Warning: Permanently added '10.128.10.1' (ED25519) to the list of known hosts. 2024/10/14 17:55:00 ignoring optional flag "sandboxArg"="0" 2024/10/14 17:55:00 ignoring optional flag "type"="gce" 2024/10/14 17:55:01 parsed 1 programs 2024/10/14 17:55:01 executed programs: 0 [ 53.004706][ T1499] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 57.665130][ T1916] loop0: detected capacity change from 0 to 2048 [ 57.675364][ T1916] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 57.731162][ T1919] loop0: detected capacity change from 0 to 2048 [ 57.740506][ T1919] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 57.788756][ T1921] loop0: detected capacity change from 0 to 2048 [ 57.798716][ T1921] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 57.818898][ T1505] ================================================================== [ 57.826982][ T1505] BUG: KASAN: use-after-free in crc_itu_t+0x178/0x240 [ 57.833827][ T1505] Read of size 1 at addr ffff88806ccd5000 by task syz-executor.0/1505 [ 57.841947][ T1505] [ 57.844294][ T1505] CPU: 0 PID: 1505 Comm: syz-executor.0 Not tainted 6.1.112-syzkaller #0 [ 57.852707][ T1505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 57.862744][ T1505] Call Trace: [ 57.866000][ T1505] [ 57.868903][ T1505] dump_stack_lvl+0xf4/0x251 [ 57.873464][ T1505] ? nf_tcp_handle_invalid+0x2f3/0x2f3 [ 57.878911][ T1505] ? panic+0x3fe/0x3fe [ 57.882965][ T1505] ? lock_acquire+0xbe/0x390 [ 57.887534][ T1505] ? read_lock_is_recursive+0x10/0x10 [ 57.892880][ T1505] ? __virt_addr_valid+0x139/0x270 [ 57.897970][ T1505] ? __virt_addr_valid+0x221/0x270 [ 57.903055][ T1505] print_report+0x15f/0x4f0 [ 57.907528][ T1505] ? __virt_addr_valid+0x139/0x270 [ 57.912627][ T1505] ? __virt_addr_valid+0x221/0x270 [ 57.917718][ T1505] ? crc_itu_t+0x178/0x240 [ 57.922105][ T1505] kasan_report+0x136/0x160 [ 57.926597][ T1505] ? crc_itu_t+0x178/0x240 [ 57.930983][ T1505] crc_itu_t+0x178/0x240 [ 57.935282][ T1505] udf_sync_fs+0x1bd/0x370 [ 57.939679][ T1505] ? udf_put_super+0x130/0x130 [ 57.944410][ T1505] ? dentry_kill+0xbb/0x1e0 [ 57.948882][ T1505] sync_filesystem+0xbf/0x180 [ 57.953531][ T1505] generic_shutdown_super+0x65/0x2c0 [ 57.958895][ T1505] kill_block_super+0x75/0xb0 [ 57.963553][ T1505] deactivate_locked_super+0x71/0xd0 [ 57.968805][ T1505] cleanup_mnt+0x2bd/0x330 [ 57.973210][ T1505] task_work_run+0x206/0x280 [ 57.977859][ T1505] ? task_work_cancel+0x280/0x280 [ 57.982872][ T1505] ? __x64_sys_umount+0xe4/0x120 [ 57.987797][ T1505] ? path_umount+0xc70/0xc70 [ 57.992364][ T1505] exit_to_user_mode_loop+0xa9/0xc0 [ 57.997553][ T1505] exit_to_user_mode_prepare+0x64/0xb0 [ 58.002986][ T1505] syscall_exit_to_user_mode+0x27/0x1b0 [ 58.008592][ T1505] do_syscall_64+0x47/0x80 [ 58.012981][ T1505] ? clear_bhb_loop+0x45/0xa0 [ 58.017625][ T1505] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 58.023597][ T1505] RIP: 0033:0x7f5d58e7de17 [ 58.027984][ T1505] Code: b0 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b0 ff ff ff f7 d8 64 89 02 b8 [ 58.047560][ T1505] RSP: 002b:00007ffc9c2e6b28 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 58.056295][ T1505] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f5d58e7de17 [ 58.064235][ T1505] RDX: 0000000000000000 RSI: 000000000000000a RDI: 00007ffc9c2e6be0 [ 58.072189][ T1505] RBP: 00007ffc9c2e6be0 R08: 0000000000000000 R09: 0000000000000000 [ 58.080130][ T1505] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc9c2e7ca0 [ 58.088155][ T1505] R13: 00007f5d58ec73b9 R14: 000000000000e1a5 R15: 0000000000000006 [ 58.096101][ T1505] [ 58.099095][ T1505] [ 58.101391][ T1505] The buggy address belongs to the physical page: [ 58.107783][ T1505] page:ffffea0001b33540 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1 pfn:0x6ccd5 [ 58.117920][ T1505] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 58.124998][ T1505] raw: 00fff00000000000 ffffea0001b37a08 ffffea0001b33608 0000000000000000 [ 58.133547][ T1505] raw: 0000000000000001 0000000000000000 00000000ffffffff 0000000000000000 [ 58.142128][ T1505] page dumped because: kasan: bad access detected [ 58.148523][ T1505] page_owner tracks the page as freed [ 58.153866][ T1505] page last allocated via order 0, migratetype Movable, gfp_mask 0x140cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP), pid 1505, tgid 1505 (syz-executor.0), ts 57719211209, free_ts 57816350704 [ 58.171712][ T1505] post_alloc_hook+0x286/0x2b0 [ 58.176449][ T1505] get_page_from_freelist+0x2fe5/0x3170 [ 58.181961][ T1505] __alloc_pages+0x251/0x640 [ 58.186519][ T1505] __folio_alloc+0xf/0x30 [ 58.190815][ T1505] vma_alloc_folio+0x484/0x9e0 [ 58.195555][ T1505] wp_page_copy+0x226/0x1970 [ 58.200111][ T1505] handle_mm_fault+0x1f06/0x4290 [ 58.205027][ T1505] exc_page_fault+0x22a/0x5a0 [ 58.209670][ T1505] asm_exc_page_fault+0x22/0x30 [ 58.214487][ T1505] page last free stack trace: [ 58.219126][ T1505] free_unref_page_prepare+0xd6c/0xf00 [ 58.224552][ T1505] free_unref_page_list+0x54b/0x7e0 [ 58.229724][ T1505] release_pages+0x1e0a/0x1fe0 [ 58.234470][ T1505] tlb_flush_mmu+0xe5/0x1d0 [ 58.238944][ T1505] tlb_finish_mmu+0xb0/0x1b0 [ 58.243587][ T1505] exit_mmap+0x341/0x730 [ 58.247795][ T1505] __mmput+0x9b/0x2e0 [ 58.251740][ T1505] exit_mm+0x122/0x1b0 [ 58.255791][ T1505] do_exit+0x81e/0x23a0 [ 58.259913][ T1505] do_group_exit+0x1b5/0x280 [ 58.264468][ T1505] get_signal+0x1117/0x1260 [ 58.268937][ T1505] arch_do_signal_or_restart+0xb3/0x1240 [ 58.274536][ T1505] exit_to_user_mode_loop+0x61/0xc0 [ 58.279702][ T1505] exit_to_user_mode_prepare+0x64/0xb0 [ 58.285125][ T1505] syscall_exit_to_user_mode+0x27/0x1b0 [ 58.290639][ T1505] do_syscall_64+0x47/0x80 [ 58.295019][ T1505] [ 58.297342][ T1505] Memory state around the buggy address: [ 58.302942][ T1505] ffff88806ccd4f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 58.310990][ T1505] ffff88806ccd4f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 58.319029][ T1505] >ffff88806ccd5000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 58.327053][ T1505] ^ [ 58.331090][ T1505] ffff88806ccd5080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 58.339132][ T1505] ffff88806ccd5100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 58.347176][ T1505] ================================================================== [ 58.356101][ T1505] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 58.363608][ T1505] Kernel Offset: disabled [ 58.367926][ T1505] Rebooting in 86400 seconds..