Warning: Permanently added '10.128.0.145' (ED25519) to the list of known hosts. 2024/09/09 19:46:46 ignoring optional flag "sandboxArg"="0" 2024/09/09 19:46:46 parsed 1 programs 2024/09/09 19:46:46 executed programs: 0 [ 61.203137][ T1911] loop0: detected capacity change from 0 to 2048 [ 61.211672][ T1911] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 61.223048][ T1911] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 61.234231][ T1911] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 61.244900][ T1911] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 61.252584][ T1911] UDF-fs: Scanning with blocksize 512 failed [ 61.260544][ T1911] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 61.330990][ T1914] loop0: detected capacity change from 0 to 2048 [ 61.338349][ T1914] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 61.349727][ T1914] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 61.360793][ T1914] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 61.371580][ T1914] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found 2024/09/09 19:46:51 executed programs: 2 [ 61.379389][ T1914] UDF-fs: Scanning with blocksize 512 failed [ 61.387570][ T1914] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 61.451284][ T1916] loop0: detected capacity change from 0 to 2048 [ 61.458752][ T1916] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 61.471552][ T1916] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 61.482528][ T1916] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 61.493198][ T1916] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 61.500868][ T1916] UDF-fs: Scanning with blocksize 512 failed [ 61.508700][ T1916] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 61.559046][ T1500] ================================================================== [ 61.567135][ T1500] BUG: KASAN: use-after-free in crc_itu_t+0x178/0x240 [ 61.573982][ T1500] Read of size 1 at addr ffff88806c6ab000 by task syz-executor.0/1500 [ 61.582230][ T1500] [ 61.584557][ T1500] CPU: 0 PID: 1500 Comm: syz-executor.0 Not tainted 6.1.109-syzkaller #0 [ 61.593238][ T1500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 61.603313][ T1500] Call Trace: [ 61.606597][ T1500] [ 61.609767][ T1500] dump_stack_lvl+0xf4/0x251 [ 61.614363][ T1500] ? nf_tcp_handle_invalid+0x2f3/0x2f3 [ 61.619993][ T1500] ? panic+0x3fe/0x3fe [ 61.624229][ T1500] ? lock_acquire+0xbe/0x390 [ 61.628888][ T1500] ? read_lock_is_recursive+0x10/0x10 [ 61.634274][ T1500] ? __virt_addr_valid+0x139/0x270 [ 61.639401][ T1500] ? __virt_addr_valid+0x221/0x270 [ 61.644697][ T1500] print_report+0x15f/0x4f0 [ 61.649341][ T1500] ? __virt_addr_valid+0x139/0x270 [ 61.654965][ T1500] ? __virt_addr_valid+0x221/0x270 [ 61.660245][ T1500] ? crc_itu_t+0x178/0x240 [ 61.664722][ T1500] kasan_report+0x136/0x160 [ 61.669636][ T1500] ? crc_itu_t+0x178/0x240 [ 61.674103][ T1500] crc_itu_t+0x178/0x240 [ 61.678334][ T1500] udf_sync_fs+0x1bd/0x370 [ 61.682753][ T1500] ? udf_put_super+0x130/0x130 [ 61.687599][ T1500] ? dentry_kill+0xbb/0x1e0 [ 61.692079][ T1500] sync_filesystem+0xbf/0x180 [ 61.696832][ T1500] generic_shutdown_super+0x65/0x2c0 [ 61.702288][ T1500] kill_block_super+0x75/0xb0 [ 61.706940][ T1500] deactivate_locked_super+0x71/0xd0 [ 61.712204][ T1500] cleanup_mnt+0x2bd/0x330 [ 61.716590][ T1500] task_work_run+0x206/0x280 [ 61.721159][ T1500] ? task_work_cancel+0x280/0x280 [ 61.726235][ T1500] ? __x64_sys_umount+0xe4/0x120 [ 61.731140][ T1500] ? path_umount+0xc70/0xc70 [ 61.735700][ T1500] exit_to_user_mode_loop+0xa9/0xc0 [ 61.740957][ T1500] exit_to_user_mode_prepare+0x64/0xb0 [ 61.746385][ T1500] syscall_exit_to_user_mode+0x27/0x1b0 [ 61.751910][ T1500] do_syscall_64+0x47/0x80 [ 61.756383][ T1500] ? clear_bhb_loop+0x45/0xa0 [ 61.761038][ T1500] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 61.767001][ T1500] RIP: 0033:0x7f4474c7dc87 [ 61.771395][ T1500] Code: b0 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b0 ff ff ff f7 d8 64 89 02 b8 [ 61.791235][ T1500] RSP: 002b:00007ffe385214c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 61.799617][ T1500] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f4474c7dc87 [ 61.807608][ T1500] RDX: 0000000000000000 RSI: 000000000000000a RDI: 00007ffe38521580 [ 61.815560][ T1500] RBP: 00007ffe38521580 R08: 0000000000000000 R09: 0000000000000000 [ 61.823639][ T1500] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe38522640 [ 61.831615][ T1500] R13: 00007f4474cd7c5a R14: 000000000000efee R15: 0000000000000006 [ 61.839564][ T1500] [ 61.842647][ T1500] [ 61.845005][ T1500] The buggy address belongs to the physical page: [ 61.851582][ T1500] page:ffffea0001b1aac0 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1 pfn:0x6c6ab [ 61.861712][ T1500] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 61.868892][ T1500] raw: 00fff00000000000 ffffea0001b1aec8 ffffea0001b1ad08 0000000000000000 [ 61.877557][ T1500] raw: 0000000000000001 0000000000000000 00000000ffffffff 0000000000000000 [ 61.886291][ T1500] page dumped because: kasan: bad access detected [ 61.892772][ T1500] page_owner tracks the page as freed [ 61.898120][ T1500] page last allocated via order 0, migratetype Movable, gfp_mask 0x140cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP), pid 1915, tgid 1915 (syz-executor.0), ts 61518301439, free_ts 61557169359 [ 61.916155][ T1500] post_alloc_hook+0x286/0x2b0 [ 61.920904][ T1500] get_page_from_freelist+0x2fe5/0x3170 [ 61.926439][ T1500] __alloc_pages+0x251/0x640 [ 61.930996][ T1500] __folio_alloc+0xf/0x30 [ 61.935312][ T1500] vma_alloc_folio+0x484/0x9e0 [ 61.940061][ T1500] wp_page_copy+0x226/0x1970 [ 61.944647][ T1500] handle_mm_fault+0x1f06/0x4290 [ 61.949580][ T1500] exc_page_fault+0x22a/0x5a0 [ 61.954369][ T1500] asm_exc_page_fault+0x22/0x30 [ 61.959200][ T1500] page last free stack trace: [ 61.963911][ T1500] free_unref_page_prepare+0xd6c/0xf00 [ 61.969367][ T1500] free_unref_page_list+0x54b/0x7e0 [ 61.974618][ T1500] release_pages+0x1e0a/0x1fe0 [ 61.979356][ T1500] tlb_flush_mmu+0xe5/0x1d0 [ 61.983947][ T1500] tlb_finish_mmu+0xb0/0x1b0 [ 61.988608][ T1500] exit_mmap+0x341/0x730 [ 61.992852][ T1500] __mmput+0x9b/0x2e0 [ 61.996817][ T1500] exit_mm+0x122/0x1b0 [ 62.000964][ T1500] do_exit+0x81e/0x23a0 [ 62.005093][ T1500] do_group_exit+0x1b5/0x280 [ 62.009923][ T1500] get_signal+0x1117/0x1260 [ 62.014582][ T1500] arch_do_signal_or_restart+0xb3/0x1240 [ 62.020291][ T1500] exit_to_user_mode_loop+0x61/0xc0 [ 62.025460][ T1500] exit_to_user_mode_prepare+0x64/0xb0 [ 62.030910][ T1500] syscall_exit_to_user_mode+0x27/0x1b0 [ 62.036458][ T1500] do_syscall_64+0x47/0x80 [ 62.040847][ T1500] [ 62.043204][ T1500] Memory state around the buggy address: [ 62.048819][ T1500] ffff88806c6aaf00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 62.057029][ T1500] ffff88806c6aaf80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 62.065059][ T1500] >ffff88806c6ab000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 62.073261][ T1500] ^ [ 62.077400][ T1500] ffff88806c6ab080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 62.085440][ T1500] ffff88806c6ab100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 62.093474][ T1500] ================================================================== [ 62.102205][ T1500] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 62.109695][ T1500] Kernel Offset: disabled [ 62.114014][ T1500] Rebooting in 86400 seconds..