Warning: Permanently added '10.128.1.226' (ED25519) to the list of known hosts. 2024/08/06 08:34:34 ignoring optional flag "sandboxArg"="0" 2024/08/06 08:34:34 parsed 1 programs 2024/08/06 08:34:34 executed programs: 0 [ 57.440524][ T1909] loop0: detected capacity change from 0 to 2048 [ 57.448656][ T1909] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 57.460077][ T1909] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 57.471196][ T1909] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 57.481804][ T1909] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 57.489819][ T1909] UDF-fs: Scanning with blocksize 512 failed [ 57.498300][ T1909] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 57.571438][ T1912] loop0: detected capacity change from 0 to 2048 [ 57.579039][ T1912] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 57.590252][ T1912] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 57.601316][ T1912] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 57.612302][ T1912] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 57.620035][ T1912] UDF-fs: Scanning with blocksize 512 failed [ 57.628235][ T1912] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 57.679178][ T1498] ================================================================== [ 57.687249][ T1498] BUG: KASAN: use-after-free in crc_itu_t+0x178/0x240 [ 57.694001][ T1498] Read of size 1 at addr ffff88806acfd000 by task syz-executor.0/1498 [ 57.702277][ T1498] [ 57.704599][ T1498] CPU: 1 PID: 1498 Comm: syz-executor.0 Not tainted 6.1.103-syzkaller #0 [ 57.713006][ T1498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 57.723126][ T1498] Call Trace: [ 57.726395][ T1498] [ 57.729340][ T1498] dump_stack_lvl+0xf4/0x251 [ 57.733921][ T1498] ? nf_tcp_handle_invalid+0x2f3/0x2f3 [ 57.739450][ T1498] ? panic+0x3fe/0x3fe [ 57.743572][ T1498] ? lock_acquire+0xbe/0x390 [ 57.748132][ T1498] ? read_lock_is_recursive+0x10/0x10 [ 57.753496][ T1498] ? __virt_addr_valid+0x139/0x270 [ 57.758609][ T1498] ? __virt_addr_valid+0x221/0x270 [ 57.763686][ T1498] print_report+0x15f/0x4f0 [ 57.768181][ T1498] ? __virt_addr_valid+0x139/0x270 [ 57.773332][ T1498] ? __virt_addr_valid+0x221/0x270 [ 57.778406][ T1498] ? crc_itu_t+0x178/0x240 [ 57.782813][ T1498] kasan_report+0x136/0x160 [ 57.787300][ T1498] ? crc_itu_t+0x178/0x240 [ 57.791690][ T1498] crc_itu_t+0x178/0x240 [ 57.796092][ T1498] udf_sync_fs+0x1bd/0x370 [ 57.800497][ T1498] ? udf_put_super+0x130/0x130 [ 57.805238][ T1498] ? dentry_kill+0xbb/0x1e0 [ 57.809984][ T1498] sync_filesystem+0xbf/0x180 [ 57.815152][ T1498] generic_shutdown_super+0x65/0x2c0 [ 57.820416][ T1498] kill_block_super+0x75/0xb0 [ 57.825062][ T1498] deactivate_locked_super+0x71/0xd0 [ 57.830419][ T1498] cleanup_mnt+0x2bd/0x330 [ 57.835050][ T1498] task_work_run+0x206/0x280 [ 57.839626][ T1498] ? task_work_cancel+0x280/0x280 [ 57.844632][ T1498] ? __x64_sys_umount+0xe4/0x120 [ 57.849711][ T1498] ? path_umount+0xc70/0xc70 [ 57.854283][ T1498] exit_to_user_mode_loop+0xa9/0xc0 [ 57.859538][ T1498] exit_to_user_mode_prepare+0x64/0xb0 [ 57.865059][ T1498] syscall_exit_to_user_mode+0x27/0x1b0 [ 57.870583][ T1498] do_syscall_64+0x47/0x80 [ 57.874967][ T1498] ? clear_bhb_loop+0x45/0xa0 [ 57.879634][ T1498] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 57.885532][ T1498] RIP: 0033:0x7ff174a7dc87 [ 57.889926][ T1498] Code: b0 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b0 ff ff ff f7 d8 64 89 02 b8 [ 57.909782][ T1498] RSP: 002b:00007ffd4984f868 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 57.918223][ T1498] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007ff174a7dc87 [ 57.926211][ T1498] RDX: 0000000000000000 RSI: 000000000000000a RDI: 00007ffd4984f920 [ 57.934256][ T1498] RBP: 00007ffd4984f920 R08: 0000000000000000 R09: 0000000000000000 [ 57.942377][ T1498] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd498509e0 [ 57.950317][ T1498] R13: 00007ff174ad7c5a R14: 000000000000e0ca R15: 0000000000000006 [ 57.958496][ T1498] [ 57.961596][ T1498] [ 57.963892][ T1498] The buggy address belongs to the physical page: [ 57.970385][ T1498] page:ffffea0001ab3f40 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1 pfn:0x6acfd [ 57.980528][ T1498] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 57.987636][ T1498] raw: 00fff00000000000 ffffea0001b43e08 ffffea0001ab0fc8 0000000000000000 [ 57.996388][ T1498] raw: 0000000000000001 0000000000000000 00000000ffffffff 0000000000000000 [ 58.005134][ T1498] page dumped because: kasan: bad access detected [ 58.011627][ T1498] page_owner tracks the page as freed [ 58.017006][ T1498] page last allocated via order 0, migratetype Movable, gfp_mask 0x140cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP), pid 1911, tgid 1911 (syz-executor.0), ts 57638365931, free_ts 57671257654 [ 58.035039][ T1498] post_alloc_hook+0x286/0x2b0 [ 58.039782][ T1498] get_page_from_freelist+0x2fe5/0x3170 [ 58.045320][ T1498] __alloc_pages+0x251/0x640 [ 58.050221][ T1498] __folio_alloc+0xf/0x30 [ 58.054517][ T1498] vma_alloc_folio+0x484/0x9e0 [ 58.059246][ T1498] wp_page_copy+0x226/0x1970 [ 58.063817][ T1498] handle_mm_fault+0x1f0f/0x42c0 [ 58.068739][ T1498] exc_page_fault+0x22a/0x5a0 [ 58.073390][ T1498] asm_exc_page_fault+0x22/0x30 [ 58.078697][ T1498] page last free stack trace: [ 58.083518][ T1498] free_unref_page_prepare+0xd6c/0xf00 [ 58.088948][ T1498] free_unref_page_list+0x54b/0x7e0 [ 58.094118][ T1498] release_pages+0x1e0a/0x1fe0 [ 58.098949][ T1498] tlb_flush_mmu+0xe5/0x1d0 [ 58.103689][ T1498] tlb_finish_mmu+0xb0/0x1b0 [ 58.108265][ T1498] exit_mmap+0x341/0x730 [ 58.112478][ T1498] __mmput+0x9b/0x2e0 [ 58.116459][ T1498] exit_mm+0x122/0x1b0 [ 58.120511][ T1498] do_exit+0x81e/0x23a0 [ 58.124728][ T1498] do_group_exit+0x1b5/0x280 [ 58.129288][ T1498] get_signal+0x1117/0x1260 [ 58.133851][ T1498] arch_do_signal_or_restart+0xb3/0x1240 [ 58.139557][ T1498] exit_to_user_mode_loop+0x61/0xc0 [ 58.144830][ T1498] exit_to_user_mode_prepare+0x64/0xb0 [ 58.150617][ T1498] syscall_exit_to_user_mode+0x27/0x1b0 [ 58.156149][ T1498] do_syscall_64+0x47/0x80 [ 58.160795][ T1498] [ 58.163095][ T1498] Memory state around the buggy address: [ 58.168694][ T1498] ffff88806acfcf00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 58.176999][ T1498] ffff88806acfcf80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 58.185307][ T1498] >ffff88806acfd000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 58.193358][ T1498] ^ [ 58.197408][ T1498] ffff88806acfd080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 58.205536][ T1498] ffff88806acfd100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 58.213636][ T1498] ================================================================== [ 58.222251][ T1498] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 58.229975][ T1498] Kernel Offset: disabled [ 58.234977][ T1498] Rebooting in 86400 seconds..