program: syz_mount_image$udf(&(0x7f0000000040), &(0x7f0000000540)='./file0\x00', 0x1000000, &(0x7f0000001bc0)=ANY=[@ANYBLOB="7569643d666f726765742c6c6f6e6761642c0035c1701df5d0b87a690f389896bca4e14c591f52cffb8d200b5096c943638e5d4750164db51b14f083138115db86bc99dd686929c2ee5f67cf547d32f667d7eec1e69a809925a5885847d555a95f9227fd9c5a91d7c029c0bd580f0bc9b700095edce34f56718910977bfb316f32c1e812f0c435f568cf6a28fd67f19cb260306ccf0da5b288fe8993"], 0x1, 0x4e8, &(0x7f00000005c0)="$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") r0 = open(&(0x7f0000001180)='./bus\x00', 0x400101042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x7800007, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x14b042, 0x0) pwritev2(r1, &(0x7f0000000100)=[{&(0x7f0000000140)="00000000000000000000f7c47c2146949e35b1cc6cdb314170b4764d48c50b010f71e35e442cb0346766715c1603efc3f301b5cdea0550c2601705d0cfdc8cdd459ff4c384972ea24d5aa9c43ea62df139af01739dafae039590d7077c443d98159182e62889ed73a80464c5d022ccf6707cdd6f50b3fd986d225db392a6c50f09870777a3ea9b4da45bc0029b90a2ef1a3a9ebdd0c9f57f0946c7dc1e99b7d66e2c423ac788fa51a316663a260fc90108bdedc377de5be07cf3bbbb73c844457c719f9f72e201da8616277ac010de0c2daa36403481a8912184ded727", 0xdd}], 0x1, 0x5404, 0x5, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000400)={0x53, 0xfffffffffffffffd, 0x6, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000200)="672d6a44b036", 0x0, 0x0, 0x0, 0x0, 0x0}) write$tun(r3, &(0x7f0000000400)=ANY=[], 0xa2) openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x181000, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) read$FUSE(r3, &(0x7f00000024c0)={0x2020}, 0x2020) r4 = open(&(0x7f00000005c0)='./bus\x00', 0x66842, 0x0) r5 = creat(&(0x7f0000000100)='./file0\x00', 0x100) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x8, 0xc1, 0x0, r5}) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r6, 0x84, 0x6b, &(0x7f0000000240)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) shutdown(r6, 0x1) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x84, &(0x7f00000000c0)={0x0, @in={{0xa, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, &(0x7f0000000040)=0x90) pwritev2(r4, &(0x7f0000000300)=[{&(0x7f0000000340)="85ab1d07913421ffffd8185621669fb0907a6d7f85f9f340b143f9ff6f700bf1ded8f5c09c53e3469d5016301080fc9748a004d122ada80cc56391119e6a3fd4df74a01993a8cf", 0x47}, {&(0x7f0000000280)="f211ae23b54f48076c3d7d50691c0c44654d88dc4c099f6cf8c2b728795290966a68ffffe115dff538dc5998245bbba275c2a8a31d57a2070ca82602a4e2a8dbde95e784d5ae99495aa7604402a97dd504e128d29b64eb9d0d214f40289a15e301efa68e43db246213bd", 0x6a}], 0x2, 0x1400, 0x0, 0x21) [ 84.975742][ T4708] Bluetooth: hci0: command tx timeout [ 85.020251][ T5368] loop0: detected capacity change from 0 to 256 [ 85.065362][ T5368] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 85.087693][ T5368] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 85.091752][ T5368] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 85.111360][ T5368] UDF-fs: Scanning with blocksize 512 failed [ 85.118234][ T5368] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 85.127115][ T5368] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 85.209245][ T5368] ------------[ cut here ]------------ [ 85.211789][ T5368] WARNING: CPU: 0 PID: 5368 at fs/udf/truncate.c:224 udf_truncate_extents+0xd4c/0xec0 [ 85.216102][ T5368] Modules linked in: [ 85.218031][ T5368] CPU: 0 UID: 0 PID: 5368 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 85.221792][ T5368] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 85.226840][ T5368] RIP: 0010:udf_truncate_extents+0xd4c/0xec0 [ 85.229458][ T5368] Code: 86 66 0f 48 3b 84 24 80 01 00 00 75 77 44 89 e0 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d e9 9b 32 44 08 cc e8 25 f5 84 fe 90 <0f> 0b 90 eb 88 44 89 e9 80 e1 07 38 c1 0f 8c e4 f3 ff ff 4c 89 ef [ 85.238325][ T5368] RSP: 0018:ffffc9000d3df7a0 EFLAGS: 00010283 [ 85.240755][ T5368] RAX: ffffffff833ad98b RBX: 1ffff110099aa0d4 RCX: 0000000000100000 [ 85.244037][ T5368] RDX: ffffc9000e1a2000 RSI: 0000000000000519 RDI: 000000000000051a [ 85.247262][ T5368] RBP: ffffc9000d3df968 R08: ffff888032f44880 R09: 0000000000000002 [ 85.250833][ T5368] R10: 0000000000000001 R11: 0000000000000002 R12: 0000000000000000 [ 85.254273][ T5368] R13: 0000000000000000 R14: 00000000000000dd R15: 00000000000000dd [ 85.257669][ T5368] FS: 00007fc2611a36c0(0000) GS:ffff88808d20a000(0000) knlGS:0000000000000000 [ 85.261406][ T5368] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 85.264120][ T5368] CR2: 00007fc261181fc8 CR3: 0000000042fae000 CR4: 0000000000352ef0 [ 85.267481][ T5368] Call Trace: [ 85.269010][ T5368] [ 85.270401][ T5368] ? __pfx_udf_truncate_extents+0x10/0x10 [ 85.273043][ T5368] ? do_raw_spin_unlock+0x4d/0x240 [ 85.275242][ T5368] udf_write_failed+0x185/0x1c0 [ 85.277353][ T5368] udf_direct_IO+0x1c6/0x200 [ 85.279376][ T5368] generic_file_direct_write+0x1d8/0x3e0 [ 85.281737][ T5368] ? file_update_time+0x416/0x490 [ 85.284081][ T5368] __generic_file_write_iter+0x11d/0x230 [ 85.286499][ T5368] ? udf_file_write_iter+0x2c4/0x6c0 [ 85.288796][ T5368] udf_file_write_iter+0x2d5/0x6c0 [ 85.291014][ T5368] do_iter_readv_writev+0x61c/0x8b0 [ 85.293408][ T5368] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 85.295615][ T5368] ? rcu_read_lock_any_held+0xb3/0x120 [ 85.297905][ T5368] vfs_writev+0x31a/0x960 [ 85.299722][ T5368] ? __lock_acquire+0xab9/0xd20 [ 85.302049][ T5368] ? __pfx_vfs_writev+0x10/0x10 [ 85.304151][ T5368] ? __fget_files+0x2a/0x420 [ 85.306274][ T5368] ? __fget_files+0x3a0/0x420 [ 85.308121][ T5368] ? __fget_files+0x2a/0x420 [ 85.309833][ T5368] __se_sys_pwritev2+0x179/0x290 [ 85.311703][ T5368] ? __pfx___se_sys_pwritev2+0x10/0x10 [ 85.314036][ T5368] ? rcu_is_watching+0x15/0xb0 [ 85.315826][ T5368] ? do_syscall_64+0xbe/0x3b0 [ 85.317894][ T5368] ? __x64_sys_pwritev2+0x20/0xc0 [ 85.320069][ T5368] do_syscall_64+0xfa/0x3b0 [ 85.322135][ T5368] ? lockdep_hardirqs_on+0x9c/0x150 [ 85.324363][ T5368] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.327283][ T5368] ? clear_bhb_loop+0x60/0xb0 [ 85.329361][ T5368] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.331882][ T5368] RIP: 0033:0x7fc26038eba9 [ 85.334195][ T5368] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 85.342338][ T5368] RSP: 002b:00007fc2611a3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 85.345862][ T5368] RAX: ffffffffffffffda RBX: 00007fc2605d5fa0 RCX: 00007fc26038eba9 [ 85.349251][ T5368] RDX: 0000000000000002 RSI: 0000200000000300 RDI: 0000000000000008 [ 85.352593][ T5368] RBP: 00007fc260411e19 R08: 0000000000000000 R09: 0000000000000021 [ 85.355509][ T5368] R10: 0000000000001400 R11: 0000000000000246 R12: 0000000000000000 [ 85.358472][ T5368] R13: 00007fc2605d6038 R14: 00007fc2605d5fa0 R15: 00007ffe8db99378 [ 85.361498][ T5368] [ 85.362889][ T5368] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 85.366348][ T5368] CPU: 0 UID: 0 PID: 5368 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 85.370820][ T5368] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 85.375996][ T5368] Call Trace: [ 85.377456][ T5368] [ 85.378831][ T5368] dump_stack_lvl+0x99/0x250 [ 85.380814][ T5368] ? __asan_memcpy+0x40/0x70 [ 85.382739][ T5368] ? __pfx_dump_stack_lvl+0x10/0x10 [ 85.384886][ T5368] ? __pfx__printk+0x10/0x10 [ 85.386871][ T5368] vpanic+0x281/0x750 [ 85.388634][ T5368] ? __pfx__printk+0x10/0x10 [ 85.390657][ T5368] ? __pfx_vpanic+0x10/0x10 [ 85.392570][ T5368] ? is_bpf_text_address+0x26/0x2b0 [ 85.394758][ T5368] panic+0xb9/0xc0 [ 85.396369][ T5368] ? __pfx_panic+0x10/0x10 [ 85.398454][ T5368] __warn+0x31b/0x4b0 [ 85.400306][ T5368] ? udf_truncate_extents+0xd4c/0xec0 [ 85.402770][ T5368] ? udf_truncate_extents+0xd4c/0xec0 [ 85.405059][ T5368] report_bug+0x2be/0x4f0 [ 85.406822][ T5368] ? udf_truncate_extents+0xd4c/0xec0 [ 85.409311][ T5368] ? udf_truncate_extents+0xd4c/0xec0 [ 85.411144][ T5368] ? udf_truncate_extents+0xd4e/0xec0 [ 85.412973][ T5368] handle_bug+0x84/0x160 [ 85.414392][ T5368] exc_invalid_op+0x1a/0x50 [ 85.415863][ T5368] asm_exc_invalid_op+0x1a/0x20 [ 85.417531][ T5368] RIP: 0010:udf_truncate_extents+0xd4c/0xec0 [ 85.419745][ T5368] Code: 86 66 0f 48 3b 84 24 80 01 00 00 75 77 44 89 e0 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d e9 9b 32 44 08 cc e8 25 f5 84 fe 90 <0f> 0b 90 eb 88 44 89 e9 80 e1 07 38 c1 0f 8c e4 f3 ff ff 4c 89 ef [ 85.427291][ T5368] RSP: 0018:ffffc9000d3df7a0 EFLAGS: 00010283 [ 85.429498][ T5368] RAX: ffffffff833ad98b RBX: 1ffff110099aa0d4 RCX: 0000000000100000 [ 85.432306][ T5368] RDX: ffffc9000e1a2000 RSI: 0000000000000519 RDI: 000000000000051a [ 85.435377][ T5368] RBP: ffffc9000d3df968 R08: ffff888032f44880 R09: 0000000000000002 [ 85.438747][ T5368] R10: 0000000000000001 R11: 0000000000000002 R12: 0000000000000000 [ 85.442221][ T5368] R13: 0000000000000000 R14: 00000000000000dd R15: 00000000000000dd [ 85.445407][ T5368] ? udf_truncate_extents+0xd4b/0xec0 [ 85.447714][ T5368] ? __pfx_udf_truncate_extents+0x10/0x10 [ 85.450250][ T5368] ? do_raw_spin_unlock+0x4d/0x240 [ 85.452363][ T5368] udf_write_failed+0x185/0x1c0 [ 85.454502][ T5368] udf_direct_IO+0x1c6/0x200 [ 85.456533][ T5368] generic_file_direct_write+0x1d8/0x3e0 [ 85.459457][ T5368] ? file_update_time+0x416/0x490 [ 85.462066][ T5368] __generic_file_write_iter+0x11d/0x230 [ 85.464732][ T5368] ? udf_file_write_iter+0x2c4/0x6c0 [ 85.466866][ T5368] udf_file_write_iter+0x2d5/0x6c0 [ 85.469104][ T5368] do_iter_readv_writev+0x61c/0x8b0 [ 85.471173][ T5368] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 85.473565][ T5368] ? rcu_read_lock_any_held+0xb3/0x120 [ 85.475942][ T5368] vfs_writev+0x31a/0x960 [ 85.477869][ T5368] ? __lock_acquire+0xab9/0xd20 [ 85.480079][ T5368] ? __pfx_vfs_writev+0x10/0x10 [ 85.482047][ T5368] ? __fget_files+0x2a/0x420 [ 85.483844][ T5368] ? __fget_files+0x3a0/0x420 [ 85.485852][ T5368] ? __fget_files+0x2a/0x420 [ 85.487860][ T5368] __se_sys_pwritev2+0x179/0x290 [ 85.489966][ T5368] ? __pfx___se_sys_pwritev2+0x10/0x10 [ 85.492631][ T5368] ? rcu_is_watching+0x15/0xb0 [ 85.494805][ T5368] ? do_syscall_64+0xbe/0x3b0 [ 85.496874][ T5368] ? __x64_sys_pwritev2+0x20/0xc0 [ 85.499378][ T5368] do_syscall_64+0xfa/0x3b0 [ 85.501576][ T5368] ? lockdep_hardirqs_on+0x9c/0x150 [ 85.503962][ T5368] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.507226][ T5368] ? clear_bhb_loop+0x60/0xb0 [ 85.509735][ T5368] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.512564][ T5368] RIP: 0033:0x7fc26038eba9 [ 85.514507][ T5368] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 85.522679][ T5368] RSP: 002b:00007fc2611a3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 85.526112][ T5368] RAX: ffffffffffffffda RBX: 00007fc2605d5fa0 RCX: 00007fc26038eba9 [ 85.528994][ T5368] RDX: 0000000000000002 RSI: 0000200000000300 RDI: 0000000000000008 [ 85.531754][ T5368] RBP: 00007fc260411e19 R08: 0000000000000000 R09: 0000000000000021 [ 85.534625][ T5368] R10: 0000000000001400 R11: 0000000000000246 R12: 0000000000000000 [ 85.537791][ T5368] R13: 00007fc2605d6038 R14: 00007fc2605d5fa0 R15: 00007ffe8db99378 [ 85.541145][ T5368] [ 85.542852][ T5368] Kernel Offset: disabled [ 85.544693][ T5368] Rebooting in 86400 seconds..