program: r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0xfffffffffffffffb, 0x40) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, 0x0) syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB='lastblock=00000000000000000000,umask=00000000000000000000002,dmode=00000000000000000077777,novrs,shortad,shortad,undelete,iocharset=cp437,shortad,umask=00000000000000000000006,dmode=00000000000000000000002,nostrict,uid=', @ANYRESOCT=0x0, @ANYRES16], 0x2, 0xc36, &(0x7f0000002540)="$eJzs3U9sHNd9B/DfGy3FldxWTOwoThoXm7ZIZcVy9S+mYhXuqqbZBpBlIRRzC8AVSakLUyRBUo1spAXTSw89BCiKHnIi0BoFUjQwmiLokWldILn4UOTUE9HCRlD0wBYBcgoYzOxbcUmRNi2SEmV9Pjb13Z19b/a9eeMZWdCbFwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAxB+8cun0mfSwWwEAPEhXRr56+qz7PwA8Vq75/38AAAAAAAAAAAAAADjoUhTxZKSYvbKaxqr3HfXL7b7bd0aHhreudiRVNQ9V5cuf+pmz585/6YXBC9283J7+gPp77bPx2si1S42XZ27Nzk3Oz09ONEan2+MzE5M73sNu6292sjoAjVuv3564cWO+cfb5cxs+vjPwfv8TxwcuDj576plu2dGh4eGR9SL13vK1+25Ix3YzPA5HEacixXPf+2lqRUQRuz8W9Qc79psdqTpxsurE6NBw1ZGpdmt6ofzwavdAFBGNnkrN7jHaeiyi1vdA+7C9ZsRi2fyywSfL7o3MtuZa16cmG1dbcwvthfbM9NXUaW3Zn0YUcSFFLEXESv+9u+uLImqR4jvHVtP1iDjUPQ5frCYGb9+OYh/7uANlOxt9EUvFIzBmB1h/FPFqpPjZOydiPF9nqmvNFyJeLfMHEW+V+VJEKk+M8xHvbXEe8WiqRRF/WY7/xdU0UV0PuteVy19rfGX6xkxP2e515SPeH+65Ujyk+8ORTflgHPBrUz2KaFVX/NV0/7/ZAQAAAAAAAAAAAAAAAGCvHYkiPhMpXvmPP6nmFUc1L/3YxcE/HPjV3jnjT3/Ifsqyz0fEYrGzObmH88TAq+lqSg95LvHjrB5F/Gme//eth90YAAAAAAAAAAAAAAAAAACAx1oRP4kUL757Ii1F75ri7embjWut61OdVWG7a/9210xfW1tba6RONnOO5VzMuZRzOedKzihy/ZzNnGM5F3Mu5VzOuZIzDuX6OZs5x3Iu5lzKuZxzJWfUcv2czZxjORfLrK93dDlvX8kZB2TtXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAj5MiivhFpPj2N1ZTpIhoRoxFJ5f7H3brAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBSfyri+5Gi8UfNu9tqEZGqfztOlL+cj+bhMj8ZzcEyX4rmpZytKmvNbz2E9rM7famIH0eK/vrbdwc8j39f593d0yDe+ub6u8/WOnmo++HA+/1PHD92cXD4N57e7nXaqgEnL7enb99pjA4ND4/0bK7lb/9kz7aB/L3F3nSdiJh/483XW1NTk3P3/6I8BXZR/RF6kWqPS08f1ovFvTgh9+5F1A5EMx5O33kMlPf/9yLF7777n90bfuf+X49f6by7e4ePn//Z+v3/xc072uH9v7a5Xr7/l/f0re7/T/ZsezH/bqSvFlFfuDXbdzyiPv/Gm6fat1o3J29OTp8/ffrLg4NfPne673BE/UZ7arLn1Z4cLgAAAAAAAAAAAAAAAIAHJxXx+5Gi9ePV1IiIO9V8rYGLg8+eeuZQHKrmW22Yt/3ayLVLjZdnbs3OTc7PT040Rqfb4zMTkzv9uno13Wt0aHhfOvOhjuxz+4/UX56ZfWOuffOPF7b8/Gj90vX5hbnW+NYfx5EoIpq9W05WDR4dGq4aPdVuTVdVr245mf6j60tF/FekGD/fSJ/P2/L8/80z/DfM/1/cvKN9mv//iZ5t5XemVMTPI8Xv/NXT8fmqnUfjnmOWy/1dpDh54XO5XBwuy3Xb0HmuQGdmYFn2/yLFP/1iY9nufMgn18ue2fGBfUSU438sUnz/L74bv5m3bXz+w9bjf3TzjvZp/J/q2XZ0w/MKdt118vifihQvPfl2/Fbe9kHP/+g+e+NELnz3+Rz7NP6f6tk2kL/3t/em6wAAAAAAAAAAAI+0vlTE30eKHw7X0gt5207+/t/E5h3t09//+nTPtom9Wa/oQ1/s+qACAAAAwAHRl4r4SaS4ufD23TnUG+d/98z//L31+Z9DadOn1Z/z/Vr13IC9/PO/XgP5e8d2320AAAAAAAAAAAAAAAAAAAA4UFIq4oW8nvpYNZ9/Ytv11JcjxSv/81wul46X5brrwA9Uv9avzEyfujQ1NTPeWmhdn5psjMy2xifLuk9FitW//VyuW1Trq3fXm++s8b6+FvtcpBj+h27Zzlrs3bXJn1ove6Ys+4lI8d//uLFsdx3rT62XPVuW/ZtI8fV/2brs8fWy58qy340UP/p6o1v2aFm2+3zUT6+XfX58ptiHUQEAAAAAAAAAAAAAAAAAAOBx05eK+PNI8b+3lu7O5c/r//f1vK289c2e9f43uVOt8z9Qrf+/3ev7Wf+/eq7A4nbfCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH08pingzUsxeWU3L/eX7jvrl9vTtO6NDw1tXO5Kqmoeq8uVP/czZc+e/9MLghW5+cP299pl4beTapcbLM7dm5ybn5ycnGqPT7fGZickd72G39Tc7WR2Axq3Xb0/cuDHfOPv8uQ0f3xl4v/+J4wMXB5899Uy37OjQ8PBIT5la331/+z3SNtsPRxF/HSme+95P0w/7I4rY/bH4kHNnvx2pOnGy6sTo0HDVkal2a3qh/PBq90AUEY2eSs3uMXoAY7ErzYjFsvllg0+W3RuZbc21rk9NNq625hbaC+2Z6aup09qyP40o4kKKWIqIlf57d9cXRbweKb5zbDX9a3/Eoe5x+OKVka+ePrt9O4p97OMOlO1s9EUsFY/AmB1g/VHEP0eKn71zIv6tP6IWnZ/4QsSrZf4g4q3ojHcqT4zzEe9tcR7xaKpFEf9fjv/F1fROf3k96F5XLn+t8ZXpGzM9ZbvXlUf+/vAgHfBrUz2K+FF1xV9N/+6/awAAAAAAAAAAAAAAAIADpIhfjxQvvnsiVfOD784pbk/fbFxrXZ/qTOvrzv3rzpleW1tba6RONnOO5VzMuZRzOedKzihy/ZzNMutra2P5/WLOpZzLOVdyxqFcP2cz51jOxZxLOZdzruSMWq6fs5lzLOdizqWcyzlXcsYBmbsHAAAAAAAAAAAAAAAAAAB8vBTVPym+/Y3VtNbfWV96LDq5bD3Qj71fBgAA//8dq/O8") r1 = open(&(0x7f00000000c0)='./file1\x00', 0x24842, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x1) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x1}], 0x1, 0x9c00, 0xfffffffc, 0x3) [ 75.344031][ T4666] Bluetooth: hci0: command tx timeout [ 75.461293][ T5318] loop0: detected capacity change from 0 to 2048 [ 75.510042][ T5318] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 75.535765][ T25] audit: type=1800 audit(1763977192.903:2): pid=5318 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.0" name="file1" dev="loop0" ino=1346 res=0 errno=0 [ 75.557961][ T5318] ------------[ cut here ]------------ [ 75.560657][ T5318] WARNING: CPU: 0 PID: 5318 at fs/udf/truncate.c:224 udf_truncate_extents+0xd4c/0xec0 [ 75.565315][ T5318] Modules linked in: [ 75.567294][ T5318] CPU: 0 UID: 0 PID: 5318 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 75.571392][ T5318] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 75.576507][ T5318] RIP: 0010:udf_truncate_extents+0xd4c/0xec0 [ 75.579147][ T5318] Code: fc 2e 0f 48 3b 84 24 80 01 00 00 75 77 44 89 e0 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d e9 1b 61 0b 08 cc e8 c5 ff 7f fe 90 <0f> 0b 90 eb 88 44 89 e9 80 e1 07 38 c1 0f 8c e4 f3 ff ff 4c 89 ef [ 75.587674][ T5318] RSP: 0018:ffffc9000d4bf7a0 EFLAGS: 00010283 [ 75.590879][ T5318] RAX: ffffffff8340138b RBX: 1ffff1100865c19c RCX: 0000000000100000 [ 75.595226][ T5318] RDX: ffffc9000df62000 RSI: 0000000000000c19 RDI: 0000000000000c1a [ 75.598801][ T5318] RBP: ffffc9000d4bf968 R08: ffff88800020c900 R09: 0000000000000002 [ 75.602296][ T5318] R10: 0000000000000001 R11: 0000000000000002 R12: 0000000000000000 [ 75.605684][ T5318] R13: 0000000000000000 R14: 000000000000000a R15: 000000000000000a [ 75.609022][ T5318] FS: 00007f57aa5556c0(0000) GS:ffff88808d72f000(0000) knlGS:0000000000000000 [ 75.613478][ T5318] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 75.616970][ T5318] CR2: 00007f2d403909c0 CR3: 00000000416fc000 CR4: 0000000000352ef0 [ 75.621926][ T5318] Call Trace: [ 75.623686][ T5318] [ 75.625058][ T5318] ? __pfx_udf_truncate_extents+0x10/0x10 [ 75.627641][ T5318] ? do_raw_spin_unlock+0x4d/0x240 [ 75.629958][ T5318] udf_write_failed+0x185/0x1c0 [ 75.632389][ T5318] udf_direct_IO+0x1c6/0x200 [ 75.634699][ T5318] generic_file_direct_write+0x1db/0x3e0 [ 75.637220][ T5318] ? file_update_time+0x416/0x490 [ 75.639743][ T5318] __generic_file_write_iter+0x11d/0x230 [ 75.642305][ T5318] ? udf_file_write_iter+0x2c4/0x6c0 [ 75.644902][ T5318] udf_file_write_iter+0x2d5/0x6c0 [ 75.647188][ T5318] do_iter_readv_writev+0x623/0x8c0 [ 75.649498][ T5318] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 75.652061][ T5318] ? rcu_read_lock_any_held+0xb3/0x120 [ 75.654683][ T5318] vfs_writev+0x31a/0x960 [ 75.656427][ T5318] ? __lock_acquire+0xab9/0xd20 [ 75.658428][ T5318] ? __pfx_vfs_writev+0x10/0x10 [ 75.660399][ T5318] ? __fget_files+0x2a/0x420 [ 75.662373][ T5318] ? __fget_files+0x3a0/0x420 [ 75.665087][ T5318] ? __fget_files+0x2a/0x420 [ 75.667776][ T5318] __se_sys_pwritev2+0x179/0x290 [ 75.670027][ T5318] ? __pfx___se_sys_pwritev2+0x10/0x10 [ 75.672656][ T5318] ? do_syscall_64+0xbe/0xfa0 [ 75.674917][ T5318] ? __x64_sys_pwritev2+0x20/0xc0 [ 75.677080][ T5318] do_syscall_64+0xfa/0xfa0 [ 75.679211][ T5318] ? lockdep_hardirqs_on+0x9c/0x150 [ 75.681666][ T5318] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.684620][ T5318] ? clear_bhb_loop+0x60/0xb0 [ 75.686992][ T5318] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.689814][ T5318] RIP: 0033:0x7f57a978f749 [ 75.692576][ T5318] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.701246][ T5318] RSP: 002b:00007f57aa555038 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 75.705301][ T5318] RAX: ffffffffffffffda RBX: 00007f57a99e5fa0 RCX: 00007f57a978f749 [ 75.709213][ T5318] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000005 [ 75.712978][ T5318] RBP: 00007f57a9813f91 R08: 00000000fffffffc R09: 0000000000000003 [ 75.716204][ T5318] R10: 0000000000009c00 R11: 0000000000000246 R12: 0000000000000000 [ 75.719502][ T5318] R13: 00007f57a99e6038 R14: 00007f57a99e5fa0 R15: 00007fff99c02318 [ 75.722783][ T5318] [ 75.724202][ T5318] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 75.727205][ T5318] CPU: 0 UID: 0 PID: 5318 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 75.731028][ T5318] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 75.736130][ T5318] Call Trace: [ 75.737749][ T5318] [ 75.739185][ T5318] dump_stack_lvl+0x99/0x250 [ 75.741356][ T5318] ? __asan_memcpy+0x40/0x70 [ 75.743457][ T5318] ? __pfx_dump_stack_lvl+0x10/0x10 [ 75.745723][ T5318] ? __pfx__printk+0x10/0x10 [ 75.747799][ T5318] vpanic+0x237/0x6d0 [ 75.749588][ T5318] ? __pfx_vpanic+0x10/0x10 [ 75.751617][ T5318] panic+0xb9/0xc0 [ 75.753370][ T5318] ? __pfx_panic+0x10/0x10 [ 75.755596][ T5318] __warn+0x31b/0x4b0 [ 75.757381][ T5318] ? udf_truncate_extents+0xd4c/0xec0 [ 75.760249][ T5318] ? udf_truncate_extents+0xd4c/0xec0 [ 75.763008][ T5318] report_bug+0x2be/0x4f0 [ 75.765019][ T5318] ? udf_truncate_extents+0xd4c/0xec0 [ 75.767412][ T5318] ? udf_truncate_extents+0xd4c/0xec0 [ 75.769794][ T5318] ? udf_truncate_extents+0xd4e/0xec0 [ 75.772414][ T5318] handle_bug+0x84/0x160 [ 75.774570][ T5318] exc_invalid_op+0x1a/0x50 [ 75.776644][ T5318] asm_exc_invalid_op+0x1a/0x20 [ 75.778856][ T5318] RIP: 0010:udf_truncate_extents+0xd4c/0xec0 [ 75.781469][ T5318] Code: fc 2e 0f 48 3b 84 24 80 01 00 00 75 77 44 89 e0 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d e9 1b 61 0b 08 cc e8 c5 ff 7f fe 90 <0f> 0b 90 eb 88 44 89 e9 80 e1 07 38 c1 0f 8c e4 f3 ff ff 4c 89 ef [ 75.789743][ T5318] RSP: 0018:ffffc9000d4bf7a0 EFLAGS: 00010283 [ 75.793027][ T5318] RAX: ffffffff8340138b RBX: 1ffff1100865c19c RCX: 0000000000100000 [ 75.797026][ T5318] RDX: ffffc9000df62000 RSI: 0000000000000c19 RDI: 0000000000000c1a [ 75.801009][ T5318] RBP: ffffc9000d4bf968 R08: ffff88800020c900 R09: 0000000000000002 [ 75.805010][ T5318] R10: 0000000000000001 R11: 0000000000000002 R12: 0000000000000000 [ 75.809411][ T5318] R13: 0000000000000000 R14: 000000000000000a R15: 000000000000000a [ 75.813684][ T5318] ? udf_truncate_extents+0xd4b/0xec0 [ 75.816164][ T5318] ? __pfx_udf_truncate_extents+0x10/0x10 [ 75.818710][ T5318] ? do_raw_spin_unlock+0x4d/0x240 [ 75.820998][ T5318] udf_write_failed+0x185/0x1c0 [ 75.823255][ T5318] udf_direct_IO+0x1c6/0x200 [ 75.825428][ T5318] generic_file_direct_write+0x1db/0x3e0 [ 75.828102][ T5318] ? file_update_time+0x416/0x490 [ 75.830523][ T5318] __generic_file_write_iter+0x11d/0x230 [ 75.833078][ T5318] ? udf_file_write_iter+0x2c4/0x6c0 [ 75.836045][ T5318] udf_file_write_iter+0x2d5/0x6c0 [ 75.838985][ T5318] do_iter_readv_writev+0x623/0x8c0 [ 75.842087][ T5318] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 75.845059][ T5318] ? rcu_read_lock_any_held+0xb3/0x120 [ 75.847762][ T5318] vfs_writev+0x31a/0x960 [ 75.849752][ T5318] ? __lock_acquire+0xab9/0xd20 [ 75.852019][ T5318] ? __pfx_vfs_writev+0x10/0x10 [ 75.854251][ T5318] ? __fget_files+0x2a/0x420 [ 75.856326][ T5318] ? __fget_files+0x3a0/0x420 [ 75.858587][ T5318] ? __fget_files+0x2a/0x420 [ 75.860859][ T5318] __se_sys_pwritev2+0x179/0x290 [ 75.863393][ T5318] ? __pfx___se_sys_pwritev2+0x10/0x10 [ 75.865796][ T5318] ? do_syscall_64+0xbe/0xfa0 [ 75.867879][ T5318] ? __x64_sys_pwritev2+0x20/0xc0 [ 75.869968][ T5318] do_syscall_64+0xfa/0xfa0 [ 75.871980][ T5318] ? lockdep_hardirqs_on+0x9c/0x150 [ 75.874275][ T5318] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.876999][ T5318] ? clear_bhb_loop+0x60/0xb0 [ 75.879165][ T5318] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.882033][ T5318] RIP: 0033:0x7f57a978f749 [ 75.884054][ T5318] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.892626][ T5318] RSP: 002b:00007f57aa555038 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 75.896612][ T5318] RAX: ffffffffffffffda RBX: 00007f57a99e5fa0 RCX: 00007f57a978f749 [ 75.899960][ T5318] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000005 [ 75.903411][ T5318] RBP: 00007f57a9813f91 R08: 00000000fffffffc R09: 0000000000000003 [ 75.906858][ T5318] R10: 0000000000009c00 R11: 0000000000000246 R12: 0000000000000000 [ 75.910538][ T5318] R13: 00007f57a99e6038 R14: 00007f57a99e5fa0 R15: 00007fff99c02318 [ 75.914521][ T5318] [ 75.916308][ T5318] Kernel Offset: disabled [ 75.918288][ T5318] Rebooting in 86400 seconds..