./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3603852598
<...>
DUID 00:04:ab:86:5b:51:31:5e:ac:a3:74:55:84:ab:cd:90:ff:3d
forked to background, child pid 4693
[ 32.599709][ T4694] 8021q: adding VLAN 0 to HW filter on device bond0
[ 32.609707][ T4694] eql: remember to turn off Van-Jacobson compression on your slave devices
Starting sshd: OK
syzkaller
Warning: Permanently added '10.128.1.89' (ECDSA) to the list of known hosts.
execve("./syz-executor3603852598", ["./syz-executor3603852598"], 0x7ffe56583060 /* 10 vars */) = 0
brk(NULL) = 0x555555a09000
brk(0x555555a09c40) = 0x555555a09c40
arch_prctl(ARCH_SET_FS, 0x555555a09300) = 0
uname({sysname="Linux", nodename="syzkaller", ...}) = 0
readlink("/proc/self/exe", "/root/syz-executor3603852598", 4096) = 28
brk(0x555555a2ac40) = 0x555555a2ac40
brk(0x555555a2b000) = 0x555555a2b000
mprotect(0x7fda63e0b000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
memfd_create("syzkaller", 0) = 3
mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fda5b94c000
syzkaller login: [ 57.488331][ T5024] memfd_create() without MFD_EXEC nor MFD_NOEXEC_SEAL, pid=5024 'syz-executor360'
write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216
munmap(0x7fda5b94c000, 16777216) = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
ioctl(4, LOOP_SET_FD, 3) = 0
close(3) = 0
mkdir("./file0", 0777) = 0
mount("/dev/loop0", "./file0", "jfs", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME|MS_LAZYTIME, "") = 0
openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
chdir("./file0") = 0
ioctl(4, LOOP_CLR_FD) = 0
close(4) = 0
open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4
[ 57.635027][ T5024] loop0: detected capacity change from 0 to 32768
[ 57.874819][ T5024] ================================================================================
[ 57.884303][ T5024] UBSAN: shift-out-of-bounds in fs/jfs/jfs_extent.c:314:16
[ 57.891513][ T5024] shift exponent -1 is negative
[ 57.896430][ T5024] CPU: 1 PID: 5024 Comm: syz-executor360 Not tainted 6.4.0-next-20230707-syzkaller #0
[ 57.905997][ T5024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023
[ 57.916404][ T5024] Call Trace:
[ 57.919682][ T5024]
[ 57.922615][ T5024] dump_stack_lvl+0x136/0x150
[ 57.927422][ T5024] __ubsan_handle_shift_out_of_bounds+0x221/0x5a0
[ 57.933950][ T5024] extAlloc.cold+0x8d/0x92
[ 57.938385][ T5024] ? jfs_ioc_trim+0x5c0/0x5c0
[ 57.943064][ T5024] ? down_write_nested+0x153/0x200
[ 57.948189][ T5024] ? find_held_lock+0x2d/0x110
[ 57.952983][ T5024] jfs_get_block+0x665/0xa90
[ 57.957591][ T5024] ? jfs_read_folio+0x20/0x20
[ 57.962276][ T5024] ? folio_flags.constprop.0+0x53/0x150
[ 57.967837][ T5024] ? do_raw_spin_unlock+0x175/0x230
[ 57.973138][ T5024] ? _raw_spin_unlock+0x28/0x40
[ 57.978087][ T5024] __block_write_begin_int+0x3b1/0x14a0
[ 57.983658][ T5024] ? jfs_read_folio+0x20/0x20
[ 57.988354][ T5024] ? invalidate_bh_lrus_cpu+0x170/0x170
[ 57.993904][ T5024] ? fault_in_readable+0x129/0x210
[ 57.999023][ T5024] ? folio_flags.constprop.0+0x53/0x150
[ 58.004588][ T5024] ? jfs_read_folio+0x20/0x20
[ 58.009275][ T5024] block_write_begin+0xb9/0x4d0
[ 58.014134][ T5024] jfs_write_begin+0x31/0xd0
[ 58.018737][ T5024] generic_perform_write+0x26b/0x5d0
[ 58.024037][ T5024] ? generic_file_readonly_mmap+0x190/0x190
[ 58.029935][ T5024] ? new_inode+0x280/0x280
[ 58.034361][ T5024] ? generic_write_checks_count+0x2c0/0x2c0
[ 58.040271][ T5024] __generic_file_write_iter+0x1f8/0x240
[ 58.045915][ T5024] generic_file_write_iter+0xe3/0x350
[ 58.051296][ T5024] vfs_write+0x981/0xda0
[ 58.055557][ T5024] ? kernel_write+0x680/0x680
[ 58.060412][ T5024] ? recalc_sigpending_tsk+0x18b/0x1d0
[ 58.065971][ T5024] ? find_held_lock+0x2d/0x110
[ 58.070842][ T5024] ? lock_downgrade+0x690/0x690
[ 58.075713][ T5024] ? __fget_light+0x201/0x270
[ 58.080405][ T5024] ksys_write+0x122/0x250
[ 58.084745][ T5024] ? __ia32_sys_read+0xb0/0xb0
[ 58.089514][ T5024] ? lockdep_hardirqs_on+0x7d/0x100
[ 58.094723][ T5024] ? _raw_spin_unlock_irq+0x2e/0x50
[ 58.099921][ T5024] ? ptrace_notify+0xfe/0x140
[ 58.104622][ T5024] do_syscall_64+0x39/0xb0
[ 58.109049][ T5024] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 58.114953][ T5024] RIP: 0033:0x7fda63d98829
[ 58.119403][ T5024] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 58.139008][ T5024] RSP: 002b:00007ffd31237e98 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 58.147436][ T5024] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fda63d98829
[ 58.155492][ T5024] RDX: 00000000200000c7 RSI: 00000000200000c0 RDI: 0000000000000004
[ 58.163461][ T5024] RBP: 00007fda63d580c0 R08: 0000000000000000 R09: 0000000000000000
[ 58.171429][ T5024] R10: 0000000000005e08 R11: 0000000000000246 R12: 00007fda63d58150
[ 58.179483][ T5024] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 58.187815][ T5024]
[ 58.191179][ T5024] ================================================================================
[ 58.200650][ T5024] Kernel panic - not syncing: UBSAN: panic_on_warn set ...
[ 58.207934][ T5024] CPU: 0 PID: 5024 Comm: syz-executor360 Not tainted 6.4.0-next-20230707-syzkaller #0
[ 58.217567][ T5024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023
[ 58.227633][ T5024] Call Trace:
[ 58.230920][ T5024]
[ 58.233878][ T5024] dump_stack_lvl+0xd9/0x150
[ 58.238492][ T5024] panic+0x686/0x730
[ 58.242394][ T5024] ? panic_smp_self_stop+0xa0/0xa0
[ 58.247615][ T5024] ? syslog_print_all+0x3a0/0x3a0
[ 58.252671][ T5024] check_panic_on_warn+0xb1/0xc0
[ 58.257613][ T5024] __ubsan_handle_shift_out_of_bounds+0x249/0x5a0
[ 58.264039][ T5024] extAlloc.cold+0x8d/0x92
[ 58.268461][ T5024] ? jfs_ioc_trim+0x5c0/0x5c0
[ 58.273130][ T5024] ? down_write_nested+0x153/0x200
[ 58.278232][ T5024] ? find_held_lock+0x2d/0x110
[ 58.282985][ T5024] jfs_get_block+0x665/0xa90
[ 58.287571][ T5024] ? jfs_read_folio+0x20/0x20
[ 58.292241][ T5024] ? folio_flags.constprop.0+0x53/0x150
[ 58.297786][ T5024] ? do_raw_spin_unlock+0x175/0x230
[ 58.303100][ T5024] ? _raw_spin_unlock+0x28/0x40
[ 58.307971][ T5024] __block_write_begin_int+0x3b1/0x14a0
[ 58.313744][ T5024] ? jfs_read_folio+0x20/0x20
[ 58.320801][ T5024] ? invalidate_bh_lrus_cpu+0x170/0x170
[ 58.326347][ T5024] ? fault_in_readable+0x129/0x210
[ 58.331454][ T5024] ? folio_flags.constprop.0+0x53/0x150
[ 58.337018][ T5024] ? jfs_read_folio+0x20/0x20
[ 58.341782][ T5024] block_write_begin+0xb9/0x4d0
[ 58.346632][ T5024] jfs_write_begin+0x31/0xd0
[ 58.351233][ T5024] generic_perform_write+0x26b/0x5d0
[ 58.356514][ T5024] ? generic_file_readonly_mmap+0x190/0x190
[ 58.362406][ T5024] ? new_inode+0x280/0x280
[ 58.366818][ T5024] ? generic_write_checks_count+0x2c0/0x2c0
[ 58.372791][ T5024] __generic_file_write_iter+0x1f8/0x240
[ 58.378418][ T5024] generic_file_write_iter+0xe3/0x350
[ 58.383796][ T5024] vfs_write+0x981/0xda0
[ 58.388036][ T5024] ? kernel_write+0x680/0x680
[ 58.392727][ T5024] ? recalc_sigpending_tsk+0x18b/0x1d0
[ 58.398207][ T5024] ? find_held_lock+0x2d/0x110
[ 58.402976][ T5024] ? lock_downgrade+0x690/0x690
[ 58.407824][ T5024] ? __fget_light+0x201/0x270
[ 58.412501][ T5024] ksys_write+0x122/0x250
[ 58.416856][ T5024] ? __ia32_sys_read+0xb0/0xb0
[ 58.421743][ T5024] ? lockdep_hardirqs_on+0x7d/0x100
[ 58.427133][ T5024] ? _raw_spin_unlock_irq+0x2e/0x50
[ 58.432610][ T5024] ? ptrace_notify+0xfe/0x140
[ 58.437312][ T5024] do_syscall_64+0x39/0xb0
[ 58.441730][ T5024] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 58.447641][ T5024] RIP: 0033:0x7fda63d98829
[ 58.452065][ T5024] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 58.471765][ T5024] RSP: 002b:00007ffd31237e98 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 58.480350][ T5024] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fda63d98829
[ 58.488311][ T5024] RDX: 00000000200000c7 RSI: 00000000200000c0 RDI: 0000000000000004
[ 58.496277][ T5024] RBP: 00007fda63d580c0 R08: 0000000000000000 R09: 0000000000000000
[ 58.504412][ T5024] R10: 0000000000005e08 R11: 0000000000000246 R12: 00007fda63d58150
[ 58.512371][ T5024] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 58.520343][ T5024]
[ 58.523628][ T5024] Kernel Offset: disabled
[ 58.528055][ T5024] Rebooting in 86400 seconds..