./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3753098953 <...> Warning: Permanently added '10.128.0.73' (ED25519) to the list of known hosts. execve("./syz-executor3753098953", ["./syz-executor3753098953"], 0x7ffcca2ed140 /* 10 vars */) = 0 brk(NULL) = 0x5555559b4000 brk(0x5555559b4d00) = 0x5555559b4d00 arch_prctl(ARCH_SET_FS, 0x5555559b4380) = 0 set_tid_address(0x5555559b4650) = 5017 set_robust_list(0x5555559b4660, 24) = 0 rseq(0x5555559b4ca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor3753098953", 4096) = 28 getrandom("\xca\x09\x15\x52\x2c\x63\xda\xf5", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x5555559b4d00 brk(0x5555559d5d00) = 0x5555559d5d00 brk(0x5555559d6000) = 0x5555559d6000 mprotect(0x7f8e0208f000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 memfd_create("syzkaller", 0) = 3 mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8df9bd9000 [ 71.670824][ T5017] memfd_create() without MFD_EXEC nor MFD_NOEXEC_SEAL, pid=5017 'syz-executor375' write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 munmap(0x7f8df9bd9000, 16777216) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 ioctl(4, LOOP_SET_FD, 3) = 0 close(3) = 0 mkdir("./file0", 0777) = 0 mount("/dev/loop0", "./file0", "jfs", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME|MS_LAZYTIME, "") = 0 openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 chdir("./file0") = 0 ioctl(4, LOOP_CLR_FD) = 0 close(4) = 0 open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4 [ 71.854135][ T5017] loop0: detected capacity change from 0 to 32768 [ 72.128859][ T5017] ================================================================================ [ 72.138336][ T5017] UBSAN: shift-out-of-bounds in fs/jfs/jfs_extent.c:314:16 [ 72.145648][ T5017] shift exponent -1 is negative [ 72.150572][ T5017] CPU: 1 PID: 5017 Comm: syz-executor375 Not tainted 6.5.0-syzkaller-00453-g727dbda16b83 #0 [ 72.160755][ T5017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 72.170812][ T5017] Call Trace: [ 72.174104][ T5017] [ 72.177038][ T5017] dump_stack_lvl+0x1e7/0x2d0 [ 72.181749][ T5017] ? nf_tcp_handle_invalid+0x650/0x650 [ 72.187213][ T5017] ? panic+0x770/0x770 [ 72.191386][ T5017] ? extAlloc+0x10a/0x1010 [ 72.195815][ T5017] __ubsan_handle_shift_out_of_bounds+0x3c3/0x420 [ 72.202334][ T5017] ? do_raw_spin_unlock+0x13b/0x8b0 [ 72.207551][ T5017] extAlloc+0xe53/0x1010 [ 72.211824][ T5017] ? jfs_ioc_trim+0x660/0x660 [ 72.216782][ T5017] ? clear_nonspinnable+0x60/0x60 [ 72.221851][ T5017] jfs_get_block+0x41b/0xe60 [ 72.226467][ T5017] ? jfs_dirty_inode+0x240/0x240 [ 72.231427][ T5017] ? _raw_spin_unlock+0x28/0x40 [ 72.236295][ T5017] ? folio_create_buffers+0x132/0x250 [ 72.241685][ T5017] __block_write_begin_int+0x555/0x1a60 [ 72.247268][ T5017] ? jfs_dirty_inode+0x240/0x240 [ 72.252216][ T5017] ? folio_zero_new_buffers+0x540/0x540 [ 72.257868][ T5017] ? pagecache_get_page+0xeb/0x220 [ 72.263002][ T5017] ? jfs_dirty_inode+0x240/0x240 [ 72.267951][ T5017] block_write_begin+0x9c/0x1f0 [ 72.272832][ T5017] ? jfs_write_begin+0x1a/0x70 [ 72.277716][ T5017] jfs_write_begin+0x31/0x70 [ 72.282333][ T5017] generic_perform_write+0x31b/0x630 [ 72.287656][ T5017] ? generic_file_direct_write+0x3f0/0x3f0 [ 72.293521][ T5017] ? __generic_file_write_iter+0x101/0x230 [ 72.299450][ T5017] generic_file_write_iter+0xaf/0x310 [ 72.304846][ T5017] vfs_write+0x782/0xaf0 [ 72.309114][ T5017] ? file_end_write+0x250/0x250 [ 72.313994][ T5017] ? lockdep_hardirqs_on+0x98/0x140 [ 72.319212][ T5017] ? __fdget_pos+0x2c7/0x340 [ 72.323825][ T5017] ksys_write+0x1a0/0x2c0 [ 72.328177][ T5017] ? __ia32_sys_read+0x90/0x90 [ 72.332962][ T5017] ? syscall_enter_from_user_mode+0x32/0x230 [ 72.338981][ T5017] ? syscall_enter_from_user_mode+0x8c/0x230 [ 72.344984][ T5017] do_syscall_64+0x41/0xc0 [ 72.349416][ T5017] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 72.355330][ T5017] RIP: 0033:0x7f8e02016679 [ 72.359758][ T5017] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 72.379375][ T5017] RSP: 002b:00007ffe33428fc8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 72.387818][ T5017] RAX: ffffffffffffffda RBX: 00007ffe33429198 RCX: 00007f8e02016679 [ 72.395802][ T5017] RDX: 00000000200000c7 RSI: 00000000200000c0 RDI: 0000000000000004 [ 72.403784][ T5017] RBP: 00007f8e0208f610 R08: 0000000000000000 R09: 00007ffe33429198 [ 72.411780][ T5017] R10: 0000000000005e08 R11: 0000000000000246 R12: 0000000000000001 [ 72.420559][ T5017] R13: 00007ffe33429188 R14: 0000000000000001 R15: 0000000000000001 [ 72.428570][ T5017] [ 72.431862][ T5017] ================================================================================ [ 72.441231][ T5017] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 72.448474][ T5017] CPU: 1 PID: 5017 Comm: syz-executor375 Not tainted 6.5.0-syzkaller-00453-g727dbda16b83 #0 [ 72.458544][ T5017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 72.469904][ T5017] Call Trace: [ 72.473220][ T5017] [ 72.476163][ T5017] dump_stack_lvl+0x1e7/0x2d0 [ 72.480869][ T5017] ? nf_tcp_handle_invalid+0x650/0x650 [ 72.486432][ T5017] ? panic+0x770/0x770 [ 72.490529][ T5017] ? vscnprintf+0x5d/0x80 [ 72.494892][ T5017] panic+0x30f/0x770 [ 72.498840][ T5017] ? check_panic_on_warn+0x21/0xa0 [ 72.504001][ T5017] ? __memcpy_flushcache+0x2b0/0x2b0 [ 72.509340][ T5017] ? dump_stack_lvl+0x253/0x2d0 [ 72.514429][ T5017] check_panic_on_warn+0x82/0xa0 [ 72.519404][ T5017] __ubsan_handle_shift_out_of_bounds+0x3e2/0x420 [ 72.525842][ T5017] ? do_raw_spin_unlock+0x13b/0x8b0 [ 72.531078][ T5017] extAlloc+0xe53/0x1010 [ 72.535355][ T5017] ? jfs_ioc_trim+0x660/0x660 [ 72.540051][ T5017] ? clear_nonspinnable+0x60/0x60 [ 72.545098][ T5017] jfs_get_block+0x41b/0xe60 [ 72.549710][ T5017] ? jfs_dirty_inode+0x240/0x240 [ 72.554672][ T5017] ? _raw_spin_unlock+0x28/0x40 [ 72.559542][ T5017] ? folio_create_buffers+0x132/0x250 [ 72.564928][ T5017] __block_write_begin_int+0x555/0x1a60 [ 72.570659][ T5017] ? jfs_dirty_inode+0x240/0x240 [ 72.575648][ T5017] ? folio_zero_new_buffers+0x540/0x540 [ 72.581236][ T5017] ? pagecache_get_page+0xeb/0x220 [ 72.586393][ T5017] ? jfs_dirty_inode+0x240/0x240 [ 72.591344][ T5017] block_write_begin+0x9c/0x1f0 [ 72.596208][ T5017] ? jfs_write_begin+0x1a/0x70 [ 72.600995][ T5017] jfs_write_begin+0x31/0x70 [ 72.605610][ T5017] generic_perform_write+0x31b/0x630 [ 72.610981][ T5017] ? generic_file_direct_write+0x3f0/0x3f0 [ 72.616842][ T5017] ? __generic_file_write_iter+0x101/0x230 [ 72.622683][ T5017] generic_file_write_iter+0xaf/0x310 [ 72.628083][ T5017] vfs_write+0x782/0xaf0 [ 72.632355][ T5017] ? file_end_write+0x250/0x250 [ 72.637238][ T5017] ? lockdep_hardirqs_on+0x98/0x140 [ 72.642457][ T5017] ? __fdget_pos+0x2c7/0x340 [ 72.647069][ T5017] ksys_write+0x1a0/0x2c0 [ 72.651431][ T5017] ? __ia32_sys_read+0x90/0x90 [ 72.656220][ T5017] ? syscall_enter_from_user_mode+0x32/0x230 [ 72.662223][ T5017] ? syscall_enter_from_user_mode+0x8c/0x230 [ 72.668226][ T5017] do_syscall_64+0x41/0xc0 [ 72.672663][ T5017] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 72.678620][ T5017] RIP: 0033:0x7f8e02016679 [ 72.683051][ T5017] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 72.702680][ T5017] RSP: 002b:00007ffe33428fc8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 72.711114][ T5017] RAX: ffffffffffffffda RBX: 00007ffe33429198 RCX: 00007f8e02016679 [ 72.719099][ T5017] RDX: 00000000200000c7 RSI: 00000000200000c0 RDI: 0000000000000004 [ 72.727078][ T5017] RBP: 00007f8e0208f610 R08: 0000000000000000 R09: 00007ffe33429198 [ 72.735081][ T5017] R10: 0000000000005e08 R11: 0000000000000246 R12: 0000000000000001 [ 72.743067][ T5017] R13: 00007ffe33429188 R14: 0000000000000001 R15: 0000000000000001 [ 72.751063][ T5017] [ 72.754190][ T5017] Kernel Offset: disabled [ 72.758611][ T5017] Rebooting in 86400 seconds..