program: syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000500)='./file0\x00', 0x18008, &(0x7f0000000200)=ANY=[@ANYRES8=0x0, @ANYRESDEC], 0xfe, 0x4b1, &(0x7f0000001d00)="$eJzs201sVNUbx/HfM3c6TIf+/5YXCxgCTTSxgkBfsEBqYnix0YQXLVQj8SWVTrHSdkinKCUgLNWdC5Yu3bpwZdwaEpfGhcEYFibIxs2sxB3m3LlvM5TOjG1nKP1+CJx7zzx3OOc8c+ecM5kRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACQjrx6uLfPWt0KAADQTCdPj/QOMP8DALCmnGH/DwAAsJaYPP0u054LJTvhn5dlj0/OXLo8emx44cvaTaaUPD/e/c329Q/sf2nwwMGwXPz65bZNp06fOdx9tDB9cTZfLObHu0dnJs8VxvN1P8NSr6+2yx+A7ukLl8YnJord/XsHKh6+3Hlv3fquzqHB945mwtjRY8PDpxMx6bb//L8/5FEr/Iw8vSDTx99/ayclpbT0sajx2llp7X4ndvmdGD027HdkanJsZs49aKkgKlU5JplwjJqQiyVJSa5dllmePVubPP0g05F9JTslyQvHYbf/wXBd7WmFtNu6SurRKsjZY2ydPH0g0619nXojGFc//xnpaqsbhxWXDu7/gpXsTf/9wN1P7m3z+Fvdr89MFBKxlgruqNU+PzTTY/7elJWnU/4dX7IR7Wx1c9Bk7fI0LVPmq0/8dYX8delTQwd27DyUXGFsqfE8LnZvcHPVMye3BUsHS7k/y98v1Cdrnv6U6f5vWf+8J5wDpBsPFrvwj6Y0DyvNPE3J9M+1klnVvtRL7O8jq33uX9n2t2ePFi7Oz06e/2huwcdz2cMfFudmx84t/HB57+ola2rtY6ulGtuS5ay84/v801J0XbAH+F/5LG7NN1fj10JPVRlKvn7qOa57F9vAOsq1yczTXZkm3t9anmeUa3hs1gKX/2GZiqWfLcx0kP90+SyR/5fj8ctaZRnxc/v/8uda4Vpi29nNj6pfify7Nrn8vyPTkb+3Bp9plPPvVcW6uC6Z3r25PYhLZVxcOuxO+RknJqfyvS72gUwbfwpj5cfmgthNcWyfiy3K9MWtytj1QezmOLbfxd6W6c6vC8c+HccOuNh5l6873WFszsXuCGK74ti95wpT47WG1eW/X6a3r79mYZ8fmf/E/X+jqow8lPPFj5cr/52JuhtBXs8G+U/XyP+XMs3/tT3stz/24ctqg/9vnH+3Vv7uZmVsuKHcGMf21dutVnP53yDTvVduR30O+hacxhlK5v+ZdGUZjWuL8r8hUdcZtCvT4FisRcX5KxfGpqbysxxwwAEH0UGr35nQDG7+H3Gz+qBn4TommP87ymfxiun+Z/H8P1RVRlo0/29M1A0Fq5a2tJSdm77YtkXKFuev7JmcHjufP5+fGdg/2Nt/aH/vwMG2TLi4i4/qHrsngcv/bpmu/fhLtI+pXP8tvP7PVZWRFuV/U7JPFeuauodiTXL575Bp8O7taL+52Po/3P/3PFtZRvdfi/K/OVHXGbSro8GxAAAAAAAAAAAAAAAAAIDVJGeenpPp8siLFv6GqJ7v/41XlZHl//5X+YfJNb7/1ZWoG2/S7xoaGmgAAAAAAAAAAIAmScnT1zI9r5JddxUd0olkiSfavwEAAP//G6xIAA==") syz_open_dev$char_usb(0xc, 0xb4, 0x2) setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x1431c2, 0x0) pwrite64(r0, &(0x7f0000005680)="a9", 0x1, 0x600000fff) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000002240)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-avx2\x00'}, 0x58) r2 = accept$alg(r1, 0x0, 0x0) r3 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) fcntl$setownex(r3, 0xf, &(0x7f0000000100)={0x3}) sendmmsg$alg(r2, &(0x7f00000008c0)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="7b98f16d75de4ec589acd6f48286cd2c0903d05bc01fb6760f9b77382ed670f414bd706f245b28ba88d16d798f7aba03269b3cbe69eed35595365338379a2e8b1b50b7ec4220c0817268302c2d45dfdada77f41f565fd421b6a366e1dcecfbc3", 0x60}, {&(0x7f0000000140)="e14204220649d8f2c741bb1beb44dccdc4d737a944793503c2f1c8dcc77a644d16448fbb9485ed747ddf686afaf44d95ce3d1fd61dc2caa654a57c15d492b46c7d02d94fee720aebf29526defd2ef3654b68d13a059ede1360e33f573da97da816185ea5c35bdd4ce7a1b5e0a8db3272e4b7cb70e4f944de7a6eeaf7cc29c2c9057f38dd3a082093f4d70e101962aaf9", 0x90}], 0x2}], 0x1, 0x0) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt(r4, 0x84, 0x82, &(0x7f00000002c0)="1a00000002000000", 0x8) r5 = syz_open_dev$loop(&(0x7f0000000640), 0x0, 0x22400) ioctl$LOOP_SET_STATUS(r5, 0x4c02, &(0x7f0000000240)={0x0, {}, 0x0, {}, 0x7, 0x12, 0x208, 0x0, "9e959f36b6787b00aa26e66c40568a16fcc1d8a6078ed98e203fcef06412e6dd8f6fbe274de9d940bba5e51e92bbd4fca8450d00", "f625c107ee4c36c8005e0800000000000000865c2fdc458ec58d347f41be5a08", [0x4, 0x8]}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_COLLECT_METADATA={0x4}, @IFLA_GENEVE_TOS={0x5, 0x4, 0x48}]}}}]}, 0x40}}, 0x0) ftruncate(r0, 0x2000000003) [ 75.153519][ T5306] Bluetooth: hci0: command tx timeout [ 75.272995][ T5321] loop0: detected capacity change from 0 to 128 [ 75.319604][ T5321] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 75.361767][ T5321] loop0: detected capacity change from 128 to 127 [ 75.375979][ T5321] ------------[ cut here ]------------ [ 75.378218][ T5321] WARNING: CPU: 0 PID: 5321 at fs/udf/inode.c:2080 __udf_add_aext+0x555/0x700 [ 75.381873][ T5321] Modules linked in: [ 75.383407][ T5321] CPU: 0 UID: 0 PID: 5321 Comm: syz.0.0 Not tainted 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 75.387294][ T5321] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 75.391566][ T5321] RIP: 0010:__udf_add_aext+0x555/0x700 [ 75.393688][ T5321] Code: f0 d9 fe 49 8b 3c 24 4c 89 fe e8 c6 66 fe fe 31 c0 48 83 c4 30 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc e8 4c 33 70 fe 90 <0f> 0b 90 e9 e7 fb ff ff e8 3e 33 70 fe 90 0f 0b 90 e9 54 fc ff ff [ 75.400529][ T5321] RSP: 0018:ffffc9000d0478d8 EFLAGS: 00010287 [ 75.402952][ T5321] RAX: ffffffff8324a544 RBX: 1ffff92001a08f71 RCX: 0000000000040000 [ 75.405883][ T5321] RDX: ffffc9000d6e1000 RSI: 000000000000097a RDI: 000000000000097b [ 75.409056][ T5321] RBP: 0000000000000000 R08: ffffffff8324a126 R09: ffffffff8324a056 [ 75.412166][ T5321] R10: 0000000000000002 R11: ffff88800017a440 R12: ffffc9000d047b80 [ 75.415171][ T5321] R13: 00000000000000bf R14: dffffc0000000000 R15: ffffc9000d047b88 [ 75.418275][ T5321] FS: 00007f28eb0656c0(0000) GS:ffff88801fc00000(0000) knlGS:0000000000000000 [ 75.421828][ T5321] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 75.424227][ T5321] CR2: 00007fff67014f18 CR3: 000000004f7e0000 CR4: 0000000000352ef0 [ 75.427632][ T5321] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 75.431057][ T5321] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 75.434066][ T5321] Call Trace: [ 75.435477][ T5321] [ 75.436748][ T5321] ? __warn+0x168/0x4e0 [ 75.438492][ T5321] ? __udf_add_aext+0x555/0x700 [ 75.440391][ T5321] ? report_bug+0x2b3/0x500 [ 75.442193][ T5321] ? __udf_add_aext+0x555/0x700 [ 75.444096][ T5321] ? handle_bug+0x60/0x90 [ 75.445727][ T5321] ? exc_invalid_op+0x1a/0x50 [ 75.447578][ T5321] ? asm_exc_invalid_op+0x1a/0x20 [ 75.449563][ T5321] ? __udf_add_aext+0x66/0x700 [ 75.451602][ T5321] ? __udf_add_aext+0x136/0x700 [ 75.453802][ T5321] ? __udf_add_aext+0x554/0x700 [ 75.455716][ T5321] ? __udf_add_aext+0x555/0x700 [ 75.457497][ T5321] ? __udf_add_aext+0x554/0x700 [ 75.459347][ T5321] udf_do_extend_file+0x5fa/0x1280 [ 75.461324][ T5321] ? udf_current_aext+0x65f/0xad0 [ 75.463252][ T5321] ? udf_next_aext+0x3c5/0x490 [ 75.465009][ T5321] ? __pfx_udf_do_extend_file+0x10/0x10 [ 75.467065][ T5321] ? inode_bmap+0x3ac/0x6e0 [ 75.468768][ T5321] udf_setsize+0xdb5/0x1450 [ 75.470462][ T5321] ? __pfx_udf_setsize+0x10/0x10 [ 75.472403][ T5321] ? down_write+0x18c/0x220 [ 75.474019][ T5321] ? current_time+0x203/0x2b0 [ 75.475706][ T5321] udf_setattr+0x3c7/0x5d0 [ 75.477376][ T5321] ? __pfx_udf_setattr+0x10/0x10 [ 75.479184][ T5321] notify_change+0xbca/0xe90 [ 75.481049][ T5321] do_ftruncate+0x462/0x580 [ 75.482812][ T5321] ? __pfx_do_ftruncate+0x10/0x10 [ 75.484691][ T5321] ? __fget_files+0x29/0x470 [ 75.486400][ T5321] __x64_sys_ftruncate+0x95/0xf0 [ 75.488279][ T5321] do_syscall_64+0xf3/0x230 [ 75.489900][ T5321] ? clear_bhb_loop+0x35/0x90 [ 75.491709][ T5321] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.493896][ T5321] RIP: 0033:0x7f28ea17e719 [ 75.495627][ T5321] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.502844][ T5321] RSP: 002b:00007f28eb065038 EFLAGS: 00000246 ORIG_RAX: 000000000000004d [ 75.505796][ T5321] RAX: ffffffffffffffda RBX: 00007f28ea335f80 RCX: 00007f28ea17e719 [ 75.508778][ T5321] RDX: 0000000000000000 RSI: 0000002000000003 RDI: 0000000000000004 [ 75.512057][ T5321] RBP: 00007f28ea1f132e R08: 0000000000000000 R09: 0000000000000000 [ 75.514975][ T5321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 75.517950][ T5321] R13: 0000000000000000 R14: 00007f28ea335f80 R15: 00007ffd499ad8c8 [ 75.520989][ T5321] [ 75.522102][ T5321] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 75.524771][ T5321] CPU: 0 UID: 0 PID: 5321 Comm: syz.0.0 Not tainted 6.12.0-rc5-syzkaller-00005-ge42b1a9a2557 #0 [ 75.528535][ T5321] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 75.532601][ T5321] Call Trace: [ 75.533898][ T5321] [ 75.535055][ T5321] dump_stack_lvl+0x241/0x360 [ 75.536902][ T5321] ? __pfx_dump_stack_lvl+0x10/0x10 [ 75.538909][ T5321] ? __pfx__printk+0x10/0x10 [ 75.540632][ T5321] ? _printk+0xd5/0x120 [ 75.542099][ T5321] ? __init_begin+0x41000/0x41000 [ 75.543929][ T5321] ? vscnprintf+0x5d/0x90 [ 75.545555][ T5321] panic+0x349/0x880 [ 75.546991][ T5321] ? __warn+0x177/0x4e0 [ 75.551239][ T5321] ? __pfx_panic+0x10/0x10 [ 75.552931][ T5321] ? show_trace_log_lvl+0x3b2/0x410 [ 75.554766][ T5321] __warn+0x34b/0x4e0 [ 75.556346][ T5321] ? __udf_add_aext+0x555/0x700 [ 75.558265][ T5321] report_bug+0x2b3/0x500 [ 75.559946][ T5321] ? __udf_add_aext+0x555/0x700 [ 75.562025][ T5321] handle_bug+0x60/0x90 [ 75.563540][ T5321] exc_invalid_op+0x1a/0x50 [ 75.565219][ T5321] asm_exc_invalid_op+0x1a/0x20 [ 75.567067][ T5321] RIP: 0010:__udf_add_aext+0x555/0x700 [ 75.569127][ T5321] Code: f0 d9 fe 49 8b 3c 24 4c 89 fe e8 c6 66 fe fe 31 c0 48 83 c4 30 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc e8 4c 33 70 fe 90 <0f> 0b 90 e9 e7 fb ff ff e8 3e 33 70 fe 90 0f 0b 90 e9 54 fc ff ff [ 75.576048][ T5321] RSP: 0018:ffffc9000d0478d8 EFLAGS: 00010287 [ 75.578306][ T5321] RAX: ffffffff8324a544 RBX: 1ffff92001a08f71 RCX: 0000000000040000 [ 75.581221][ T5321] RDX: ffffc9000d6e1000 RSI: 000000000000097a RDI: 000000000000097b [ 75.584225][ T5321] RBP: 0000000000000000 R08: ffffffff8324a126 R09: ffffffff8324a056 [ 75.587138][ T5321] R10: 0000000000000002 R11: ffff88800017a440 R12: ffffc9000d047b80 [ 75.590107][ T5321] R13: 00000000000000bf R14: dffffc0000000000 R15: ffffc9000d047b88 [ 75.593022][ T5321] ? __udf_add_aext+0x66/0x700 [ 75.594824][ T5321] ? __udf_add_aext+0x136/0x700 [ 75.596598][ T5321] ? __udf_add_aext+0x554/0x700 [ 75.598462][ T5321] ? __udf_add_aext+0x554/0x700 [ 75.600279][ T5321] udf_do_extend_file+0x5fa/0x1280 [ 75.602155][ T5321] ? udf_current_aext+0x65f/0xad0 [ 75.603966][ T5321] ? udf_next_aext+0x3c5/0x490 [ 75.605697][ T5321] ? __pfx_udf_do_extend_file+0x10/0x10 [ 75.607713][ T5321] ? inode_bmap+0x3ac/0x6e0 [ 75.609323][ T5321] udf_setsize+0xdb5/0x1450 [ 75.611012][ T5321] ? __pfx_udf_setsize+0x10/0x10 [ 75.612830][ T5321] ? down_write+0x18c/0x220 [ 75.614387][ T5321] ? current_time+0x203/0x2b0 [ 75.616018][ T5321] udf_setattr+0x3c7/0x5d0 [ 75.617657][ T5321] ? __pfx_udf_setattr+0x10/0x10 [ 75.619433][ T5321] notify_change+0xbca/0xe90 [ 75.621213][ T5321] do_ftruncate+0x462/0x580 [ 75.622923][ T5321] ? __pfx_do_ftruncate+0x10/0x10 [ 75.624748][ T5321] ? __fget_files+0x29/0x470 [ 75.626435][ T5321] __x64_sys_ftruncate+0x95/0xf0 [ 75.628387][ T5321] do_syscall_64+0xf3/0x230 [ 75.630202][ T5321] ? clear_bhb_loop+0x35/0x90 [ 75.631814][ T5321] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.633712][ T5321] RIP: 0033:0x7f28ea17e719 [ 75.635142][ T5321] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.641609][ T5321] RSP: 002b:00007f28eb065038 EFLAGS: 00000246 ORIG_RAX: 000000000000004d [ 75.644461][ T5321] RAX: ffffffffffffffda RBX: 00007f28ea335f80 RCX: 00007f28ea17e719 [ 75.647339][ T5321] RDX: 0000000000000000 RSI: 0000002000000003 RDI: 0000000000000004 [ 75.650350][ T5321] RBP: 00007f28ea1f132e R08: 0000000000000000 R09: 0000000000000000 [ 75.653261][ T5321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 75.656121][ T5321] R13: 0000000000000000 R14: 00007f28ea335f80 R15: 00007ffd499ad8c8 [ 75.659118][ T5321] [ 75.660811][ T5321] Kernel Offset: disabled [ 75.662458][ T5321] Rebooting in 86400 seconds..