Warning: Permanently added '10.128.1.85' (ED25519) to the list of known hosts. 2023/12/30 14:36:54 ignoring optional flag "sandboxArg"="0" 2023/12/30 14:36:54 parsed 1 programs 2023/12/30 14:36:54 executed programs: 0 [ 44.979064][ T2012] loop0: detected capacity change from 0 to 2048 [ 44.986968][ T2012] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 44.998341][ T2012] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 45.009248][ T2012] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 45.020044][ T2012] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 45.027886][ T2012] UDF-fs: Scanning with blocksize 512 failed [ 45.035555][ T2012] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 45.082155][ T1594] ================================================================== [ 45.090382][ T1594] BUG: KASAN: use-after-free in crc_itu_t+0x9c/0xc0 [ 45.097223][ T1594] Read of size 1 at addr ffff88806a18f000 by task syz-executor.0/1594 [ 45.105672][ T1594] [ 45.108106][ T1594] CPU: 1 PID: 1594 Comm: syz-executor.0 Not tainted 5.15.145-syzkaller #0 [ 45.117781][ T1594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 45.128310][ T1594] Call Trace: [ 45.131605][ T1594] [ 45.134522][ T1594] dump_stack_lvl+0x41/0x5e [ 45.139014][ T1594] print_address_description.constprop.0.cold+0x6c/0x309 [ 45.146186][ T1594] ? crc_itu_t+0x9c/0xc0 [ 45.150410][ T1594] ? crc_itu_t+0x9c/0xc0 [ 45.154878][ T1594] kasan_report.cold+0x83/0xdf [ 45.159709][ T1594] ? crc_itu_t+0x9c/0xc0 [ 45.163918][ T1594] crc_itu_t+0x9c/0xc0 [ 45.168093][ T1594] udf_finalize_lvid+0xdb/0x1d0 [ 45.173237][ T1594] ? udf_mount+0x10/0x10 [ 45.177467][ T1594] ? __dentry_kill+0x3d5/0x5e0 [ 45.182344][ T1594] udf_sync_fs+0xc9/0x130 [ 45.186651][ T1594] sync_filesystem.part.0+0x63/0x170 [ 45.192084][ T1594] generic_shutdown_super+0x64/0x320 [ 45.197636][ T1594] kill_block_super+0x93/0xd0 [ 45.202369][ T1594] deactivate_locked_super+0x7b/0x130 [ 45.207971][ T1594] cleanup_mnt+0x2b8/0x3e0 [ 45.212360][ T1594] task_work_run+0xb8/0x140 [ 45.217006][ T1594] exit_to_user_mode_prepare+0x15a/0x160 [ 45.223302][ T1594] syscall_exit_to_user_mode+0x12/0x30 [ 45.228746][ T1594] do_syscall_64+0x42/0x80 [ 45.233146][ T1594] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 45.239160][ T1594] RIP: 0033:0x7f9360048c87 [ 45.243560][ T1594] Code: b0 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b0 ff ff ff f7 d8 64 89 02 b8 [ 45.263591][ T1594] RSP: 002b:00007ffc11df1568 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 45.272725][ T1594] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f9360048c87 [ 45.280951][ T1594] RDX: 0000000000000000 RSI: 000000000000000a RDI: 00007ffc11df1620 [ 45.288997][ T1594] RBP: 00007ffc11df1620 R08: 0000000000000000 R09: 0000000000000000 [ 45.297124][ T1594] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc11df26e0 [ 45.306152][ T1594] R13: 00007f93600a2c5a R14: 000000000000af93 R15: 0000000000000006 [ 45.314509][ T1594] [ 45.317945][ T1594] [ 45.320446][ T1594] The buggy address belongs to the page: [ 45.326428][ T1594] page:ffffea0001a863c0 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1 pfn:0x6a18f [ 45.336738][ T1594] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 45.343992][ T1594] raw: 00fff00000000000 ffffea0001a85448 ffffea0001a85288 0000000000000000 [ 45.352549][ T1594] raw: 0000000000000001 0000000000000000 00000000ffffffff 0000000000000000 [ 45.361648][ T1594] page dumped because: kasan: bad access detected [ 45.368182][ T1594] page_owner tracks the page as freed [ 45.373537][ T1594] page last allocated via order 0, migratetype Movable, gfp_mask 0x1100dca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), pid 1865, ts 44225847799, free_ts 44226754778 [ 45.389221][ T1594] get_page_from_freelist+0x12d1/0x2d40 [ 45.394830][ T1594] __alloc_pages+0x1b2/0x440 [ 45.399421][ T1594] alloc_pages_vma+0xe0/0x650 [ 45.404188][ T1594] __handle_mm_fault+0x1ce9/0x33c0 [ 45.409790][ T1594] handle_mm_fault+0x1c5/0x5b0 [ 45.414907][ T1594] do_user_addr_fault+0x298/0xcb0 [ 45.419999][ T1594] exc_page_fault+0x5a/0xb0 [ 45.424590][ T1594] asm_exc_page_fault+0x22/0x30 [ 45.429420][ T1594] page last free stack trace: [ 45.434337][ T1594] free_pcp_prepare+0x379/0x850 [ 45.439347][ T1594] free_unref_page_list+0x16f/0xbd0 [ 45.444519][ T1594] release_pages+0xb3a/0x1480 [ 45.449168][ T1594] tlb_finish_mmu+0x127/0x790 [ 45.453988][ T1594] exit_mmap+0x1b7/0x530 [ 45.458287][ T1594] mmput+0xd6/0x400 [ 45.462156][ T1594] do_exit+0x884/0x2200 [ 45.466383][ T1594] do_group_exit+0xe7/0x290 [ 45.470967][ T1594] __x64_sys_exit_group+0x35/0x40 [ 45.475993][ T1594] do_syscall_64+0x35/0x80 [ 45.480553][ T1594] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 45.486660][ T1594] [ 45.489089][ T1594] Memory state around the buggy address: [ 45.494876][ T1594] ffff88806a18ef00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 45.503608][ T1594] ffff88806a18ef80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 45.511734][ T1594] >ffff88806a18f000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 45.519781][ T1594] ^ [ 45.523957][ T1594] ffff88806a18f080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 45.532362][ T1594] ffff88806a18f100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 45.540562][ T1594] ================================================================== [ 45.548852][ T1594] Disabling lock debugging due to kernel taint [ 45.555798][ T1594] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 45.563150][ T1594] Kernel Offset: disabled [ 45.567813][ T1594] Rebooting in 86400 seconds..