forked to background, child pid 4646
no interfaces have a carrier
[ 26.705848][ T4647] 8021q: adding VLAN 0 to HW filter on device bond0
[ 26.717309][ T4647] eql: remember to turn off Van-Jacobson compression on your slave devices
Starting sshd: OK
syzkaller
Warning: Permanently added '10.128.0.115' (ECDSA) to the list of known hosts.
syzkaller login: [ 51.712570][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 51.726322][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 51.734947][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 51.735126][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 51.744795][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
executing program
[ 51.760005][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 51.783182][ T5062] loop0: detected capacity change from 0 to 2048
[ 51.795836][ T5062] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 51.877600][ T5062] ==================================================================
[ 51.885718][ T5062] BUG: KASAN: use-after-free in udf_close_lvid.isra.0+0x4a7/0x550
[ 51.893606][ T5062] Write of size 1 at addr ffff888158290aa8 by task syz-executor364/5062
[ 51.901911][ T5062]
[ 51.904228][ T5062] CPU: 1 PID: 5062 Comm: syz-executor364 Not tainted 6.1.0-syzkaller-11674-g84e57d292203 #0
[ 51.914269][ T5062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[ 51.924307][ T5062] Call Trace:
[ 51.927568][ T5062]
[ 51.930488][ T5062] dump_stack_lvl+0xd1/0x138
[ 51.935091][ T5062] print_report+0x15e/0x45d
[ 51.939584][ T5062] ? __phys_addr+0xc8/0x140
[ 51.944079][ T5062] ? udf_close_lvid.isra.0+0x4a7/0x550
[ 51.949524][ T5062] kasan_report+0xbf/0x1f0
[ 51.953927][ T5062] ? udf_close_lvid.isra.0+0x4a7/0x550
[ 51.959377][ T5062] udf_close_lvid.isra.0+0x4a7/0x550
[ 51.964661][ T5062] ? sync_blockdev+0x73/0x90
[ 51.969268][ T5062] udf_put_super+0x1bb/0x230
[ 51.973859][ T5062] ? udf_close_lvid.isra.0+0x550/0x550
[ 51.979324][ T5062] generic_shutdown_super+0x158/0x410
[ 51.984702][ T5062] kill_block_super+0x9b/0xf0
[ 51.989377][ T5062] deactivate_locked_super+0x98/0x160
[ 51.994754][ T5062] deactivate_super+0xb1/0xd0
[ 51.999432][ T5062] cleanup_mnt+0x2ae/0x3d0
[ 52.003849][ T5062] task_work_run+0x16f/0x270
[ 52.008443][ T5062] ? task_work_cancel+0x30/0x30
[ 52.013300][ T5062] do_exit+0xaa8/0x2950
[ 52.017459][ T5062] ? lock_downgrade+0x6e0/0x6e0
[ 52.022304][ T5062] ? do_raw_spin_lock+0x124/0x2b0
[ 52.027317][ T5062] ? mm_update_next_owner+0x7b0/0x7b0
[ 52.032686][ T5062] ? rwlock_bug.part.0+0x90/0x90
[ 52.037607][ T5062] ? _raw_spin_unlock_irq+0x23/0x50
[ 52.042798][ T5062] do_group_exit+0xd4/0x2a0
[ 52.047379][ T5062] __x64_sys_exit_group+0x3e/0x50
[ 52.052393][ T5062] do_syscall_64+0x39/0xb0
[ 52.056971][ T5062] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 52.062871][ T5062] RIP: 0033:0x7f2aba16e009
[ 52.067366][ T5062] Code: Unable to access opcode bytes at 0x7f2aba16dfdf.
[ 52.074375][ T5062] RSP: 002b:00007ffc88061b88 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[ 52.082794][ T5062] RAX: ffffffffffffffda RBX: 00007f2aba1de350 RCX: 00007f2aba16e009
[ 52.090761][ T5062] RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000001
[ 52.098727][ T5062] RBP: 0000000000000001 R08: ffffffffffffffc0 R09: 000000000000000c
[ 52.106694][ T5062] R10: 000080001d00c0d0 R11: 0000000000000246 R12: 00007f2aba1de350
[ 52.114663][ T5062] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000001
[ 52.122635][ T5062]
[ 52.125639][ T5062]
[ 52.127941][ T5062] The buggy address belongs to the physical page:
[ 52.134350][ T5062] page:ffffea000560a400 refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x158290
[ 52.144569][ T5062] flags: 0x57ff00000000000(node=1|zone=2|lastcpupid=0x7ff)
[ 52.151844][ T5062] raw: 057ff00000000000 ffffea000560a408 ffffea000560a408 0000000000000000
[ 52.160415][ T5062] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000
[ 52.169073][ T5062] page dumped because: kasan: bad access detected
[ 52.175569][ T5062] page_owner info is not present (never set?)
[ 52.181617][ T5062]
[ 52.183927][ T5062] Memory state around the buggy address:
[ 52.189547][ T5062] ffff888158290980: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 52.197610][ T5062] ffff888158290a00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 52.205664][ T5062] >ffff888158290a80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 52.213711][ T5062] ^
[ 52.219153][ T5062] ffff888158290b00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 52.227209][ T5062] ffff888158290b80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 52.235272][ T5062] ==================================================================
[ 52.248562][ T5062] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 52.255773][ T5062] CPU: 0 PID: 5062 Comm: syz-executor364 Not tainted 6.1.0-syzkaller-11674-g84e57d292203 #0
[ 52.265826][ T5062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[ 52.275886][ T5062] Call Trace:
[ 52.279156][ T5062]
[ 52.282075][ T5062] dump_stack_lvl+0xd1/0x138
[ 52.286660][ T5062] panic+0x2cc/0x626
[ 52.290556][ T5062] ? panic_print_sys_info.part.0+0x110/0x110
[ 52.296538][ T5062] ? preempt_schedule_thunk+0x1a/0x20
[ 52.301916][ T5062] ? preempt_schedule_common+0x59/0xc0
[ 52.307530][ T5062] check_panic_on_warn.cold+0x19/0x35
[ 52.312954][ T5062] end_report.part.0+0x36/0x73
[ 52.317715][ T5062] ? udf_close_lvid.isra.0+0x4a7/0x550
[ 52.323168][ T5062] kasan_report.cold+0xa/0xf
[ 52.327754][ T5062] ? udf_close_lvid.isra.0+0x4a7/0x550
[ 52.333203][ T5062] udf_close_lvid.isra.0+0x4a7/0x550
[ 52.338471][ T5062] ? sync_blockdev+0x73/0x90
[ 52.343058][ T5062] udf_put_super+0x1bb/0x230
[ 52.347630][ T5062] ? udf_close_lvid.isra.0+0x550/0x550
[ 52.353072][ T5062] generic_shutdown_super+0x158/0x410
[ 52.358434][ T5062] kill_block_super+0x9b/0xf0
[ 52.363109][ T5062] deactivate_locked_super+0x98/0x160
[ 52.368488][ T5062] deactivate_super+0xb1/0xd0
[ 52.373175][ T5062] cleanup_mnt+0x2ae/0x3d0
[ 52.377588][ T5062] task_work_run+0x16f/0x270
[ 52.382178][ T5062] ? task_work_cancel+0x30/0x30
[ 52.387030][ T5062] do_exit+0xaa8/0x2950
[ 52.391192][ T5062] ? lock_downgrade+0x6e0/0x6e0
[ 52.396034][ T5062] ? do_raw_spin_lock+0x124/0x2b0
[ 52.401050][ T5062] ? mm_update_next_owner+0x7b0/0x7b0
[ 52.406423][ T5062] ? rwlock_bug.part.0+0x90/0x90
[ 52.411356][ T5062] ? _raw_spin_unlock_irq+0x23/0x50
[ 52.416561][ T5062] do_group_exit+0xd4/0x2a0
[ 52.421066][ T5062] __x64_sys_exit_group+0x3e/0x50
[ 52.426094][ T5062] do_syscall_64+0x39/0xb0
[ 52.430510][ T5062] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 52.436396][ T5062] RIP: 0033:0x7f2aba16e009
[ 52.440790][ T5062] Code: Unable to access opcode bytes at 0x7f2aba16dfdf.
[ 52.447812][ T5062] RSP: 002b:00007ffc88061b88 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[ 52.456223][ T5062] RAX: ffffffffffffffda RBX: 00007f2aba1de350 RCX: 00007f2aba16e009
[ 52.464185][ T5062] RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000001
[ 52.472150][ T5062] RBP: 0000000000000001 R08: ffffffffffffffc0 R09: 000000000000000c
[ 52.480127][ T5062] R10: 000080001d00c0d0 R11: 0000000000000246 R12: 00007f2aba1de350
[ 52.488094][ T5062] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000001
[ 52.496064][ T5062]
[ 52.499850][ T5062] Kernel Offset: disabled
[ 52.504172][ T5062] Rebooting in 86400 seconds..