./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor228320136 <...> Warning: Permanently added '10.128.0.225' (ECDSA) to the list of known hosts. execve("./syz-executor228320136", ["./syz-executor228320136"], 0x7ffed61183e0 /* 10 vars */) = 0 brk(NULL) = 0x555556d01000 brk(0x555556d01c40) = 0x555556d01c40 arch_prctl(ARCH_SET_FS, 0x555556d01300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor228320136", 4096) = 27 brk(0x555556d22c40) = 0x555556d22c40 brk(0x555556d23000) = 0x555556d23000 mprotect(0x7f1e14d4a000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555556d015d0) = 3636 ./strace-static-x86_64: Process 3636 attached [pid 3636] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 3636] setpgid(0, 0) = 0 [pid 3636] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 3636] write(3, "1000", 4) = 4 [pid 3636] close(3) = 0 [pid 3636] memfd_create("syzkaller", 0) = 3 [pid 3636] ftruncate(3, 16777216) = 0 [pid 3636] mmap(NULL, 16777216, PROT_READ|PROT_WRITE, MAP_SHARED, 3, 0) = 0x7f1e13c8a000 [pid 3636] munmap(0x7f1e13c8a000, 16777216) = 0 [pid 3636] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 3636] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 3636] mkdir("./file0", 0777) = 0 [pid 3636] mount("/dev/loop0", "./file0", "jfs", MS_KERNMOUNT, "") = 0 [pid 3636] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 5 [pid 3636] chdir("./file0") = 0 [pid 3636] ioctl(4, LOOP_CLR_FD) = 0 [pid 3636] close(4) = 0 [pid 3636] close(3) = 0 [pid 3636] openat(AT_FDCWD, "memory.current", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 3 [ 55.697162][ T3636] loop0: detected capacity change from 0 to 32768 [ 55.957742][ T3636] ================================================================================ [ 55.967230][ T3636] UBSAN: shift-out-of-bounds in fs/jfs/jfs_extent.c:314:16 [ 55.974544][ T3636] shift exponent -1 is negative [ 55.979676][ T3636] CPU: 0 PID: 3636 Comm: syz-executor228 Not tainted 6.1.0-rc6-syzkaller #0 [ 55.988348][ T3636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 55.998401][ T3636] Call Trace: [ 56.001686][ T3636] [ 56.004609][ T3636] dump_stack_lvl+0x1b1/0x28e [ 56.009302][ T3636] ? nf_tcp_handle_invalid+0x62e/0x62e [ 56.014749][ T3636] ? vsnprintf+0x1af/0x1ce0 [ 56.019247][ T3636] ? panic+0x710/0x710 [ 56.023329][ T3636] ? extAlloc+0x104/0xff0 [ 56.027667][ T3636] __ubsan_handle_shift_out_of_bounds+0x33d/0x3b0 [ 56.034107][ T3636] ? do_raw_spin_unlock+0x134/0x8a0 [ 56.039304][ T3636] extAlloc+0xe40/0xff0 [ 56.043473][ T3636] ? jfs_ioc_trim+0x660/0x660 [ 56.048152][ T3636] ? down_read_non_owner+0xa0/0xa0 [ 56.053270][ T3636] jfs_get_block+0x342/0xce0 [ 56.057978][ T3636] ? jfs_dirty_inode+0x240/0x240 [ 56.062936][ T3636] ? create_page_buffers+0x244/0x4b0 [ 56.068248][ T3636] __block_write_begin_int+0x54c/0x1a80 [ 56.073828][ T3636] ? jfs_dirty_inode+0x240/0x240 [ 56.078787][ T3636] ? page_zero_new_buffers+0x940/0x940 [ 56.084276][ T3636] ? PageHeadHuge+0x8a/0x1d0 [ 56.088881][ T3636] ? jfs_dirty_inode+0x240/0x240 [ 56.093826][ T3636] block_write_begin+0x93/0x1e0 [ 56.098687][ T3636] ? jfs_write_begin+0x16/0x60 [ 56.103478][ T3636] jfs_write_begin+0x2d/0x60 [ 56.108081][ T3636] generic_perform_write+0x2e4/0x5e0 [ 56.113400][ T3636] ? jfs_write_begin+0x60/0x60 [ 56.118161][ T3636] ? generic_file_direct_write+0x610/0x610 [ 56.123967][ T3636] ? __file_remove_privs+0x6c0/0x6c0 [ 56.129342][ T3636] ? generic_write_checks+0x15c/0x1c0 [ 56.134726][ T3636] __generic_file_write_iter+0x176/0x400 [ 56.140367][ T3636] generic_file_write_iter+0xab/0x310 [ 56.145742][ T3636] vfs_write+0x7dc/0xc50 [ 56.149995][ T3636] ? file_end_write+0x230/0x230 [ 56.154843][ T3636] ? ptrace_stop+0x74d/0x970 [ 56.159441][ T3636] ? _raw_spin_unlock_irq+0x2a/0x40 [ 56.164645][ T3636] ? __fdget_pos+0x252/0x2e0 [ 56.169240][ T3636] ksys_write+0x177/0x2a0 [ 56.173680][ T3636] ? __ia32_sys_read+0x80/0x80 [ 56.178454][ T3636] ? syscall_enter_from_user_mode+0x2e/0x1d0 [ 56.184457][ T3636] ? syscall_enter_from_user_mode+0x86/0x1d0 [ 56.190449][ T3636] do_syscall_64+0x3d/0xb0 [ 56.194872][ T3636] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 56.200769][ T3636] RIP: 0033:0x7f1e14cd7299 [ 56.205183][ T3636] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 56.224872][ T3636] RSP: 002b:00007ffc704d4518 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 56.233316][ T3636] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f1e14cd7299 [ 56.241308][ T3636] RDX: 0000000001670e68 RSI: 0000000020000000 RDI: 0000000000000003 [ 56.249289][ T3636] RBP: 0000000000000000 R08: 00007f1e14d4aec0 R09: 00007f1e14d4aec0 [ 56.257265][ T3636] R10: 0000000000000002 R11: 0000000000000246 R12: 00007ffc704d4540 [ 56.265240][ T3636] R13: 0000000000000000 R14: 431bde82d7b634db R15: 0000000000000000 [ 56.273229][ T3636] [ 56.279500][ T3636] ================================================================================ [ 56.288869][ T3636] Kernel panic - not syncing: panic_on_warn set ... [ 56.295467][ T3636] CPU: 1 PID: 3636 Comm: syz-executor228 Not tainted 6.1.0-rc6-syzkaller #0 [ 56.304138][ T3636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 56.314219][ T3636] Call Trace: [ 56.317491][ T3636] [ 56.320411][ T3636] dump_stack_lvl+0x1b1/0x28e [ 56.325169][ T3636] ? nf_tcp_handle_invalid+0x62e/0x62e [ 56.330619][ T3636] ? panic+0x710/0x710 [ 56.334850][ T3636] ? __irq_work_queue_local+0x121/0x180 [ 56.340389][ T3636] ? vscnprintf+0x59/0x80 [ 56.344710][ T3636] panic+0x2d6/0x710 [ 56.348608][ T3636] ? __ubsan_handle_shift_out_of_bounds+0x360/0x3b0 [ 56.355199][ T3636] ? memcpy_page_flushcache+0xfc/0xfc [ 56.360595][ T3636] ? panic+0x710/0x710 [ 56.364697][ T3636] ? extAlloc+0x104/0xff0 [ 56.369037][ T3636] __ubsan_handle_shift_out_of_bounds+0x3af/0x3b0 [ 56.375454][ T3636] ? do_raw_spin_unlock+0x134/0x8a0 [ 56.380655][ T3636] extAlloc+0xe40/0xff0 [ 56.384819][ T3636] ? jfs_ioc_trim+0x660/0x660 [ 56.389492][ T3636] ? down_read_non_owner+0xa0/0xa0 [ 56.394620][ T3636] jfs_get_block+0x342/0xce0 [ 56.399212][ T3636] ? jfs_dirty_inode+0x240/0x240 [ 56.404173][ T3636] ? create_page_buffers+0x244/0x4b0 [ 56.409498][ T3636] __block_write_begin_int+0x54c/0x1a80 [ 56.415111][ T3636] ? jfs_dirty_inode+0x240/0x240 [ 56.420056][ T3636] ? page_zero_new_buffers+0x940/0x940 [ 56.425696][ T3636] ? PageHeadHuge+0x8a/0x1d0 [ 56.430300][ T3636] ? jfs_dirty_inode+0x240/0x240 [ 56.435244][ T3636] block_write_begin+0x93/0x1e0 [ 56.440100][ T3636] ? jfs_write_begin+0x16/0x60 [ 56.444886][ T3636] jfs_write_begin+0x2d/0x60 [ 56.449482][ T3636] generic_perform_write+0x2e4/0x5e0 [ 56.458003][ T3636] ? jfs_write_begin+0x60/0x60 [ 56.462780][ T3636] ? generic_file_direct_write+0x610/0x610 [ 56.468604][ T3636] ? __file_remove_privs+0x6c0/0x6c0 [ 56.473894][ T3636] ? generic_write_checks+0x15c/0x1c0 [ 56.479299][ T3636] __generic_file_write_iter+0x176/0x400 [ 56.484959][ T3636] generic_file_write_iter+0xab/0x310 [ 56.490348][ T3636] vfs_write+0x7dc/0xc50 [ 56.494621][ T3636] ? file_end_write+0x230/0x230 [ 56.499480][ T3636] ? ptrace_stop+0x74d/0x970 [ 56.504068][ T3636] ? _raw_spin_unlock_irq+0x2a/0x40 [ 56.509257][ T3636] ? __fdget_pos+0x252/0x2e0 [ 56.513857][ T3636] ksys_write+0x177/0x2a0 [ 56.518212][ T3636] ? __ia32_sys_read+0x80/0x80 [ 56.522994][ T3636] ? syscall_enter_from_user_mode+0x2e/0x1d0 [ 56.528968][ T3636] ? syscall_enter_from_user_mode+0x86/0x1d0 [ 56.534946][ T3636] do_syscall_64+0x3d/0xb0 [ 56.539356][ T3636] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 56.545241][ T3636] RIP: 0033:0x7f1e14cd7299 [ 56.549648][ T3636] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 56.569260][ T3636] RSP: 002b:00007ffc704d4518 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 56.577685][ T3636] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f1e14cd7299 [ 56.585654][ T3636] RDX: 0000000001670e68 RSI: 0000000020000000 RDI: 0000000000000003 [ 56.593632][ T3636] RBP: 0000000000000000 R08: 00007f1e14d4aec0 R09: 00007f1e14d4aec0 [ 56.601681][ T3636] R10: 0000000000000002 R11: 0000000000000246 R12: 00007ffc704d4540 [ 56.609646][ T3636] R13: 0000000000000000 R14: 431bde82d7b634db R15: 0000000000000000 [ 56.617621][ T3636] [ 56.621141][ T3636] Kernel Offset: disabled [ 56.625625][ T3636] Rebooting in 86400 seconds..