program:
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3cd, 0x8}}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x5452, &(0x7f0000000780)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7S\x03U\xe0\xd8t\xe3%96\x00'/168)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000200)=0x7fff)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r1}, 0x8)
syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x8040, &(0x7f0000000b80)=ANY=[@ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRESHEX], 0xd3, 0x599, &(0x7f00000005c0)="$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")
r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="d8000000180081064e81f782db4cb904021d0800fd027c05e8fe55a10a000b000140020203600e41b0000900ac0006031100000016000500000000000004015c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a", 0xd3}], 0x1}, 0x0)
mkdir(&(0x7f0000000040)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000380), 0x0, &(0x7f0000000340)={[{@lowerdir={'lowerdir', 0x3d, './file1'}, 0x3a}], [], 0x3a})
getdents(r2, &(0x7f0000000100)=""/155, 0x9b)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0)
pwritev2(r3, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0)
ioctl$vim2m_VIDIOC_G_FMT(r3, 0xc0d05604, &(0x7f0000000300)={0x2, @pix={0x4, 0x9, 0x43564548, 0x9, 0x3, 0xffffffff, 0x6, 0xa, 0x1, 0x3, 0x0, 0x5}})
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b4050000000000006110ba000600000004000000000000009500000000000000b60b092e3c4fa061ef10ebef5e1bbc6a1856678f5bcca6560139e23d8aaf9a2ed71091a38584942f777f1b33cda7869a66408b38ca383aff668aecf2673c7e6e28440bf4b9f448b3a3b35e88bc187426d16e8a05758df845a25156d76ed935b1ded6f07c6d0a0168dffb17e2d247662c16ffb6a3"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x10}, 0x94)
[ 74.509776][ T5305] Bluetooth: hci0: command tx timeout
[ 74.823402][ T5326] loop0: detected capacity change from 0 to 512
[ 74.866587][ T5326] =======================================================
[ 74.866587][ T5326] WARNING: The mand mount option has been deprecated and
[ 74.866587][ T5326] and is ignored by this kernel. Remove the mand
[ 74.866587][ T5326] option from the mount to silence this warning.
[ 74.866587][ T5326] =======================================================
[ 75.021910][ T5326] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[ 75.160307][ T5326] UDF-fs: error (device loop0): udf_verify_fi: directory (ino 21) has entry past directory size at pos 128
[ 75.186386][ T5326] UDF-fs: error (device loop0): udf_verify_fi: directory (ino 21) has entry past directory size at pos 128
[ 75.204162][ T5326] UDF-fs: error (device loop0): udf_verify_fi: directory (ino 21) has entry past directory size at pos 128
[ 75.325956][ T5326] ------------[ cut here ]------------
[ 75.330996][ T5326] WARNING: CPU: 0 PID: 5326 at fs/udf/truncate.c:224 udf_truncate_extents+0xd4c/0xec0
[ 75.335883][ T5326] Modules linked in:
[ 75.338831][ T5326] CPU: 0 UID: 0 PID: 5326 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 75.342861][ T5326] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 75.348396][ T5326] RIP: 0010:udf_truncate_extents+0xd4c/0xec0
[ 75.351318][ T5326] Code: f6 0e 0f 48 3b 84 24 80 01 00 00 75 77 44 89 e0 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d e9 9b a4 00 08 cc e8 55 ac 82 fe 90 <0f> 0b 90 eb 88 44 89 e9 80 e1 07 38 c1 0f 8c e4 f3 ff ff 4c 89 ef
[ 75.370291][ T5326] RSP: 0018:ffffc9000d377700 EFLAGS: 00010287
[ 75.373398][ T5326] RAX: ffffffff833bd9cb RBX: 1ffff110023350d2 RCX: 0000000000100000
[ 75.376907][ T5326] RDX: ffffc9000df92000 RSI: 0000000000000ebf RDI: 0000000000000ec0
[ 75.380874][ T5326] RBP: ffffc9000d3778d8 R08: ffff8880374bc900 R09: 0000000000000002
[ 75.384739][ T5326] R10: 0000000000000001 R11: 0000000000000002 R12: 0000000000000000
[ 75.389031][ T5326] R13: 0000000000000000 R14: 000000000000000a R15: 000000000000000a
[ 75.392931][ T5326] FS: 00007fc199aa66c0(0000) GS:ffff88808d973000(0000) knlGS:0000000000000000
[ 75.397190][ T5326] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 75.400756][ T5326] CR2: 000055628b95d168 CR3: 0000000042d83000 CR4: 0000000000352ef0
[ 75.507822][ C0] hrtimer: interrupt took 58498 ns
[ 76.272620][ T5326] Call Trace:
[ 76.330162][ T5326]
[ 76.331866][ T5326] ? __pfx_udf_truncate_extents+0x10/0x10
[ 76.334881][ T5326] ? do_raw_spin_lock+0x121/0x290
[ 76.337466][ T5326] ? do_raw_spin_unlock+0x4d/0x240
[ 76.342448][ T5326] udf_write_failed+0x185/0x1c0
[ 76.345204][ T5326] udf_write_begin+0x212/0x270
[ 76.347533][ T5326] generic_perform_write+0x2c5/0x900
[ 76.350776][ T5326] ? __pfx_generic_perform_write+0x10/0x10
[ 76.353692][ T5326] ? file_update_time+0x416/0x490
[ 76.356577][ T5326] ? __generic_file_write_iter+0xf9/0x230
[ 76.369945][ T5326] ? udf_file_write_iter+0x2c4/0x6c0
[ 76.372795][ T5326] udf_file_write_iter+0x2d5/0x6c0
[ 76.379182][ T5326] do_iter_readv_writev+0x620/0x8c0
[ 76.387673][ T5326] ? __pfx_do_iter_readv_writev+0x10/0x10
[ 76.390850][ T5326] ? rcu_read_lock_any_held+0xb3/0x120
[ 76.393535][ T5326] vfs_writev+0x31a/0x960
[ 76.395506][ T5326] ? __lock_acquire+0xab9/0xd20
[ 76.397918][ T5326] ? __pfx_vfs_writev+0x10/0x10
[ 76.402414][ T5326] ? __fget_files+0x2a/0x420
[ 76.404807][ T5326] ? __fget_files+0x3a0/0x420
[ 76.407267][ T5326] ? __fget_files+0x2a/0x420
[ 76.409988][ T5326] __se_sys_pwritev2+0x179/0x290
[ 76.412410][ T5326] ? irq_work_single+0x1ac/0x240
[ 76.415129][ T5326] ? __pfx___se_sys_pwritev2+0x10/0x10
[ 76.418012][ T5326] ? do_syscall_64+0xbe/0x3b0
[ 76.420473][ T5326] ? __x64_sys_pwritev2+0x20/0xc0
[ 76.423291][ T5326] do_syscall_64+0xfa/0x3b0
[ 76.425616][ T5326] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 76.429147][ T5326] ? asm_sysvec_irq_work+0x1a/0x20
[ 76.431970][ T5326] ? clear_bhb_loop+0x60/0xb0
[ 76.434464][ T5326] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 76.437447][ T5326] RIP: 0033:0x7fc198b8eec9
[ 76.467951][ T5326] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 76.476374][ T5326] RSP: 002b:00007fc199aa6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000148
[ 76.489379][ T5326] RAX: ffffffffffffffda RBX: 00007fc198de5fa0 RCX: 00007fc198b8eec9
[ 76.493270][ T5326] RDX: 0000000000000001 RSI: 00002000000001c0 RDI: 0000000000000006
[ 76.497237][ T5326] RBP: 00007fc198c11f91 R08: 0000000000000000 R09: 0000000000000000
[ 76.501769][ T5326] R10: 0000000000000e7b R11: 0000000000000246 R12: 0000000000000000
[ 76.506173][ T5326] R13: 00007fc198de6038 R14: 00007fc198de5fa0 R15: 00007ffc4356d2f8
[ 76.510255][ T5326]
[ 76.512183][ T5326] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 76.515445][ T5326] CPU: 0 UID: 0 PID: 5326 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 76.519300][ T5326] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 76.524039][ T5326] Call Trace:
[ 76.525527][ T5326]
[ 76.526869][ T5326] dump_stack_lvl+0x99/0x250
[ 76.528953][ T5326] ? __asan_memcpy+0x40/0x70
[ 76.531001][ T5326] ? __pfx_dump_stack_lvl+0x10/0x10
[ 76.533307][ T5326] ? __pfx__printk+0x10/0x10
[ 76.535308][ T5326] vpanic+0x281/0x750
[ 76.537113][ T5326] ? __pfx__printk+0x10/0x10
[ 76.539041][ T5326] ? __pfx_vpanic+0x10/0x10
[ 76.540607][ T5326] ? is_bpf_text_address+0x26/0x2b0
[ 76.542766][ T5326] panic+0xb9/0xc0
[ 76.544392][ T5326] ? __pfx_panic+0x10/0x10
[ 76.546286][ T5326] ? __pfx_panic+0x10/0x10
[ 76.548301][ T5326] __warn+0x31b/0x4b0
[ 76.550024][ T5326] ? udf_truncate_extents+0xd4c/0xec0
[ 76.552335][ T5326] ? udf_truncate_extents+0xd4c/0xec0
[ 76.554583][ T5326] report_bug+0x2be/0x4f0
[ 76.556407][ T5326] ? udf_truncate_extents+0xd4c/0xec0
[ 76.558763][ T5326] ? udf_truncate_extents+0xd4c/0xec0
[ 76.561582][ T5326] ? udf_truncate_extents+0xd4e/0xec0
[ 76.564701][ T5326] handle_bug+0x84/0x160
[ 76.566686][ T5326] exc_invalid_op+0x1a/0x50
[ 76.568666][ T5326] asm_exc_invalid_op+0x1a/0x20
[ 76.570661][ T5326] RIP: 0010:udf_truncate_extents+0xd4c/0xec0
[ 76.573403][ T5326] Code: f6 0e 0f 48 3b 84 24 80 01 00 00 75 77 44 89 e0 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d e9 9b a4 00 08 cc e8 55 ac 82 fe 90 <0f> 0b 90 eb 88 44 89 e9 80 e1 07 38 c1 0f 8c e4 f3 ff ff 4c 89 ef
[ 76.581836][ T5326] RSP: 0018:ffffc9000d377700 EFLAGS: 00010287
[ 76.584956][ T5326] RAX: ffffffff833bd9cb RBX: 1ffff110023350d2 RCX: 0000000000100000
[ 76.588609][ T5326] RDX: ffffc9000df92000 RSI: 0000000000000ebf RDI: 0000000000000ec0
[ 76.592033][ T5326] RBP: ffffc9000d3778d8 R08: ffff8880374bc900 R09: 0000000000000002
[ 76.595988][ T5326] R10: 0000000000000001 R11: 0000000000000002 R12: 0000000000000000
[ 76.599469][ T5326] R13: 0000000000000000 R14: 000000000000000a R15: 000000000000000a
[ 76.602907][ T5326] ? udf_truncate_extents+0xd4b/0xec0
[ 76.605174][ T5326] ? __pfx_udf_truncate_extents+0x10/0x10
[ 76.607815][ T5326] ? do_raw_spin_lock+0x121/0x290
[ 76.610022][ T5326] ? do_raw_spin_unlock+0x4d/0x240
[ 76.612240][ T5326] udf_write_failed+0x185/0x1c0
[ 76.614360][ T5326] udf_write_begin+0x212/0x270
[ 76.616467][ T5326] generic_perform_write+0x2c5/0x900
[ 76.618768][ T5326] ? __pfx_generic_perform_write+0x10/0x10
[ 76.621301][ T5326] ? file_update_time+0x416/0x490
[ 76.623428][ T5326] ? __generic_file_write_iter+0xf9/0x230
[ 76.625653][ T5326] ? udf_file_write_iter+0x2c4/0x6c0
[ 76.627822][ T5326] udf_file_write_iter+0x2d5/0x6c0
[ 76.630030][ T5326] do_iter_readv_writev+0x620/0x8c0
[ 76.632163][ T5326] ? __pfx_do_iter_readv_writev+0x10/0x10
[ 76.634536][ T5326] ? rcu_read_lock_any_held+0xb3/0x120
[ 76.636941][ T5326] vfs_writev+0x31a/0x960
[ 76.639030][ T5326] ? __lock_acquire+0xab9/0xd20
[ 76.641146][ T5326] ? __pfx_vfs_writev+0x10/0x10
[ 76.643638][ T5326] ? __fget_files+0x2a/0x420
[ 76.645490][ T5326] ? __fget_files+0x3a0/0x420
[ 76.647577][ T5326] ? __fget_files+0x2a/0x420
[ 76.649622][ T5326] __se_sys_pwritev2+0x179/0x290
[ 76.651660][ T5326] ? irq_work_single+0x1ac/0x240
[ 76.653679][ T5326] ? __pfx___se_sys_pwritev2+0x10/0x10
[ 76.655973][ T5326] ? do_syscall_64+0xbe/0x3b0
[ 76.657871][ T5326] ? __x64_sys_pwritev2+0x20/0xc0
[ 76.660138][ T5326] do_syscall_64+0xfa/0x3b0
[ 76.662201][ T5326] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 76.664846][ T5326] ? asm_sysvec_irq_work+0x1a/0x20
[ 76.667143][ T5326] ? clear_bhb_loop+0x60/0xb0
[ 76.669321][ T5326] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 76.671922][ T5326] RIP: 0033:0x7fc198b8eec9
[ 76.674000][ T5326] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 76.683178][ T5326] RSP: 002b:00007fc199aa6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000148
[ 76.687039][ T5326] RAX: ffffffffffffffda RBX: 00007fc198de5fa0 RCX: 00007fc198b8eec9
[ 76.690310][ T5326] RDX: 0000000000000001 RSI: 00002000000001c0 RDI: 0000000000000006
[ 76.693850][ T5326] RBP: 00007fc198c11f91 R08: 0000000000000000 R09: 0000000000000000
[ 76.697566][ T5326] R10: 0000000000000e7b R11: 0000000000000246 R12: 0000000000000000
[ 76.701050][ T5326] R13: 00007fc198de6038 R14: 00007fc198de5fa0 R15: 00007ffc4356d2f8
[ 76.704444][ T5326]
[ 76.706054][ T5326] Kernel Offset: disabled
[ 76.707843][ T5326] Rebooting in 86400 seconds..