Warning: Permanently added '10.128.1.60' (ED25519) to the list of known hosts. 2024/03/07 10:23:41 ignoring optional flag "sandboxArg"="0" 2024/03/07 10:23:41 parsed 1 programs 2024/03/07 10:23:41 executed programs: 0 [ 48.597241][ T2012] loop0: detected capacity change from 0 to 2048 [ 48.604723][ T2012] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 48.615805][ T2012] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 48.626615][ T2012] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 48.637279][ T2012] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 48.644996][ T2012] UDF-fs: Scanning with blocksize 512 failed [ 48.652302][ T2012] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 48.754261][ T2015] loop0: detected capacity change from 0 to 2048 [ 48.761845][ T2015] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 48.772947][ T2015] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 48.784043][ T2015] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 48.794649][ T2015] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 48.802346][ T2015] UDF-fs: Scanning with blocksize 512 failed [ 48.809153][ T2015] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 48.843721][ T1594] ================================================================== [ 48.852233][ T1594] BUG: KASAN: use-after-free in crc_itu_t+0x9c/0xc0 [ 48.858806][ T1594] Read of size 1 at addr ffff88806a3dc000 by task syz-executor.0/1594 [ 48.867073][ T1594] [ 48.869460][ T1594] CPU: 0 PID: 1594 Comm: syz-executor.0 Not tainted 5.15.151-syzkaller #0 [ 48.878093][ T1594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 48.888208][ T1594] Call Trace: [ 48.891477][ T1594] [ 48.894494][ T1594] dump_stack_lvl+0x41/0x5e [ 48.899052][ T1594] print_address_description.constprop.0.cold+0x6c/0x309 [ 48.906127][ T1594] ? crc_itu_t+0x9c/0xc0 [ 48.910347][ T1594] ? crc_itu_t+0x9c/0xc0 [ 48.914561][ T1594] kasan_report.cold+0x83/0xdf [ 48.919380][ T1594] ? crc_itu_t+0x9c/0xc0 [ 48.923588][ T1594] crc_itu_t+0x9c/0xc0 [ 48.927709][ T1594] udf_finalize_lvid+0xdb/0x1d0 [ 48.932618][ T1594] ? udf_mount+0x10/0x10 [ 48.937001][ T1594] ? __dentry_kill+0x3d5/0x5e0 [ 48.941905][ T1594] udf_sync_fs+0xc9/0x130 [ 48.946285][ T1594] sync_filesystem.part.0+0x63/0x170 [ 48.951535][ T1594] generic_shutdown_super+0x64/0x320 [ 48.956801][ T1594] kill_block_super+0x93/0xd0 [ 48.962049][ T1594] deactivate_locked_super+0x7b/0x130 [ 48.967514][ T1594] cleanup_mnt+0x2b8/0x3e0 [ 48.971900][ T1594] task_work_run+0xb8/0x140 [ 48.976438][ T1594] exit_to_user_mode_prepare+0x15a/0x160 [ 48.982149][ T1594] syscall_exit_to_user_mode+0x12/0x30 [ 48.987593][ T1594] do_syscall_64+0x42/0x80 [ 48.991978][ T1594] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 48.997841][ T1594] RIP: 0033:0x7f308703cc87 [ 49.002223][ T1594] Code: b0 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b0 ff ff ff f7 d8 64 89 02 b8 [ 49.021881][ T1594] RSP: 002b:00007ffd1c8c89f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 49.030341][ T1594] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f308703cc87 [ 49.042189][ T1594] RDX: 0000000000000000 RSI: 000000000000000a RDI: 00007ffd1c8c8ab0 [ 49.050229][ T1594] RBP: 00007ffd1c8c8ab0 R08: 0000000000000000 R09: 0000000000000000 [ 49.058172][ T1594] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd1c8c9b70 [ 49.066113][ T1594] R13: 00007f3087096c5a R14: 000000000000be56 R15: 0000000000000006 [ 49.074053][ T1594] [ 49.077056][ T1594] [ 49.079348][ T1594] The buggy address belongs to the page: [ 49.085131][ T1594] page:ffffea0001a8f700 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1 pfn:0x6a3dc [ 49.095253][ T1594] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 49.102328][ T1594] raw: 00fff00000000000 ffffea0001a70088 ffffea0001a8fec8 0000000000000000 [ 49.110882][ T1594] raw: 0000000000000001 0000000000000000 00000000ffffffff 0000000000000000 [ 49.119612][ T1594] page dumped because: kasan: bad access detected [ 49.126083][ T1594] page_owner tracks the page as freed [ 49.131423][ T1594] page last allocated via order 0, migratetype Movable, gfp_mask 0x1100cca(GFP_HIGHUSER_MOVABLE), pid 2014, ts 48821013824, free_ts 48841834249 [ 49.146052][ T1594] get_page_from_freelist+0x12d1/0x2d40 [ 49.151745][ T1594] __alloc_pages+0x1b2/0x440 [ 49.156398][ T1594] alloc_pages_vma+0xe0/0x650 [ 49.161046][ T1594] wp_page_copy+0x18c/0x1890 [ 49.165691][ T1594] __handle_mm_fault+0x15ac/0x33c0 [ 49.170854][ T1594] handle_mm_fault+0x1c5/0x5b0 [ 49.175846][ T1594] do_user_addr_fault+0x298/0xcb0 [ 49.180832][ T1594] exc_page_fault+0x5a/0xb0 [ 49.185300][ T1594] asm_exc_page_fault+0x22/0x30 [ 49.190113][ T1594] page last free stack trace: [ 49.194751][ T1594] free_pcp_prepare+0x379/0x850 [ 49.199565][ T1594] free_unref_page_list+0x16f/0xbd0 [ 49.204813][ T1594] release_pages+0xb3a/0x1480 [ 49.209460][ T1594] tlb_finish_mmu+0x127/0x790 [ 49.214271][ T1594] exit_mmap+0x1b7/0x530 [ 49.218495][ T1594] mmput+0xd6/0x400 [ 49.222264][ T1594] do_exit+0x884/0x2200 [ 49.226650][ T1594] do_group_exit+0xe7/0x290 [ 49.231208][ T1594] get_signal+0x279/0x1f00 [ 49.235761][ T1594] arch_do_signal_or_restart+0x2b5/0x17b0 [ 49.241440][ T1594] exit_to_user_mode_prepare+0xef/0x160 [ 49.246949][ T1594] syscall_exit_to_user_mode+0x12/0x30 [ 49.252372][ T1594] do_syscall_64+0x42/0x80 [ 49.256768][ T1594] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 49.262626][ T1594] [ 49.264919][ T1594] Memory state around the buggy address: [ 49.270510][ T1594] ffff88806a3dbf00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 49.278532][ T1594] ffff88806a3dbf80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 49.286574][ T1594] >ffff88806a3dc000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 49.294697][ T1594] ^ [ 49.298747][ T1594] ffff88806a3dc080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 49.306777][ T1594] ffff88806a3dc100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 49.314808][ T1594] ================================================================== [ 49.322833][ T1594] Disabling lock debugging due to kernel taint [ 49.329121][ T1594] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 49.336990][ T1594] Kernel Offset: disabled [ 49.341409][ T1594] Rebooting in 86400 seconds..