Warning: Permanently added '10.128.0.79' (ECDSA) to the list of known hosts.
[ 64.151412][ T3545] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 64.159223][ T3545] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 64.166832][ T3545] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 64.174878][ T3545] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 64.183050][ T3545] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 64.190628][ T3545] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
executing program
[ 64.275908][ T3543] loop0: detected capacity change from 0 to 2048
[ 64.286595][ T3543] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[ 64.297991][ T3543] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[ 64.308886][ T3543] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[ 64.319567][ T3543] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found
[ 64.327261][ T3543] UDF-fs: Scanning with blocksize 512 failed
[ 64.335721][ T3543] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 64.544860][ T3543] ==================================================================
[ 64.552978][ T3543] BUG: KASAN: use-after-free in crc_itu_t+0x1d1/0x2a0
[ 64.559800][ T3543] Read of size 1 at addr ffff8880713dc000 by task syz-executor159/3543
[ 64.568036][ T3543]
[ 64.570355][ T3543] CPU: 0 PID: 3543 Comm: syz-executor159 Not tainted 6.1.30-syzkaller #0
[ 64.578757][ T3543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023
[ 64.588901][ T3543] Call Trace:
[ 64.592180][ T3543]
[ 64.595115][ T3543] dump_stack_lvl+0x1e3/0x2cb
[ 64.599814][ T3543] ? irq_work_queue+0xc6/0x150
[ 64.604587][ T3543] ? nf_tcp_handle_invalid+0x642/0x642
[ 64.610055][ T3543] ? panic+0x75d/0x75d
[ 64.614139][ T3543] ? _printk+0xd1/0x111
[ 64.618302][ T3543] ? _raw_spin_lock_irqsave+0xac/0x120
[ 64.623776][ T3543] print_report+0x15f/0x4f0
[ 64.628310][ T3543] ? time64_to_tm+0x32d/0x4d0
[ 64.633000][ T3543] ? __virt_addr_valid+0x22b/0x2e0
[ 64.638121][ T3543] ? __phys_addr+0xb6/0x170
[ 64.642653][ T3543] ? crc_itu_t+0x1d1/0x2a0
[ 64.647274][ T3543] kasan_report+0x136/0x160
[ 64.651810][ T3543] ? crc_itu_t+0x1d1/0x2a0
[ 64.656258][ T3543] crc_itu_t+0x1d1/0x2a0
[ 64.660613][ T3543] udf_sync_fs+0x1ce/0x380
[ 64.665059][ T3543] ? udf_put_super+0x160/0x160
[ 64.669842][ T3543] ? get_nr_dirty_inodes+0x2ab/0x2e0
[ 64.675143][ T3543] sync_filesystem+0xe8/0x220
[ 64.679827][ T3543] generic_shutdown_super+0x6b/0x340
[ 64.685121][ T3543] kill_block_super+0x7a/0xe0
[ 64.689809][ T3543] deactivate_locked_super+0xa0/0x110
[ 64.695194][ T3543] cleanup_mnt+0x490/0x520
[ 64.699633][ T3543] ? lockdep_hardirqs_on+0x94/0x130
[ 64.704842][ T3543] task_work_run+0x246/0x300
[ 64.709481][ T3543] ? kasan_quarantine_put+0xd4/0x220
[ 64.714775][ T3543] ? task_work_cancel+0x2b0/0x2b0
[ 64.719809][ T3543] ? kmem_cache_free+0x292/0x510
[ 64.725186][ T3543] ? do_exit+0x6f6/0x2300
[ 64.729527][ T3543] do_exit+0x6fb/0x2300
[ 64.733697][ T3543] ? do_group_exit+0x1f2/0x2b0
[ 64.738471][ T3543] ? put_task_struct+0x80/0x80
[ 64.743242][ T3543] ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[ 64.749231][ T3543] ? print_irqtrace_events+0x210/0x210
[ 64.754700][ T3543] ? _raw_spin_unlock_irq+0x1f/0x40
[ 64.759902][ T3543] ? lockdep_hardirqs_on+0x94/0x130
[ 64.765129][ T3543] do_group_exit+0x202/0x2b0
[ 64.769842][ T3543] __x64_sys_exit_group+0x3b/0x40
[ 64.774904][ T3543] do_syscall_64+0x3d/0xb0
[ 64.779341][ T3543] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 64.785250][ T3543] RIP: 0033:0x7f32f6dca4e9
[ 64.789664][ T3543] Code: Unable to access opcode bytes at 0x7f32f6dca4bf.
[ 64.796677][ T3543] RSP: 002b:00007ffd883df788 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[ 64.805104][ T3543] RAX: ffffffffffffffda RBX: 00007f32f6e69450 RCX: 00007f32f6dca4e9
[ 64.813075][ T3543] RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000001
[ 64.821047][ T3543] RBP: 0000000000000001 R08: ffffffffffffffb8 R09: 0000000000000000
[ 64.829107][ T3543] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f32f6e69450
[ 64.837077][ T3543] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000001
[ 64.845063][ T3543]
[ 64.848097][ T3543]
[ 64.850428][ T3543] The buggy address belongs to the physical page:
[ 64.856834][ T3543] page:ffffea0001c4f700 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1 pfn:0x713dc
[ 64.866981][ T3543] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 64.874185][ T3543] raw: 00fff00000000000 ffffea0001c09f48 ffffea0001c4eb08 0000000000000000
[ 64.882767][ T3543] raw: 0000000000000001 0000000000000000 00000000ffffffff 0000000000000000
[ 64.891341][ T3543] page dumped because: kasan: bad access detected
[ 64.897748][ T3543] page_owner tracks the page as freed
[ 64.903111][ T3543] page last allocated via order 0, migratetype Movable, gfp_mask 0x140dca(GFP_HIGHUSER_MOVABLE|__GFP_COMP|__GFP_ZERO), pid 3542, tgid 3542 (sh), ts 64109654106, free_ts 64434310084
[ 64.920922][ T3543] post_alloc_hook+0x18d/0x1b0
[ 64.925697][ T3543] get_page_from_freelist+0x32ed/0x3480
[ 64.931241][ T3543] __alloc_pages+0x28d/0x770
[ 64.935830][ T3543] __folio_alloc+0xf/0x30
[ 64.940275][ T3543] vma_alloc_folio+0x486/0x990
[ 64.945048][ T3543] handle_mm_fault+0x2e85/0x5330
[ 64.950000][ T3543] __get_user_pages+0x4f3/0x1190
[ 64.954955][ T3543] __get_user_pages_remote+0x1cd/0x750
[ 64.960421][ T3543] get_arg_page+0x147/0x370
[ 64.964923][ T3543] copy_string_kernel+0x144/0x1e0
[ 64.969948][ T3543] do_execveat_common+0x3ba/0x720
[ 64.975009][ T3543] __x64_sys_execve+0x8e/0xa0
[ 64.979682][ T3543] do_syscall_64+0x3d/0xb0
[ 64.984102][ T3543] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 64.990002][ T3543] page last free stack trace:
[ 64.994668][ T3543] free_unref_page_prepare+0xf63/0x1120
[ 65.000222][ T3543] free_unref_page_list+0x107/0x810
[ 65.005426][ T3543] release_pages+0x2836/0x2b40
[ 65.010200][ T3543] tlb_flush_mmu+0xfc/0x210
[ 65.014712][ T3543] tlb_finish_mmu+0xce/0x1f0
[ 65.019313][ T3543] exit_mmap+0x3c3/0x9f0
[ 65.023566][ T3543] __mmput+0x115/0x3c0
[ 65.027639][ T3543] exit_mm+0x226/0x300
[ 65.031714][ T3543] do_exit+0x67e/0x2300
[ 65.035876][ T3543] do_group_exit+0x202/0x2b0
[ 65.040473][ T3543] __x64_sys_exit_group+0x3b/0x40
[ 65.045508][ T3543] do_syscall_64+0x3d/0xb0
[ 65.049927][ T3543] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 65.055822][ T3543]
[ 65.058146][ T3543] Memory state around the buggy address:
[ 65.063778][ T3543] ffff8880713dbf00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 65.071834][ T3543] ffff8880713dbf80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 65.079889][ T3543] >ffff8880713dc000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 65.087946][ T3543] ^
[ 65.092010][ T3543] ffff8880713dc080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 65.100071][ T3543] ffff8880713dc100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 65.108123][ T3543] ==================================================================
[ 65.123621][ T3543] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 65.130851][ T3543] CPU: 1 PID: 3543 Comm: syz-executor159 Not tainted 6.1.30-syzkaller #0
[ 65.139256][ T3543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023
[ 65.149307][ T3543] Call Trace:
[ 65.152587][ T3543]
[ 65.155536][ T3543] dump_stack_lvl+0x1e3/0x2cb
[ 65.160221][ T3543] ? nf_tcp_handle_invalid+0x642/0x642
[ 65.165677][ T3543] ? panic+0x75d/0x75d
[ 65.169742][ T3543] ? preempt_schedule_common+0xa6/0xd0
[ 65.175204][ T3543] ? vscnprintf+0x59/0x80
[ 65.179535][ T3543] panic+0x318/0x75d
[ 65.183434][ T3543] ? check_panic_on_warn+0x1d/0xa0
[ 65.188544][ T3543] ? memcpy_page_flushcache+0xfc/0xfc
[ 65.193920][ T3543] ? _raw_spin_unlock_irqrestore+0x128/0x130
[ 65.199897][ T3543] ? _raw_spin_unlock+0x40/0x40
[ 65.204753][ T3543] ? print_report+0x4a3/0x4f0
[ 65.209438][ T3543] check_panic_on_warn+0x7e/0xa0
[ 65.214380][ T3543] ? crc_itu_t+0x1d1/0x2a0
[ 65.218799][ T3543] end_report+0x66/0x110
[ 65.223048][ T3543] kasan_report+0x143/0x160
[ 65.227562][ T3543] ? crc_itu_t+0x1d1/0x2a0
[ 65.231985][ T3543] crc_itu_t+0x1d1/0x2a0
[ 65.236232][ T3543] udf_sync_fs+0x1ce/0x380
[ 65.240652][ T3543] ? udf_put_super+0x160/0x160
[ 65.245415][ T3543] ? get_nr_dirty_inodes+0x2ab/0x2e0
[ 65.250702][ T3543] sync_filesystem+0xe8/0x220
[ 65.255375][ T3543] generic_shutdown_super+0x6b/0x340
[ 65.260658][ T3543] kill_block_super+0x7a/0xe0
[ 65.265334][ T3543] deactivate_locked_super+0xa0/0x110
[ 65.270705][ T3543] cleanup_mnt+0x490/0x520
[ 65.275121][ T3543] ? lockdep_hardirqs_on+0x94/0x130
[ 65.280385][ T3543] task_work_run+0x246/0x300
[ 65.285007][ T3543] ? kasan_quarantine_put+0xd4/0x220
[ 65.290304][ T3543] ? task_work_cancel+0x2b0/0x2b0
[ 65.295334][ T3543] ? kmem_cache_free+0x292/0x510
[ 65.300271][ T3543] ? do_exit+0x6f6/0x2300
[ 65.304610][ T3543] do_exit+0x6fb/0x2300
[ 65.308770][ T3543] ? do_group_exit+0x1f2/0x2b0
[ 65.313537][ T3543] ? put_task_struct+0x80/0x80
[ 65.318304][ T3543] ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[ 65.324282][ T3543] ? print_irqtrace_events+0x210/0x210
[ 65.329738][ T3543] ? _raw_spin_unlock_irq+0x1f/0x40
[ 65.334929][ T3543] ? lockdep_hardirqs_on+0x94/0x130
[ 65.340134][ T3543] do_group_exit+0x202/0x2b0
[ 65.344731][ T3543] __x64_sys_exit_group+0x3b/0x40
[ 65.349767][ T3543] do_syscall_64+0x3d/0xb0
[ 65.354185][ T3543] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 65.360075][ T3543] RIP: 0033:0x7f32f6dca4e9
[ 65.364484][ T3543] Code: Unable to access opcode bytes at 0x7f32f6dca4bf.
[ 65.371507][ T3543] RSP: 002b:00007ffd883df788 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[ 65.379925][ T3543] RAX: ffffffffffffffda RBX: 00007f32f6e69450 RCX: 00007f32f6dca4e9
[ 65.387904][ T3543] RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000001
[ 65.395869][ T3543] RBP: 0000000000000001 R08: ffffffffffffffb8 R09: 0000000000000000
[ 65.403857][ T3543] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f32f6e69450
[ 65.411824][ T3543] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000001
[ 65.419797][ T3543]
[ 65.423085][ T3543] Kernel Offset: disabled
[ 65.427428][ T3543] Rebooting in 86400 seconds..