Warning: Permanently added '10.128.1.111' (ED25519) to the list of known hosts. 2025/04/14 23:20:37 ignoring optional flag "sandboxArg"="0" 2025/04/14 23:20:37 ignoring optional flag "type"="gce" 2025/04/14 23:20:37 parsed 1 programs 2025/04/14 23:20:37 executed programs: 0 [ 59.922586][ T1502] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k 2025/04/14 23:20:43 executed programs: 1 [ 65.881031][ T1920] loop0: detected capacity change from 0 to 2048 [ 65.891497][ T1920] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 65.950494][ T1922] loop0: detected capacity change from 0 to 2048 [ 65.960847][ T1922] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 66.022142][ T1924] loop0: detected capacity change from 0 to 2048 [ 66.031990][ T1924] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 66.086823][ T1926] loop0: detected capacity change from 0 to 2048 [ 66.096554][ T1926] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 66.123022][ T1508] ================================================================== [ 66.131116][ T1508] BUG: KASAN: use-after-free in crc_itu_t+0x178/0x240 [ 66.137896][ T1508] Read of size 1 at addr ffff88806c514000 by task syz-executor.0/1508 [ 66.146049][ T1508] [ 66.148376][ T1508] CPU: 0 PID: 1508 Comm: syz-executor.0 Not tainted 6.1.134-syzkaller #0 [ 66.156768][ T1508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 66.166818][ T1508] Call Trace: [ 66.170087][ T1508] [ 66.173007][ T1508] dump_stack_lvl+0xf4/0x251 [ 66.177672][ T1508] ? nf_tcp_handle_invalid+0x2f3/0x2f3 [ 66.183113][ T1508] ? panic+0x3fe/0x3fe [ 66.187165][ T1508] ? lock_acquire+0xbe/0x390 [ 66.191737][ T1508] ? read_lock_is_recursive+0x10/0x10 [ 66.197091][ T1508] ? __virt_addr_valid+0x139/0x270 [ 66.202185][ T1508] ? __virt_addr_valid+0x221/0x270 [ 66.207282][ T1508] print_report+0x15f/0x4f0 [ 66.211893][ T1508] ? __virt_addr_valid+0x139/0x270 [ 66.216990][ T1508] ? __virt_addr_valid+0x221/0x270 [ 66.222108][ T1508] ? crc_itu_t+0x178/0x240 [ 66.226506][ T1508] kasan_report+0x136/0x160 [ 66.230998][ T1508] ? crc_itu_t+0x178/0x240 [ 66.235396][ T1508] crc_itu_t+0x178/0x240 [ 66.239629][ T1508] udf_sync_fs+0x1bd/0x370 [ 66.244037][ T1508] ? udf_put_super+0x130/0x130 [ 66.248780][ T1508] ? dentry_kill+0xbb/0x1e0 [ 66.253292][ T1508] sync_filesystem+0xbf/0x180 [ 66.257953][ T1508] generic_shutdown_super+0x65/0x2c0 [ 66.263251][ T1508] kill_block_super+0x75/0xb0 [ 66.267996][ T1508] deactivate_locked_super+0x71/0xd0 [ 66.273265][ T1508] cleanup_mnt+0x2bd/0x330 [ 66.277673][ T1508] task_work_run+0x206/0x280 [ 66.282335][ T1508] ? task_work_cancel+0x280/0x280 [ 66.287342][ T1508] ? __x64_sys_umount+0xe4/0x120 [ 66.292263][ T1508] ? path_umount+0xc70/0xc70 [ 66.296932][ T1508] exit_to_user_mode_loop+0xa9/0xc0 [ 66.302128][ T1508] exit_to_user_mode_prepare+0x64/0xb0 [ 66.307579][ T1508] syscall_exit_to_user_mode+0x27/0x1b0 [ 66.313128][ T1508] do_syscall_64+0x47/0x80 [ 66.317553][ T1508] ? clear_bhb_loop+0x45/0xa0 [ 66.322231][ T1508] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 66.328170][ T1508] RIP: 0033:0x7f8b2e67de17 [ 66.332580][ T1508] Code: b0 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b0 ff ff ff f7 d8 64 89 02 b8 [ 66.352264][ T1508] RSP: 002b:00007ffd286ec468 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 66.360675][ T1508] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f8b2e67de17 [ 66.368635][ T1508] RDX: 0000000000000000 RSI: 000000000000000a RDI: 00007ffd286ec520 [ 66.376673][ T1508] RBP: 00007ffd286ec520 R08: 0000000000000000 R09: 0000000000000000 [ 66.384640][ T1508] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd286ed5e0 [ 66.392594][ T1508] R13: 00007f8b2e6c73b9 R14: 0000000000010200 R15: 0000000000000006 [ 66.400549][ T1508] [ 66.403552][ T1508] [ 66.405862][ T1508] The buggy address belongs to the physical page: [ 66.412261][ T1508] page:ffffea0001b14500 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1 pfn:0x6c514 [ 66.422390][ T1508] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 66.429568][ T1508] raw: 00fff00000000000 ffffea0001b167c8 ffffea0001b168c8 0000000000000000 [ 66.438140][ T1508] raw: 0000000000000001 0000000000000000 00000000ffffffff 0000000000000000 [ 66.446701][ T1508] page dumped because: kasan: bad access detected [ 66.453099][ T1508] page_owner tracks the page as freed [ 66.458447][ T1508] page last allocated via order 0, migratetype Movable, gfp_mask 0x140dca(GFP_HIGHUSER_MOVABLE|__GFP_COMP|__GFP_ZERO), pid 1926, tgid 1925 (syz-executor.0), ts 66082609412, free_ts 66086559201 [ 66.477444][ T1508] post_alloc_hook+0x286/0x2b0 [ 66.482207][ T1508] get_page_from_freelist+0x340b/0x35b0 [ 66.487733][ T1508] __alloc_pages+0x251/0x640 [ 66.492301][ T1508] __folio_alloc+0xf/0x30 [ 66.496695][ T1508] vma_alloc_folio+0x484/0x9e0 [ 66.501440][ T1508] wp_page_copy+0x1f9/0x1970 [ 66.506008][ T1508] handle_mm_fault+0x1f06/0x4290 [ 66.510943][ T1508] exc_page_fault+0x22a/0x5a0 [ 66.515614][ T1508] asm_exc_page_fault+0x22/0x30 [ 66.520447][ T1508] page last free stack trace: [ 66.525209][ T1508] free_unref_page_prepare+0x10b7/0x13b0 [ 66.530825][ T1508] free_unref_page_list+0x54b/0x7e0 [ 66.536006][ T1508] release_pages+0x1c13/0x1dc0 [ 66.540775][ T1508] tlb_flush_mmu+0xe5/0x1d0 [ 66.545309][ T1508] tlb_finish_mmu+0xb0/0x1b0 [ 66.549908][ T1508] unmap_region+0x265/0x2b0 [ 66.554424][ T1508] do_mas_align_munmap+0xa6c/0x11a0 [ 66.559785][ T1508] do_mas_munmap+0x195/0x1f0 [ 66.564378][ T1508] __vm_munmap+0x236/0x300 [ 66.568775][ T1508] __x64_sys_munmap+0x57/0x60 [ 66.573465][ T1508] do_syscall_64+0x3b/0x80 [ 66.578199][ T1508] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 66.584165][ T1508] [ 66.586508][ T1508] Memory state around the buggy address: [ 66.592119][ T1508] ffff88806c513f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 66.600163][ T1508] ffff88806c513f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 66.608207][ T1508] >ffff88806c514000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 66.616247][ T1508] ^ [ 66.620298][ T1508] ffff88806c514080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 66.628344][ T1508] ffff88806c514100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 66.636386][ T1508] ================================================================== [ 66.645036][ T1508] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 66.652624][ T1508] Kernel Offset: disabled [ 66.656956][ T1508] Rebooting in 86400 seconds..