[ OK ] Started Getty on tty2. [ OK ] Started Getty on tty1. [ OK ] Started Serial Getty on ttyS0. [ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Starting Load/Save RF Kill Switch Status... [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.229' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 29.766764] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2020/09/19 18:44 (1000) [ 29.821459] ------------[ cut here ]------------ [ 29.826445] WARNING: CPU: 0 PID: 7978 at fs/udf/inode.c:1990 __udf_add_aext+0x552/0x670 [ 29.834570] Kernel panic - not syncing: panic_on_warn set ... [ 29.834570] [ 29.841928] CPU: 0 PID: 7978 Comm: syz-executor164 Not tainted 4.14.267-syzkaller #0 [ 29.849782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 29.859111] Call Trace: [ 29.861679] dump_stack+0x1b2/0x281 [ 29.865284] panic+0x1f9/0x42d [ 29.868480] ? add_taint.cold+0x16/0x16 [ 29.872471] ? __udf_add_aext+0x552/0x670 [ 29.876911] ? __udf_add_aext+0x552/0x670 [ 29.881052] __warn.cold+0x20/0x44 [ 29.884601] ? ist_end_non_atomic+0x10/0x10 [ 29.888963] ? __udf_add_aext+0x552/0x670 [ 29.893097] report_bug+0x208/0x250 [ 29.896846] do_error_trap+0x195/0x2d0 [ 29.900716] ? math_error+0x2d0/0x2d0 [ 29.904622] ? udf_bitmap_new_block+0xca/0x1320 [ 29.909276] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 29.914115] invalid_op+0x1b/0x40 [ 29.917550] RIP: 0010:__udf_add_aext+0x552/0x670 [ 29.922284] RSP: 0018:ffff88809203ef48 EFLAGS: 00010297 [ 29.927633] RAX: ffff8880b32106c0 RBX: ffff88809203f378 RCX: 0000000000000000 [ 29.934907] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff88808cf17e14 [ 29.942161] RBP: ffff88808e313160 R08: 0000000000000000 R09: 0000000000000010 [ 29.949543] R10: ffff88808cf17fff R11: 0000000000000000 R12: 0000000000000000 [ 29.956821] R13: ffff88808cf17e00 R14: 0000000000000010 R15: 00000000000001e8 [ 29.964096] ? __udf_add_aext+0x552/0x670 [ 29.968228] ? udf_new_tag+0x2b5/0x360 [ 29.972116] udf_setup_indirect_aext+0x5e7/0x720 [ 29.976857] ? udf_current_aext+0x8b0/0x8b0 [ 29.981159] ? udf_new_block+0x1d4/0x430 [ 29.985198] ? udf_current_aext+0x346/0x8b0 [ 29.989516] udf_add_aext+0x1cb/0x280 [ 29.993299] ? udf_setup_indirect_aext+0x720/0x720 [ 29.998296] inode_getblk+0x197a/0x3870 [ 30.002339] ? udf_delete_aext+0xa10/0xa10 [ 30.006552] ? __lock_acquire+0x5fc/0x3f20 [ 30.010810] ? pagevec_lru_move_fn+0x1c3/0x250 [ 30.015379] ? lock_acquire+0x170/0x3f0 [ 30.019454] ? lock_downgrade+0x740/0x740 [ 30.023604] udf_get_block+0x191/0x4e0 [ 30.027562] ? udf_block_map+0x250/0x250 [ 30.031616] ? do_raw_spin_unlock+0x164/0x220 [ 30.036108] ? _raw_spin_unlock+0x29/0x40 [ 30.040235] ? create_page_buffers+0xce/0x1c0 [ 30.044729] __block_write_begin_int+0x35c/0x1090 [ 30.049555] ? udf_block_map+0x250/0x250 [ 30.053603] ? __breadahead_gfp+0x150/0x150 [ 30.058148] ? wait_for_stable_page+0xe3/0x260 [ 30.062794] ? udf_block_map+0x250/0x250 [ 30.066834] block_write_begin+0x58/0x270 [ 30.071393] udf_write_begin+0x39/0xa0 [ 30.075316] generic_perform_write+0x1c9/0x420 [ 30.080034] ? filemap_page_mkwrite+0x2d0/0x2d0 [ 30.084689] ? current_time+0xb0/0xb0 [ 30.088730] __generic_file_write_iter+0x227/0x590 [ 30.093652] udf_file_write_iter+0x284/0x470 [ 30.098258] ? iov_iter_init+0xa6/0x1c0 [ 30.102229] __vfs_write+0x44c/0x630 [ 30.105935] ? kernel_read+0x110/0x110 [ 30.109829] ? lock_downgrade+0x740/0x740 [ 30.114032] __kernel_write+0xf5/0x330 [ 30.117976] write_pipe_buf+0x143/0x1c0 [ 30.122097] ? default_file_splice_read+0x910/0x910 [ 30.127112] ? page_cache_pipe_buf_confirm+0x18f/0x260 [ 30.132400] __splice_from_pipe+0x326/0x7a0 [ 30.136730] ? default_file_splice_read+0x910/0x910 [ 30.142093] default_file_splice_write+0xc5/0x150 [ 30.146932] ? generic_splice_sendpage+0x110/0x110 [ 30.151853] ? rw_verify_area+0xe1/0x2a0 [ 30.155911] ? generic_splice_sendpage+0x110/0x110 [ 30.160824] direct_splice_actor+0x115/0x160 [ 30.165220] splice_direct_to_actor+0x27c/0x730 [ 30.169870] ? generic_pipe_buf_nosteal+0x10/0x10 [ 30.174692] ? do_splice_to+0x140/0x140 [ 30.178659] ? rw_verify_area+0xe1/0x2a0 [ 30.182702] do_splice_direct+0x164/0x210 [ 30.186836] ? splice_direct_to_actor+0x730/0x730 [ 30.191677] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 30.196674] do_sendfile+0x47f/0xb30 [ 30.200368] ? do_compat_writev+0x180/0x180 [ 30.204680] SyS_sendfile64+0x9b/0x110 [ 30.208547] ? SyS_sendfile+0x130/0x130 [ 30.213023] ? do_syscall_64+0x4c/0x640 [ 30.216983] ? SyS_sendfile+0x130/0x130 [ 30.220935] do_syscall_64+0x1d5/0x640 [ 30.224804] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 30.229978] RIP: 0033:0x7fab60867689 [ 30.233666] RSP: 002b:00007fff1602a4f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 30.241364] RAX: ffffffffffffffda RBX: 0000000000000014 RCX: 00007fab60867689 [ 30.248610] RDX: 0000000020000240 RSI: 0000000000000004 RDI: 0000000000000004 [ 30.255861] RBP: 00007fab60826f20 R08: 0000000000000000 R09: 0000000000000000 [ 30.263107] R10: 0000000000007fff R11: 0000000000000246 R12: 00007fab60826fb0 [ 30.270353] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 30.277955] Kernel Offset: disabled [ 30.281654] Rebooting in 86400 seconds..