Warning: Permanently added '10.128.1.181' (ED25519) to the list of known hosts. 2024/02/22 05:03:49 ignoring optional flag "sandboxArg"="0" 2024/02/22 05:03:49 parsed 1 programs 2024/02/22 05:03:49 executed programs: 0 [ 49.798884][ T1585] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 54.753004][ T2002] loop0: detected capacity change from 0 to 2048 [ 54.762458][ T2002] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 54.783909][ T1591] ================================================================== [ 54.792192][ T1591] BUG: KASAN: use-after-free in crc_itu_t+0x178/0x240 [ 54.799942][ T1591] Read of size 1 at addr ffff88807f709000 by task syz-executor.0/1591 [ 54.808164][ T1591] [ 54.810473][ T1591] CPU: 1 PID: 1591 Comm: syz-executor.0 Not tainted 6.1.78-syzkaller #0 [ 54.818947][ T1591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 54.829421][ T1591] Call Trace: [ 54.832884][ T1591] [ 54.835907][ T1591] dump_stack_lvl+0xf4/0x251 [ 54.840510][ T1591] ? nf_tcp_handle_invalid+0x2f3/0x2f3 [ 54.846066][ T1591] ? panic+0x3f7/0x3f7 [ 54.850135][ T1591] ? lock_acquire+0xbe/0x390 [ 54.854730][ T1591] ? read_lock_is_recursive+0x10/0x10 [ 54.860078][ T1591] ? __virt_addr_valid+0x139/0x260 [ 54.865368][ T1591] ? __virt_addr_valid+0x211/0x260 [ 54.870542][ T1591] print_report+0x15f/0x4f0 [ 54.875144][ T1591] ? __virt_addr_valid+0x139/0x260 [ 54.880814][ T1591] ? __virt_addr_valid+0x211/0x260 [ 54.886201][ T1591] ? crc_itu_t+0x178/0x240 [ 54.891196][ T1591] kasan_report+0x136/0x160 [ 54.895898][ T1591] ? crc_itu_t+0x178/0x240 [ 54.900745][ T1591] crc_itu_t+0x178/0x240 [ 54.905255][ T1591] udf_sync_fs+0x1bd/0x370 [ 54.909949][ T1591] ? udf_put_super+0x130/0x130 [ 54.914844][ T1591] ? dentry_kill+0xbb/0x1e0 [ 54.919681][ T1591] sync_filesystem+0xbf/0x180 [ 54.924424][ T1591] generic_shutdown_super+0x65/0x2c0 [ 54.929771][ T1591] kill_block_super+0x75/0xb0 [ 54.934681][ T1591] deactivate_locked_super+0x71/0xd0 [ 54.939937][ T1591] cleanup_mnt+0x2bd/0x330 [ 54.944596][ T1591] task_work_run+0x206/0x280 [ 54.949356][ T1591] ? task_work_cancel+0x2a0/0x2a0 [ 54.955183][ T1591] ? __x64_sys_umount+0xe4/0x120 [ 54.960199][ T1591] ? path_umount+0xc70/0xc70 [ 54.965043][ T1591] exit_to_user_mode_loop+0xa9/0xc0 [ 54.970596][ T1591] exit_to_user_mode_prepare+0x64/0xb0 [ 54.976562][ T1591] syscall_exit_to_user_mode+0x27/0x1c0 [ 54.982703][ T1591] do_syscall_64+0x49/0x80 [ 54.988958][ T1591] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 54.994912][ T1591] RIP: 0033:0x7efc20e7de17 [ 54.999326][ T1591] Code: b0 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b0 ff ff ff f7 d8 64 89 02 b8 [ 55.020065][ T1591] RSP: 002b:00007ffffef68068 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 55.028503][ T1591] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007efc20e7de17 [ 55.036633][ T1591] RDX: 0000000000000000 RSI: 000000000000000a RDI: 00007ffffef68120 [ 55.044772][ T1591] RBP: 00007ffffef68120 R08: 0000000000000000 R09: 0000000000000000 [ 55.052915][ T1591] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffffef691e0 [ 55.060957][ T1591] R13: 00007efc20ec73b9 R14: 000000000000d5b8 R15: 0000000000000006 [ 55.069631][ T1591] [ 55.073219][ T1591] [ 55.075545][ T1591] The buggy address belongs to the physical page: [ 55.082134][ T1591] page:ffffea0001fdc240 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1 pfn:0x7f709 [ 55.092817][ T1591] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 55.100030][ T1591] raw: 00fff00000000000 ffffea0001acd948 ffffea0001acd5c8 0000000000000000 [ 55.110012][ T1591] raw: 0000000000000001 0000000000000000 00000000ffffffff 0000000000000000 [ 55.118984][ T1591] page dumped because: kasan: bad access detected [ 55.125497][ T1591] page_owner tracks the page as freed [ 55.131216][ T1591] page last allocated via order 0, migratetype Movable, gfp_mask 0x140dca(GFP_HIGHUSER_MOVABLE|__GFP_COMP|__GFP_ZERO), pid 1983, tgid 1983 (modprobe), ts 54515264459, free_ts 54517572636 [ 55.150400][ T1591] post_alloc_hook+0x286/0x2b0 [ 55.155239][ T1591] get_page_from_freelist+0x2fdd/0x3170 [ 55.160762][ T1591] __alloc_pages+0x251/0x640 [ 55.165324][ T1591] __folio_alloc+0xf/0x30 [ 55.169688][ T1591] vma_alloc_folio+0x484/0x9e0 [ 55.174648][ T1591] handle_mm_fault+0x232f/0x4260 [ 55.179676][ T1591] exc_page_fault+0x22a/0x5e0 [ 55.184521][ T1591] asm_exc_page_fault+0x22/0x30 [ 55.189440][ T1591] page last free stack trace: [ 55.194099][ T1591] free_unref_page_prepare+0xd4b/0xee0 [ 55.199615][ T1591] free_unref_page_list+0x54b/0x7e0 [ 55.204880][ T1591] release_pages+0x175c/0x1900 [ 55.209636][ T1591] tlb_flush_mmu+0xe5/0x1d0 [ 55.214674][ T1591] tlb_finish_mmu+0xb0/0x1b0 [ 55.219343][ T1591] exit_mmap+0x341/0x730 [ 55.223599][ T1591] __mmput+0x9b/0x2d0 [ 55.227580][ T1591] exit_mm+0x122/0x1b0 [ 55.232241][ T1591] do_exit+0x81e/0x23a0 [ 55.236492][ T1591] do_group_exit+0x1b5/0x280 [ 55.241083][ T1591] __x64_sys_exit_group+0x3b/0x40 [ 55.246172][ T1591] do_syscall_64+0x3d/0x80 [ 55.250773][ T1591] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 55.257114][ T1591] [ 55.259522][ T1591] Memory state around the buggy address: [ 55.265305][ T1591] ffff88807f708f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 55.273425][ T1591] ffff88807f708f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 55.281562][ T1591] >ffff88807f709000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 55.289627][ T1591] ^ [ 55.293677][ T1591] ffff88807f709080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 55.302444][ T1591] ffff88807f709100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 55.310670][ T1591] ================================================================== [ 55.322837][ T1591] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 55.330542][ T1591] Kernel Offset: disabled [ 55.334849][ T1591] Rebooting in 86400 seconds..