Warning: Permanently added '10.128.1.136' (ED25519) to the list of known hosts. 2024/03/24 00:41:31 ignoring optional flag "sandboxArg"="0" 2024/03/24 00:41:32 parsed 1 programs 2024/03/24 00:41:32 executed programs: 0 [ 50.558322][ T1578] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 55.472976][ T1995] loop0: detected capacity change from 0 to 2048 [ 55.481091][ T1995] ======================================================= [ 55.481091][ T1995] WARNING: The mand mount option has been deprecated and [ 55.481091][ T1995] and is ignored by this kernel. Remove the mand [ 55.481091][ T1995] option from the mount to silence this warning. [ 55.481091][ T1995] ======================================================= [ 55.518325][ T1995] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 55.531661][ T1995] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) 2024/03/24 00:41:37 executed programs: 1 [ 55.603111][ T1584] ================================================================== [ 55.611241][ T1584] BUG: KASAN: use-after-free in crc_itu_t+0x1c6/0x240 [ 55.618002][ T1584] Read of size 1 at addr ffff88806ba5c000 by task syz-executor.0/1584 [ 55.626491][ T1584] [ 55.628798][ T1584] CPU: 0 PID: 1584 Comm: syz-executor.0 Not tainted 6.1.82-syzkaller #0 [ 55.637089][ T1584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/29/2024 [ 55.647296][ T1584] Call Trace: [ 55.650855][ T1584] [ 55.654045][ T1584] dump_stack_lvl+0xf4/0x251 [ 55.658625][ T1584] ? nf_tcp_handle_invalid+0x2f3/0x2f3 [ 55.664989][ T1584] ? panic+0x3f7/0x3f7 [ 55.669173][ T1584] ? lock_acquire+0xbe/0x390 [ 55.673929][ T1584] ? read_lock_is_recursive+0x10/0x10 [ 55.679370][ T1584] ? __virt_addr_valid+0x139/0x260 [ 55.684460][ T1584] ? __virt_addr_valid+0x211/0x260 [ 55.689554][ T1584] print_report+0x15f/0x4f0 [ 55.694473][ T1584] ? __virt_addr_valid+0x139/0x260 [ 55.699661][ T1584] ? __virt_addr_valid+0x211/0x260 [ 55.704779][ T1584] ? crc_itu_t+0x1c6/0x240 [ 55.709272][ T1584] kasan_report+0x136/0x160 [ 55.713929][ T1584] ? crc_itu_t+0x1c6/0x240 [ 55.718420][ T1584] crc_itu_t+0x1c6/0x240 [ 55.722752][ T1584] udf_sync_fs+0x1bd/0x370 [ 55.727243][ T1584] ? udf_put_super+0x130/0x130 [ 55.731984][ T1584] ? dentry_kill+0xbb/0x1e0 [ 55.736571][ T1584] sync_filesystem+0xbf/0x180 [ 55.741357][ T1584] generic_shutdown_super+0x65/0x2c0 [ 55.746630][ T1584] kill_block_super+0x75/0xb0 [ 55.751384][ T1584] deactivate_locked_super+0x71/0xd0 [ 55.757124][ T1584] cleanup_mnt+0x2bd/0x330 [ 55.761566][ T1584] task_work_run+0x206/0x280 [ 55.766141][ T1584] ? task_work_cancel+0x2a0/0x2a0 [ 55.771313][ T1584] ? __x64_sys_umount+0xe4/0x120 [ 55.776309][ T1584] ? path_umount+0xc70/0xc70 [ 55.781052][ T1584] exit_to_user_mode_loop+0xa9/0xc0 [ 55.787007][ T1584] exit_to_user_mode_prepare+0x64/0xb0 [ 55.792633][ T1584] syscall_exit_to_user_mode+0x27/0x1b0 [ 55.798184][ T1584] do_syscall_64+0x49/0x80 [ 55.802594][ T1584] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 55.808577][ T1584] RIP: 0033:0x7f582387de57 [ 55.813164][ T1584] Code: b0 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b0 ff ff ff f7 d8 64 89 02 b8 [ 55.833291][ T1584] RSP: 002b:00007ffc89aa7ba8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 55.841686][ T1584] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f582387de57 [ 55.849649][ T1584] RDX: 0000000000000000 RSI: 000000000000000a RDI: 00007ffc89aa7c60 [ 55.857681][ T1584] RBP: 00007ffc89aa7c60 R08: 0000000000000000 R09: 0000000000000000 [ 55.865802][ T1584] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc89aa8d20 [ 55.873945][ T1584] R13: 00007f58238c73b9 R14: 000000000000d889 R15: 0000000000000006 [ 55.881998][ T1584] [ 55.885009][ T1584] [ 55.887404][ T1584] The buggy address belongs to the physical page: [ 55.893878][ T1584] page:ffffea0001ae9700 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1 pfn:0x6ba5c [ 55.904220][ T1584] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 55.911306][ T1584] raw: 00fff00000000000 ffffea0001ae8a48 ffffea0001aea1c8 0000000000000000 [ 55.919954][ T1584] raw: 0000000000000001 0000000000000000 00000000ffffffff 0000000000000000 [ 55.929113][ T1584] page dumped because: kasan: bad access detected [ 55.935951][ T1584] page_owner tracks the page as freed [ 55.941378][ T1584] page last allocated via order 0, migratetype Movable, gfp_mask 0x140dca(GFP_HIGHUSER_MOVABLE|__GFP_COMP|__GFP_ZERO), pid 1995, tgid 1994 (syz-executor.0), ts 55460507926, free_ts 55596289687 [ 55.960725][ T1584] post_alloc_hook+0x286/0x2b0 [ 55.965759][ T1584] get_page_from_freelist+0x2fdd/0x3170 [ 55.971369][ T1584] __alloc_pages+0x251/0x640 [ 55.976229][ T1584] __folio_alloc+0xf/0x30 [ 55.980907][ T1584] vma_alloc_folio+0x484/0x9e0 [ 55.985747][ T1584] handle_mm_fault+0x232f/0x4260 [ 55.991267][ T1584] exc_page_fault+0x22a/0x5e0 [ 55.996008][ T1584] asm_exc_page_fault+0x22/0x30 [ 56.000921][ T1584] page last free stack trace: [ 56.005663][ T1584] free_unref_page_prepare+0xd4b/0xee0 [ 56.011168][ T1584] free_unref_page_list+0x54b/0x7e0 [ 56.016623][ T1584] release_pages+0x175c/0x1900 [ 56.021463][ T1584] tlb_flush_mmu+0xe5/0x1d0 [ 56.025967][ T1584] tlb_finish_mmu+0xb0/0x1b0 [ 56.030642][ T1584] exit_mmap+0x341/0x730 [ 56.035147][ T1584] __mmput+0x9b/0x2d0 [ 56.039104][ T1584] exit_mm+0x122/0x1b0 [ 56.043321][ T1584] do_exit+0x81e/0x23a0 [ 56.047453][ T1584] do_group_exit+0x1b5/0x280 [ 56.052102][ T1584] get_signal+0x1117/0x1260 [ 56.056676][ T1584] arch_do_signal_or_restart+0xb3/0x1240 [ 56.062400][ T1584] exit_to_user_mode_loop+0x61/0xc0 [ 56.067668][ T1584] exit_to_user_mode_prepare+0x64/0xb0 [ 56.073283][ T1584] syscall_exit_to_user_mode+0x27/0x1b0 [ 56.079507][ T1584] do_syscall_64+0x49/0x80 [ 56.084142][ T1584] [ 56.086619][ T1584] Memory state around the buggy address: [ 56.092367][ T1584] ffff88806ba5bf00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 56.100763][ T1584] ffff88806ba5bf80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 56.109062][ T1584] >ffff88806ba5c000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 56.117182][ T1584] ^ [ 56.121226][ T1584] ffff88806ba5c080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 56.130037][ T1584] ffff88806ba5c100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 56.138239][ T1584] ================================================================== [ 56.147732][ T1584] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 56.155292][ T1584] Kernel Offset: disabled [ 56.159772][ T1584] Rebooting in 86400 seconds..