 72.007833][ T4244] kasan_report+0x136/0x160 [ 72.012330][ T4244] ? crc_itu_t+0x218/0x2a0 [ 72.016753][ T4244] crc_itu_t+0x218/0x2a0 [ 72.021002][ T4244] udf_sync_fs+0x1ce/0x380 [ 72.025420][ T4244] ? udf_put_super+0x160/0x160 [ 72.030184][ T4244] ? get_nr_dirty_inodes+0x2ab/0x2e0 [ 72.035473][ T4244] sync_filesystem+0xe8/0x220 [ 72.040150][ T4244] generic_shutdown_super+0x6b/0x340 [ 72.045438][ T4244] kill_block_super+0x7a/0xe0 [ 72.050116][ T4244] deactivate_locked_super+0xa0/0x110 [ 72.055488][ T4244] cleanup_mnt+0x490/0x520 [ 72.059924][ T4244] ? lockdep_hardirqs_on+0x94/0x130 [ 72.065154][ T4244] task_work_run+0x246/0x300 [ 72.069763][ T4244] ? kasan_quarantine_put+0xd4/0x220 [ 72.075047][ T4244] ? task_work_cancel+0x2e0/0x2e0 [ 72.080068][ T4244] ? kmem_cache_free+0x292/0x510 [ 72.085046][ T4244] ? do_exit+0xa69/0x26a0 [ 72.089389][ T4244] do_exit+0xa6e/0x26a0 [ 72.093554][ T4244] ? put_task_struct+0x80/0x80 [ 72.098357][ T4244] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 72.104343][ T4244] ? print_irqtrace_events+0x210/0x210 [ 72.109802][ T4244] ? _raw_spin_unlock_irq+0x1f/0x40 [ 72.115001][ T4244] ? lockdep_hardirqs_on+0x94/0x130 [ 72.120213][ T4244] do_group_exit+0x202/0x2b0 [ 72.124809][ T4244] __x64_sys_exit_group+0x3b/0x40 [ 72.129836][ T4244] do_syscall_64+0x3b/0xb0 [ 72.134254][ T4244] ? clear_bhb_loop+0x45/0xa0 [ 72.139013][ T4244] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 72.144910][ T4244] RIP: 0033:0x7fec297a9979 [ 72.149324][ T4244] Code: Unable to access opcode bytes at 0x7fec297a994f. [ 72.156330][ T4244] RSP: 002b:00007fffe5dc5ef8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 72.164736][ T4244] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007fec297a9979 [ 72.172701][ T4244] RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000001 [ 72.180665][ T4244] RBP: 00007fec29841390 R08: ffffffffffffffb8 R09: 0000000000000000 [ 72.188633][ T4244] R10: 0000000000000100 R11: 0000000000000246 R12: 00007fec29841390 [ 72.196600][ T4244] R13: 0000000000000000 R14: 00007fec29843160 R15: 00007fec2976fe30 [ 72.204570][ T4244] [ 72.207580][ T4244] [ 72.209893][ T4244] Allocated by task 1: [ 72.213945][ T4244] kasan_set_track+0x4b/0x70 [ 72.218527][ T4244] __kasan_slab_alloc+0x65/0x70 [ 72.223367][ T4244] slab_post_alloc_hook+0x52/0x3a0 [ 72.228474][ T4244] kmem_cache_alloc+0x10c/0x2d0 [ 72.233320][ T4244] __kernfs_new_node+0xd4/0x870 [ 72.238181][ T4244] kernfs_new_node+0x136/0x230 [ 72.242940][ T4244] __kernfs_create_file+0x45/0x2e0 [ 72.248057][ T4244] sysfs_add_file_mode_ns+0x246/0x300 [ 72.253428][ T4244] sysfs_create_file_ns+0x193/0x2a0 [ 72.258667][ T4244] device_add+0x8e5/0xfd0 [ 72.263026][ T4244] snd_register_device+0x323/0x480 [ 72.268136][ T4244] snd_rawmidi_dev_register+0x2e8/0xed0 [ 72.273673][ T4244] snd_device_register_all+0xc4/0x190 [ 72.279034][ T4244] snd_card_register+0x1ce/0x6c0 [ 72.283967][ T4244] snd_virmidi_probe+0x53e/0x7a0 [ 72.288894][ T4244] platform_probe+0x131/0x1b0 [ 72.293593][ T4244] really_probe+0x2ab/0xcb0 [ 72.298110][ T4244] __driver_probe_device+0x1a2/0x3d0 [ 72.303388][ T4244] driver_probe_device+0x50/0x420 [ 72.308408][ T4244] __device_attach_driver+0x2cf/0x510 [ 72.313772][ T4244] bus_for_each_drv+0x183/0x200 [ 72.318670][ T4244] __device_attach+0x359/0x570 [ 72.323453][ T4244] bus_probe_device+0xba/0x1e0 [ 72.328218][ T4244] device_add+0xb48/0xfd0 [ 72.332564][ T4244] platform_device_add+0x46e/0x7d0 [ 72.337682][ T4244] platform_device_register_full+0x5dc/0x6e0 [ 72.343698][ T4244] alsa_card_virmidi_init+0x159/0x2ce [ 72.349231][ T4244] do_one_initcall+0x265/0x8f0 [ 72.354029][ T4244] do_initcall_level+0x157/0x207 [ 72.359024][ T4244] do_initcalls+0x49/0x86 [ 72.363398][ T4244] kernel_init_freeable+0x45c/0x60f [ 72.368602][ T4244] kernel_init+0x19/0x290 [ 72.372929][ T4244] ret_from_fork+0x1f/0x30 [ 72.377355][ T4244] [ 72.379674][ T4244] The buggy address belongs to the object at ffff88802f995000 [ 72.379674][ T4244] which belongs to the cache kernfs_node_cache of size 168 [ 72.394327][ T4244] The buggy address is located 0 bytes to the right of [ 72.394327][ T4244] 168-byte region [ffff88802f995000, ffff88802f9950a8) [ 72.407944][ T4244] [ 72.410260][ T4244] The buggy address belongs to the physical page: [ 72.416686][ T4244] page:ffffea0000be6540 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2f995 [ 72.426828][ T4244] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 72.434403][ T4244] raw: 00fff00000000200 0000000000000000 dead000000000122 ffff888140009c80 [ 72.443069][ T4244] raw: 0000000000000000 0000000000110011 00000001ffffffff 0000000000000000 [ 72.451656][ T4244] page dumped because: kasan: bad access detected [ 72.458073][ T4244] page_owner tracks the page as allocated [ 72.463779][ T4244] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 1, tgid 1 (swapper/0), ts 17410201793, free_ts 17409367835 [ 72.481312][ T4244] post_alloc_hook+0x18d/0x1b0 [ 72.486072][ T4244] get_page_from_freelist+0x3731/0x38d0 [ 72.491640][ T4244] __alloc_pages+0x28d/0x770 [ 72.496225][ T4244] alloc_page_interleave+0x22/0x1c0 [ 72.501419][ T4244] alloc_slab_page+0x6a/0x150 [ 72.506093][ T4244] new_slab+0x84/0x2d0 [ 72.510159][ T4244] ___slab_alloc+0xc20/0x1270 [ 72.514831][ T4244] kmem_cache_alloc+0x1a5/0x2d0 [ 72.519678][ T4244] __kernfs_new_node+0xd4/0x870 [ 72.524533][ T4244] kernfs_new_node+0x136/0x230 [ 72.529295][ T4244] __kernfs_create_file+0x45/0x2e0 [ 72.534425][ T4244] sysfs_add_file_mode_ns+0x246/0x300 [ 72.539799][ T4244] sysfs_create_file_ns+0x193/0x2a0 [ 72.545005][ T4244] device_add+0x8e5/0xfd0 [ 72.549335][ T4244] snd_register_device+0x323/0x480 [ 72.554453][ T4244] snd_rawmidi_dev_register+0x2e8/0xed0 [ 72.560114][ T4244] page last free stack trace: [ 72.564782][ T4244] free_unref_page_prepare+0x12a6/0x15b0 [ 72.570420][ T4244] free_unref_page_list+0x663/0x900 [ 72.575615][ T4244] release_pages+0x24c4/0x27a0 [ 72.580374][ T4244] tlb_flush_mmu+0xfc/0x210 [ 72.584871][ T4244] tlb_finish_mmu+0xce/0x1f0 [ 72.589456][ T4244] exit_mmap+0x3b3/0x980 [ 72.593713][ T4244] __mmput+0x115/0x3c0 [ 72.597795][ T4244] free_bprm+0x135/0x2f0 [ 72.602030][ T4244] kernel_execve+0x8f1/0xa10 [ 72.606623][ T4244] call_usermodehelper_exec_async+0x22f/0x370 [ 72.612711][ T4244] ret_from_fork+0x1f/0x30 [ 72.617126][ T4244] [ 72.619458][ T4244] Memory state around the buggy address: [ 72.625078][ T4244] ffff88802f994f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 72.633129][ T4244] ffff88802f995000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 72.641177][ T4244] >ffff88802f995080: 00 00 00 00 00 fc fc fc fc fc fc fc fc 00 00 00 [ 72.649226][ T4244] ^ [ 72.654594][ T4244] ffff88802f995100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 72.662649][ T4244] ffff88802f995180: 00 00 fc fc fc fc fc fc fc fc 00 00 00 00 00 00 [ 72.670700][ T4244] ================================================================== [ 72.679011][ T4244] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 72.686261][ T4244] CPU: 1 PID: 4244 Comm: syz-executor169 Not tainted 6.1.123-syzkaller #0 [ 72.694761][ T4244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 72.704817][ T4244] Call Trace: [ 72.708095][ T4244] [ 72.711024][ T4244] dump_stack_lvl+0x1e3/0x2cb [ 72.715718][ T4244] ? nf_tcp_handle_invalid+0x642/0x642 [ 72.721185][ T4244] ? panic+0x764/0x764 [ 72.725255][ T4244] ? preempt_schedule_common+0xa6/0xd0 [ 72.730716][ T4244] ? vscnprintf+0x59/0x80 [ 72.735048][ T4244] panic+0x318/0x764 [ 72.738945][ T4244] ? check_panic_on_warn+0x1d/0xa0 [ 72.744071][ T4244] ? memcpy_page_flushcache+0xfc/0xfc [ 72.749466][ T4244] ? _raw_spin_unlock_irqrestore+0x128/0x130 [ 72.755494][ T4244] ? _raw_spin_unlock+0x40/0x40 [ 72.760369][ T4244] ? print_report+0x4a3/0x4f0 [ 72.765069][ T4244] check_panic_on_warn+0x7e/0xa0 [ 72.770019][ T4244] ? crc_itu_t+0x218/0x2a0 [ 72.774450][ T4244] end_report+0x66/0x110 [ 72.778692][ T4244] kasan_report+0x143/0x160 [ 72.783212][ T4244] ? crc_itu_t+0x218/0x2a0 [ 72.787639][ T4244] crc_itu_t+0x218/0x2a0 [ 72.791893][ T4244] udf_sync_fs+0x1ce/0x380 [ 72.796328][ T4244] ? udf_put_super+0x160/0x160 [ 72.801102][ T4244] ? get_nr_dirty_inodes+0x2ab/0x2e0 [ 72.806414][ T4244] sync_filesystem+0xe8/0x220 [ 72.811094][ T4244] generic_shutdown_super+0x6b/0x340 [ 72.816393][ T4244] kill_block_super+0x7a/0xe0 [ 72.821079][ T4244] deactivate_locked_super+0xa0/0x110 [ 72.826459][ T4244] cleanup_mnt+0x490/0x520 [ 72.830885][ T4244] ? lockdep_hardirqs_on+0x94/0x130 [ 72.836092][ T4244] task_work_run+0x246/0x300 [ 72.840690][ T4244] ? kasan_quarantine_put+0xd4/0x220 [ 72.845983][ T4244] ? task_work_cancel+0x2e0/0x2e0 [ 72.851013][ T4244] ? kmem_cache_free+0x292/0x510 [ 72.855966][ T4244] ? do_exit+0xa69/0x26a0 [ 72.860304][ T4244] do_exit+0xa6e/0x26a0 [ 72.864475][ T4244] ? put_task_struct+0x80/0x80 [ 72.869249][ T4244] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 72.875239][ T4244] ? print_irqtrace_events+0x210/0x210 [ 72.880708][ T4244] ? _raw_spin_unlock_irq+0x1f/0x40 [ 72.885913][ T4244] ? lockdep_hardirqs_on+0x94/0x130 [ 72.891114][ T4244] do_group_exit+0x202/0x2b0 [ 72.895714][ T4244] __x64_sys_exit_group+0x3b/0x40 [ 72.900743][ T4244] do_syscall_64+0x3b/0xb0 [ 72.905254][ T4244] ? clear_bhb_loop+0x45/0xa0 [ 72.909957][ T4244] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 72.915861][ T4244] RIP: 0033:0x7fec297a9979 [ 72.920279][ T4244] Code: Unable to access opcode bytes at 0x7fec297a994f. [ 72.927291][ T4244] RSP: 002b:00007fffe5dc5ef8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 72.935705][ T4244] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007fec297a9979 [ 72.943693][ T4244] RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000001 [ 72.951663][ T4244] RBP: 00007fec29841390 R08: ffffffffffffffb8 R09: 0000000000000000 [ 72.959634][ T4244] R10: 0000000000000100 R11: 0000000000000246 R12: 00007fec29841390 [ 72.967607][ T4244] R13: 0000000000000000 R14: 00007fec29843160 R15: 00007fec2976fe30 [ 72.975584][ T4244] [ 72.978955][ T4244] Kernel Offset: disabled [ 72.983311][ T4244] Rebooting in 86400 seconds..