DUID 00:04:70:54:fc:d0:2a:32:b7:62:cf:21:72:23:c9:95:e9:3f forked to background, child pid 3174 [ 23.584487][ T3175] 8021q: adding VLAN 0 to HW filter on device bond0 [ 23.594069][ T3175] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.13' (ED25519) to the list of known hosts. executing program syzkaller login: [ 42.294514][ T3500] loop0: detected capacity change from 0 to 2048 [ 42.415786][ T3500] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 42.428116][ T3500] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 42.940202][ T3500] ================================================================== [ 42.948332][ T3500] BUG: KASAN: null-ptr-deref in udf_bread+0x27c/0x600 [ 42.955092][ T3500] Write of size 8 at addr 0000000000000000 by task syz-executor250/3500 [ 42.963388][ T3500] [ 42.965687][ T3500] CPU: 1 PID: 3500 Comm: syz-executor250 Not tainted 5.15.157-syzkaller #0 [ 42.974245][ T3500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 42.984272][ T3500] Call Trace: [ 42.987527][ T3500] [ 42.990437][ T3500] dump_stack_lvl+0x1e3/0x2d0 [ 42.995090][ T3500] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 43.000695][ T3500] ? panic+0x860/0x860 [ 43.004757][ T3500] ? _raw_spin_lock_irqsave+0xdd/0x120 [ 43.010195][ T3500] ? udf_bread+0x27c/0x600 [ 43.014585][ T3500] kasan_report+0x161/0x1c0 [ 43.019062][ T3500] ? udf_bread+0x27c/0x600 [ 43.023458][ T3500] kasan_check_range+0x27e/0x290 [ 43.028374][ T3500] udf_bread+0x27c/0x600 [ 43.032598][ T3500] ? udf_add_aext+0x370/0x370 [ 43.037260][ T3500] ? rcu_is_watching+0x11/0xa0 [ 43.042001][ T3500] ? __mark_inode_dirty+0x3dd/0xd60 [ 43.047183][ T3500] ? udf_write_aext+0x515/0x7a0 [ 43.052013][ T3500] udf_add_entry+0x1d1e/0x3350 [ 43.056766][ T3500] ? udf_add_nondir+0x5d0/0x5d0 [ 43.061597][ T3500] ? do_raw_spin_unlock+0x137/0x8b0 [ 43.066779][ T3500] ? __mark_inode_dirty+0x7ef/0xd60 [ 43.071962][ T3500] udf_add_nondir+0x132/0x5d0 [ 43.076619][ T3500] ? udf_find_entry+0x14d0/0x14d0 [ 43.081625][ T3500] ? __mark_inode_dirty+0x3dd/0xd60 [ 43.086811][ T3500] ? udf_lookup+0x370/0x370 [ 43.091291][ T3500] path_openat+0x130a/0x2f20 [ 43.095877][ T3500] ? do_filp_open+0x460/0x460 [ 43.100543][ T3500] do_filp_open+0x21c/0x460 [ 43.105028][ T3500] ? vfs_tmpfile+0x2e0/0x2e0 [ 43.109614][ T3500] ? _raw_spin_unlock+0x24/0x40 [ 43.114443][ T3500] ? alloc_fd+0x594/0x630 [ 43.118756][ T3500] do_sys_openat2+0x13b/0x500 [ 43.123417][ T3500] ? rcu_lock_acquire+0x30/0x30 [ 43.128248][ T3500] ? __context_tracking_exit+0x4c/0x80 [ 43.133691][ T3500] ? do_sys_open+0x220/0x220 [ 43.138261][ T3500] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 43.144219][ T3500] __x64_sys_creat+0x11f/0x160 [ 43.148961][ T3500] ? __x64_compat_sys_openat+0x290/0x290 [ 43.154583][ T3500] ? syscall_enter_from_user_mode+0x2e/0x240 [ 43.160543][ T3500] ? lockdep_hardirqs_on+0x94/0x130 [ 43.165719][ T3500] ? syscall_enter_from_user_mode+0x2e/0x240 [ 43.171677][ T3500] do_syscall_64+0x3b/0xb0 [ 43.176070][ T3500] ? clear_bhb_loop+0x15/0x70 [ 43.180723][ T3500] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 43.186591][ T3500] RIP: 0033:0x7f0106be1b79 [ 43.191007][ T3500] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 43.210590][ T3500] RSP: 002b:00007ffcca466218 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 43.218980][ T3500] RAX: ffffffffffffffda RBX: 00007f0106c2a068 RCX: 00007f0106be1b79 [ 43.226927][ T3500] RDX: 00007f0106be1b79 RSI: 0000000000000000 RDI: 0000000020000300 [ 43.234873][ T3500] RBP: 00007f0106c55610 R08: 00007ffcca4663e8 R09: 00007ffcca4663e8 [ 43.242824][ T3500] R10: 00007ffcca4663e8 R11: 0000000000000246 R12: 0000000000000001 [ 43.250775][ T3500] R13: 00007ffcca4663d8 R14: 0000000000000001 R15: 0000000000000001 [ 43.258733][ T3500] [ 43.261732][ T3500] ================================================================== [ 43.269766][ T3500] Disabling lock debugging due to kernel taint [ 43.276116][ T3500] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 43.283304][ T3500] CPU: 1 PID: 3500 Comm: syz-executor250 Tainted: G B 5.15.157-syzkaller #0 [ 43.293279][ T3500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 43.303312][ T3500] Call Trace: [ 43.306569][ T3500] [ 43.309480][ T3500] dump_stack_lvl+0x1e3/0x2d0 [ 43.314140][ T3500] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 43.319747][ T3500] ? panic+0x860/0x860 [ 43.323797][ T3500] ? preempt_schedule_common+0xa6/0xd0 [ 43.329247][ T3500] ? preempt_schedule+0xd9/0xe0 [ 43.334110][ T3500] panic+0x318/0x860 [ 43.338018][ T3500] ? check_panic_on_warn+0x1d/0xa0 [ 43.343109][ T3500] ? fb_is_primary_device+0xd0/0xd0 [ 43.348283][ T3500] ? _raw_spin_unlock_irqrestore+0x128/0x130 [ 43.354240][ T3500] ? _raw_spin_unlock+0x40/0x40 [ 43.359064][ T3500] ? _raw_spin_lock_irqsave+0xdd/0x120 [ 43.364499][ T3500] check_panic_on_warn+0x7e/0xa0 [ 43.369414][ T3500] ? udf_bread+0x27c/0x600 [ 43.373810][ T3500] end_report+0x6d/0xf0 [ 43.377941][ T3500] kasan_report+0x18e/0x1c0 [ 43.382418][ T3500] ? udf_bread+0x27c/0x600 [ 43.386829][ T3500] kasan_check_range+0x27e/0x290 [ 43.391746][ T3500] udf_bread+0x27c/0x600 [ 43.395968][ T3500] ? udf_add_aext+0x370/0x370 [ 43.400623][ T3500] ? rcu_is_watching+0x11/0xa0 [ 43.405368][ T3500] ? __mark_inode_dirty+0x3dd/0xd60 [ 43.410548][ T3500] ? udf_write_aext+0x515/0x7a0 [ 43.415402][ T3500] udf_add_entry+0x1d1e/0x3350 [ 43.420169][ T3500] ? udf_add_nondir+0x5d0/0x5d0 [ 43.425020][ T3500] ? do_raw_spin_unlock+0x137/0x8b0 [ 43.430197][ T3500] ? __mark_inode_dirty+0x7ef/0xd60 [ 43.435389][ T3500] udf_add_nondir+0x132/0x5d0 [ 43.440043][ T3500] ? udf_find_entry+0x14d0/0x14d0 [ 43.445043][ T3500] ? __mark_inode_dirty+0x3dd/0xd60 [ 43.450225][ T3500] ? udf_lookup+0x370/0x370 [ 43.454724][ T3500] path_openat+0x130a/0x2f20 [ 43.459302][ T3500] ? do_filp_open+0x460/0x460 [ 43.463961][ T3500] do_filp_open+0x21c/0x460 [ 43.468448][ T3500] ? vfs_tmpfile+0x2e0/0x2e0 [ 43.473024][ T3500] ? _raw_spin_unlock+0x24/0x40 [ 43.477854][ T3500] ? alloc_fd+0x594/0x630 [ 43.482161][ T3500] do_sys_openat2+0x13b/0x500 [ 43.486819][ T3500] ? rcu_lock_acquire+0x30/0x30 [ 43.491654][ T3500] ? __context_tracking_exit+0x4c/0x80 [ 43.497092][ T3500] ? do_sys_open+0x220/0x220 [ 43.501678][ T3500] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 43.507641][ T3500] __x64_sys_creat+0x11f/0x160 [ 43.512382][ T3500] ? __x64_compat_sys_openat+0x290/0x290 [ 43.517989][ T3500] ? syscall_enter_from_user_mode+0x2e/0x240 [ 43.523946][ T3500] ? lockdep_hardirqs_on+0x94/0x130 [ 43.529118][ T3500] ? syscall_enter_from_user_mode+0x2e/0x240 [ 43.535074][ T3500] do_syscall_64+0x3b/0xb0 [ 43.539466][ T3500] ? clear_bhb_loop+0x15/0x70 [ 43.544122][ T3500] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 43.549989][ T3500] RIP: 0033:0x7f0106be1b79 [ 43.554390][ T3500] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 43.574007][ T3500] RSP: 002b:00007ffcca466218 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 43.582414][ T3500] RAX: ffffffffffffffda RBX: 00007f0106c2a068 RCX: 00007f0106be1b79 [ 43.590364][ T3500] RDX: 00007f0106be1b79 RSI: 0000000000000000 RDI: 0000000020000300 [ 43.598308][ T3500] RBP: 00007f0106c55610 R08: 00007ffcca4663e8 R09: 00007ffcca4663e8 [ 43.606260][ T3500] R10: 00007ffcca4663e8 R11: 0000000000000246 R12: 0000000000000001 [ 43.614380][ T3500] R13: 00007ffcca4663d8 R14: 0000000000000001 R15: 0000000000000001 [ 43.622334][ T3500] [ 43.625721][ T3500] Kernel Offset: disabled [ 43.630033][ T3500] Rebooting in 86400 seconds..