Warning: Permanently added '10.128.1.74' (ED25519) to the list of known hosts. 2024/02/03 08:15:11 ignoring optional flag "sandboxArg"="0" 2024/02/03 08:15:11 parsed 1 programs 2024/02/03 08:15:11 executed programs: 0 [ 51.743857][ T1991] loop0: detected capacity change from 0 to 2048 [ 51.751438][ T1991] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 51.762783][ T1991] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 51.773674][ T1991] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 51.784404][ T1991] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 51.792067][ T1991] UDF-fs: Scanning with blocksize 512 failed [ 51.799958][ T1991] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 51.858791][ T1580] ================================================================== [ 51.866870][ T1580] BUG: KASAN: use-after-free in crc_itu_t+0x178/0x240 [ 51.873606][ T1580] Read of size 1 at addr ffff88806d07a000 by task syz-executor.0/1580 [ 51.881720][ T1580] [ 51.884018][ T1580] CPU: 0 PID: 1580 Comm: syz-executor.0 Not tainted 6.1.76-syzkaller #0 [ 51.892309][ T1580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 51.902336][ T1580] Call Trace: [ 51.905590][ T1580] [ 51.908497][ T1580] dump_stack_lvl+0xf4/0x251 [ 51.913062][ T1580] ? nf_tcp_handle_invalid+0x2f3/0x2f3 [ 51.918492][ T1580] ? panic+0x3f7/0x3f7 [ 51.922530][ T1580] ? lock_acquire+0xbe/0x390 [ 51.927091][ T1580] ? read_lock_is_recursive+0x10/0x10 [ 51.932432][ T1580] ? __virt_addr_valid+0x137/0x210 [ 51.937512][ T1580] ? __virt_addr_valid+0x1d6/0x210 [ 51.942595][ T1580] print_report+0x15f/0x4f0 [ 51.947066][ T1580] ? __virt_addr_valid+0x137/0x210 [ 51.952150][ T1580] ? __virt_addr_valid+0x1d6/0x210 [ 51.957236][ T1580] ? crc_itu_t+0x178/0x240 [ 51.961622][ T1580] kasan_report+0x136/0x160 [ 51.966092][ T1580] ? crc_itu_t+0x178/0x240 [ 51.970478][ T1580] crc_itu_t+0x178/0x240 [ 51.974690][ T1580] udf_sync_fs+0x1bd/0x370 [ 51.979077][ T1580] ? udf_put_super+0x130/0x130 [ 51.983807][ T1580] ? dentry_kill+0xbb/0x1e0 [ 51.988281][ T1580] ? dput+0x38/0x2b0 [ 51.992153][ T1580] sync_filesystem+0xbf/0x180 [ 51.996813][ T1580] generic_shutdown_super+0x65/0x2c0 [ 52.002071][ T1580] kill_block_super+0x75/0xb0 [ 52.006718][ T1580] deactivate_locked_super+0x71/0xd0 [ 52.011973][ T1580] cleanup_mnt+0x2bd/0x330 [ 52.016360][ T1580] task_work_run+0x206/0x280 [ 52.020919][ T1580] ? task_work_cancel+0x2a0/0x2a0 [ 52.025911][ T1580] ? __x64_sys_umount+0xe4/0x120 [ 52.030824][ T1580] ? path_umount+0xc70/0xc70 [ 52.035382][ T1580] exit_to_user_mode_loop+0xa9/0xc0 [ 52.040550][ T1580] exit_to_user_mode_prepare+0x64/0xb0 [ 52.045978][ T1580] syscall_exit_to_user_mode+0x27/0x1c0 [ 52.051494][ T1580] do_syscall_64+0x49/0x80 [ 52.055890][ T1580] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 52.061753][ T1580] RIP: 0033:0x7fc3b227dc87 [ 52.066142][ T1580] Code: b0 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b0 ff ff ff f7 d8 64 89 02 b8 [ 52.085805][ T1580] RSP: 002b:00007ffd92def3e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 52.094193][ T1580] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fc3b227dc87 [ 52.102139][ T1580] RDX: 0000000000000000 RSI: 000000000000000a RDI: 00007ffd92def4a0 [ 52.110081][ T1580] RBP: 00007ffd92def4a0 R08: 0000000000000000 R09: 0000000000000000 [ 52.118023][ T1580] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd92df0560 [ 52.125965][ T1580] R13: 00007fc3b22d7c5a R14: 000000000000c9f7 R15: 0000000000000006 [ 52.133910][ T1580] [ 52.136907][ T1580] [ 52.139211][ T1580] The buggy address belongs to the physical page: [ 52.145591][ T1580] page:ffffea0001b41e80 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1 pfn:0x6d07a [ 52.155707][ T1580] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 52.162799][ T1580] raw: 00fff00000000000 ffffea0001ba4c88 ffffea0001b41bc8 0000000000000000 [ 52.171351][ T1580] raw: 0000000000000001 0000000000000000 00000000ffffffff 0000000000000000 [ 52.179899][ T1580] page dumped because: kasan: bad access detected [ 52.186282][ T1580] page_owner tracks the page as freed [ 52.191619][ T1580] page last allocated via order 0, migratetype Movable, gfp_mask 0x140dca(GFP_HIGHUSER_MOVABLE|__GFP_COMP|__GFP_ZERO), pid 1968, tgid 1968 (modprobe), ts 51496370106, free_ts 51499862733 [ 52.209897][ T1580] post_alloc_hook+0x286/0x2b0 [ 52.214635][ T1580] get_page_from_freelist+0x2fdd/0x3170 [ 52.220149][ T1580] __alloc_pages+0x251/0x640 [ 52.224706][ T1580] __folio_alloc+0xf/0x30 [ 52.229007][ T1580] vma_alloc_folio+0x484/0x9e0 [ 52.233738][ T1580] handle_mm_fault+0x232f/0x4260 [ 52.238643][ T1580] exc_page_fault+0x22a/0x5e0 [ 52.243291][ T1580] asm_exc_page_fault+0x22/0x30 [ 52.248113][ T1580] page last free stack trace: [ 52.252755][ T1580] free_unref_page_prepare+0xd4b/0xee0 [ 52.258182][ T1580] free_unref_page_list+0x54b/0x7e0 [ 52.263351][ T1580] release_pages+0x175c/0x1900 [ 52.268083][ T1580] tlb_flush_mmu+0xe5/0x1d0 [ 52.272553][ T1580] tlb_finish_mmu+0xb0/0x1b0 [ 52.277110][ T1580] exit_mmap+0x341/0x730 [ 52.281322][ T1580] __mmput+0x9b/0x2d0 [ 52.285273][ T1580] exit_mm+0x122/0x1b0 [ 52.289308][ T1580] do_exit+0x81e/0x23a0 [ 52.293435][ T1580] do_group_exit+0x1b5/0x280 [ 52.297996][ T1580] __x64_sys_exit_group+0x3b/0x40 [ 52.302988][ T1580] do_syscall_64+0x3d/0x80 [ 52.307383][ T1580] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 52.313243][ T1580] [ 52.315543][ T1580] Memory state around the buggy address: [ 52.321141][ T1580] ffff88806d079f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 52.329170][ T1580] ffff88806d079f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 52.337210][ T1580] >ffff88806d07a000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 52.345246][ T1580] ^ [ 52.349282][ T1580] ffff88806d07a080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 52.357311][ T1580] ffff88806d07a100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 52.365339][ T1580] ================================================================== [ 52.374073][ T1580] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 52.381448][ T1580] Kernel Offset: disabled [ 52.385762][ T1580] Rebooting in 86400 seconds..