program: r0 = syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x1000000, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00'], 0x2, 0x580, &(0x7f0000000180)="$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") fallocate(r0, 0x0, 0x5, 0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'ip_vti0\x00', 0x0}) r2 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000640), 0x0, 0x22400) sendfile(r2, r3, 0x0, 0x80000002) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2, r1, 0x2b, r2}, 0x10) unlink(&(0x7f0000000000)='./file1\x00') [ 76.115131][ T45] Bluetooth: hci0: command tx timeout [ 76.189159][ T5357] loop0: detected capacity change from 0 to 512 [ 76.213191][ T5357] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 76.222627][ T5357] UDF-fs: Scanning with blocksize 512 failed [ 76.236601][ T5357] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 76.239828][ T5357] UDF-fs: Scanning with blocksize 1024 failed [ 76.250180][ T5357] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 76.253348][ T5357] UDF-fs: Scanning with blocksize 2048 failed [ 76.258170][ T5357] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 76.272032][ T5357] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 76.289384][ T25] audit: type=1800 audit(1756318039.830:2): pid=5357 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.0" name="file1" dev="loop0" ino=26 res=0 errno=0 [ 76.302521][ T5357] ------------[ cut here ]------------ [ 76.305409][ T5357] WARNING: CPU: 0 PID: 5357 at fs/udf/truncate.c:224 udf_truncate_extents+0xd4c/0xec0 [ 76.311273][ T5357] Modules linked in: [ 76.313133][ T5357] CPU: 0 UID: 0 PID: 5357 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 76.317508][ T5357] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 76.322060][ T5357] RIP: 0010:udf_truncate_extents+0xd4c/0xec0 [ 76.324956][ T5357] Code: 87 66 0f 48 3b 84 24 80 01 00 00 75 77 44 89 e0 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d e9 db f2 43 08 cc e8 f5 32 85 fe 90 <0f> 0b 90 eb 88 44 89 e9 80 e1 07 38 c1 0f 8c e4 f3 ff ff 4c 89 ef [ 76.333072][ T5357] RSP: 0018:ffffc9000fd3f3e0 EFLAGS: 00010287 [ 76.335903][ T5357] RAX: ffffffff833a884b RBX: 1ffff110088430d4 RCX: 0000000000100000 [ 76.339314][ T5357] RDX: ffffc9000dd32000 RSI: 00000000000028a8 RDI: 00000000000028a9 [ 76.342641][ T5357] RBP: ffffc9000fd3f5b8 R08: ffff888000380000 R09: 0000000000000002 [ 76.345941][ T5357] R10: 0000000000000001 R11: 0000000000000002 R12: 0000000000000000 [ 76.349188][ T5357] R13: 0000000000000000 R14: 000000000000000a R15: 000000000000000a [ 76.352574][ T5357] FS: 00007f8ce33b06c0(0000) GS:ffff88808d20f000(0000) knlGS:0000000000000000 [ 76.358939][ T5357] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 76.361590][ T5357] CR2: 00007f8ce27b1248 CR3: 00000000400b3000 CR4: 0000000000352ef0 [ 76.364837][ T5357] Call Trace: [ 76.366203][ T5357] [ 76.367345][ T5357] ? __pfx_udf_truncate_extents+0x10/0x10 [ 76.369449][ T5357] ? do_raw_spin_lock+0x121/0x290 [ 76.371348][ T5357] ? do_raw_spin_unlock+0x4d/0x240 [ 76.373322][ T5357] udf_write_failed+0x185/0x1c0 [ 76.375293][ T5357] udf_write_begin+0x212/0x270 [ 76.377188][ T5357] generic_perform_write+0x2c5/0x900 [ 76.379241][ T5357] ? __pfx_generic_perform_write+0x10/0x10 [ 76.381718][ T5357] ? generic_file_direct_write+0x17d/0x3e0 [ 76.384624][ T5357] ? file_update_time+0x416/0x490 [ 76.386721][ T5357] __generic_file_write_iter+0x1ae/0x230 [ 76.389173][ T5357] udf_file_write_iter+0x2d5/0x6c0 [ 76.391472][ T5357] iter_file_splice_write+0x975/0x10e0 [ 76.393963][ T5357] ? __pfx_iter_file_splice_write+0x10/0x10 [ 76.396499][ T5357] ? rcu_read_lock_any_held+0xb3/0x120 [ 76.398784][ T5357] ? __pfx_iter_file_splice_write+0x10/0x10 [ 76.401313][ T5357] direct_splice_actor+0xfe/0x160 [ 76.403519][ T5357] splice_direct_to_actor+0x5a8/0xcc0 [ 76.405974][ T5357] ? __pfx_direct_splice_actor+0x10/0x10 [ 76.408763][ T5357] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 76.411315][ T5357] do_splice_direct+0x181/0x270 [ 76.413520][ T5357] ? __pfx_do_splice_direct+0x10/0x10 [ 76.416189][ T5357] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 76.418527][ T5357] ? rw_verify_area+0x255/0x4d0 [ 76.420566][ T5357] do_sendfile+0x4da/0x7e0 [ 76.422596][ T5357] ? __pfx_do_sendfile+0x10/0x10 [ 76.424826][ T5357] ? rcu_is_watching+0x15/0xb0 [ 76.426845][ T5357] ? __rseq_handle_notify_resume+0x37e/0x11f0 [ 76.429593][ T5357] __se_sys_sendfile64+0x13e/0x190 [ 76.431727][ T5357] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 76.434319][ T5357] ? rcu_is_watching+0x15/0xb0 [ 76.436395][ T5357] ? do_syscall_64+0xbe/0x3b0 [ 76.438722][ T5357] do_syscall_64+0xfa/0x3b0 [ 76.440771][ T5357] ? lockdep_hardirqs_on+0x9c/0x150 [ 76.443160][ T5357] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.446074][ T5357] ? clear_bhb_loop+0x60/0xb0 [ 76.448151][ T5357] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.450933][ T5357] RIP: 0033:0x7f8ce258ebe9 [ 76.452851][ T5357] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 76.460082][ T5357] RSP: 002b:00007f8ce33b0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 76.463204][ T5357] RAX: ffffffffffffffda RBX: 00007f8ce27b5fa0 RCX: 00007f8ce258ebe9 [ 76.466247][ T5357] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 76.469512][ T5357] RBP: 00007f8ce2611e19 R08: 0000000000000000 R09: 0000000000000000 [ 76.472897][ T5357] R10: 0000000080000002 R11: 0000000000000246 R12: 0000000000000000 [ 76.476059][ T5357] R13: 00007f8ce27b6038 R14: 00007f8ce27b5fa0 R15: 00007ffe04762778 [ 76.479110][ T5357] [ 76.480327][ T5357] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 76.483127][ T5357] CPU: 0 UID: 0 PID: 5357 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 76.486613][ T5357] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 76.491102][ T5357] Call Trace: [ 76.492493][ T5357] [ 76.493822][ T5357] dump_stack_lvl+0x99/0x250 [ 76.495867][ T5357] ? __asan_memcpy+0x40/0x70 [ 76.498016][ T5357] ? __pfx_dump_stack_lvl+0x10/0x10 [ 76.500321][ T5357] ? __pfx__printk+0x10/0x10 [ 76.502373][ T5357] vpanic+0x281/0x750 [ 76.504194][ T5357] ? __pfx__printk+0x10/0x10 [ 76.506249][ T5357] ? __pfx_vpanic+0x10/0x10 [ 76.508204][ T5357] ? is_bpf_text_address+0x26/0x2b0 [ 76.510492][ T5357] panic+0xb9/0xc0 [ 76.512194][ T5357] ? __pfx_panic+0x10/0x10 [ 76.514224][ T5357] __warn+0x31b/0x4b0 [ 76.515943][ T5357] ? udf_truncate_extents+0xd4c/0xec0 [ 76.518390][ T5357] ? udf_truncate_extents+0xd4c/0xec0 [ 76.520772][ T5357] report_bug+0x2be/0x4f0 [ 76.522719][ T5357] ? udf_truncate_extents+0xd4c/0xec0 [ 76.525207][ T5357] ? udf_truncate_extents+0xd4c/0xec0 [ 76.527746][ T5357] ? udf_truncate_extents+0xd4e/0xec0 [ 76.530149][ T5357] handle_bug+0x84/0x160 [ 76.532002][ T5357] exc_invalid_op+0x1a/0x50 [ 76.533938][ T5357] asm_exc_invalid_op+0x1a/0x20 [ 76.536238][ T5357] RIP: 0010:udf_truncate_extents+0xd4c/0xec0 [ 76.539069][ T5357] Code: 87 66 0f 48 3b 84 24 80 01 00 00 75 77 44 89 e0 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d e9 db f2 43 08 cc e8 f5 32 85 fe 90 <0f> 0b 90 eb 88 44 89 e9 80 e1 07 38 c1 0f 8c e4 f3 ff ff 4c 89 ef [ 76.547143][ T5357] RSP: 0018:ffffc9000fd3f3e0 EFLAGS: 00010287 [ 76.549774][ T5357] RAX: ffffffff833a884b RBX: 1ffff110088430d4 RCX: 0000000000100000 [ 76.552962][ T5357] RDX: ffffc9000dd32000 RSI: 00000000000028a8 RDI: 00000000000028a9 [ 76.556133][ T5357] RBP: ffffc9000fd3f5b8 R08: ffff888000380000 R09: 0000000000000002 [ 76.559485][ T5357] R10: 0000000000000001 R11: 0000000000000002 R12: 0000000000000000 [ 76.562899][ T5357] R13: 0000000000000000 R14: 000000000000000a R15: 000000000000000a [ 76.566230][ T5357] ? udf_truncate_extents+0xd4b/0xec0 [ 76.568472][ T5357] ? __pfx_udf_truncate_extents+0x10/0x10 [ 76.571131][ T5357] ? do_raw_spin_lock+0x121/0x290 [ 76.573246][ T5357] ? do_raw_spin_unlock+0x4d/0x240 [ 76.575500][ T5357] udf_write_failed+0x185/0x1c0 [ 76.577568][ T5357] udf_write_begin+0x212/0x270 [ 76.579648][ T5357] generic_perform_write+0x2c5/0x900 [ 76.581954][ T5357] ? __pfx_generic_perform_write+0x10/0x10 [ 76.584403][ T5357] ? generic_file_direct_write+0x17d/0x3e0 [ 76.586913][ T5357] ? file_update_time+0x416/0x490 [ 76.589167][ T5357] __generic_file_write_iter+0x1ae/0x230 [ 76.591722][ T5357] udf_file_write_iter+0x2d5/0x6c0 [ 76.594006][ T5357] iter_file_splice_write+0x975/0x10e0 [ 76.596433][ T5357] ? __pfx_iter_file_splice_write+0x10/0x10 [ 76.598851][ T5357] ? rcu_read_lock_any_held+0xb3/0x120 [ 76.601039][ T5357] ? __pfx_iter_file_splice_write+0x10/0x10 [ 76.603414][ T5357] direct_splice_actor+0xfe/0x160 [ 76.605133][ T5357] splice_direct_to_actor+0x5a8/0xcc0 [ 76.607414][ T5357] ? __pfx_direct_splice_actor+0x10/0x10 [ 76.609728][ T5357] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 76.611925][ T5357] do_splice_direct+0x181/0x270 [ 76.613708][ T5357] ? __pfx_do_splice_direct+0x10/0x10 [ 76.615809][ T5357] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 76.618299][ T5357] ? rw_verify_area+0x255/0x4d0 [ 76.620276][ T5357] do_sendfile+0x4da/0x7e0 [ 76.622258][ T5357] ? __pfx_do_sendfile+0x10/0x10 [ 76.624345][ T5357] ? rcu_is_watching+0x15/0xb0 [ 76.626251][ T5357] ? __rseq_handle_notify_resume+0x37e/0x11f0 [ 76.628915][ T5357] __se_sys_sendfile64+0x13e/0x190 [ 76.631163][ T5357] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 76.633621][ T5357] ? rcu_is_watching+0x15/0xb0 [ 76.635807][ T5357] ? do_syscall_64+0xbe/0x3b0 [ 76.637828][ T5357] do_syscall_64+0xfa/0x3b0 [ 76.639734][ T5357] ? lockdep_hardirqs_on+0x9c/0x150 [ 76.641976][ T5357] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.644617][ T5357] ? clear_bhb_loop+0x60/0xb0 [ 76.646664][ T5357] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.649327][ T5357] RIP: 0033:0x7f8ce258ebe9 [ 76.651224][ T5357] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 76.659201][ T5357] RSP: 002b:00007f8ce33b0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 76.662791][ T5357] RAX: ffffffffffffffda RBX: 00007f8ce27b5fa0 RCX: 00007f8ce258ebe9 [ 76.666160][ T5357] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 76.669267][ T5357] RBP: 00007f8ce2611e19 R08: 0000000000000000 R09: 0000000000000000 [ 76.672665][ T5357] R10: 0000000080000002 R11: 0000000000000246 R12: 0000000000000000 [ 76.676194][ T5357] R13: 00007f8ce27b6038 R14: 00007f8ce27b5fa0 R15: 00007ffe04762778 [ 76.679636][ T5357] [ 76.681310][ T5357] Kernel Offset: disabled [ 76.683287][ T5357] Rebooting in 86400 seconds..