./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3970568276
<...>
DUID 00:04:b0:cd:33:f9:4f:8a:55:45:4d:7b:3b:ee:3a:71:f0:8b
forked to background, child pid 4659
[ 28.979741][ T4660] 8021q: adding VLAN 0 to HW filter on device bond0
[ 28.988893][ T4660] eql: remember to turn off Van-Jacobson compression on your slave devices
Starting sshd: OK
syzkaller
Warning: Permanently added '10.128.1.116' (ECDSA) to the list of known hosts.
execve("./syz-executor3970568276", ["./syz-executor3970568276"], 0x7ffe3aff4760 /* 10 vars */) = 0
brk(NULL) = 0x555557229000
brk(0x555557229c40) = 0x555557229c40
arch_prctl(ARCH_SET_FS, 0x555557229300) = 0
uname({sysname="Linux", nodename="syzkaller", ...}) = 0
readlink("/proc/self/exe", "/root/syz-executor3970568276", 4096) = 28
brk(0x55555724ac40) = 0x55555724ac40
brk(0x55555724b000) = 0x55555724b000
mprotect(0x7f5c86a29000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
memfd_create("syzkaller", 0) = 3
mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5c7e56a000
syzkaller login: [ 55.594790][ T4996] memfd_create() without MFD_EXEC nor MFD_NOEXEC_SEAL, pid=4996 'syz-executor397'
write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216
munmap(0x7f5c7e56a000, 16777216) = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
ioctl(4, LOOP_SET_FD, 3) = 0
close(3) = 0
mkdir("./file0", 0777) = 0
mount("/dev/loop0", "./file0", "jfs", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME|MS_LAZYTIME, "") = 0
openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
chdir("./file0") = 0
ioctl(4, LOOP_CLR_FD) = 0
close(4) = 0
open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4
[ 55.740200][ T4996] loop0: detected capacity change from 0 to 32768
[ 55.949182][ T4996] ================================================================================
[ 55.958688][ T4996] UBSAN: shift-out-of-bounds in fs/jfs/jfs_extent.c:314:16
[ 55.965954][ T4996] shift exponent -1 is negative
[ 55.970803][ T4996] CPU: 0 PID: 4996 Comm: syz-executor397 Not tainted 6.4.0-rc5-syzkaller-00024-g5f63595ebd82 #0
[ 55.981194][ T4996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023
[ 55.991414][ T4996] Call Trace:
[ 55.997716][ T4996]
[ 56.000630][ T4996] dump_stack_lvl+0x1e7/0x2d0
[ 56.005315][ T4996] ? nf_tcp_handle_invalid+0x650/0x650
[ 56.011024][ T4996] ? panic+0x770/0x770
[ 56.015169][ T4996] ? extAlloc+0x10a/0x1010
[ 56.019574][ T4996] __ubsan_handle_shift_out_of_bounds+0x3c3/0x420
[ 56.025981][ T4996] ? do_raw_spin_unlock+0x13b/0x8b0
[ 56.031168][ T4996] extAlloc+0xe53/0x1010
[ 56.035400][ T4996] ? jfs_ioc_trim+0x660/0x660
[ 56.040060][ T4996] ? clear_nonspinnable+0x60/0x60
[ 56.045071][ T4996] jfs_get_block+0x41b/0xe60
[ 56.049655][ T4996] ? jfs_dirty_inode+0x240/0x240
[ 56.054575][ T4996] ? _raw_spin_unlock+0x28/0x40
[ 56.059403][ T4996] ? folio_create_buffers+0x132/0x250
[ 56.064756][ T4996] __block_write_begin_int+0x548/0x1a50
[ 56.070292][ T4996] ? jfs_dirty_inode+0x240/0x240
[ 56.075212][ T4996] ? PageUptodate+0x290/0x290
[ 56.079867][ T4996] ? folio_test_hugetlb+0xa0/0x1d0
[ 56.084968][ T4996] ? pagecache_get_page+0xeb/0x220
[ 56.090061][ T4996] ? jfs_dirty_inode+0x240/0x240
[ 56.094979][ T4996] block_write_begin+0x9c/0x1f0
[ 56.099809][ T4996] ? jfs_write_begin+0x1a/0x70
[ 56.104561][ T4996] jfs_write_begin+0x31/0x70
[ 56.109138][ T4996] generic_perform_write+0x300/0x5e0
[ 56.114410][ T4996] ? generic_file_direct_write+0x460/0x460
[ 56.120199][ T4996] ? __file_remove_privs+0x640/0x640
[ 56.125465][ T4996] ? generic_write_checks+0x160/0x1c0
[ 56.130818][ T4996] __generic_file_write_iter+0x17a/0x400
[ 56.136433][ T4996] generic_file_write_iter+0xaf/0x310
[ 56.141798][ T4996] vfs_write+0x790/0xb20
[ 56.146029][ T4996] ? file_end_write+0x250/0x250
[ 56.150954][ T4996] ? lockdep_hardirqs_on+0x98/0x140
[ 56.156131][ T4996] ? __fdget_pos+0x265/0x2f0
[ 56.160700][ T4996] ksys_write+0x1a0/0x2c0
[ 56.165013][ T4996] ? __ia32_sys_read+0x90/0x90
[ 56.169759][ T4996] ? syscall_enter_from_user_mode+0x32/0x230
[ 56.175722][ T4996] ? syscall_enter_from_user_mode+0x8c/0x230
[ 56.181683][ T4996] do_syscall_64+0x41/0xc0
[ 56.186083][ T4996] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 56.191963][ T4996] RIP: 0033:0x7f5c869b6839
[ 56.196355][ T4996] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 56.215937][ T4996] RSP: 002b:00007ffd0dc37d68 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 56.224330][ T4996] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f5c869b6839
[ 56.232368][ T4996] RDX: 00000000200000c7 RSI: 00000000200000c0 RDI: 0000000000000004
[ 56.240317][ T4996] RBP: 00007f5c869760d0 R08: 0000000000000000 R09: 0000000000000000
[ 56.248274][ T4996] R10: 0000000000005eac R11: 0000000000000246 R12: 00007f5c86976160
[ 56.256230][ T4996] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 56.264194][ T4996]
[ 56.267491][ T4996] ================================================================================
[ 56.276835][ T4996] Kernel panic - not syncing: UBSAN: panic_on_warn set ...
[ 56.284022][ T4996] CPU: 0 PID: 4996 Comm: syz-executor397 Not tainted 6.4.0-rc5-syzkaller-00024-g5f63595ebd82 #0
[ 56.294408][ T4996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023
[ 56.304443][ T4996] Call Trace:
[ 56.307701][ T4996]
[ 56.310612][ T4996] dump_stack_lvl+0x1e7/0x2d0
[ 56.315285][ T4996] ? nf_tcp_handle_invalid+0x650/0x650
[ 56.320812][ T4996] ? panic+0x770/0x770
[ 56.324865][ T4996] ? vscnprintf+0x5d/0x80
[ 56.329180][ T4996] panic+0x30f/0x770
[ 56.333053][ T4996] ? check_panic_on_warn+0x21/0xa0
[ 56.338147][ T4996] ? __memcpy_flushcache+0x2b0/0x2b0
[ 56.343415][ T4996] ? dump_stack_lvl+0x253/0x2d0
[ 56.348252][ T4996] check_panic_on_warn+0x82/0xa0
[ 56.353171][ T4996] __ubsan_handle_shift_out_of_bounds+0x3e2/0x420
[ 56.359570][ T4996] ? do_raw_spin_unlock+0x13b/0x8b0
[ 56.364757][ T4996] extAlloc+0xe53/0x1010
[ 56.368990][ T4996] ? jfs_ioc_trim+0x660/0x660
[ 56.373650][ T4996] ? clear_nonspinnable+0x60/0x60
[ 56.378661][ T4996] jfs_get_block+0x41b/0xe60
[ 56.383239][ T4996] ? jfs_dirty_inode+0x240/0x240
[ 56.388172][ T4996] ? _raw_spin_unlock+0x28/0x40
[ 56.393016][ T4996] ? folio_create_buffers+0x132/0x250
[ 56.398381][ T4996] __block_write_begin_int+0x548/0x1a50
[ 56.403936][ T4996] ? jfs_dirty_inode+0x240/0x240
[ 56.408867][ T4996] ? PageUptodate+0x290/0x290
[ 56.413533][ T4996] ? folio_test_hugetlb+0xa0/0x1d0
[ 56.418641][ T4996] ? pagecache_get_page+0xeb/0x220
[ 56.423738][ T4996] ? jfs_dirty_inode+0x240/0x240
[ 56.428665][ T4996] block_write_begin+0x9c/0x1f0
[ 56.433504][ T4996] ? jfs_write_begin+0x1a/0x70
[ 56.438263][ T4996] jfs_write_begin+0x31/0x70
[ 56.442846][ T4996] generic_perform_write+0x300/0x5e0
[ 56.448129][ T4996] ? generic_file_direct_write+0x460/0x460
[ 56.453923][ T4996] ? __file_remove_privs+0x640/0x640
[ 56.459201][ T4996] ? generic_write_checks+0x160/0x1c0
[ 56.464566][ T4996] __generic_file_write_iter+0x17a/0x400
[ 56.470202][ T4996] generic_file_write_iter+0xaf/0x310
[ 56.475570][ T4996] vfs_write+0x790/0xb20
[ 56.479812][ T4996] ? file_end_write+0x250/0x250
[ 56.484666][ T4996] ? lockdep_hardirqs_on+0x98/0x140
[ 56.489860][ T4996] ? __fdget_pos+0x265/0x2f0
[ 56.494441][ T4996] ksys_write+0x1a0/0x2c0
[ 56.498766][ T4996] ? __ia32_sys_read+0x90/0x90
[ 56.503526][ T4996] ? syscall_enter_from_user_mode+0x32/0x230
[ 56.509500][ T4996] ? syscall_enter_from_user_mode+0x8c/0x230
[ 56.515473][ T4996] do_syscall_64+0x41/0xc0
[ 56.519886][ T4996] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 56.525772][ T4996] RIP: 0033:0x7f5c869b6839
[ 56.530188][ T4996] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 56.549781][ T4996] RSP: 002b:00007ffd0dc37d68 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 56.558185][ T4996] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f5c869b6839
[ 56.566144][ T4996] RDX: 00000000200000c7 RSI: 00000000200000c0 RDI: 0000000000000004
[ 56.574367][ T4996] RBP: 00007f5c869760d0 R08: 0000000000000000 R09: 0000000000000000
[ 56.582325][ T4996] R10: 0000000000005eac R11: 0000000000000246 R12: 00007f5c86976160
[ 56.590375][ T4996] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 56.598438][ T4996]
[ 56.601595][ T4996] Kernel Offset: disabled
[ 56.605989][ T4996] Rebooting in 86400 seconds..