program: syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x1000000, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x2, 0x58a, &(0x7f0000000740)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x145802, 0x0) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000200)='y', 0xf4240}], 0x1, 0x0, 0x0, 0x0) [ 69.205666][ T4666] Bluetooth: hci0: command tx timeout [ 69.247092][ T5321] loop0: detected capacity change from 0 to 512 [ 69.292933][ T5321] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 69.295781][ T5321] UDF-fs: Scanning with blocksize 512 failed [ 69.313848][ T5321] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 69.317076][ T5321] UDF-fs: Scanning with blocksize 1024 failed [ 69.319599][ T5321] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 69.324480][ T5321] UDF-fs: Scanning with blocksize 2048 failed [ 69.327669][ T5321] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 69.334518][ T5321] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 69.344268][ T24] audit: type=1800 audit(1735063513.925:2): pid=5321 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.0" name="file1" dev="loop0" ino=26 res=0 errno=0 [ 69.353507][ T5321] ------------[ cut here ]------------ [ 69.355454][ T5321] WARNING: CPU: 0 PID: 5321 at fs/udf/truncate.c:224 udf_truncate_extents+0x10c8/0x1310 [ 69.358873][ T5321] Modules linked in: [ 69.360252][ T5321] CPU: 0 UID: 0 PID: 5321 Comm: syz.0.0 Not tainted 6.13.0-rc4-syzkaller-00012-g9b2ffa6148b1 #0 [ 69.364396][ T5321] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 69.368457][ T5321] RIP: 0010:udf_truncate_extents+0x10c8/0x1310 [ 69.370733][ T5321] Code: 48 3b 84 24 a0 01 00 00 0f 85 4b 02 00 00 44 89 f8 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc e8 19 dd 74 fe 90 <0f> 0b 90 eb 8c 48 8d 8c 24 60 01 00 00 80 e1 07 80 c1 03 38 c1 0f [ 69.377906][ T5321] RSP: 0018:ffffc900019df680 EFLAGS: 00010287 [ 69.379990][ T5321] RAX: ffffffff832a9717 RBX: 000000000000000a RCX: 0000000000100000 [ 69.382686][ T5321] RDX: ffffc9000e7b2000 RSI: 00000000000009c4 RDI: 00000000000009c5 [ 69.385121][ T5321] RBP: ffffc900019df870 R08: ffffffff832a8b38 R09: ffffffff8328694d [ 69.387549][ T5321] R10: 0000000000000002 R11: ffff888000fcc880 R12: dffffc0000000000 [ 69.390095][ T5321] R13: 0000000000000000 R14: 000000000000000a R15: 0000000000000000 [ 69.392954][ T5321] FS: 00007f2700c026c0(0000) GS:ffff88801fc00000(0000) knlGS:0000000000000000 [ 69.396002][ T5321] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 69.398282][ T5321] CR2: 0000000020001000 CR3: 000000004019c000 CR4: 0000000000352ef0 [ 69.401161][ T5321] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 69.403989][ T5321] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 69.406618][ T5321] Call Trace: [ 69.407760][ T5321] [ 69.408923][ T5321] ? __warn+0x165/0x4d0 [ 69.410604][ T5321] ? udf_truncate_extents+0x10c8/0x1310 [ 69.412898][ T5321] ? report_bug+0x2b3/0x500 [ 69.414628][ T5321] ? udf_truncate_extents+0x10c8/0x1310 [ 69.416724][ T5321] ? handle_bug+0x60/0x90 [ 69.418462][ T5321] ? exc_invalid_op+0x1a/0x50 [ 69.420434][ T5321] ? asm_exc_invalid_op+0x1a/0x20 [ 69.422486][ T5321] ? udf_current_aext+0x3bd/0xad0 [ 69.424408][ T5321] ? udf_truncate_extents+0x4e8/0x1310 [ 69.426382][ T5321] ? udf_truncate_extents+0x10c7/0x1310 [ 69.428517][ T5321] ? udf_truncate_extents+0x10c8/0x1310 [ 69.430856][ T5321] ? __pfx_udf_truncate_extents+0x10/0x10 [ 69.433168][ T5321] ? __pfx_lock_release+0x10/0x10 [ 69.435147][ T5321] ? do_raw_spin_lock+0x14f/0x370 [ 69.437097][ T5321] ? do_raw_spin_unlock+0x58/0x8b0 [ 69.439039][ T5321] udf_write_failed+0x176/0x1b0 [ 69.440858][ T5321] udf_write_begin+0x1f7/0x250 [ 69.442697][ T5321] generic_perform_write+0x346/0x990 [ 69.444328][ T5321] ? __pfx_generic_perform_write+0x10/0x10 [ 69.446314][ T5321] __generic_file_write_iter+0x1b5/0x230 [ 69.448592][ T5321] udf_file_write_iter+0x2fc/0x660 [ 69.450670][ T5321] do_iter_readv_writev+0x600/0x880 [ 69.452590][ T5321] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 69.454528][ T5321] ? rcu_read_lock_any_held+0xb7/0x160 [ 69.456600][ T5321] vfs_writev+0x376/0xba0 [ 69.458198][ T5321] ? __pfx_lock_acquire+0x10/0x10 [ 69.460160][ T5321] ? __pfx_vfs_writev+0x10/0x10 [ 69.462254][ T5321] ? do_sys_openat2+0x17a/0x1d0 [ 69.464152][ T5321] ? __might_fault+0xaa/0x120 [ 69.466105][ T5321] ? __fget_files+0x2a/0x410 [ 69.467842][ T5321] ? __fget_files+0x395/0x410 [ 69.469697][ T5321] ? __fget_files+0x2a/0x410 [ 69.472357][ T5321] __se_sys_pwritev2+0x196/0x2b0 [ 69.474564][ T5321] ? __pfx___se_sys_pwritev2+0x10/0x10 [ 69.476677][ T5321] ? do_syscall_64+0x100/0x230 [ 69.478464][ T5321] ? __x64_sys_pwritev2+0x21/0xf0 [ 69.480290][ T5321] do_syscall_64+0xf3/0x230 [ 69.482219][ T5321] ? clear_bhb_loop+0x35/0x90 [ 69.484340][ T5321] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.486636][ T5321] RIP: 0033:0x7f26ffd85d29 [ 69.488313][ T5321] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 69.495624][ T5321] RSP: 002b:00007f2700c02038 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 69.498804][ T5321] RAX: ffffffffffffffda RBX: 00007f26fff75fa0 RCX: 00007f26ffd85d29 [ 69.502014][ T5321] RDX: 0000000000000001 RSI: 00000000200001c0 RDI: 0000000000000004 [ 69.505063][ T5321] RBP: 00007f26ffe01aa8 R08: 0000000000000000 R09: 0000000000000000 [ 69.508047][ T5321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 69.511285][ T5321] R13: 0000000000000000 R14: 00007f26fff75fa0 R15: 00007ffd7de226f8 [ 69.514325][ T5321] [ 69.515543][ T5321] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 69.518212][ T5321] CPU: 0 UID: 0 PID: 5321 Comm: syz.0.0 Not tainted 6.13.0-rc4-syzkaller-00012-g9b2ffa6148b1 #0 [ 69.522234][ T5321] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 69.526266][ T5321] Call Trace: [ 69.527520][ T5321] [ 69.528732][ T5321] dump_stack_lvl+0x241/0x360 [ 69.530480][ T5321] ? __pfx_dump_stack_lvl+0x10/0x10 [ 69.532431][ T5321] ? __pfx__printk+0x10/0x10 [ 69.534234][ T5321] ? _printk+0xd5/0x120 [ 69.535738][ T5321] ? __init_begin+0x41000/0x41000 [ 69.537674][ T5321] ? vscnprintf+0x5d/0x90 [ 69.539319][ T5321] panic+0x349/0x880 [ 69.540854][ T5321] ? __warn+0x174/0x4d0 [ 69.542510][ T5321] ? __pfx_panic+0x10/0x10 [ 69.544171][ T5321] __warn+0x344/0x4d0 [ 69.545949][ T5321] ? udf_truncate_extents+0x10c8/0x1310 [ 69.548523][ T5321] report_bug+0x2b3/0x500 [ 69.550612][ T5321] ? udf_truncate_extents+0x10c8/0x1310 [ 69.553056][ T5321] handle_bug+0x60/0x90 [ 69.554656][ T5321] exc_invalid_op+0x1a/0x50 [ 69.556373][ T5321] asm_exc_invalid_op+0x1a/0x20 [ 69.558351][ T5321] RIP: 0010:udf_truncate_extents+0x10c8/0x1310 [ 69.561043][ T5321] Code: 48 3b 84 24 a0 01 00 00 0f 85 4b 02 00 00 44 89 f8 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc e8 19 dd 74 fe 90 <0f> 0b 90 eb 8c 48 8d 8c 24 60 01 00 00 80 e1 07 80 c1 03 38 c1 0f [ 69.568184][ T5321] RSP: 0018:ffffc900019df680 EFLAGS: 00010287 [ 69.570514][ T5321] RAX: ffffffff832a9717 RBX: 000000000000000a RCX: 0000000000100000 [ 69.573490][ T5321] RDX: ffffc9000e7b2000 RSI: 00000000000009c4 RDI: 00000000000009c5 [ 69.576421][ T5321] RBP: ffffc900019df870 R08: ffffffff832a8b38 R09: ffffffff8328694d [ 69.579329][ T5321] R10: 0000000000000002 R11: ffff888000fcc880 R12: dffffc0000000000 [ 69.582282][ T5321] R13: 0000000000000000 R14: 000000000000000a R15: 0000000000000000 [ 69.585285][ T5321] ? udf_current_aext+0x3bd/0xad0 [ 69.587169][ T5321] ? udf_truncate_extents+0x4e8/0x1310 [ 69.589270][ T5321] ? udf_truncate_extents+0x10c7/0x1310 [ 69.591244][ T5321] ? __pfx_udf_truncate_extents+0x10/0x10 [ 69.593393][ T5321] ? __pfx_lock_release+0x10/0x10 [ 69.595319][ T5321] ? do_raw_spin_lock+0x14f/0x370 [ 69.597206][ T5321] ? do_raw_spin_unlock+0x58/0x8b0 [ 69.599160][ T5321] udf_write_failed+0x176/0x1b0 [ 69.600874][ T5321] udf_write_begin+0x1f7/0x250 [ 69.602532][ T5321] generic_perform_write+0x346/0x990 [ 69.604254][ T5321] ? __pfx_generic_perform_write+0x10/0x10 [ 69.606430][ T5321] __generic_file_write_iter+0x1b5/0x230 [ 69.608439][ T5321] udf_file_write_iter+0x2fc/0x660 [ 69.610358][ T5321] do_iter_readv_writev+0x600/0x880 [ 69.612259][ T5321] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 69.614386][ T5321] ? rcu_read_lock_any_held+0xb7/0x160 [ 69.616449][ T5321] vfs_writev+0x376/0xba0 [ 69.618068][ T5321] ? __pfx_lock_acquire+0x10/0x10 [ 69.619870][ T5321] ? __pfx_vfs_writev+0x10/0x10 [ 69.621747][ T5321] ? do_sys_openat2+0x17a/0x1d0 [ 69.623662][ T5321] ? __might_fault+0xaa/0x120 [ 69.625407][ T5321] ? __fget_files+0x2a/0x410 [ 69.626976][ T5321] ? __fget_files+0x395/0x410 [ 69.628656][ T5321] ? __fget_files+0x2a/0x410 [ 69.630376][ T5321] __se_sys_pwritev2+0x196/0x2b0 [ 69.632174][ T5321] ? __pfx___se_sys_pwritev2+0x10/0x10 [ 69.634248][ T5321] ? do_syscall_64+0x100/0x230 [ 69.635910][ T5321] ? __x64_sys_pwritev2+0x21/0xf0 [ 69.637860][ T5321] do_syscall_64+0xf3/0x230 [ 69.639593][ T5321] ? clear_bhb_loop+0x35/0x90 [ 69.641385][ T5321] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.643539][ T5321] RIP: 0033:0x7f26ffd85d29 [ 69.645199][ T5321] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 69.652546][ T5321] RSP: 002b:00007f2700c02038 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 69.655692][ T5321] RAX: ffffffffffffffda RBX: 00007f26fff75fa0 RCX: 00007f26ffd85d29 [ 69.658537][ T5321] RDX: 0000000000000001 RSI: 00000000200001c0 RDI: 0000000000000004 [ 69.661065][ T5321] RBP: 00007f26ffe01aa8 R08: 0000000000000000 R09: 0000000000000000 [ 69.663659][ T5321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 69.666219][ T5321] R13: 0000000000000000 R14: 00007f26fff75fa0 R15: 00007ffd7de226f8 [ 69.668875][ T5321] [ 69.670215][ T5321] Kernel Offset: disabled [ 69.671764][ T5321] Rebooting in 86400 seconds..