./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1965306442
<...>
DUID 00:04:ef:48:41:79:0b:5e:d9:4d:76:cd:70:81:2e:69:59:2c
forked to background, child pid 3208
[ 28.157659][ T3209] 8021q: adding VLAN 0 to HW filter on device bond0
[ 28.179755][ T3209] eql: remember to turn off Van-Jacobson compression on your slave devices
Starting sshd: OK
syzkaller
Warning: Permanently added '10.128.1.29' (ECDSA) to the list of known hosts.
execve("./syz-executor1965306442", ["./syz-executor1965306442"], 0x7ffea9c4b880 /* 10 vars */) = 0
brk(NULL) = 0x5555555d8000
brk(0x5555555d8c40) = 0x5555555d8c40
arch_prctl(ARCH_SET_FS, 0x5555555d8300) = 0
uname({sysname="Linux", nodename="syzkaller", ...}) = 0
readlink("/proc/self/exe", "/root/syz-executor1965306442", 4096) = 28
brk(0x5555555f9c40) = 0x5555555f9c40
brk(0x5555555fa000) = 0x5555555fa000
mprotect(0x7fedebbda000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
memfd_create("syzkaller", 0) = 3
mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fede3720000
write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 1048576) = 1048576
munmap(0x7fede3720000, 1048576) = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
ioctl(4, LOOP_SET_FD, 3) = 0
close(3) = 0
mkdir("./file0", 0777) = 0
mount("/dev/loop0", "./file0", "udf", 0, "") = 0
openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
chdir("./file0") = 0
ioctl(4, LOOP_CLR_FD) = 0
close(4) = 0
setrlimit(RLIMIT_FSIZE, {rlim_cur=RLIM64_INFINITY, rlim_max=RLIM64_INFINITY}) = 0
open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|O_CLOEXEC, 000) = 4
pwrite64(4, "\x13", 1, 4402345721853) = 1
syzkaller login: [ 48.439009][ T3633] loop0: detected capacity change from 0 to 2048
[ 48.453615][ T3633] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
write(4, "\x86\x76\x87\x80\x20\xec\x3e\xa3\x39\x98\xec\xf2\xdd\xd6\x4b\xe1\x86\x89\x06\x32\xd1\xc2\xa2\xe3\xe6\xdd\xdf\xe8\x76\xd5\x10", 31) = 31
open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 5
[ 48.507868][ T3633] ------------[ cut here ]------------
[ 48.513660][ T3633] WARNING: CPU: 1 PID: 3633 at fs/udf/truncate.c:226 udf_truncate_extents+0x848/0x930
[ 48.523306][ T3633] Modules linked in:
[ 48.527224][ T3633] CPU: 1 PID: 3633 Comm: syz-executor196 Not tainted 6.1.0-syzkaller-00071-g3a28c2c89f4b #0
[ 48.537560][ T3633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[ 48.547692][ T3633] RIP: 0010:udf_truncate_extents+0x848/0x930
[ 48.553835][ T3633] Code: 84 d2 74 05 e8 29 37 f0 fe 8b 44 24 20 be 07 00 00 00 48 89 df 89 83 cc fe ff ff e8 62 b8 0b ff e9 a5 fd ff ff e8 98 5c a3 fe <0f> 0b e9 1f fe ff ff e8 8c 5c a3 fe 0f 0b 48 8b 7c 24 18 e8 70 36
[ 48.573540][ T3633] RSP: 0018:ffffc90003b1fa10 EFLAGS: 00010293
[ 48.579620][ T3633] RAX: 0000000000000000 RBX: ffff888074b88158 RCX: 0000000000000000
[ 48.587627][ T3633] RDX: ffff8880253e9d40 RSI: ffffffff82dcc0c8 RDI: 0000000000000007
[ 48.595672][ T3633] RBP: ffffc90003b1faf8 R08: 0000000000000007 R09: 0000000000000000
[ 48.603706][ T3633] R10: 00000009bfffb000 R11: 0000000000000000 R12: ffffc90003b1fab8
[ 48.611810][ T3633] R13: 00000009bfffb000 R14: 00000000000000ff R15: ffff888073fe2000
[ 48.619770][ T3633] FS: 00005555555d8300(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000
[ 48.628729][ T3633] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 48.635703][ T3633] CR2: 0000000020002004 CR3: 000000005a2a0000 CR4: 0000000000350ee0
[ 48.643913][ T3633] Call Trace:
[ 48.647220][ T3633]
[ 48.650141][ T3633] ? udf_discard_prealloc+0x770/0x770
[ 48.655678][ T3633] ? find_held_lock+0x2d/0x110
[ 48.660495][ T3633] ? udf_setsize+0x3da/0x1080
[ 48.665244][ T3633] ? do_raw_spin_lock+0x124/0x2b0
[ 48.670322][ T3633] ? rwlock_bug.part.0+0x90/0x90
[ 48.675335][ T3633] udf_setsize+0x3e2/0x1080
[ 48.679868][ T3633] ? current_time+0x76/0x2c0
[ 48.684516][ T3633] ? inode_bmap+0x7b0/0x7b0
[ 48.689068][ T3633] ? mark_held_locks+0x9f/0xe0
[ 48.693987][ T3633] ? ktime_get_coarse_real_ts64+0x1bb/0x200
[ 48.699931][ T3633] ? lockdep_hardirqs_on+0x7d/0x100
[ 48.705172][ T3633] ? ktime_get_coarse_real_ts64+0x1bb/0x200
[ 48.711150][ T3633] ? ktime_get_coarse_real_ts64+0x15e/0x200
[ 48.717064][ T3633] ? inode_newsize_ok+0x191/0x210
[ 48.722142][ T3633] ? setattr_prepare+0x13e/0xc60
[ 48.727118][ T3633] ? evm_inode_setattr+0x7e/0x710
[ 48.732199][ T3633] ? file_remove_privs+0x20/0x20
[ 48.737156][ T3633] udf_setattr+0x4a8/0x5e0
[ 48.741621][ T3633] ? security_inode_setattr+0x10c/0x150
[ 48.747192][ T3633] ? udf_file_write_iter+0x650/0x650
[ 48.752609][ T3633] notify_change+0xcd4/0x1440
[ 48.757318][ T3633] ? do_truncate+0x140/0x200
[ 48.761967][ T3633] do_truncate+0x140/0x200
[ 48.766397][ T3633] ? file_open_root+0x430/0x430
[ 48.771644][ T3633] do_sys_ftruncate+0x53a/0x730
[ 48.776492][ T3633] do_syscall_64+0x39/0xb0
[ 48.780993][ T3633] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 48.786934][ T3633] RIP: 0033:0x7fedebb6c919
[ 48.791446][ T3633] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 48.811715][ T3633] RSP: 002b:00007ffe1f955978 EFLAGS: 00000246 ORIG_RAX: 000000000000004d
[ 48.820126][ T3633] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fedebb6c919
[ 48.828143][ T3633] RDX: 00007fedebb6c919 RSI: 00000009ffffb000 RDI: 0000000000000005
[ 48.836265][ T3633] RBP: 00007fedebb2c1b0 R08: 0000000000000000 R09: 0000000000000000
[ 48.844274][ T3633] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fedebb2c240
[ 48.852294][ T3633] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 48.860262][ T3633]
[ 48.863422][ T3633] Kernel panic - not syncing: panic_on_warn set ...
[ 48.870006][ T3633] CPU: 1 PID: 3633 Comm: syz-executor196 Not tainted 6.1.0-syzkaller-00071-g3a28c2c89f4b #0
[ 48.880060][ T3633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[ 48.890100][ T3633] Call Trace:
[ 48.893364][ T3633]
[ 48.896281][ T3633] dump_stack_lvl+0xd1/0x138
[ 48.900929][ T3633] panic+0x2cc/0x626
[ 48.904831][ T3633] ? panic_print_sys_info.part.0+0x110/0x110
[ 48.910813][ T3633] ? __warn.cold+0x24b/0x350
[ 48.915395][ T3633] ? udf_truncate_extents+0x848/0x930
[ 48.920764][ T3633] __warn.cold+0x25c/0x350
[ 48.925199][ T3633] ? udf_truncate_extents+0x848/0x930
[ 48.930572][ T3633] report_bug+0x1c0/0x210
[ 48.934908][ T3633] handle_bug+0x3c/0x70
[ 48.939071][ T3633] exc_invalid_op+0x18/0x50
[ 48.943574][ T3633] asm_exc_invalid_op+0x1a/0x20
[ 48.948448][ T3633] RIP: 0010:udf_truncate_extents+0x848/0x930
[ 48.954425][ T3633] Code: 84 d2 74 05 e8 29 37 f0 fe 8b 44 24 20 be 07 00 00 00 48 89 df 89 83 cc fe ff ff e8 62 b8 0b ff e9 a5 fd ff ff e8 98 5c a3 fe <0f> 0b e9 1f fe ff ff e8 8c 5c a3 fe 0f 0b 48 8b 7c 24 18 e8 70 36
[ 48.974289][ T3633] RSP: 0018:ffffc90003b1fa10 EFLAGS: 00010293
[ 48.980524][ T3633] RAX: 0000000000000000 RBX: ffff888074b88158 RCX: 0000000000000000
[ 48.988483][ T3633] RDX: ffff8880253e9d40 RSI: ffffffff82dcc0c8 RDI: 0000000000000007
[ 48.996446][ T3633] RBP: ffffc90003b1faf8 R08: 0000000000000007 R09: 0000000000000000
[ 49.004408][ T3633] R10: 00000009bfffb000 R11: 0000000000000000 R12: ffffc90003b1fab8
[ 49.012404][ T3633] R13: 00000009bfffb000 R14: 00000000000000ff R15: ffff888073fe2000
[ 49.020462][ T3633] ? udf_truncate_extents+0x848/0x930
[ 49.025848][ T3633] ? udf_discard_prealloc+0x770/0x770
[ 49.031213][ T3633] ? find_held_lock+0x2d/0x110
[ 49.035977][ T3633] ? udf_setsize+0x3da/0x1080
[ 49.040644][ T3633] ? do_raw_spin_lock+0x124/0x2b0
[ 49.045664][ T3633] ? rwlock_bug.part.0+0x90/0x90
[ 49.050600][ T3633] udf_setsize+0x3e2/0x1080
[ 49.055098][ T3633] ? current_time+0x76/0x2c0
[ 49.059681][ T3633] ? inode_bmap+0x7b0/0x7b0
[ 49.064182][ T3633] ? mark_held_locks+0x9f/0xe0
[ 49.068960][ T3633] ? ktime_get_coarse_real_ts64+0x1bb/0x200
[ 49.074860][ T3633] ? lockdep_hardirqs_on+0x7d/0x100
[ 49.080060][ T3633] ? ktime_get_coarse_real_ts64+0x1bb/0x200
[ 49.085965][ T3633] ? ktime_get_coarse_real_ts64+0x15e/0x200
[ 49.091867][ T3633] ? inode_newsize_ok+0x191/0x210
[ 49.096977][ T3633] ? setattr_prepare+0x13e/0xc60
[ 49.101906][ T3633] ? evm_inode_setattr+0x7e/0x710
[ 49.106930][ T3633] ? file_remove_privs+0x20/0x20
[ 49.111866][ T3633] udf_setattr+0x4a8/0x5e0
[ 49.116284][ T3633] ? security_inode_setattr+0x10c/0x150
[ 49.121978][ T3633] ? udf_file_write_iter+0x650/0x650
[ 49.127274][ T3633] notify_change+0xcd4/0x1440
[ 49.131960][ T3633] ? do_truncate+0x140/0x200
[ 49.136550][ T3633] do_truncate+0x140/0x200
[ 49.140974][ T3633] ? file_open_root+0x430/0x430
[ 49.145851][ T3633] do_sys_ftruncate+0x53a/0x730
[ 49.150730][ T3633] do_syscall_64+0x39/0xb0
[ 49.155150][ T3633] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 49.161040][ T3633] RIP: 0033:0x7fedebb6c919
[ 49.165447][ T3633] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 49.185060][ T3633] RSP: 002b:00007ffe1f955978 EFLAGS: 00000246 ORIG_RAX: 000000000000004d
[ 49.193473][ T3633] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fedebb6c919
[ 49.201437][ T3633] RDX: 00007fedebb6c919 RSI: 00000009ffffb000 RDI: 0000000000000005
[ 49.209400][ T3633] RBP: 00007fedebb2c1b0 R08: 0000000000000000 R09: 0000000000000000
[ 49.217359][ T3633] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fedebb2c240
[ 49.225321][ T3633] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 49.233300][ T3633]
[ 49.236960][ T3633] Kernel Offset: disabled
[ 49.241384][ T3633] Rebooting in 86400 seconds..