Warning: Permanently added '10.128.1.166' (ECDSA) to the list of known hosts. executing program [ 51.726125][ T3500] loop0: detected capacity change from 0 to 2048 [ 51.734579][ T3500] ======================================================= [ 51.734579][ T3500] WARNING: The mand mount option has been deprecated and [ 51.734579][ T3500] and is ignored by this kernel. Remove the mand [ 51.734579][ T3500] option from the mount to silence this warning. [ 51.734579][ T3500] ======================================================= executing program [ 52.069062][ T3502] loop0: detected capacity change from 0 to 2048 executing program [ 52.342139][ T3503] loop0: detected capacity change from 0 to 2048 executing program [ 52.623011][ T3504] loop0: detected capacity change from 0 to 2048 [ 52.788320][ T3499] ================================================================== [ 52.796640][ T3499] BUG: KASAN: use-after-free in crc_itu_t+0x1d1/0x2a0 [ 52.803457][ T3499] Read of size 1 at addr ffff88807151a000 by task syz-executor312/3499 [ 52.811710][ T3499] [ 52.814027][ T3499] CPU: 0 PID: 3499 Comm: syz-executor312 Not tainted 5.15.118-syzkaller #0 [ 52.822632][ T3499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023 [ 52.832690][ T3499] Call Trace: [ 52.835967][ T3499] [ 52.838885][ T3499] dump_stack_lvl+0x1e3/0x2cb [ 52.843563][ T3499] ? io_uring_drop_tctx_refs+0x19d/0x19d [ 52.849193][ T3499] ? _printk+0xd1/0x111 [ 52.853357][ T3499] ? __wake_up_klogd+0xcc/0x100 [ 52.858214][ T3499] ? panic+0x84d/0x84d [ 52.862282][ T3499] ? _raw_spin_lock_irqsave+0xdd/0x120 [ 52.867742][ T3499] print_address_description+0x63/0x3b0 [ 52.873282][ T3499] ? crc_itu_t+0x1d1/0x2a0 [ 52.877694][ T3499] kasan_report+0x16b/0x1c0 [ 52.882192][ T3499] ? crc_itu_t+0x1d1/0x2a0 [ 52.886603][ T3499] ? pvclock_gtod_unregister_notifier+0x50/0x50 [ 52.893195][ T3499] crc_itu_t+0x1d1/0x2a0 [ 52.897442][ T3499] udf_sync_fs+0x1ce/0x380 [ 52.901889][ T3499] ? udf_put_super+0x160/0x160 [ 52.906646][ T3499] ? get_nr_dirty_inodes+0x25f/0x2e0 [ 52.911927][ T3499] sync_filesystem+0xe8/0x220 [ 52.916621][ T3499] generic_shutdown_super+0x6e/0x2c0 [ 52.921902][ T3499] kill_block_super+0x7a/0xe0 [ 52.926573][ T3499] deactivate_locked_super+0xa0/0x110 [ 52.931937][ T3499] cleanup_mnt+0x44e/0x500 [ 52.936343][ T3499] ? lockdep_hardirqs_on+0x94/0x130 [ 52.941541][ T3499] task_work_run+0x129/0x1a0 [ 52.946133][ T3499] exit_to_user_mode_loop+0x106/0x130 [ 52.951512][ T3499] exit_to_user_mode_prepare+0xb1/0x140 [ 52.957047][ T3499] syscall_exit_to_user_mode+0x5d/0x250 [ 52.962598][ T3499] do_syscall_64+0x49/0xb0 [ 52.967022][ T3499] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 52.972911][ T3499] RIP: 0033:0x7f0ae963ffc7 [ 52.977317][ T3499] Code: 09 00 48 83 c4 08 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 a6 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 52.996914][ T3499] RSP: 002b:00007ffc0b0a3738 EFLAGS: 00000202 ORIG_RAX: 00000000000000a6 [ 53.005323][ T3499] RAX: 0000000000000000 RBX: 000000000000cd63 RCX: 00007f0ae963ffc7 [ 53.013321][ T3499] RDX: 00007ffc0b0a37f7 RSI: 000000000000000a RDI: 00007ffc0b0a37f0 [ 53.021281][ T3499] RBP: 00007ffc0b0a37f0 R08: 00000000ffffffff R09: 00007ffc0b0a35d0 [ 53.029247][ T3499] R10: 0000555556ac0633 R11: 0000000000000202 R12: 00007ffc0b0a4860 [ 53.037211][ T3499] R13: 0000555556ac05f0 R14: 00007ffc0b0a3760 R15: 0000000000000004 [ 53.045186][ T3499] [ 53.048379][ T3499] [ 53.050691][ T3499] The buggy address belongs to the page: [ 53.056303][ T3499] page:ffffea0001c54680 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1 pfn:0x7151a [ 53.066450][ T3499] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 53.073554][ T3499] raw: 00fff00000000000 ffffea0001c55708 ffffea0001c6d808 0000000000000000 [ 53.082124][ T3499] raw: 0000000000000001 0000000000000000 00000000ffffffff 0000000000000000 [ 53.090689][ T3499] page dumped because: kasan: bad access detected [ 53.097083][ T3499] page_owner tracks the page as freed [ 53.102433][ T3499] page last allocated via order 0, migratetype Movable, gfp_mask 0x1100dca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), pid 3503, ts 52370546917, free_ts 52388593072 [ 53.117956][ T3499] get_page_from_freelist+0x322a/0x33c0 [ 53.123497][ T3499] __alloc_pages+0x272/0x700 [ 53.128078][ T3499] alloc_pages_vma+0x39a/0x800 [ 53.132841][ T3499] handle_mm_fault+0x2f49/0x5950 [ 53.137780][ T3499] exc_page_fault+0x271/0x740 [ 53.142448][ T3499] asm_exc_page_fault+0x22/0x30 [ 53.147294][ T3499] page last free stack trace: [ 53.151948][ T3499] free_unref_page_prepare+0xc34/0xcf0 [ 53.157403][ T3499] free_unref_page_list+0x1f7/0x8e0 [ 53.162599][ T3499] release_pages+0x1bb9/0x1f40 [ 53.167363][ T3499] tlb_finish_mmu+0x177/0x320 [ 53.172025][ T3499] unmap_region+0x304/0x350 [ 53.176519][ T3499] __do_munmap+0x12db/0x1740 [ 53.181108][ T3499] __vm_munmap+0x134/0x230 [ 53.185516][ T3499] __x64_sys_munmap+0x67/0x70 [ 53.190185][ T3499] do_syscall_64+0x3d/0xb0 [ 53.194592][ T3499] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 53.200481][ T3499] [ 53.202792][ T3499] Memory state around the buggy address: [ 53.208409][ T3499] ffff888071519f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 53.216460][ T3499] ffff888071519f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 53.224514][ T3499] >ffff88807151a000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 53.232559][ T3499] ^ [ 53.236617][ T3499] ffff88807151a080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 53.244668][ T3499] ffff88807151a100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 53.252716][ T3499] ================================================================== [ 53.260764][ T3499] Disabling lock debugging due to kernel taint [ 53.267628][ T3499] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 53.274837][ T3499] CPU: 0 PID: 3499 Comm: syz-executor312 Tainted: G B 5.15.118-syzkaller #0 [ 53.284803][ T3499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023 [ 53.294864][ T3499] Call Trace: [ 53.298130][ T3499] [ 53.301053][ T3499] dump_stack_lvl+0x1e3/0x2cb [ 53.305721][ T3499] ? io_uring_drop_tctx_refs+0x19d/0x19d [ 53.311340][ T3499] ? panic+0x84d/0x84d [ 53.315392][ T3499] ? preempt_schedule_common+0xa6/0xd0 [ 53.320855][ T3499] ? preempt_schedule+0xd9/0xe0 [ 53.325694][ T3499] panic+0x318/0x84d [ 53.329579][ T3499] ? check_panic_on_warn+0x1d/0xa0 [ 53.334678][ T3499] ? fb_is_primary_device+0xcc/0xcc [ 53.339896][ T3499] ? _raw_spin_unlock_irqrestore+0x128/0x130 [ 53.345867][ T3499] ? _raw_spin_unlock+0x40/0x40 [ 53.350702][ T3499] ? print_memory_metadata+0xe2/0x140 [ 53.356068][ T3499] check_panic_on_warn+0x7e/0xa0 [ 53.361003][ T3499] ? crc_itu_t+0x1d1/0x2a0 [ 53.365405][ T3499] end_report+0x6d/0xf0 [ 53.369561][ T3499] kasan_report+0x18e/0x1c0 [ 53.374052][ T3499] ? crc_itu_t+0x1d1/0x2a0 [ 53.378453][ T3499] ? pvclock_gtod_unregister_notifier+0x50/0x50 [ 53.384728][ T3499] crc_itu_t+0x1d1/0x2a0 [ 53.388961][ T3499] udf_sync_fs+0x1ce/0x380 [ 53.393362][ T3499] ? udf_put_super+0x160/0x160 [ 53.398122][ T3499] ? get_nr_dirty_inodes+0x25f/0x2e0 [ 53.403394][ T3499] sync_filesystem+0xe8/0x220 [ 53.408071][ T3499] generic_shutdown_super+0x6e/0x2c0 [ 53.413362][ T3499] kill_block_super+0x7a/0xe0 [ 53.418037][ T3499] deactivate_locked_super+0xa0/0x110 [ 53.423402][ T3499] cleanup_mnt+0x44e/0x500 [ 53.427832][ T3499] ? lockdep_hardirqs_on+0x94/0x130 [ 53.433033][ T3499] task_work_run+0x129/0x1a0 [ 53.437614][ T3499] exit_to_user_mode_loop+0x106/0x130 [ 53.443011][ T3499] exit_to_user_mode_prepare+0xb1/0x140 [ 53.448545][ T3499] syscall_exit_to_user_mode+0x5d/0x250 [ 53.454084][ T3499] do_syscall_64+0x49/0xb0 [ 53.458488][ T3499] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 53.464373][ T3499] RIP: 0033:0x7f0ae963ffc7 [ 53.468779][ T3499] Code: 09 00 48 83 c4 08 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 a6 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 53.488370][ T3499] RSP: 002b:00007ffc0b0a3738 EFLAGS: 00000202 ORIG_RAX: 00000000000000a6 [ 53.496769][ T3499] RAX: 0000000000000000 RBX: 000000000000cd63 RCX: 00007f0ae963ffc7 [ 53.504724][ T3499] RDX: 00007ffc0b0a37f7 RSI: 000000000000000a RDI: 00007ffc0b0a37f0 [ 53.512687][ T3499] RBP: 00007ffc0b0a37f0 R08: 00000000ffffffff R09: 00007ffc0b0a35d0 [ 53.520653][ T3499] R10: 0000555556ac0633 R11: 0000000000000202 R12: 00007ffc0b0a4860 [ 53.528611][ T3499] R13: 0000555556ac05f0 R14: 00007ffc0b0a3760 R15: 0000000000000004 [ 53.536572][ T3499] [ 53.539903][ T3499] Kernel Offset: disabled [ 53.544307][ T3499] Rebooting in 86400 seconds..