./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3585263827
<...>
Warning: Permanently added '10.128.0.150' (ED25519) to the list of known hosts.
execve("./syz-executor3585263827", ["./syz-executor3585263827"], 0x7ffc9c7ab970 /* 10 vars */) = 0
brk(NULL) = 0x555555fed000
brk(0x555555fedd00) = 0x555555fedd00
arch_prctl(ARCH_SET_FS, 0x555555fed380) = 0
set_tid_address(0x555555fed650) = 5013
set_robust_list(0x555555fed660, 24) = 0
rseq(0x555555fedca0, 0x20, 0, 0x53053053) = 0
prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0
readlink("/proc/self/exe", "/root/syz-executor3585263827", 4096) = 28
getrandom("\xb0\xb0\x76\x06\xa3\xf6\x2b\x99", 8, GRND_NONBLOCK) = 8
brk(NULL) = 0x555555fedd00
brk(0x55555600ed00) = 0x55555600ed00
brk(0x55555600f000) = 0x55555600f000
mprotect(0x7f333bf2c000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3
ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address)
close(3) = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555fed650) = 5014
./strace-static-x86_64: Process 5014 attached
[ 60.731062][ T26] audit: type=1400 audit(1690420556.777:83): avc: denied { write } for pid=5010 comm="strace-static-x" path="pipe:[30213]" dev="pipefs" ino=30213 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1
[ 60.755379][ T26] audit: type=1400 audit(1690420556.807:84): avc: denied { execmem } for pid=5013 comm="syz-executor358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[pid 5014] set_robust_list(0x555555fed660, 24) = 0
[pid 5014] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 5014] setpgid(0, 0) = 0
[pid 5014] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 5014] write(3, "1000", 4) = 4
[pid 5014] close(3) = 0
[ 60.776251][ T26] audit: type=1400 audit(1690420556.807:85): avc: denied { read write } for pid=5013 comm="syz-executor358" name="loop0" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 60.801891][ T26] audit: type=1400 audit(1690420556.807:86): avc: denied { open } for pid=5013 comm="syz-executor358" path="/dev/loop0" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[pid 5014] memfd_create("syzkaller", 0) = 3
[pid 5014] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f3333a75000
[ 60.816822][ T5014] memfd_create() without MFD_EXEC nor MFD_NOEXEC_SEAL, pid=5014 'syz-executor358'
[ 60.827333][ T26] audit: type=1400 audit(1690420556.807:87): avc: denied { ioctl } for pid=5013 comm="syz-executor358" path="/dev/loop0" dev="devtmpfs" ino=648 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[pid 5014] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216
[pid 5014] munmap(0x7f3333a75000, 16777216) = 0
[pid 5014] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid 5014] ioctl(4, LOOP_SET_FD, 3) = 0
[pid 5014] close(3) = 0
[pid 5014] mkdir("./bus", 0777) = 0
[pid 5014] mount("/dev/loop0", "./bus", "jfs", 0, "iocharset=macgreek,nodiscard,iocharset=cp932,") = 0
[pid 5014] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3
[pid 5014] chdir("./bus") = 0
[pid 5014] ioctl(4, LOOP_CLR_FD) = 0
[ 61.023467][ T5014] loop0: detected capacity change from 0 to 32768
[ 61.032515][ T26] audit: type=1400 audit(1690420557.087:88): avc: denied { append } for pid=4451 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[pid 5014] close(4) = 0
[pid 5014] creat("./bus", 000) = 4
[pid 5014] openat(AT_FDCWD, "cpuset.memory_pressure_enabled", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 5
[ 61.055123][ T26] audit: type=1400 audit(1690420557.087:89): avc: denied { open } for pid=4451 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[ 61.078630][ T26] audit: type=1400 audit(1690420557.087:90): avc: denied { getattr } for pid=4451 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[ 61.112434][ T26] audit: type=1400 audit(1690420557.087:91): avc: denied { mounton } for pid=5014 comm="syz-executor358" path="/root/bus" dev="sda1" ino=1927 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1
[ 61.135466][ T26] audit: type=1400 audit(1690420557.087:92): avc: denied { mount } for pid=5014 comm="syz-executor358" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[ 61.353863][ T5014] ================================================================================
[ 61.363341][ T5014] UBSAN: shift-out-of-bounds in fs/jfs/jfs_extent.c:314:16
[ 61.370533][ T5014] shift exponent -1 is negative
[ 61.375718][ T5014] CPU: 1 PID: 5014 Comm: syz-executor358 Not tainted 6.5.0-rc3-syzkaller-00024-g18b44bc5a672 #0
[ 61.386141][ T5014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2023
[ 61.396202][ T5014] Call Trace:
[ 61.399473][ T5014]
[ 61.402402][ T5014] dump_stack_lvl+0x125/0x1b0
[ 61.407115][ T5014] __ubsan_handle_shift_out_of_bounds+0x27a/0x600
[ 61.413541][ T5014] extAlloc.cold+0x8b/0xc5
[ 61.417972][ T5014] ? jfs_ioc_trim+0x5c0/0x5c0
[ 61.422643][ T5014] ? down_write_nested+0x153/0x200
[ 61.427748][ T5014] ? find_held_lock+0x2d/0x110
[ 61.432512][ T5014] jfs_get_block+0x428/0xb20
[ 61.437116][ T5014] ? jfs_read_folio+0x20/0x20
[ 61.441800][ T5014] ? folio_flags.constprop.0+0x56/0x150
[ 61.447358][ T5014] ? do_raw_spin_unlock+0x173/0x230
[ 61.452575][ T5014] ? _raw_spin_unlock+0x28/0x40
[ 61.457436][ T5014] ? jfs_read_folio+0x20/0x20
[ 61.462119][ T5014] __block_write_begin_int+0x3c0/0x1470
[ 61.467668][ T5014] ? jfs_read_folio+0x20/0x20
[ 61.472352][ T5014] ? invalidate_bh_lrus_cpu+0x170/0x170
[ 61.477902][ T5014] ? __filemap_get_folio+0x1e7/0x990
[ 61.483196][ T5014] block_write_begin+0xb1/0x490
[ 61.488049][ T5014] ? jfs_read_folio+0x20/0x20
[ 61.492731][ T5014] jfs_write_begin+0x31/0xd0
[ 61.497329][ T5014] generic_perform_write+0x278/0x600
[ 61.502619][ T5014] ? __mnt_drop_write_file+0x45/0xf0
[ 61.507909][ T5014] ? folio_add_wait_queue+0x1c0/0x1c0
[ 61.513300][ T5014] ? new_inode+0x270/0x270
[ 61.517720][ T5014] ? generic_write_checks_count+0x2d0/0x2d0
[ 61.523616][ T5014] __generic_file_write_iter+0x1f9/0x240
[ 61.529256][ T5014] generic_file_write_iter+0xe3/0x350
[ 61.534636][ T5014] vfs_write+0x650/0xe40
[ 61.538878][ T5014] ? kernel_write+0x6c0/0x6c0
[ 61.543558][ T5014] ksys_write+0x12f/0x250
[ 61.547885][ T5014] ? __ia32_sys_read+0xb0/0xb0
[ 61.552645][ T5014] ? lockdep_hardirqs_on+0x7d/0x100
[ 61.557847][ T5014] ? _raw_spin_unlock_irq+0x2e/0x50
[ 61.563055][ T5014] ? ptrace_notify+0xf4/0x130
[ 61.567732][ T5014] do_syscall_64+0x38/0xb0
[ 61.572151][ T5014] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 61.578044][ T5014] RIP: 0033:0x7f333beb3b59
[ 61.582460][ T5014] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 61.602079][ T5014] RSP: 002b:00007ffc0fa8b9f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 61.610493][ T5014] RAX: ffffffffffffffda RBX: 7261637369646f6e RCX: 00007f333beb3b59
[ 61.618465][ T5014] RDX: 000000000208e24b RSI: 0000000020000000 RDI: 0000000000000005
[ 61.626438][ T5014] RBP: 00007f333bf2c5f0 R08: 0000555555fee4c0 R09: 0000555555fee4c0
[ 61.634408][ T5014] R10: 0000555555fee4c0 R11: 0000000000000246 R12: 00007ffc0fa8ba20
[ 61.642378][ T5014] R13: 00007ffc0fa8bc48 R14: 431bde82d7b634db R15: 00007f333befc03b
[ 61.650353][ T5014]
[ 61.653701][ T5014] ================================================================================
[ 61.663174][ T5014] Kernel panic - not syncing: UBSAN: panic_on_warn set ...
[ 61.670392][ T5014] CPU: 1 PID: 5014 Comm: syz-executor358 Not tainted 6.5.0-rc3-syzkaller-00024-g18b44bc5a672 #0
[ 61.680809][ T5014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2023
[ 61.690864][ T5014] Call Trace:
[ 61.694141][ T5014]
[ 61.697070][ T5014] dump_stack_lvl+0xd9/0x1b0
[ 61.701665][ T5014] panic+0x6a4/0x750
[ 61.705562][ T5014] ? panic_smp_self_stop+0xa0/0xa0
[ 61.710675][ T5014] ? syslog_print_all+0x3f0/0x3f0
[ 61.715709][ T5014] check_panic_on_warn+0xab/0xb0
[ 61.720650][ T5014] __ubsan_handle_shift_out_of_bounds+0x2a2/0x600
[ 61.727081][ T5014] extAlloc.cold+0x8b/0xc5
[ 61.731506][ T5014] ? jfs_ioc_trim+0x5c0/0x5c0
[ 61.736185][ T5014] ? down_write_nested+0x153/0x200
[ 61.741299][ T5014] ? find_held_lock+0x2d/0x110
[ 61.746062][ T5014] jfs_get_block+0x428/0xb20
[ 61.750658][ T5014] ? jfs_read_folio+0x20/0x20
[ 61.755338][ T5014] ? folio_flags.constprop.0+0x56/0x150
[ 61.760897][ T5014] ? do_raw_spin_unlock+0x173/0x230
[ 61.766101][ T5014] ? _raw_spin_unlock+0x28/0x40
[ 61.770965][ T5014] ? jfs_read_folio+0x20/0x20
[ 61.775648][ T5014] __block_write_begin_int+0x3c0/0x1470
[ 61.781197][ T5014] ? jfs_read_folio+0x20/0x20
[ 61.785883][ T5014] ? invalidate_bh_lrus_cpu+0x170/0x170
[ 61.791438][ T5014] ? __filemap_get_folio+0x1e7/0x990
[ 61.796733][ T5014] block_write_begin+0xb1/0x490
[ 61.801582][ T5014] ? jfs_read_folio+0x20/0x20
[ 61.806263][ T5014] jfs_write_begin+0x31/0xd0
[ 61.810862][ T5014] generic_perform_write+0x278/0x600
[ 61.816151][ T5014] ? __mnt_drop_write_file+0x45/0xf0
[ 61.821438][ T5014] ? folio_add_wait_queue+0x1c0/0x1c0
[ 61.826819][ T5014] ? new_inode+0x270/0x270
[ 61.831239][ T5014] ? generic_write_checks_count+0x2d0/0x2d0
[ 61.837141][ T5014] __generic_file_write_iter+0x1f9/0x240
[ 61.842785][ T5014] generic_file_write_iter+0xe3/0x350
[ 61.848164][ T5014] vfs_write+0x650/0xe40
[ 61.852405][ T5014] ? kernel_write+0x6c0/0x6c0
[ 61.857084][ T5014] ksys_write+0x12f/0x250
[ 61.861409][ T5014] ? __ia32_sys_read+0xb0/0xb0
[ 61.866171][ T5014] ? lockdep_hardirqs_on+0x7d/0x100
[ 61.871373][ T5014] ? _raw_spin_unlock_irq+0x2e/0x50
[ 61.876581][ T5014] ? ptrace_notify+0xf4/0x130
[ 61.881257][ T5014] do_syscall_64+0x38/0xb0
[ 61.885677][ T5014] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 61.891572][ T5014] RIP: 0033:0x7f333beb3b59
[ 61.895985][ T5014] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 61.915596][ T5014] RSP: 002b:00007ffc0fa8b9f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 61.924011][ T5014] RAX: ffffffffffffffda RBX: 7261637369646f6e RCX: 00007f333beb3b59
[ 61.931983][ T5014] RDX: 000000000208e24b RSI: 0000000020000000 RDI: 0000000000000005
[ 61.939955][ T5014] RBP: 00007f333bf2c5f0 R08: 0000555555fee4c0 R09: 0000555555fee4c0
[ 61.947927][ T5014] R10: 0000555555fee4c0 R11: 0000000000000246 R12: 00007ffc0fa8ba20
[ 61.955905][ T5014] R13: 00007ffc0fa8bc48 R14: 431bde82d7b634db R15: 00007f333befc03b
[ 61.963884][ T5014]
[ 61.967092][ T5014] Kernel Offset: disabled
[ 61.971503][ T5014] Rebooting in 86400 seconds..