program: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) syz_mount_image$udf(&(0x7f00000005c0), &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000040)={[{@dmode={'dmode', 0x3d, 0x9}}]}, 0x1, 0x5a1, &(0x7f0000000680)="$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") r1 = creat(&(0x7f0000000240)='./file1\x00', 0xd) write$P9_RUNLINKAT(r1, &(0x7f00000000c0)={0x7, 0x4d, 0x1}, 0xfff2) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{0x80}, 'port0\x00', 0xf3, 0x140043, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x6, 0x1}) r2 = syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000180)='./file1\x00', 0x4000, &(0x7f0000000740)=ANY=[@ANYBLOB='lastblock=00000000000000000000,umask=00000000000000000000002,dmode=00000000000000000077777,novrs,shortad,shortad,undelete,iocharset=cp437,shortad,umask=00000000000000000000006,dmode=00000000000000000000011,fileset=00000000000000000011,uid=', @ANYRESDEC, @ANYBLOB=',session=0000\x00000000000000005,\x00'], 0x12, 0xc38, &(0x7f0000001080)="$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") setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = open(&(0x7f0000000040)='./file1\x00', 0x100002, 0x0) pwrite64(r3, &(0x7f0000000140)="9d", 0x1, 0x10000000005) r4 = syz_open_dev$loop(&(0x7f0000000640), 0x0, 0x22400) syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0xc00, &(0x7f0000000500)=ANY=[@ANYBLOB="2c756d61736b3d300004000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYRESHEX, @ANYBLOB="a766d5a074a1c7176499812de870e534700859c06038b2298b48eceea64946ea1127d1049b6e059da541c60fa161afe57fc947e3833db5368ecff6d54a33d6648531fa8b1fd179d46cc861548fb6628821f4a1b11f471c734164745ec865e399f89c8f5b682a7df3d7c693f27f5d52c55781cd0f48435df45959faa4f8", @ANYRESOCT, @ANYBLOB="755b154ec75d71524d6613c415e10839b8ae000000000000ffff3b3ac69b748c4314d22ec85487abc5c78285138c51d979f457ee167c34bb9e2d88d15ddf56f006eab8f8b4155bd1aac2a44e1d52ee5402b2bfbc1242ec6930b178d71d374ce907288e233b9cd39d67476fd3ab3c9a84fce295ec770000000000000000002000000000", @ANYRES16=0x0, @ANYRES16, @ANYRESDEC=0x0], 0x21, 0x61dc, &(0x7f0000007cc0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r4, 0x4c02, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0x3, 0x5, 0x100a, 0x8, "9e959f16b6787b08aa26e66c4056a51695284854c382ec6bcfeef4fb0efcc1d8a6078ed98e203fd5f0643902dd8f6fac274de9d940bba5e51e92bbd4ce85450d", "f6257170000036c800def96006e08d34000000006f1c00", [0x4, 0x7]}) creat(&(0x7f0000000240)='./file1\x00', 0x4) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x1) syncfs(r2) [ 89.444398][ T5119] loop0: detected capacity change from 0 to 512 [ 89.470881][ T5119] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 89.474268][ T5119] UDF-fs: Scanning with blocksize 512 failed [ 89.486496][ T5119] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 89.513592][ T5119] UDF-fs: Scanning with blocksize 1024 failed [ 89.538839][ T5119] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 89.547228][ T5119] UDF-fs: Scanning with blocksize 2048 failed [ 89.560608][ T5119] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 89.580107][ T5119] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 89.917937][ T4537] Bluetooth: hci0: command tx timeout [ 90.466974][ T5119] loop0: detected capacity change from 512 to 511 [ 90.500517][ T5119] ================================================================== [ 90.503248][ T5119] BUG: KASAN: slab-out-of-bounds in crc_itu_t+0x1d5/0x2b0 [ 90.505814][ T5119] Read of size 1 at addr ffff88800047a1e8 by task syz.0.0/5119 [ 90.508544][ T5119] [ 90.509486][ T5119] CPU: 0 UID: 0 PID: 5119 Comm: syz.0.0 Not tainted 6.11.0-rc7-syzkaller-00151-gd42f7708e27c #0 [ 90.513168][ T5119] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 90.517327][ T5119] Call Trace: [ 90.518517][ T5119] [ 90.519674][ T5119] dump_stack_lvl+0x241/0x360 [ 90.521502][ T5119] ? __pfx_dump_stack_lvl+0x10/0x10 [ 90.523456][ T5119] ? __pfx__printk+0x10/0x10 [ 90.525205][ T5119] ? _printk+0xd5/0x120 [ 90.526780][ T5119] ? __virt_addr_valid+0x183/0x530 [ 90.528738][ T5119] ? __virt_addr_valid+0x183/0x530 [ 90.530685][ T5119] print_report+0x169/0x550 [ 90.532214][ T5119] ? __virt_addr_valid+0x183/0x530 [ 90.533924][ T5119] ? __virt_addr_valid+0x183/0x530 [ 90.535875][ T5119] ? __virt_addr_valid+0x45f/0x530 [ 90.537641][ T5119] ? __phys_addr+0xba/0x170 [ 90.539369][ T5119] ? crc_itu_t+0x1d5/0x2b0 [ 90.541069][ T5119] kasan_report+0x143/0x180 [ 90.542808][ T5119] ? crc_itu_t+0x1d5/0x2b0 [ 90.544394][ T5119] crc_itu_t+0x1d5/0x2b0 [ 90.545998][ T5119] udf_update_tag+0x70/0x6a0 [ 90.547561][ T5119] udf_write_aext+0x4d8/0x7b0 [ 90.549237][ T5119] extent_trunc+0x2f7/0x4a0 [ 90.550707][ T5119] ? __pfx_extent_trunc+0x10/0x10 [ 90.552312][ T5119] udf_truncate_extents+0x627/0x12d0 [ 90.554292][ T5119] ? __pfx_udf_truncate_extents+0x10/0x10 [ 90.556422][ T5119] ? __pfx_lock_release+0x10/0x10 [ 90.558234][ T5119] ? do_raw_spin_lock+0x14f/0x370 [ 90.559942][ T5119] ? do_raw_spin_unlock+0x58/0x8b0 [ 90.561806][ T5119] udf_setsize+0xe85/0x1280 [ 90.563497][ T5119] ? __pfx___might_resched+0x10/0x10 [ 90.565535][ T5119] ? __pfx_udf_setsize+0x10/0x10 [ 90.567478][ T5119] ? down_write+0x18c/0x220 [ 90.569289][ T5119] ? __pfx_down_write+0x10/0x10 [ 90.571185][ T5119] ? current_time+0x203/0x2b0 [ 90.573131][ T5119] udf_setattr+0x3c7/0x5d0 [ 90.574936][ T5119] ? __pfx_udf_setattr+0x10/0x10 [ 90.576721][ T5119] notify_change+0xbca/0xe90 [ 90.578588][ T5119] do_truncate+0x220/0x310 [ 90.580491][ T5119] ? __pfx_do_truncate+0x10/0x10 [ 90.582577][ T5119] ? apparmor_file_truncate+0x297/0x350 [ 90.584741][ T5119] path_openat+0x2ced/0x3470 [ 90.586766][ T5119] ? __pfx_path_openat+0x10/0x10 [ 90.588728][ T5119] do_filp_open+0x235/0x490 [ 90.590474][ T5119] ? __pfx_do_filp_open+0x10/0x10 [ 90.592356][ T5119] ? _raw_spin_unlock+0x28/0x50 [ 90.594312][ T5119] ? alloc_fd+0x5a1/0x640 [ 90.595983][ T5119] do_sys_openat2+0x13e/0x1d0 [ 90.597757][ T5119] ? __pfx_do_sys_openat2+0x10/0x10 [ 90.599797][ T5119] ? __rseq_handle_notify_resume+0x353/0x14e0 [ 90.602086][ T5119] __x64_sys_creat+0x123/0x170 [ 90.603910][ T5119] ? __pfx___x64_sys_creat+0x10/0x10 [ 90.605979][ T5119] ? do_syscall_64+0x100/0x230 [ 90.607776][ T5119] ? do_syscall_64+0xb6/0x230 [ 90.609735][ T5119] do_syscall_64+0xf3/0x230 [ 90.611607][ T5119] ? clear_bhb_loop+0x35/0x90 [ 90.613474][ T5119] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.615836][ T5119] RIP: 0033:0x7f0f54d7def9 [ 90.617577][ T5119] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 90.624411][ T5119] RSP: 002b:00007f0f55bf4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 90.627785][ T5119] RAX: ffffffffffffffda RBX: 00007f0f54f35f80 RCX: 00007f0f54d7def9 [ 90.630829][ T5119] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000020000240 [ 90.633878][ T5119] RBP: 00007f0f54df0b76 R08: 0000000000000000 R09: 0000000000000000 [ 90.636512][ T5119] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 90.639502][ T5119] R13: 0000000000000000 R14: 00007f0f54f35f80 R15: 00007fff29d9c3e8 [ 90.642497][ T5119] [ 90.643676][ T5119] [ 90.644608][ T5119] Allocated by task 1: [ 90.646136][ T5119] kasan_save_track+0x3f/0x80 [ 90.648168][ T5119] __kasan_krealloc+0xf2/0x150 [ 90.649952][ T5119] krealloc_noprof+0xba/0x120 [ 90.651754][ T5119] add_sysfs_param+0xca/0x7f0 [ 90.653574][ T5119] kernel_add_sysfs_param+0xb4/0x130 [ 90.655706][ T5119] param_sysfs_builtin+0x16e/0x1f0 [ 90.657593][ T5119] param_sysfs_builtin_init+0x31/0x40 [ 90.659421][ T5119] do_one_initcall+0x248/0x880 [ 90.661137][ T5119] do_initcall_level+0x157/0x210 [ 90.663007][ T5119] do_initcalls+0x3f/0x80 [ 90.664655][ T5119] kernel_init_freeable+0x435/0x5d0 [ 90.666674][ T5119] kernel_init+0x1d/0x2b0 [ 90.668240][ T5119] ret_from_fork+0x4b/0x80 [ 90.671551][ T5119] ret_from_fork_asm+0x1a/0x30 [ 90.673402][ T5119] [ 90.674315][ T5119] The buggy address belongs to the object at ffff88800047a000 [ 90.674315][ T5119] which belongs to the cache kmalloc-512 of size 512 [ 90.679386][ T5119] The buggy address is located 0 bytes to the right of [ 90.679386][ T5119] allocated 488-byte region [ffff88800047a000, ffff88800047a1e8) [ 90.684735][ T5119] [ 90.685471][ T5119] The buggy address belongs to the physical page: [ 90.687600][ T5119] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x47a [ 90.690602][ T5119] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 90.693764][ T5119] anon flags: 0x7ff00000000040(head|node=0|zone=0|lastcpupid=0x7ff) [ 90.696878][ T5119] page_type: 0xfdffffff(slab) [ 90.698807][ T5119] raw: 007ff00000000040 ffff88801ac41c80 ffffea000047a000 dead000000000005 [ 90.701841][ T5119] raw: 0000000000000000 0000000000080008 00000001fdffffff 0000000000000000 [ 90.705107][ T5119] head: 007ff00000000040 ffff88801ac41c80 ffffea000047a000 dead000000000005 [ 90.708127][ T5119] head: 0000000000000000 0000000000080008 00000001fdffffff 0000000000000000 [ 90.711574][ T5119] head: 007ff00000000001 ffffea0000011e81 ffffffffffffffff 0000000000000000 [ 90.714696][ T5119] head: 0000000000000002 0000000000000000 00000000ffffffff 0000000000000000 [ 90.717811][ T5119] page dumped because: kasan: bad access detected [ 90.720037][ T5119] page_owner tracks the page as allocated [ 90.722172][ T5119] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 29586542629, free_ts 29519270006 [ 90.729443][ T5119] post_alloc_hook+0x1f3/0x230 [ 90.731293][ T5119] get_page_from_freelist+0x2e4c/0x2f10 [ 90.733484][ T5119] __alloc_pages_noprof+0x256/0x6c0 [ 90.735491][ T5119] alloc_slab_page+0x5f/0x120 [ 90.737228][ T5119] allocate_slab+0x5a/0x2f0 [ 90.739054][ T5119] ___slab_alloc+0xcd1/0x14b0 [ 90.740995][ T5119] __slab_alloc+0x58/0xa0 [ 90.742666][ T5119] __kmalloc_node_track_caller_noprof+0x281/0x440 [ 90.745017][ T5119] krealloc_noprof+0x7d/0x120 [ 90.746731][ T5119] add_sysfs_param+0xca/0x7f0 [ 90.748475][ T5119] kernel_add_sysfs_param+0xb4/0x130 [ 90.750508][ T5119] param_sysfs_builtin+0x16e/0x1f0 [ 90.752438][ T5119] param_sysfs_builtin_init+0x31/0x40 [ 90.754468][ T5119] do_one_initcall+0x248/0x880 [ 90.756288][ T5119] do_initcall_level+0x157/0x210 [ 90.758191][ T5119] do_initcalls+0x3f/0x80 [ 90.759750][ T5119] page last free pid 9 tgid 9 stack trace: [ 90.761822][ T5119] free_unref_page+0xd22/0xea0 [ 90.763441][ T5119] vfree+0x186/0x2e0 [ 90.765135][ T5119] delayed_vfree_work+0x56/0x80 [ 90.767319][ T5119] process_scheduled_works+0xa2c/0x1830 [ 90.769608][ T5119] worker_thread+0x870/0xd30 [ 90.771467][ T5119] kthread+0x2f0/0x390 [ 90.773162][ T5119] ret_from_fork+0x4b/0x80 [ 90.774951][ T5119] ret_from_fork_asm+0x1a/0x30 [ 90.776889][ T5119] [ 90.777927][ T5119] Memory state around the buggy address: [ 90.780451][ T5119] ffff88800047a080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 90.783380][ T5119] ffff88800047a100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 90.786374][ T5119] >ffff88800047a180: 00 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc [ 90.789468][ T5119] ^ [ 90.792150][ T5119] ffff88800047a200: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 90.795034][ T5119] ffff88800047a280: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 90.797791][ T5119] ================================================================== [ 91.177573][ T5119] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 91.180439][ T5119] CPU: 0 UID: 0 PID: 5119 Comm: syz.0.0 Not tainted 6.11.0-rc7-syzkaller-00151-gd42f7708e27c #0 [ 91.184432][ T5119] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 91.188357][ T5119] Call Trace: [ 91.189640][ T5119] [ 91.190759][ T5119] dump_stack_lvl+0x241/0x360 [ 91.192499][ T5119] ? __pfx_dump_stack_lvl+0x10/0x10 [ 91.194346][ T5119] ? __pfx__printk+0x10/0x10 [ 91.195973][ T5119] ? preempt_schedule+0xe1/0xf0 [ 91.197641][ T5119] ? vscnprintf+0x5d/0x90 [ 91.199194][ T5119] panic+0x349/0x860 [ 91.200592][ T5119] ? check_panic_on_warn+0x21/0xb0 [ 91.202408][ T5119] ? __pfx_panic+0x10/0x10 [ 91.203958][ T5119] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 91.206073][ T5119] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 91.208273][ T5119] ? print_report+0x502/0x550 [ 91.209978][ T5119] check_panic_on_warn+0x86/0xb0 [ 91.211726][ T5119] ? crc_itu_t+0x1d5/0x2b0 [ 91.213324][ T5119] end_report+0x77/0x160 [ 91.214882][ T5119] kasan_report+0x154/0x180 [ 91.216661][ T5119] ? crc_itu_t+0x1d5/0x2b0 [ 91.218314][ T5119] crc_itu_t+0x1d5/0x2b0 [ 91.219949][ T5119] udf_update_tag+0x70/0x6a0 [ 91.221719][ T5119] udf_write_aext+0x4d8/0x7b0 [ 91.223592][ T5119] extent_trunc+0x2f7/0x4a0 [ 91.225150][ T5119] ? __pfx_extent_trunc+0x10/0x10 [ 91.226759][ T5119] udf_truncate_extents+0x627/0x12d0 [ 91.228428][ T5119] ? __pfx_udf_truncate_extents+0x10/0x10 [ 91.230465][ T5119] ? __pfx_lock_release+0x10/0x10 [ 91.232338][ T5119] ? do_raw_spin_lock+0x14f/0x370 [ 91.234224][ T5119] ? do_raw_spin_unlock+0x58/0x8b0 [ 91.236124][ T5119] udf_setsize+0xe85/0x1280 [ 91.237852][ T5119] ? __pfx___might_resched+0x10/0x10 [ 91.239798][ T5119] ? __pfx_udf_setsize+0x10/0x10 [ 91.241531][ T5119] ? down_write+0x18c/0x220 [ 91.243029][ T5119] ? __pfx_down_write+0x10/0x10 [ 91.244526][ T5119] ? current_time+0x203/0x2b0 [ 91.246150][ T5119] udf_setattr+0x3c7/0x5d0 [ 91.247864][ T5119] ? __pfx_udf_setattr+0x10/0x10 [ 91.249642][ T5119] notify_change+0xbca/0xe90 [ 91.251440][ T5119] do_truncate+0x220/0x310 [ 91.253205][ T5119] ? __pfx_do_truncate+0x10/0x10 [ 91.255185][ T5119] ? apparmor_file_truncate+0x297/0x350 [ 91.257501][ T5119] path_openat+0x2ced/0x3470 [ 91.259355][ T5119] ? __pfx_path_openat+0x10/0x10 [ 91.261244][ T5119] do_filp_open+0x235/0x490 [ 91.262904][ T5119] ? __pfx_do_filp_open+0x10/0x10 [ 91.264695][ T5119] ? _raw_spin_unlock+0x28/0x50 [ 91.266539][ T5119] ? alloc_fd+0x5a1/0x640 [ 91.268172][ T5119] do_sys_openat2+0x13e/0x1d0 [ 91.270097][ T5119] ? __pfx_do_sys_openat2+0x10/0x10 [ 91.272118][ T5119] ? __rseq_handle_notify_resume+0x353/0x14e0 [ 91.274458][ T5119] __x64_sys_creat+0x123/0x170 [ 91.276316][ T5119] ? __pfx___x64_sys_creat+0x10/0x10 [ 91.278327][ T5119] ? do_syscall_64+0x100/0x230 [ 91.280186][ T5119] ? do_syscall_64+0xb6/0x230 [ 91.282035][ T5119] do_syscall_64+0xf3/0x230 [ 91.283812][ T5119] ? clear_bhb_loop+0x35/0x90 [ 91.285622][ T5119] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.287774][ T5119] RIP: 0033:0x7f0f54d7def9 [ 91.289331][ T5119] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 91.296577][ T5119] RSP: 002b:00007f0f55bf4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 91.299741][ T5119] RAX: ffffffffffffffda RBX: 00007f0f54f35f80 RCX: 00007f0f54d7def9 [ 91.302871][ T5119] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000020000240 [ 91.305891][ T5119] RBP: 00007f0f54df0b76 R08: 0000000000000000 R09: 0000000000000000 [ 91.308962][ T5119] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 91.311949][ T5119] R13: 0000000000000000 R14: 00007f0f54f35f80 R15: 00007fff29d9c3e8 [ 91.314960][ T5119] [ 91.316455][ T5119] Kernel Offset: disabled [ 91.318213][ T5119] Rebooting in 86400 seconds..