Warning: Permanently added '10.128.1.30' (ED25519) to the list of known hosts. 2023/12/07 05:25:04 ignoring optional flag "sandboxArg"="0" 2023/12/07 05:25:04 parsed 1 programs 2023/12/07 05:25:04 executed programs: 0 [ 44.168330][ T1591] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 46.562537][ T2015] loop0: detected capacity change from 0 to 2048 [ 46.570564][ T2015] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 46.582414][ T2015] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 46.593507][ T2015] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 46.605072][ T2015] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 46.613710][ T2015] UDF-fs: Scanning with blocksize 512 failed [ 46.621193][ T2015] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 46.663357][ T1597] ================================================================== [ 46.671439][ T1597] BUG: KASAN: use-after-free in crc_itu_t+0x9c/0xc0 [ 46.678173][ T1597] Read of size 1 at addr ffff88806b8e3000 by task syz-executor.0/1597 [ 46.686633][ T1597] [ 46.688938][ T1597] CPU: 1 PID: 1597 Comm: syz-executor.0 Not tainted 5.15.141-syzkaller #0 [ 46.697433][ T1597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 46.708789][ T1597] Call Trace: [ 46.712597][ T1597] [ 46.715533][ T1597] dump_stack_lvl+0x41/0x5e [ 46.720103][ T1597] print_address_description.constprop.0.cold+0x6c/0x309 [ 46.727178][ T1597] ? crc_itu_t+0x9c/0xc0 [ 46.731389][ T1597] ? crc_itu_t+0x9c/0xc0 [ 46.735801][ T1597] kasan_report.cold+0x83/0xdf [ 46.740646][ T1597] ? crc_itu_t+0x9c/0xc0 [ 46.745015][ T1597] crc_itu_t+0x9c/0xc0 [ 46.749190][ T1597] udf_finalize_lvid+0xdb/0x1d0 [ 46.754897][ T1597] ? udf_mount+0x10/0x10 [ 46.759260][ T1597] ? __dentry_kill+0x3d5/0x5e0 [ 46.764043][ T1597] udf_sync_fs+0xc9/0x130 [ 46.768455][ T1597] sync_filesystem.part.0+0x63/0x170 [ 46.774106][ T1597] generic_shutdown_super+0x64/0x320 [ 46.779726][ T1597] kill_block_super+0x93/0xd0 [ 46.784771][ T1597] deactivate_locked_super+0x7b/0x130 [ 46.790406][ T1597] cleanup_mnt+0x2b8/0x3e0 [ 46.795309][ T1597] task_work_run+0xb8/0x140 [ 46.800159][ T1597] exit_to_user_mode_prepare+0x15a/0x160 [ 46.805876][ T1597] syscall_exit_to_user_mode+0x12/0x30 [ 46.811425][ T1597] do_syscall_64+0x42/0x80 [ 46.816083][ T1597] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 46.822269][ T1597] RIP: 0033:0x7fb19e703e57 [ 46.826763][ T1597] Code: b0 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b0 ff ff ff f7 d8 64 89 02 b8 [ 46.846599][ T1597] RSP: 002b:00007ffd3723e848 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 46.855354][ T1597] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fb19e703e57 [ 46.863705][ T1597] RDX: 0000000000000000 RSI: 000000000000000a RDI: 00007ffd3723e900 [ 46.872274][ T1597] RBP: 00007ffd3723e900 R08: 0000000000000000 R09: 0000000000000000 [ 46.881162][ T1597] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd3723f9c0 [ 46.889818][ T1597] R13: 00007fb19e74d3b9 R14: 000000000000b5ae R15: 0000000000000006 [ 46.897853][ T1597] [ 46.900861][ T1597] [ 46.903164][ T1597] The buggy address belongs to the page: [ 46.908952][ T1597] page:ffffea0001ae38c0 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1 pfn:0x6b8e3 [ 46.919257][ T1597] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 46.926796][ T1597] raw: 00fff00000000000 ffffea0001b8ef88 ffffea0001ae3c08 0000000000000000 [ 46.935858][ T1597] raw: 0000000000000001 0000000000000000 00000000ffffffff 0000000000000000 [ 46.944584][ T1597] page dumped because: kasan: bad access detected [ 46.951086][ T1597] page_owner tracks the page as freed [ 46.956545][ T1597] page last allocated via order 0, migratetype Movable, gfp_mask 0x1100cca(GFP_HIGHUSER_MOVABLE), pid 2014, ts 46552110945, free_ts 46660472559 [ 46.971091][ T1597] get_page_from_freelist+0x12d1/0x2d40 [ 46.977366][ T1597] __alloc_pages+0x1b2/0x440 [ 46.982675][ T1597] alloc_pages_vma+0xe0/0x650 [ 46.987426][ T1597] wp_page_copy+0x18c/0x1890 [ 46.992389][ T1597] __handle_mm_fault+0x15ac/0x33c0 [ 46.997477][ T1597] handle_mm_fault+0x1c5/0x5b0 [ 47.002490][ T1597] do_user_addr_fault+0x298/0xcb0 [ 47.007574][ T1597] exc_page_fault+0x5a/0xb0 [ 47.012402][ T1597] asm_exc_page_fault+0x22/0x30 [ 47.017421][ T1597] page last free stack trace: [ 47.022061][ T1597] free_pcp_prepare+0x379/0x850 [ 47.026991][ T1597] free_unref_page_list+0x16f/0xbd0 [ 47.032253][ T1597] release_pages+0xb3a/0x1480 [ 47.037290][ T1597] tlb_finish_mmu+0x127/0x790 [ 47.041932][ T1597] exit_mmap+0x1b7/0x530 [ 47.046255][ T1597] mmput+0xd6/0x400 [ 47.050130][ T1597] do_exit+0x884/0x2200 [ 47.054277][ T1597] do_group_exit+0xe7/0x290 [ 47.058837][ T1597] get_signal+0x279/0x1f00 [ 47.063239][ T1597] arch_do_signal_or_restart+0x2b5/0x17b0 [ 47.069137][ T1597] exit_to_user_mode_prepare+0xef/0x160 [ 47.074913][ T1597] syscall_exit_to_user_mode+0x12/0x30 [ 47.080357][ T1597] do_syscall_64+0x42/0x80 [ 47.084939][ T1597] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 47.091359][ T1597] [ 47.093665][ T1597] Memory state around the buggy address: [ 47.099369][ T1597] ffff88806b8e2f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 47.107574][ T1597] ffff88806b8e2f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 47.115984][ T1597] >ffff88806b8e3000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 47.124212][ T1597] ^ [ 47.128335][ T1597] ffff88806b8e3080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 47.136954][ T1597] ffff88806b8e3100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 47.145375][ T1597] ================================================================== [ 47.153533][ T1597] Disabling lock debugging due to kernel taint [ 47.160817][ T1597] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 47.168574][ T1597] Kernel Offset: disabled [ 47.172879][ T1597] Rebooting in 86400 seconds..