./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3645534739 <...> Warning: Permanently added '10.128.0.49' (ECDSA) to the list of known hosts. execve("./syz-executor3645534739", ["./syz-executor3645534739"], 0x7ffe7db933b0 /* 10 vars */) = 0 brk(NULL) = 0x555557237000 brk(0x555557237c40) = 0x555557237c40 arch_prctl(ARCH_SET_FS, 0x555557237300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor3645534739", 4096) = 28 brk(0x555557258c40) = 0x555557258c40 brk(0x555557259000) = 0x555557259000 mprotect(0x7fa111438000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 memfd_create("syzkaller", 0) = 3 ftruncate(3, 131072) = 0 pwrite64(3, "\x01\x16\x19\x70\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x64\x00\x00\x00\x00\x00\x00\x07\x09\x00\x00\x07\x6c\x00\x00\x00\x00\x00\x00\x10\x00\x00\x05\x00\x0c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x08\x19\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0c\x00\x00\x00\x00\x00\x00\x09\x25\x6c\x6f\x63\x6b"..., 107, 65536) = 107 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 ioctl(4, LOOP_SET_FD, 3) = 0 mkdir("./file0", 0777) = 0 syzkaller login: [ 41.770186][ T3605] loop0: detected capacity change from 0 to 256 [ 41.781816][ T3605] gfs2: fsid=loop0: Trying to join cluster "lock_nolock", "loop0" [ 41.789998][ T3605] gfs2: fsid=loop0: Now mounting FS (format 1801)... [ 41.797678][ T3605] ================================================================================ [ 41.807079][ T3605] UBSAN: shift-out-of-bounds in fs/gfs2/ops_fstype.c:295:19 [ 41.814437][ T3605] shift exponent 327683 is too large for 64-bit type 'long unsigned int' [ 41.822941][ T3605] CPU: 1 PID: 3605 Comm: syz-executor364 Not tainted 6.0.0-rc5-syzkaller-00089-g6879c2d3b960 #0 [ 41.833332][ T3605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 41.843455][ T3605] Call Trace: [ 41.846718][ T3605] [ 41.849628][ T3605] dump_stack_lvl+0xcd/0x134 [ 41.854395][ T3605] ubsan_epilogue+0xb/0x50 [ 41.858792][ T3605] __ubsan_handle_shift_out_of_bounds.cold+0xb1/0x187 [ 41.865628][ T3605] ? gfs2_read_super+0x56d/0x17a0 [ 41.870639][ T3605] init_sb.cold+0x19/0x109 [ 41.875042][ T3605] ? gfs2_read_super+0x17a0/0x17a0 [ 41.880137][ T3605] ? init_sb+0xb9/0x1080 [ 41.884362][ T3605] ? __debugfs_create_file+0x392/0x540 [ 41.889823][ T3605] gfs2_fill_super+0x1836/0x27f0 [ 41.894751][ T3605] ? gfs2_reconfigure+0x1060/0x1060 [ 41.899932][ T3605] ? gfs2_fill_super+0x1744/0x27f0 [ 41.905037][ T3605] ? snprintf+0xbb/0xf0 [ 41.909178][ T3605] ? vsprintf+0x30/0x30 [ 41.913310][ T3605] ? wait_for_completion_io_timeout+0x20/0x20 [ 41.919367][ T3605] ? set_blocksize+0x2e5/0x370 [ 41.924340][ T3605] get_tree_bdev+0x440/0x760 [ 41.929191][ T3605] ? gfs2_reconfigure+0x1060/0x1060 [ 41.934378][ T3605] gfs2_get_tree+0x4a/0x270 [ 41.938886][ T3605] vfs_get_tree+0x89/0x2f0 [ 41.943289][ T3605] path_mount+0x1326/0x1e20 [ 41.947781][ T3605] ? kmem_cache_free+0xeb/0x5b0 [ 41.952612][ T3605] ? finish_automount+0x960/0x960 [ 41.957620][ T3605] ? putname+0xfe/0x140 [ 41.961780][ T3605] __x64_sys_mount+0x27f/0x300 [ 41.966533][ T3605] ? copy_mnt_ns+0xae0/0xae0 [ 41.971102][ T3605] ? lockdep_hardirqs_on+0x79/0x100 [ 41.976285][ T3605] ? _raw_spin_unlock_irq+0x2a/0x40 [ 41.981464][ T3605] ? ptrace_notify+0xfa/0x140 [ 41.986128][ T3605] do_syscall_64+0x35/0xb0 [ 41.990550][ T3605] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 41.996683][ T3605] RIP: 0033:0x7fa1113cd16a [ 42.001078][ T3605] Code: 83 c4 08 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 42.020930][ T3605] RSP: 002b:00007fff4957a3d8 EFLAGS: 00000282 ORIG_RAX: 00000000000000a5 [ 42.029324][ T3605] RAX: ffffffffffffffda RBX: 00007fff4957a430 RCX: 00007fa1113cd16a [ 42.037552][ T3605] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007fff4957a3f0 [ 42.045505][ T3605] RBP: 00007fff4957a3f0 R08: 00007fff4957a430 R09: 0000000000000000 [ 42.053469][ T3605] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000020000218 [ 42.061420][ T3605] R13: 0000000000000003 R14: 0000000000000004 R15: 0000000000000001 [ 42.069385][ T3605] [ 42.072765][ T3605] ================================================================================ [ 42.082378][ T3605] Kernel panic - not syncing: panic_on_warn set ... [ 42.088957][ T3605] CPU: 1 PID: 3605 Comm: syz-executor364 Not tainted 6.0.0-rc5-syzkaller-00089-g6879c2d3b960 #0 [ 42.099357][ T3605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 [ 42.109662][ T3605] Call Trace: [ 42.112932][ T3605] [ 42.115855][ T3605] dump_stack_lvl+0xcd/0x134 [ 42.120447][ T3605] panic+0x2c8/0x627 [ 42.124336][ T3605] ? panic_print_sys_info.part.0+0x10b/0x10b [ 42.130315][ T3605] ? ubsan_epilogue+0x3e/0x50 [ 42.134991][ T3605] ubsan_epilogue+0x4a/0x50 [ 42.139488][ T3605] __ubsan_handle_shift_out_of_bounds.cold+0xb1/0x187 [ 42.146335][ T3605] ? gfs2_read_super+0x56d/0x17a0 [ 42.151362][ T3605] init_sb.cold+0x19/0x109 [ 42.155783][ T3605] ? gfs2_read_super+0x17a0/0x17a0 [ 42.160896][ T3605] ? init_sb+0xb9/0x1080 [ 42.165133][ T3605] ? __debugfs_create_file+0x392/0x540 [ 42.170587][ T3605] gfs2_fill_super+0x1836/0x27f0 [ 42.175527][ T3605] ? gfs2_reconfigure+0x1060/0x1060 [ 42.180722][ T3605] ? gfs2_fill_super+0x1744/0x27f0 [ 42.185827][ T3605] ? snprintf+0xbb/0xf0 [ 42.189979][ T3605] ? vsprintf+0x30/0x30 [ 42.194124][ T3605] ? wait_for_completion_io_timeout+0x20/0x20 [ 42.200193][ T3605] ? set_blocksize+0x2e5/0x370 [ 42.205216][ T3605] get_tree_bdev+0x440/0x760 [ 42.209799][ T3605] ? gfs2_reconfigure+0x1060/0x1060 [ 42.214990][ T3605] gfs2_get_tree+0x4a/0x270 [ 42.219491][ T3605] vfs_get_tree+0x89/0x2f0 [ 42.223903][ T3605] path_mount+0x1326/0x1e20 [ 42.228403][ T3605] ? kmem_cache_free+0xeb/0x5b0 [ 42.233243][ T3605] ? finish_automount+0x960/0x960 [ 42.238290][ T3605] ? putname+0xfe/0x140 [ 42.242456][ T3605] __x64_sys_mount+0x27f/0x300 [ 42.247223][ T3605] ? copy_mnt_ns+0xae0/0xae0 [ 42.251828][ T3605] ? lockdep_hardirqs_on+0x79/0x100 [ 42.257041][ T3605] ? _raw_spin_unlock_irq+0x2a/0x40 [ 42.262227][ T3605] ? ptrace_notify+0xfa/0x140 [ 42.266899][ T3605] do_syscall_64+0x35/0xb0 [ 42.271399][ T3605] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 42.277281][ T3605] RIP: 0033:0x7fa1113cd16a [ 42.281688][ T3605] Code: 83 c4 08 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 42.301288][ T3605] RSP: 002b:00007fff4957a3d8 EFLAGS: 00000282 ORIG_RAX: 00000000000000a5 [ 42.309696][ T3605] RAX: ffffffffffffffda RBX: 00007fff4957a430 RCX: 00007fa1113cd16a [ 42.317655][ T3605] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007fff4957a3f0 [ 42.325791][ T3605] RBP: 00007fff4957a3f0 R08: 00007fff4957a430 R09: 0000000000000000 [ 42.333750][ T3605] R10: 0000000000000000 R11: 0000000000000282 R12: 0000000020000218 [ 42.341713][ T3605] R13: 0000000000000003 R14: 0000000000000004 R15: 0000000000000001 [ 42.349686][ T3605] [ 42.353943][ T3605] Kernel Offset: disabled [ 42.358330][ T3605] Rebooting in 86400 seconds..