Warning: Permanently added '10.128.0.226' (ED25519) to the list of known hosts.
Setting up swapspace version 1, size = 127995904 bytes
[ 69.933231][ T5054] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 69.966420][ T5057] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 69.974110][ T5057] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 69.981879][ T5057] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 69.990028][ T5057] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 69.997650][ T5057] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 70.005057][ T5057] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
executing program
[ 70.092043][ T5056] loop0: detected capacity change from 0 to 2048
[ 70.105141][ T5056] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found
[ 70.112899][ T5056] UDF-fs: Scanning with blocksize 512 failed
[ 70.123834][ T5056] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 70.206942][ T5056] ==================================================================
[ 70.215045][ T5056] BUG: KASAN: use-after-free in crc_itu_t+0x21c/0x2a0
[ 70.221942][ T5056] Read of size 1 at addr ffff888066830000 by task syz-executor150/5056
[ 70.230204][ T5056]
[ 70.232539][ T5056] CPU: 1 PID: 5056 Comm: syz-executor150 Not tainted 6.7.0-rc6-syzkaller-00022-g55cb5f43689d #0
[ 70.242957][ T5056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023
[ 70.253110][ T5056] Call Trace:
[ 70.256397][ T5056]
[ 70.259342][ T5056] dump_stack_lvl+0x1e7/0x2d0
[ 70.264077][ T5056] ? nf_tcp_handle_invalid+0x650/0x650
[ 70.269565][ T5056] ? panic+0x850/0x850
[ 70.273655][ T5056] ? _printk+0xd5/0x120
[ 70.277831][ T5056] print_report+0x163/0x540
[ 70.282351][ T5056] ? ktime_get_real_ts64+0x470/0x470
[ 70.287656][ T5056] ? __mutex_lock+0x2ee/0xd60
[ 70.292358][ T5056] ? time64_to_tm+0x331/0x4d0
[ 70.297056][ T5056] ? __virt_addr_valid+0x22f/0x2e0
[ 70.302188][ T5056] ? __phys_addr+0xba/0x170
[ 70.306702][ T5056] ? crc_itu_t+0x21c/0x2a0
[ 70.311120][ T5056] kasan_report+0x142/0x170
[ 70.315620][ T5056] ? crc_itu_t+0x21c/0x2a0
[ 70.320060][ T5056] crc_itu_t+0x21c/0x2a0
[ 70.324314][ T5056] udf_sync_fs+0x1d2/0x380
[ 70.328729][ T5056] ? udf_put_super+0x160/0x160
[ 70.333491][ T5056] ? get_nr_dirty_inodes+0x1c7/0x210
[ 70.338783][ T5056] sync_filesystem+0xec/0x220
[ 70.343477][ T5056] generic_shutdown_super+0x72/0x2c0
[ 70.348772][ T5056] kill_block_super+0x44/0x90
[ 70.353442][ T5056] deactivate_locked_super+0xc1/0x130
[ 70.358811][ T5056] cleanup_mnt+0x426/0x4c0
[ 70.363258][ T5056] ? _raw_spin_unlock_irq+0x23/0x50
[ 70.368455][ T5056] task_work_run+0x24a/0x300
[ 70.373044][ T5056] ? kasan_quarantine_put+0xd8/0x230
[ 70.378332][ T5056] ? task_work_cancel+0x2b0/0x2b0
[ 70.383379][ T5056] ? kmem_cache_free+0x299/0x470
[ 70.388329][ T5056] ? do_exit+0xa27/0x2740
[ 70.392656][ T5056] do_exit+0xa2c/0x2740
[ 70.396813][ T5056] ? put_task_struct+0xb0/0xb0
[ 70.401579][ T5056] ? lockdep_hardirqs_on_prepare+0x43c/0x780
[ 70.407556][ T5056] ? print_irqtrace_events+0x220/0x220
[ 70.413013][ T5056] ? _raw_spin_unlock_irq+0x23/0x50
[ 70.418211][ T5056] ? lockdep_hardirqs_on+0x98/0x140
[ 70.423423][ T5056] do_group_exit+0x206/0x2c0
[ 70.428015][ T5056] __x64_sys_exit_group+0x3f/0x40
[ 70.433036][ T5056] do_syscall_64+0x45/0x110
[ 70.437536][ T5056] entry_SYSCALL_64_after_hwframe+0x63/0x6b
[ 70.443431][ T5056] RIP: 0033:0x7fdf7c50f349
[ 70.447836][ T5056] Code: Unable to access opcode bytes at 0x7fdf7c50f31f.
[ 70.454845][ T5056] RSP: 002b:00007ffe168fc088 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[ 70.463262][ T5056] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007fdf7c50f349
[ 70.471233][ T5056] RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000001
[ 70.479206][ T5056] RBP: 00007fdf7c59b390 R08: ffffffffffffffb0 R09: 00007ffe168fc150
[ 70.487266][ T5056] R10: 000080001d00c0d0 R11: 0000000000000246 R12: 00007fdf7c59b390
[ 70.495234][ T5056] R13: 0000000000000000 R14: 00007fdf7c59c100 R15: 00007fdf7c4d99f0
[ 70.503222][ T5056]
[ 70.506240][ T5056]
[ 70.508557][ T5056] The buggy address belongs to the physical page:
[ 70.514963][ T5056] page:ffffea00019a0c00 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1 pfn:0x66830
[ 70.525112][ T5056] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 70.532208][ T5056] page_type: 0xffffffff()
[ 70.536530][ T5056] raw: 00fff00000000000 ffffea00019a0c48 ffffea00019915c8 0000000000000000
[ 70.545104][ T5056] raw: 0000000000000001 0000000000000000 00000000ffffffff 0000000000000000
[ 70.553671][ T5056] page dumped because: kasan: bad access detected
[ 70.560072][ T5056] page_owner tracks the page as freed
[ 70.565429][ T5056] page last allocated via order 0, migratetype Movable, gfp_mask 0x140cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP), pid 5056, tgid 5056 (syz-executor150), ts 70180314734, free_ts 70181726484
[ 70.583488][ T5056] post_alloc_hook+0x1e6/0x210
[ 70.588250][ T5056] get_page_from_freelist+0x33ea/0x3570
[ 70.593798][ T5056] __alloc_pages+0x255/0x680
[ 70.598395][ T5056] alloc_pages_mpol+0x3de/0x640
[ 70.603256][ T5056] vma_alloc_folio+0xf3/0x3f0
[ 70.607923][ T5056] do_wp_page+0x125e/0x4d40
[ 70.612421][ T5056] handle_mm_fault+0x1b1c/0x6680
[ 70.617351][ T5056] exc_page_fault+0x456/0x870
[ 70.622025][ T5056] asm_exc_page_fault+0x26/0x30
[ 70.626867][ T5056] page last free stack trace:
[ 70.631541][ T5056] free_unref_page_prepare+0x931/0xa60
[ 70.636995][ T5056] free_unref_page_list+0x5a0/0x840
[ 70.642219][ T5056] release_pages+0x2117/0x2400
[ 70.646991][ T5056] tlb_flush_mmu+0x34c/0x4e0
[ 70.651574][ T5056] tlb_finish_mmu+0xd4/0x1f0
[ 70.656161][ T5056] exit_mmap+0x4d3/0xc60
[ 70.660406][ T5056] __mmput+0x115/0x3c0
[ 70.664473][ T5056] exit_mm+0x21f/0x300
[ 70.668545][ T5056] do_exit+0x9af/0x2740
[ 70.672699][ T5056] do_group_exit+0x206/0x2c0
[ 70.677292][ T5056] __x64_sys_exit_group+0x3f/0x40
[ 70.682319][ T5056] do_syscall_64+0x45/0x110
[ 70.686827][ T5056] entry_SYSCALL_64_after_hwframe+0x63/0x6b
[ 70.692727][ T5056]
[ 70.695053][ T5056] Memory state around the buggy address:
[ 70.700708][ T5056] ffff88806682ff00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 70.708781][ T5056] ffff88806682ff80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 70.716831][ T5056] >ffff888066830000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 70.724877][ T5056] ^
[ 70.728929][ T5056] ffff888066830080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 70.736980][ T5056] ffff888066830100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 70.745031][ T5056] ==================================================================
[ 70.756308][ T5056] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 70.763519][ T5056] CPU: 1 PID: 5056 Comm: syz-executor150 Not tainted 6.7.0-rc6-syzkaller-00022-g55cb5f43689d #0
[ 70.774075][ T5056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023
[ 70.784148][ T5056] Call Trace:
[ 70.787440][ T5056]
[ 70.790390][ T5056] dump_stack_lvl+0x1e7/0x2d0
[ 70.795115][ T5056] ? nf_tcp_handle_invalid+0x650/0x650
[ 70.800605][ T5056] ? panic+0x850/0x850
[ 70.804692][ T5056] ? lockdep_hardirqs_on_prepare+0x43c/0x780
[ 70.810693][ T5056] ? vscnprintf+0x5d/0x80
[ 70.815055][ T5056] panic+0x349/0x850
[ 70.818950][ T5056] ? check_panic_on_warn+0x21/0xa0
[ 70.824103][ T5056] ? __memcpy_flushcache+0x2b0/0x2b0
[ 70.829404][ T5056] ? _raw_spin_unlock_irqrestore+0x12c/0x140
[ 70.835380][ T5056] ? _raw_spin_unlock+0x40/0x40
[ 70.840243][ T5056] check_panic_on_warn+0x82/0xa0
[ 70.845172][ T5056] ? crc_itu_t+0x21c/0x2a0
[ 70.849582][ T5056] end_report+0x6e/0x140
[ 70.853816][ T5056] kasan_report+0x153/0x170
[ 70.858324][ T5056] ? crc_itu_t+0x21c/0x2a0
[ 70.862740][ T5056] crc_itu_t+0x21c/0x2a0
[ 70.866984][ T5056] udf_sync_fs+0x1d2/0x380
[ 70.871396][ T5056] ? udf_put_super+0x160/0x160
[ 70.876149][ T5056] ? get_nr_dirty_inodes+0x1c7/0x210
[ 70.881427][ T5056] sync_filesystem+0xec/0x220
[ 70.886118][ T5056] generic_shutdown_super+0x72/0x2c0
[ 70.891401][ T5056] kill_block_super+0x44/0x90
[ 70.896072][ T5056] deactivate_locked_super+0xc1/0x130
[ 70.901445][ T5056] cleanup_mnt+0x426/0x4c0
[ 70.905856][ T5056] ? _raw_spin_unlock_irq+0x23/0x50
[ 70.911072][ T5056] task_work_run+0x24a/0x300
[ 70.915659][ T5056] ? kasan_quarantine_put+0xd8/0x230
[ 70.920958][ T5056] ? task_work_cancel+0x2b0/0x2b0
[ 70.925993][ T5056] ? kmem_cache_free+0x299/0x470
[ 70.930964][ T5056] ? do_exit+0xa27/0x2740
[ 70.935300][ T5056] do_exit+0xa2c/0x2740
[ 70.939455][ T5056] ? put_task_struct+0xb0/0xb0
[ 70.944225][ T5056] ? lockdep_hardirqs_on_prepare+0x43c/0x780
[ 70.950219][ T5056] ? print_irqtrace_events+0x220/0x220
[ 70.955695][ T5056] ? _raw_spin_unlock_irq+0x23/0x50
[ 70.960882][ T5056] ? lockdep_hardirqs_on+0x98/0x140
[ 70.966087][ T5056] do_group_exit+0x206/0x2c0
[ 70.970677][ T5056] __x64_sys_exit_group+0x3f/0x40
[ 70.975693][ T5056] do_syscall_64+0x45/0x110
[ 70.980192][ T5056] entry_SYSCALL_64_after_hwframe+0x63/0x6b
[ 70.986092][ T5056] RIP: 0033:0x7fdf7c50f349
[ 70.990492][ T5056] Code: Unable to access opcode bytes at 0x7fdf7c50f31f.
[ 70.997492][ T5056] RSP: 002b:00007ffe168fc088 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[ 71.005896][ T5056] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007fdf7c50f349
[ 71.013866][ T5056] RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000001
[ 71.021867][ T5056] RBP: 00007fdf7c59b390 R08: ffffffffffffffb0 R09: 00007ffe168fc150
[ 71.029831][ T5056] R10: 000080001d00c0d0 R11: 0000000000000246 R12: 00007fdf7c59b390
[ 71.037884][ T5056] R13: 0000000000000000 R14: 00007fdf7c59c100 R15: 00007fdf7c4d99f0
[ 71.045854][ T5056]
[ 71.049175][ T5056] Kernel Offset: disabled
[ 71.053496][ T5056] Rebooting in 86400 seconds..