./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3569100981 <...> DUID 00:04:03:2c:e5:fc:a2:19:b8:8b:c5:bf:62:63:19:3a:75:c6 forked to background, child pid 4749 [ 33.999702][ T4750] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.009848][ T4750] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.229' (ED25519) to the list of known hosts. execve("./syz-executor3569100981", ["./syz-executor3569100981"], 0x7ffdfc8d6ca0 /* 10 vars */) = 0 brk(NULL) = 0x55558b967000 brk(0x55558b967d00) = 0x55558b967d00 arch_prctl(ARCH_SET_FS, 0x55558b967380) = 0 set_tid_address(0x55558b967650) = 5086 set_robust_list(0x55558b967660, 24) = 0 rseq(0x55558b967ca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor3569100981", 4096) = 28 getrandom("\xe0\x9b\xc9\x57\x2b\x80\x5e\xfe", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x55558b967d00 brk(0x55558b988d00) = 0x55558b988d00 brk(0x55558b989000) = 0x55558b989000 mprotect(0x7fc0f1907000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 memfd_create("syzkaller", 0) = 3 mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fc0e9400000 write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576 munmap(0x7fc0e9400000, 138412032) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 ioctl(4, LOOP_SET_FD, 3) = 0 close(3) = 0 close(4) = 0 mkdir("./file0", 0777) = 0 syzkaller login: [ 56.711486][ T5086] loop0: detected capacity change from 0 to 2048 mount("/dev/loop0", "./file0", "udf", MS_NOSUID|MS_LAZYTIME, "shortad,gid=forget,iocharset=default,adinicb,mode=00000000000000000000002,novrs,unhide,iocharset=mac"...) = 0 openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 chdir("./file0") = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [ 56.754135][ T5086] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) setrlimit(RLIMIT_FSIZE, {rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0 [ 56.824982][ T5086] ------------[ cut here ]------------ [ 56.830624][ T5086] WARNING: CPU: 1 PID: 5086 at fs/udf/inode.c:2053 __udf_add_aext+0x555/0x700 [ 56.839638][ T5086] Modules linked in: [ 56.843594][ T5086] CPU: 1 PID: 5086 Comm: syz-executor356 Not tainted 6.9.0-rc2-next-20240405-syzkaller #0 [ 56.853625][ T5086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 56.863861][ T5086] RIP: 0010:__udf_add_aext+0x555/0x700 [ 56.869331][ T5086] Code: b4 dc fe 49 8b 3c 24 4c 89 fe e8 86 27 ff fe 31 c0 48 83 c4 30 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc e8 6c a5 77 fe 90 <0f> 0b 90 e9 e7 fb ff ff e8 5e a5 77 fe 90 0f 0b 90 e9 54 fc ff ff [ 56.889363][ T5086] RSP: 0018:ffffc9000350efb8 EFLAGS: 00010293 [ 56.895557][ T5086] RAX: ffffffff831de844 RBX: 1ffff920006a1ec1 RCX: ffff888026e99e00 [ 56.903640][ T5086] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000000001e0 [ 56.911716][ T5086] RBP: 00000000000001e0 R08: ffffffff831de426 R09: ffffffff831de356 [ 56.919774][ T5086] R10: 0000000000000002 R11: ffff888026e99e00 R12: ffffc9000350f600 [ 56.927970][ T5086] R13: 0000000000000000 R14: dffffc0000000000 R15: ffffc9000350f608 [ 56.936071][ T5086] FS: 000055558b967380(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 [ 56.945078][ T5086] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 56.951740][ T5086] CR2: 000055cc70f0db50 CR3: 0000000011250000 CR4: 00000000003506f0 [ 56.960013][ T5086] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 56.968117][ T5086] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 56.976320][ T5086] Call Trace: [ 56.979629][ T5086] [ 56.982639][ T5086] ? __warn+0x163/0x4e0 [ 56.986849][ T5086] ? __udf_add_aext+0x555/0x700 [ 56.991725][ T5086] ? report_bug+0x2b3/0x500 [ 56.996374][ T5086] ? __udf_add_aext+0x555/0x700 [ 57.001249][ T5086] ? handle_bug+0x3e/0x70 [ 57.005627][ T5086] ? exc_invalid_op+0x1a/0x50 [ 57.010314][ T5086] ? asm_exc_invalid_op+0x1a/0x20 [ 57.015396][ T5086] ? __udf_add_aext+0x66/0x700 [ 57.020184][ T5086] ? __udf_add_aext+0x136/0x700 [ 57.025107][ T5086] ? __udf_add_aext+0x554/0x700 [ 57.030003][ T5086] ? __udf_add_aext+0x555/0x700 [ 57.034942][ T5086] ? __udf_add_aext+0x554/0x700 [ 57.039928][ T5086] udf_setup_indirect_aext+0x792/0xa50 [ 57.045467][ T5086] ? __pfx_udf_setup_indirect_aext+0x10/0x10 [ 57.051473][ T5086] ? mark_buffer_dirty_inode+0x107/0x300 [ 57.057232][ T5086] ? __udf_add_aext+0x53a/0x700 [ 57.062131][ T5086] udf_do_extend_file+0x6f8/0x11e0 [ 57.067410][ T5086] ? __pfx_udf_do_extend_file+0x10/0x10 [ 57.073017][ T5086] ? udf_next_aext+0x3d3/0x4a0 [ 57.077802][ T5086] udf_map_block+0x18d1/0x5560 [ 57.082558][ T5086] ? is_bpf_text_address+0x26/0x2a0 [ 57.087856][ T5086] ? __pfx_udf_map_block+0x10/0x10 [ 57.093046][ T5086] ? stack_depot_save_flags+0x29/0x830 [ 57.098536][ T5086] ? register_lock_class+0x102/0x980 [ 57.103935][ T5086] ? mark_lock+0x9a/0x350 [ 57.108278][ T5086] ? __lock_acquire+0x1346/0x1fd0 [ 57.113385][ T5086] ? __pfx_lock_acquire+0x10/0x10 [ 57.118448][ T5086] ? create_empty_buffers+0x53e/0x740 [ 57.123879][ T5086] ? __pfx_lock_release+0x10/0x10 [ 57.128925][ T5086] ? do_raw_spin_lock+0x14f/0x370 [ 57.134094][ T5086] __udf_get_block+0x126/0x410 [ 57.138961][ T5086] ? __pfx___udf_get_block+0x10/0x10 [ 57.144301][ T5086] ? _raw_spin_unlock+0x28/0x50 [ 57.149188][ T5086] ? create_empty_buffers+0x53e/0x740 [ 57.154625][ T5086] ? folio_batch_add_and_move+0x165/0x2b0 [ 57.160362][ T5086] __block_write_begin_int+0x50c/0x1a70 [ 57.166081][ T5086] ? __pfx_udf_get_block+0x10/0x10 [ 57.172673][ T5086] ? __pfx___block_write_begin_int+0x10/0x10 [ 57.178820][ T5086] ? __pfx_udf_get_block+0x10/0x10 [ 57.183999][ T5086] block_write_begin+0x9b/0x1e0 [ 57.188957][ T5086] udf_write_begin+0x10d/0x1a0 [ 57.193770][ T5086] generic_perform_write+0x322/0x640 [ 57.199085][ T5086] ? __pfx_generic_perform_write+0x10/0x10 [ 57.204951][ T5086] ? file_update_time+0x3ac/0x3e0 [ 57.209988][ T5086] ? __generic_file_write_iter+0x105/0x230 [ 57.215871][ T5086] ? udf_file_write_iter+0x2e8/0x660 [ 57.221177][ T5086] udf_file_write_iter+0x2fd/0x660 [ 57.226348][ T5086] vfs_write+0xa72/0xc90 [ 57.230624][ T5086] ? __pfx_udf_file_write_iter+0x10/0x10 [ 57.236366][ T5086] ? __pfx_vfs_write+0x10/0x10 [ 57.241165][ T5086] ? _raw_spin_unlock_irq+0x2e/0x50 [ 57.246435][ T5086] ? ptrace_notify+0x279/0x380 [ 57.251238][ T5086] __x64_sys_pwrite64+0x1aa/0x230 [ 57.256341][ T5086] ? __pfx___x64_sys_pwrite64+0x10/0x10 [ 57.261912][ T5086] ? do_syscall_64+0x10a/0x240 [ 57.266743][ T5086] do_syscall_64+0xfb/0x240 [ 57.271363][ T5086] entry_SYSCALL_64_after_hwframe+0x72/0x7a [ 57.277338][ T5086] RIP: 0033:0x7fc0f1893a79 [ 57.281768][ T5086] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 57.301519][ T5086] RSP: 002b:00007ffc1a02dcd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 57.310007][ T5086] RAX: ffffffffffffffda RBX: 6573726168636f69 RCX: 00007fc0f1893a79 [ 57.318038][ T5086] RDX: 0000000000000001 RSI: 0000000020000300 RDI: 0000000000000004 [ 57.326218][ T5086] RBP: 00007fc0f1907610 R08: 00007ffc1a02dea8 R09: 00007ffc1a02dea8 [ 57.334273][ T5086] R10: 0000010000000005 R11: 0000000000000246 R12: 0000000000000001 [ 57.342351][ T5086] R13: 00007ffc1a02de98 R14: 0000000000000001 R15: 0000000000000001 [ 57.350386][ T5086] [ 57.353472][ T5086] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 57.360757][ T5086] CPU: 1 PID: 5086 Comm: syz-executor356 Not tainted 6.9.0-rc2-next-20240405-syzkaller #0 [ 57.370628][ T5086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 57.380796][ T5086] Call Trace: [ 57.384060][ T5086] [ 57.387216][ T5086] dump_stack_lvl+0x241/0x360 [ 57.391899][ T5086] ? __pfx_dump_stack_lvl+0x10/0x10 [ 57.397084][ T5086] ? __pfx__printk+0x10/0x10 [ 57.401656][ T5086] ? _printk+0xd5/0x120 [ 57.405812][ T5086] ? vscnprintf+0x5d/0x90 [ 57.410130][ T5086] panic+0x349/0x860 [ 57.414037][ T5086] ? __warn+0x172/0x4e0 [ 57.418195][ T5086] ? __pfx_panic+0x10/0x10 [ 57.422597][ T5086] ? show_trace_log_lvl+0x4e6/0x520 [ 57.427854][ T5086] __warn+0x346/0x4e0 [ 57.431851][ T5086] ? __udf_add_aext+0x555/0x700 [ 57.436707][ T5086] report_bug+0x2b3/0x500 [ 57.441038][ T5086] ? __udf_add_aext+0x555/0x700 [ 57.445902][ T5086] handle_bug+0x3e/0x70 [ 57.450051][ T5086] exc_invalid_op+0x1a/0x50 [ 57.454543][ T5086] asm_exc_invalid_op+0x1a/0x20 [ 57.459378][ T5086] RIP: 0010:__udf_add_aext+0x555/0x700 [ 57.464911][ T5086] Code: b4 dc fe 49 8b 3c 24 4c 89 fe e8 86 27 ff fe 31 c0 48 83 c4 30 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc e8 6c a5 77 fe 90 <0f> 0b 90 e9 e7 fb ff ff e8 5e a5 77 fe 90 0f 0b 90 e9 54 fc ff ff [ 57.484749][ T5086] RSP: 0018:ffffc9000350efb8 EFLAGS: 00010293 [ 57.490914][ T5086] RAX: ffffffff831de844 RBX: 1ffff920006a1ec1 RCX: ffff888026e99e00 [ 57.498880][ T5086] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000000001e0 [ 57.506863][ T5086] RBP: 00000000000001e0 R08: ffffffff831de426 R09: ffffffff831de356 [ 57.514871][ T5086] R10: 0000000000000002 R11: ffff888026e99e00 R12: ffffc9000350f600 [ 57.522864][ T5086] R13: 0000000000000000 R14: dffffc0000000000 R15: ffffc9000350f608 [ 57.530926][ T5086] ? __udf_add_aext+0x66/0x700 [ 57.535685][ T5086] ? __udf_add_aext+0x136/0x700 [ 57.540528][ T5086] ? __udf_add_aext+0x554/0x700 [ 57.545374][ T5086] ? __udf_add_aext+0x554/0x700 [ 57.550247][ T5086] udf_setup_indirect_aext+0x792/0xa50 [ 57.555818][ T5086] ? __pfx_udf_setup_indirect_aext+0x10/0x10 [ 57.561802][ T5086] ? mark_buffer_dirty_inode+0x107/0x300 [ 57.567725][ T5086] ? __udf_add_aext+0x53a/0x700 [ 57.572589][ T5086] udf_do_extend_file+0x6f8/0x11e0 [ 57.577708][ T5086] ? __pfx_udf_do_extend_file+0x10/0x10 [ 57.583436][ T5086] ? udf_next_aext+0x3d3/0x4a0 [ 57.588312][ T5086] udf_map_block+0x18d1/0x5560 [ 57.593083][ T5086] ? is_bpf_text_address+0x26/0x2a0 [ 57.598307][ T5086] ? __pfx_udf_map_block+0x10/0x10 [ 57.603440][ T5086] ? stack_depot_save_flags+0x29/0x830 [ 57.608982][ T5086] ? register_lock_class+0x102/0x980 [ 57.614363][ T5086] ? mark_lock+0x9a/0x350 [ 57.618724][ T5086] ? __lock_acquire+0x1346/0x1fd0 [ 57.623832][ T5086] ? __pfx_lock_acquire+0x10/0x10 [ 57.628881][ T5086] ? create_empty_buffers+0x53e/0x740 [ 57.634285][ T5086] ? __pfx_lock_release+0x10/0x10 [ 57.639304][ T5086] ? do_raw_spin_lock+0x14f/0x370 [ 57.644529][ T5086] __udf_get_block+0x126/0x410 [ 57.649417][ T5086] ? __pfx___udf_get_block+0x10/0x10 [ 57.654699][ T5086] ? _raw_spin_unlock+0x28/0x50 [ 57.659560][ T5086] ? create_empty_buffers+0x53e/0x740 [ 57.665163][ T5086] ? folio_batch_add_and_move+0x165/0x2b0 [ 57.670962][ T5086] __block_write_begin_int+0x50c/0x1a70 [ 57.676600][ T5086] ? __pfx_udf_get_block+0x10/0x10 [ 57.681728][ T5086] ? __pfx___block_write_begin_int+0x10/0x10 [ 57.687725][ T5086] ? __pfx_udf_get_block+0x10/0x10 [ 57.692837][ T5086] block_write_begin+0x9b/0x1e0 [ 57.697702][ T5086] udf_write_begin+0x10d/0x1a0 [ 57.702456][ T5086] generic_perform_write+0x322/0x640 [ 57.707940][ T5086] ? __pfx_generic_perform_write+0x10/0x10 [ 57.713732][ T5086] ? file_update_time+0x3ac/0x3e0 [ 57.718835][ T5086] ? __generic_file_write_iter+0x105/0x230 [ 57.724627][ T5086] ? udf_file_write_iter+0x2e8/0x660 [ 57.730071][ T5086] udf_file_write_iter+0x2fd/0x660 [ 57.735170][ T5086] vfs_write+0xa72/0xc90 [ 57.739408][ T5086] ? __pfx_udf_file_write_iter+0x10/0x10 [ 57.745141][ T5086] ? __pfx_vfs_write+0x10/0x10 [ 57.749896][ T5086] ? _raw_spin_unlock_irq+0x2e/0x50 [ 57.755087][ T5086] ? ptrace_notify+0x279/0x380 [ 57.759861][ T5086] __x64_sys_pwrite64+0x1aa/0x230 [ 57.764880][ T5086] ? __pfx___x64_sys_pwrite64+0x10/0x10 [ 57.770414][ T5086] ? do_syscall_64+0x10a/0x240 [ 57.775170][ T5086] do_syscall_64+0xfb/0x240 [ 57.779747][ T5086] entry_SYSCALL_64_after_hwframe+0x72/0x7a [ 57.785800][ T5086] RIP: 0033:0x7fc0f1893a79 [ 57.790289][ T5086] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 57.810224][ T5086] RSP: 002b:00007ffc1a02dcd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 57.818721][ T5086] RAX: ffffffffffffffda RBX: 6573726168636f69 RCX: 00007fc0f1893a79 [ 57.826777][ T5086] RDX: 0000000000000001 RSI: 0000000020000300 RDI: 0000000000000004 [ 57.834727][ T5086] RBP: 00007fc0f1907610 R08: 00007ffc1a02dea8 R09: 00007ffc1a02dea8 [ 57.842697][ T5086] R10: 0000010000000005 R11: 0000000000000246 R12: 0000000000000001 [ 57.850669][ T5086] R13: 00007ffc1a02de98 R14: 0000000000000001 R15: 0000000000000001 [ 57.858872][ T5086] [ 57.862055][ T5086] Kernel Offset: disabled [ 57.866498][ T5086] Rebooting in 86400 seconds..