Warning: Permanently added '10.128.1.167' (ED25519) to the list of known hosts. 2023/09/28 17:11:42 ignoring optional flag "sandboxArg"="0" 2023/09/28 17:11:42 parsed 1 programs 2023/09/28 17:11:42 executed programs: 0 [ 53.279927][ T1995] loop0: detected capacity change from 0 to 2048 [ 53.288407][ T1995] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 53.300765][ T1995] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 53.312401][ T1995] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 53.324196][ T1995] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 53.332440][ T1995] UDF-fs: Scanning with blocksize 512 failed [ 53.339997][ T1995] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 53.396769][ T1584] ================================================================== [ 53.404870][ T1584] BUG: KASAN: use-after-free in crc_itu_t+0x178/0x240 [ 53.411919][ T1584] Read of size 1 at addr ffff888069a53000 by task syz-executor.0/1584 [ 53.420322][ T1584] [ 53.422649][ T1584] CPU: 0 PID: 1584 Comm: syz-executor.0 Not tainted 6.1.55-syzkaller #0 [ 53.431504][ T1584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 53.442154][ T1584] Call Trace: [ 53.445515][ T1584] [ 53.448436][ T1584] dump_stack_lvl+0xf4/0x251 [ 53.453100][ T1584] ? nf_tcp_handle_invalid+0x2f3/0x2f3 [ 53.458893][ T1584] ? panic+0x3f7/0x3f7 [ 53.463306][ T1584] ? _printk+0xca/0x10a [ 53.467464][ T1584] ? ktime_get_real_ts64+0x340/0x340 [ 53.472923][ T1584] print_report+0x15f/0x4f0 [ 53.477679][ T1584] ? crc_itu_t+0x178/0x240 [ 53.482174][ T1584] kasan_report+0x136/0x160 [ 53.486769][ T1584] ? crc_itu_t+0x178/0x240 [ 53.491244][ T1584] crc_itu_t+0x178/0x240 [ 53.495632][ T1584] udf_sync_fs+0x1bd/0x370 [ 53.500112][ T1584] ? udf_put_super+0x130/0x130 [ 53.505342][ T1584] ? dentry_kill+0xbb/0x1e0 [ 53.509839][ T1584] ? dput+0x38/0x2b0 [ 53.513725][ T1584] sync_filesystem+0xbf/0x180 [ 53.518481][ T1584] generic_shutdown_super+0x65/0x2c0 [ 53.523984][ T1584] kill_block_super+0x75/0xb0 [ 53.528664][ T1584] deactivate_locked_super+0x71/0xd0 [ 53.533938][ T1584] cleanup_mnt+0x2bd/0x330 [ 53.538686][ T1584] task_work_run+0x206/0x280 [ 53.543643][ T1584] ? task_work_cancel+0x2a0/0x2a0 [ 53.548759][ T1584] ? __x64_sys_umount+0xe4/0x120 [ 53.553860][ T1584] ? path_umount+0xc70/0xc70 [ 53.558619][ T1584] exit_to_user_mode_loop+0xa4/0xb0 [ 53.563918][ T1584] exit_to_user_mode_prepare+0x64/0xb0 [ 53.569559][ T1584] syscall_exit_to_user_mode+0x27/0x1c0 [ 53.575283][ T1584] do_syscall_64+0x49/0x80 [ 53.579699][ T1584] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 53.585919][ T1584] RIP: 0033:0x7f949ca7dc87 [ 53.590654][ T1584] Code: b0 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b0 ff ff ff f7 d8 64 89 02 b8 [ 53.612163][ T1584] RSP: 002b:00007ffdfdc9f138 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 53.621549][ T1584] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f949ca7dc87 [ 53.629963][ T1584] RDX: 0000000000000000 RSI: 000000000000000a RDI: 00007ffdfdc9f1f0 [ 53.638190][ T1584] RBP: 00007ffdfdc9f1f0 R08: 0000000000000000 R09: 0000000000000000 [ 53.646841][ T1584] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffdfdca02b0 [ 53.655608][ T1584] R13: 00007f949cad7c5a R14: 000000000000cfff R15: 0000000000000006 [ 53.663742][ T1584] [ 53.666826][ T1584] [ 53.669279][ T1584] The buggy address belongs to the physical page: [ 53.675750][ T1584] page:ffffea0001a694c0 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1 pfn:0x69a53 [ 53.685986][ T1584] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 53.693344][ T1584] raw: 00fff00000000000 ffffea0001a69908 ffff8880bad3e5e0 0000000000000000 [ 53.702016][ T1584] raw: 0000000000000001 0000000000000000 00000000ffffffff 0000000000000000 [ 53.710662][ T1584] page dumped because: kasan: bad access detected [ 53.717238][ T1584] page_owner tracks the page as freed [ 53.722609][ T1584] page last allocated via order 0, migratetype Movable, gfp_mask 0x140dca(GFP_HIGHUSER_MOVABLE|__GFP_COMP|__GFP_ZERO), pid 1994, tgid 1994 (syz-executor.0), ts 53267779809, free_ts 53392197171 [ 53.741797][ T1584] post_alloc_hook+0x286/0x2b0 [ 53.746631][ T1584] get_page_from_freelist+0x3100/0x32a0 [ 53.752277][ T1584] __alloc_pages+0x251/0x640 [ 53.756956][ T1584] __folio_alloc+0xf/0x30 [ 53.761264][ T1584] vma_alloc_folio+0x484/0x9e0 [ 53.765999][ T1584] wp_page_copy+0x1f9/0x1970 [ 53.770586][ T1584] handle_mm_fault+0x1f58/0x4260 [ 53.775608][ T1584] exc_page_fault+0x22a/0x5e0 [ 53.780356][ T1584] asm_exc_page_fault+0x22/0x30 [ 53.785357][ T1584] page last free stack trace: [ 53.790003][ T1584] free_unref_page_prepare+0xd4b/0xee0 [ 53.795888][ T1584] free_unref_page_list+0xf6/0x6d0 [ 53.801104][ T1584] release_pages+0x175c/0x1900 [ 53.806190][ T1584] tlb_flush_mmu+0xe5/0x1d0 [ 53.810851][ T1584] tlb_finish_mmu+0xb0/0x1b0 [ 53.815442][ T1584] exit_mmap+0x341/0x730 [ 53.819871][ T1584] __mmput+0x9b/0x2d0 [ 53.823865][ T1584] exit_mm+0x122/0x1b0 [ 53.827926][ T1584] do_exit+0x81e/0x23a0 [ 53.832113][ T1584] do_group_exit+0x1b5/0x280 [ 53.837129][ T1584] get_signal+0x1117/0x1260 [ 53.841630][ T1584] arch_do_signal_or_restart+0xb3/0x1240 [ 53.847637][ T1584] exit_to_user_mode_loop+0x61/0xb0 [ 53.853317][ T1584] exit_to_user_mode_prepare+0x64/0xb0 [ 53.858773][ T1584] syscall_exit_to_user_mode+0x27/0x1c0 [ 53.864400][ T1584] do_syscall_64+0x49/0x80 [ 53.868887][ T1584] [ 53.871186][ T1584] Memory state around the buggy address: [ 53.876870][ T1584] ffff888069a52f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 53.885198][ T1584] ffff888069a52f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 53.893252][ T1584] >ffff888069a53000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 53.903384][ T1584] ^ [ 53.907449][ T1584] ffff888069a53080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 53.915958][ T1584] ffff888069a53100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 53.924811][ T1584] ================================================================== [ 53.933666][ T1584] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 53.941271][ T1584] Kernel Offset: disabled [ 53.945720][ T1584] Rebooting in 86400 seconds..