program: syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000500)='./bus\x00', 0x18418, &(0x7f0000000200)=ANY=[@ANYRES8=0x0, @ANYRES8], 0xfe, 0x4b1, &(0x7f0000001d00)="$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") setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)={0x40, r1, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_KEYS={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x999}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0x40}}, 0x0) truncate(&(0x7f0000000100)='./file1\x00', 0x20fdfffffe) setrlimit(0xd, &(0x7f0000000240)={0xa9a, 0x2}) r3 = syz_open_dev$loop(&(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_SET_STATUS(r3, 0x4c02, &(0x7f0000000300)={0x0, {}, 0x0, {}, 0x1006, 0x2, 0xfffffdff, 0x0, "22b7435b0a43852dbc3a9ada34cc97af10fd4faea15748328c530909000000000000000b59c491a7b3e74d9389515d1002374a1d61471af78d462ea537e61800", "0410b1617b6a68917d94b72c2e9e13fce200f5da74161ccef2c5cf0300", [0x3, 0xffffffffffffffff]}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143441, 0x98) pwritev2(r4, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) [ 94.555425][ T5286] Bluetooth: hci0: command tx timeout [ 94.673740][ T5321] loop0: detected capacity change from 0 to 128 [ 94.711425][ T5321] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 94.803645][ T5321] loop0: detected capacity change from 128 to 119 [ 94.836184][ T5321] ------------[ cut here ]------------ [ 94.836224][ T5321] byte_offset [ 94.836250][ T5321] WARNING: fs/udf/truncate.c:224 at udf_truncate_extents+0xd79/0xef0, CPU#0: syz.0.0/5321 [ 94.845262][ T5321] Modules linked in: [ 94.847545][ T5321] CPU: 0 UID: 0 PID: 5321 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 94.851629][ T5321] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 94.855946][ T5321] RIP: 0010:udf_truncate_extents+0xd79/0xef0 [ 94.869133][ T5321] Code: b1 2a 10 48 3b 84 24 80 01 00 00 75 7a 44 89 f0 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d e9 be 0a 7f 08 cc e8 b8 27 5d fe 90 <0f> 0b 90 e9 67 ff ff ff 44 89 f9 80 e1 07 38 c1 0f 8c f3 f3 ff ff [ 94.877557][ T5321] RSP: 0018:ffffc9000e397020 EFLAGS: 00010287 [ 94.880137][ T5321] RAX: ffffffff836aaea8 RBX: 00000020fdfffffe RCX: 0000000000100000 [ 94.885452][ T5321] RDX: ffffc9000ecda000 RSI: 0000000000002c16 RDI: 0000000000002c17 [ 94.888614][ T5321] RBP: ffffc9000e3971f0 R08: ffff888039d24b00 R09: 0000000000000002 [ 94.892832][ T5321] R10: 0000000000000001 R11: 0000000000000002 R12: 00000015be0057fe [ 94.896166][ T5321] R13: 1ffff1100881d80a R14: 0000000000000000 R15: 00000015be005600 [ 94.899539][ T5321] FS: 00007f42b511c6c0(0000) GS:ffff88808c2ca000(0000) knlGS:0000000000000000 [ 94.903789][ T5321] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 94.906758][ T5321] CR2: 00007f725301e000 CR3: 00000000129ec000 CR4: 0000000000352ef0 [ 94.910233][ T5321] Call Trace: [ 94.911933][ T5321] [ 94.913247][ T5321] ? folio_unlock+0x101/0x160 [ 94.915705][ T5321] ? __pfx_udf_truncate_extents+0x10/0x10 [ 94.918285][ T5321] ? do_raw_spin_lock+0x12b/0x2f0 [ 94.920534][ T5321] ? do_raw_spin_unlock+0x4d/0x200 [ 94.922780][ T5321] udf_do_extend_file+0xdbc/0x11e0 [ 94.925022][ T5321] ? __pfx_udf_do_extend_file+0x10/0x10 [ 94.927403][ T5321] udf_map_block+0x1027/0x4270 [ 94.929439][ T5321] ? kernel_text_address+0xa5/0xe0 [ 94.931797][ T5321] ? __pfx_udf_map_block+0x10/0x10 [ 94.934131][ T5321] ? check_noncircular+0xdb/0x150 [ 94.936323][ T5321] ? add_lock_to_list+0xc7/0x100 [ 94.938381][ T5321] ? do_raw_spin_lock+0x12b/0x2f0 [ 94.940662][ T5321] ? do_raw_spin_unlock+0x4d/0x200 [ 94.942867][ T5321] __udf_get_block+0x52/0x250 [ 94.944993][ T5321] __block_write_begin_int+0x6c2/0x1900 [ 94.947282][ T5321] ? __pfx_udf_get_block+0x10/0x10 [ 94.949442][ T5321] ? __pfx___block_write_begin_int+0x10/0x10 [ 94.952138][ T5321] ? __pfx_udf_get_block+0x10/0x10 [ 94.954415][ T5321] block_write_begin+0x8d/0x120 [ 94.956586][ T5321] ? udf_write_begin+0x92/0x270 [ 94.958728][ T5321] udf_write_begin+0x118/0x270 [ 94.961272][ T5321] generic_perform_write+0x2d5/0x8f0 [ 94.963632][ T5321] ? __pfx_generic_perform_write+0x10/0x10 [ 94.966117][ T5321] ? file_update_time_flags+0x3ab/0x440 [ 94.968561][ T5321] ? __generic_file_write_iter+0xf9/0x230 [ 94.971259][ T5321] ? udf_file_write_iter+0x1c4/0x6c0 [ 94.973561][ T5321] udf_file_write_iter+0x2e8/0x6c0 [ 94.975668][ T5321] do_iter_readv_writev+0x612/0x8c0 [ 94.977838][ T5321] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 94.980632][ T5321] vfs_writev+0x343/0x990 [ 94.982613][ T5321] ? __pfx_vfs_writev+0x10/0x10 [ 94.985148][ T5321] ? __fget_files+0x2a/0x420 [ 94.987196][ T5321] ? __fget_files+0x3a2/0x420 [ 94.989162][ T5321] ? __fget_files+0x2a/0x420 [ 94.991748][ T5321] __se_sys_pwritev2+0x177/0x2a0 [ 94.993928][ T5321] ? __pfx___se_sys_pwritev2+0x10/0x10 [ 94.996278][ T5321] ? __x64_sys_pwritev2+0x20/0xc0 [ 94.998467][ T5321] do_syscall_64+0x166/0x520 [ 95.000612][ T5321] ? trace_irq_disable+0x3b/0x140 [ 95.002882][ T5321] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.005508][ T5321] ? clear_bhb_loop+0x70/0xc0 [ 95.007505][ T5321] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.009916][ T5321] RIP: 0033:0x7f42b419e159 [ 95.011902][ T5321] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.019979][ T5321] RSP: 002b:00007f42b511bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 95.023651][ T5321] RAX: ffffffffffffffda RBX: 00007f42b4425fa0 RCX: 00007f42b419e159 [ 95.027123][ T5321] RDX: 0000000000000001 RSI: 00002000000001c0 RDI: 0000000000000006 [ 95.030599][ T5321] RBP: 00007f42b4235024 R08: 0000000000000000 R09: 0000000000000000 [ 95.034306][ T5321] R10: 0000000000000e7b R11: 0000000000000246 R12: 0000000000000000 [ 95.038598][ T5321] R13: 00007f42b4426038 R14: 00007f42b4425fa0 R15: 00007fffe2eff9f8 [ 95.042653][ T5321] [ 95.043964][ T5321] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 95.046954][ T5321] CPU: 0 UID: 0 PID: 5321 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 95.050648][ T5321] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 95.054867][ T5321] Call Trace: [ 95.056279][ T5321] [ 95.057580][ T5321] vpanic+0x56d/0xa60 [ 95.059315][ T5321] ? __pfx__printk+0x10/0x10 [ 95.061333][ T5321] ? __pfx_vpanic+0x10/0x10 [ 95.063372][ T5321] ? is_bpf_text_address+0x292/0x2b0 [ 95.065629][ T5321] ? is_bpf_text_address+0x26/0x2b0 [ 95.067831][ T5321] panic+0xc5/0xd0 [ 95.069438][ T5321] ? __pfx_panic+0x10/0x10 [ 95.071369][ T5321] __warn+0x315/0x4c0 [ 95.073082][ T5321] ? udf_truncate_extents+0xd79/0xef0 [ 95.075344][ T5321] ? udf_truncate_extents+0xd79/0xef0 [ 95.077713][ T5321] __report_bug+0x276/0x570 [ 95.079631][ T5321] ? udf_truncate_extents+0xd79/0xef0 [ 95.081914][ T5321] ? __pfx___report_bug+0x10/0x10 [ 95.084002][ T5321] ? udf_get_filelongad+0x6e/0x1b0 [ 95.086209][ T5321] ? udf_current_aext+0x705/0xd20 [ 95.088411][ T5321] ? udf_next_aext+0x404/0x4f0 [ 95.090526][ T5321] ? udf_truncate_extents+0xd79/0xef0 [ 95.092801][ T5321] report_bug+0x16b/0x220 [ 95.094715][ T5321] ? udf_truncate_extents+0xd79/0xef0 [ 95.096925][ T5321] ? udf_truncate_extents+0xd7b/0xef0 [ 95.099215][ T5321] handle_bug+0x9c/0x200 [ 95.101038][ T5321] exc_invalid_op+0x1a/0x50 [ 95.103002][ T5321] asm_exc_invalid_op+0x1a/0x20 [ 95.105134][ T5321] RIP: 0010:udf_truncate_extents+0xd79/0xef0 [ 95.107736][ T5321] Code: b1 2a 10 48 3b 84 24 80 01 00 00 75 7a 44 89 f0 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d e9 be 0a 7f 08 cc e8 b8 27 5d fe 90 <0f> 0b 90 e9 67 ff ff ff 44 89 f9 80 e1 07 38 c1 0f 8c f3 f3 ff ff [ 95.115544][ T5321] RSP: 0018:ffffc9000e397020 EFLAGS: 00010287 [ 95.118102][ T5321] RAX: ffffffff836aaea8 RBX: 00000020fdfffffe RCX: 0000000000100000 [ 95.121379][ T5321] RDX: ffffc9000ecda000 RSI: 0000000000002c16 RDI: 0000000000002c17 [ 95.124740][ T5321] RBP: ffffc9000e3971f0 R08: ffff888039d24b00 R09: 0000000000000002 [ 95.128078][ T5321] R10: 0000000000000001 R11: 0000000000000002 R12: 00000015be0057fe [ 95.131441][ T5321] R13: 1ffff1100881d80a R14: 0000000000000000 R15: 00000015be005600 [ 95.134854][ T5321] ? udf_truncate_extents+0xd78/0xef0 [ 95.137128][ T5321] ? folio_unlock+0x101/0x160 [ 95.139274][ T5321] ? __pfx_udf_truncate_extents+0x10/0x10 [ 95.141835][ T5321] ? do_raw_spin_lock+0x12b/0x2f0 [ 95.143967][ T5321] ? do_raw_spin_unlock+0x4d/0x200 [ 95.146001][ T5321] udf_do_extend_file+0xdbc/0x11e0 [ 95.148162][ T5321] ? __pfx_udf_do_extend_file+0x10/0x10 [ 95.150580][ T5321] udf_map_block+0x1027/0x4270 [ 95.152717][ T5321] ? kernel_text_address+0xa5/0xe0 [ 95.155049][ T5321] ? __pfx_udf_map_block+0x10/0x10 [ 95.157199][ T5321] ? check_noncircular+0xdb/0x150 [ 95.159356][ T5321] ? add_lock_to_list+0xc7/0x100 [ 95.161398][ T5321] ? do_raw_spin_lock+0x12b/0x2f0 [ 95.163652][ T5321] ? do_raw_spin_unlock+0x4d/0x200 [ 95.165911][ T5321] __udf_get_block+0x52/0x250 [ 95.168006][ T5321] __block_write_begin_int+0x6c2/0x1900 [ 95.170386][ T5321] ? __pfx_udf_get_block+0x10/0x10 [ 95.172632][ T5321] ? __pfx___block_write_begin_int+0x10/0x10 [ 95.175228][ T5321] ? __pfx_udf_get_block+0x10/0x10 [ 95.177396][ T5321] block_write_begin+0x8d/0x120 [ 95.179478][ T5321] ? udf_write_begin+0x92/0x270 [ 95.181585][ T5321] udf_write_begin+0x118/0x270 [ 95.183605][ T5321] generic_perform_write+0x2d5/0x8f0 [ 95.185879][ T5321] ? __pfx_generic_perform_write+0x10/0x10 [ 95.188344][ T5321] ? file_update_time_flags+0x3ab/0x440 [ 95.190673][ T5321] ? __generic_file_write_iter+0xf9/0x230 [ 95.193130][ T5321] ? udf_file_write_iter+0x1c4/0x6c0 [ 95.195401][ T5321] udf_file_write_iter+0x2e8/0x6c0 [ 95.197585][ T5321] do_iter_readv_writev+0x612/0x8c0 [ 95.199832][ T5321] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 95.202147][ T5321] vfs_writev+0x343/0x990 [ 95.203974][ T5321] ? __pfx_vfs_writev+0x10/0x10 [ 95.206023][ T5321] ? __fget_files+0x2a/0x420 [ 95.208002][ T5321] ? __fget_files+0x3a2/0x420 [ 95.210044][ T5321] ? __fget_files+0x2a/0x420 [ 95.212082][ T5321] __se_sys_pwritev2+0x177/0x2a0 [ 95.214247][ T5321] ? __pfx___se_sys_pwritev2+0x10/0x10 [ 95.216483][ T5321] ? __x64_sys_pwritev2+0x20/0xc0 [ 95.218627][ T5321] do_syscall_64+0x166/0x520 [ 95.220644][ T5321] ? trace_irq_disable+0x3b/0x140 [ 95.222865][ T5321] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.225482][ T5321] ? clear_bhb_loop+0x70/0xc0 [ 95.227451][ T5321] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.229941][ T5321] RIP: 0033:0x7f42b419e159 [ 95.231900][ T5321] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.240191][ T5321] RSP: 002b:00007f42b511bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 95.243677][ T5321] RAX: ffffffffffffffda RBX: 00007f42b4425fa0 RCX: 00007f42b419e159 [ 95.247070][ T5321] RDX: 0000000000000001 RSI: 00002000000001c0 RDI: 0000000000000006 [ 95.250372][ T5321] RBP: 00007f42b4235024 R08: 0000000000000000 R09: 0000000000000000 [ 95.253876][ T5321] R10: 0000000000000e7b R11: 0000000000000246 R12: 0000000000000000 [ 95.257250][ T5321] R13: 00007f42b4426038 R14: 00007f42b4425fa0 R15: 00007fffe2eff9f8 [ 95.260752][ T5321] [ 95.262451][ T5321] Kernel Offset: disabled [ 95.264249][ T5321] Rebooting in 86400 seconds..