program:
syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000500)='./bus\x00', 0x18418, &(0x7f0000000200)=ANY=[@ANYRES8=0x0, @ANYRES8], 0xfe, 0x4b1, &(0x7f0000001d00)="$eJzs201sVNUbx/HfM3c6TIf+/5YXCxgCTTSxgkBfsEBqYnix0YQXLVQj8SWVTrHSdkinKCUgLNWdC5Yu3bpwZdwaEpfGhcEYFibIxs2sxB3m3LlvM5TOjG1nKP1+CJx7zzx3OOc8c+ecM5kRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACQjrx6uLfPWt0KAADQTCdPj/QOMP8DALCmnGH/DwAAsJaYPP0u054LJTvhn5dlj0/OXLo8emx44cvaTaaUPD/e/c329Q/sf2nwwMGwXPz65bZNp06fOdx9tDB9cTZfLObHu0dnJs8VxvN1P8NSr6+2yx+A7ukLl8YnJord/XsHKh6+3Hlv3fquzqHB945mwtjRY8PDpxMx6bb//L8/5FEr/Iw8vSDTx99/ayclpbT0sajx2llp7X4ndvmdGD027HdkanJsZs49aKkgKlU5JplwjJqQiyVJSa5dllmePVubPP0g05F9JTslyQvHYbf/wXBd7WmFtNu6SurRKsjZY2ydPH0g0619nXojGFc//xnpaqsbhxWXDu7/gpXsTf/9wN1P7m3z+Fvdr89MFBKxlgruqNU+PzTTY/7elJWnU/4dX7IR7Wx1c9Bk7fI0LVPmq0/8dYX8delTQwd27DyUXGFsqfE8LnZvcHPVMye3BUsHS7k/y98v1Cdrnv6U6f5vWf+8J5wDpBsPFrvwj6Y0DyvNPE3J9M+1klnVvtRL7O8jq33uX9n2t2ePFi7Oz06e/2huwcdz2cMfFudmx84t/HB57+ola2rtY6ulGtuS5ay84/v801J0XbAH+F/5LG7NN1fj10JPVRlKvn7qOa57F9vAOsq1yczTXZkm3t9anmeUa3hs1gKX/2GZiqWfLcx0kP90+SyR/5fj8ctaZRnxc/v/8uda4Vpi29nNj6pfify7Nrn8vyPTkb+3Bp9plPPvVcW6uC6Z3r25PYhLZVxcOuxO+RknJqfyvS72gUwbfwpj5cfmgthNcWyfiy3K9MWtytj1QezmOLbfxd6W6c6vC8c+HccOuNh5l6873WFszsXuCGK74ti95wpT47WG1eW/X6a3r79mYZ8fmf/E/X+jqow8lPPFj5cr/52JuhtBXs8G+U/XyP+XMs3/tT3stz/24ctqg/9vnH+3Vv7uZmVsuKHcGMf21dutVnP53yDTvVduR30O+hacxhlK5v+ZdGUZjWuL8r8hUdcZtCvT4FisRcX5KxfGpqbysxxwwAEH0UGr35nQDG7+H3Gz+qBn4TommP87ymfxiun+Z/H8P1RVRlo0/29M1A0Fq5a2tJSdm77YtkXKFuev7JmcHjufP5+fGdg/2Nt/aH/vwMG2TLi4i4/qHrsngcv/bpmu/fhLtI+pXP8tvP7PVZWRFuV/U7JPFeuauodiTXL575Bp8O7taL+52Po/3P/3PFtZRvdfi/K/OVHXGbSro8GxAAAAAAAAAAAAAAAAAIDVJGeenpPp8siLFv6GqJ7v/41XlZHl//5X+YfJNb7/1ZWoG2/S7xoaGmgAAAAAAAAAAIAmScnT1zI9r5JddxUd0olkiSfavwEAAP//G6xIAA==")
setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff})
truncate(&(0x7f0000000100)='./file1\x00', 0x20fdfffffe) (async)
truncate(&(0x7f0000000100)='./file1\x00', 0x20fdfffffe)
ftruncate(0xffffffffffffffff, 0x5)
creat(&(0x7f0000000240)='./bus\x00', 0x24) (async)
creat(&(0x7f0000000240)='./bus\x00', 0x24)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000680)='./bus\x00', 0x0, 0x5000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x400000002, 0x0, 0x0, 0x1a, 0xd, "ef35ab3e3bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c66005b9aafab4afaaf755a3f6a08400", "036c47c6780800d1cbf7966d61f53dc17769048b0000fd0c000000000000000000000002000000000200000000000000000000000000008000", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x1]}) (async)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x400000002, 0x0, 0x0, 0x1a, 0xd, "ef35ab3e3bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c66005b9aafab4afaaf755a3f6a08400", "036c47c6780800d1cbf7966d61f53dc17769048b0000fd0c000000000000000000000002000000000200000000000000000000000000008000", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x1]})
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143441, 0x98)
pwritev2(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0)
[ 93.736484][ T5290] Bluetooth: hci0: command tx timeout
[ 93.813984][ T5332] loop0: detected capacity change from 0 to 128
[ 93.879360][ T5332] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[ 94.014735][ T5333] loop0: detected capacity change from 128 to 127
[ 94.051085][ T5332] ------------[ cut here ]------------
[ 94.053635][ T5332] le32_to_cpu(aed->lengthAllocDescs) != epos->offset - sizeof(struct allocExtDesc)
[ 94.053646][ T5332] WARNING: fs/udf/inode.c:2086 at __udf_add_aext+0x52b/0x6e0, CPU#0: syz.0.0/5332
[ 94.062213][ T5332] Modules linked in:
[ 94.064247][ T5332] CPU: 0 UID: 0 PID: 5332 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 94.068331][ T5332] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 94.072562][ T5332] RIP: 0010:__udf_add_aext+0x52b/0x6e0
[ 94.075644][ T5332] Code: 81 c4 48 ff ff ff 4c 89 e6 e8 c1 70 fc fe 31 c0 48 83 c4 28 5b 41 5c 41 5d 41 5e 41 5f 5d e9 3c 9c 74 08 cc e8 e6 57 66 fe 90 <0f> 0b 90 e9 0d fc ff ff e8 d8 57 66 fe 90 0f 0b 90 e9 5f fd ff ff
[ 94.083678][ T5332] RSP: 0018:ffffc9000f89f1c0 EFLAGS: 00010293
[ 94.086249][ T5332] RAX: ffffffff836029ea RBX: dffffc0000000000 RCX: ffff8880388ca540
[ 94.089582][ T5332] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
[ 94.092507][ T5332] RBP: 1ffff92001f13eb9 R08: ffff8880388ca540 R09: 0000000000000002
[ 94.095639][ T5332] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000000
[ 94.098911][ T5332] R13: 0000000000000001 R14: ffffc9000f89f5c0 R15: ffffc9000f89f5c8
[ 94.102315][ T5332] FS: 00007f5bb69f56c0(0000) GS:ffff88808c549000(0000) knlGS:0000000000000000
[ 94.106160][ T5332] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 94.108927][ T5332] CR2: 00007fab2cbb1d71 CR3: 000000001d0dd000 CR4: 0000000000352ef0
[ 94.112314][ T5332] Call Trace:
[ 94.113877][ T5332]
[ 94.115215][ T5332] udf_do_extend_file+0x909/0x11e0
[ 94.117256][ T5332] ? __pfx_udf_do_extend_file+0x10/0x10
[ 94.119663][ T5332] udf_map_block+0xfc0/0x4280
[ 94.121819][ T5332] ? __pfx_udf_map_block+0x10/0x10
[ 94.124124][ T5332] ? check_noncircular+0xda/0x150
[ 94.126154][ T5332] ? add_lock_to_list+0xc7/0x100
[ 94.128205][ T5332] ? do_raw_spin_lock+0x12b/0x2f0
[ 94.130174][ T5332] ? do_raw_spin_unlock+0x4d/0x210
[ 94.132364][ T5332] __udf_get_block+0x52/0x250
[ 94.134521][ T5332] __block_write_begin_int+0x6c2/0x1900
[ 94.137244][ T5332] ? filemap_add_folio+0x350/0x530
[ 94.139650][ T5332] ? __pfx_udf_get_block+0x10/0x10
[ 94.141858][ T5332] ? __pfx___block_write_begin_int+0x10/0x10
[ 94.144450][ T5332] ? __pfx_udf_get_block+0x10/0x10
[ 94.146634][ T5332] block_write_begin+0x8d/0x120
[ 94.148781][ T5332] ? udf_write_begin+0x92/0x270
[ 94.150908][ T5332] udf_write_begin+0x118/0x270
[ 94.152963][ T5332] generic_perform_write+0x2d5/0x8f0
[ 94.155333][ T5332] ? __pfx_generic_perform_write+0x10/0x10
[ 94.157792][ T5332] ? file_update_time_flags+0x400/0x4a0
[ 94.160134][ T5332] ? __generic_file_write_iter+0xf9/0x230
[ 94.162553][ T5332] ? udf_file_write_iter+0x1c4/0x6c0
[ 94.165018][ T5332] udf_file_write_iter+0x2e8/0x6c0
[ 94.167545][ T5332] do_iter_readv_writev+0x612/0x8c0
[ 94.169762][ T5332] ? __pfx_do_iter_readv_writev+0x10/0x10
[ 94.172185][ T5332] vfs_writev+0x343/0x990
[ 94.174428][ T5332] ? __pfx_vfs_writev+0x10/0x10
[ 94.176519][ T5332] ? __fget_files+0x2a/0x420
[ 94.178480][ T5332] ? __fget_files+0x3a2/0x420
[ 94.180421][ T5332] ? __fget_files+0x2a/0x420
[ 94.182544][ T5332] __se_sys_pwritev2+0x177/0x2a0
[ 94.184730][ T5332] ? __pfx___se_sys_pwritev2+0x10/0x10
[ 94.187066][ T5332] ? __x64_sys_pwritev2+0x20/0xc0
[ 94.189338][ T5332] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 94.191975][ T5332] do_syscall_64+0x174/0x580
[ 94.194143][ T5332] ? trace_irq_disable+0x3b/0x140
[ 94.196271][ T5332] ? clear_bhb_loop+0x40/0x90
[ 94.198166][ T5332] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 94.200771][ T5332] RIP: 0033:0x7f5bba59de99
[ 94.202750][ T5332] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 94.210724][ T5332] RSP: 002b:00007f5bb69f4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000148
[ 94.214290][ T5332] RAX: ffffffffffffffda RBX: 00007f5bba825fa0 RCX: 00007f5bba59de99
[ 94.217854][ T5332] RDX: 0000000000000001 RSI: 00002000000001c0 RDI: 0000000000000007
[ 94.221293][ T5332] RBP: 00007f5bba633eaf R08: 0000000000000000 R09: 0000000000000000
[ 94.224740][ T5332] R10: 0000000000000e7b R11: 0000000000000246 R12: 0000000000000000
[ 94.227908][ T5332] R13: 00007f5bba826038 R14: 00007f5bba825fa0 R15: 00007ffeeed2a118
[ 94.230982][ T5332]
[ 94.232287][ T5332] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 94.235106][ T5332] CPU: 0 UID: 0 PID: 5332 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 94.238669][ T5332] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 94.242895][ T5332] Call Trace:
[ 94.244294][ T5332]
[ 94.245610][ T5332] vpanic+0x56c/0xa60
[ 94.247338][ T5332] ? __pfx__printk+0x10/0x10
[ 94.249280][ T5332] ? __pfx_vpanic+0x10/0x10
[ 94.251170][ T5332] ? is_bpf_text_address+0x292/0x2b0
[ 94.253397][ T5332] ? is_bpf_text_address+0x26/0x2b0
[ 94.255524][ T5332] panic+0xc5/0xd0
[ 94.257156][ T5332] ? __pfx_panic+0x10/0x10
[ 94.259140][ T5332] __warn+0x315/0x4c0
[ 94.260754][ T5332] ? __udf_add_aext+0x52b/0x6e0
[ 94.262815][ T5332] ? __udf_add_aext+0x52b/0x6e0
[ 94.264831][ T5332] __report_bug+0x276/0x570
[ 94.266786][ T5332] ? __udf_add_aext+0x52b/0x6e0
[ 94.268878][ T5332] ? __pfx___report_bug+0x10/0x10
[ 94.270968][ T5332] ? fs_reclaim_acquire+0x7c/0x100
[ 94.273018][ T5332] ? bdev_getblk+0xbd/0x6e0
[ 94.274735][ T5332] ? __udf_add_aext+0x52b/0x6e0
[ 94.276725][ T5332] report_bug+0x16a/0x220
[ 94.278675][ T5332] ? __udf_add_aext+0x52b/0x6e0
[ 94.280699][ T5332] ? __udf_add_aext+0x52d/0x6e0
[ 94.282828][ T5332] handle_bug+0x9c/0x200
[ 94.284625][ T5332] exc_invalid_op+0x1a/0x50
[ 94.286486][ T5332] asm_exc_invalid_op+0x1a/0x20
[ 94.288595][ T5332] RIP: 0010:__udf_add_aext+0x52b/0x6e0
[ 94.293869][ T5332] Code: 81 c4 48 ff ff ff 4c 89 e6 e8 c1 70 fc fe 31 c0 48 83 c4 28 5b 41 5c 41 5d 41 5e 41 5f 5d e9 3c 9c 74 08 cc e8 e6 57 66 fe 90 <0f> 0b 90 e9 0d fc ff ff e8 d8 57 66 fe 90 0f 0b 90 e9 5f fd ff ff
[ 94.302294][ T5332] RSP: 0018:ffffc9000f89f1c0 EFLAGS: 00010293
[ 94.304846][ T5332] RAX: ffffffff836029ea RBX: dffffc0000000000 RCX: ffff8880388ca540
[ 94.308213][ T5332] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
[ 94.311465][ T5332] RBP: 1ffff92001f13eb9 R08: ffff8880388ca540 R09: 0000000000000002
[ 94.314674][ T5332] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000000
[ 94.318300][ T5332] R13: 0000000000000001 R14: ffffc9000f89f5c0 R15: ffffc9000f89f5c8
[ 94.322207][ T5332] ? __udf_add_aext+0x52a/0x6e0
[ 94.324292][ T5332] udf_do_extend_file+0x909/0x11e0
[ 94.326511][ T5332] ? __pfx_udf_do_extend_file+0x10/0x10
[ 94.328934][ T5332] udf_map_block+0xfc0/0x4280
[ 94.330895][ T5332] ? __pfx_udf_map_block+0x10/0x10
[ 94.333091][ T5332] ? check_noncircular+0xda/0x150
[ 94.335250][ T5332] ? add_lock_to_list+0xc7/0x100
[ 94.337364][ T5332] ? do_raw_spin_lock+0x12b/0x2f0
[ 94.339638][ T5332] ? do_raw_spin_unlock+0x4d/0x210
[ 94.341842][ T5332] __udf_get_block+0x52/0x250
[ 94.343795][ T5332] __block_write_begin_int+0x6c2/0x1900
[ 94.346050][ T5332] ? filemap_add_folio+0x350/0x530
[ 94.348158][ T5332] ? __pfx_udf_get_block+0x10/0x10
[ 94.350372][ T5332] ? __pfx___block_write_begin_int+0x10/0x10
[ 94.352928][ T5332] ? __pfx_udf_get_block+0x10/0x10
[ 94.355125][ T5332] block_write_begin+0x8d/0x120
[ 94.357245][ T5332] ? udf_write_begin+0x92/0x270
[ 94.359369][ T5332] udf_write_begin+0x118/0x270
[ 94.361505][ T5332] generic_perform_write+0x2d5/0x8f0
[ 94.363788][ T5332] ? __pfx_generic_perform_write+0x10/0x10
[ 94.366299][ T5332] ? file_update_time_flags+0x400/0x4a0
[ 94.368583][ T5332] ? __generic_file_write_iter+0xf9/0x230
[ 94.370914][ T5332] ? udf_file_write_iter+0x1c4/0x6c0
[ 94.373076][ T5332] udf_file_write_iter+0x2e8/0x6c0
[ 94.375048][ T5332] do_iter_readv_writev+0x612/0x8c0
[ 94.377139][ T5332] ? __pfx_do_iter_readv_writev+0x10/0x10
[ 94.379466][ T5332] vfs_writev+0x343/0x990
[ 94.381314][ T5332] ? __pfx_vfs_writev+0x10/0x10
[ 94.383332][ T5332] ? __fget_files+0x2a/0x420
[ 94.385261][ T5332] ? __fget_files+0x3a2/0x420
[ 94.387232][ T5332] ? __fget_files+0x2a/0x420
[ 94.389142][ T5332] __se_sys_pwritev2+0x177/0x2a0
[ 94.391127][ T5332] ? __pfx___se_sys_pwritev2+0x10/0x10
[ 94.393405][ T5332] ? __x64_sys_pwritev2+0x20/0xc0
[ 94.395534][ T5332] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 94.398049][ T5332] do_syscall_64+0x174/0x580
[ 94.400130][ T5332] ? trace_irq_disable+0x3b/0x140
[ 94.402325][ T5332] ? clear_bhb_loop+0x40/0x90
[ 94.404252][ T5332] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 94.406693][ T5332] RIP: 0033:0x7f5bba59de99
[ 94.408609][ T5332] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 94.416424][ T5332] RSP: 002b:00007f5bb69f4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000148
[ 94.419868][ T5332] RAX: ffffffffffffffda RBX: 00007f5bba825fa0 RCX: 00007f5bba59de99
[ 94.423064][ T5332] RDX: 0000000000000001 RSI: 00002000000001c0 RDI: 0000000000000007
[ 94.426375][ T5332] RBP: 00007f5bba633eaf R08: 0000000000000000 R09: 0000000000000000
[ 94.429627][ T5332] R10: 0000000000000e7b R11: 0000000000000246 R12: 0000000000000000
[ 94.432930][ T5332] R13: 00007f5bba826038 R14: 00007f5bba825fa0 R15: 00007ffeeed2a118
[ 94.436369][ T5332]
[ 94.438291][ T5332] Kernel Offset: disabled
[ 94.440189][ T5332] Rebooting in 86400 seconds..