Warning: Permanently added '10.128.1.61' (ED25519) to the list of known hosts.
Setting up swapspace version 1, size = 127995904 bytes
[ 75.050451][ T4245] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS
executing program
[ 75.129367][ T4250] loop0: detected capacity change from 0 to 2048
[ 75.141220][ T4250] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[ 75.155963][ T4250] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 75.223937][ T4250] ==================================================================
[ 75.232051][ T4250] BUG: KASAN: use-after-free in crc_itu_t+0x218/0x2a0
[ 75.238870][ T4250] Read of size 1 at addr ffff888066185000 by task syz-executor322/4250
[ 75.247142][ T4250]
[ 75.249474][ T4250] CPU: 0 PID: 4250 Comm: syz-executor322 Not tainted 6.1.123-syzkaller #0
[ 75.257970][ T4250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[ 75.268028][ T4250] Call Trace:
[ 75.271305][ T4250]
[ 75.274228][ T4250] dump_stack_lvl+0x1e3/0x2cb
[ 75.278921][ T4250] ? nf_tcp_handle_invalid+0x642/0x642
[ 75.284409][ T4250] ? panic+0x764/0x764
[ 75.288478][ T4250] ? _printk+0xd1/0x111
[ 75.292645][ T4250] ? __virt_addr_valid+0x17f/0x530
[ 75.297770][ T4250] ? __virt_addr_valid+0x17f/0x530
[ 75.302892][ T4250] print_report+0x15f/0x4f0
[ 75.307403][ T4250] ? __virt_addr_valid+0x17f/0x530
[ 75.312554][ T4250] ? __virt_addr_valid+0x17f/0x530
[ 75.317674][ T4250] ? __virt_addr_valid+0x45b/0x530
[ 75.322807][ T4250] ? __phys_addr+0xb6/0x170
[ 75.327317][ T4250] ? crc_itu_t+0x218/0x2a0
[ 75.331742][ T4250] kasan_report+0x136/0x160
[ 75.336248][ T4250] ? crc_itu_t+0x218/0x2a0
[ 75.340675][ T4250] crc_itu_t+0x218/0x2a0
[ 75.345400][ T4250] udf_sync_fs+0x1ce/0x380
[ 75.349833][ T4250] ? udf_put_super+0x160/0x160
[ 75.354605][ T4250] ? get_nr_dirty_inodes+0x2ab/0x2e0
[ 75.359901][ T4250] sync_filesystem+0xe8/0x220
[ 75.364585][ T4250] generic_shutdown_super+0x6b/0x340
[ 75.369880][ T4250] kill_block_super+0x7a/0xe0
[ 75.374576][ T4250] deactivate_locked_super+0xa0/0x110
[ 75.379956][ T4250] cleanup_mnt+0x490/0x520
[ 75.384385][ T4250] ? lockdep_hardirqs_on+0x94/0x130
[ 75.390071][ T4250] task_work_run+0x246/0x300
[ 75.394696][ T4250] ? kasan_quarantine_put+0xd4/0x220
[ 75.399992][ T4250] ? task_work_cancel+0x2e0/0x2e0
[ 75.405030][ T4250] ? kmem_cache_free+0x292/0x510
[ 75.410163][ T4250] ? do_exit+0xa69/0x26a0
[ 75.414516][ T4250] do_exit+0xa6e/0x26a0
[ 75.418692][ T4250] ? put_task_struct+0x80/0x80
[ 75.423473][ T4250] ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[ 75.429475][ T4250] ? print_irqtrace_events+0x210/0x210
[ 75.434950][ T4250] ? _raw_spin_unlock_irq+0x1f/0x40
[ 75.440160][ T4250] ? lockdep_hardirqs_on+0x94/0x130
[ 75.445366][ T4250] do_group_exit+0x202/0x2b0
[ 75.449970][ T4250] __x64_sys_exit_group+0x3b/0x40
[ 75.455008][ T4250] do_syscall_64+0x3b/0xb0
[ 75.459433][ T4250] ? clear_bhb_loop+0x45/0xa0
[ 75.464112][ T4250] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 75.470107][ T4250] RIP: 0033:0x7f533e903be9
[ 75.474540][ T4250] Code: Unable to access opcode bytes at 0x7f533e903bbf.
[ 75.481559][ T4250] RSP: 002b:00007ffc14811bc8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[ 75.489982][ T4250] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007f533e903be9
[ 75.497957][ T4250] RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000001
[ 75.505932][ T4250] RBP: 00007f533e98d390 R08: ffffffffffffffb8 R09: 00007f533e96131c
[ 75.513932][ T4250] R10: 00000000200023c3 R11: 0000000000000246 R12: 00007f533e98d390
[ 75.521910][ T4250] R13: 0000000000000000 R14: 00007f533e98f160 R15: 00007f533e8c9de0
[ 75.529894][ T4250]
[ 75.532915][ T4250]
[ 75.535249][ T4250] The buggy address belongs to the physical page:
[ 75.541696][ T4250] page:ffffea0001986140 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1 pfn:0x66185
[ 75.551941][ T4250] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 75.559074][ T4250] raw: 00fff00000000000 ffffea0001a9c848 ffffea00019861c8 0000000000000000
[ 75.567778][ T4250] raw: 0000000000000001 0000000000000000 00000000ffffffff 0000000000000000
[ 75.576357][ T4250] page dumped because: kasan: bad access detected
[ 75.582773][ T4250] page_owner tracks the page as freed
[ 75.588144][ T4250] page last allocated via order 0, migratetype Movable, gfp_mask 0x140cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP), pid 4250, tgid 4250 (syz-executor322), ts 75192136673, free_ts 75194152437
[ 75.606141][ T4250] post_alloc_hook+0x18d/0x1b0
[ 75.610917][ T4250] get_page_from_freelist+0x3731/0x38d0
[ 75.616469][ T4250] __alloc_pages+0x28d/0x770
[ 75.621113][ T4250] __folio_alloc+0xf/0x30
[ 75.625445][ T4250] vma_alloc_folio+0x486/0x990
[ 75.630210][ T4250] wp_page_copy+0x291/0x18c0
[ 75.634805][ T4250] handle_mm_fault+0x2525/0x5340
[ 75.639775][ T4250] exc_page_fault+0x26f/0x620
[ 75.644458][ T4250] asm_exc_page_fault+0x22/0x30
[ 75.649319][ T4250] page last free stack trace:
[ 75.653984][ T4250] free_unref_page_prepare+0x12a6/0x15b0
[ 75.659626][ T4250] free_unref_page_list+0x663/0x900
[ 75.664827][ T4250] release_pages+0x24c4/0x27a0
[ 75.669638][ T4250] tlb_flush_mmu+0xfc/0x210
[ 75.674144][ T4250] tlb_finish_mmu+0xce/0x1f0
[ 75.678738][ T4250] exit_mmap+0x3b3/0x980
[ 75.682991][ T4250] __mmput+0x115/0x3c0
[ 75.687059][ T4250] exit_mm+0x226/0x300
[ 75.691134][ T4250] do_exit+0x9f1/0x26a0
[ 75.695296][ T4250] do_group_exit+0x202/0x2b0
[ 75.699893][ T4250] __x64_sys_exit_group+0x3b/0x40
[ 75.704926][ T4250] do_syscall_64+0x3b/0xb0
[ 75.709352][ T4250] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 75.715266][ T4250]
[ 75.717622][ T4250] Memory state around the buggy address:
[ 75.723247][ T4250] ffff888066184f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 75.731307][ T4250] ffff888066184f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 75.739368][ T4250] >ffff888066185000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 75.747424][ T4250] ^
[ 75.751488][ T4250] ffff888066185080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 75.759548][ T4250] ffff888066185100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 75.767607][ T4250] ==================================================================
[ 75.776774][ T4250] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 75.783995][ T4250] CPU: 0 PID: 4250 Comm: syz-executor322 Not tainted 6.1.123-syzkaller #0
[ 75.792519][ T4250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[ 75.802688][ T4250] Call Trace:
[ 75.805970][ T4250]
[ 75.808901][ T4250] dump_stack_lvl+0x1e3/0x2cb
[ 75.813594][ T4250] ? nf_tcp_handle_invalid+0x642/0x642
[ 75.819065][ T4250] ? panic+0x764/0x764
[ 75.823137][ T4250] ? preempt_schedule_common+0xa6/0xd0
[ 75.828601][ T4250] ? vscnprintf+0x59/0x80
[ 75.832936][ T4250] panic+0x318/0x764
[ 75.836838][ T4250] ? check_panic_on_warn+0x1d/0xa0
[ 75.841958][ T4250] ? memcpy_page_flushcache+0xfc/0xfc
[ 75.847334][ T4250] ? _raw_spin_unlock_irqrestore+0x128/0x130
[ 75.853323][ T4250] ? _raw_spin_unlock+0x40/0x40
[ 75.858185][ T4250] ? print_report+0x4a3/0x4f0
[ 75.862867][ T4250] check_panic_on_warn+0x7e/0xa0
[ 75.867809][ T4250] ? crc_itu_t+0x218/0x2a0
[ 75.872233][ T4250] end_report+0x66/0x110
[ 75.876483][ T4250] kasan_report+0x143/0x160
[ 75.880989][ T4250] ? crc_itu_t+0x218/0x2a0
[ 75.885418][ T4250] crc_itu_t+0x218/0x2a0
[ 75.889705][ T4250] udf_sync_fs+0x1ce/0x380
[ 75.894246][ T4250] ? udf_put_super+0x160/0x160
[ 75.899022][ T4250] ? get_nr_dirty_inodes+0x2ab/0x2e0
[ 75.904406][ T4250] sync_filesystem+0xe8/0x220
[ 75.909096][ T4250] generic_shutdown_super+0x6b/0x340
[ 75.914391][ T4250] kill_block_super+0x7a/0xe0
[ 75.919096][ T4250] deactivate_locked_super+0xa0/0x110
[ 75.924479][ T4250] cleanup_mnt+0x490/0x520
[ 75.928921][ T4250] ? lockdep_hardirqs_on+0x94/0x130
[ 75.934124][ T4250] task_work_run+0x246/0x300
[ 75.938726][ T4250] ? kasan_quarantine_put+0xd4/0x220
[ 75.944019][ T4250] ? task_work_cancel+0x2e0/0x2e0
[ 75.949050][ T4250] ? kmem_cache_free+0x292/0x510
[ 75.954016][ T4250] ? do_exit+0xa69/0x26a0
[ 75.958354][ T4250] do_exit+0xa6e/0x26a0
[ 75.962525][ T4250] ? put_task_struct+0x80/0x80
[ 75.967299][ T4250] ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[ 75.973379][ T4250] ? print_irqtrace_events+0x210/0x210
[ 75.978850][ T4250] ? _raw_spin_unlock_irq+0x1f/0x40
[ 75.984057][ T4250] ? lockdep_hardirqs_on+0x94/0x130
[ 75.989259][ T4250] do_group_exit+0x202/0x2b0
[ 75.993865][ T4250] __x64_sys_exit_group+0x3b/0x40
[ 75.998899][ T4250] do_syscall_64+0x3b/0xb0
[ 76.003327][ T4250] ? clear_bhb_loop+0x45/0xa0
[ 76.008005][ T4250] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 76.013908][ T4250] RIP: 0033:0x7f533e903be9
[ 76.018323][ T4250] Code: Unable to access opcode bytes at 0x7f533e903bbf.
[ 76.025337][ T4250] RSP: 002b:00007ffc14811bc8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[ 76.033754][ T4250] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007f533e903be9
[ 76.041731][ T4250] RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000001
[ 76.049704][ T4250] RBP: 00007f533e98d390 R08: ffffffffffffffb8 R09: 00007f533e96131c
[ 76.057682][ T4250] R10: 00000000200023c3 R11: 0000000000000246 R12: 00007f533e98d390
[ 76.065746][ T4250] R13: 0000000000000000 R14: 00007f533e98f160 R15: 00007f533e8c9de0
[ 76.073738][ T4250]
[ 76.077132][ T4250] Kernel Offset: disabled
[ 76.081465][ T4250] Rebooting in 86400 seconds..