Warning: Permanently added '10.128.1.80' (ED25519) to the list of known hosts. 2024/02/01 13:57:13 ignoring optional flag "sandboxArg"="0" 2024/02/01 13:57:14 parsed 1 programs 2024/02/01 13:57:14 executed programs: 0 [ 46.343885][ T2013] loop0: detected capacity change from 0 to 2048 [ 46.352305][ T2013] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 46.363879][ T2013] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 46.374865][ T2013] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 46.385619][ T2013] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 46.393336][ T2013] UDF-fs: Scanning with blocksize 512 failed [ 46.400370][ T2013] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 46.448082][ T1593] ================================================================== [ 46.457193][ T1593] BUG: KASAN: use-after-free in crc_itu_t+0x9c/0xc0 [ 46.464050][ T1593] Read of size 1 at addr ffff8880692a8000 by task syz-executor.0/1593 [ 46.472371][ T1593] [ 46.474670][ T1593] CPU: 0 PID: 1593 Comm: syz-executor.0 Not tainted 5.15.148-syzkaller #0 [ 46.483142][ T1593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 46.493165][ T1593] Call Trace: [ 46.496593][ T1593] [ 46.499628][ T1593] dump_stack_lvl+0x41/0x5e [ 46.504128][ T1593] print_address_description.constprop.0.cold+0x6c/0x309 [ 46.511313][ T1593] ? crc_itu_t+0x9c/0xc0 [ 46.515908][ T1593] ? crc_itu_t+0x9c/0xc0 [ 46.520866][ T1593] kasan_report.cold+0x83/0xdf [ 46.529815][ T1593] ? crc_itu_t+0x9c/0xc0 [ 46.534594][ T1593] crc_itu_t+0x9c/0xc0 [ 46.539174][ T1593] udf_finalize_lvid+0xdb/0x1d0 [ 46.545610][ T1593] ? udf_mount+0x10/0x10 [ 46.550981][ T1593] ? __dentry_kill+0x3d5/0x5e0 [ 46.559314][ T1593] udf_sync_fs+0xc9/0x130 [ 46.565389][ T1593] sync_filesystem.part.0+0x63/0x170 [ 46.572177][ T1593] generic_shutdown_super+0x64/0x320 [ 46.580107][ T1593] kill_block_super+0x93/0xd0 [ 46.586789][ T1593] deactivate_locked_super+0x7b/0x130 [ 46.594371][ T1593] cleanup_mnt+0x2b8/0x3e0 [ 46.602002][ T1593] task_work_run+0xb8/0x140 [ 46.611436][ T1593] exit_to_user_mode_prepare+0x15a/0x160 [ 46.621626][ T1593] syscall_exit_to_user_mode+0x12/0x30 [ 46.631686][ T1593] do_syscall_64+0x42/0x80 [ 46.642024][ T1593] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 46.654371][ T1593] RIP: 0033:0x7fdf1f2a1c87 [ 46.662178][ T1593] Code: b0 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b0 ff ff ff f7 d8 64 89 02 b8 [ 46.699528][ T1593] RSP: 002b:00007ffda73cc4a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 46.715279][ T1593] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fdf1f2a1c87 [ 46.729975][ T1593] RDX: 0000000000000000 RSI: 000000000000000a RDI: 00007ffda73cc560 [ 46.741407][ T1593] RBP: 00007ffda73cc560 R08: 0000000000000000 R09: 0000000000000000 [ 46.758495][ T1593] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffda73cd620 [ 46.774786][ T1593] R13: 00007fdf1f2fbc5a R14: 000000000000b4e6 R15: 0000000000000006 [ 46.790576][ T1593] [ 46.797748][ T1593] [ 46.801020][ T1593] The buggy address belongs to the page: [ 46.827566][ T1593] page:ffffea0001a4aa00 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1 pfn:0x692a8 [ 46.846659][ T1593] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 46.859526][ T1593] raw: 00fff00000000000 ffffea0001a4aa48 ffffea0001a499c8 0000000000000000 [ 46.879242][ T1593] raw: 0000000000000001 0000000000000000 00000000ffffffff 0000000000000000 [ 46.892554][ T1593] page dumped because: kasan: bad access detected [ 46.905084][ T1593] page_owner tracks the page as freed [ 46.917072][ T1593] page last allocated via order 0, migratetype Movable, gfp_mask 0x1100dca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), pid 2012, ts 46411959844, free_ts 46435197907 [ 46.939282][ T1593] get_page_from_freelist+0x12d1/0x2d40 [ 46.947695][ T1593] __alloc_pages+0x1b2/0x440 [ 46.958428][ T1593] alloc_pages_vma+0xe0/0x650 [ 46.968606][ T1593] __handle_mm_fault+0x1ce9/0x33c0 [ 46.983202][ T1593] handle_mm_fault+0x1c5/0x5b0 [ 46.992509][ T1593] do_user_addr_fault+0x298/0xcb0 [ 46.999480][ T1593] exc_page_fault+0x5a/0xb0 [ 47.008368][ T1593] asm_exc_page_fault+0x22/0x30 [ 47.014680][ T1593] page last free stack trace: [ 47.021825][ T1593] free_pcp_prepare+0x379/0x850 [ 47.028878][ T1593] free_unref_page_list+0x16f/0xbd0 [ 47.037382][ T1593] release_pages+0xb3a/0x1480 [ 47.045457][ T1593] tlb_flush_mmu+0xbb/0x590 [ 47.051454][ T1593] unmap_page_range+0x11b6/0x1b70 [ 47.057708][ T1593] unmap_vmas+0x13e/0x250 [ 47.066114][ T1593] exit_mmap+0x19d/0x530 [ 47.075438][ T1593] mmput+0xd6/0x400 [ 47.085600][ T1593] do_exit+0x884/0x2200 [ 47.094474][ T1593] do_group_exit+0xe7/0x290 [ 47.102831][ T1593] get_signal+0x279/0x1f00 [ 47.108559][ T1593] arch_do_signal_or_restart+0x2b5/0x17b0 [ 47.117084][ T1593] exit_to_user_mode_prepare+0xef/0x160 [ 47.129811][ T1593] syscall_exit_to_user_mode+0x12/0x30 [ 47.138404][ T1593] do_syscall_64+0x42/0x80 [ 47.143428][ T1593] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 47.149957][ T1593] [ 47.152879][ T1593] Memory state around the buggy address: [ 47.160791][ T1593] ffff8880692a7f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 47.170096][ T1593] ffff8880692a7f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 47.180576][ T1593] >ffff8880692a8000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 47.191234][ T1593] ^ [ 47.195940][ T1593] ffff8880692a8080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 47.205796][ T1593] ffff8880692a8100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 47.222104][ T1593] ================================================================== [ 47.232454][ T1593] Disabling lock debugging due to kernel taint [ 47.239812][ T1593] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 47.247791][ T1593] Kernel Offset: disabled [ 47.252097][ T1593] Rebooting in 86400 seconds..