./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3556267933 <...> forked to background, child pid 4647 [ 30.469780][ T4648] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.484283][ T4648] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: [ 30.835208][ T4735] sshd (4735) used greatest stack depth: 16320 bytes left OK syzkaller Warning: Permanently added '10.128.0.92' (ECDSA) to the list of known hosts. execve("./syz-executor3556267933", ["./syz-executor3556267933"], 0x7ffd522dfdb0 /* 10 vars */) = 0 brk(NULL) = 0x55555559b000 brk(0x55555559bc40) = 0x55555559bc40 arch_prctl(ARCH_SET_FS, 0x55555559b300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor3556267933", 4096) = 28 brk(0x5555555bcc40) = 0x5555555bcc40 brk(0x5555555bd000) = 0x5555555bd000 mprotect(0x7f459faec000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 memfd_create("syzkaller", 0) = 3 mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f4597632000 write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536) = 65536 munmap(0x7f4597632000, 65536) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 ioctl(4, LOOP_SET_FD, 3) = 0 close(3) = 0 mkdir("./file0", 0777) = 0 mount("/dev/loop0", "./file0", "udf", 0, "") = 0 openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 chdir("./file0") = 0 ioctl(4, LOOP_CLR_FD) = 0 close(4) = 0 open(".", O_RDONLY) = 4 mkdirat(4, "\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", 000) = 0 rename("./file0", "\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f") = 0 openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 5 write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\x12\xa7\xbb\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064) = -1 ENOSPC (No space left on device) ftruncate(5, 38) = 0 openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 6 syzkaller login: [ 56.248884][ T5068] loop0: detected capacity change from 0 to 128 [ 56.261481][ T5068] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 56.272860][ T5068] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 56.313123][ T5068] ------------[ cut here ]------------ [ 56.318819][ T5068] WARNING: CPU: 0 PID: 5068 at fs/udf/inode.c:2005 __udf_add_aext+0x574/0x710 [ 56.328213][ T5068] Modules linked in: [ 56.332707][ T5068] CPU: 0 PID: 5068 Comm: syz-executor355 Not tainted 6.2.0-rc1-syzkaller #0 [ 56.341883][ T5068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 56.352175][ T5068] RIP: 0010:__udf_add_aext+0x574/0x710 [ 56.357636][ T5068] Code: 48 89 df e8 5e 90 e0 fe 48 8b 3b be 18 00 00 00 e8 31 ae 02 00 43 80 3c 34 00 0f 85 d7 fe ff ff e9 da fe ff ff e8 5c e8 8a fe <0f> 0b e9 ce fb ff ff e8 50 e8 8a fe 0f 0b e9 34 fc ff ff e8 44 e8 [ 56.377666][ T5068] RSP: 0018:ffffc90003b2f290 EFLAGS: 00010293 [ 56.384013][ T5068] RAX: ffffffff8300f314 RBX: 1ffff92000765ee5 RCX: ffff8880754a3a80 [ 56.392275][ T5068] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000000 [ 56.400308][ T5068] RBP: 0000000000000000 R08: ffffffff8300eedb R09: ffffffff8300ee01 [ 56.408325][ T5068] R10: 0000000000000002 R11: ffff8880754a3a80 R12: 0000000000000004 [ 56.416404][ T5068] R13: ffffc90003b2f720 R14: dffffc0000000000 R15: ffffc90003b2f728 [ 56.424459][ T5068] FS: 000055555559b300(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 56.433479][ T5068] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 56.440084][ T5068] CR2: 0000000020005000 CR3: 0000000024f21000 CR4: 00000000003506f0 [ 56.448142][ T5068] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 56.456245][ T5068] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 56.464278][ T5068] Call Trace: [ 56.467582][ T5068] [ 56.470603][ T5068] ? udf_get_block+0x41d/0x5130 [ 56.475486][ T5068] udf_do_extend_file+0xa3e/0xf00 [ 56.480615][ T5068] ? udf_current_aext+0x5d0/0xa80 [ 56.485649][ T5068] ? udf_write_failed+0x1d0/0x1d0 [ 56.490760][ T5068] ? udf_next_aext+0x373/0x430 [ 56.495539][ T5068] udf_get_block+0x161d/0x5130 [ 56.500401][ T5068] ? udf_bread+0x510/0x510 [ 56.504851][ T5068] ? update_cfs_rq_load_avg+0x483/0x570 [ 56.510473][ T5068] ? mark_lock+0x9a/0x350 [ 56.514840][ T5068] ? rcu_read_lock_sched_held+0x87/0x110 [ 56.520532][ T5068] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 56.526538][ T5068] ? rcu_lock_release+0x5/0x20 [ 56.531370][ T5068] ? __might_sleep+0xc0/0xc0 [ 56.535972][ T5068] ? create_page_buffers+0x244/0x4b0 [ 56.541324][ T5068] __block_write_begin_int+0x54c/0x1a80 [ 56.546890][ T5068] ? folio_index+0xae/0x370 [ 56.551504][ T5068] ? udf_bread+0x510/0x510 [ 56.555928][ T5068] ? page_zero_new_buffers+0x940/0x940 [ 56.561439][ T5068] ? PageHeadHuge+0x8a/0x1d0 [ 56.566049][ T5068] ? udf_bread+0x510/0x510 [ 56.570550][ T5068] block_write_begin+0x93/0x1e0 [ 56.575433][ T5068] ? udf_write_begin+0x16/0x60 [ 56.580304][ T5068] udf_write_begin+0x2d/0x60 [ 56.584950][ T5068] generic_perform_write+0x2e4/0x5e0 [ 56.590369][ T5068] ? generic_file_direct_write+0x610/0x610 [ 56.596221][ T5068] ? __file_remove_privs+0x610/0x610 [ 56.601602][ T5068] ? up_write+0x19a/0x580 [ 56.606301][ T5068] ? __up_read+0x690/0x690 [ 56.610903][ T5068] __generic_file_write_iter+0x176/0x400 [ 56.616558][ T5068] ? rcu_read_lock_bh_held+0xf0/0xf0 [ 56.621905][ T5068] udf_file_write_iter+0x325/0x5f0 [ 56.627068][ T5068] vfs_write+0x7dc/0xc50 [ 56.631392][ T5068] ? file_end_write+0x230/0x230 [ 56.636266][ T5068] ? ptrace_stop+0x74d/0x970 [ 56.640990][ T5068] ? _raw_spin_unlock_irq+0x2a/0x40 [ 56.646224][ T5068] ? __fdget_pos+0x252/0x2e0 [ 56.650999][ T5068] ksys_write+0x177/0x2a0 [ 56.655351][ T5068] ? __ia32_sys_read+0x80/0x80 [ 56.660103][ T5068] ? syscall_enter_from_user_mode+0x2e/0x1d0 [ 56.666198][ T5068] ? syscall_enter_from_user_mode+0x86/0x1d0 [ 56.672264][ T5068] do_syscall_64+0x3d/0xb0 [ 56.676692][ T5068] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 56.682625][ T5068] RIP: 0033:0x7f459fa7e969 [ 56.687055][ T5068] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 56.706745][ T5068] RSP: 002b:00007fff5b20ae98 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 56.715241][ T5068] RAX: ffffffffffffffda RBX: 00007f459fac2508 RCX: 00007f459fa7e969 [ 56.723308][ T5068] RDX: 00000000000ffe00 RSI: 0000000020004200 RDI: 0000000000000006 [ 56.731342][ T5068] RBP: 00007f459fa3e200 R08: 0000000000000000 R09: 0000000000000000 [ 56.739328][ T5068] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f459fa3e290 [ 56.747359][ T5068] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 56.755399][ T5068] [ 56.758410][ T5068] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 56.765680][ T5068] CPU: 0 PID: 5068 Comm: syz-executor355 Not tainted 6.2.0-rc1-syzkaller #0 [ 56.774332][ T5068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 56.784372][ T5068] Call Trace: [ 56.787640][ T5068] [ 56.790559][ T5068] dump_stack_lvl+0x1b1/0x290 [ 56.795228][ T5068] ? nf_tcp_handle_invalid+0x630/0x630 [ 56.800676][ T5068] ? panic+0x710/0x710 [ 56.804732][ T5068] ? vscnprintf+0x59/0x80 [ 56.809045][ T5068] ? __udf_add_aext+0x560/0x710 [ 56.813884][ T5068] panic+0x2d6/0x710 [ 56.817778][ T5068] ? __warn+0x16d/0x2d0 [ 56.821930][ T5068] ? memcpy_page_flushcache+0x100/0x100 [ 56.827468][ T5068] ? __udf_add_aext+0x574/0x710 [ 56.832651][ T5068] __warn+0x284/0x2d0 [ 56.836620][ T5068] ? __udf_add_aext+0x574/0x710 [ 56.841462][ T5068] report_bug+0x1b3/0x2d0 [ 56.845802][ T5068] handle_bug+0x3d/0x70 [ 56.849958][ T5068] exc_invalid_op+0x16/0x40 [ 56.854476][ T5068] asm_exc_invalid_op+0x16/0x20 [ 56.859329][ T5068] RIP: 0010:__udf_add_aext+0x574/0x710 [ 56.864795][ T5068] Code: 48 89 df e8 5e 90 e0 fe 48 8b 3b be 18 00 00 00 e8 31 ae 02 00 43 80 3c 34 00 0f 85 d7 fe ff ff e9 da fe ff ff e8 5c e8 8a fe <0f> 0b e9 ce fb ff ff e8 50 e8 8a fe 0f 0b e9 34 fc ff ff e8 44 e8 [ 56.884391][ T5068] RSP: 0018:ffffc90003b2f290 EFLAGS: 00010293 [ 56.890456][ T5068] RAX: ffffffff8300f314 RBX: 1ffff92000765ee5 RCX: ffff8880754a3a80 [ 56.898426][ T5068] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000000 [ 56.906400][ T5068] RBP: 0000000000000000 R08: ffffffff8300eedb R09: ffffffff8300ee01 [ 56.914454][ T5068] R10: 0000000000000002 R11: ffff8880754a3a80 R12: 0000000000000004 [ 56.922853][ T5068] R13: ffffc90003b2f720 R14: dffffc0000000000 R15: ffffc90003b2f728 [ 56.930831][ T5068] ? __udf_add_aext+0x61/0x710 [ 56.935605][ T5068] ? __udf_add_aext+0x13b/0x710 [ 56.940454][ T5068] ? __udf_add_aext+0x574/0x710 [ 56.945315][ T5068] ? udf_get_block+0x41d/0x5130 [ 56.950167][ T5068] udf_do_extend_file+0xa3e/0xf00 [ 56.955200][ T5068] ? udf_current_aext+0x5d0/0xa80 [ 56.960225][ T5068] ? udf_write_failed+0x1d0/0x1d0 [ 56.965251][ T5068] ? udf_next_aext+0x373/0x430 [ 56.970370][ T5068] udf_get_block+0x161d/0x5130 [ 56.975157][ T5068] ? udf_bread+0x510/0x510 [ 56.979576][ T5068] ? update_cfs_rq_load_avg+0x483/0x570 [ 56.985129][ T5068] ? mark_lock+0x9a/0x350 [ 56.989468][ T5068] ? rcu_read_lock_sched_held+0x87/0x110 [ 56.995098][ T5068] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 57.001098][ T5068] ? rcu_lock_release+0x5/0x20 [ 57.005886][ T5068] ? __might_sleep+0xc0/0xc0 [ 57.010489][ T5068] ? create_page_buffers+0x244/0x4b0 [ 57.015806][ T5068] __block_write_begin_int+0x54c/0x1a80 [ 57.021365][ T5068] ? folio_index+0xae/0x370 [ 57.025900][ T5068] ? udf_bread+0x510/0x510 [ 57.030315][ T5068] ? page_zero_new_buffers+0x940/0x940 [ 57.035773][ T5068] ? PageHeadHuge+0x8a/0x1d0 [ 57.040365][ T5068] ? udf_bread+0x510/0x510 [ 57.044779][ T5068] block_write_begin+0x93/0x1e0 [ 57.049637][ T5068] ? udf_write_begin+0x16/0x60 [ 57.054402][ T5068] udf_write_begin+0x2d/0x60 [ 57.060226][ T5068] generic_perform_write+0x2e4/0x5e0 [ 57.065529][ T5068] ? generic_file_direct_write+0x610/0x610 [ 57.071335][ T5068] ? __file_remove_privs+0x610/0x610 [ 57.076616][ T5068] ? up_write+0x19a/0x580 [ 57.080950][ T5068] ? __up_read+0x690/0x690 [ 57.085371][ T5068] __generic_file_write_iter+0x176/0x400 [ 57.091020][ T5068] ? rcu_read_lock_bh_held+0xf0/0xf0 [ 57.096332][ T5068] udf_file_write_iter+0x325/0x5f0 [ 57.101448][ T5068] vfs_write+0x7dc/0xc50 [ 57.105699][ T5068] ? file_end_write+0x230/0x230 [ 57.110548][ T5068] ? ptrace_stop+0x74d/0x970 [ 57.115146][ T5068] ? _raw_spin_unlock_irq+0x2a/0x40 [ 57.120347][ T5068] ? __fdget_pos+0x252/0x2e0 [ 57.125033][ T5068] ksys_write+0x177/0x2a0 [ 57.129452][ T5068] ? __ia32_sys_read+0x80/0x80 [ 57.134213][ T5068] ? syscall_enter_from_user_mode+0x2e/0x1d0 [ 57.140193][ T5068] ? syscall_enter_from_user_mode+0x86/0x1d0 [ 57.146177][ T5068] do_syscall_64+0x3d/0xb0 [ 57.150593][ T5068] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 57.156497][ T5068] RIP: 0033:0x7f459fa7e969 [ 57.160908][ T5068] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 57.180509][ T5068] RSP: 002b:00007fff5b20ae98 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 57.188919][ T5068] RAX: ffffffffffffffda RBX: 00007f459fac2508 RCX: 00007f459fa7e969 [ 57.197078][ T5068] RDX: 00000000000ffe00 RSI: 0000000020004200 RDI: 0000000000000006 [ 57.205068][ T5068] RBP: 00007f459fa3e200 R08: 0000000000000000 R09: 0000000000000000 [ 57.213047][ T5068] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f459fa3e290 [ 57.221098][ T5068] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 57.229440][ T5068] [ 57.232653][ T5068] Kernel Offset: disabled [ 57.237048][ T5068] Rebooting in 86400 seconds..