./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1621634087
<...>
DUID 00:04:b0:cd:33:f9:4f:8a:55:45:4d:7b:3b:ee:3a:71:f0:8b
forked to background, child pid 4647
[ 30.283472][ T4648] 8021q: adding VLAN 0 to HW filter on device bond0
[ 30.292754][ T4648] eql: remember to turn off Van-Jacobson compression on your slave devices
Starting sshd: OK
syzkaller
Warning: Permanently added '10.128.0.80' (ECDSA) to the list of known hosts.
execve("./syz-executor1621634087", ["./syz-executor1621634087"], 0x7ffded1d97a0 /* 10 vars */) = 0
brk(NULL) = 0x5555566b0000
brk(0x5555566b0d00) = 0x5555566b0d00
arch_prctl(ARCH_SET_FS, 0x5555566b03c0) = 0
uname({sysname="Linux", nodename="syzkaller", ...}) = 0
readlink("/proc/self/exe", "/root/syz-executor1621634087", 4096) = 28
brk(0x5555566d1d00) = 0x5555566d1d00
brk(0x5555566d2000) = 0x5555566d2000
mprotect(0x7fae686be000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
rt_sigaction(SIGRTMIN, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=0}, NULL, 8) = 0
rt_sigaction(SIGRT_1, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=0}, NULL, 8) = 0
rt_sigaction(SIGSEGV, {sa_handler=0x7fae6860e360, sa_mask=[], sa_flags=SA_RESTORER|SA_NODEFER|SA_SIGINFO, sa_restorer=0x7fae6860f3b0}, NULL, 8) = 0
rt_sigaction(SIGBUS, {sa_handler=0x7fae6860e360, sa_mask=[], sa_flags=SA_RESTORER|SA_NODEFER|SA_SIGINFO, sa_restorer=0x7fae6860f3b0}, NULL, 8) = 0
memfd_create("syzkaller", 0) = 3
mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fae60204000
write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
munmap(0x7fae60204000, 1048576) = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
ioctl(4, LOOP_SET_FD, 3) = 0
close(3) = 0
mkdir("./bus", 0777) = 0
mount("/dev/loop0", "./bus", "udf", MS_NOSUID|MS_NOEXEC|MS_STRICTATIME, "") = 0
openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3
chdir("./bus") = 0
ioctl(4, LOOP_CLR_FD) = 0
close(4) = 0
creat("./bus", 000) = 4
open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 5
openat(AT_FDCWD, "cgroup.controllers", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 6
openat(AT_FDCWD, "cpuacct.stat", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 7
mmap(0x20000000, 4194304, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_NONBLOCK, 7, 0) = 0x20000000
--- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_ACCERR, si_addr=0x20002140} ---
write(5, 0x20002140, 8) = -1 EFAULT (Bad address)
syzkaller login: [ 53.743041][ T5068] loop0: detected capacity change from 0 to 2048
[ 53.754450][ T5068] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found!
[ 53.766153][ T5068] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 53.784268][ T27] audit: type=1800 audit(1671382175.303:2): pid=5068 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor162" name="bus" dev="loop0" ino=1357 res=0 errno=0
[ 53.789692][ T5068] ------------[ cut here ]------------
[ 53.810993][ T5068] WARNING: CPU: 1 PID: 5068 at fs/udf/inode.c:639 udf_setsize+0xf9e/0x1380
[ 53.820073][ T5068] Modules linked in:
[ 53.824114][ T5068] CPU: 1 PID: 5068 Comm: syz-executor162 Not tainted 6.1.0-syzkaller-13139-gf9ff5644bcc0 #0
[ 53.834325][ T5068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[ 53.844433][ T5068] RIP: 0010:udf_setsize+0xf9e/0x1380
[ 53.849821][ T5068] Code: 8c fe 45 85 f6 49 bf 00 00 00 00 00 fc ff df 74 0a e8 86 16 8c fe e9 34 ff ff ff e8 7c 16 8c fe e9 fa fd ff ff e8 72 16 8c fe <0f> 0b e9 61 f6 ff ff 89 d9 80 e1 07 38 c1 0f 8c 1a f1 ff ff 48 89
[ 53.869469][ T5068] RSP: 0018:ffffc90003b1fb00 EFLAGS: 00010293
[ 53.875530][ T5068] RAX: ffffffff82ffbf4e RBX: 0000000000000800 RCX: ffff888025930000
[ 53.883561][ T5068] RDX: 0000000000000000 RSI: 0000000000001000 RDI: 0000000000000800
[ 53.891579][ T5068] RBP: ffffc90003b1fcd8 R08: ffffffff82ffb5a8 R09: ffffed100e5b20f1
[ 53.899591][ T5068] R10: ffffed100e5b20f1 R11: 1ffff1100e5b20f0 R12: 1ffff92000763f70
[ 53.907667][ T5068] R13: ffffc90003b1fc10 R14: 0000000000001000 R15: 0000000000000009
[ 53.915625][ T5068] FS: 00005555566b03c0(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000
[ 53.924617][ T5068] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 53.931248][ T5068] CR2: 000000000066c7e0 CR3: 00000000757a9000 CR4: 00000000003506e0
[ 53.939274][ T5068] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 53.947297][ T5068] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 53.955267][ T5068] Call Trace:
[ 53.958586][ T5068]
[ 53.961527][ T5068] ? seqcount_lockdep_reader_access+0x1a2/0x1f0
[ 53.967891][ T5068] ? udf_evict_inode+0x410/0x410
[ 53.972845][ T5068] ? current_time+0x20d/0x300
[ 53.977558][ T5068] ? setattr_prepare+0x1fc/0xc10
[ 53.982509][ T5068] udf_setattr+0x362/0x530
[ 53.986914][ T5068] ? udf_release_file+0x120/0x120
[ 53.991998][ T5068] notify_change+0xe50/0x1100
[ 53.996687][ T5068] do_truncate+0x200/0x2f0
[ 54.001160][ T5068] ? put_page_bootmem+0x2d0/0x2d0
[ 54.006198][ T5068] do_sys_ftruncate+0x2b0/0x350
[ 54.011115][ T5068] do_syscall_64+0x3d/0xb0
[ 54.015537][ T5068] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 54.021475][ T5068] RIP: 0033:0x7fae68650da9
[ 54.025896][ T5068] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 54.045710][ T5068] RSP: 002b:00007ffc018a5028 EFLAGS: 00000246 ORIG_RAX: 000000000000004d
[ 54.054156][ T5068] RAX: ffffffffffffffda RBX: 00007ffc018a5038 RCX: 00007fae68650da9
[ 54.062161][ T5068] RDX: ffffffffffffffc0 RSI: 00000000000007fb RDI: 0000000000000004
[ 54.070182][ T5068] RBP: 00007ffc018a5030 R08: 00007fae6860e360 R09: 00007fae6860e360
[ 54.078205][ T5068] R10: 00007ffc018a5030 R11: 0000000000000246 R12: 0000000000000000
[ 54.086218][ T5068] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 54.094320][ T5068]
[ 54.097379][ T5068] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 54.104639][ T5068] CPU: 1 PID: 5068 Comm: syz-executor162 Not tainted 6.1.0-syzkaller-13139-gf9ff5644bcc0 #0
[ 54.114679][ T5068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[ 54.124715][ T5068] Call Trace:
[ 54.127980][ T5068]
[ 54.130895][ T5068] dump_stack_lvl+0x1b1/0x290
[ 54.135561][ T5068] ? nf_tcp_handle_invalid+0x630/0x630
[ 54.141001][ T5068] ? panic+0x710/0x710
[ 54.145060][ T5068] ? vscnprintf+0x59/0x80
[ 54.149379][ T5068] ? udf_setsize+0xf50/0x1380
[ 54.154043][ T5068] panic+0x2d6/0x710
[ 54.157923][ T5068] ? __warn+0x16d/0x2d0
[ 54.162069][ T5068] ? memcpy_page_flushcache+0x100/0x100
[ 54.167700][ T5068] ? udf_setsize+0xf9e/0x1380
[ 54.172375][ T5068] __warn+0x284/0x2d0
[ 54.176349][ T5068] ? udf_setsize+0xf9e/0x1380
[ 54.181015][ T5068] report_bug+0x1b3/0x2d0
[ 54.185340][ T5068] handle_bug+0x3d/0x70
[ 54.189507][ T5068] exc_invalid_op+0x16/0x40
[ 54.194011][ T5068] asm_exc_invalid_op+0x16/0x20
[ 54.198855][ T5068] RIP: 0010:udf_setsize+0xf9e/0x1380
[ 54.204148][ T5068] Code: 8c fe 45 85 f6 49 bf 00 00 00 00 00 fc ff df 74 0a e8 86 16 8c fe e9 34 ff ff ff e8 7c 16 8c fe e9 fa fd ff ff e8 72 16 8c fe <0f> 0b e9 61 f6 ff ff 89 d9 80 e1 07 38 c1 0f 8c 1a f1 ff ff 48 89
[ 54.223760][ T5068] RSP: 0018:ffffc90003b1fb00 EFLAGS: 00010293
[ 54.229824][ T5068] RAX: ffffffff82ffbf4e RBX: 0000000000000800 RCX: ffff888025930000
[ 54.237792][ T5068] RDX: 0000000000000000 RSI: 0000000000001000 RDI: 0000000000000800
[ 54.245751][ T5068] RBP: ffffc90003b1fcd8 R08: ffffffff82ffb5a8 R09: ffffed100e5b20f1
[ 54.253729][ T5068] R10: ffffed100e5b20f1 R11: 1ffff1100e5b20f0 R12: 1ffff92000763f70
[ 54.261690][ T5068] R13: ffffc90003b1fc10 R14: 0000000000001000 R15: 0000000000000009
[ 54.269668][ T5068] ? udf_setsize+0x5f8/0x1380
[ 54.274340][ T5068] ? udf_setsize+0xf9e/0x1380
[ 54.279021][ T5068] ? seqcount_lockdep_reader_access+0x1a2/0x1f0
[ 54.285257][ T5068] ? udf_evict_inode+0x410/0x410
[ 54.290201][ T5068] ? current_time+0x20d/0x300
[ 54.294871][ T5068] ? setattr_prepare+0x1fc/0xc10
[ 54.299807][ T5068] udf_setattr+0x362/0x530
[ 54.304214][ T5068] ? udf_release_file+0x120/0x120
[ 54.309230][ T5068] notify_change+0xe50/0x1100
[ 54.313905][ T5068] do_truncate+0x200/0x2f0
[ 54.318312][ T5068] ? put_page_bootmem+0x2d0/0x2d0
[ 54.323341][ T5068] do_sys_ftruncate+0x2b0/0x350
[ 54.328186][ T5068] do_syscall_64+0x3d/0xb0
[ 54.332593][ T5068] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 54.338512][ T5068] RIP: 0033:0x7fae68650da9
[ 54.342926][ T5068] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 54.362539][ T5068] RSP: 002b:00007ffc018a5028 EFLAGS: 00000246 ORIG_RAX: 000000000000004d
[ 54.370952][ T5068] RAX: ffffffffffffffda RBX: 00007ffc018a5038 RCX: 00007fae68650da9
[ 54.378913][ T5068] RDX: ffffffffffffffc0 RSI: 00000000000007fb RDI: 0000000000000004
[ 54.386894][ T5068] RBP: 00007ffc018a5030 R08: 00007fae6860e360 R09: 00007fae6860e360
[ 54.394864][ T5068] R10: 00007ffc018a5030 R11: 0000000000000246 R12: 0000000000000000
[ 54.402839][ T5068] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 54.410819][ T5068]
[ 54.414049][ T5068] Kernel Offset: disabled
[ 54.418437][ T5068] Rebooting in 86400 seconds..