./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1312943327 <...> Warning: Permanently added '10.128.0.91' (ECDSA) to the list of known hosts. execve("./syz-executor1312943327", ["./syz-executor1312943327"], 0x7ffebb8de560 /* 10 vars */) = 0 brk(NULL) = 0x555555655000 brk(0x555555655c40) = 0x555555655c40 arch_prctl(ARCH_SET_FS, 0x555555655300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor1312943327", 4096) = 28 brk(0x555555676c40) = 0x555555676c40 brk(0x555555677000) = 0x555555677000 mprotect(0x7fbfc4e31000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555556555d0) = 4998 ./strace-static-x86_64: Process 4998 attached [pid 4998] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 4998] setpgid(0, 0) = 0 [pid 4998] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 4998] write(3, "1000", 4) = 4 [pid 4998] close(3) = 0 [pid 4998] memfd_create("syzkaller", 0) = 3 [pid 4998] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fbfbc957000 [pid 4998] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 65536) = 65536 [pid 4998] munmap(0x7fbfbc957000, 65536) = 0 [pid 4998] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 4998] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 4998] close(3) = 0 [pid 4998] mkdir("./file1", 0777) = 0 syzkaller login: [ 66.762584][ T4998] memfd_create() without MFD_EXEC nor MFD_NOEXEC_SEAL, pid=4998 'syz-executor131' [ 66.783955][ T4998] loop0: detected capacity change from 0 to 128 [ 66.798201][ T4998] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [pid 4998] mount("/dev/loop0", "./file1", "udf", 0, "") = 0 [pid 4998] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 4998] chdir("./file1") = 0 [pid 4998] ioctl(4, LOOP_CLR_FD) = 0 [pid 4998] close(4) = 0 [pid 4998] open("./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_LARGEFILE|O_NOFOLLOW|O_NOATIME, 000) = 4 [pid 4998] memfd_create("syzkaller", 0) = 5 [pid 4998] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fbfb4567000 [pid 4998] write(5, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x10\x01\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x01\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00\x78\x5f\xaa\x3b\xd7\x0e\xce\x68\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152 [pid 4998] munmap(0x7fbfb4567000, 2097152) = 0 [ 66.810827][ T4998] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [pid 4998] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 6 [pid 4998] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 4998] ioctl(6, LOOP_CLR_FD) = 0 [pid 4998] ioctl(6, LOOP_SET_FD, 5) = -1 EBUSY (Device or resource busy) [pid 4998] close(6) = 0 [pid 4998] close(5) = 0 [pid 4998] mount("./file1", "./bus", NULL, MS_BIND, NULL) = 0 [pid 4998] open("./bus", O_RDWR|O_NOCTTY|O_SYNC|O_NOATIME|0x3c) = 5 [ 66.897961][ T4998] UDF-fs: error (device loop0): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 241 marked as free, partition length is 32) [ 66.912833][ T4998] ------------[ cut here ]------------ [ 66.918412][ T4998] WARNING: CPU: 0 PID: 4998 at fs/udf/truncate.c:208 udf_truncate_extents+0x10a8/0x12c0 [ 66.928391][ T4998] Modules linked in: [ 66.932362][ T4998] CPU: 0 PID: 4998 Comm: syz-executor131 Not tainted 6.4.0-rc5-syzkaller-00178-g33f2b5785a2b #0 [ 66.942847][ T4998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 66.953061][ T4998] RIP: 0010:udf_truncate_extents+0x10a8/0x12c0 [ 66.959263][ T4998] Code: 0f 85 1e 02 00 00 44 89 f0 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 25 db 89 fe 41 be fb ff ff ff eb 86 e8 18 db 89 fe <0f> 0b eb 87 48 8d 8c 24 60 01 00 00 80 e1 07 80 c1 03 38 c1 0f 8c [ 66.978970][ T4998] RSP: 0018:ffffc900039af840 EFLAGS: 00010293 [ 66.985103][ T4998] RAX: ffffffff8301a428 RBX: dffffc0000000000 RCX: ffff88802cefd940 [ 66.993132][ T4998] RDX: 0000000000000000 RSI: 000000000000000a RDI: 0000000000000000 [ 67.001265][ T4998] RBP: ffffc900039afa38 R08: ffffffff83019825 R09: ffffffff82ff71b4 [ 67.009265][ T4998] R10: 0000000000000002 R11: ffff88802cefd940 R12: ffff888028a10018 [ 67.017297][ T4998] R13: 000000000000000a R14: 0000000000000000 R15: 00000000000000ff [ 67.025355][ T4998] FS: 0000555555655300(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 67.034448][ T4998] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 67.041103][ T4998] CR2: 00007fbfc4e35138 CR3: 000000002d157000 CR4: 00000000003506f0 [ 67.049123][ T4998] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 67.057164][ T4998] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 67.065207][ T4998] Call Trace: [ 67.068520][ T4998] [ 67.071533][ T4998] ? __warn+0x162/0x4a0 [ 67.075725][ T4998] ? udf_truncate_extents+0x10a8/0x12c0 [ 67.081338][ T4998] ? report_bug+0x2b3/0x500 [ 67.085872][ T4998] ? udf_truncate_extents+0x10a8/0x12c0 [ 67.091489][ T4998] ? handle_bug+0x3d/0x70 [ 67.095846][ T4998] ? exc_invalid_op+0x1a/0x50 [ 67.100581][ T4998] ? asm_exc_invalid_op+0x1a/0x20 [ 67.105666][ T4998] ? udf_current_aext+0x324/0x9d0 [ 67.110765][ T4998] ? udf_truncate_extents+0x4a5/0x12c0 [ 67.116265][ T4998] ? udf_truncate_extents+0x10a8/0x12c0 [ 67.121895][ T4998] ? udf_truncate_extents+0x10a8/0x12c0 [ 67.127491][ T4998] ? udf_discard_prealloc+0x7a0/0x7a0 [ 67.132933][ T4998] ? udf_write_failed+0x16a/0x1b0 [ 67.137995][ T4998] ? do_raw_spin_lock+0x14d/0x3a0 [ 67.143084][ T4998] ? __lock_acquire+0x2070/0x2070 [ 67.148164][ T4998] ? do_raw_spin_unlock+0x13b/0x8b0 [ 67.153433][ T4998] udf_write_failed+0x172/0x1b0 [ 67.158319][ T4998] udf_write_begin+0x16d/0x190 [ 67.163165][ T4998] generic_perform_write+0x300/0x5e0 [ 67.168490][ T4998] ? generic_file_direct_write+0x460/0x460 [ 67.174368][ T4998] ? __file_remove_privs+0x640/0x640 [ 67.179724][ T4998] ? up_write+0x1a9/0x580 [ 67.184094][ T4998] __generic_file_write_iter+0x17a/0x400 [ 67.189823][ T4998] udf_file_write_iter+0x2fc/0x660 [ 67.194975][ T4998] vfs_write+0x790/0xb20 [ 67.199247][ T4998] ? file_end_write+0x250/0x250 [ 67.204436][ T4998] ? lockdep_hardirqs_on+0x98/0x140 [ 67.209696][ T4998] ? __fdget_pos+0x265/0x2f0 [ 67.214437][ T4998] ksys_write+0x1a0/0x2c0 [ 67.218813][ T4998] ? __ia32_sys_read+0x90/0x90 [ 67.223638][ T4998] ? syscall_enter_from_user_mode+0x32/0x230 [ 67.229683][ T4998] ? syscall_enter_from_user_mode+0x8c/0x230 [ 67.235703][ T4998] do_syscall_64+0x41/0xc0 [ 67.240217][ T4998] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 67.246158][ T4998] RIP: 0033:0x7fbfc4da43d9 [ 67.250658][ T4998] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 67.270347][ T4998] RSP: 002b:00007fff2ae4ae18 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 67.278777][ T4998] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fbfc4da43d9 [ 67.286808][ T4998] RDX: 000000000208e24b RSI: 0000000020000000 RDI: 0000000000000005 [ 67.294856][ T4998] RBP: 0000000000000000 R08: 0000000020000180 R09: 00007fbfc4e31ec0 [ 67.302908][ T4998] R10: 0000000020000180 R11: 0000000000000246 R12: 00007fff2ae4ae40 [ 67.310938][ T4998] R13: 0000000000000000 R14: 431bde82d7b634db R15: 0000000000000000 [ 67.318961][ T4998] [ 67.322066][ T4998] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 67.329385][ T4998] CPU: 0 PID: 4998 Comm: syz-executor131 Not tainted 6.4.0-rc5-syzkaller-00178-g33f2b5785a2b #0 [ 67.339819][ T4998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023 [ 67.349912][ T4998] Call Trace: [ 67.353218][ T4998] [ 67.356175][ T4998] dump_stack_lvl+0x1e7/0x2d0 [ 67.360905][ T4998] ? nf_tcp_handle_invalid+0x650/0x650 [ 67.366397][ T4998] ? panic+0x770/0x770 [ 67.370488][ T4998] ? vscnprintf+0x5d/0x80 [ 67.374849][ T4998] panic+0x30f/0x770 [ 67.378775][ T4998] ? __warn+0x171/0x4a0 [ 67.383070][ T4998] ? __memcpy_flushcache+0x2b0/0x2b0 [ 67.388435][ T4998] __warn+0x314/0x4a0 [ 67.392441][ T4998] ? udf_truncate_extents+0x10a8/0x12c0 [ 67.398028][ T4998] report_bug+0x2b3/0x500 [ 67.402401][ T4998] ? udf_truncate_extents+0x10a8/0x12c0 [ 67.407995][ T4998] handle_bug+0x3d/0x70 [ 67.412156][ T4998] exc_invalid_op+0x1a/0x50 [ 67.416670][ T4998] asm_exc_invalid_op+0x1a/0x20 [ 67.421540][ T4998] RIP: 0010:udf_truncate_extents+0x10a8/0x12c0 [ 67.427762][ T4998] Code: 0f 85 1e 02 00 00 44 89 f0 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 25 db 89 fe 41 be fb ff ff ff eb 86 e8 18 db 89 fe <0f> 0b eb 87 48 8d 8c 24 60 01 00 00 80 e1 07 80 c1 03 38 c1 0f 8c [ 67.447385][ T4998] RSP: 0018:ffffc900039af840 EFLAGS: 00010293 [ 67.453471][ T4998] RAX: ffffffff8301a428 RBX: dffffc0000000000 RCX: ffff88802cefd940 [ 67.461455][ T4998] RDX: 0000000000000000 RSI: 000000000000000a RDI: 0000000000000000 [ 67.469459][ T4998] RBP: ffffc900039afa38 R08: ffffffff83019825 R09: ffffffff82ff71b4 [ 67.477449][ T4998] R10: 0000000000000002 R11: ffff88802cefd940 R12: ffff888028a10018 [ 67.485429][ T4998] R13: 000000000000000a R14: 0000000000000000 R15: 00000000000000ff [ 67.493414][ T4998] ? udf_current_aext+0x324/0x9d0 [ 67.498456][ T4998] ? udf_truncate_extents+0x4a5/0x12c0 [ 67.503931][ T4998] ? udf_truncate_extents+0x10a8/0x12c0 [ 67.509529][ T4998] ? udf_discard_prealloc+0x7a0/0x7a0 [ 67.514919][ T4998] ? udf_write_failed+0x16a/0x1b0 [ 67.519960][ T4998] ? do_raw_spin_lock+0x14d/0x3a0 [ 67.525008][ T4998] ? __lock_acquire+0x2070/0x2070 [ 67.530087][ T4998] ? do_raw_spin_unlock+0x13b/0x8b0 [ 67.535333][ T4998] udf_write_failed+0x172/0x1b0 [ 67.540224][ T4998] udf_write_begin+0x16d/0x190 [ 67.545011][ T4998] generic_perform_write+0x300/0x5e0 [ 67.550328][ T4998] ? generic_file_direct_write+0x460/0x460 [ 67.556149][ T4998] ? __file_remove_privs+0x640/0x640 [ 67.561460][ T4998] ? up_write+0x1a9/0x580 [ 67.565811][ T4998] __generic_file_write_iter+0x17a/0x400 [ 67.571466][ T4998] udf_file_write_iter+0x2fc/0x660 [ 67.576599][ T4998] vfs_write+0x790/0xb20 [ 67.580873][ T4998] ? file_end_write+0x250/0x250 [ 67.585750][ T4998] ? lockdep_hardirqs_on+0x98/0x140 [ 67.591007][ T4998] ? __fdget_pos+0x265/0x2f0 [ 67.595624][ T4998] ksys_write+0x1a0/0x2c0 [ 67.600003][ T4998] ? __ia32_sys_read+0x90/0x90 [ 67.604803][ T4998] ? syscall_enter_from_user_mode+0x32/0x230 [ 67.610821][ T4998] ? syscall_enter_from_user_mode+0x8c/0x230 [ 67.616833][ T4998] do_syscall_64+0x41/0xc0 [ 67.621277][ T4998] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 67.627193][ T4998] RIP: 0033:0x7fbfc4da43d9 [ 67.631623][ T4998] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 67.651241][ T4998] RSP: 002b:00007fff2ae4ae18 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 67.659671][ T4998] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fbfc4da43d9 [ 67.667664][ T4998] RDX: 000000000208e24b RSI: 0000000020000000 RDI: 0000000000000005 [ 67.675644][ T4998] RBP: 0000000000000000 R08: 0000000020000180 R09: 00007fbfc4e31ec0 [ 67.683622][ T4998] R10: 0000000020000180 R11: 0000000000000246 R12: 00007fff2ae4ae40 [ 67.691600][ T4998] R13: 0000000000000000 R14: 431bde82d7b634db R15: 0000000000000000 [ 67.699594][ T4998] [ 67.702839][ T4998] Kernel Offset: disabled [ 67.707255][ T4998] Rebooting in 86400 seconds..