program:
syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000500)='./bus\x00', 0x18418, &(0x7f0000000200)=ANY=[@ANYRES8=0x0, @ANYRES8], 0xfe, 0x4b1, &(0x7f0000001d00)="$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")
setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff})
truncate(&(0x7f0000000100)='./file1\x00', 0x20fdfffffe)
ftruncate(0xffffffffffffffff, 0x5)
creat(&(0x7f0000000240)='./bus\x00', 0x24)
r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301)
ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000140)=@usbdevfs_driver={0x0, 0x80805513, 0x0})
r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000001c0), 0x2)
r2 = memfd_create(&(0x7f00000003c0)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\x0f<\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xd5\xf3\\\x00\xbe]Et\xad*\xecj\x02\xc8\xc4\f\x04\x99\xf6\xfc', 0x3)
ftruncate(r2, 0xffff)
fcntl$addseals(r2, 0x409, 0x7)
ioctl$UDMABUF_CREATE_LIST(r1, 0x40087543, &(0x7f0000000000)={0x0, 0x2, [{r2, 0x0, 0x0, 0x8000}, {r2, 0x0, 0x0, 0x2000}]})
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000680)='./bus\x00', 0x0, 0x5000, 0x0)
r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1a, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780800d1cbf7966d61f53dc17769048b0000fd0c000000000000000000000000000000000200000000000000000000000000008000", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143441, 0x98)
pwritev2(r4, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0)
[ 85.611867][ T5335] loop0: detected capacity change from 0 to 128
[ 85.692324][ T5335] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[ 85.833820][ T5296] Bluetooth: hci0: command tx timeout
[ 86.074457][ T5335] ------------[ cut here ]------------
[ 86.077648][ T5335] le32_to_cpu(aed->lengthAllocDescs) != epos->offset - sizeof(struct allocExtDesc)
[ 86.077660][ T5335] WARNING: fs/udf/inode.c:2086 at __udf_add_aext+0x52b/0x6e0, CPU#0: syz.0.0/5335
[ 86.086082][ T5335] Modules linked in:
[ 86.089368][ T5335] CPU: 0 UID: 0 PID: 5335 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 86.093412][ T5335] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 86.098335][ T5335] RIP: 0010:__udf_add_aext+0x52b/0x6e0
[ 86.101085][ T5335] Code: 81 c4 48 ff ff ff 4c 89 e6 e8 71 c2 fe fe 31 c0 48 83 c4 28 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 56 38 6c fe 90 <0f> 0b 90 e9 0d fc ff ff e8 48 38 6c fe 90 0f 0b 90 e9 5f fd ff ff
[ 86.110896][ T5335] RSP: 0018:ffffc9000390f1c0 EFLAGS: 00010283
[ 86.113613][ T5335] RAX: ffffffff83592e7a RBX: dffffc0000000000 RCX: 0000000000100000
[ 86.116725][ T5335] RDX: ffffc90020802000 RSI: 0000000000000936 RDI: 0000000000000937
[ 86.120082][ T5335] RBP: 1ffff92000721eb9 R08: ffff88801faa8000 R09: 0000000000000002
[ 86.123735][ T5335] R10: 0000000000000001 R11: 0000000000000002 R12: 0000000000000000
[ 86.127865][ T5335] R13: 0000000000000001 R14: ffffc9000390f5c0 R15: ffffc9000390f5c8
[ 86.131390][ T5335] FS: 00007efc938496c0(0000) GS:ffff88808c8a6000(0000) knlGS:0000000000000000
[ 86.137228][ T5335] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 86.141006][ T5335] CR2: 00007efc92be70b0 CR3: 000000000e5fe000 CR4: 0000000000352ef0
[ 86.144688][ T5335] Call Trace:
[ 86.146128][ T5335]
[ 86.147390][ T5335] udf_do_extend_file+0x909/0x11e0
[ 86.149612][ T5335] ? __pfx_udf_do_extend_file+0x10/0x10
[ 86.152377][ T5335] udf_map_block+0xfc0/0x4280
[ 86.155483][ T5335] ? __pfx_udf_map_block+0x10/0x10
[ 86.157735][ T5335] ? check_noncircular+0xda/0x150
[ 86.159879][ T5335] ? add_lock_to_list+0xc7/0x100
[ 86.162201][ T5335] ? do_raw_spin_lock+0x12b/0x2f0
[ 86.164577][ T5335] ? do_raw_spin_unlock+0x4d/0x210
[ 86.166749][ T5335] __udf_get_block+0x52/0x250
[ 86.168923][ T5335] __block_write_begin_int+0x6c2/0x1900
[ 86.171661][ T5335] ? filemap_add_folio+0x350/0x530
[ 86.174794][ T5335] ? __pfx_udf_get_block+0x10/0x10
[ 86.177608][ T5335] ? __pfx___block_write_begin_int+0x10/0x10
[ 86.180287][ T5335] ? __pfx_udf_get_block+0x10/0x10
[ 86.182526][ T5335] block_write_begin+0x8d/0x120
[ 86.184814][ T5335] ? udf_write_begin+0x92/0x270
[ 86.187042][ T5335] udf_write_begin+0x118/0x270
[ 86.189352][ T5335] generic_perform_write+0x2d5/0x8f0
[ 86.192518][ T5335] ? __pfx_generic_perform_write+0x10/0x10
[ 86.196141][ T5335] ? file_update_time_flags+0x400/0x4a0
[ 86.198666][ T5335] ? __generic_file_write_iter+0xf9/0x230
[ 86.201405][ T5335] ? udf_file_write_iter+0x1c4/0x6c0
[ 86.204006][ T5335] udf_file_write_iter+0x2e8/0x6c0
[ 86.206174][ T5335] do_iter_readv_writev+0x612/0x8c0
[ 86.208537][ T5335] ? __pfx_do_iter_readv_writev+0x10/0x10
[ 86.211042][ T5335] vfs_writev+0x343/0x990
[ 86.213318][ T5335] ? __pfx_vfs_writev+0x10/0x10
[ 86.215764][ T5335] ? __fget_files+0x2a/0x420
[ 86.217915][ T5335] ? __fget_files+0x3a2/0x420
[ 86.219862][ T5335] ? __fget_files+0x2a/0x420
[ 86.221804][ T5335] __se_sys_pwritev2+0x177/0x2a0
[ 86.224342][ T5335] ? __pfx___se_sys_pwritev2+0x10/0x10
[ 86.227286][ T5335] ? __x64_sys_pwritev2+0x20/0xc0
[ 86.230066][ T5335] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 86.232722][ T5335] do_syscall_64+0x174/0x580
[ 86.234867][ T5335] ? trace_irq_disable+0x3b/0x140
[ 86.237092][ T5335] ? clear_bhb_loop+0x40/0x90
[ 86.238857][ T5335] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 86.241126][ T5335] RIP: 0033:0x7efc9299ce59
[ 86.243413][ T5335] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 86.252394][ T5335] RSP: 002b:00007efc93848fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000148
[ 86.256249][ T5335] RAX: ffffffffffffffda RBX: 00007efc92c15fa0 RCX: 00007efc9299ce59
[ 86.260084][ T5335] RDX: 0000000000000001 RSI: 00002000000001c0 RDI: 000000000000000a
[ 86.264047][ T5335] RBP: 00007efc92a32d6f R08: 0000000000000000 R09: 0000000000000000
[ 86.267391][ T5335] R10: 0000000000000e7b R11: 0000000000000246 R12: 0000000000000000
[ 86.270658][ T5335] R13: 00007efc92c16038 R14: 00007efc92c15fa0 R15: 00007ffcbac3b3c8
[ 86.274180][ T5335]
[ 86.275838][ T5335] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 86.279629][ T5335] CPU: 0 UID: 0 PID: 5335 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 86.283650][ T5335] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 86.287761][ T5335] Call Trace:
[ 86.289279][ T5335]
[ 86.290651][ T5335] vpanic+0x56c/0xa60
[ 86.292633][ T5335] ? __pfx__printk+0x10/0x10
[ 86.294814][ T5335] ? __pfx_vpanic+0x10/0x10
[ 86.296824][ T5335] ? is_bpf_text_address+0x292/0x2b0
[ 86.299161][ T5335] ? is_bpf_text_address+0x26/0x2b0
[ 86.301495][ T5335] panic+0xc5/0xd0
[ 86.303305][ T5335] ? __pfx_panic+0x10/0x10
[ 86.306222][ T5335] __warn+0x315/0x4c0
[ 86.308833][ T5335] ? __udf_add_aext+0x52b/0x6e0
[ 86.311288][ T5335] ? __udf_add_aext+0x52b/0x6e0
[ 86.313621][ T5335] __report_bug+0x28e/0x530
[ 86.315768][ T5335] ? __udf_add_aext+0x52b/0x6e0
[ 86.317837][ T5335] ? __pfx___report_bug+0x10/0x10
[ 86.319784][ T5335] ? fs_reclaim_acquire+0x7c/0x100
[ 86.321796][ T5335] ? bdev_getblk+0xbd/0x6e0
[ 86.323667][ T5335] ? __udf_add_aext+0x52b/0x6e0
[ 86.325611][ T5335] report_bug+0x16a/0x220
[ 86.327476][ T5335] ? __udf_add_aext+0x52b/0x6e0
[ 86.329627][ T5335] ? __udf_add_aext+0x52d/0x6e0
[ 86.332339][ T5335] handle_bug+0x9c/0x200
[ 86.335309][ T5335] exc_invalid_op+0x1a/0x50
[ 86.337930][ T5335] asm_exc_invalid_op+0x1a/0x20
[ 86.340265][ T5335] RIP: 0010:__udf_add_aext+0x52b/0x6e0
[ 86.342633][ T5335] Code: 81 c4 48 ff ff ff 4c 89 e6 e8 71 c2 fe fe 31 c0 48 83 c4 28 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 56 38 6c fe 90 <0f> 0b 90 e9 0d fc ff ff e8 48 38 6c fe 90 0f 0b 90 e9 5f fd ff ff
[ 86.350962][ T5335] RSP: 0018:ffffc9000390f1c0 EFLAGS: 00010283
[ 86.353612][ T5335] RAX: ffffffff83592e7a RBX: dffffc0000000000 RCX: 0000000000100000
[ 86.358462][ T5335] RDX: ffffc90020802000 RSI: 0000000000000936 RDI: 0000000000000937
[ 86.362631][ T5335] RBP: 1ffff92000721eb9 R08: ffff88801faa8000 R09: 0000000000000002
[ 86.365913][ T5335] R10: 0000000000000001 R11: 0000000000000002 R12: 0000000000000000
[ 86.369140][ T5335] R13: 0000000000000001 R14: ffffc9000390f5c0 R15: ffffc9000390f5c8
[ 86.372236][ T5335] ? __udf_add_aext+0x52a/0x6e0
[ 86.374163][ T5335] udf_do_extend_file+0x909/0x11e0
[ 86.376482][ T5335] ? __pfx_udf_do_extend_file+0x10/0x10
[ 86.379683][ T5335] udf_map_block+0xfc0/0x4280
[ 86.382328][ T5335] ? __pfx_udf_map_block+0x10/0x10
[ 86.384747][ T5335] ? check_noncircular+0xda/0x150
[ 86.386919][ T5335] ? add_lock_to_list+0xc7/0x100
[ 86.389164][ T5335] ? do_raw_spin_lock+0x12b/0x2f0
[ 86.391415][ T5335] ? do_raw_spin_unlock+0x4d/0x210
[ 86.393741][ T5335] __udf_get_block+0x52/0x250
[ 86.396012][ T5335] __block_write_begin_int+0x6c2/0x1900
[ 86.398861][ T5335] ? filemap_add_folio+0x350/0x530
[ 86.401769][ T5335] ? __pfx_udf_get_block+0x10/0x10
[ 86.403788][ T5335] ? __pfx___block_write_begin_int+0x10/0x10
[ 86.406165][ T5335] ? __pfx_udf_get_block+0x10/0x10
[ 86.408494][ T5335] block_write_begin+0x8d/0x120
[ 86.410591][ T5335] ? udf_write_begin+0x92/0x270
[ 86.412941][ T5335] udf_write_begin+0x118/0x270
[ 86.415218][ T5335] generic_perform_write+0x2d5/0x8f0
[ 86.417704][ T5335] ? __pfx_generic_perform_write+0x10/0x10
[ 86.420271][ T5335] ? file_update_time_flags+0x400/0x4a0
[ 86.422744][ T5335] ? __generic_file_write_iter+0xf9/0x230
[ 86.425393][ T5335] ? udf_file_write_iter+0x1c4/0x6c0
[ 86.428392][ T5335] udf_file_write_iter+0x2e8/0x6c0
[ 86.431327][ T5335] do_iter_readv_writev+0x612/0x8c0
[ 86.433914][ T5335] ? __pfx_do_iter_readv_writev+0x10/0x10
[ 86.436654][ T5335] vfs_writev+0x343/0x990
[ 86.438359][ T5335] ? __pfx_vfs_writev+0x10/0x10
[ 86.440268][ T5335] ? __fget_files+0x2a/0x420
[ 86.442185][ T5335] ? __fget_files+0x3a2/0x420
[ 86.444307][ T5335] ? __fget_files+0x2a/0x420
[ 86.446516][ T5335] __se_sys_pwritev2+0x177/0x2a0
[ 86.449352][ T5335] ? __pfx___se_sys_pwritev2+0x10/0x10
[ 86.452437][ T5335] ? __x64_sys_pwritev2+0x20/0xc0
[ 86.454666][ T5335] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 86.457180][ T5335] do_syscall_64+0x174/0x580
[ 86.459126][ T5335] ? trace_irq_disable+0x3b/0x140
[ 86.461400][ T5335] ? clear_bhb_loop+0x40/0x90
[ 86.463485][ T5335] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 86.466399][ T5335] RIP: 0033:0x7efc9299ce59
[ 86.468779][ T5335] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 86.477557][ T5335] RSP: 002b:00007efc93848fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000148
[ 86.481464][ T5335] RAX: ffffffffffffffda RBX: 00007efc92c15fa0 RCX: 00007efc9299ce59
[ 86.485616][ T5335] RDX: 0000000000000001 RSI: 00002000000001c0 RDI: 000000000000000a
[ 86.489568][ T5335] RBP: 00007efc92a32d6f R08: 0000000000000000 R09: 0000000000000000
[ 86.493032][ T5335] R10: 0000000000000e7b R11: 0000000000000246 R12: 0000000000000000
[ 86.496630][ T5335] R13: 00007efc92c16038 R14: 00007efc92c15fa0 R15: 00007ffcbac3b3c8
[ 86.500318][ T5335]
[ 86.502535][ T5335] Kernel Offset: disabled
[ 86.505088][ T5335] Rebooting in 86400 seconds..