Warning: Permanently added '10.128.1.123' (ED25519) to the list of known hosts. 2023/11/30 20:45:23 ignoring optional flag "sandboxArg"="0" 2023/11/30 20:45:23 parsed 1 programs 2023/11/30 20:45:23 executed programs: 0 [ 55.612436][ T1993] loop0: detected capacity change from 0 to 2048 [ 55.620951][ T1993] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 55.632684][ T1993] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 55.643931][ T1993] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 55.655586][ T1993] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 55.663647][ T1993] UDF-fs: Scanning with blocksize 512 failed [ 55.672002][ T1993] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 55.752602][ T1582] ================================================================== [ 55.761083][ T1582] BUG: KASAN: use-after-free in crc_itu_t+0x178/0x240 [ 55.768538][ T1582] Read of size 1 at addr ffff88806b95a000 by task syz-executor.0/1582 [ 55.777205][ T1582] [ 55.779526][ T1582] CPU: 1 PID: 1582 Comm: syz-executor.0 Not tainted 6.1.64-syzkaller #0 [ 55.792858][ T1582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 [ 55.803250][ T1582] Call Trace: [ 55.806616][ T1582] [ 55.809543][ T1582] dump_stack_lvl+0xf4/0x251 [ 55.814387][ T1582] ? nf_tcp_handle_invalid+0x2f3/0x2f3 [ 55.819919][ T1582] ? panic+0x3f7/0x3f7 [ 55.823969][ T1582] ? _printk+0xca/0x10a [ 55.828115][ T1582] ? ktime_get_real_ts64+0x340/0x340 [ 55.833926][ T1582] print_report+0x15f/0x4f0 [ 55.838510][ T1582] ? crc_itu_t+0x178/0x240 [ 55.843419][ T1582] kasan_report+0x136/0x160 [ 55.848074][ T1582] ? crc_itu_t+0x178/0x240 [ 55.852636][ T1582] crc_itu_t+0x178/0x240 [ 55.856892][ T1582] udf_sync_fs+0x1bd/0x370 [ 55.861998][ T1582] ? udf_put_super+0x130/0x130 [ 55.867810][ T1582] ? dentry_kill+0xbb/0x1e0 [ 55.873343][ T1582] ? dput+0x38/0x2b0 [ 55.877302][ T1582] sync_filesystem+0xbf/0x180 [ 55.882212][ T1582] generic_shutdown_super+0x65/0x2c0 [ 55.887470][ T1582] kill_block_super+0x75/0xb0 [ 55.892301][ T1582] deactivate_locked_super+0x71/0xd0 [ 55.897564][ T1582] cleanup_mnt+0x2bd/0x330 [ 55.901990][ T1582] task_work_run+0x206/0x280 [ 55.906725][ T1582] ? task_work_cancel+0x2a0/0x2a0 [ 55.912153][ T1582] ? __x64_sys_umount+0xe4/0x120 [ 55.917243][ T1582] ? path_umount+0xc70/0xc70 [ 55.921890][ T1582] exit_to_user_mode_loop+0xa9/0xc0 [ 55.927171][ T1582] exit_to_user_mode_prepare+0x64/0xb0 [ 55.932689][ T1582] syscall_exit_to_user_mode+0x27/0x1c0 [ 55.938317][ T1582] do_syscall_64+0x49/0x80 [ 55.943022][ T1582] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 55.948887][ T1582] RIP: 0033:0x7fd4b047dc87 [ 55.953385][ T1582] Code: b0 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b0 ff ff ff f7 d8 64 89 02 b8 [ 55.974631][ T1582] RSP: 002b:00007ffc9c960b68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 55.983148][ T1582] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fd4b047dc87 [ 55.991185][ T1582] RDX: 0000000000000000 RSI: 000000000000000a RDI: 00007ffc9c960c20 [ 55.999391][ T1582] RBP: 00007ffc9c960c20 R08: 0000000000000000 R09: 0000000000000000 [ 56.007366][ T1582] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc9c961ce0 [ 56.015832][ T1582] R13: 00007fd4b04d7c5a R14: 000000000000d914 R15: 0000000000000006 [ 56.023957][ T1582] [ 56.026956][ T1582] [ 56.029354][ T1582] The buggy address belongs to the physical page: [ 56.035838][ T1582] page:ffffea0001ae5680 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1 pfn:0x6b95a [ 56.046319][ T1582] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 56.053677][ T1582] raw: 00fff00000000000 ffffea0001ae6088 ffffea0001ae58c8 0000000000000000 [ 56.062878][ T1582] raw: 0000000000000001 0000000000000000 00000000ffffffff 0000000000000000 [ 56.071861][ T1582] page dumped because: kasan: bad access detected [ 56.078245][ T1582] page_owner tracks the page as freed [ 56.083586][ T1582] page last allocated via order 0, migratetype Movable, gfp_mask 0x140dca(GFP_HIGHUSER_MOVABLE|__GFP_COMP|__GFP_ZERO), pid 1945, tgid 1945 (modprobe), ts 55068722702, free_ts 55070045888 [ 56.102217][ T1582] post_alloc_hook+0x286/0x2b0 [ 56.107042][ T1582] get_page_from_freelist+0x2fdd/0x3170 [ 56.113523][ T1582] __alloc_pages+0x251/0x640 [ 56.118094][ T1582] __folio_alloc+0xf/0x30 [ 56.122420][ T1582] vma_alloc_folio+0x484/0x9e0 [ 56.127497][ T1582] handle_mm_fault+0x232f/0x4260 [ 56.132404][ T1582] exc_page_fault+0x22a/0x5e0 [ 56.137052][ T1582] asm_exc_page_fault+0x22/0x30 [ 56.141878][ T1582] page last free stack trace: [ 56.146611][ T1582] free_unref_page_prepare+0xd4b/0xee0 [ 56.152128][ T1582] free_unref_page_list+0x54b/0x7e0 [ 56.157743][ T1582] release_pages+0x175c/0x1900 [ 56.163137][ T1582] tlb_flush_mmu+0xe5/0x1d0 [ 56.167722][ T1582] tlb_finish_mmu+0xb0/0x1b0 [ 56.172633][ T1582] exit_mmap+0x341/0x730 [ 56.177292][ T1582] __mmput+0x9b/0x2d0 [ 56.181508][ T1582] exit_mm+0x122/0x1b0 [ 56.185840][ T1582] do_exit+0x81e/0x23a0 [ 56.189985][ T1582] do_group_exit+0x1b5/0x280 [ 56.194701][ T1582] __x64_sys_exit_group+0x3b/0x40 [ 56.199870][ T1582] do_syscall_64+0x3d/0x80 [ 56.204341][ T1582] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 56.210305][ T1582] [ 56.212607][ T1582] Memory state around the buggy address: [ 56.218990][ T1582] ffff88806b959f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 56.227296][ T1582] ffff88806b959f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 56.235502][ T1582] >ffff88806b95a000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 56.243792][ T1582] ^ [ 56.247836][ T1582] ffff88806b95a080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 56.256074][ T1582] ffff88806b95a100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 56.264282][ T1582] ================================================================== [ 56.273072][ T1582] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 56.280564][ T1582] Kernel Offset: disabled [ 56.284955][ T1582] Rebooting in 86400 seconds..