Warning: Permanently added '10.128.0.194' (ED25519) to the list of known hosts. 2023/12/30 22:36:17 ignoring optional flag "sandboxArg"="0" 2023/12/30 22:36:17 parsed 1 programs 2023/12/30 22:36:17 executed programs: 0 [ 54.353435][ T1994] loop0: detected capacity change from 0 to 2048 [ 54.361341][ T1994] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 54.372840][ T1994] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 54.384264][ T1994] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 54.394912][ T1994] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 54.402632][ T1994] UDF-fs: Scanning with blocksize 512 failed [ 54.411390][ T1994] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 54.484232][ T1997] loop0: detected capacity change from 0 to 2048 [ 54.494910][ T1997] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 54.507304][ T1997] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 54.518968][ T1997] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 54.529854][ T1997] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 54.537601][ T1997] UDF-fs: Scanning with blocksize 512 failed [ 54.545280][ T1997] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 54.601041][ T1583] ================================================================== [ 54.609136][ T1583] BUG: KASAN: out-of-bounds in crc_itu_t+0x178/0x240 [ 54.615988][ T1583] Read of size 1 at addr ffff88806a5ae000 by task syz-executor.0/1583 [ 54.624124][ T1583] [ 54.626475][ T1583] CPU: 1 PID: 1583 Comm: syz-executor.0 Not tainted 6.1.69-syzkaller #0 [ 54.634872][ T1583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 54.645175][ T1583] Call Trace: [ 54.648444][ T1583] [ 54.651350][ T1583] dump_stack_lvl+0xf4/0x251 [ 54.656175][ T1583] ? nf_tcp_handle_invalid+0x2f3/0x2f3 [ 54.661603][ T1583] ? panic+0x3f7/0x3f7 [ 54.665658][ T1583] ? _printk+0xca/0x10a [ 54.669785][ T1583] ? ktime_get_real_ts64+0x340/0x340 [ 54.675041][ T1583] print_report+0x15f/0x4f0 [ 54.679513][ T1583] ? crc_itu_t+0x178/0x240 [ 54.683922][ T1583] kasan_report+0x136/0x160 [ 54.688412][ T1583] ? crc_itu_t+0x178/0x240 [ 54.693144][ T1583] crc_itu_t+0x178/0x240 [ 54.697382][ T1583] udf_sync_fs+0x1bd/0x370 [ 54.701767][ T1583] ? udf_put_super+0x130/0x130 [ 54.706970][ T1583] ? dentry_kill+0xbb/0x1e0 [ 54.711645][ T1583] ? dput+0x38/0x2b0 [ 54.715617][ T1583] sync_filesystem+0xbf/0x180 [ 54.720277][ T1583] generic_shutdown_super+0x65/0x2c0 [ 54.726425][ T1583] kill_block_super+0x75/0xb0 [ 54.731457][ T1583] deactivate_locked_super+0x71/0xd0 [ 54.736751][ T1583] cleanup_mnt+0x2bd/0x330 [ 54.741151][ T1583] task_work_run+0x206/0x280 [ 54.745719][ T1583] ? task_work_cancel+0x2a0/0x2a0 [ 54.750802][ T1583] ? __x64_sys_umount+0xe4/0x120 [ 54.755920][ T1583] ? path_umount+0xc70/0xc70 [ 54.760762][ T1583] exit_to_user_mode_loop+0xa9/0xc0 [ 54.766084][ T1583] exit_to_user_mode_prepare+0x64/0xb0 [ 54.771795][ T1583] syscall_exit_to_user_mode+0x27/0x1c0 [ 54.777506][ T1583] do_syscall_64+0x49/0x80 [ 54.782166][ T1583] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 54.788073][ T1583] RIP: 0033:0x7f9dc247dc87 [ 54.792531][ T1583] Code: b0 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b0 ff ff ff f7 d8 64 89 02 b8 [ 54.812955][ T1583] RSP: 002b:00007ffc5c1f1038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 54.821530][ T1583] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f9dc247dc87 [ 54.829930][ T1583] RDX: 0000000000000000 RSI: 000000000000000a RDI: 00007ffc5c1f10f0 [ 54.838147][ T1583] RBP: 00007ffc5c1f10f0 R08: 0000000000000000 R09: 0000000000000000 [ 54.846103][ T1583] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc5c1f21b0 [ 54.854233][ T1583] R13: 00007f9dc24d7c5a R14: 000000000000d4ac R15: 0000000000000006 [ 54.862274][ T1583] [ 54.865373][ T1583] [ 54.867671][ T1583] The buggy address belongs to the physical page: [ 54.874376][ T1583] page:ffffea0001a96b80 refcount:2 mapcount:1 mapping:0000000000000000 index:0xc000067 pfn:0x6a5ae [ 54.885811][ T1583] memcg:ffff8880092f0000 [ 54.890118][ T1583] anon flags: 0xfff000000a0004(uptodate|mappedtodisk|swapbacked|node=0|zone=1|lastcpupid=0x7ff) [ 54.901285][ T1583] raw: 00fff000000a0004 0000000000000000 dead000000000122 ffff88807c9c9111 [ 54.909928][ T1583] raw: 000000000c000067 0000000000000000 0000000200000000 ffff8880092f0000 [ 54.918500][ T1583] page dumped because: kasan: bad access detected [ 54.924977][ T1583] page_owner tracks the page as allocated [ 54.930663][ T1583] page last allocated via order 0, migratetype Movable, gfp_mask 0x140dca(GFP_HIGHUSER_MOVABLE|__GFP_COMP|__GFP_ZERO), pid 1998, tgid 1574 (syz-execprog), ts 54602089165, free_ts 54598303532 [ 54.949976][ T1583] post_alloc_hook+0x286/0x2b0 [ 54.955511][ T1583] get_page_from_freelist+0x2fdd/0x3170 [ 54.961034][ T1583] __alloc_pages+0x251/0x640 [ 54.965609][ T1583] __folio_alloc+0xf/0x30 [ 54.970100][ T1583] vma_alloc_folio+0x484/0x9e0 [ 54.975029][ T1583] handle_mm_fault+0x232f/0x4260 [ 54.979945][ T1583] exc_page_fault+0x22a/0x5e0 [ 54.984705][ T1583] asm_exc_page_fault+0x22/0x30 [ 54.989710][ T1583] page last free stack trace: [ 54.994452][ T1583] free_unref_page_prepare+0xd4b/0xee0 [ 55.000690][ T1583] free_unref_page_list+0x54b/0x7e0 [ 55.005991][ T1583] release_pages+0x175c/0x1900 [ 55.010737][ T1583] tlb_flush_mmu+0xe5/0x1d0 [ 55.015229][ T1583] tlb_finish_mmu+0xb0/0x1b0 [ 55.019798][ T1583] exit_mmap+0x341/0x730 [ 55.024017][ T1583] __mmput+0x9b/0x2d0 [ 55.028238][ T1583] exit_mm+0x122/0x1b0 [ 55.032368][ T1583] do_exit+0x81e/0x23a0 [ 55.036577][ T1583] do_group_exit+0x1b5/0x280 [ 55.041224][ T1583] __x64_sys_exit_group+0x3b/0x40 [ 55.046404][ T1583] do_syscall_64+0x3d/0x80 [ 55.050898][ T1583] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 55.056959][ T1583] [ 55.059448][ T1583] Memory state around the buggy address: [ 55.065220][ T1583] ffff88806a5adf00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 55.073290][ T1583] ffff88806a5adf80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 55.081508][ T1583] >ffff88806a5ae000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 55.089625][ T1583] ^ [ 55.094113][ T1583] ffff88806a5ae080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 55.102509][ T1583] ffff88806a5ae100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 55.110559][ T1583] ================================================================== [ 55.119291][ T1583] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 55.127011][ T1583] Kernel Offset: disabled [ 55.131322][ T1583] Rebooting in 86400 seconds..