./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2879245846
<...>
DUID 00:04:ab:21:30:2a:f6:ad:63:06:1d:ce:9a:68:94:64:4e:95
forked to background, child pid 4667
[ 24.339393][ T4668] 8021q: adding VLAN 0 to HW filter on device bond0
[ 24.350352][ T4668] eql: remember to turn off Van-Jacobson compression on your slave devices
Starting sshd: OK
syzkaller
Warning: Permanently added '10.128.0.178' (ECDSA) to the list of known hosts.
execve("./syz-executor2879245846", ["./syz-executor2879245846"], 0x7fff41094fa0 /* 10 vars */) = 0
brk(NULL) = 0x555556134000
brk(0x555556134c40) = 0x555556134c40
arch_prctl(ARCH_SET_FS, 0x555556134300) = 0
uname({sysname="Linux", nodename="syzkaller", ...}) = 0
readlink("/proc/self/exe", "/root/syz-executor2879245846", 4096) = 28
brk(0x555556155c40) = 0x555556155c40
brk(0x555556156000) = 0x555556156000
mprotect(0x7f1461e0d000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
memfd_create("syzkaller", 0) = 3
mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f1459952000
write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 7629503) = 7629503
munmap(0x7f1459952000, 7629503) = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
syzkaller login: [ 46.663683][ T4999] memfd_create() without MFD_EXEC nor MFD_NOEXEC_SEAL, pid=4999 'syz-executor287'
ioctl(4, LOOP_SET_FD, 3) = 0
close(3) = 0
mkdir("./file0", 0777) = 0
mount("/dev/loop0", "./file0", "jfs", MS_RDONLY|MS_NOSUID|MS_NODEV, "grpquota,iocharset=cp1251,gid=0x0000000000000000,discard=0x0000000000000000,discard,discard=0x000000"...) = 0
openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
ioctl(4, LOOP_CLR_FD) = 0
close(4) = 0
[ 46.720239][ T4999] loop0: detected capacity change from 0 to 14901
[ 46.746510][ T4999] syz-executor287: attempt to access beyond end of device
[ 46.746510][ T4999] loop0: rw=0, sector=30728, nr_sectors = 8 limit=14901
[ 46.760758][ T4999] lbmIODone: I/O error in JFS log
mount(NULL, "./file0", NULL, MS_REMOUNT, NULL) = -1 EINVAL (Invalid argument)
mount(NULL, "./file0", NULL, MS_REMOUNT|MS_MANDLOCK|MS_NODIRATIME|MS_UNBINDABLE, NULL) = 0
[ 46.766343][ T4999] *** Log Format Error ! ***
[ 46.771205][ T4999] lmLogInit: exit(-22)
[ 46.775412][ T4999] lmLogOpen: exit(-22)
[ 46.780771][ T4999] =======================================================
[ 46.780771][ T4999] WARNING: The mand mount option has been deprecated and
[ 46.780771][ T4999] and is ignored by this kernel. Remove the mand
[ 46.780771][ T4999] option from the mount to silence this warning.
[ 46.780771][ T4999] =======================================================
[ 46.818356][ T4999] ==================================================================
[ 46.826519][ T4999] BUG: KASAN: null-ptr-deref in txBegin+0x186/0xa10
[ 46.833131][ T4999] Read of size 8 at addr 0000000000000040 by task syz-executor287/4999
[ 46.841532][ T4999]
[ 46.843847][ T4999] CPU: 0 PID: 4999 Comm: syz-executor287 Not tainted 6.4.0-rc7-syzkaller-00072-gdad9774deaf1 #0
[ 46.854240][ T4999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023
[ 46.864281][ T4999] Call Trace:
[ 46.867545][ T4999]
[ 46.870458][ T4999] dump_stack_lvl+0xd9/0x150
[ 46.875054][ T4999] ? txBegin+0x186/0xa10
[ 46.879296][ T4999] kasan_report+0xec/0x130
[ 46.883714][ T4999] ? txBegin+0x186/0xa10
[ 46.887947][ T4999] kasan_check_range+0x141/0x190
[ 46.892890][ T4999] txBegin+0x186/0xa10
[ 46.896947][ T4999] ? txExit+0x40/0x40
[ 46.900933][ T4999] __jfs_xattr_set+0xa1/0x150
[ 46.905625][ T4999] ? __jfs_setxattr+0x1010/0x1010
[ 46.910638][ T4999] ? xattr_full_name+0x44/0x90
[ 46.915998][ T4999] ? __jfs_xattr_set+0x150/0x150
[ 46.921222][ T4999] __vfs_setxattr+0x173/0x1e0
[ 46.925920][ T4999] ? __vfs_removexattr+0x1c0/0x1c0
[ 46.931074][ T4999] __vfs_setxattr_noperm+0x129/0x5f0
[ 46.936802][ T4999] __vfs_setxattr_locked+0x1d3/0x260
[ 46.942337][ T4999] vfs_setxattr+0x143/0x340
[ 46.946949][ T4999] ? __vfs_setxattr_locked+0x260/0x260
[ 46.952498][ T4999] ? __check_object_size+0xac/0x730
[ 46.957783][ T4999] do_setxattr+0x147/0x190
[ 46.962219][ T4999] setxattr+0x146/0x160
[ 46.966375][ T4999] ? do_setxattr+0x190/0x190
[ 46.971066][ T4999] ? lockdep_hardirqs_on_prepare+0x410/0x410
[ 46.977066][ T4999] ? find_held_lock+0x2d/0x110
[ 46.981850][ T4999] ? __mnt_want_write+0x3f/0x2e0
[ 46.986784][ T4999] ? lock_downgrade+0x690/0x690
[ 46.991635][ T4999] ? lock_sync+0x190/0x190
[ 46.996048][ T4999] ? __mnt_want_write+0x1fe/0x2e0
[ 47.001101][ T4999] path_setxattr+0x197/0x1c0
[ 47.005722][ T4999] ? setxattr+0x160/0x160
[ 47.010049][ T4999] ? lockdep_hardirqs_on+0x7d/0x100
[ 47.015253][ T4999] __x64_sys_setxattr+0xc4/0x160
[ 47.020455][ T4999] do_syscall_64+0x39/0xb0
[ 47.024999][ T4999] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 47.030919][ T4999] RIP: 0033:0x7f1461d9ebd9
[ 47.035344][ T4999] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 47.054959][ T4999] RSP: 002b:00007ffd40cf8b38 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc
[ 47.063430][ T4999] RAX: ffffffffffffffda RBX: 0030656c69662f2e RCX: 00007f1461d9ebd9
[ 47.071399][ T4999] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000020000180
[ 47.079923][ T4999] RBP: 00007f1461d5e210 R08: 0000000000000002 R09: 0000000000000000
[ 47.087905][ T4999] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1461d5e2a0
[ 47.095876][ T4999] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 47.103929][ T4999]
[ 47.106949][ T4999] ==================================================================
[ 47.115229][ T4999] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 47.122442][ T4999] CPU: 0 PID: 4999 Comm: syz-executor287 Not tainted 6.4.0-rc7-syzkaller-00072-gdad9774deaf1 #0
[ 47.133288][ T4999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023
[ 47.143775][ T4999] Call Trace:
[ 47.147048][ T4999]
[ 47.149970][ T4999] dump_stack_lvl+0xd9/0x150
[ 47.154564][ T4999] panic+0x686/0x730
[ 47.158502][ T4999] ? panic_smp_self_stop+0xa0/0xa0
[ 47.163619][ T4999] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 47.169783][ T4999] check_panic_on_warn+0xb1/0xc0
[ 47.175245][ T4999] end_report+0xe9/0x120
[ 47.179493][ T4999] ? txBegin+0x186/0xa10
[ 47.183738][ T4999] kasan_report+0xf9/0x130
[ 47.188163][ T4999] ? txBegin+0x186/0xa10
[ 47.192405][ T4999] kasan_check_range+0x141/0x190
[ 47.197449][ T4999] txBegin+0x186/0xa10
[ 47.201549][ T4999] ? txExit+0x40/0x40
[ 47.205535][ T4999] __jfs_xattr_set+0xa1/0x150
[ 47.210245][ T4999] ? __jfs_setxattr+0x1010/0x1010
[ 47.215306][ T4999] ? xattr_full_name+0x44/0x90
[ 47.220087][ T4999] ? __jfs_xattr_set+0x150/0x150
[ 47.225045][ T4999] __vfs_setxattr+0x173/0x1e0
[ 47.229772][ T4999] ? __vfs_removexattr+0x1c0/0x1c0
[ 47.234941][ T4999] __vfs_setxattr_noperm+0x129/0x5f0
[ 47.240254][ T4999] __vfs_setxattr_locked+0x1d3/0x260
[ 47.245575][ T4999] vfs_setxattr+0x143/0x340
[ 47.250121][ T4999] ? __vfs_setxattr_locked+0x260/0x260
[ 47.255591][ T4999] ? __check_object_size+0xac/0x730
[ 47.260797][ T4999] do_setxattr+0x147/0x190
[ 47.265223][ T4999] setxattr+0x146/0x160
[ 47.269388][ T4999] ? do_setxattr+0x190/0x190
[ 47.274089][ T4999] ? lockdep_hardirqs_on_prepare+0x410/0x410
[ 47.280092][ T4999] ? find_held_lock+0x2d/0x110
[ 47.284871][ T4999] ? __mnt_want_write+0x3f/0x2e0
[ 47.289834][ T4999] ? lock_downgrade+0x690/0x690
[ 47.294734][ T4999] ? lock_sync+0x190/0x190
[ 47.299164][ T4999] ? __mnt_want_write+0x1fe/0x2e0
[ 47.304212][ T4999] path_setxattr+0x197/0x1c0
[ 47.308851][ T4999] ? setxattr+0x160/0x160
[ 47.313250][ T4999] ? lockdep_hardirqs_on+0x7d/0x100
[ 47.318468][ T4999] __x64_sys_setxattr+0xc4/0x160
[ 47.323982][ T4999] do_syscall_64+0x39/0xb0
[ 47.328413][ T4999] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 47.334430][ T4999] RIP: 0033:0x7f1461d9ebd9
[ 47.338859][ T4999] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 47.358772][ T4999] RSP: 002b:00007ffd40cf8b38 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc
[ 47.367214][ T4999] RAX: ffffffffffffffda RBX: 0030656c69662f2e RCX: 00007f1461d9ebd9
[ 47.375231][ T4999] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000020000180
[ 47.383357][ T4999] RBP: 00007f1461d5e210 R08: 0000000000000002 R09: 0000000000000000
[ 47.391354][ T4999] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1461d5e2a0
[ 47.399551][ T4999] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 47.407576][ T4999]
[ 47.411267][ T4999] Kernel Offset: disabled
[ 47.415629][ T4999] Rebooting in 86400 seconds..