DUID 00:04:a4:d9:44:a1:3e:a2:79:db:da:6d:5d:0b:f7:25:ed:85 forked to background, child pid 3213 [ 30.817200][ T3214] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.833700][ T3214] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller Warning: Permanently added '10.128.1.139' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 57.886040][ T3539] loop0: detected capacity change from 0 to 2048 [ 57.894715][ T3539] ======================================================= [ 57.894715][ T3539] WARNING: The mand mount option has been deprecated and [ 57.894715][ T3539] and is ignored by this kernel. Remove the mand [ 57.894715][ T3539] option from the mount to silence this warning. [ 57.894715][ T3539] ======================================================= [ 57.936020][ T3539] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 57.948979][ T3539] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 57.968766][ T27] audit: type=1804 audit(1688918166.432:2): pid=3539 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor102" name="/root/file0/bus" dev="loop0" ino=1367 res=1 errno=0 [ 58.005777][ T27] audit: type=1804 audit(1688918166.432:3): pid=3539 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor102" name="/root/file0/bus" dev="loop0" ino=1367 res=1 errno=0 [ 58.021047][ T3539] ------------[ cut here ]------------ [ 58.033076][ T3539] WARNING: CPU: 1 PID: 3539 at fs/udf/truncate.c:208 udf_truncate_extents+0xf90/0x11a0 [ 58.042825][ T3539] Modules linked in: [ 58.046837][ T3539] CPU: 1 PID: 3539 Comm: syz-executor102 Not tainted 6.1.38-syzkaller #0 [ 58.055581][ T3539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 58.065876][ T3539] RIP: 0010:udf_truncate_extents+0xf90/0x11a0 [ 58.072157][ T3539] Code: 5c 41 5d 41 5e 41 5f 5d c3 e8 ac 00 8c fe 41 be fb ff ff ff 48 8b 5c 24 60 49 bc 00 00 00 00 00 fc ff df eb 87 e8 90 00 8c fe <0f> 0b e9 7b ff ff ff 48 8d 8c 24 60 01 00 00 80 e1 07 80 c1 03 38 [ 58.092075][ T3539] RSP: 0018:ffffc90003aceb00 EFLAGS: 00010293 [ 58.098189][ T3539] RAX: ffffffff82fddab0 RBX: 1ffff92000759d78 RCX: ffff888028698000 [ 58.106660][ T3539] RDX: 0000000000000000 RSI: 000000000076cb10 RDI: 0000000000000000 [ 58.115044][ T3539] RBP: ffffc90003acecf0 R08: ffffffff82fdcfab R09: ffffffff82fb7280 [ 58.123669][ T3539] R10: 0000000000000002 R11: ffff888028698000 R12: dffffc0000000000 [ 58.131948][ T3539] R13: 000000000076cb10 R14: 0000000000000000 R15: 00000000000000ff [ 58.139976][ T3539] FS: 0000555555bb7300(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 58.150932][ T3539] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 58.158000][ T3539] CR2: 000000002000f000 CR3: 0000000014a75000 CR4: 00000000003506e0 [ 58.166447][ T3539] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 58.174566][ T3539] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 58.182562][ T3539] Call Trace: [ 58.185984][ T3539] [ 58.189030][ T3539] ? __warn+0x15a/0x520 [ 58.193384][ T3539] ? udf_truncate_extents+0xf90/0x11a0 [ 58.198925][ T3539] ? report_bug+0x2af/0x500 [ 58.203599][ T3539] ? udf_truncate_extents+0xf90/0x11a0 [ 58.209822][ T3539] ? handle_bug+0x3d/0x70 [ 58.214386][ T3539] ? exc_invalid_op+0x16/0x40 [ 58.219433][ T3539] ? asm_exc_invalid_op+0x16/0x20 [ 58.225282][ T3539] ? udf_current_aext+0x320/0x9d0 [ 58.231088][ T3539] ? udf_truncate_extents+0x48b/0x11a0 [ 58.237513][ T3539] ? udf_truncate_extents+0xf90/0x11a0 [ 58.243624][ T3539] ? udf_truncate_extents+0xf90/0x11a0 [ 58.249366][ T3539] ? udf_discard_prealloc+0x860/0x860 [ 58.255371][ T3539] ? __lock_acquire+0x1f80/0x1f80 [ 58.260513][ T3539] ? do_raw_spin_lock+0x14a/0x370 [ 58.267370][ T3539] ? do_raw_spin_unlock+0x137/0x8a0 [ 58.272688][ T3539] udf_do_extend_file+0xdc9/0x1140 [ 58.278030][ T3539] ? udf_write_failed+0x1b0/0x1b0 [ 58.283295][ T3539] ? udf_next_aext+0x371/0x430 [ 58.288753][ T3539] ? udf_get_block+0x117c/0x4d10 [ 58.293994][ T3539] udf_get_block+0x1520/0x4d10 [ 58.299068][ T3539] ? udf_bread+0x4b0/0x4b0 [ 58.303811][ T3539] ? print_irqtrace_events+0x210/0x210 [ 58.309458][ T3539] ? clean_bdev_aliases+0x802/0x910 [ 58.314814][ T3539] ? rcu_lock_acquire+0x30/0x30 [ 58.320037][ T3539] ? mem_cgroup_print_oom_group+0x70/0x70 [ 58.326491][ T3539] ? __folio_memcg_unlock+0xfd/0x110 [ 58.331841][ T3539] __block_write_begin_int+0x544/0x1a30 [ 58.337498][ T3539] ? udf_bread+0x4b0/0x4b0 [ 58.341932][ T3539] ? page_zero_new_buffers+0x650/0x650 [ 58.347528][ T3539] ? udf_bread+0x4b0/0x4b0 [ 58.351997][ T3539] block_write_begin+0x98/0x1f0 [ 58.356971][ T3539] ? udf_write_begin+0x16/0x60 [ 58.362002][ T3539] udf_write_begin+0x2d/0x60 [ 58.366687][ T3539] generic_perform_write+0x2fc/0x5e0 [ 58.372017][ T3539] ? generic_file_direct_write+0x460/0x460 [ 58.377889][ T3539] ? __file_remove_privs+0x640/0x640 [ 58.383385][ T3539] ? up_write+0x19d/0x580 [ 58.387800][ T3539] ? do_sendfile+0x61c/0xff0 [ 58.392794][ T3539] ? __se_sys_sendfile64+0x178/0x1e0 [ 58.398418][ T3539] __generic_file_write_iter+0x176/0x400 [ 58.404090][ T3539] udf_file_write_iter+0x291/0x670 [ 58.409473][ T3539] do_iter_write+0x6e6/0xc50 [ 58.414190][ T3539] ? vfs_iter_write+0xa0/0xa0 [ 58.419447][ T3539] ? vfs_iter_write+0x69/0xa0 [ 58.424151][ T3539] iter_file_splice_write+0x806/0xfa0 [ 58.429685][ T3539] ? splice_from_pipe+0x230/0x230 [ 58.434819][ T3539] ? splice_shrink_spd+0xb0/0xb0 [ 58.439867][ T3539] ? common_file_perm+0x17d/0x1d0 [ 58.445134][ T3539] ? splice_from_pipe+0x230/0x230 [ 58.450215][ T3539] direct_splice_actor+0xe3/0x1c0 [ 58.455416][ T3539] splice_direct_to_actor+0x4c0/0xbd0 [ 58.460835][ T3539] ? do_splice_direct+0x3c0/0x3c0 [ 58.465912][ T3539] ? pipe_to_sendpage+0x350/0x350 [ 58.471153][ T3539] ? fsnotify_perm+0x67/0x590 [ 58.476075][ T3539] ? bpf_lsm_file_permission+0x5/0x10 [ 58.481516][ T3539] do_splice_direct+0x27f/0x3c0 [ 58.486501][ T3539] ? splice_direct_to_actor+0xbd0/0xbd0 [ 58.492086][ T3539] ? rcu_read_lock_any_held+0xb3/0x160 [ 58.497692][ T3539] do_sendfile+0x61c/0xff0 [ 58.502165][ T3539] ? do_pwritev+0x360/0x360 [ 58.506781][ T3539] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 58.512814][ T3539] __se_sys_sendfile64+0x178/0x1e0 [ 58.518344][ T3539] ? __x64_sys_sendfile64+0xa0/0xa0 [ 58.523660][ T3539] ? syscall_enter_from_user_mode+0x2e/0x220 [ 58.530094][ T3539] ? lockdep_hardirqs_on+0x94/0x130 [ 58.536076][ T3539] ? syscall_enter_from_user_mode+0x2e/0x220 [ 58.542171][ T3539] do_syscall_64+0x3d/0xb0 [ 58.546680][ T3539] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 58.552655][ T3539] RIP: 0033:0x7f51d5abe889 [ 58.557138][ T3539] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 58.577080][ T3539] RSP: 002b:00007ffec868faf8 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 58.585746][ T3539] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f51d5abe889 [ 58.593935][ T3539] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 58.602805][ T3539] RBP: 00007f51d5a7e120 R08: 0000000000000000 R09: 0000000000000000 [ 58.610967][ T3539] R10: 0001000000201005 R11: 0000000000000246 R12: 00007f51d5a7e1b0 [ 58.619093][ T3539] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 58.627290][ T3539] [ 58.630663][ T3539] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 58.638592][ T3539] CPU: 1 PID: 3539 Comm: syz-executor102 Not tainted 6.1.38-syzkaller #0 [ 58.647111][ T3539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 58.657550][ T3539] Call Trace: [ 58.660849][ T3539] [ 58.663774][ T3539] dump_stack_lvl+0x1e3/0x2cb [ 58.668537][ T3539] ? nf_tcp_handle_invalid+0x642/0x642 [ 58.674018][ T3539] ? panic+0x75d/0x75d [ 58.678215][ T3539] ? vscnprintf+0x59/0x80 [ 58.682643][ T3539] panic+0x318/0x75d [ 58.686826][ T3539] ? __warn+0x169/0x520 [ 58.691182][ T3539] ? memcpy_page_flushcache+0xfc/0xfc [ 58.696750][ T3539] __warn+0x348/0x520 [ 58.700988][ T3539] ? udf_truncate_extents+0xf90/0x11a0 [ 58.706637][ T3539] report_bug+0x2af/0x500 [ 58.711248][ T3539] ? udf_truncate_extents+0xf90/0x11a0 [ 58.716790][ T3539] handle_bug+0x3d/0x70 [ 58.721059][ T3539] exc_invalid_op+0x16/0x40 [ 58.725672][ T3539] asm_exc_invalid_op+0x16/0x20 [ 58.730749][ T3539] RIP: 0010:udf_truncate_extents+0xf90/0x11a0 [ 58.736835][ T3539] Code: 5c 41 5d 41 5e 41 5f 5d c3 e8 ac 00 8c fe 41 be fb ff ff ff 48 8b 5c 24 60 49 bc 00 00 00 00 00 fc ff df eb 87 e8 90 00 8c fe <0f> 0b e9 7b ff ff ff 48 8d 8c 24 60 01 00 00 80 e1 07 80 c1 03 38 [ 58.757329][ T3539] RSP: 0018:ffffc90003aceb00 EFLAGS: 00010293 [ 58.763430][ T3539] RAX: ffffffff82fddab0 RBX: 1ffff92000759d78 RCX: ffff888028698000 [ 58.771717][ T3539] RDX: 0000000000000000 RSI: 000000000076cb10 RDI: 0000000000000000 [ 58.779725][ T3539] RBP: ffffc90003acecf0 R08: ffffffff82fdcfab R09: ffffffff82fb7280 [ 58.787997][ T3539] R10: 0000000000000002 R11: ffff888028698000 R12: dffffc0000000000 [ 58.796060][ T3539] R13: 000000000076cb10 R14: 0000000000000000 R15: 00000000000000ff [ 58.804032][ T3539] ? udf_current_aext+0x320/0x9d0 [ 58.809060][ T3539] ? udf_truncate_extents+0x48b/0x11a0 [ 58.814525][ T3539] ? udf_truncate_extents+0xf90/0x11a0 [ 58.820004][ T3539] ? udf_discard_prealloc+0x860/0x860 [ 58.825550][ T3539] ? __lock_acquire+0x1f80/0x1f80 [ 58.830582][ T3539] ? do_raw_spin_lock+0x14a/0x370 [ 58.835781][ T3539] ? do_raw_spin_unlock+0x137/0x8a0 [ 58.841156][ T3539] udf_do_extend_file+0xdc9/0x1140 [ 58.846276][ T3539] ? udf_write_failed+0x1b0/0x1b0 [ 58.851302][ T3539] ? udf_next_aext+0x371/0x430 [ 58.856169][ T3539] ? udf_get_block+0x117c/0x4d10 [ 58.861191][ T3539] udf_get_block+0x1520/0x4d10 [ 58.865978][ T3539] ? udf_bread+0x4b0/0x4b0 [ 58.870410][ T3539] ? print_irqtrace_events+0x210/0x210 [ 58.875949][ T3539] ? clean_bdev_aliases+0x802/0x910 [ 58.881244][ T3539] ? rcu_lock_acquire+0x30/0x30 [ 58.886180][ T3539] ? mem_cgroup_print_oom_group+0x70/0x70 [ 58.891922][ T3539] ? __folio_memcg_unlock+0xfd/0x110 [ 58.897302][ T3539] __block_write_begin_int+0x544/0x1a30 [ 58.903208][ T3539] ? udf_bread+0x4b0/0x4b0 [ 58.908514][ T3539] ? page_zero_new_buffers+0x650/0x650 [ 58.913980][ T3539] ? udf_bread+0x4b0/0x4b0 [ 58.918406][ T3539] block_write_begin+0x98/0x1f0 [ 58.923271][ T3539] ? udf_write_begin+0x16/0x60 [ 58.928723][ T3539] udf_write_begin+0x2d/0x60 [ 58.933435][ T3539] generic_perform_write+0x2fc/0x5e0 [ 58.938780][ T3539] ? generic_file_direct_write+0x460/0x460 [ 58.944866][ T3539] ? __file_remove_privs+0x640/0x640 [ 58.950186][ T3539] ? up_write+0x19d/0x580 [ 58.954545][ T3539] ? do_sendfile+0x61c/0xff0 [ 58.959154][ T3539] ? __se_sys_sendfile64+0x178/0x1e0 [ 58.964452][ T3539] __generic_file_write_iter+0x176/0x400 [ 58.970099][ T3539] udf_file_write_iter+0x291/0x670 [ 58.975394][ T3539] do_iter_write+0x6e6/0xc50 [ 58.979991][ T3539] ? vfs_iter_write+0xa0/0xa0 [ 58.984875][ T3539] ? vfs_iter_write+0x69/0xa0 [ 58.989715][ T3539] iter_file_splice_write+0x806/0xfa0 [ 58.995968][ T3539] ? splice_from_pipe+0x230/0x230 [ 59.001003][ T3539] ? splice_shrink_spd+0xb0/0xb0 [ 59.006609][ T3539] ? common_file_perm+0x17d/0x1d0 [ 59.013572][ T3539] ? splice_from_pipe+0x230/0x230 [ 59.019128][ T3539] direct_splice_actor+0xe3/0x1c0 [ 59.024290][ T3539] splice_direct_to_actor+0x4c0/0xbd0 [ 59.029887][ T3539] ? do_splice_direct+0x3c0/0x3c0 [ 59.035180][ T3539] ? pipe_to_sendpage+0x350/0x350 [ 59.040321][ T3539] ? fsnotify_perm+0x67/0x590 [ 59.045079][ T3539] ? bpf_lsm_file_permission+0x5/0x10 [ 59.050652][ T3539] do_splice_direct+0x27f/0x3c0 [ 59.055620][ T3539] ? splice_direct_to_actor+0xbd0/0xbd0 [ 59.061262][ T3539] ? rcu_read_lock_any_held+0xb3/0x160 [ 59.066735][ T3539] do_sendfile+0x61c/0xff0 [ 59.071159][ T3539] ? do_pwritev+0x360/0x360 [ 59.075693][ T3539] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 59.081698][ T3539] __se_sys_sendfile64+0x178/0x1e0 [ 59.086838][ T3539] ? __x64_sys_sendfile64+0xa0/0xa0 [ 59.092134][ T3539] ? syscall_enter_from_user_mode+0x2e/0x220 [ 59.098121][ T3539] ? lockdep_hardirqs_on+0x94/0x130 [ 59.103660][ T3539] ? syscall_enter_from_user_mode+0x2e/0x220 [ 59.109720][ T3539] do_syscall_64+0x3d/0xb0 [ 59.114309][ T3539] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 59.120203][ T3539] RIP: 0033:0x7f51d5abe889 [ 59.124789][ T3539] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 59.144478][ T3539] RSP: 002b:00007ffec868faf8 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 59.153007][ T3539] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f51d5abe889 [ 59.160977][ T3539] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 59.169051][ T3539] RBP: 00007f51d5a7e120 R08: 0000000000000000 R09: 0000000000000000 [ 59.177192][ T3539] R10: 0001000000201005 R11: 0000000000000246 R12: 00007f51d5a7e1b0 [ 59.185247][ T3539] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 59.193331][ T3539] [ 59.196805][ T3539] Kernel Offset: disabled [ 59.201305][ T3539] Rebooting in 86400 seconds..