WARNING in __udf_add_aext

Status: upstream: reported C repro on 2025/07/30 23:41
Bug presence: origin:upstream
[Documentation on labels]
Reported-by: syzbot+7e3876c1d0bf0b7e3895@syzkaller.appspotmail.com
First crash: 376d, last: 11d
Fix bisection: failed (error log, bisect log)
  
▶ ▼ Bug presence (1)
Date Name Commit Repro Result
2025/08/01 upstream (ToT) f2d282e1dfb3 C [report] WARNING in __udf_add_aext
▶ ▼ Similar bugs (7)
Kernel Title Rank 🛈 Repro Cause bisect Fix bisect Count Last Reported Patched Status
linux-5.15 WARNING in __udf_add_aext origin:upstream -1 syz, C done 138 32d 1087d 0/3 upstream: reported C repro on 2023/08/20 05:08
linux-4.14 WARNING in __udf_add_aext udf -1 syz, C 3 1257d 1635d 0/1 upstream: reported C repro on 2022/02/18 06:47
upstream WARNING in __udf_add_aext (3) prio:high udf -1 syz, C error 1777 1h02m 855d 0/29 upstream: reported C repro on 2024/04/08 08:26
linux-4.19 WARNING in __udf_add_aext udf -1 syz, C error 20 1268d 1669d 0/1 upstream: reported C repro on 2022/01/14 21:09
upstream WARNING in __udf_add_aext udf -1 syz, C error 170 1163d 1400d 22/29 fixed on 2023/06/08 14:41
upstream WARNING in __udf_add_aext (2) udf -1 syz error done 6 974d 1154d 25/29 fixed on 2024/01/30 15:47
linux-6.1 WARNING in __udf_add_aext origin:lts-only -1 syz, C done 160 37d 1037d 0/3 upstream: reported C repro on 2023/10/08 20:16
▶ ▼ Fix bisection attempts (3)
Created Duration User Patch Repo Result
2026/02/12 06:59 1m bisect fix linux-6.6.y error job log
2025/11/06 06:55 1h15m bisect fix linux-6.6.y OK (0) job log log
2025/09/05 07:03 1h56m bisect fix linux-6.6.y OK (0) job log log

Sample crash report:
UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
------------[ cut here ]------------
WARNING: CPU: 0 PID: 6877 at fs/udf/inode.c:2081 __udf_add_aext+0x51e/0x6d0 fs/udf/inode.c:2080
Modules linked in:
CPU: 0 PID: 6877 Comm: syz.0.892 Not tainted syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
RIP: 0010:__udf_add_aext+0x51e/0x6d0 fs/udf/inode.c:2080
Code: 08 4c 89 f7 e8 93 cb e6 fe 49 8b 3e 4c 89 e6 e8 a8 7f 05 ff 31 c0 48 83 c4 28 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 62 5b 8f fe <0f> 0b e9 1b fc ff ff e8 56 5b 8f fe 0f 0b e9 6f fd ff ff e8 4a 5b
RSP: 0018:ffffc9000b8e78e8 EFLAGS: 00010293
RAX: ffffffff82f64f9e RBX: dffffc0000000000 RCX: ffff88801ead0000
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000000001e0
RBP: 1ffff9200171cf89 R08: ffff88801ead0000 R09: 0000000000000002
R10: 0000000000000001 R11: 0000000000000000 R12: 00000000000001e0
R13: 0000000000000000 R14: ffffc9000b8e7c40 R15: ffffc9000b8e7c48
FS:  000055556252c500(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000001b2d863fff CR3: 00000000261e0000 CR4: 00000000003506f0
Call Trace:
 <TASK>
 udf_setup_indirect_aext+0x5d7/0x7a0 fs/udf/inode.c:2043
 udf_add_aext fs/udf/inode.c:2133 [inline]
 udf_do_extend_file+0x870/0x1170 fs/udf/inode.c:588
 udf_extend_file fs/udf/inode.c:709 [inline]
 udf_setsize+0xbea/0x10a0 fs/udf/inode.c:1299
 udf_setattr+0x3a1/0x5a0 fs/udf/file.c:236
 notify_change+0xb0d/0xe10 fs/attr.c:499
 do_truncate+0x19b/0x220 fs/open.c:66
 do_sys_ftruncate+0x325/0x3d0 fs/open.c:194
 do_syscall_x64 arch/x86/entry/common.c:46 [inline]
 do_syscall_64+0x55/0xb0 arch/x86/entry/common.c:76
 entry_SYSCALL_64_after_hwframe+0x68/0xd2
RIP: 0033:0x7f739b58f749
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007ffc61a2d088 EFLAGS: 00000246 ORIG_RAX: 000000000000004d
RAX: ffffffffffffffda RBX: 00007f739b7e5fa0 RCX: 00007f739b58f749
RDX: 0000000000000000 RSI: 0000008002007ffb RDI: 0000000000000004
RBP: 00007f739b613f91 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007f739b7e5fa0 R14: 00007f739b7e5fa0 R15: 0000000000000002
 </TASK>

Crashes (16):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2026/01/13 06:58 linux-6.6.y c596736dadab d6526ea3 .config console log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-linux-6-6-kasan WARNING in __udf_add_aext
2025/12/08 16:40 linux-6.6.y 5fa4793a2d2d d6526ea3 .config console log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-linux-6-6-kasan WARNING in __udf_add_aext
2025/07/31 02:15 linux-6.6.y dbcb8d8e4163 f8f2b4da .config console log report syz / log C [disk image] [vmlinux] [kernel image] [mounted in repro] ci2-linux-6-6-kasan WARNING in __udf_add_aext
2026/07/31 04:50 linux-6.6.y a1153c0deb44 aaffb173 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-6-kasan WARNING in __udf_add_aext
2026/07/28 11:18 linux-6.6.y c5596480c50e 45ae1df4 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-6-kasan WARNING in __udf_add_aext
2026/03/24 10:48 linux-6.6.y 4fc00fe35d46 baf8bf12 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-6-kasan WARNING in __udf_add_aext
2026/03/24 10:48 linux-6.6.y 4fc00fe35d46 baf8bf12 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-6-kasan WARNING in __udf_add_aext
2026/03/24 10:47 linux-6.6.y 4fc00fe35d46 baf8bf12 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-6-kasan WARNING in __udf_add_aext
2025/12/11 01:46 linux-6.6.y 5fa4793a2d2d d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-6-kasan WARNING in __udf_add_aext
2025/11/30 03:17 linux-6.6.y 1e89a1be4fe9 d6526ea3 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-6-kasan WARNING in __udf_add_aext
2025/09/26 16:29 linux-6.6.y 147338df3487 0abd0691 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-6-kasan WARNING in __udf_add_aext
2025/09/26 16:23 linux-6.6.y 147338df3487 0abd0691 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-6-kasan WARNING in __udf_add_aext
2025/09/25 20:08 linux-6.6.y 147338df3487 0abd0691 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-6-kasan WARNING in __udf_add_aext
2025/09/25 20:07 linux-6.6.y 147338df3487 0abd0691 .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-6-kasan WARNING in __udf_add_aext
2025/07/30 23:43 linux-6.6.y dbcb8d8e4163 f8f2b4da .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-6-kasan WARNING in __udf_add_aext
2025/07/30 23:41 linux-6.6.y dbcb8d8e4163 f8f2b4da .config console log report info [disk image] [vmlinux] [kernel image] ci2-linux-6-6-kasan WARNING in __udf_add_aext
* Struck through repros no longer work on HEAD.