------------[ cut here ]------------ WARNING: CPU: 0 PID: 5323 at fs/udf/inode.c:2081 __udf_add_aext+0x524/0x6d0 fs/udf/inode.c:2080 Modules linked in: CPU: 0 UID: 0 PID: 5323 Comm: syz.0.0 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 RIP: 0010:__udf_add_aext+0x524/0x6d0 fs/udf/inode.c:2080 Code: b2 ed fe 49 8b 3e 4c 89 e6 e8 68 f7 0f ff 31 c0 48 83 c4 28 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 6d 2f 8a fe 90 <0f> 0b 90 e9 14 fc ff ff e8 5f 2f 8a fe 90 0f 0b 90 e9 66 fd ff ff RSP: 0018:ffffc9000d6ae900 EFLAGS: 00010293 RAX: ffffffff83361f33 RBX: dffffc0000000000 RCX: ffff8880003e4880 RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000000 RBP: 1ffff92001ad5d5b R08: ffff8880003e4880 R09: 0000000000000002 R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000000 R13: 0000000000000004 R14: ffffc9000d6aead0 R15: ffffc9000d6aead8 FS: 00007f92f95f56c0(0000) GS:ffff88808d250000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f92f95b2fc8 CR3: 0000000052f49000 CR4: 0000000000352ef0 Call Trace: udf_add_aext fs/udf/inode.c:2138 [inline] udf_insert_aext fs/udf/inode.c:2317 [inline] udf_update_extents fs/udf/inode.c:1205 [inline] inode_getblk fs/udf/inode.c:919 [inline] udf_map_block+0x336f/0x42a0 fs/udf/inode.c:447 __udf_get_block+0x52/0x250 fs/udf/inode.c:461 __block_write_begin_int+0x6b2/0x1900 fs/buffer.c:2151 block_write_begin+0x8a/0x120 fs/buffer.c:2262 udf_write_begin+0x100/0x260 fs/udf/inode.c:256 generic_perform_write+0x2c7/0x910 mm/filemap.c:4112 udf_file_write_iter+0x2d5/0x6c0 fs/udf/file.c:111 __kernel_write_iter+0x390/0x860 fs/read_write.c:619 dump_emit_page fs/coredump.c:1112 [inline] dump_user_range+0x873/0xc70 fs/coredump.c:1186 elf_core_dump+0x32ed/0x3900 fs/binfmt_elf.c:2075 do_coredump+0x2806/0x3440 fs/coredump.c:950 get_signal+0x1109/0x1340 kernel/signal.c:3019 arch_do_signal_or_restart+0x9a/0x750 arch/x86/kernel/signal.c:337 exit_to_user_mode_loop kernel/entry/common.c:111 [inline] exit_to_user_mode_prepare include/linux/entry-common.h:330 [inline] irqentry_exit_to_user_mode+0x81/0x120 kernel/entry/common.c:184 exc_page_fault+0x9f/0xf0 arch/x86/mm/fault.c:1535 asm_exc_page_fault+0x26/0x30 arch/x86/include/asm/idtentry.h:623 RIP: 0033:0x7f92fd18e931 Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f RSP: 002b:0000000000000050 EFLAGS: 00010217 RAX: 0000000000000000 RBX: 00007f92fd3b5fa0 RCX: 00007f92fd18e929 RDX: 0000000000000000 RSI: 0000000000000050 RDI: 0000000000904000 RBP: 00007f92fd210b39 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 R13: 0000000000000000 R14: 00007f92fd3b5fa0 R15: 00007ffdb5bb63f8