Warning: Permanently added '10.128.0.222' (ED25519) to the list of known hosts. 2024/02/23 15:16:50 ignoring optional flag "sandboxArg"="0" 2024/02/23 15:16:51 parsed 1 programs 2024/02/23 15:16:51 executed programs: 0 [ 45.198413][ T2011] loop0: detected capacity change from 0 to 2048 [ 45.206671][ T2011] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 45.310829][ T2014] loop0: detected capacity change from 0 to 2048 [ 45.319434][ T2014] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 45.435600][ T2016] loop0: detected capacity change from 0 to 2048 [ 45.443753][ T2016] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 45.581296][ T2018] loop0: detected capacity change from 0 to 2048 [ 45.590168][ T2018] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 45.712931][ T2020] loop0: detected capacity change from 0 to 2048 [ 45.721415][ T2020] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 45.859840][ T2022] loop0: detected capacity change from 0 to 2048 [ 45.868256][ T2022] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 45.980068][ T2024] loop0: detected capacity change from 0 to 2048 [ 45.988670][ T2024] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 46.042939][ T1593] ================================================================== [ 46.050994][ T1593] BUG: KASAN: use-after-free in crc_itu_t+0x9c/0xc0 [ 46.057556][ T1593] Read of size 1 at addr ffff88806a0f1000 by task syz-executor.0/1593 [ 46.065670][ T1593] [ 46.067965][ T1593] CPU: 1 PID: 1593 Comm: syz-executor.0 Not tainted 5.15.149-syzkaller #0 [ 46.076424][ T1593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 46.086443][ T1593] Call Trace: [ 46.089695][ T1593] [ 46.092594][ T1593] dump_stack_lvl+0x41/0x5e [ 46.097061][ T1593] print_address_description.constprop.0.cold+0x6c/0x309 [ 46.104047][ T1593] ? crc_itu_t+0x9c/0xc0 [ 46.108256][ T1593] ? crc_itu_t+0x9c/0xc0 [ 46.112459][ T1593] kasan_report.cold+0x83/0xdf [ 46.117317][ T1593] ? crc_itu_t+0x9c/0xc0 [ 46.121538][ T1593] crc_itu_t+0x9c/0xc0 [ 46.125585][ T1593] udf_finalize_lvid+0xdb/0x1d0 [ 46.130502][ T1593] ? udf_mount+0x10/0x10 [ 46.134710][ T1593] udf_close_lvid+0x3db/0x590 [ 46.139357][ T1593] udf_put_super+0x167/0x1d0 [ 46.143917][ T1593] generic_shutdown_super+0x129/0x320 [ 46.149251][ T1593] kill_block_super+0x93/0xd0 [ 46.153889][ T1593] deactivate_locked_super+0x7b/0x130 [ 46.159341][ T1593] cleanup_mnt+0x2b8/0x3e0 [ 46.163739][ T1593] task_work_run+0xb8/0x140 [ 46.168220][ T1593] exit_to_user_mode_prepare+0x15a/0x160 [ 46.173823][ T1593] syscall_exit_to_user_mode+0x12/0x30 [ 46.179246][ T1593] do_syscall_64+0x42/0x80 [ 46.183627][ T1593] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 46.189491][ T1593] RIP: 0033:0x7fd0f0159c87 [ 46.193870][ T1593] Code: b0 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b0 ff ff ff f7 d8 64 89 02 b8 [ 46.213533][ T1593] RSP: 002b:00007ffc4737faa8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 46.221917][ T1593] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fd0f0159c87 [ 46.230032][ T1593] RDX: 0000000000000000 RSI: 000000000000000a RDI: 00007ffc4737fb60 [ 46.238055][ T1593] RBP: 00007ffc4737fb60 R08: 0000000000000000 R09: 0000000000000000 [ 46.245990][ T1593] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc47380c20 [ 46.253940][ T1593] R13: 00007fd0f01b3c5a R14: 000000000000b384 R15: 0000000000000006 [ 46.261887][ T1593] [ 46.264879][ T1593] [ 46.267175][ T1593] The buggy address belongs to the page: [ 46.272769][ T1593] page:ffffea0001a83c40 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1 pfn:0x6a0f1 [ 46.282888][ T1593] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 46.290134][ T1593] raw: 00fff00000000000 ffffea0001a86508 ffffea0001a83b08 0000000000000000 [ 46.298686][ T1593] raw: 0000000000000001 0000000000000000 00000000ffffffff 0000000000000000 [ 46.307229][ T1593] page dumped because: kasan: bad access detected [ 46.313602][ T1593] page_owner tracks the page as freed [ 46.319194][ T1593] page last allocated via order 0, migratetype Movable, gfp_mask 0x1100dca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), pid 2021, ts 45855237546, free_ts 45914731925 [ 46.335048][ T1593] get_page_from_freelist+0x12d1/0x2d40 [ 46.340563][ T1593] __alloc_pages+0x1b2/0x440 [ 46.345170][ T1593] alloc_pages_vma+0xe0/0x650 [ 46.349810][ T1593] __handle_mm_fault+0x1ce9/0x33c0 [ 46.354891][ T1593] handle_mm_fault+0x1c5/0x5b0 [ 46.359642][ T1593] do_user_addr_fault+0x298/0xcb0 [ 46.364640][ T1593] exc_page_fault+0x5a/0xb0 [ 46.369114][ T1593] asm_exc_page_fault+0x22/0x30 [ 46.374030][ T1593] page last free stack trace: [ 46.378672][ T1593] free_pcp_prepare+0x379/0x850 [ 46.383503][ T1593] free_unref_page_list+0x16f/0xbd0 [ 46.388668][ T1593] release_pages+0xb3a/0x1480 [ 46.393309][ T1593] tlb_flush_mmu+0xbb/0x590 [ 46.397778][ T1593] unmap_page_range+0x11b6/0x1b70 [ 46.402787][ T1593] unmap_vmas+0x13e/0x250 [ 46.407077][ T1593] exit_mmap+0x19d/0x530 [ 46.411283][ T1593] mmput+0xd6/0x400 [ 46.415054][ T1593] do_exit+0x884/0x2200 [ 46.419175][ T1593] do_group_exit+0xe7/0x290 [ 46.423732][ T1593] get_signal+0x279/0x1f00 [ 46.428284][ T1593] arch_do_signal_or_restart+0x2b5/0x17b0 [ 46.433969][ T1593] exit_to_user_mode_prepare+0xef/0x160 [ 46.439482][ T1593] syscall_exit_to_user_mode+0x12/0x30 [ 46.444916][ T1593] do_syscall_64+0x42/0x80 [ 46.449464][ T1593] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 46.455329][ T1593] [ 46.457723][ T1593] Memory state around the buggy address: [ 46.463316][ T1593] ffff88806a0f0f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 46.471344][ T1593] ffff88806a0f0f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 46.479365][ T1593] >ffff88806a0f1000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 46.487657][ T1593] ^ [ 46.491691][ T1593] ffff88806a0f1080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 46.499841][ T1593] ffff88806a0f1100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 46.508043][ T1593] ================================================================== [ 46.516080][ T1593] Disabling lock debugging due to kernel taint [ 46.522438][ T1593] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 46.529785][ T1593] Kernel Offset: disabled [ 46.534198][ T1593] Rebooting in 86400 seconds..