./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1942115682
<...>
DUID 00:04:e6:d8:3e:4c:c1:15:84:42:dc:00:60:8c:e3:5f:26:b4
forked to background, child pid 3210
[ 30.007675][ T3211] 8021q: adding VLAN 0 to HW filter on device bond0
[ 30.018497][ T3211] eql: remember to turn off Van-Jacobson compression on your slave devices
Starting sshd: OK
syzkaller
Warning: Permanently added '10.128.0.28' (ECDSA) to the list of known hosts.
execve("./syz-executor1942115682", ["./syz-executor1942115682"], 0x7ffd09189d20 /* 10 vars */) = 0
brk(NULL) = 0x5555566c8000
brk(0x5555566c8d00) = 0x5555566c8d00
arch_prctl(ARCH_SET_FS, 0x5555566c83c0) = 0
uname({sysname="Linux", nodename="syzkaller", ...}) = 0
readlink("/proc/self/exe", "/root/syz-executor1942115682", 4096) = 28
brk(0x5555566e9d00) = 0x5555566e9d00
brk(0x5555566ea000) = 0x5555566ea000
mprotect(0x7fd4545be000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
rt_sigaction(SIGRTMIN, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=0}, NULL, 8) = 0
rt_sigaction(SIGRT_1, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=0}, NULL, 8) = 0
rt_sigaction(SIGSEGV, {sa_handler=0x7fd45450e360, sa_mask=[], sa_flags=SA_RESTORER|SA_NODEFER|SA_SIGINFO, sa_restorer=0x7fd45450f3b0}, NULL, 8) = 0
rt_sigaction(SIGBUS, {sa_handler=0x7fd45450e360, sa_mask=[], sa_flags=SA_RESTORER|SA_NODEFER|SA_SIGINFO, sa_restorer=0x7fd45450f3b0}, NULL, 8) = 0
memfd_create("syzkaller", 0) = 3
mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd44c104000
write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
munmap(0x7fd44c104000, 1048576) = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
ioctl(4, LOOP_SET_FD, 3) = 0
close(3) = 0
mkdir("./bus", 0777) = 0
mount("/dev/loop0", "./bus", "udf", MS_NOSUID|MS_NOEXEC|MS_STRICTATIME, "") = 0
openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3
chdir("./bus") = 0
ioctl(4, LOOP_CLR_FD) = 0
close(4) = 0
creat("./bus", 000) = 4
open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 5
openat(AT_FDCWD, "cgroup.controllers", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 6
syzkaller login: [ 49.558421][ T3631] loop0: detected capacity change from 0 to 2048
[ 49.570502][ T3631] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found!
[ 49.582269][ T3631] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 7
mmap(0x20000000, 4194304, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_NONBLOCK, 7, 0) = 0x20000000
--- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x20002140} ---
write(5, 0x20002140, 8) = -1 EFAULT (Bad address)
[ 49.601949][ T27] audit: type=1800 audit(1670925464.623:2): pid=3631 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor194" name="bus" dev="loop0" ino=1357 res=0 errno=0
[ 49.609737][ T3631] ------------[ cut here ]------------
[ 49.628737][ T3631] WARNING: CPU: 1 PID: 3631 at fs/udf/inode.c:639 udf_setsize+0xf9e/0x1380
[ 49.637854][ T3631] Modules linked in:
[ 49.641782][ T3631] CPU: 1 PID: 3631 Comm: syz-executor194 Not tainted 6.1.0-syzkaller-03225-g764822972d64 #0
[ 49.652401][ T3631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[ 49.662689][ T3631] RIP: 0010:udf_setsize+0xf9e/0x1380
[ 49.668613][ T3631] Code: 8e fe 45 85 f6 49 bf 00 00 00 00 00 fc ff df 74 0a e8 86 28 8e fe e9 34 ff ff ff e8 7c 28 8e fe e9 fa fd ff ff e8 72 28 8e fe <0f> 0b e9 61 f6 ff ff 89 d9 80 e1 07 38 c1 0f 8c 1a f1 ff ff 48 89
[ 49.688336][ T3631] RSP: 0018:ffffc90003cefb00 EFLAGS: 00010293
[ 49.694809][ T3631] RAX: ffffffff82fd3d5e RBX: 0000000000000800 RCX: ffff888022760000
[ 49.702776][ T3631] RDX: 0000000000000000 RSI: 0000000000001000 RDI: 0000000000000800
[ 49.710812][ T3631] RBP: ffffc90003cefcd8 R08: ffffffff82fd33b8 R09: ffffed100df29024
[ 49.718852][ T3631] R10: ffffed100df29024 R11: 1ffff1100df29023 R12: 1ffff9200079df70
[ 49.726881][ T3631] R13: ffffc90003cefc10 R14: 0000000000001000 R15: 0000000000000009
[ 49.735091][ T3631] FS: 00005555566c83c0(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000
[ 49.744013][ T3631] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 49.750640][ T3631] CR2: 0000560387521d28 CR3: 0000000073ea7000 CR4: 00000000003506f0
[ 49.758725][ T3631] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 49.766779][ T3631] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 49.774863][ T3631] Call Trace:
[ 49.778411][ T3631]
[ 49.781338][ T3631] ? seqcount_lockdep_reader_access+0x1a2/0x1f0
[ 49.787643][ T3631] ? udf_evict_inode+0x410/0x410
[ 49.792611][ T3631] ? current_time+0x20d/0x300
[ 49.797366][ T3631] ? setattr_prepare+0x1fc/0xc10
[ 49.802321][ T3631] udf_setattr+0x362/0x530
[ 49.806858][ T3631] ? udf_release_file+0x120/0x120
[ 49.811899][ T3631] notify_change+0xe50/0x1100
[ 49.816771][ T3631] do_truncate+0x200/0x2f0
[ 49.821198][ T3631] ? put_page_bootmem+0x2d0/0x2d0
[ 49.826362][ T3631] ? bpf_lsm_path_truncate+0x5/0x10
[ 49.831579][ T3631] do_sys_ftruncate+0x2bc/0x360
[ 49.836510][ T3631] do_syscall_64+0x3d/0xb0
[ 49.841057][ T3631] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 49.847002][ T3631] RIP: 0033:0x7fd454550da9
[ 49.851450][ T3631] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 49.871147][ T3631] RSP: 002b:00007ffeb8edd258 EFLAGS: 00000246 ORIG_RAX: 000000000000004d
[ 49.879636][ T3631] RAX: ffffffffffffffda RBX: 00007ffeb8edd268 RCX: 00007fd454550da9
[ 49.887683][ T3631] RDX: ffffffffffffffc0 RSI: 00000000000007fb RDI: 0000000000000004
[ 49.895737][ T3631] RBP: 00007ffeb8edd260 R08: 00007fd45450e360 R09: 00007fd45450e360
[ 49.903723][ T3631] R10: 00007ffeb8edd260 R11: 0000000000000246 R12: 0000000000000000
[ 49.911776][ T3631] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 49.919846][ T3631]
[ 49.922863][ T3631] Kernel panic - not syncing: panic_on_warn set ...
[ 49.929456][ T3631] CPU: 0 PID: 3631 Comm: syz-executor194 Not tainted 6.1.0-syzkaller-03225-g764822972d64 #0
[ 49.939504][ T3631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[ 49.949543][ T3631] Call Trace:
[ 49.952810][ T3631]
[ 49.955737][ T3631] dump_stack_lvl+0x1b1/0x28e
[ 49.960426][ T3631] ? nf_tcp_handle_invalid+0x62e/0x62e
[ 49.965960][ T3631] ? panic+0x710/0x710
[ 49.970039][ T3631] ? vscnprintf+0x59/0x80
[ 49.974380][ T3631] ? udf_setsize+0xf40/0x1380
[ 49.979241][ T3631] panic+0x2d6/0x710
[ 49.983141][ T3631] ? __warn+0x131/0x220
[ 49.987290][ T3631] ? memcpy_page_flushcache+0xfc/0xfc
[ 49.992671][ T3631] ? udf_setsize+0xf9e/0x1380
[ 49.997338][ T3631] __warn+0x1fa/0x220
[ 50.001319][ T3631] ? udf_setsize+0xf9e/0x1380
[ 50.006003][ T3631] report_bug+0x1b3/0x2d0
[ 50.010353][ T3631] handle_bug+0x3d/0x70
[ 50.014597][ T3631] exc_invalid_op+0x16/0x40
[ 50.019133][ T3631] asm_exc_invalid_op+0x16/0x20
[ 50.024003][ T3631] RIP: 0010:udf_setsize+0xf9e/0x1380
[ 50.029322][ T3631] Code: 8e fe 45 85 f6 49 bf 00 00 00 00 00 fc ff df 74 0a e8 86 28 8e fe e9 34 ff ff ff e8 7c 28 8e fe e9 fa fd ff ff e8 72 28 8e fe <0f> 0b e9 61 f6 ff ff 89 d9 80 e1 07 38 c1 0f 8c 1a f1 ff ff 48 89
[ 50.048949][ T3631] RSP: 0018:ffffc90003cefb00 EFLAGS: 00010293
[ 50.055017][ T3631] RAX: ffffffff82fd3d5e RBX: 0000000000000800 RCX: ffff888022760000
[ 50.062982][ T3631] RDX: 0000000000000000 RSI: 0000000000001000 RDI: 0000000000000800
[ 50.071055][ T3631] RBP: ffffc90003cefcd8 R08: ffffffff82fd33b8 R09: ffffed100df29024
[ 50.079021][ T3631] R10: ffffed100df29024 R11: 1ffff1100df29023 R12: 1ffff9200079df70
[ 50.087072][ T3631] R13: ffffc90003cefc10 R14: 0000000000001000 R15: 0000000000000009
[ 50.095138][ T3631] ? udf_setsize+0x5f8/0x1380
[ 50.099910][ T3631] ? udf_setsize+0xf9e/0x1380
[ 50.104609][ T3631] ? seqcount_lockdep_reader_access+0x1a2/0x1f0
[ 50.110939][ T3631] ? udf_evict_inode+0x410/0x410
[ 50.115886][ T3631] ? current_time+0x20d/0x300
[ 50.120563][ T3631] ? setattr_prepare+0x1fc/0xc10
[ 50.125505][ T3631] udf_setattr+0x362/0x530
[ 50.129933][ T3631] ? udf_release_file+0x120/0x120
[ 50.134955][ T3631] notify_change+0xe50/0x1100
[ 50.139642][ T3631] do_truncate+0x200/0x2f0
[ 50.144058][ T3631] ? put_page_bootmem+0x2d0/0x2d0
[ 50.149093][ T3631] ? bpf_lsm_path_truncate+0x5/0x10
[ 50.154293][ T3631] do_sys_ftruncate+0x2bc/0x360
[ 50.159147][ T3631] do_syscall_64+0x3d/0xb0
[ 50.163581][ T3631] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 50.169482][ T3631] RIP: 0033:0x7fd454550da9
[ 50.173889][ T3631] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 50.193580][ T3631] RSP: 002b:00007ffeb8edd258 EFLAGS: 00000246 ORIG_RAX: 000000000000004d
[ 50.201990][ T3631] RAX: ffffffffffffffda RBX: 00007ffeb8edd268 RCX: 00007fd454550da9
[ 50.209953][ T3631] RDX: ffffffffffffffc0 RSI: 00000000000007fb RDI: 0000000000000004
[ 50.218010][ T3631] RBP: 00007ffeb8edd260 R08: 00007fd45450e360 R09: 00007fd45450e360
[ 50.225976][ T3631] R10: 00007ffeb8edd260 R11: 0000000000000246 R12: 0000000000000000
[ 50.233942][ T3631] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 50.241918][ T3631]
[ 50.245134][ T3631] Kernel Offset: disabled
[ 50.249611][ T3631] Rebooting in 86400 seconds..