program: syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x43, 0xc11, &(0x7f0000000d00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000280)={[{@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {}, {@nojournal_checksum}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@grpjquota}, {@nodelalloc}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}]}, 0xfd, 0x574, &(0x7f0000000cc0)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) r5 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_SET_STATUS(r5, 0x4c02, &(0x7f0000000640)={0x0, {}, 0x0, {}, 0x7, 0x0, 0x0, 0x0, "22536af39b7c7cb7435b0a43852dbc3a9ada34cc97af10fd4fcca15748328c53096c2f359e9ba743d30b59c491a7b3e74d938981061383374a1d79471a2d2dfe", "0410b1617b6228917d76322c2e9e13be3626f4e25310f5db74161ccef2c5cf5e", [0x3, 0x80000800]}) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendfile(r4, r6, 0x0, 0xfffe82) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x1000000, &(0x7f0000000580)="b3"}) unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000000a4f1c0000000000000000020000000900010073797a300000000008000240000000020900010073797a310000000014000000110001"], 0x5c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWCHAIN={0x30, 0x3, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_ID={0x8}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x58}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a40)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)='&', 0x1}], 0x1, &(0x7f0000000440)=[@rights={{0x14, 0x1, 0x1, [r10]}}], 0x18}, 0x0) read$FUSE(r0, &(0x7f0000001940)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_IOCTL(r3, &(0x7f0000000240)={0x20, 0xfffffffffffffffe, r11, {0x3, 0x4, 0x6, 0x4}}, 0x20) r12 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_ifreq(r12, 0x891b, 0x0) recvmsg$unix(r10, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x42) [ 102.963386][ T5303] Bluetooth: hci0: command tx timeout [ 102.994325][ T5326] loop0: detected capacity change from 0 to 2048 [ 103.078201][ T5326] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 103.130600][ T5326] loop0: detected capacity change from 2048 to 2047 [ 103.161914][ T5326] ------------[ cut here ]------------ [ 103.164467][ T5326] byte_offset [ 103.164488][ T5326] WARNING: fs/udf/truncate.c:224 at udf_truncate_extents+0xd8d/0xf00, CPU#0: syz.0.0/5326 [ 103.170477][ T5326] Modules linked in: [ 103.172374][ T5326] CPU: 0 UID: 0 PID: 5326 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 103.176022][ T5326] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 103.182071][ T5326] RIP: 0010:udf_truncate_extents+0xd8d/0xf00 [ 103.186738][ T5326] Code: 93 c5 0f 48 3b 84 24 80 01 00 00 75 7a 44 89 e0 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d e9 ca 0b 5c 08 cc e8 c4 63 6e fe 90 <0f> 0b 90 e9 64 ff ff ff 44 89 e9 80 e1 07 38 c1 0f 8c e0 f3 ff ff [ 103.195081][ T5326] RSP: 0018:ffffc9000f4373e0 EFLAGS: 00010287 [ 103.197793][ T5326] RAX: ffffffff83574cdc RBX: 1ffff11008f65008 RCX: 0000000000100000 [ 103.201323][ T5326] RDX: ffffc9000ec2a000 RSI: 0000000000003c2a RDI: 0000000000003c2b [ 103.205115][ T5326] RBP: ffffc9000f4375b8 R08: ffff888000fd0000 R09: 0000000000000002 [ 103.209416][ T5326] R10: 0000000000000001 R11: 0000000000000002 R12: 0000000000000000 [ 103.213200][ T5326] R13: 0000000000000000 R14: 000000000000000a R15: 000000000000000a [ 103.216475][ T5326] FS: 00007efd84df56c0(0000) GS:ffff88808ca52000(0000) knlGS:0000000000000000 [ 103.220623][ T5326] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 103.223912][ T5326] CR2: 00007fcfbcbcd000 CR3: 0000000012534000 CR4: 0000000000352ef0 [ 103.228038][ T5326] Call Trace: [ 103.229515][ T5326] [ 103.231120][ T5326] ? __lock_acquire+0x6b5/0x2cf0 [ 103.233323][ T5326] ? __pfx_udf_truncate_extents+0x10/0x10 [ 103.235879][ T5326] ? do_raw_spin_lock+0x12b/0x2f0 [ 103.238398][ T5326] ? do_raw_spin_unlock+0x4d/0x210 [ 103.241421][ T5326] udf_write_failed+0x185/0x1c0 [ 103.244271][ T5326] udf_write_begin+0x215/0x270 [ 103.246706][ T5326] generic_perform_write+0x2e2/0x8f0 [ 103.249022][ T5326] ? __pfx_generic_perform_write+0x10/0x10 [ 103.251750][ T5326] ? generic_file_direct_write+0x17d/0x3e0 [ 103.254279][ T5326] __generic_file_write_iter+0x1ae/0x230 [ 103.256708][ T5326] udf_file_write_iter+0x2ca/0x6b0 [ 103.259077][ T5326] iter_file_splice_write+0x9a1/0x10f0 [ 103.262101][ T5326] ? __pfx_iter_file_splice_write+0x10/0x10 [ 103.265838][ T5326] ? __pfx_iter_file_splice_write+0x10/0x10 [ 103.268873][ T5326] direct_splice_actor+0x101/0x160 [ 103.271779][ T5326] splice_direct_to_actor+0x53a/0xc70 [ 103.274350][ T5326] ? __pfx_direct_splice_actor+0x10/0x10 [ 103.277065][ T5326] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 103.279709][ T5326] do_splice_direct+0x195/0x290 [ 103.282150][ T5326] ? __pfx_do_splice_direct+0x10/0x10 [ 103.284636][ T5326] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 103.287460][ T5326] ? rw_verify_area+0x255/0x4d0 [ 103.290102][ T5326] do_sendfile+0x535/0x7d0 [ 103.292254][ T5326] ? lockdep_hardirqs_on+0x7a/0x110 [ 103.294794][ T5326] ? __pfx_do_sendfile+0x10/0x10 [ 103.296961][ T5326] ? __se_sys_futex+0x3a8/0x450 [ 103.299173][ T5326] __se_sys_sendfile64+0x144/0x1a0 [ 103.301877][ T5326] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 103.304852][ T5326] do_syscall_64+0x14d/0xf80 [ 103.307265][ T5326] ? trace_irq_disable+0x3b/0x150 [ 103.309530][ T5326] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.312400][ T5326] ? clear_bhb_loop+0x40/0x90 [ 103.314785][ T5326] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.317894][ T5326] RIP: 0033:0x7efd8899c799 [ 103.320168][ T5326] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.329150][ T5326] RSP: 002b:00007efd84df4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 103.333452][ T5326] RAX: ffffffffffffffda RBX: 00007efd88c15fa0 RCX: 00007efd8899c799 [ 103.337064][ T5326] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000005 [ 103.340531][ T5326] RBP: 00007efd88a32c99 R08: 0000000000000000 R09: 0000000000000000 [ 103.344143][ T5326] R10: 0000000000fffe82 R11: 0000000000000246 R12: 0000000000000000 [ 103.348150][ T5326] R13: 00007efd88c16038 R14: 00007efd88c15fa0 R15: 00007ffcc6ed36c8 [ 103.351745][ T5326] [ 103.353111][ T5326] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 103.356401][ T5326] CPU: 0 UID: 0 PID: 5326 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 103.361503][ T5326] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 103.366646][ T5326] Call Trace: [ 103.368144][ T5326] [ 103.369480][ T5326] vpanic+0x56c/0xa60 [ 103.371292][ T5326] ? __pfx__printk+0x10/0x10 [ 103.373415][ T5326] ? __pfx_vpanic+0x10/0x10 [ 103.375450][ T5326] ? is_bpf_text_address+0x292/0x2b0 [ 103.377852][ T5326] ? is_bpf_text_address+0x26/0x2b0 [ 103.380727][ T5326] panic+0xc5/0xd0 [ 103.383111][ T5326] ? __pfx_panic+0x10/0x10 [ 103.385488][ T5326] __warn+0x315/0x4f0 [ 103.387319][ T5326] ? udf_truncate_extents+0xd8d/0xf00 [ 103.389768][ T5326] ? udf_truncate_extents+0xd8d/0xf00 [ 103.392260][ T5326] __report_bug+0x29a/0x540 [ 103.394325][ T5326] ? __lock_acquire+0x6b5/0x2cf0 [ 103.397025][ T5326] ? udf_truncate_extents+0xd8d/0xf00 [ 103.400096][ T5326] ? __pfx___report_bug+0x10/0x10 [ 103.402683][ T5326] ? udf_current_aext+0x69f/0xb30 [ 103.404943][ T5326] ? udf_truncate_extents+0xd8d/0xf00 [ 103.407308][ T5326] report_bug+0x16a/0x220 [ 103.409238][ T5326] ? udf_truncate_extents+0xd8d/0xf00 [ 103.412123][ T5326] ? udf_truncate_extents+0xd8f/0xf00 [ 103.415447][ T5326] handle_bug+0x9c/0x200 [ 103.417652][ T5326] exc_invalid_op+0x1a/0x50 [ 103.419729][ T5326] asm_exc_invalid_op+0x1a/0x20 [ 103.421963][ T5326] RIP: 0010:udf_truncate_extents+0xd8d/0xf00 [ 103.424914][ T5326] Code: 93 c5 0f 48 3b 84 24 80 01 00 00 75 7a 44 89 e0 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d e9 ca 0b 5c 08 cc e8 c4 63 6e fe 90 <0f> 0b 90 e9 64 ff ff ff 44 89 e9 80 e1 07 38 c1 0f 8c e0 f3 ff ff [ 103.434397][ T5326] RSP: 0018:ffffc9000f4373e0 EFLAGS: 00010287 [ 103.437531][ T5326] RAX: ffffffff83574cdc RBX: 1ffff11008f65008 RCX: 0000000000100000 [ 103.441165][ T5326] RDX: ffffc9000ec2a000 RSI: 0000000000003c2a RDI: 0000000000003c2b [ 103.444713][ T5326] RBP: ffffc9000f4375b8 R08: ffff888000fd0000 R09: 0000000000000002 [ 103.448681][ T5326] R10: 0000000000000001 R11: 0000000000000002 R12: 0000000000000000 [ 103.453275][ T5326] R13: 0000000000000000 R14: 000000000000000a R15: 000000000000000a [ 103.457264][ T5326] ? udf_truncate_extents+0xd8c/0xf00 [ 103.459755][ T5326] ? __lock_acquire+0x6b5/0x2cf0 [ 103.462116][ T5326] ? __pfx_udf_truncate_extents+0x10/0x10 [ 103.464769][ T5326] ? do_raw_spin_lock+0x12b/0x2f0 [ 103.467120][ T5326] ? do_raw_spin_unlock+0x4d/0x210 [ 103.469328][ T5326] udf_write_failed+0x185/0x1c0 [ 103.472380][ T5326] udf_write_begin+0x215/0x270 [ 103.475623][ T5326] generic_perform_write+0x2e2/0x8f0 [ 103.478953][ T5326] ? __pfx_generic_perform_write+0x10/0x10 [ 103.481810][ T5326] ? generic_file_direct_write+0x17d/0x3e0 [ 103.484355][ T5326] __generic_file_write_iter+0x1ae/0x230 [ 103.486844][ T5326] udf_file_write_iter+0x2ca/0x6b0 [ 103.489049][ T5326] iter_file_splice_write+0x9a1/0x10f0 [ 103.491445][ T5326] ? __pfx_iter_file_splice_write+0x10/0x10 [ 103.494253][ T5326] ? __pfx_iter_file_splice_write+0x10/0x10 [ 103.497454][ T5326] direct_splice_actor+0x101/0x160 [ 103.500140][ T5326] splice_direct_to_actor+0x53a/0xc70 [ 103.502649][ T5326] ? __pfx_direct_splice_actor+0x10/0x10 [ 103.505017][ T5326] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 103.507732][ T5326] do_splice_direct+0x195/0x290 [ 103.510122][ T5326] ? __pfx_do_splice_direct+0x10/0x10 [ 103.513015][ T5326] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 103.516065][ T5326] ? rw_verify_area+0x255/0x4d0 [ 103.518381][ T5326] do_sendfile+0x535/0x7d0 [ 103.520422][ T5326] ? lockdep_hardirqs_on+0x7a/0x110 [ 103.522676][ T5326] ? __pfx_do_sendfile+0x10/0x10 [ 103.525323][ T5326] ? __se_sys_futex+0x3a8/0x450 [ 103.527907][ T5326] __se_sys_sendfile64+0x144/0x1a0 [ 103.530600][ T5326] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 103.533117][ T5326] do_syscall_64+0x14d/0xf80 [ 103.535083][ T5326] ? trace_irq_disable+0x3b/0x150 [ 103.537336][ T5326] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.540393][ T5326] ? clear_bhb_loop+0x40/0x90 [ 103.543018][ T5326] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.545726][ T5326] RIP: 0033:0x7efd8899c799 [ 103.547761][ T5326] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.557016][ T5326] RSP: 002b:00007efd84df4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 103.560746][ T5326] RAX: ffffffffffffffda RBX: 00007efd88c15fa0 RCX: 00007efd8899c799 [ 103.564762][ T5326] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000005 [ 103.569601][ T5326] RBP: 00007efd88a32c99 R08: 0000000000000000 R09: 0000000000000000 [ 103.573342][ T5326] R10: 0000000000fffe82 R11: 0000000000000246 R12: 0000000000000000 [ 103.576854][ T5326] R13: 00007efd88c16038 R14: 00007efd88c15fa0 R15: 00007ffcc6ed36c8 [ 103.580602][ T5326] [ 103.582343][ T5326] Kernel Offset: disabled [ 103.584290][ T5326] Rebooting in 86400 seconds..