UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 UDF-fs: error (device loop3): udf_verify_fi: directory (ino 21) has entry past directory size at pos 128 ------------[ cut here ]------------ WARNING: CPU: 0 PID: 9397 at fs/udf/truncate.c:224 udf_truncate_extents+0xa80/0xbd4 fs/udf/truncate.c:-1 Modules linked in: CPU: 0 UID: 0 PID: 9397 Comm: syz.3.1110 Not tainted syzkaller #0 PREEMPT Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) pc : udf_truncate_extents+0xa80/0xbd4 fs/udf/truncate.c:-1 lr : udf_truncate_extents+0xa7c/0xbd4 fs/udf/truncate.c:224 sp : ffff800099d97640 x29: ffff800099d977f0 x28: 0000000000000000 x27: 000000000000000a x26: ffff0000df768d00 x25: ffff0000d1926018 x24: dfff800000000000 x23: 000000000000000a x22: ffff800099d97700 x21: 0000000000000000 x20: ffff800099d976e0 x19: ffff0000df768e18 x18: 00000000ffffffff x17: ffff80009353a000 x16: ffff8000805371bc x15: 0000000000000001 x14: 0000000000000002 x13: 0000000000000001 x12: 0000000000ff0100 x11: 0000000000080000 x10: 0000000000003531 x9 : ffff8000a601e000 x8 : 0000000000003532 x7 : ffff800081b918b0 x6 : 0000000000000000 x5 : 0000000000000001 x4 : ffff800099d97790 x3 : 0000000000000001 x2 : ffff800099d97708 x1 : 000000000000000a x0 : 0000000000000000 Call trace: udf_truncate_extents+0xa80/0xbd4 fs/udf/truncate.c:-1 (P) udf_write_failed+0x164/0x1b4 fs/udf/inode.c:178 udf_write_begin+0x1f0/0x230 fs/udf/inode.c:265 generic_perform_write+0x244/0x7bc mm/filemap.c:4175 __generic_file_write_iter+0xfc/0x204 mm/filemap.c:4292 udf_file_write_iter+0x254/0x5a4 fs/udf/file.c:111 new_sync_write fs/read_write.c:593 [inline] vfs_write+0x540/0xa3c fs/read_write.c:686 ksys_write+0x120/0x210 fs/read_write.c:738 __do_sys_write fs/read_write.c:749 [inline] __se_sys_write fs/read_write.c:746 [inline] __arm64_sys_write+0x7c/0x90 fs/read_write.c:746 __invoke_syscall arch/arm64/kernel/syscall.c:35 [inline] invoke_syscall+0x98/0x254 arch/arm64/kernel/syscall.c:49 el0_svc_common+0x130/0x23c arch/arm64/kernel/syscall.c:132 do_el0_svc+0x48/0x58 arch/arm64/kernel/syscall.c:151 el0_svc+0x5c/0x254 arch/arm64/kernel/entry-common.c:744 el0t_64_sync_handler+0x84/0x12c arch/arm64/kernel/entry-common.c:763 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:596 irq event stamp: 2282 hardirqs last enabled at (2281): [] __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:151 [inline] hardirqs last enabled at (2281): [] _raw_spin_unlock_irqrestore+0x38/0x98 kernel/locking/spinlock.c:194 hardirqs last disabled at (2282): [] el1_brk64+0x20/0x54 arch/arm64/kernel/entry-common.c:434 softirqs last enabled at (2220): [] local_bh_enable+0x10/0x34 include/linux/bottom_half.h:32 softirqs last disabled at (2218): [] local_bh_disable+0x10/0x34 include/linux/bottom_half.h:19 ---[ end trace 0000000000000000 ]--- udf: Unknown parameter 'Tcg6Ê_ª{{¥>ýnôõg' UDF-fs: error (device loop3): udf_verify_fi: directory (ino 21) has entry past directory size at pos 128 netlink: 108 bytes leftover after parsing attributes in process `syz.3.1110'. UDF-fs: error (device loop3): udf_verify_fi: directory (ino 21) has entry past directory size at pos 128 UDF-fs: error (device loop3): udf_verify_fi: directory (ino 21) has entry past directory size at pos 128 ------------[ cut here ]------------ WARNING: CPU: 1 PID: 9397 at fs/udf/truncate.c:224 udf_truncate_extents+0xa80/0xbd4 fs/udf/truncate.c:-1 Modules linked in: CPU: 1 UID: 0 PID: 9397 Comm: syz.3.1110 Tainted: G W syzkaller #0 PREEMPT Tainted: [W]=WARN Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) pc : udf_truncate_extents+0xa80/0xbd4 fs/udf/truncate.c:-1 lr : udf_truncate_extents+0xa7c/0xbd4 fs/udf/truncate.c:224 sp : ffff800099d974a0 x29: ffff800099d97650 x28: 0000000000000000 x27: 000000000000000a x26: ffff0000df768d00 x25: ffff0000d1926018 x24: dfff800000000000 x23: 000000000000000a x22: ffff800099d97560 x21: 0000000000000000 x20: ffff800099d97540 x19: ffff0000df768e18 x18: 00000000ffffffff x17: ffff80009353a000 x16: ffff8000805371bc x15: 0000000000000001 x14: 0000000000000002 x13: 0000000000000001 x12: 0000000000ff0100 x11: 0000000000080000 x10: 00000000000005c9 x9 : ffff8000a601e000 x8 : 00000000000005ca x7 : ffff800081b918b0 x6 : 0000000000000000 x5 : 0000000000000001 x4 : ffff800099d975f0 x3 : 0000000000000001 x2 : ffff800099d97568 x1 : 000000000000000a x0 : 0000000000000000 Call trace: udf_truncate_extents+0xa80/0xbd4 fs/udf/truncate.c:-1 (P) udf_write_failed+0x164/0x1b4 fs/udf/inode.c:178 udf_write_begin+0x1f0/0x230 fs/udf/inode.c:265 generic_perform_write+0x244/0x7bc mm/filemap.c:4175 __generic_file_write_iter+0xfc/0x204 mm/filemap.c:4292 udf_file_write_iter+0x254/0x5a4 fs/udf/file.c:111 do_iter_readv_writev+0x4c0/0x724 fs/read_write.c:-1 vfs_writev+0x29c/0x7cc fs/read_write.c:1057 do_writev+0x128/0x290 fs/read_write.c:1103 __do_sys_writev fs/read_write.c:1171 [inline] __se_sys_writev fs/read_write.c:1168 [inline] __arm64_sys_writev+0x80/0x94 fs/read_write.c:1168 __invoke_syscall arch/arm64/kernel/syscall.c:35 [inline] invoke_syscall+0x98/0x254 arch/arm64/kernel/syscall.c:49 el0_svc_common+0x130/0x23c arch/arm64/kernel/syscall.c:132 do_el0_svc+0x48/0x58 arch/arm64/kernel/syscall.c:151 el0_svc+0x5c/0x254 arch/arm64/kernel/entry-common.c:744 el0t_64_sync_handler+0x84/0x12c arch/arm64/kernel/entry-common.c:763 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:596 irq event stamp: 73056 hardirqs last enabled at (73055): [] seqcount_lockdep_reader_access+0x80/0x104 include/linux/seqlock.h:74 hardirqs last disabled at (73056): [] el1_brk64+0x20/0x54 arch/arm64/kernel/entry-common.c:434 softirqs last enabled at (73046): [] local_bh_enable+0x10/0x34 include/linux/bottom_half.h:32 softirqs last disabled at (73044): [] local_bh_disable+0x10/0x34 include/linux/bottom_half.h:19 ---[ end trace 0000000000000000 ]--- UDF-fs: error (device loop3): udf_read_inode: (ino 19) failed ident=264