./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3823009399 <...> Warning: Permanently added '10.128.1.31' (ED25519) to the list of known hosts. execve("./syz-executor3823009399", ["./syz-executor3823009399"], 0x7ffcdd9c1630 /* 10 vars */) = 0 brk(NULL) = 0x5555555d6000 brk(0x5555555d6d00) = 0x5555555d6d00 arch_prctl(ARCH_SET_FS, 0x5555555d6380) = 0 set_tid_address(0x5555555d6650) = 5022 set_robust_list(0x5555555d6660, 24) = 0 rseq(0x5555555d6ca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor3823009399", 4096) = 28 getrandom("\x73\x0e\x86\x1b\x9e\x45\xfb\x47", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x5555555d6d00 brk(0x5555555f7d00) = 0x5555555f7d00 brk(0x5555555f8000) = 0x5555555f8000 mprotect(0x7ff2a3819000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 memfd_create("syzkaller", 0) = 3 mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff29b363000 [ 45.533201][ T5022] memfd_create() without MFD_EXEC nor MFD_NOEXEC_SEAL, pid=5022 'syz-executor382' write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 munmap(0x7ff29b363000, 16777216) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 ioctl(4, LOOP_SET_FD, 3) = 0 close(3) = 0 mkdir("./bus", 0777) = 0 mount("/dev/loop0", "./bus", "jfs", MS_NOSUID|MS_DIRSYNC|MS_NODIRATIME|MS_POSIXACL|MS_LAZYTIME, "discard,discard,usrquota,usrquota,quota,iocharset=iso8859-7,iocharset=default") = 0 openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 chdir("./bus") = 0 ioctl(4, LOOP_CLR_FD) = 0 close(4) = 0 openat(AT_FDCWD, "cgroup.controllers", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4 [ 45.650146][ T5022] loop0: detected capacity change from 0 to 32768 [ 45.809343][ T5022] ================================================================================ [ 45.818762][ T5022] UBSAN: shift-out-of-bounds in fs/jfs/jfs_extent.c:314:16 [ 45.826063][ T5022] shift exponent -1 is negative [ 45.830916][ T5022] CPU: 1 PID: 5022 Comm: syz-executor382 Not tainted 6.5.0-rc5-syzkaller-00353-gae545c3283dc #0 [ 45.841401][ T5022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 45.851434][ T5022] Call Trace: [ 45.854693][ T5022] [ 45.857610][ T5022] dump_stack_lvl+0x125/0x1b0 [ 45.862306][ T5022] __ubsan_handle_shift_out_of_bounds+0x27a/0x600 [ 45.868748][ T5022] extAlloc.cold+0x8b/0xc5 [ 45.873221][ T5022] ? jfs_ioc_trim+0x5c0/0x5c0 [ 45.877894][ T5022] ? down_write_nested+0x153/0x200 [ 45.882996][ T5022] ? find_held_lock+0x2d/0x110 [ 45.887751][ T5022] jfs_get_block+0x428/0xb20 [ 45.892336][ T5022] ? jfs_read_folio+0x20/0x20 [ 45.897010][ T5022] ? folio_flags.constprop.0+0x56/0x150 [ 45.902637][ T5022] ? do_raw_spin_unlock+0x173/0x230 [ 45.907833][ T5022] ? _raw_spin_unlock+0x28/0x40 [ 45.912680][ T5022] ? jfs_read_folio+0x20/0x20 [ 45.917369][ T5022] __block_write_begin_int+0x3c0/0x1470 [ 45.922909][ T5022] ? jfs_read_folio+0x20/0x20 [ 45.927581][ T5022] ? invalidate_bh_lrus_cpu+0x170/0x170 [ 45.933112][ T5022] ? __filemap_get_folio+0x1e7/0x990 [ 45.938393][ T5022] block_write_begin+0xb1/0x490 [ 45.943231][ T5022] ? jfs_read_folio+0x20/0x20 [ 45.947904][ T5022] jfs_write_begin+0x31/0xd0 [ 45.952488][ T5022] generic_perform_write+0x278/0x600 [ 45.957776][ T5022] ? folio_add_wait_queue+0x1c0/0x1c0 [ 45.963146][ T5022] ? new_inode+0x260/0x260 [ 45.967553][ T5022] ? generic_write_checks_count+0x2d0/0x2d0 [ 45.973445][ T5022] __generic_file_write_iter+0x1f9/0x240 [ 45.979074][ T5022] generic_file_write_iter+0xe3/0x350 [ 45.984527][ T5022] vfs_write+0x650/0xe40 [ 45.988769][ T5022] ? kernel_write+0x6c0/0x6c0 [ 45.993441][ T5022] ? find_held_lock+0x2d/0x110 [ 45.998203][ T5022] ? reacquire_held_locks+0x4b0/0x4b0 [ 46.003658][ T5022] ? __fget_light+0x1fc/0x260 [ 46.008339][ T5022] ksys_write+0x12f/0x250 [ 46.012674][ T5022] ? __ia32_sys_read+0xb0/0xb0 [ 46.017443][ T5022] ? lockdep_hardirqs_on+0x7d/0x100 [ 46.022649][ T5022] ? _raw_spin_unlock_irq+0x2e/0x50 [ 46.027845][ T5022] ? ptrace_notify+0xf4/0x130 [ 46.032517][ T5022] do_syscall_64+0x38/0xb0 [ 46.036928][ T5022] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 46.042813][ T5022] RIP: 0033:0x7ff2a37a0af9 [ 46.047214][ T5022] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 46.066812][ T5022] RSP: 002b:00007ffcd4ab8778 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 46.075236][ T5022] RAX: ffffffffffffffda RBX: 6573726168636f69 RCX: 00007ff2a37a0af9 [ 46.083216][ T5022] RDX: 000000006db6e559 RSI: 0000000020000240 RDI: 0000000000000004 [ 46.091173][ T5022] RBP: 00007ff2a3819610 R08: 0000000000000000 R09: 00007ffcd4ab8948 [ 46.099133][ T5022] R10: 0000000000005fee R11: 0000000000000246 R12: 0000000000000001 [ 46.107090][ T5022] R13: 00007ffcd4ab8938 R14: 0000000000000001 R15: 0000000000000001 [ 46.115057][ T5022] [ 46.118574][ T5022] ================================================================================ [ 46.127989][ T5022] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 46.135179][ T5022] CPU: 1 PID: 5022 Comm: syz-executor382 Not tainted 6.5.0-rc5-syzkaller-00353-gae545c3283dc #0 [ 46.145577][ T5022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 46.155614][ T5022] Call Trace: [ 46.158873][ T5022] [ 46.161783][ T5022] dump_stack_lvl+0xd9/0x1b0 [ 46.166361][ T5022] panic+0x6a4/0x750 [ 46.170237][ T5022] ? panic_smp_self_stop+0xa0/0xa0 [ 46.175331][ T5022] ? syslog_print_all+0x3f0/0x3f0 [ 46.180419][ T5022] check_panic_on_warn+0xab/0xb0 [ 46.185358][ T5022] __ubsan_handle_shift_out_of_bounds+0x2a2/0x600 [ 46.191782][ T5022] extAlloc.cold+0x8b/0xc5 [ 46.196189][ T5022] ? jfs_ioc_trim+0x5c0/0x5c0 [ 46.200850][ T5022] ? down_write_nested+0x153/0x200 [ 46.205955][ T5022] ? find_held_lock+0x2d/0x110 [ 46.210698][ T5022] jfs_get_block+0x428/0xb20 [ 46.215268][ T5022] ? jfs_read_folio+0x20/0x20 [ 46.219944][ T5022] ? folio_flags.constprop.0+0x56/0x150 [ 46.225479][ T5022] ? do_raw_spin_unlock+0x173/0x230 [ 46.230663][ T5022] ? _raw_spin_unlock+0x28/0x40 [ 46.235502][ T5022] ? jfs_read_folio+0x20/0x20 [ 46.240156][ T5022] __block_write_begin_int+0x3c0/0x1470 [ 46.245695][ T5022] ? jfs_read_folio+0x20/0x20 [ 46.250410][ T5022] ? invalidate_bh_lrus_cpu+0x170/0x170 [ 46.255943][ T5022] ? __filemap_get_folio+0x1e7/0x990 [ 46.261212][ T5022] block_write_begin+0xb1/0x490 [ 46.266042][ T5022] ? jfs_read_folio+0x20/0x20 [ 46.270699][ T5022] jfs_write_begin+0x31/0xd0 [ 46.275282][ T5022] generic_perform_write+0x278/0x600 [ 46.280557][ T5022] ? folio_add_wait_queue+0x1c0/0x1c0 [ 46.286001][ T5022] ? new_inode+0x260/0x260 [ 46.290393][ T5022] ? generic_write_checks_count+0x2d0/0x2d0 [ 46.296264][ T5022] __generic_file_write_iter+0x1f9/0x240 [ 46.301873][ T5022] generic_file_write_iter+0xe3/0x350 [ 46.307223][ T5022] vfs_write+0x650/0xe40 [ 46.311452][ T5022] ? kernel_write+0x6c0/0x6c0 [ 46.316117][ T5022] ? find_held_lock+0x2d/0x110 [ 46.320860][ T5022] ? reacquire_held_locks+0x4b0/0x4b0 [ 46.326217][ T5022] ? __fget_light+0x1fc/0x260 [ 46.330878][ T5022] ksys_write+0x12f/0x250 [ 46.335187][ T5022] ? __ia32_sys_read+0xb0/0xb0 [ 46.339931][ T5022] ? lockdep_hardirqs_on+0x7d/0x100 [ 46.345111][ T5022] ? _raw_spin_unlock_irq+0x2e/0x50 [ 46.350291][ T5022] ? ptrace_notify+0xf4/0x130 [ 46.354947][ T5022] do_syscall_64+0x38/0xb0 [ 46.359342][ T5022] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 46.365213][ T5022] RIP: 0033:0x7ff2a37a0af9 [ 46.369606][ T5022] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 46.389206][ T5022] RSP: 002b:00007ffcd4ab8778 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 46.397598][ T5022] RAX: ffffffffffffffda RBX: 6573726168636f69 RCX: 00007ff2a37a0af9 [ 46.405546][ T5022] RDX: 000000006db6e559 RSI: 0000000020000240 RDI: 0000000000000004 [ 46.413496][ T5022] RBP: 00007ff2a3819610 R08: 0000000000000000 R09: 00007ffcd4ab8948 [ 46.421445][ T5022] R10: 0000000000005fee R11: 0000000000000246 R12: 0000000000000001 [ 46.429401][ T5022] R13: 00007ffcd4ab8938 R14: 0000000000000001 R15: 0000000000000001 [ 46.437357][ T5022] [ 46.441381][ T5022] Kernel Offset: disabled [ 46.445733][ T5022] Rebooting in 86400 seconds..