program:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
close_range(r1, r0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00')
read$FUSE(r2, &(0x7f00000001c0)={0x2020}, 0x2020)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000006c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@typedef={0x0, 0x0, 0x0, 0x10, 0x8}]}}, 0x0, 0x26}, 0x20)
ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x1})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000001980)=0x1)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000500)='./bus\x00', 0x18418, &(0x7f0000000200)=ANY=[@ANYRES8=0x0, @ANYRES8], 0xfe, 0x4b1, &(0x7f0000001d00)="$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")
setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff})
truncate(&(0x7f0000000100)='./file1\x00', 0x20fdfffffe)
ftruncate(0xffffffffffffffff, 0x5)
creat(&(0x7f0000000240)='./bus\x00', 0x24)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000680)='./bus\x00', 0x0, 0x5000, 0x0)
r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x200000000002, 0x0, 0x0, 0x1a, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780800d1cbf7966d61f53dc17769048b0000fd0c000000000000000000000000000000000200000000000000000000000000008000", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143441, 0x98)
pwritev2(r4, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0)
[ 94.589217][ T44] Bluetooth: hci0: command tx timeout
[ 94.807901][ T5320] loop0: detected capacity change from 0 to 128
[ 94.860665][ T5320] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[ 94.911962][ T5320] loop0: detected capacity change from 128 to 127
[ 94.941482][ T5320] ------------[ cut here ]------------
[ 94.944236][ T5320] le32_to_cpu(aed->lengthAllocDescs) != epos->offset - sizeof(struct allocExtDesc)
[ 94.944252][ T5320] WARNING: fs/udf/inode.c:2086 at __udf_add_aext+0x52b/0x6e0, CPU#0: syz.0.0/5320
[ 94.952749][ T5320] Modules linked in:
[ 94.954620][ T5320] CPU: 0 UID: 0 PID: 5320 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 94.958141][ T5320] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 94.962476][ T5320] RIP: 0010:__udf_add_aext+0x52b/0x6e0
[ 94.964825][ T5320] Code: 81 c4 48 ff ff ff 4c 89 e6 e8 91 60 fc fe 31 c0 48 83 c4 28 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 86 42 66 fe 90 <0f> 0b 90 e9 0d fc ff ff e8 78 42 66 fe 90 0f 0b 90 e9 5f fd ff ff
[ 94.972628][ T5320] RSP: 0018:ffffc9000f5b71c0 EFLAGS: 00010283
[ 94.975540][ T5320] RAX: ffffffff8360d1ca RBX: dffffc0000000000 RCX: 0000000000100000
[ 94.979028][ T5320] RDX: ffffc9000ecca000 RSI: 00000000000008e9 RDI: 00000000000008ea
[ 94.983096][ T5320] RBP: 1ffff92001eb6eb9 R08: ffff88803fd1a540 R09: 0000000000000002
[ 94.988551][ T5320] R10: 0000000000000001 R11: 0000000000000002 R12: 0000000000000000
[ 94.991959][ T5320] R13: 0000000000000001 R14: ffffc9000f5b75c0 R15: ffffc9000f5b75c8
[ 94.995403][ T5320] FS: 00007f77527b36c0(0000) GS:ffff88808c543000(0000) knlGS:0000000000000000
[ 94.999460][ T5320] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 95.003795][ T5320] CR2: 00007fba17956000 CR3: 000000001297a000 CR4: 0000000000352ef0
[ 95.006841][ T5320] Call Trace:
[ 95.008226][ T5320]
[ 95.009431][ T5320] udf_do_extend_file+0x909/0x11e0
[ 95.011790][ T5320] ? __pfx_udf_do_extend_file+0x10/0x10
[ 95.014275][ T5320] udf_map_block+0xfc0/0x4280
[ 95.016346][ T5320] ? __pfx_udf_map_block+0x10/0x10
[ 95.018619][ T5320] ? check_noncircular+0xda/0x150
[ 95.020911][ T5320] ? add_lock_to_list+0xc7/0x100
[ 95.023001][ T5320] ? do_raw_spin_lock+0x12b/0x2f0
[ 95.025163][ T5320] ? do_raw_spin_unlock+0x4d/0x210
[ 95.027244][ T5320] __udf_get_block+0x52/0x250
[ 95.029228][ T5320] __block_write_begin_int+0x6c2/0x1900
[ 95.031677][ T5320] ? filemap_add_folio+0x350/0x530
[ 95.033808][ T5320] ? __pfx_udf_get_block+0x10/0x10
[ 95.035951][ T5320] ? __pfx___block_write_begin_int+0x10/0x10
[ 95.038547][ T5320] ? __pfx_udf_get_block+0x10/0x10
[ 95.040804][ T5320] block_write_begin+0x8d/0x120
[ 95.042771][ T5320] ? udf_write_begin+0x92/0x270
[ 95.044887][ T5320] udf_write_begin+0x118/0x270
[ 95.046873][ T5320] generic_perform_write+0x2d5/0x8f0
[ 95.049156][ T5320] ? __pfx_generic_perform_write+0x10/0x10
[ 95.051853][ T5320] ? file_update_time_flags+0x400/0x4a0
[ 95.054288][ T5320] ? __generic_file_write_iter+0xf9/0x230
[ 95.056875][ T5320] ? udf_file_write_iter+0x1c4/0x6c0
[ 95.059238][ T5320] udf_file_write_iter+0x2e8/0x6c0
[ 95.061581][ T5320] do_iter_readv_writev+0x612/0x8c0
[ 95.064065][ T5320] ? __pfx_do_iter_readv_writev+0x10/0x10
[ 95.066627][ T5320] vfs_writev+0x343/0x990
[ 95.068492][ T5320] ? __pfx_vfs_writev+0x10/0x10
[ 95.070593][ T5320] ? __fget_files+0x2a/0x420
[ 95.072261][ T5320] ? __fget_files+0x3a2/0x420
[ 95.074005][ T5320] ? __fget_files+0x2a/0x420
[ 95.075950][ T5320] __se_sys_pwritev2+0x177/0x2a0
[ 95.078063][ T5320] ? __pfx___se_sys_pwritev2+0x10/0x10
[ 95.080551][ T5320] ? __x64_sys_pwritev2+0x20/0xc0
[ 95.082808][ T5320] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 95.085873][ T5320] do_syscall_64+0x174/0x580
[ 95.087874][ T5320] ? clear_bhb_loop+0x40/0x90
[ 95.090243][ T5320] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 95.092899][ T5320] RIP: 0033:0x7f775199de99
[ 95.094784][ T5320] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 95.103100][ T5320] RSP: 002b:00007f77527b2fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000148
[ 95.106431][ T5320] RAX: ffffffffffffffda RBX: 00007f7751c25fa0 RCX: 00007f775199de99
[ 95.109826][ T5320] RDX: 0000000000000001 RSI: 00002000000001c0 RDI: 000000000000000a
[ 95.113021][ T5320] RBP: 00007f7751a33eaf R08: 0000000000000000 R09: 0000000000000000
[ 95.116161][ T5320] R10: 0000000000000e7b R11: 0000000000000246 R12: 0000000000000000
[ 95.119434][ T5320] R13: 00007f7751c26038 R14: 00007f7751c25fa0 R15: 00007ffed38d0b68
[ 95.122618][ T5320]
[ 95.123947][ T5320] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 95.127076][ T5320] CPU: 0 UID: 0 PID: 5320 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 95.130948][ T5320] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 95.134838][ T5320] Call Trace:
[ 95.136204][ T5320]
[ 95.137406][ T5320] vpanic+0x56c/0xa60
[ 95.139059][ T5320] ? __pfx__printk+0x10/0x10
[ 95.140905][ T5320] ? __pfx_vpanic+0x10/0x10
[ 95.142779][ T5320] ? is_bpf_text_address+0x292/0x2b0
[ 95.145064][ T5320] ? is_bpf_text_address+0x26/0x2b0
[ 95.147143][ T5320] panic+0xc5/0xd0
[ 95.148543][ T5320] ? __pfx_panic+0x10/0x10
[ 95.150472][ T5320] __warn+0x315/0x4c0
[ 95.152231][ T5320] ? __udf_add_aext+0x52b/0x6e0
[ 95.154245][ T5320] ? __udf_add_aext+0x52b/0x6e0
[ 95.156262][ T5320] __report_bug+0x276/0x570
[ 95.158213][ T5320] ? __udf_add_aext+0x52b/0x6e0
[ 95.160468][ T5320] ? __pfx___report_bug+0x10/0x10
[ 95.162688][ T5320] ? fs_reclaim_acquire+0x7c/0x100
[ 95.164957][ T5320] ? bdev_getblk+0xbd/0x6e0
[ 95.166866][ T5320] ? __udf_add_aext+0x52b/0x6e0
[ 95.168546][ T5320] report_bug+0x16a/0x220
[ 95.169983][ T5320] ? __udf_add_aext+0x52b/0x6e0
[ 95.171590][ T5320] ? __udf_add_aext+0x52d/0x6e0
[ 95.173239][ T5320] handle_bug+0x9c/0x200
[ 95.174711][ T5320] exc_invalid_op+0x1a/0x50
[ 95.176519][ T5320] asm_exc_invalid_op+0x1a/0x20
[ 95.178576][ T5320] RIP: 0010:__udf_add_aext+0x52b/0x6e0
[ 95.180921][ T5320] Code: 81 c4 48 ff ff ff 4c 89 e6 e8 91 60 fc fe 31 c0 48 83 c4 28 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 86 42 66 fe 90 <0f> 0b 90 e9 0d fc ff ff e8 78 42 66 fe 90 0f 0b 90 e9 5f fd ff ff
[ 95.189851][ T5320] RSP: 0018:ffffc9000f5b71c0 EFLAGS: 00010283
[ 95.192292][ T5320] RAX: ffffffff8360d1ca RBX: dffffc0000000000 RCX: 0000000000100000
[ 95.195449][ T5320] RDX: ffffc9000ecca000 RSI: 00000000000008e9 RDI: 00000000000008ea
[ 95.198712][ T5320] RBP: 1ffff92001eb6eb9 R08: ffff88803fd1a540 R09: 0000000000000002
[ 95.202090][ T5320] R10: 0000000000000001 R11: 0000000000000002 R12: 0000000000000000
[ 95.205481][ T5320] R13: 0000000000000001 R14: ffffc9000f5b75c0 R15: ffffc9000f5b75c8
[ 95.208738][ T5320] ? __udf_add_aext+0x52a/0x6e0
[ 95.210705][ T5320] udf_do_extend_file+0x909/0x11e0
[ 95.212769][ T5320] ? __pfx_udf_do_extend_file+0x10/0x10
[ 95.215079][ T5320] udf_map_block+0xfc0/0x4280
[ 95.217194][ T5320] ? __pfx_udf_map_block+0x10/0x10
[ 95.219361][ T5320] ? check_noncircular+0xda/0x150
[ 95.221556][ T5320] ? add_lock_to_list+0xc7/0x100
[ 95.223523][ T5320] ? do_raw_spin_lock+0x12b/0x2f0
[ 95.225833][ T5320] ? do_raw_spin_unlock+0x4d/0x210
[ 95.228021][ T5320] __udf_get_block+0x52/0x250
[ 95.230082][ T5320] __block_write_begin_int+0x6c2/0x1900
[ 95.232519][ T5320] ? filemap_add_folio+0x350/0x530
[ 95.234838][ T5320] ? __pfx_udf_get_block+0x10/0x10
[ 95.237082][ T5320] ? __pfx___block_write_begin_int+0x10/0x10
[ 95.239752][ T5320] ? __pfx_udf_get_block+0x10/0x10
[ 95.241952][ T5320] block_write_begin+0x8d/0x120
[ 95.244098][ T5320] ? udf_write_begin+0x92/0x270
[ 95.246142][ T5320] udf_write_begin+0x118/0x270
[ 95.248176][ T5320] generic_perform_write+0x2d5/0x8f0
[ 95.250455][ T5320] ? __pfx_generic_perform_write+0x10/0x10
[ 95.253120][ T5320] ? file_update_time_flags+0x400/0x4a0
[ 95.255570][ T5320] ? __generic_file_write_iter+0xf9/0x230
[ 95.257986][ T5320] ? udf_file_write_iter+0x1c4/0x6c0
[ 95.260283][ T5320] udf_file_write_iter+0x2e8/0x6c0
[ 95.262431][ T5320] do_iter_readv_writev+0x612/0x8c0
[ 95.264682][ T5320] ? __pfx_do_iter_readv_writev+0x10/0x10
[ 95.267242][ T5320] vfs_writev+0x343/0x990
[ 95.269247][ T5320] ? __pfx_vfs_writev+0x10/0x10
[ 95.271392][ T5320] ? __fget_files+0x2a/0x420
[ 95.273396][ T5320] ? __fget_files+0x3a2/0x420
[ 95.275387][ T5320] ? __fget_files+0x2a/0x420
[ 95.277384][ T5320] __se_sys_pwritev2+0x177/0x2a0
[ 95.279565][ T5320] ? __pfx___se_sys_pwritev2+0x10/0x10
[ 95.282042][ T5320] ? __x64_sys_pwritev2+0x20/0xc0
[ 95.284203][ T5320] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 95.286689][ T5320] do_syscall_64+0x174/0x580
[ 95.288722][ T5320] ? clear_bhb_loop+0x40/0x90
[ 95.290748][ T5320] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 95.293434][ T5320] RIP: 0033:0x7f775199de99
[ 95.295390][ T5320] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 95.303513][ T5320] RSP: 002b:00007f77527b2fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000148
[ 95.306992][ T5320] RAX: ffffffffffffffda RBX: 00007f7751c25fa0 RCX: 00007f775199de99
[ 95.310359][ T5320] RDX: 0000000000000001 RSI: 00002000000001c0 RDI: 000000000000000a
[ 95.313773][ T5320] RBP: 00007f7751a33eaf R08: 0000000000000000 R09: 0000000000000000
[ 95.317079][ T5320] R10: 0000000000000e7b R11: 0000000000000246 R12: 0000000000000000
[ 95.320293][ T5320] R13: 00007f7751c26038 R14: 00007f7751c25fa0 R15: 00007ffed38d0b68
[ 95.323703][ T5320]
[ 95.325590][ T5320] Kernel Offset: disabled
[ 95.327553][ T5320] Rebooting in 86400 seconds..