Warning: Permanently added '10.128.0.242' (ED25519) to the list of known hosts. 2023/10/29 15:08:16 ignoring optional flag "sandboxArg"="0" 2023/10/29 15:08:16 parsed 1 programs 2023/10/29 15:08:16 executed programs: 0 [ 45.565963][ T2012] loop0: detected capacity change from 0 to 2048 [ 45.573673][ T2012] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 45.584786][ T2012] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 45.595815][ T2012] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 45.606581][ T2012] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 45.614314][ T2012] UDF-fs: Scanning with blocksize 512 failed [ 45.621842][ T2012] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 45.664655][ T1594] ================================================================== [ 45.672817][ T1594] BUG: KASAN: use-after-free in crc_itu_t+0x9c/0xc0 [ 45.679380][ T1594] Read of size 1 at addr ffff88806d865000 by task syz-executor.0/1594 [ 45.687502][ T1594] [ 45.689803][ T1594] CPU: 0 PID: 1594 Comm: syz-executor.0 Not tainted 5.15.137-syzkaller #0 [ 45.698386][ T1594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 45.708435][ T1594] Call Trace: [ 45.711700][ T1594] [ 45.714705][ T1594] dump_stack_lvl+0x41/0x5e [ 45.719187][ T1594] print_address_description.constprop.0.cold+0x6c/0x309 [ 45.726276][ T1594] ? crc_itu_t+0x9c/0xc0 [ 45.730493][ T1594] ? crc_itu_t+0x9c/0xc0 [ 45.735071][ T1594] kasan_report.cold+0x83/0xdf [ 45.739835][ T1594] ? crc_itu_t+0x9c/0xc0 [ 45.744141][ T1594] crc_itu_t+0x9c/0xc0 [ 45.748189][ T1594] udf_finalize_lvid+0xdb/0x1d0 [ 45.753026][ T1594] ? udf_mount+0x10/0x10 [ 45.757255][ T1594] ? __dentry_kill+0x3d5/0x5e0 [ 45.762020][ T1594] udf_sync_fs+0xc9/0x130 [ 45.766414][ T1594] sync_filesystem.part.0+0x63/0x170 [ 45.771941][ T1594] generic_shutdown_super+0x64/0x320 [ 45.777208][ T1594] kill_block_super+0x93/0xd0 [ 45.782033][ T1594] deactivate_locked_super+0x7b/0x130 [ 45.787552][ T1594] cleanup_mnt+0x2b8/0x3e0 [ 45.792037][ T1594] task_work_run+0xb8/0x140 [ 45.796543][ T1594] exit_to_user_mode_prepare+0x15a/0x160 [ 45.802674][ T1594] syscall_exit_to_user_mode+0x12/0x30 [ 45.808212][ T1594] do_syscall_64+0x42/0x80 [ 45.812600][ T1594] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 45.818464][ T1594] RIP: 0033:0x7f745813dc87 [ 45.822848][ T1594] Code: b0 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b0 ff ff ff f7 d8 64 89 02 b8 [ 45.843502][ T1594] RSP: 002b:00007ffe7d840888 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 45.851895][ T1594] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f745813dc87 [ 45.859935][ T1594] RDX: 0000000000000000 RSI: 000000000000000a RDI: 00007ffe7d840940 [ 45.867893][ T1594] RBP: 00007ffe7d840940 R08: 0000000000000000 R09: 0000000000000000 [ 45.876379][ T1594] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe7d841a00 [ 45.884497][ T1594] R13: 00007f7458197c5a R14: 000000000000b1d9 R15: 0000000000000006 [ 45.892703][ T1594] [ 45.895814][ T1594] [ 45.898254][ T1594] The buggy address belongs to the page: [ 45.904036][ T1594] page:ffffea0001b61940 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1 pfn:0x6d865 [ 45.914422][ T1594] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 45.922007][ T1594] raw: 00fff00000000000 ffffea0001c3b6c8 ffffea0001b57d88 0000000000000000 [ 45.930650][ T1594] raw: 0000000000000001 0000000000000000 00000000ffffffff 0000000000000000 [ 45.939478][ T1594] page dumped because: kasan: bad access detected [ 45.945855][ T1594] page_owner tracks the page as freed [ 45.951373][ T1594] page last allocated via order 0, migratetype Movable, gfp_mask 0x1100cca(GFP_HIGHUSER_MOVABLE), pid 1733, ts 44206188892, free_ts 44210302677 [ 45.966094][ T1594] get_page_from_freelist+0x12d1/0x2d40 [ 45.971609][ T1594] __alloc_pages+0x1b2/0x440 [ 45.976251][ T1594] alloc_pages_vma+0xe0/0x650 [ 45.980894][ T1594] __handle_mm_fault+0xc8f/0x33c0 [ 45.985906][ T1594] handle_mm_fault+0x1c5/0x5b0 [ 45.990646][ T1594] do_user_addr_fault+0x298/0xcb0 [ 45.995636][ T1594] exc_page_fault+0x5a/0xb0 [ 46.000104][ T1594] asm_exc_page_fault+0x22/0x30 [ 46.004920][ T1594] page last free stack trace: [ 46.009573][ T1594] free_pcp_prepare+0x379/0x850 [ 46.014919][ T1594] free_unref_page_list+0x16f/0xbd0 [ 46.020105][ T1594] release_pages+0xb3a/0x1480 [ 46.024855][ T1594] tlb_finish_mmu+0x127/0x790 [ 46.029495][ T1594] exit_mmap+0x1b7/0x530 [ 46.033700][ T1594] mmput+0xd6/0x400 [ 46.037489][ T1594] do_exit+0x884/0x2200 [ 46.041874][ T1594] do_group_exit+0xe7/0x290 [ 46.046352][ T1594] __x64_sys_exit_group+0x35/0x40 [ 46.051515][ T1594] do_syscall_64+0x35/0x80 [ 46.055984][ T1594] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 46.062014][ T1594] [ 46.064304][ T1594] Memory state around the buggy address: [ 46.070079][ T1594] ffff88806d864f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 46.078127][ T1594] ffff88806d864f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 46.086159][ T1594] >ffff88806d865000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 46.094193][ T1594] ^ [ 46.098235][ T1594] ffff88806d865080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 46.106259][ T1594] ffff88806d865100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 46.114401][ T1594] ================================================================== [ 46.122629][ T1594] Disabling lock debugging due to kernel taint [ 46.129778][ T1594] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 46.137348][ T1594] Kernel Offset: disabled [ 46.141653][ T1594] Rebooting in 86400 seconds..