./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2682407234 <...> Warning: Permanently added '10.128.1.31' (ED25519) to the list of known hosts. execve("./syz-executor2682407234", ["./syz-executor2682407234"], 0x7ffc41733fb0 /* 10 vars */) = 0 brk(NULL) = 0x5555564ec000 brk(0x5555564ecd00) = 0x5555564ecd00 arch_prctl(ARCH_SET_FS, 0x5555564ec380) = 0 set_tid_address(0x5555564ec650) = 5010 set_robust_list(0x5555564ec660, 24) = 0 rseq(0x5555564ecca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor2682407234", 4096) = 28 getrandom("\x4a\x6c\xae\x19\x40\x28\x12\x02", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x5555564ecd00 brk(0x55555650dd00) = 0x55555650dd00 brk(0x55555650e000) = 0x55555650e000 mprotect(0x7f671c129000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 memfd_create("syzkaller", 0) = 3 mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f6713c71000 [ 55.438183][ T5010] memfd_create() without MFD_EXEC nor MFD_NOEXEC_SEAL, pid=5010 'syz-executor268' write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 32394836) = 32394836 munmap(0x7f6713c71000, 32394836) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 ioctl(4, LOOP_SET_FD, 3) = 0 close(3) = 0 mkdir("./mnt", 0777) = 0 [ 55.704213][ T5010] loop0: detected capacity change from 0 to 63271 [ 55.715440][ T5010] F2FS-fs (loop0): Mismatch start address, segment0(512) cp_blkaddr(605) [ 55.724043][ T5010] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 55.734267][ T5010] F2FS-fs (loop0): invalid crc value [ 55.743249][ T5010] F2FS-fs (loop0): Found nat_bits in checkpoint [ 55.767384][ T5010] ================================================================================ [ 55.776752][ T5010] UBSAN: array-index-out-of-bounds in fs/f2fs/f2fs.h:3275:19 [ 55.784233][ T5010] index 1409 is out of range for type '__le32[923]' (aka 'unsigned int[923]') [ 55.793164][ T5010] CPU: 1 PID: 5010 Comm: syz-executor268 Not tainted 6.5.0-rc2-syzkaller-00019-g74f1456c4a5f #0 [ 55.803599][ T5010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 55.813719][ T5010] Call Trace: [ 55.817015][ T5010] [ 55.820000][ T5010] dump_stack_lvl+0x1e7/0x2d0 [ 55.824711][ T5010] ? nf_tcp_handle_invalid+0x650/0x650 [ 55.830164][ T5010] ? panic+0x770/0x770 [ 55.834231][ T5010] ? make_kgid+0x1f6/0x6f0 [ 55.838641][ T5010] __ubsan_handle_out_of_bounds+0x11c/0x150 [ 55.844522][ T5010] ? set_nlink+0x5f/0x170 [ 55.848840][ T5010] f2fs_iget+0x4730/0x48b0 [ 55.853258][ T5010] f2fs_fill_super+0x640e/0x80c0 [ 55.858231][ T5010] ? kill_f2fs_super+0x3d0/0x3d0 [ 55.863171][ T5010] ? set_blocksize+0x1e2/0x390 [ 55.867936][ T5010] ? sb_set_blocksize+0x99/0x100 [ 55.872879][ T5010] mount_bdev+0x276/0x3b0 [ 55.877204][ T5010] ? kill_f2fs_super+0x3d0/0x3d0 [ 55.882135][ T5010] legacy_get_tree+0xef/0x190 [ 55.886803][ T5010] ? trace_raw_output_f2fs__rw_end+0x110/0x110 [ 55.892977][ T5010] vfs_get_tree+0x8c/0x270 [ 55.897394][ T5010] do_new_mount+0x28f/0xae0 [ 55.902010][ T5010] ? do_move_mount_old+0x170/0x170 [ 55.907218][ T5010] ? user_path_at_empty+0x12f/0x180 [ 55.912409][ T5010] __se_sys_mount+0x2d9/0x3c0 [ 55.917171][ T5010] ? __x64_sys_mount+0xc0/0xc0 [ 55.921935][ T5010] ? syscall_enter_from_user_mode+0x32/0x230 [ 55.927999][ T5010] ? __x64_sys_mount+0x20/0xc0 [ 55.932844][ T5010] do_syscall_64+0x41/0xc0 [ 55.937255][ T5010] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 55.943145][ T5010] RIP: 0033:0x7f671c0af8ba [ 55.947555][ T5010] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 5e 04 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 55.967161][ T5010] RSP: 002b:00007ffd507e4508 EFLAGS: 00000286 ORIG_RAX: 00000000000000a5 [ 55.975571][ T5010] RAX: ffffffffffffffda RBX: 00007ffd507e4520 RCX: 00007f671c0af8ba [ 55.983760][ T5010] RDX: 0000000020000000 RSI: 0000000020000040 RDI: 00007ffd507e4520 [ 55.991725][ T5010] RBP: 0000000000000004 R08: 00007ffd507e4560 R09: 0000000000007e87 [ 55.999689][ T5010] R10: 0000000000000010 R11: 0000000000000286 R12: 0000000000000010 [ 56.007661][ T5010] R13: 00007ffd507e4560 R14: 0000000000000003 R15: 0000000001ee4e54 [ 56.015825][ T5010] [ 56.019671][ T5010] ================================================================================ [ 56.029197][ T5010] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 56.036651][ T5010] CPU: 1 PID: 5010 Comm: syz-executor268 Not tainted 6.5.0-rc2-syzkaller-00019-g74f1456c4a5f #0 [ 56.047056][ T5010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 56.057105][ T5010] Call Trace: [ 56.060470][ T5010] [ 56.063568][ T5010] dump_stack_lvl+0x1e7/0x2d0 [ 56.068245][ T5010] ? nf_tcp_handle_invalid+0x650/0x650 [ 56.073701][ T5010] ? panic+0x770/0x770 [ 56.077862][ T5010] ? vscnprintf+0x5d/0x80 [ 56.082185][ T5010] panic+0x30f/0x770 [ 56.086946][ T5010] ? check_panic_on_warn+0x21/0xa0 [ 56.092060][ T5010] ? __memcpy_flushcache+0x2b0/0x2b0 [ 56.097338][ T5010] ? dump_stack_lvl+0x253/0x2d0 [ 56.102185][ T5010] ? make_kgid+0x1f6/0x6f0 [ 56.106606][ T5010] check_panic_on_warn+0x82/0xa0 [ 56.111712][ T5010] __ubsan_handle_out_of_bounds+0x13c/0x150 [ 56.117606][ T5010] ? set_nlink+0x5f/0x170 [ 56.121932][ T5010] f2fs_iget+0x4730/0x48b0 [ 56.126797][ T5010] f2fs_fill_super+0x640e/0x80c0 [ 56.131782][ T5010] ? kill_f2fs_super+0x3d0/0x3d0 [ 56.136714][ T5010] ? set_blocksize+0x1e2/0x390 [ 56.141565][ T5010] ? sb_set_blocksize+0x99/0x100 [ 56.146497][ T5010] mount_bdev+0x276/0x3b0 [ 56.150822][ T5010] ? kill_f2fs_super+0x3d0/0x3d0 [ 56.155752][ T5010] legacy_get_tree+0xef/0x190 [ 56.160426][ T5010] ? trace_raw_output_f2fs__rw_end+0x110/0x110 [ 56.166571][ T5010] vfs_get_tree+0x8c/0x270 [ 56.170979][ T5010] do_new_mount+0x28f/0xae0 [ 56.175484][ T5010] ? do_move_mount_old+0x170/0x170 [ 56.180588][ T5010] ? user_path_at_empty+0x12f/0x180 [ 56.185779][ T5010] __se_sys_mount+0x2d9/0x3c0 [ 56.190448][ T5010] ? __x64_sys_mount+0xc0/0xc0 [ 56.195214][ T5010] ? syscall_enter_from_user_mode+0x32/0x230 [ 56.201185][ T5010] ? __x64_sys_mount+0x20/0xc0 [ 56.205944][ T5010] do_syscall_64+0x41/0xc0 [ 56.210357][ T5010] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 56.216246][ T5010] RIP: 0033:0x7f671c0af8ba [ 56.220653][ T5010] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 5e 04 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 56.240249][ T5010] RSP: 002b:00007ffd507e4508 EFLAGS: 00000286 ORIG_RAX: 00000000000000a5 [ 56.248655][ T5010] RAX: ffffffffffffffda RBX: 00007ffd507e4520 RCX: 00007f671c0af8ba [ 56.256617][ T5010] RDX: 0000000020000000 RSI: 0000000020000040 RDI: 00007ffd507e4520 [ 56.264665][ T5010] RBP: 0000000000000004 R08: 00007ffd507e4560 R09: 0000000000007e87 [ 56.272719][ T5010] R10: 0000000000000010 R11: 0000000000000286 R12: 0000000000000010 [ 56.280679][ T5010] R13: 00007ffd507e4560 R14: 0000000000000003 R15: 0000000001ee4e54 [ 56.288652][ T5010] [ 56.291844][ T5010] Kernel Offset: disabled [ 56.296231][ T5010] Rebooting in 86400 seconds..