./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor4293410064 <...> Warning: Permanently added '10.128.0.149' (ED25519) to the list of known hosts. execve("./syz-executor4293410064", ["./syz-executor4293410064"], 0x7ffff9386930 /* 10 vars */) = 0 brk(NULL) = 0x5555562db000 brk(0x5555562dbd00) = 0x5555562dbd00 arch_prctl(ARCH_SET_FS, 0x5555562db380) = 0 set_tid_address(0x5555562db650) = 5047 set_robust_list(0x5555562db660, 24) = 0 rseq(0x5555562dbca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor4293410064", 4096) = 28 getrandom("\x43\xe4\x90\x57\x71\xec\x1f\xe0", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x5555562dbd00 brk(0x5555562fcd00) = 0x5555562fcd00 brk(0x5555562fd000) = 0x5555562fd000 mprotect(0x7f44e34a1000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 memfd_create("syzkaller", 0) = 3 mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f44daff1000 write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536) = 65536 munmap(0x7f44daff1000, 65536) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 ioctl(4, LOOP_SET_FD, 3) = 0 close(3) = 0 mkdir("./file1", 0777) = 0 mount("/dev/loop0", "./file1", "udf", 0, "") = 0 openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 chdir("./file1") = 0 ioctl(4, LOOP_CLR_FD) = 0 close(4) = 0 open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_LARGEFILE|O_NOFOLLOW|O_NOATIME, 000) = 4 mount("./file1", "./bus", NULL, MS_BIND, NULL) = 0 [ 62.528864][ T5047] syz-executor429[5047]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 62.545325][ T5047] loop0: detected capacity change from 0 to 128 [ 62.555100][ T5047] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 62.566491][ T5047] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 5 [ 62.582200][ T5047] UDF-fs: error (device loop0): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 241 marked as free, partition length is 32) [ 62.597012][ T5047] ------------[ cut here ]------------ [ 62.602490][ T5047] WARNING: CPU: 0 PID: 5047 at fs/udf/truncate.c:204 udf_truncate_extents+0x775/0xa00 [ 62.612131][ T5047] Modules linked in: [ 62.616062][ T5047] CPU: 0 PID: 5047 Comm: syz-executor429 Not tainted 6.5.0-rc6-next-20230818-syzkaller #0 [ 62.626042][ T5047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 62.636124][ T5047] RIP: 0010:udf_truncate_extents+0x775/0xa00 [ 62.642101][ T5047] Code: 50 01 00 00 89 d8 5b 5d 41 5c 41 5d 41 5e 41 5f c3 e8 ff 6f 95 fe 31 ff 4c 89 ee e8 85 6b 95 fe 4d 85 ed 74 8a e8 eb 6f 95 fe <0f> 0b eb 81 c7 44 24 48 08 00 00 00 e9 66 fa ff ff e8 d5 6f 95 fe [ 62.661749][ T5047] RSP: 0018:ffffc9000391f9d8 EFLAGS: 00010293 [ 62.667844][ T5047] RAX: 0000000000000000 RBX: ffff888076410e28 RCX: 0000000000000000 [ 62.675935][ T5047] RDX: ffff8880202d5940 RSI: ffffffff82f26385 RDI: 0000000000000007 [ 62.683916][ T5047] RBP: ffff88814774a000 R08: 0000000000000007 R09: 0000000000000000 [ 62.691922][ T5047] R10: 000000000000000a R11: 0000000000000000 R12: 00000000000000ff [ 62.699912][ T5047] R13: 000000000000000a R14: ffffc9000391fa88 R15: ffffc9000391fac8 [ 62.707901][ T5047] FS: 00005555562db380(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 62.716865][ T5047] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 62.723440][ T5047] CR2: 00000000005fdeb8 CR3: 000000007c023000 CR4: 00000000003506f0 [ 62.731434][ T5047] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 62.739427][ T5047] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 62.747413][ T5047] Call Trace: [ 62.750694][ T5047] [ 62.753611][ T5047] ? show_regs+0x8f/0xa0 [ 62.757878][ T5047] ? __warn+0xe6/0x380 [ 62.761963][ T5047] ? udf_truncate_extents+0x775/0xa00 [ 62.767366][ T5047] ? report_bug+0x3bc/0x580 [ 62.771881][ T5047] ? handle_bug+0x3c/0x70 [ 62.776238][ T5047] ? exc_invalid_op+0x17/0x40 [ 62.780924][ T5047] ? asm_exc_invalid_op+0x1a/0x20 [ 62.786038][ T5047] ? udf_truncate_extents+0x775/0xa00 [ 62.791472][ T5047] ? udf_truncate_extents+0x775/0xa00 [ 62.796886][ T5047] ? udf_truncate_extents+0x775/0xa00 [ 62.802285][ T5047] ? udf_discard_prealloc+0x4f0/0x4f0 [ 62.808143][ T5047] ? rcu_is_watching+0x12/0xb0 [ 62.812920][ T5047] ? lock_release+0x4bf/0x680 [ 62.817626][ T5047] ? udf_write_failed.isra.0+0x168/0x1c0 [ 62.823273][ T5047] ? do_raw_spin_lock+0x12e/0x2b0 [ 62.828327][ T5047] ? spin_bug+0x1d0/0x1d0 [ 62.832670][ T5047] ? down_write_killable_nested+0x250/0x250 [ 62.838607][ T5047] udf_write_failed.isra.0+0x170/0x1c0 [ 62.844186][ T5047] udf_write_begin+0x2c1/0x360 [ 62.848984][ T5047] generic_perform_write+0x278/0x600 [ 62.854289][ T5047] ? folio_add_wait_queue+0x1c0/0x1c0 [ 62.859688][ T5047] ? generic_update_time+0xcf/0xf0 [ 62.864831][ T5047] ? __mnt_drop_write_file+0x45/0xf0 [ 62.870114][ T5047] __generic_file_write_iter+0x1f9/0x240 [ 62.875768][ T5047] udf_file_write_iter+0x239/0x740 [ 62.880894][ T5047] vfs_write+0x650/0xe40 [ 62.885160][ T5047] ? kernel_write+0x6c0/0x6c0 [ 62.889847][ T5047] ? rcu_is_watching+0x12/0xb0 [ 62.894668][ T5047] ? reacquire_held_locks+0x4b0/0x4b0 [ 62.900058][ T5047] ? __fget_light+0x1fc/0x260 [ 62.904760][ T5047] ksys_write+0x12f/0x250 [ 62.909103][ T5047] ? __ia32_sys_read+0xb0/0xb0 [ 62.913860][ T5047] ? _raw_spin_unlock_irq+0x2e/0x50 [ 62.919708][ T5047] ? ptrace_notify+0xf4/0x130 [ 62.924406][ T5047] do_syscall_64+0x38/0xb0 [ 62.928851][ T5047] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 62.934777][ T5047] RIP: 0033:0x7f44e342e679 [ 62.939200][ T5047] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 62.958833][ T5047] RSP: 002b:00007ffd510738f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 62.967270][ T5047] RAX: ffffffffffffffda RBX: 00007ffd51073ac8 RCX: 00007f44e342e679 [ 62.975258][ T5047] RDX: 000000000208e24b RSI: 0000000020000000 RDI: 0000000000000005 [ 62.983238][ T5047] RBP: 00007f44e34a1610 R08: 0000000000000000 R09: 00007ffd51073ac8 [ 62.991230][ T5047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 62.999218][ T5047] R13: 00007ffd51073ab8 R14: 0000000000000001 R15: 0000000000000001 [ 63.007213][ T5047] [ 63.010237][ T5047] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 63.017500][ T5047] CPU: 0 PID: 5047 Comm: syz-executor429 Not tainted 6.5.0-rc6-next-20230818-syzkaller #0 [ 63.027558][ T5047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 63.037609][ T5047] Call Trace: [ 63.040882][ T5047] [ 63.043809][ T5047] dump_stack_lvl+0xd9/0x1b0 [ 63.048405][ T5047] panic+0x6a6/0x750 [ 63.052306][ T5047] ? panic_smp_self_stop+0xa0/0xa0 [ 63.057427][ T5047] ? udf_truncate_extents+0x775/0xa00 [ 63.062803][ T5047] check_panic_on_warn+0xab/0xb0 [ 63.067743][ T5047] __warn+0xf2/0x380 [ 63.071639][ T5047] ? udf_truncate_extents+0x775/0xa00 [ 63.077016][ T5047] report_bug+0x3bc/0x580 [ 63.081348][ T5047] handle_bug+0x3c/0x70 [ 63.085512][ T5047] exc_invalid_op+0x17/0x40 [ 63.090027][ T5047] asm_exc_invalid_op+0x1a/0x20 [ 63.094893][ T5047] RIP: 0010:udf_truncate_extents+0x775/0xa00 [ 63.100879][ T5047] Code: 50 01 00 00 89 d8 5b 5d 41 5c 41 5d 41 5e 41 5f c3 e8 ff 6f 95 fe 31 ff 4c 89 ee e8 85 6b 95 fe 4d 85 ed 74 8a e8 eb 6f 95 fe <0f> 0b eb 81 c7 44 24 48 08 00 00 00 e9 66 fa ff ff e8 d5 6f 95 fe [ 63.120495][ T5047] RSP: 0018:ffffc9000391f9d8 EFLAGS: 00010293 [ 63.126563][ T5047] RAX: 0000000000000000 RBX: ffff888076410e28 RCX: 0000000000000000 [ 63.134537][ T5047] RDX: ffff8880202d5940 RSI: ffffffff82f26385 RDI: 0000000000000007 [ 63.142505][ T5047] RBP: ffff88814774a000 R08: 0000000000000007 R09: 0000000000000000 [ 63.150474][ T5047] R10: 000000000000000a R11: 0000000000000000 R12: 00000000000000ff [ 63.158441][ T5047] R13: 000000000000000a R14: ffffc9000391fa88 R15: ffffc9000391fac8 [ 63.166418][ T5047] ? udf_truncate_extents+0x775/0xa00 [ 63.171811][ T5047] ? udf_truncate_extents+0x775/0xa00 [ 63.177189][ T5047] ? udf_discard_prealloc+0x4f0/0x4f0 [ 63.182565][ T5047] ? rcu_is_watching+0x12/0xb0 [ 63.187331][ T5047] ? lock_release+0x4bf/0x680 [ 63.192011][ T5047] ? udf_write_failed.isra.0+0x168/0x1c0 [ 63.197647][ T5047] ? do_raw_spin_lock+0x12e/0x2b0 [ 63.202688][ T5047] ? spin_bug+0x1d0/0x1d0 [ 63.207020][ T5047] ? down_write_killable_nested+0x250/0x250 [ 63.212927][ T5047] udf_write_failed.isra.0+0x170/0x1c0 [ 63.218390][ T5047] udf_write_begin+0x2c1/0x360 [ 63.223178][ T5047] generic_perform_write+0x278/0x600 [ 63.228481][ T5047] ? folio_add_wait_queue+0x1c0/0x1c0 [ 63.233863][ T5047] ? generic_update_time+0xcf/0xf0 [ 63.238998][ T5047] ? __mnt_drop_write_file+0x45/0xf0 [ 63.244325][ T5047] __generic_file_write_iter+0x1f9/0x240 [ 63.249990][ T5047] udf_file_write_iter+0x239/0x740 [ 63.255146][ T5047] vfs_write+0x650/0xe40 [ 63.259398][ T5047] ? kernel_write+0x6c0/0x6c0 [ 63.264099][ T5047] ? rcu_is_watching+0x12/0xb0 [ 63.268870][ T5047] ? reacquire_held_locks+0x4b0/0x4b0 [ 63.274264][ T5047] ? __fget_light+0x1fc/0x260 [ 63.278963][ T5047] ksys_write+0x12f/0x250 [ 63.283307][ T5047] ? __ia32_sys_read+0xb0/0xb0 [ 63.288072][ T5047] ? _raw_spin_unlock_irq+0x2e/0x50 [ 63.293276][ T5047] ? ptrace_notify+0xf4/0x130 [ 63.297952][ T5047] do_syscall_64+0x38/0xb0 [ 63.302371][ T5047] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 63.308269][ T5047] RIP: 0033:0x7f44e342e679 [ 63.312680][ T5047] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 63.332329][ T5047] RSP: 002b:00007ffd510738f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 63.340756][ T5047] RAX: ffffffffffffffda RBX: 00007ffd51073ac8 RCX: 00007f44e342e679 [ 63.348725][ T5047] RDX: 000000000208e24b RSI: 0000000020000000 RDI: 0000000000000005 [ 63.356705][ T5047] RBP: 00007f44e34a1610 R08: 0000000000000000 R09: 00007ffd51073ac8 [ 63.364672][ T5047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 63.372815][ T5047] R13: 00007ffd51073ab8 R14: 0000000000000001 R15: 0000000000000001 [ 63.380788][ T5047] [ 63.383995][ T5047] Kernel Offset: disabled [ 63.388304][ T5047] Rebooting in 86400 seconds..