program:
syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file1\x00', 0x804000, &(0x7f0000000f00)=ANY=[], 0x2, 0xc2d, &(0x7f00000001c0)="$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")
r0 = open(&(0x7f0000000000)='./file1\x00', 0x64842, 0x101)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0)
read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8)
pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000040)="85", 0x1}], 0x1, 0x7a00, 0x0, 0x3)
[ 109.340923][ T5314] loop0: detected capacity change from 0 to 2048
[ 109.384872][ T5279] Bluetooth: hci0: command tx timeout
[ 109.418216][ T5314] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 109.463509][ T24] audit: type=1800 audit(1786903946.273:2): pid=5314 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.0" name="file1" dev="loop0" ino=1346 res=0 errno=0
[ 109.538634][ T5315] ------------[ cut here ]------------
[ 109.541433][ T5315] byte_offset
[ 109.541445][ T5315] WARNING: fs/udf/truncate.c:224 at udf_truncate_extents+0xd79/0xef0, CPU#0: syz.0.0/5315
[ 109.547292][ T5315] Modules linked in:
[ 109.549683][ T5315] CPU: 0 UID: 0 PID: 5315 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 109.553368][ T5315] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 109.557603][ T5315] RIP: 0010:udf_truncate_extents+0xd79/0xef0
[ 109.560106][ T5315] Code: db 0b 10 48 3b 84 24 80 01 00 00 75 7a 44 89 f0 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d e9 be 23 75 08 cc e8 b8 cc 64 fe 90 <0f> 0b 90 e9 67 ff ff ff 44 89 f9 80 e1 07 38 c1 0f 8c f3 f3 ff ff
[ 109.568060][ T5315] RSP: 0018:ffffc9000f5e77c0 EFLAGS: 00010283
[ 109.570506][ T5315] RAX: ffffffff83624528 RBX: 000000000000000a RCX: 0000000000100000
[ 109.573811][ T5315] RDX: ffffc90020001000 RSI: 0000000000000675 RDI: 0000000000000676
[ 109.577157][ T5315] RBP: ffffc9000f5e79a0 R08: ffff8880009f0000 R09: 0000000000000002
[ 109.580601][ T5315] R10: 0000000000000001 R11: 0000000000000002 R12: 000000000000000a
[ 109.584181][ T5315] R13: 1ffff110087c773d R14: 0000000000000000 R15: 0000000000000000
[ 109.587472][ T5315] FS: 00007f47207c26c0(0000) GS:ffff88808c53e000(0000) knlGS:0000000000000000
[ 109.591251][ T5315] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 109.593965][ T5315] CR2: 0000200000004000 CR3: 000000003fde1000 CR4: 0000000000352ef0
[ 109.597051][ T5315] Call Trace:
[ 109.598495][ T5315]
[ 109.599907][ T5315] ? __pfx_udf_truncate_extents+0x10/0x10
[ 109.602135][ T5315] ? do_raw_spin_lock+0x12b/0x2f0
[ 109.604237][ T5315] ? do_raw_spin_unlock+0x4d/0x210
[ 109.606275][ T5315] udf_write_failed+0x168/0x1b0
[ 109.608366][ T5315] udf_direct_IO+0x1c6/0x200
[ 109.610338][ T5315] generic_file_direct_write+0x1d0/0x3f0
[ 109.612635][ T5315] __generic_file_write_iter+0x11d/0x230
[ 109.615041][ T5315] ? udf_file_write_iter+0x2d6/0x6c0
[ 109.617250][ T5315] udf_file_write_iter+0x2e8/0x6c0
[ 109.619519][ T5315] do_iter_readv_writev+0x612/0x8c0
[ 109.621656][ T5315] ? __pfx_do_iter_readv_writev+0x10/0x10
[ 109.624606][ T5315] vfs_writev+0x343/0x990
[ 109.626487][ T5315] ? __lock_acquire+0x683/0x2cf0
[ 109.628536][ T5315] ? __pfx_vfs_writev+0x10/0x10
[ 109.631033][ T5315] ? __fget_files+0x2a/0x420
[ 109.633359][ T5315] ? __fget_files+0x3a2/0x420
[ 109.635533][ T5315] ? __fget_files+0x2a/0x420
[ 109.637527][ T5315] __se_sys_pwritev2+0x177/0x2a0
[ 109.639619][ T5315] ? __pfx___se_sys_pwritev2+0x10/0x10
[ 109.641909][ T5315] ? __pfx_kcov_ioctl+0x10/0x10
[ 109.644112][ T5315] ? __x64_sys_pwritev2+0x20/0xc0
[ 109.646303][ T5315] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 109.648849][ T5315] do_syscall_64+0x174/0x580
[ 109.650790][ T5315] ? trace_irq_disable+0x3b/0x140
[ 109.652903][ T5315] ? clear_bhb_loop+0x70/0xc0
[ 109.655112][ T5315] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 109.657601][ T5315] RIP: 0033:0x7f471f99e0d9
[ 109.659544][ T5315] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 109.667472][ T5315] RSP: 002b:00007f47207c1fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000148
[ 109.670944][ T5315] RAX: ffffffffffffffda RBX: 00007f471fc26090 RCX: 00007f471f99e0d9
[ 109.674312][ T5315] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000004
[ 109.678044][ T5315] RBP: 00007f471fa35024 R08: 0000000000000000 R09: 0000000000000003
[ 109.681297][ T5315] R10: 0000000000007a00 R11: 0000000000000246 R12: 0000000000000000
[ 109.684663][ T5315] R13: 00007f471fc26128 R14: 00007f471fc26090 R15: 00007ffc46427578
[ 109.688030][ T5315]
[ 109.689345][ T5315] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 109.692339][ T5315] CPU: 0 UID: 0 PID: 5315 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 109.695759][ T5315] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 109.699695][ T5315] Call Trace:
[ 109.701038][ T5315]
[ 109.702224][ T5315] vpanic+0x56c/0xa60
[ 109.703832][ T5315] ? __pfx__printk+0x10/0x10
[ 109.705585][ T5315] ? __pfx_vpanic+0x10/0x10
[ 109.707491][ T5315] ? is_bpf_text_address+0x292/0x2b0
[ 109.709742][ T5315] ? is_bpf_text_address+0x26/0x2b0
[ 109.711919][ T5315] panic+0xc5/0xd0
[ 109.713453][ T5315] ? __pfx_panic+0x10/0x10
[ 109.715301][ T5315] __warn+0x315/0x4c0
[ 109.716993][ T5315] ? udf_truncate_extents+0xd79/0xef0
[ 109.719109][ T5315] ? udf_truncate_extents+0xd79/0xef0
[ 109.721377][ T5315] __report_bug+0x276/0x570
[ 109.723277][ T5315] ? udf_truncate_extents+0xd79/0xef0
[ 109.725485][ T5315] ? __pfx___report_bug+0x10/0x10
[ 109.727547][ T5315] ? arch_stack_walk+0xfb/0x150
[ 109.729596][ T5315] ? udf_get_filelongad+0x6e/0x1b0
[ 109.731750][ T5315] ? udf_current_aext+0x6c3/0xc50
[ 109.733802][ T5315] ? udf_next_aext+0x404/0x4f0
[ 109.735808][ T5315] ? udf_truncate_extents+0xd79/0xef0
[ 109.738041][ T5315] report_bug+0x16a/0x220
[ 109.739887][ T5315] ? udf_truncate_extents+0xd79/0xef0
[ 109.742168][ T5315] ? udf_truncate_extents+0xd7b/0xef0
[ 109.744628][ T5315] handle_bug+0x9c/0x200
[ 109.746673][ T5315] exc_invalid_op+0x1a/0x50
[ 109.748756][ T5315] asm_exc_invalid_op+0x1a/0x20
[ 109.751100][ T5315] RIP: 0010:udf_truncate_extents+0xd79/0xef0
[ 109.753957][ T5315] Code: db 0b 10 48 3b 84 24 80 01 00 00 75 7a 44 89 f0 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d e9 be 23 75 08 cc e8 b8 cc 64 fe 90 <0f> 0b 90 e9 67 ff ff ff 44 89 f9 80 e1 07 38 c1 0f 8c f3 f3 ff ff
[ 109.762070][ T5315] RSP: 0018:ffffc9000f5e77c0 EFLAGS: 00010283
[ 109.764572][ T5315] RAX: ffffffff83624528 RBX: 000000000000000a RCX: 0000000000100000
[ 109.767737][ T5315] RDX: ffffc90020001000 RSI: 0000000000000675 RDI: 0000000000000676
[ 109.771029][ T5315] RBP: ffffc9000f5e79a0 R08: ffff8880009f0000 R09: 0000000000000002
[ 109.774220][ T5315] R10: 0000000000000001 R11: 0000000000000002 R12: 000000000000000a
[ 109.777315][ T5315] R13: 1ffff110087c773d R14: 0000000000000000 R15: 0000000000000000
[ 109.780511][ T5315] ? udf_truncate_extents+0xd78/0xef0
[ 109.782858][ T5315] ? __pfx_udf_truncate_extents+0x10/0x10
[ 109.785253][ T5315] ? do_raw_spin_lock+0x12b/0x2f0
[ 109.787366][ T5315] ? do_raw_spin_unlock+0x4d/0x210
[ 109.789561][ T5315] udf_write_failed+0x168/0x1b0
[ 109.791677][ T5315] udf_direct_IO+0x1c6/0x200
[ 109.793641][ T5315] generic_file_direct_write+0x1d0/0x3f0
[ 109.795999][ T5315] __generic_file_write_iter+0x11d/0x230
[ 109.798281][ T5315] ? udf_file_write_iter+0x2d6/0x6c0
[ 109.800486][ T5315] udf_file_write_iter+0x2e8/0x6c0
[ 109.802612][ T5315] do_iter_readv_writev+0x612/0x8c0
[ 109.804872][ T5315] ? __pfx_do_iter_readv_writev+0x10/0x10
[ 109.807286][ T5315] vfs_writev+0x343/0x990
[ 109.809208][ T5315] ? __lock_acquire+0x683/0x2cf0
[ 109.811312][ T5315] ? __pfx_vfs_writev+0x10/0x10
[ 109.813425][ T5315] ? __fget_files+0x2a/0x420
[ 109.815475][ T5315] ? __fget_files+0x3a2/0x420
[ 109.817411][ T5315] ? __fget_files+0x2a/0x420
[ 109.819225][ T5315] __se_sys_pwritev2+0x177/0x2a0
[ 109.821169][ T5315] ? __pfx___se_sys_pwritev2+0x10/0x10
[ 109.823155][ T5315] ? __pfx_kcov_ioctl+0x10/0x10
[ 109.825165][ T5315] ? __x64_sys_pwritev2+0x20/0xc0
[ 109.827631][ T5315] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 109.830556][ T5315] do_syscall_64+0x174/0x580
[ 109.832394][ T5315] ? trace_irq_disable+0x3b/0x140
[ 109.834392][ T5315] ? clear_bhb_loop+0x70/0xc0
[ 109.836742][ T5315] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 109.839497][ T5315] RIP: 0033:0x7f471f99e0d9
[ 109.841275][ T5315] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 109.848611][ T5315] RSP: 002b:00007f47207c1fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000148
[ 109.852105][ T5315] RAX: ffffffffffffffda RBX: 00007f471fc26090 RCX: 00007f471f99e0d9
[ 109.855278][ T5315] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000004
[ 109.858378][ T5315] RBP: 00007f471fa35024 R08: 0000000000000000 R09: 0000000000000003
[ 109.861485][ T5315] R10: 0000000000007a00 R11: 0000000000000246 R12: 0000000000000000
[ 109.864333][ T5315] R13: 00007f471fc26128 R14: 00007f471fc26090 R15: 00007ffc46427578
[ 109.867324][ T5315]
[ 109.869085][ T5315] Kernel Offset: disabled
[ 109.870920][ T5315] Rebooting in 86400 seconds..