program: syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000180)='./file1\x00', 0x4040, &(0x7f00000015c0)=ANY=[], 0x2, 0xc2d, &(0x7f00000001c0)="$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") setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4042, 0x0) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x404043000) write$binfmt_elf64(r0, &(0x7f0000000e00)=ANY=[@ANYBLOB="7f454c46f8020604d6000000000000000300030088000000d80200000000000040000000000000008801000000000000060000000500380001000000000041f0030000000300000002000000000000000300000000000000140000000000000000000000000000000800000000000000ffffff7f00000000"], 0x78) [ 73.608268][ T4707] Bluetooth: hci0: command tx timeout [ 73.673677][ T5357] loop0: detected capacity change from 0 to 2048 [ 73.690187][ T5357] ======================================================= [ 73.690187][ T5357] WARNING: The mand mount option has been deprecated and [ 73.690187][ T5357] and is ignored by this kernel. Remove the mand [ 73.690187][ T5357] option from the mount to silence this warning. [ 73.690187][ T5357] ======================================================= [ 73.751025][ T5357] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 73.767372][ T25] audit: type=1800 audit(1756144829.988:2): pid=5357 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.0" name="file1" dev="loop0" ino=1346 res=0 errno=0 [ 73.779860][ T5357] ------------[ cut here ]------------ [ 73.782326][ T5357] WARNING: CPU: 0 PID: 5357 at fs/udf/truncate.c:224 udf_truncate_extents+0xd4c/0xec0 [ 73.786460][ T5357] Modules linked in: [ 73.788555][ T5357] CPU: 0 UID: 0 PID: 5357 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 73.792418][ T5357] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 73.796938][ T5357] RIP: 0010:udf_truncate_extents+0xd4c/0xec0 [ 73.799842][ T5357] Code: 7c 66 0f 48 3b 84 24 80 01 00 00 75 77 44 89 e0 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d e9 cb f7 43 08 cc e8 e5 37 85 fe 90 <0f> 0b 90 eb 88 44 89 e9 80 e1 07 38 c1 0f 8c e4 f3 ff ff 4c 89 ef [ 73.807950][ T5357] RSP: 0018:ffffc9000d2e7940 EFLAGS: 00010287 [ 73.810441][ T5357] RAX: ffffffff833a835b RBX: 1ffff110088ce1a0 RCX: 0000000000100000 [ 73.813816][ T5357] RDX: ffffc9000e002000 RSI: 0000000000000958 RDI: 0000000000000959 [ 73.817694][ T5357] RBP: ffffc9000d2e7b08 R08: ffff888032f00000 R09: 0000000000000002 [ 73.821639][ T5357] R10: 0000000000000001 R11: 0000000000000002 R12: 0000000000000000 [ 73.825071][ T5357] R13: 0000000000000000 R14: 000000000000000a R15: 000000000000000a [ 73.828604][ T5357] FS: 00007f05b883c6c0(0000) GS:ffff88808d210000(0000) knlGS:0000000000000000 [ 73.832437][ T5357] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 73.835279][ T5357] CR2: 00007f05b7bb1248 CR3: 000000004349c000 CR4: 0000000000352ef0 [ 73.838763][ T5357] Call Trace: [ 73.840273][ T5357] [ 73.841588][ T5357] ? __pfx_udf_truncate_extents+0x10/0x10 [ 73.844050][ T5357] ? do_raw_spin_unlock+0x4d/0x240 [ 73.846310][ T5357] udf_write_failed+0x185/0x1c0 [ 73.848590][ T5357] udf_direct_IO+0x1c6/0x200 [ 73.850690][ T5357] generic_file_direct_write+0x1d8/0x3e0 [ 73.853065][ T5357] ? file_update_time+0x416/0x490 [ 73.855164][ T5357] __generic_file_write_iter+0x11d/0x230 [ 73.857710][ T5357] ? udf_file_write_iter+0x2c4/0x6c0 [ 73.860292][ T5357] udf_file_write_iter+0x2d5/0x6c0 [ 73.862790][ T5357] vfs_write+0x5c9/0xb30 [ 73.864793][ T5357] ? __pfx_udf_file_write_iter+0x10/0x10 [ 73.867337][ T5357] ? __pfx_vfs_write+0x10/0x10 [ 73.869705][ T5357] ? __fget_files+0x2a/0x420 [ 73.871806][ T5357] __x64_sys_pwrite64+0x193/0x220 [ 73.873911][ T5357] ? __pfx___x64_sys_pwrite64+0x10/0x10 [ 73.876382][ T5357] ? rcu_is_watching+0x15/0xb0 [ 73.878727][ T5357] ? do_syscall_64+0xbe/0x3b0 [ 73.881384][ T5357] do_syscall_64+0xfa/0x3b0 [ 73.883927][ T5357] ? lockdep_hardirqs_on+0x9c/0x150 [ 73.886232][ T5357] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.890217][ T5357] ? clear_bhb_loop+0x60/0xb0 [ 73.892319][ T5357] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.894942][ T5357] RIP: 0033:0x7f05b798ebe9 [ 73.896986][ T5357] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 73.905340][ T5357] RSP: 002b:00007f05b883c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 73.909008][ T5357] RAX: ffffffffffffffda RBX: 00007f05b7bb5fa0 RCX: 00007f05b798ebe9 [ 73.912299][ T5357] RDX: 00000000200000c1 RSI: 00002000000000c0 RDI: 0000000000000004 [ 73.915577][ T5357] RBP: 00007f05b7a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 73.919481][ T5357] R10: 0000000404043000 R11: 0000000000000246 R12: 0000000000000000 [ 73.922968][ T5357] R13: 00007f05b7bb6038 R14: 00007f05b7bb5fa0 R15: 00007fff9b17fc48 [ 73.926482][ T5357] [ 73.928430][ T5357] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 73.931570][ T5357] CPU: 0 UID: 0 PID: 5357 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 73.935107][ T5357] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 73.939291][ T5357] Call Trace: [ 73.940647][ T5357] [ 73.941829][ T5357] dump_stack_lvl+0x99/0x250 [ 73.943707][ T5357] ? __asan_memcpy+0x40/0x70 [ 73.945549][ T5357] ? __pfx_dump_stack_lvl+0x10/0x10 [ 73.947812][ T5357] ? __pfx__printk+0x10/0x10 [ 73.949766][ T5357] vpanic+0x281/0x750 [ 73.951529][ T5357] ? __pfx__printk+0x10/0x10 [ 73.953532][ T5357] ? __pfx_vpanic+0x10/0x10 [ 73.955552][ T5357] ? is_bpf_text_address+0x26/0x2b0 [ 73.957853][ T5357] panic+0xb9/0xc0 [ 73.959552][ T5357] ? __pfx_panic+0x10/0x10 [ 73.961560][ T5357] __warn+0x31b/0x4b0 [ 73.963349][ T5357] ? udf_truncate_extents+0xd4c/0xec0 [ 73.965736][ T5357] ? udf_truncate_extents+0xd4c/0xec0 [ 73.968308][ T5357] report_bug+0x2be/0x4f0 [ 73.970400][ T5357] ? udf_truncate_extents+0xd4c/0xec0 [ 73.973010][ T5357] ? udf_truncate_extents+0xd4c/0xec0 [ 73.975228][ T5357] ? udf_truncate_extents+0xd4e/0xec0 [ 73.977427][ T5357] handle_bug+0x84/0x160 [ 73.979197][ T5357] exc_invalid_op+0x1a/0x50 [ 73.981096][ T5357] asm_exc_invalid_op+0x1a/0x20 [ 73.983127][ T5357] RIP: 0010:udf_truncate_extents+0xd4c/0xec0 [ 73.985752][ T5357] Code: 7c 66 0f 48 3b 84 24 80 01 00 00 75 77 44 89 e0 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d e9 cb f7 43 08 cc e8 e5 37 85 fe 90 <0f> 0b 90 eb 88 44 89 e9 80 e1 07 38 c1 0f 8c e4 f3 ff ff 4c 89 ef [ 73.993568][ T5357] RSP: 0018:ffffc9000d2e7940 EFLAGS: 00010287 [ 73.996312][ T5357] RAX: ffffffff833a835b RBX: 1ffff110088ce1a0 RCX: 0000000000100000 [ 73.999849][ T5357] RDX: ffffc9000e002000 RSI: 0000000000000958 RDI: 0000000000000959 [ 74.003418][ T5357] RBP: ffffc9000d2e7b08 R08: ffff888032f00000 R09: 0000000000000002 [ 74.006813][ T5357] R10: 0000000000000001 R11: 0000000000000002 R12: 0000000000000000 [ 74.010156][ T5357] R13: 0000000000000000 R14: 000000000000000a R15: 000000000000000a [ 74.013572][ T5357] ? udf_truncate_extents+0xd4b/0xec0 [ 74.015954][ T5357] ? __pfx_udf_truncate_extents+0x10/0x10 [ 74.018438][ T5357] ? do_raw_spin_unlock+0x4d/0x240 [ 74.020710][ T5357] udf_write_failed+0x185/0x1c0 [ 74.022949][ T5357] udf_direct_IO+0x1c6/0x200 [ 74.024998][ T5357] generic_file_direct_write+0x1d8/0x3e0 [ 74.027415][ T5357] ? file_update_time+0x416/0x490 [ 74.029632][ T5357] __generic_file_write_iter+0x11d/0x230 [ 74.032114][ T5357] ? udf_file_write_iter+0x2c4/0x6c0 [ 74.034429][ T5357] udf_file_write_iter+0x2d5/0x6c0 [ 74.036616][ T5357] vfs_write+0x5c9/0xb30 [ 74.038460][ T5357] ? __pfx_udf_file_write_iter+0x10/0x10 [ 74.040863][ T5357] ? __pfx_vfs_write+0x10/0x10 [ 74.042928][ T5357] ? __fget_files+0x2a/0x420 [ 74.044934][ T5357] __x64_sys_pwrite64+0x193/0x220 [ 74.047108][ T5357] ? __pfx___x64_sys_pwrite64+0x10/0x10 [ 74.049451][ T5357] ? rcu_is_watching+0x15/0xb0 [ 74.051520][ T5357] ? do_syscall_64+0xbe/0x3b0 [ 74.053576][ T5357] do_syscall_64+0xfa/0x3b0 [ 74.055589][ T5357] ? lockdep_hardirqs_on+0x9c/0x150 [ 74.057807][ T5357] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.060483][ T5357] ? clear_bhb_loop+0x60/0xb0 [ 74.062515][ T5357] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.065393][ T5357] RIP: 0033:0x7f05b798ebe9 [ 74.067741][ T5357] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 74.076384][ T5357] RSP: 002b:00007f05b883c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 74.079948][ T5357] RAX: ffffffffffffffda RBX: 00007f05b7bb5fa0 RCX: 00007f05b798ebe9 [ 74.083313][ T5357] RDX: 00000000200000c1 RSI: 00002000000000c0 RDI: 0000000000000004 [ 74.086640][ T5357] RBP: 00007f05b7a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 74.090121][ T5357] R10: 0000000404043000 R11: 0000000000000246 R12: 0000000000000000 [ 74.093771][ T5357] R13: 00007f05b7bb6038 R14: 00007f05b7bb5fa0 R15: 00007fff9b17fc48 [ 74.097212][ T5357] [ 74.098949][ T5357] Kernel Offset: disabled [ 74.100902][ T5357] Rebooting in 86400 seconds..