./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2605756016 <...> Warning: Permanently added '10.128.0.216' (ED25519) to the list of known hosts. execve("./syz-executor2605756016", ["./syz-executor2605756016"], 0x7ffd30caae40 /* 10 vars */) = 0 brk(NULL) = 0x555587b96000 brk(0x555587b96d00) = 0x555587b96d00 [ 87.277436][ T980] cfg80211: failed to load regulatory.db arch_prctl(ARCH_SET_FS, 0x555587b96380) = 0 set_tid_address(0x555587b96650) = 5838 set_robust_list(0x555587b96660, 24) = 0 rseq(0x555587b96ca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor2605756016", 4096) = 28 getrandom("\x3a\x29\xe7\x53\x8c\x22\x36\x35", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555587b96d00 brk(0x555587bb7d00) = 0x555587bb7d00 brk(0x555587bb8000) = 0x555587bb8000 mprotect(0x7f6faeaae000, 16384, PROT_READ) = 0 mmap(0x1ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffffffff000 mmap(0x200000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200000000000 mmap(0x200001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200001000000 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5839 attached , child_tidptr=0x555587b96650) = 5839 [pid 5839] set_robust_list(0x555587b96660, 24) = 0 [pid 5839] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5839] setpgid(0, 0) = 0 [pid 5839] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5839] write(3, "1000", 4) = 4 [pid 5839] close(3) = 0 executing program [pid 5839] write(1, "executing program\n", 18) = 18 [pid 5839] memfd_create("syzkaller", 0) = 3 [pid 5839] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f6fa65ef000 [pid 5839] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5839] munmap(0x7f6fa65ef000, 138412032) = 0 [pid 5839] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5839] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5839] close(3) = 0 [pid 5839] close(4) = 0 [pid 5839] mkdir("./file1", 0777) = 0 [ 87.780683][ T5839] loop0: detected capacity change from 0 to 32768 [pid 5839] mount("/dev/loop0", "./file1", "jfs", MS_NOSUID|MS_NODIRATIME|MS_REC|MS_SILENT|MS_POSIXACL, "") = 0 [pid 5839] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5839] chdir("./file1") = 0 [pid 5839] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5839] openat(AT_FDCWD, "./bus", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 4 [pid 5839] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT, 000) = 5 [ 87.936180][ T5839] ------------[ cut here ]------------ [ 87.936194][ T5839] UBSAN: shift-out-of-bounds in fs/jfs/jfs_extent.c:329:16 [ 87.936209][ T5839] shift exponent 64 is too large for 64-bit type 's64' (aka 'long long') [ 87.936236][ T5839] CPU: 0 UID: 0 PID: 5839 Comm: syz-executor260 Tainted: G W 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT_{RT,(full)} [ 87.936255][ T5839] Tainted: [W]=WARN [ 87.936260][ T5839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 87.936268][ T5839] Call Trace: [ 87.936274][ T5839] [ 87.936280][ T5839] dump_stack_lvl+0x189/0x250 [ 87.936315][ T5839] ? __pfx_dump_stack_lvl+0x10/0x10 [ 87.936339][ T5839] ? __pfx__printk+0x10/0x10 [ 87.936363][ T5839] ubsan_epilogue+0xa/0x40 [ 87.936376][ T5839] __ubsan_handle_shift_out_of_bounds+0x386/0x410 [ 87.936406][ T5839] ? extAlloc+0x13c/0xfb0 [ 87.936424][ T5839] extAlloc+0xd52/0xfb0 [ 87.936449][ T5839] ? __pfx_extAlloc+0x10/0x10 [ 87.936462][ T5839] ? rwbase_write_lock+0x56f/0x750 [ 87.936480][ T5839] ? __lock_acquire+0xab9/0xd20 [ 87.936502][ T5839] jfs_get_block+0x346/0xab0 [ 87.936524][ T5839] ? __pfx_jfs_get_block+0x10/0x10 [ 87.936550][ T5839] __block_write_begin_int+0x6b2/0x1900 [ 87.936576][ T5839] ? __pfx_jfs_get_block+0x10/0x10 [ 87.936592][ T5839] ? __pfx___block_write_begin_int+0x10/0x10 [ 87.936607][ T5839] ? __filemap_get_folio+0x6ed/0xa40 [ 87.936628][ T5839] ? jfs_write_end+0x68/0x90 [ 87.936652][ T5839] ? __pfx_jfs_get_block+0x10/0x10 [ 87.936664][ T5839] block_write_begin+0x8a/0x120 [ 87.936676][ T5839] ? jfs_write_begin+0x1d/0x80 [ 87.936691][ T5839] jfs_write_begin+0x35/0x80 [ 87.936706][ T5839] generic_perform_write+0x29d/0x8c0 [ 87.936730][ T5839] ? __pfx_generic_perform_write+0x10/0x10 [ 87.936743][ T5839] ? file_update_time+0x41c/0x490 [ 87.936760][ T5839] ? __generic_file_write_iter+0xfc/0x240 [ 87.936772][ T5839] ? generic_file_write_iter+0x104/0x550 [ 87.936787][ T5839] generic_file_write_iter+0x118/0x550 [ 87.936800][ T5839] ? __lock_acquire+0xab9/0xd20 [ 87.936815][ T5839] ? __pfx_generic_file_write_iter+0x10/0x10 [ 87.936833][ T5839] ? __lock_acquire+0xab9/0xd20 [ 87.936859][ T5839] ? __lock_acquire+0xab9/0xd20 [ 87.936882][ T5839] ? rcu_read_lock_any_held+0xb3/0x120 [ 87.936905][ T5839] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 87.936928][ T5839] vfs_write+0x554/0xaa0 [ 87.936947][ T5839] ? __pfx_generic_file_write_iter+0x10/0x10 [ 87.936961][ T5839] ? __pfx_vfs_write+0x10/0x10 [ 87.936992][ T5839] ksys_write+0x14b/0x260 [ 87.937008][ T5839] ? __pfx_ksys_write+0x10/0x10 [ 87.937031][ T5839] do_syscall_64+0xfa/0x3b0 [ 87.937045][ T5839] ? lockdep_hardirqs_on+0x9c/0x150 [ 87.937058][ T5839] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.937071][ T5839] ? clear_bhb_loop+0x60/0xb0 [ 87.937086][ T5839] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.937098][ T5839] RIP: 0033:0x7f6faea35b99 [ 87.937116][ T5839] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 87.937126][ T5839] RSP: 002b:00007ffda611b258 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 87.937142][ T5839] RAX: ffffffffffffffda RBX: 0031656c69662f2e RCX: 00007f6faea35b99 [ 87.937151][ T5839] RDX: 00000000fffffdef RSI: 00002000000000c0 RDI: 0000000000000005 [ 87.937159][ T5839] RBP: 00007f6faeaae5f0 R08: 0000555587b974c0 R09: 0000555587b974c0 [ 87.937167][ T5839] R10: 0000555587b974c0 R11: 0000000000000246 R12: 00007ffda611b280 [ 87.937176][ T5839] R13: 00007ffda611b4a8 R14: 431bde82d7b634db R15: 00007f6faea7e03b [ 87.937197][ T5839] [ 87.937204][ T5839] ---[ end trace ]--- [ 87.937219][ T5839] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 87.937234][ T5839] CPU: 0 UID: 0 PID: 5839 Comm: syz-executor260 Tainted: G W 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT_{RT,(full)} [ 87.937261][ T5839] Tainted: [W]=WARN [ 87.937272][ T5839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 87.937283][ T5839] Call Trace: [ 87.937290][ T5839] [ 87.937298][ T5839] dump_stack_lvl+0x99/0x250 [ 87.937327][ T5839] ? __asan_memcpy+0x40/0x70 [ 87.937349][ T5839] ? __pfx_dump_stack_lvl+0x10/0x10 [ 87.937376][ T5839] ? __pfx__printk+0x10/0x10 [ 87.937412][ T5839] vpanic+0x281/0x750 [ 87.937444][ T5839] ? __pfx_vpanic+0x10/0x10 [ 87.937485][ T5839] panic+0xb9/0xc0 [ 87.937513][ T5839] ? __pfx_panic+0x10/0x10 [ 87.937546][ T5839] ? __pfx__printk+0x10/0x10 [ 87.937580][ T5839] check_panic_on_warn+0x89/0xb0 [ 87.937606][ T5839] __ubsan_handle_shift_out_of_bounds+0x386/0x410 [ 87.937665][ T5839] ? extAlloc+0x13c/0xfb0 [ 87.937693][ T5839] extAlloc+0xd52/0xfb0 [ 87.937735][ T5839] ? __pfx_extAlloc+0x10/0x10 [ 87.937757][ T5839] ? rwbase_write_lock+0x56f/0x750 [ 87.937780][ T5839] ? __lock_acquire+0xab9/0xd20 [ 87.937800][ T5839] jfs_get_block+0x346/0xab0 [ 87.937820][ T5839] ? __pfx_jfs_get_block+0x10/0x10 [ 87.937845][ T5839] __block_write_begin_int+0x6b2/0x1900 [ 87.937869][ T5839] ? __pfx_jfs_get_block+0x10/0x10 [ 87.937885][ T5839] ? __pfx___block_write_begin_int+0x10/0x10 [ 87.937903][ T5839] ? __filemap_get_folio+0x6ed/0xa40 [ 87.937921][ T5839] ? jfs_write_end+0x68/0x90 [ 87.937935][ T5839] ? __pfx_jfs_get_block+0x10/0x10 [ 87.937948][ T5839] block_write_begin+0x8a/0x120 [ 87.937959][ T5839] ? jfs_write_begin+0x1d/0x80 [ 87.937974][ T5839] jfs_write_begin+0x35/0x80 [ 87.937989][ T5839] generic_perform_write+0x29d/0x8c0 [ 87.938011][ T5839] ? __pfx_generic_perform_write+0x10/0x10 [ 87.938024][ T5839] ? file_update_time+0x41c/0x490 [ 87.938040][ T5839] ? __generic_file_write_iter+0xfc/0x240 [ 87.938052][ T5839] ? generic_file_write_iter+0x104/0x550 [ 87.938067][ T5839] generic_file_write_iter+0x118/0x550 [ 87.938080][ T5839] ? __lock_acquire+0xab9/0xd20 [ 87.938096][ T5839] ? __pfx_generic_file_write_iter+0x10/0x10 [ 87.938109][ T5839] ? __lock_acquire+0xab9/0xd20 [ 87.938134][ T5839] ? __lock_acquire+0xab9/0xd20 [ 87.938157][ T5839] ? rcu_read_lock_any_held+0xb3/0x120 [ 87.938169][ T5839] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 87.938191][ T5839] vfs_write+0x554/0xaa0 [ 87.938209][ T5839] ? __pfx_generic_file_write_iter+0x10/0x10 [ 87.938224][ T5839] ? __pfx_vfs_write+0x10/0x10 [ 87.938253][ T5839] ksys_write+0x14b/0x260 [ 87.938269][ T5839] ? __pfx_ksys_write+0x10/0x10 [ 87.938291][ T5839] do_syscall_64+0xfa/0x3b0 [ 87.938304][ T5839] ? lockdep_hardirqs_on+0x9c/0x150 [ 87.938317][ T5839] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.938329][ T5839] ? clear_bhb_loop+0x60/0xb0 [ 87.938344][ T5839] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.938356][ T5839] RIP: 0033:0x7f6faea35b99 [ 87.938368][ T5839] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 87.938378][ T5839] RSP: 002b:00007ffda611b258 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 87.938391][ T5839] RAX: ffffffffffffffda RBX: 0031656c69662f2e RCX: 00007f6faea35b99 [ 87.938400][ T5839] RDX: 00000000fffffdef RSI: 00002000000000c0 RDI: 0000000000000005 [ 87.938409][ T5839] RBP: 00007f6faeaae5f0 R08: 0000555587b974c0 R09: 0000555587b974c0 [ 87.938417][ T5839] R10: 0000555587b974c0 R11: 0000000000000246 R12: 00007ffda611b280 [ 87.938426][ T5839] R13: 00007ffda611b4a8 R14: 431bde82d7b634db R15: 00007f6faea7e03b [ 87.938445][ T5839] [ 87.938888][ T5839] Kernel Offset: disabled