./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor4126765519
<...>
Warning: Permanently added '10.128.1.68' (ECDSA) to the list of known hosts.
execve("./syz-executor4126765519", ["./syz-executor4126765519"], 0x7ffeeb723780 /* 10 vars */) = 0
brk(NULL) = 0x555555cf1000
brk(0x555555cf1c40) = 0x555555cf1c40
arch_prctl(ARCH_SET_FS, 0x555555cf1300) = 0
uname({sysname="Linux", nodename="syzkaller", ...}) = 0
readlink("/proc/self/exe", "/root/syz-executor4126765519", 4096) = 28
brk(0x555555d12c40) = 0x555555d12c40
brk(0x555555d13000) = 0x555555d13000
mprotect(0x7f3233299000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
creat("./file1", 000) = 3
memfd_create("syzkaller", 0) = 4
mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f322add6000
write(4, "\xb5\x84\x31\x7b\xb6\x84\x31\x7b\xb7\x84\x31\x7b\xb8\x84\x31\x7b\xb9\x84\x31\x7b\xba\x84\x31\x7b\xbb\x84\x31\x7b\xbc\x84\x31\x7b\xbd\x84\x31\x7b\xbe\x84\x31\x7b\xbf\x84\x31\x7b\xc0\x84\x31\x7b\xc1\x84\x31\x7b\xc2\x84\x31\x7b\xc3\x84\x31\x7b\xc4\x84\x31\x7b\xc5\x84\x31\x7b\xc6\x84\x31\x7b\xc7\x84\x31\x7b\xc8\x84\x31\x7b\xc9\x84\x31\x7b\xca\x84\x31\x7b\xcb\x84\x31\x7b\xcc\x84\x31\x7b\xcd\x84\x31\x7b"..., 65536) = 65536
munmap(0x7f322add6000, 65536) = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 5
ioctl(5, LOOP_SET_FD, 4) = 0
close(4) = 0
mkdir("./file1", 0777) = -1 EEXIST (File exists)
mount("/dev/loop0", "./file1", "sysv", 0, "\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\x31\x38\x34\x34\x36\x37\x34\x34\x30\x37\x33\x37\x30\x39\x35\x35\x31\x36\x31\x35\xff\xff\xff\xff\x30\x78\x66\x66\x66\x66\x66\x66\x66\x66\x66\x66\x66\x66\x66\x66\x66\x66\xff\xff") = 0
openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = -1 ENOTDIR (Not a directory)
ioctl(5, LOOP_CLR_FD) = 0
close(5) = 0
syzkaller login: [ 72.784893][ T4996] memfd_create() without MFD_EXEC nor MFD_NOEXEC_SEAL, pid=4996 'syz-executor412'
[ 72.801941][ T4996] loop0: detected capacity change from 0 to 128
[ 72.813502][ T4996] VFS: Found a Xenix FS (block size = 512) on device loop0
open("./file1", O_WRONLY|O_TRUNC) = 4
[ 72.834084][ T4996] sysv_free_block: trying to free block not in datazone
[ 72.844313][ T4996] ==================================================================
[ 72.852432][ T4996] BUG: KASAN: null-ptr-deref in get_block+0x567/0x16a0
[ 72.859346][ T4996] Write of size 8 at addr 0000000000000000 by task syz-executor412/4996
[ 72.867878][ T4996]
[ 72.870205][ T4996] CPU: 1 PID: 4996 Comm: syz-executor412 Not tainted 6.4.0-rc2-syzkaller-00018-g4d6d4c7f541d #0
[ 72.880660][ T4996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/28/2023
[ 72.890731][ T4996] Call Trace:
[ 72.894014][ T4996]
[ 72.896946][ T4996] dump_stack_lvl+0x1e7/0x2d0
[ 72.901667][ T4996] ? nf_tcp_handle_invalid+0x650/0x650
[ 72.907177][ T4996] ? panic+0x770/0x770
[ 72.911255][ T4996] ? _printk+0xd5/0x120
[ 72.915423][ T4996] print_report+0xe6/0x540
[ 72.919850][ T4996] ? __virt_addr_valid+0x58/0x2e0
[ 72.924893][ T4996] ? get_block+0x567/0x16a0
[ 72.929428][ T4996] kasan_report+0x176/0x1b0
[ 72.933956][ T4996] ? get_block+0x567/0x16a0
[ 72.938466][ T4996] kasan_check_range+0x283/0x290
[ 72.943452][ T4996] get_block+0x567/0x16a0
[ 72.947809][ T4996] ? sysv_truncate+0x1050/0x1050
[ 72.952885][ T4996] ? _raw_spin_unlock+0x28/0x40
[ 72.957764][ T4996] ? folio_create_buffers+0x132/0x250
[ 72.963152][ T4996] __block_write_begin_int+0x548/0x1a50
[ 72.968716][ T4996] ? sysv_truncate+0x1050/0x1050
[ 72.973662][ T4996] ? PageUptodate+0x290/0x290
[ 72.978344][ T4996] ? folio_test_hugetlb+0xa0/0x1d0
[ 72.983469][ T4996] ? pagecache_get_page+0xeb/0x220
[ 72.988602][ T4996] ? sysv_truncate+0x1050/0x1050
[ 72.993553][ T4996] block_write_begin+0x9c/0x1f0
[ 72.998416][ T4996] ? sysv_write_begin+0x1a/0x70
[ 73.003298][ T4996] sysv_write_begin+0x31/0x70
[ 73.008010][ T4996] generic_perform_write+0x300/0x5e0
[ 73.013310][ T4996] ? generic_file_direct_write+0x460/0x460
[ 73.019124][ T4996] ? __file_remove_privs+0x640/0x640
[ 73.024427][ T4996] ? generic_write_checks+0x160/0x1c0
[ 73.029833][ T4996] __generic_file_write_iter+0x17a/0x400
[ 73.035492][ T4996] generic_file_write_iter+0xaf/0x310
[ 73.040989][ T4996] do_iter_write+0x7b1/0xcb0
[ 73.045642][ T4996] ? vfs_iter_write+0xa0/0xa0
[ 73.050397][ T4996] ? rcu_read_lock_any_held+0xb7/0x160
[ 73.055918][ T4996] do_pwritev+0x21a/0x360
[ 73.060292][ T4996] ? do_preadv+0x350/0x350
[ 73.064773][ T4996] ? do_notify_parent+0xf50/0xf50
[ 73.069926][ T4996] ? print_irqtrace_events+0x220/0x220
[ 73.075432][ T4996] ? syscall_enter_from_user_mode+0x32/0x230
[ 73.081436][ T4996] ? syscall_enter_from_user_mode+0x8c/0x230
[ 73.087600][ T4996] do_syscall_64+0x41/0xc0
[ 73.092211][ T4996] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 73.098121][ T4996] RIP: 0033:0x7f3233222b19
[ 73.102554][ T4996] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 73.122177][ T4996] RSP: 002b:00007ffecf15f268 EFLAGS: 00000246 ORIG_RAX: 0000000000000128
[ 73.130601][ T4996] RAX: ffffffffffffffda RBX: 0031656c69662f2e RCX: 00007f3233222b19
[ 73.138584][ T4996] RDX: 0000000000000005 RSI: 0000000020000480 RDI: 0000000000000004
[ 73.146573][ T4996] RBP: 00007f32331e2150 R08: 0000000000000000 R09: 0000000000000000
[ 73.154555][ T4996] R10: 0000000000007fff R11: 0000000000000246 R12: 00007f32331e21e0
[ 73.162533][ T4996] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 73.170515][ T4996]
[ 73.173535][ T4996] ==================================================================
[ 73.181974][ T4996] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 73.189212][ T4996] CPU: 1 PID: 4996 Comm: syz-executor412 Not tainted 6.4.0-rc2-syzkaller-00018-g4d6d4c7f541d #0
[ 73.199676][ T4996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/28/2023
[ 73.209744][ T4996] Call Trace:
[ 73.213076][ T4996]
[ 73.216050][ T4996] dump_stack_lvl+0x1e7/0x2d0
[ 73.220755][ T4996] ? nf_tcp_handle_invalid+0x650/0x650
[ 73.226238][ T4996] ? panic+0x770/0x770
[ 73.230323][ T4996] ? preempt_schedule_common+0x83/0xc0
[ 73.235811][ T4996] ? vscnprintf+0x5d/0x80
[ 73.240159][ T4996] panic+0x30f/0x770
[ 73.244076][ T4996] ? check_panic_on_warn+0x21/0xa0
[ 73.249208][ T4996] ? __memcpy_flushcache+0x2b0/0x2b0
[ 73.254520][ T4996] ? _raw_spin_unlock_irqrestore+0x12c/0x140
[ 73.260542][ T4996] ? _raw_spin_unlock+0x40/0x40
[ 73.265424][ T4996] ? print_report+0xe6/0x540
[ 73.270039][ T4996] check_panic_on_warn+0x82/0xa0
[ 73.275069][ T4996] ? get_block+0x567/0x16a0
[ 73.279613][ T4996] end_report+0x63/0x110
[ 73.283875][ T4996] kasan_report+0x183/0x1b0
[ 73.288407][ T4996] ? get_block+0x567/0x16a0
[ 73.293050][ T4996] kasan_check_range+0x283/0x290
[ 73.298024][ T4996] get_block+0x567/0x16a0
[ 73.302385][ T4996] ? sysv_truncate+0x1050/0x1050
[ 73.307355][ T4996] ? _raw_spin_unlock+0x28/0x40
[ 73.312235][ T4996] ? folio_create_buffers+0x132/0x250
[ 73.317625][ T4996] __block_write_begin_int+0x548/0x1a50
[ 73.323390][ T4996] ? sysv_truncate+0x1050/0x1050
[ 73.328372][ T4996] ? PageUptodate+0x290/0x290
[ 73.333077][ T4996] ? folio_test_hugetlb+0xa0/0x1d0
[ 73.338214][ T4996] ? pagecache_get_page+0xeb/0x220
[ 73.343339][ T4996] ? sysv_truncate+0x1050/0x1050
[ 73.348294][ T4996] block_write_begin+0x9c/0x1f0
[ 73.353163][ T4996] ? sysv_write_begin+0x1a/0x70
[ 73.358211][ T4996] sysv_write_begin+0x31/0x70
[ 73.362961][ T4996] generic_perform_write+0x300/0x5e0
[ 73.368269][ T4996] ? generic_file_direct_write+0x460/0x460
[ 73.374092][ T4996] ? __file_remove_privs+0x640/0x640
[ 73.379401][ T4996] ? generic_write_checks+0x160/0x1c0
[ 73.384800][ T4996] __generic_file_write_iter+0x17a/0x400
[ 73.390465][ T4996] generic_file_write_iter+0xaf/0x310
[ 73.395859][ T4996] do_iter_write+0x7b1/0xcb0
[ 73.400489][ T4996] ? vfs_iter_write+0xa0/0xa0
[ 73.405187][ T4996] ? rcu_read_lock_any_held+0xb7/0x160
[ 73.410680][ T4996] do_pwritev+0x21a/0x360
[ 73.415031][ T4996] ? do_preadv+0x350/0x350
[ 73.419466][ T4996] ? do_notify_parent+0xf50/0xf50
[ 73.424513][ T4996] ? print_irqtrace_events+0x220/0x220
[ 73.430007][ T4996] ? syscall_enter_from_user_mode+0x32/0x230
[ 73.436010][ T4996] ? syscall_enter_from_user_mode+0x8c/0x230
[ 73.442015][ T4996] do_syscall_64+0x41/0xc0
[ 73.446456][ T4996] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 73.452380][ T4996] RIP: 0033:0x7f3233222b19
[ 73.456812][ T4996] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 73.476441][ T4996] RSP: 002b:00007ffecf15f268 EFLAGS: 00000246 ORIG_RAX: 0000000000000128
[ 73.484960][ T4996] RAX: ffffffffffffffda RBX: 0031656c69662f2e RCX: 00007f3233222b19
[ 73.493124][ T4996] RDX: 0000000000000005 RSI: 0000000020000480 RDI: 0000000000000004
[ 73.501112][ T4996] RBP: 00007f32331e2150 R08: 0000000000000000 R09: 0000000000000000
[ 73.509098][ T4996] R10: 0000000000007fff R11: 0000000000000246 R12: 00007f32331e21e0
[ 73.517085][ T4996] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 73.525252][ T4996]
[ 73.528579][ T4996] Kernel Offset: disabled
[ 73.533010][ T4996] Rebooting in 86400 seconds..