program: syz_mount_image$udf(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0038cecbad8dce0a24359e05a65a4ab28df7afe07fb47d7e2b67b9a0ea16c9d97278ebd7fec38ad0526fba402ecf"], 0x1, 0x516, &(0x7f0000000600)="$eJzs289vHGcZB/Dn9azd9Raom4bUrSpkVImmTRMldtJEMofmBwmRqoBIwz2N7WDVsUPsVE2FSiWQ+g9whQMoBw4gcS2iNyQOSFSAUKAceuKChHxA4gia2Znd2a0Tb0jsjevPJ4pndvbZ9Tuj/e7M+77jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAiTn3t5OEjaditAAC204WL3zo84/wPALvK6/r/AACwW6TIYjxSPPOn9fRC8bit+dri8s23L505u/HLxlOkGImsqM//N49Mzxw99srxE9Xy3q9/2J6Jb1x8/eTU6ZVr12/Mr67Oz01dWl68sjI3P/A7POjr+71UHICpa2/enFtYWJ2aPjTT8/TbE/947PF9E7MnDh74UlV76czZsxdrNY3R//u3f4oeHhsZiyx+HylO/fyXaX9EjMSDZ2GT746tNh6NPH/FTlw6c7bYkaXFy8tr+ZNppKxq9GZirMrINmTxgTQiDuZtHZNoHtxoZPFxpDj33fX0YkRkVQ4OFBODm79BYxsaeZdfeygivhk7ILPwiHossjgWKS78dCJeKnNV5L8R8e6wGwdsqUZk8aNIsZLW04HieiA/n+aXza99e+r88sJKrTaNlGfUnd4/2E6uTXiENSOLF4sz/np6ediNAbbVeGSxFik++vdbxbhSFOPST8yeuHCqUR9henqT90llf3x2wD75aDnWmEbyfw9/v4DNNVMW70eKP/ysWTzOs9sq1j75b9uQGwhsnZTFSKT43en1lPrmpbPa/H7HTu/7b237x5unV67furF49TtrGz7fap58Y3XtxuUrGz/dnrvM6ls2m8fs1yjncGEArZTFTyLFbz5Zj9rUeJ75z7cfdT+Nt7/X/S7Y37es1L8/BlkfeBb7PsbR8jallMWrkWLhg8l2PyO/qpEN6JHn/weR4vjiR6lKepn/cma/lv+vdvPTTL3LjiLbX2jf11aNJZxvPX+37VuR/7xNef5vRopTeybLexra+c/6avO6c5Hi3MfPlXUjY3lddVvDRPsdFxaX5g/ntX+NFH+/U9VGUVtNKDzVrT2S1zYixZc/7K1tlbV7u7XTVRtu/mLj2i92a2fy2tuRYnJuqqpt5bV7y9p93dpDV1aW5gY9vOxOef4/jBQ//u3XU/WZv2v+a+f/9/qWHZ/K/L3XH1b+J2rb3itz/VaZ/8Ym+T8YKd64/Vy130X2qq+VJ4uf3fwfihTP/qu3tlnW7unWHhl0t2CY8vz/LVL8euZO5zNffrbLh92E1vP/bKN32bmuHlL+n6xtmyjbNXafxwJ2m9Vb77x5eWlp/oYVK1asdFaG/c0EbLX8+v9XkeL9J7JU9WPL6//PtR91e8z/ebd7/T/bt+wY0vX/ntq22bLXMpr3zdeuXR99OqK5euudg4vXLl+dvzq/PPPK0elj08dPHD08OlZ17rtrAx872Ony/P8lUvx58o+dceze/v/G43+tvmXHkPL/VH2fevo1Ax8K2HWq+b+vLN3pZPle43/VON/+53uXnT+qGVL+99a2TZTtevw+jwUAAAAAAAAAAADsFK2UxQ8jxfl/vpyqe+gGuf93rm/ZMaT7//bVts1t0981DnyQAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdrCRyOJ6pPjg1fX0/XzDZMQL9SXwmfW/AAAA///+zUk1") r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/stat\x00', 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendfile(r1, r0, 0x0, 0x4000000000010046) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x27}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$fuse(0x0, &(0x7f0000000740)='./bus\x00', 0x229001e, 0x0, 0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x88, &(0x7f0000000100)={[{@dioread_lock}, {@nombcache}, {@max_batch_time={'max_batch_time', 0x3d, 0x6}}, {@nouid32}, {@noinit_itable}, {@abort}]}, 0x3, 0x438, &(0x7f0000000d80)="$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") r2 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x1000000000003, 0x3, 0x8000000000007, 0xaa, 0x3, 0x80001, {0x0, 0x180, 0x20fe, 0x0, 0x87, 0xd615, 0x9, 0x9, 0xfffffffe, 0x8000, 0x0, 0xee00, 0x0, 0x3ff, 0x1}}, {0x0, 0x11}}}, 0xa0) setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x46942, 0x0) pwrite64(r3, &(0x7f0000000000)='l', 0x1, 0x404043000) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) unlink(&(0x7f0000000000)='./file0/file0\x00') [ 103.354482][ T5303] Bluetooth: hci0: command tx timeout [ 103.409040][ T5330] loop0: detected capacity change from 0 to 256 [ 103.446570][ T5330] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 103.471013][ T5330] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 103.482792][ T5330] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 103.486025][ T5330] UDF-fs: Scanning with blocksize 512 failed [ 103.499380][ T5330] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 103.513364][ T5330] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 103.559082][ T5330] ------------[ cut here ]------------ [ 103.562261][ T5330] byte_offset [ 103.562275][ T5330] WARNING: fs/udf/truncate.c:224 at udf_truncate_extents+0xd8d/0xf00, CPU#0: syz.0.0/5330 [ 103.568087][ T5330] Modules linked in: [ 103.570010][ T5330] CPU: 0 UID: 0 PID: 5330 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 103.573711][ T5330] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 103.578407][ T5330] RIP: 0010:udf_truncate_extents+0xd8d/0xf00 [ 103.581339][ T5330] Code: df c5 0f 48 3b 84 24 80 01 00 00 75 7a 44 89 e0 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 84 33 6e fe 90 <0f> 0b 90 e9 64 ff ff ff 44 89 e9 80 e1 07 38 c1 0f 8c e0 f3 ff ff [ 103.589893][ T5330] RSP: 0018:ffffc9000e397940 EFLAGS: 00010287 [ 103.592839][ T5330] RAX: ffffffff835790ec RBX: 1ffff11008f48f22 RCX: 0000000000100000 [ 103.596895][ T5330] RDX: ffffc9000ec5a000 RSI: 00000000000003da RDI: 00000000000003db [ 103.601256][ T5330] RBP: ffffc9000e397b08 R08: ffff888011b9c980 R09: 0000000000000002 [ 103.605088][ T5330] R10: 0000000000000001 R11: 0000000000000002 R12: 0000000000000000 [ 103.608630][ T5330] R13: 0000000000000000 R14: 00000000000000a0 R15: 00000000000000a0 [ 103.612518][ T5330] FS: 00007fbaea4f66c0(0000) GS:ffff88808ca49000(0000) knlGS:0000000000000000 [ 103.616797][ T5330] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 103.620174][ T5330] CR2: 00007fbadd43f000 CR3: 00000000334be000 CR4: 0000000000352ef0 [ 103.624407][ T5330] Call Trace: [ 103.625869][ T5330] [ 103.627203][ T5330] ? __lock_acquire+0x146e/0x2cf0 [ 103.629402][ T5330] ? __pfx_udf_truncate_extents+0x10/0x10 [ 103.632245][ T5330] ? do_raw_spin_unlock+0x4d/0x210 [ 103.634906][ T5330] udf_write_failed+0x185/0x1c0 [ 103.637412][ T5330] udf_direct_IO+0x1c6/0x200 [ 103.639679][ T5330] generic_file_direct_write+0x1db/0x3e0 [ 103.642119][ T5330] __generic_file_write_iter+0x11d/0x230 [ 103.644476][ T5330] ? udf_file_write_iter+0x2af/0x6b0 [ 103.646688][ T5330] udf_file_write_iter+0x2ca/0x6b0 [ 103.648840][ T5330] vfs_write+0x61d/0xb90 [ 103.650910][ T5330] ? __pfx_vfs_write+0x10/0x10 [ 103.654155][ T5330] ? __fget_files+0x2a/0x420 [ 103.656605][ T5330] __x64_sys_pwrite64+0x199/0x230 [ 103.658965][ T5330] ? __pfx___x64_sys_pwrite64+0x10/0x10 [ 103.661387][ T5330] do_syscall_64+0x14d/0xf80 [ 103.663550][ T5330] ? trace_irq_disable+0x3b/0x150 [ 103.665662][ T5330] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.668221][ T5330] ? clear_bhb_loop+0x40/0x90 [ 103.670546][ T5330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.673821][ T5330] RIP: 0033:0x7fbae959c819 [ 103.675980][ T5330] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.685077][ T5330] RSP: 002b:00007fbaea4f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 103.689582][ T5330] RAX: ffffffffffffffda RBX: 00007fbae9815fa0 RCX: 00007fbae959c819 [ 103.694965][ T5330] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 0000000000000007 [ 103.698395][ T5330] RBP: 00007fbae9632c91 R08: 0000000000000000 R09: 0000000000000000 [ 103.701816][ T5330] R10: 0000000404043000 R11: 0000000000000246 R12: 0000000000000000 [ 103.705297][ T5330] R13: 00007fbae9816038 R14: 00007fbae9815fa0 R15: 00007fff842993a8 [ 103.710270][ T5330] [ 103.714665][ T5330] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 103.717854][ T5330] CPU: 0 UID: 0 PID: 5330 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 103.721896][ T5330] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 103.726365][ T5330] Call Trace: [ 103.728240][ T5330] [ 103.729937][ T5330] vpanic+0x56c/0xa60 [ 103.732306][ T5330] ? __pfx__printk+0x10/0x10 [ 103.734967][ T5330] ? __pfx_vpanic+0x10/0x10 [ 103.736999][ T5330] ? is_bpf_text_address+0x292/0x2b0 [ 103.738913][ T5330] ? is_bpf_text_address+0x26/0x2b0 [ 103.740800][ T5330] panic+0xc5/0xd0 [ 103.742497][ T5330] ? __pfx_panic+0x10/0x10 [ 103.744846][ T5330] __warn+0x315/0x4f0 [ 103.747091][ T5330] ? udf_truncate_extents+0xd8d/0xf00 [ 103.750707][ T5330] ? udf_truncate_extents+0xd8d/0xf00 [ 103.753936][ T5330] __report_bug+0x29a/0x540 [ 103.756073][ T5330] ? __lock_acquire+0x6b5/0x2cf0 [ 103.758176][ T5330] ? udf_truncate_extents+0xd8d/0xf00 [ 103.760356][ T5330] ? __pfx___report_bug+0x10/0x10 [ 103.762633][ T5330] ? udf_current_aext+0x69f/0xb30 [ 103.764883][ T5330] ? udf_truncate_extents+0xd8d/0xf00 [ 103.767440][ T5330] report_bug+0x16a/0x220 [ 103.769863][ T5330] ? udf_truncate_extents+0xd8d/0xf00 [ 103.772971][ T5330] ? udf_truncate_extents+0xd8f/0xf00 [ 103.775387][ T5330] handle_bug+0x9c/0x200 [ 103.777323][ T5330] exc_invalid_op+0x1a/0x50 [ 103.779204][ T5330] asm_exc_invalid_op+0x1a/0x20 [ 103.781233][ T5330] RIP: 0010:udf_truncate_extents+0xd8d/0xf00 [ 103.784121][ T5330] Code: df c5 0f 48 3b 84 24 80 01 00 00 75 7a 44 89 e0 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 84 33 6e fe 90 <0f> 0b 90 e9 64 ff ff ff 44 89 e9 80 e1 07 38 c1 0f 8c e0 f3 ff ff [ 103.793958][ T5330] RSP: 0018:ffffc9000e397940 EFLAGS: 00010287 [ 103.796691][ T5330] RAX: ffffffff835790ec RBX: 1ffff11008f48f22 RCX: 0000000000100000 [ 103.800225][ T5330] RDX: ffffc9000ec5a000 RSI: 00000000000003da RDI: 00000000000003db [ 103.804384][ T5330] RBP: ffffc9000e397b08 R08: ffff888011b9c980 R09: 0000000000000002 [ 103.808463][ T5330] R10: 0000000000000001 R11: 0000000000000002 R12: 0000000000000000 [ 103.812293][ T5330] R13: 0000000000000000 R14: 00000000000000a0 R15: 00000000000000a0 [ 103.815858][ T5330] ? udf_truncate_extents+0xd8c/0xf00 [ 103.818859][ T5330] ? __lock_acquire+0x146e/0x2cf0 [ 103.821644][ T5330] ? __pfx_udf_truncate_extents+0x10/0x10 [ 103.824281][ T5330] ? do_raw_spin_unlock+0x4d/0x210 [ 103.826587][ T5330] udf_write_failed+0x185/0x1c0 [ 103.828508][ T5330] udf_direct_IO+0x1c6/0x200 [ 103.830540][ T5330] generic_file_direct_write+0x1db/0x3e0 [ 103.833195][ T5330] __generic_file_write_iter+0x11d/0x230 [ 103.835982][ T5330] ? udf_file_write_iter+0x2af/0x6b0 [ 103.838467][ T5330] udf_file_write_iter+0x2ca/0x6b0 [ 103.840563][ T5330] vfs_write+0x61d/0xb90 [ 103.842450][ T5330] ? __pfx_vfs_write+0x10/0x10 [ 103.844452][ T5330] ? __fget_files+0x2a/0x420 [ 103.846518][ T5330] __x64_sys_pwrite64+0x199/0x230 [ 103.848839][ T5330] ? __pfx___x64_sys_pwrite64+0x10/0x10 [ 103.851716][ T5330] do_syscall_64+0x14d/0xf80 [ 103.854249][ T5330] ? trace_irq_disable+0x3b/0x150 [ 103.856821][ T5330] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.859528][ T5330] ? clear_bhb_loop+0x40/0x90 [ 103.861833][ T5330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.864380][ T5330] RIP: 0033:0x7fbae959c819 [ 103.866232][ T5330] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.874524][ T5330] RSP: 002b:00007fbaea4f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 103.879265][ T5330] RAX: ffffffffffffffda RBX: 00007fbae9815fa0 RCX: 00007fbae959c819 [ 103.883143][ T5330] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 0000000000000007 [ 103.886605][ T5330] RBP: 00007fbae9632c91 R08: 0000000000000000 R09: 0000000000000000 [ 103.890076][ T5330] R10: 0000000404043000 R11: 0000000000000246 R12: 0000000000000000 [ 103.893547][ T5330] R13: 00007fbae9816038 R14: 00007fbae9815fa0 R15: 00007fff842993a8 [ 103.897410][ T5330] [ 103.899506][ T5330] Kernel Offset: disabled [ 103.901629][ T5330] Rebooting in 86400 seconds..