Warning: Permanently added '10.128.0.138' (ECDSA) to the list of known hosts.
executing program
[ 42.859967][ T3499] loop0: detected capacity change from 0 to 2048
[ 42.871107][ T3499] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 43.001215][ T3499] ==================================================================
[ 43.009397][ T3499] BUG: KASAN: use-after-free in crc_itu_t+0x1d1/0x2a0
[ 43.016175][ T3499] Read of size 1 at addr ffff888053609000 by task syz-executor364/3499
[ 43.024399][ T3499]
[ 43.026711][ T3499] CPU: 0 PID: 3499 Comm: syz-executor364 Not tainted 5.15.118-syzkaller #0
[ 43.035270][ T3499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023
[ 43.045303][ T3499] Call Trace:
[ 43.048566][ T3499]
[ 43.051476][ T3499] dump_stack_lvl+0x1e3/0x2cb
[ 43.056139][ T3499] ? io_uring_drop_tctx_refs+0x19d/0x19d
[ 43.061751][ T3499] ? _printk+0xd1/0x111
[ 43.065897][ T3499] ? __wake_up_klogd+0xcc/0x100
[ 43.070725][ T3499] ? panic+0x84d/0x84d
[ 43.074771][ T3499] ? _raw_spin_lock_irqsave+0xdd/0x120
[ 43.080213][ T3499] print_address_description+0x63/0x3b0
[ 43.085743][ T3499] ? crc_itu_t+0x1d1/0x2a0
[ 43.090143][ T3499] kasan_report+0x16b/0x1c0
[ 43.094634][ T3499] ? crc_itu_t+0x1d1/0x2a0
[ 43.099028][ T3499] ? pvclock_gtod_unregister_notifier+0x50/0x50
[ 43.105247][ T3499] crc_itu_t+0x1d1/0x2a0
[ 43.109470][ T3499] udf_sync_fs+0x1ce/0x380
[ 43.113869][ T3499] ? udf_put_super+0x160/0x160
[ 43.118614][ T3499] ? get_nr_dirty_inodes+0x25f/0x2e0
[ 43.123878][ T3499] sync_filesystem+0xe8/0x220
[ 43.128534][ T3499] generic_shutdown_super+0x6e/0x2c0
[ 43.133795][ T3499] kill_block_super+0x7a/0xe0
[ 43.138448][ T3499] deactivate_locked_super+0xa0/0x110
[ 43.143797][ T3499] cleanup_mnt+0x44e/0x500
[ 43.148192][ T3499] ? lockdep_hardirqs_on+0x94/0x130
[ 43.153368][ T3499] task_work_run+0x129/0x1a0
[ 43.157939][ T3499] do_exit+0x6a3/0x2480
[ 43.162075][ T3499] ? put_task_struct+0x80/0x80
[ 43.166829][ T3499] ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[ 43.172789][ T3499] ? vtime_user_exit+0x2d1/0x400
[ 43.177704][ T3499] do_group_exit+0x144/0x310
[ 43.182273][ T3499] __x64_sys_exit_group+0x3b/0x40
[ 43.187276][ T3499] do_syscall_64+0x3d/0xb0
[ 43.191670][ T3499] entry_SYSCALL_64_after_hwframe+0x61/0xcb
[ 43.197540][ T3499] RIP: 0033:0x7f5bc1661039
[ 43.201930][ T3499] Code: Unable to access opcode bytes at RIP 0x7f5bc166100f.
[ 43.209266][ T3499] RSP: 002b:00007ffc9208b3d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[ 43.217673][ T3499] RAX: ffffffffffffffda RBX: 00007f5bc16f53f0 RCX: 00007f5bc1661039
[ 43.225633][ T3499] RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000001
[ 43.233587][ T3499] RBP: 0000000000000001 R08: ffffffffffffffc0 R09: 00007f5bc16efe40
[ 43.241540][ T3499] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5bc16f53f0
[ 43.249503][ T3499] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000001
[ 43.257467][ T3499]
[ 43.260466][ T3499]
[ 43.262768][ T3499] The buggy address belongs to the page:
[ 43.268372][ T3499] page:ffffea00014d8240 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1 pfn:0x53609
[ 43.278494][ T3499] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 43.285583][ T3499] raw: 00fff00000000000 ffffea0001c6b448 ffffea0001ff48c8 0000000000000000
[ 43.294144][ T3499] raw: 0000000000000001 0000000000000000 00000000ffffffff 0000000000000000
[ 43.302699][ T3499] page dumped because: kasan: bad access detected
[ 43.309127][ T3499] page_owner tracks the page as freed
[ 43.314469][ T3499] page last allocated via order 0, migratetype Movable, gfp_mask 0x1100dca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), pid 3492, ts 37304803396, free_ts 37324244374
[ 43.330008][ T3499] get_page_from_freelist+0x322a/0x33c0
[ 43.335571][ T3499] __alloc_pages+0x272/0x700
[ 43.340141][ T3499] alloc_pages_vma+0x39a/0x800
[ 43.344883][ T3499] handle_mm_fault+0x2f49/0x5950
[ 43.349794][ T3499] exc_page_fault+0x271/0x740
[ 43.354444][ T3499] asm_exc_page_fault+0x22/0x30
[ 43.359273][ T3499] page last free stack trace:
[ 43.363918][ T3499] free_unref_page_prepare+0xc34/0xcf0
[ 43.369351][ T3499] free_unref_page_list+0x1f7/0x8e0
[ 43.374526][ T3499] release_pages+0x1bb9/0x1f40
[ 43.379267][ T3499] tlb_finish_mmu+0x177/0x320
[ 43.383919][ T3499] unmap_region+0x304/0x350
[ 43.388398][ T3499] __do_munmap+0x12db/0x1740
[ 43.392965][ T3499] __vm_munmap+0x134/0x230
[ 43.397356][ T3499] __x64_sys_munmap+0x67/0x70
[ 43.402006][ T3499] do_syscall_64+0x3d/0xb0
[ 43.406764][ T3499] entry_SYSCALL_64_after_hwframe+0x61/0xcb
[ 43.412636][ T3499]
[ 43.414943][ T3499] Memory state around the buggy address:
[ 43.420548][ T3499] ffff888053608f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 43.428584][ T3499] ffff888053608f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 43.436622][ T3499] >ffff888053609000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 43.444665][ T3499] ^
[ 43.448711][ T3499] ffff888053609080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 43.456747][ T3499] ffff888053609100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 43.464780][ T3499] ==================================================================
[ 43.472812][ T3499] Disabling lock debugging due to kernel taint
[ 43.479296][ T3499] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 43.486487][ T3499] CPU: 0 PID: 3499 Comm: syz-executor364 Tainted: G B 5.15.118-syzkaller #0
[ 43.496435][ T3499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023
[ 43.506719][ T3499] Call Trace:
[ 43.509981][ T3499]
[ 43.512902][ T3499] dump_stack_lvl+0x1e3/0x2cb
[ 43.517560][ T3499] ? io_uring_drop_tctx_refs+0x19d/0x19d
[ 43.523165][ T3499] ? panic+0x84d/0x84d
[ 43.527206][ T3499] ? preempt_schedule_common+0xa6/0xd0
[ 43.532637][ T3499] ? preempt_schedule+0xd9/0xe0
[ 43.537464][ T3499] panic+0x318/0x84d
[ 43.541333][ T3499] ? check_panic_on_warn+0x1d/0xa0
[ 43.546420][ T3499] ? fb_is_primary_device+0xcc/0xcc
[ 43.551590][ T3499] ? _raw_spin_unlock_irqrestore+0x128/0x130
[ 43.557541][ T3499] ? _raw_spin_unlock+0x40/0x40
[ 43.562364][ T3499] ? print_memory_metadata+0xe2/0x140
[ 43.567725][ T3499] check_panic_on_warn+0x7e/0xa0
[ 43.572641][ T3499] ? crc_itu_t+0x1d1/0x2a0
[ 43.577041][ T3499] end_report+0x6d/0xf0
[ 43.581187][ T3499] kasan_report+0x18e/0x1c0
[ 43.585670][ T3499] ? crc_itu_t+0x1d1/0x2a0
[ 43.590068][ T3499] ? pvclock_gtod_unregister_notifier+0x50/0x50
[ 43.596301][ T3499] crc_itu_t+0x1d1/0x2a0
[ 43.600521][ T3499] udf_sync_fs+0x1ce/0x380
[ 43.604915][ T3499] ? udf_put_super+0x160/0x160
[ 43.609675][ T3499] ? get_nr_dirty_inodes+0x25f/0x2e0
[ 43.614937][ T3499] sync_filesystem+0xe8/0x220
[ 43.619593][ T3499] generic_shutdown_super+0x6e/0x2c0
[ 43.624855][ T3499] kill_block_super+0x7a/0xe0
[ 43.629508][ T3499] deactivate_locked_super+0xa0/0x110
[ 43.634854][ T3499] cleanup_mnt+0x44e/0x500
[ 43.639251][ T3499] ? lockdep_hardirqs_on+0x94/0x130
[ 43.644423][ T3499] task_work_run+0x129/0x1a0
[ 43.648988][ T3499] do_exit+0x6a3/0x2480
[ 43.653127][ T3499] ? put_task_struct+0x80/0x80
[ 43.657865][ T3499] ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[ 43.663822][ T3499] ? vtime_user_exit+0x2d1/0x400
[ 43.668742][ T3499] do_group_exit+0x144/0x310
[ 43.673308][ T3499] __x64_sys_exit_group+0x3b/0x40
[ 43.678308][ T3499] do_syscall_64+0x3d/0xb0
[ 43.682703][ T3499] entry_SYSCALL_64_after_hwframe+0x61/0xcb
[ 43.688570][ T3499] RIP: 0033:0x7f5bc1661039
[ 43.692959][ T3499] Code: Unable to access opcode bytes at RIP 0x7f5bc166100f.
[ 43.700301][ T3499] RSP: 002b:00007ffc9208b3d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[ 43.708699][ T3499] RAX: ffffffffffffffda RBX: 00007f5bc16f53f0 RCX: 00007f5bc1661039
[ 43.716653][ T3499] RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000001
[ 43.724602][ T3499] RBP: 0000000000000001 R08: ffffffffffffffc0 R09: 00007f5bc16efe40
[ 43.732553][ T3499] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5bc16f53f0
[ 43.740506][ T3499] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000001
[ 43.748458][ T3499]
[ 43.751525][ T3499] Kernel Offset: disabled
[ 43.755835][ T3499] Rebooting in 86400 seconds..