./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3968388172
<...>
DUID 00:04:b8:e6:73:7f:79:fd:ed:d3:a2:45:9d:0b:c9:97:07:5c
forked to background, child pid 4687
[ 20.657832][ T4688] 8021q: adding VLAN 0 to HW filter on device bond0
[ 20.666273][ T4688] eql: remember to turn off Van-Jacobson compression on your slave devices
Starting sshd: OK
syzkaller
Warning: Permanently added '10.128.0.155' (ECDSA) to the list of known hosts.
execve("./syz-executor3968388172", ["./syz-executor3968388172"], 0x7ffcc5110910 /* 10 vars */) = 0
brk(NULL) = 0x555556450000
brk(0x555556450c40) = 0x555556450c40
arch_prctl(ARCH_SET_FS, 0x555556450300) = 0
uname({sysname="Linux", nodename="syzkaller", ...}) = 0
readlink("/proc/self/exe", "/root/syz-executor3968388172", 4096) = 28
brk(0x555556471c40) = 0x555556471c40
brk(0x555556472000) = 0x555556472000
mprotect(0x7fe8809ce000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
memfd_create("syzkaller", 0) = 3
mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe87850f000
syzkaller login: [ 39.704877][ T5018] memfd_create() without MFD_EXEC nor MFD_NOEXEC_SEAL, pid=5018 'syz-executor396'
write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216
munmap(0x7fe87850f000, 16777216) = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
ioctl(4, LOOP_SET_FD, 3) = 0
close(3) = 0
mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0
mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "jfs", MS_NOSUID, "uid=0x0000000000000000,noquota,grpquota,iocharset=macgaelic,") = 0
openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3
chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0
ioctl(4, LOOP_CLR_FD) = 0
close(4) = 0
openat(AT_FDCWD, "blkio.bfq.sectors", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4
[ 39.800294][ T5018] loop0: detected capacity change from 0 to 32768
[ 39.961235][ T5018] ================================================================================
[ 39.970847][ T5018] UBSAN: shift-out-of-bounds in fs/jfs/jfs_extent.c:314:16
[ 39.978065][ T5018] shift exponent -1 is negative
[ 39.982907][ T5018] CPU: 1 PID: 5018 Comm: syz-executor396 Not tainted 6.4.0-syzkaller-12491-gc192ac735768 #0
[ 39.993035][ T5018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023
[ 40.003155][ T5018] Call Trace:
[ 40.006500][ T5018]
[ 40.009410][ T5018] dump_stack_lvl+0x136/0x150
[ 40.014087][ T5018] __ubsan_handle_shift_out_of_bounds+0x221/0x5a0
[ 40.020490][ T5018] extAlloc.cold+0x8d/0x92
[ 40.024893][ T5018] ? jfs_ioc_trim+0x5c0/0x5c0
[ 40.029552][ T5018] ? down_write_nested+0x153/0x200
[ 40.034647][ T5018] ? find_held_lock+0x2d/0x110
[ 40.039394][ T5018] jfs_get_block+0x665/0xa90
[ 40.043967][ T5018] ? jfs_read_folio+0x20/0x20
[ 40.048627][ T5018] ? folio_flags.constprop.0+0x53/0x150
[ 40.054176][ T5018] ? do_raw_spin_unlock+0x175/0x230
[ 40.059355][ T5018] ? _raw_spin_unlock+0x28/0x40
[ 40.064185][ T5018] __block_write_begin_int+0x3b1/0x14a0
[ 40.069712][ T5018] ? jfs_read_folio+0x20/0x20
[ 40.074373][ T5018] ? invalidate_bh_lrus_cpu+0x170/0x170
[ 40.079896][ T5018] ? fault_in_readable+0x129/0x210
[ 40.084985][ T5018] ? folio_flags.constprop.0+0x53/0x150
[ 40.090524][ T5018] ? jfs_read_folio+0x20/0x20
[ 40.095195][ T5018] block_write_begin+0xb9/0x4d0
[ 40.100044][ T5018] jfs_write_begin+0x31/0xd0
[ 40.104632][ T5018] generic_perform_write+0x26b/0x5d0
[ 40.109924][ T5018] ? generic_file_readonly_mmap+0x190/0x190
[ 40.115817][ T5018] ? new_inode+0x280/0x280
[ 40.120228][ T5018] ? generic_write_checks_count+0x2c0/0x2c0
[ 40.126109][ T5018] __generic_file_write_iter+0x1f8/0x240
[ 40.131733][ T5018] generic_file_write_iter+0xe3/0x350
[ 40.137121][ T5018] vfs_write+0x981/0xda0
[ 40.141362][ T5018] ? kernel_write+0x680/0x680
[ 40.146027][ T5018] ? recalc_sigpending_tsk+0x18b/0x1d0
[ 40.151481][ T5018] ? find_held_lock+0x2d/0x110
[ 40.156241][ T5018] ? lock_downgrade+0x690/0x690
[ 40.161082][ T5018] ? __fget_light+0x201/0x270
[ 40.165754][ T5018] ksys_write+0x122/0x250
[ 40.170077][ T5018] ? __ia32_sys_read+0xb0/0xb0
[ 40.174833][ T5018] ? lockdep_hardirqs_on+0x7d/0x100
[ 40.180020][ T5018] ? _raw_spin_unlock_irq+0x2e/0x50
[ 40.185209][ T5018] ? ptrace_notify+0xfe/0x140
[ 40.189876][ T5018] do_syscall_64+0x39/0xb0
[ 40.194287][ T5018] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 40.200176][ T5018] RIP: 0033:0x7fe88095bb69
[ 40.204615][ T5018] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 40.224208][ T5018] RSP: 002b:00007fffaad03c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 40.232608][ T5018] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fe88095bb69
[ 40.240568][ T5018] RDX: 000000000208e24b RSI: 00000000200001c0 RDI: 0000000000000004
[ 40.248542][ T5018] RBP: 00007fe88091b170 R08: 0000000000000000 R09: 0000000000000000
[ 40.256498][ T5018] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe88091b200
[ 40.264459][ T5018] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 40.272427][ T5018]
[ 40.275646][ T5018] ================================================================================
[ 40.286404][ T5018] Kernel panic - not syncing: UBSAN: panic_on_warn set ...
[ 40.293595][ T5018] CPU: 1 PID: 5018 Comm: syz-executor396 Not tainted 6.4.0-syzkaller-12491-gc192ac735768 #0
[ 40.303634][ T5018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023
[ 40.313701][ T5018] Call Trace:
[ 40.316962][ T5018]
[ 40.319872][ T5018] dump_stack_lvl+0xd9/0x150
[ 40.324467][ T5018] panic+0x686/0x730
[ 40.328363][ T5018] ? panic_smp_self_stop+0xa0/0xa0
[ 40.333455][ T5018] ? syslog_print_all+0x3a0/0x3a0
[ 40.338466][ T5018] check_panic_on_warn+0xb1/0xc0
[ 40.343383][ T5018] __ubsan_handle_shift_out_of_bounds+0x249/0x5a0
[ 40.349787][ T5018] extAlloc.cold+0x8d/0x92
[ 40.354208][ T5018] ? jfs_ioc_trim+0x5c0/0x5c0
[ 40.358870][ T5018] ? down_write_nested+0x153/0x200
[ 40.363960][ T5018] ? find_held_lock+0x2d/0x110
[ 40.368701][ T5018] jfs_get_block+0x665/0xa90
[ 40.373290][ T5018] ? jfs_read_folio+0x20/0x20
[ 40.377952][ T5018] ? folio_flags.constprop.0+0x53/0x150
[ 40.383481][ T5018] ? do_raw_spin_unlock+0x175/0x230
[ 40.388662][ T5018] ? _raw_spin_unlock+0x28/0x40
[ 40.393496][ T5018] __block_write_begin_int+0x3b1/0x14a0
[ 40.399019][ T5018] ? jfs_read_folio+0x20/0x20
[ 40.403850][ T5018] ? invalidate_bh_lrus_cpu+0x170/0x170
[ 40.409372][ T5018] ? fault_in_readable+0x129/0x210
[ 40.414460][ T5018] ? folio_flags.constprop.0+0x53/0x150
[ 40.420164][ T5018] ? jfs_read_folio+0x20/0x20
[ 40.424818][ T5018] block_write_begin+0xb9/0x4d0
[ 40.429650][ T5018] jfs_write_begin+0x31/0xd0
[ 40.434322][ T5018] generic_perform_write+0x26b/0x5d0
[ 40.439597][ T5018] ? generic_file_readonly_mmap+0x190/0x190
[ 40.445472][ T5018] ? new_inode+0x280/0x280
[ 40.449875][ T5018] ? generic_write_checks_count+0x2c0/0x2c0
[ 40.455765][ T5018] __generic_file_write_iter+0x1f8/0x240
[ 40.461385][ T5018] generic_file_write_iter+0xe3/0x350
[ 40.466737][ T5018] vfs_write+0x981/0xda0
[ 40.470961][ T5018] ? kernel_write+0x680/0x680
[ 40.475616][ T5018] ? recalc_sigpending_tsk+0x18b/0x1d0
[ 40.481057][ T5018] ? find_held_lock+0x2d/0x110
[ 40.485807][ T5018] ? lock_downgrade+0x690/0x690
[ 40.490636][ T5018] ? __fget_light+0x201/0x270
[ 40.495309][ T5018] ksys_write+0x122/0x250
[ 40.499643][ T5018] ? __ia32_sys_read+0xb0/0xb0
[ 40.504386][ T5018] ? lockdep_hardirqs_on+0x7d/0x100
[ 40.509564][ T5018] ? _raw_spin_unlock_irq+0x2e/0x50
[ 40.514759][ T5018] ? ptrace_notify+0xfe/0x140
[ 40.519418][ T5018] do_syscall_64+0x39/0xb0
[ 40.523815][ T5018] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 40.529687][ T5018] RIP: 0033:0x7fe88095bb69
[ 40.534076][ T5018] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 40.553665][ T5018] RSP: 002b:00007fffaad03c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 40.562056][ T5018] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fe88095bb69
[ 40.570004][ T5018] RDX: 000000000208e24b RSI: 00000000200001c0 RDI: 0000000000000004
[ 40.577951][ T5018] RBP: 00007fe88091b170 R08: 0000000000000000 R09: 0000000000000000
[ 40.585915][ T5018] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe88091b200
[ 40.593885][ T5018] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 40.601842][ T5018]
[ 40.605740][ T5018] Kernel Offset: disabled
[ 40.610119][ T5018] Rebooting in 86400 seconds..