./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor728379983
<...>
DUID 00:04:ab:86:5b:51:31:5e:ac:a3:74:55:84:ab:cd:90:ff:3d
forked to background, child pid 4694
[ 31.579981][ T4695] 8021q: adding VLAN 0 to HW filter on device bond0
[ 31.589700][ T4695] eql: remember to turn off Van-Jacobson compression on your slave devices
Starting sshd: OK
syzkaller
Warning: Permanently added '10.128.0.65' (ECDSA) to the list of known hosts.
execve("./syz-executor728379983", ["./syz-executor728379983"], 0x7ffcc3913ca0 /* 10 vars */) = 0
brk(NULL) = 0x55555565b000
brk(0x55555565bc40) = 0x55555565bc40
arch_prctl(ARCH_SET_FS, 0x55555565b300) = 0
uname({sysname="Linux", nodename="syzkaller", ...}) = 0
readlink("/proc/self/exe", "/root/syz-executor728379983", 4096) = 27
brk(0x55555567cc40) = 0x55555567cc40
brk(0x55555567d000) = 0x55555567d000
mprotect(0x7f6311aec000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
memfd_create("syzkaller", 0) = 3
mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f630962d000
syzkaller login: [ 56.581231][ T5025] memfd_create() without MFD_EXEC nor MFD_NOEXEC_SEAL, pid=5025 'syz-executor728'
write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216
munmap(0x7f630962d000, 16777216) = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
ioctl(4, LOOP_SET_FD, 3) = 0
close(3) = 0
mkdir("./file0", 0777) = 0
mount("/dev/loop0", "./file0", "jfs", MS_NOATIME, "errors=continue,nointegrity,usrquota,integrity,iocharset=iso8859-6,iocharset=iso8859-7,iocharset=mac"...) = 0
openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
chdir("./file0") = 0
ioctl(4, LOOP_CLR_FD) = 0
close(4) = 0
openat(AT_FDCWD, "memory.events.local", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4
openat(AT_FDCWD, "cgroup.controllers", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 5
[ 56.735099][ T5025] loop0: detected capacity change from 0 to 32768
[ 56.974897][ T5025] ================================================================================
[ 56.984341][ T5025] UBSAN: shift-out-of-bounds in fs/jfs/jfs_extent.c:314:16
[ 56.991605][ T5025] shift exponent -1 is negative
[ 56.996536][ T5025] CPU: 0 PID: 5025 Comm: syz-executor728 Not tainted 6.4.0-next-20230706-syzkaller #0
[ 57.006123][ T5025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023
[ 57.016178][ T5025] Call Trace:
[ 57.019451][ T5025]
[ 57.022371][ T5025] dump_stack_lvl+0x136/0x150
[ 57.027051][ T5025] __ubsan_handle_shift_out_of_bounds+0x221/0x5a0
[ 57.033466][ T5025] extAlloc.cold+0x8d/0x92
[ 57.037879][ T5025] ? jfs_ioc_trim+0x5c0/0x5c0
[ 57.042542][ T5025] ? down_write_nested+0x153/0x200
[ 57.047654][ T5025] ? find_held_lock+0x2d/0x110
[ 57.052411][ T5025] jfs_get_block+0x665/0xa90
[ 57.056995][ T5025] ? jfs_read_folio+0x20/0x20
[ 57.061669][ T5025] ? folio_flags.constprop.0+0x53/0x150
[ 57.067210][ T5025] ? do_raw_spin_unlock+0x175/0x230
[ 57.072402][ T5025] ? _raw_spin_unlock+0x28/0x40
[ 57.077240][ T5025] __block_write_begin_int+0x3b1/0x14a0
[ 57.082776][ T5025] ? jfs_read_folio+0x20/0x20
[ 57.087447][ T5025] ? invalidate_bh_lrus_cpu+0x170/0x170
[ 57.092981][ T5025] ? fault_in_readable+0x129/0x210
[ 57.098078][ T5025] ? folio_flags.constprop.0+0x53/0x150
[ 57.103729][ T5025] ? jfs_read_folio+0x20/0x20
[ 57.108489][ T5025] block_write_begin+0xb9/0x4d0
[ 57.113332][ T5025] jfs_write_begin+0x31/0xd0
[ 57.117913][ T5025] generic_perform_write+0x26b/0x5d0
[ 57.123192][ T5025] ? generic_file_readonly_mmap+0x190/0x190
[ 57.129081][ T5025] ? new_inode+0x280/0x280
[ 57.133489][ T5025] ? generic_write_checks_count+0x2c0/0x2c0
[ 57.139371][ T5025] __generic_file_write_iter+0x1f8/0x240
[ 57.144994][ T5025] generic_file_write_iter+0xe3/0x350
[ 57.150355][ T5025] vfs_write+0x981/0xda0
[ 57.154592][ T5025] ? kernel_write+0x680/0x680
[ 57.159266][ T5025] ? recalc_sigpending_tsk+0x18b/0x1d0
[ 57.164720][ T5025] ? find_held_lock+0x2d/0x110
[ 57.169476][ T5025] ? lock_downgrade+0x690/0x690
[ 57.174317][ T5025] ? __fget_light+0x201/0x270
[ 57.178988][ T5025] ksys_write+0x122/0x250
[ 57.183312][ T5025] ? __ia32_sys_read+0xb0/0xb0
[ 57.188066][ T5025] ? lockdep_hardirqs_on+0x7d/0x100
[ 57.193255][ T5025] ? _raw_spin_unlock_irq+0x2e/0x50
[ 57.198438][ T5025] ? ptrace_notify+0xfe/0x140
[ 57.203193][ T5025] do_syscall_64+0x39/0xb0
[ 57.207686][ T5025] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 57.213567][ T5025] RIP: 0033:0x7f6311a79979
[ 57.217969][ T5025] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 57.237560][ T5025] RSP: 002b:00007ffda2bc2d18 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 57.245960][ T5025] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f6311a79979
[ 57.253918][ T5025] RDX: 000000000208e24b RSI: 0000000020000280 RDI: 0000000000000005
[ 57.261881][ T5025] RBP: 00007f6311a39210 R08: 0000000000000000 R09: 0000000000000000
[ 57.269835][ T5025] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6311a392a0
[ 57.277794][ T5025] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 57.285765][ T5025]
[ 57.291580][ T5025] ================================================================================
[ 57.300933][ T5025] Kernel panic - not syncing: UBSAN: panic_on_warn set ...
[ 57.308221][ T5025] CPU: 0 PID: 5025 Comm: syz-executor728 Not tainted 6.4.0-next-20230706-syzkaller #0
[ 57.317759][ T5025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023
[ 57.327803][ T5025] Call Trace:
[ 57.331066][ T5025]
[ 57.333983][ T5025] dump_stack_lvl+0xd9/0x150
[ 57.338568][ T5025] panic+0x686/0x730
[ 57.342456][ T5025] ? panic_smp_self_stop+0xa0/0xa0
[ 57.347566][ T5025] ? syslog_print_all+0x3a0/0x3a0
[ 57.352591][ T5025] check_panic_on_warn+0xb1/0xc0
[ 57.357520][ T5025] __ubsan_handle_shift_out_of_bounds+0x249/0x5a0
[ 57.363938][ T5025] extAlloc.cold+0x8d/0x92
[ 57.368350][ T5025] ? jfs_ioc_trim+0x5c0/0x5c0
[ 57.373016][ T5025] ? down_write_nested+0x153/0x200
[ 57.378121][ T5025] ? find_held_lock+0x2d/0x110
[ 57.382875][ T5025] jfs_get_block+0x665/0xa90
[ 57.387459][ T5025] ? jfs_read_folio+0x20/0x20
[ 57.392131][ T5025] ? folio_flags.constprop.0+0x53/0x150
[ 57.397678][ T5025] ? do_raw_spin_unlock+0x175/0x230
[ 57.402902][ T5025] ? _raw_spin_unlock+0x28/0x40
[ 57.407754][ T5025] __block_write_begin_int+0x3b1/0x14a0
[ 57.413300][ T5025] ? jfs_read_folio+0x20/0x20
[ 57.417976][ T5025] ? invalidate_bh_lrus_cpu+0x170/0x170
[ 57.423514][ T5025] ? fault_in_readable+0x129/0x210
[ 57.428623][ T5025] ? folio_flags.constprop.0+0x53/0x150
[ 57.434173][ T5025] ? jfs_read_folio+0x20/0x20
[ 57.438848][ T5025] block_write_begin+0xb9/0x4d0
[ 57.443691][ T5025] jfs_write_begin+0x31/0xd0
[ 57.448274][ T5025] generic_perform_write+0x26b/0x5d0
[ 57.453553][ T5025] ? generic_file_readonly_mmap+0x190/0x190
[ 57.459432][ T5025] ? new_inode+0x280/0x280
[ 57.463843][ T5025] ? generic_write_checks_count+0x2c0/0x2c0
[ 57.469728][ T5025] __generic_file_write_iter+0x1f8/0x240
[ 57.475349][ T5025] generic_file_write_iter+0xe3/0x350
[ 57.480713][ T5025] vfs_write+0x981/0xda0
[ 57.484951][ T5025] ? kernel_write+0x680/0x680
[ 57.489649][ T5025] ? recalc_sigpending_tsk+0x18b/0x1d0
[ 57.495104][ T5025] ? find_held_lock+0x2d/0x110
[ 57.499862][ T5025] ? lock_downgrade+0x690/0x690
[ 57.504704][ T5025] ? __fget_light+0x201/0x270
[ 57.509377][ T5025] ksys_write+0x122/0x250
[ 57.513700][ T5025] ? __ia32_sys_read+0xb0/0xb0
[ 57.518454][ T5025] ? lockdep_hardirqs_on+0x7d/0x100
[ 57.523650][ T5025] ? _raw_spin_unlock_irq+0x2e/0x50
[ 57.528832][ T5025] ? ptrace_notify+0xfe/0x140
[ 57.533497][ T5025] do_syscall_64+0x39/0xb0
[ 57.537904][ T5025] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 57.543785][ T5025] RIP: 0033:0x7f6311a79979
[ 57.548185][ T5025] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 57.567777][ T5025] RSP: 002b:00007ffda2bc2d18 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 57.576175][ T5025] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f6311a79979
[ 57.584135][ T5025] RDX: 000000000208e24b RSI: 0000000020000280 RDI: 0000000000000005
[ 57.592094][ T5025] RBP: 00007f6311a39210 R08: 0000000000000000 R09: 0000000000000000
[ 57.600048][ T5025] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6311a392a0
[ 57.608004][ T5025] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 57.615969][ T5025]
[ 57.619220][ T5025] Kernel Offset: disabled
[ 57.623617][ T5025] Rebooting in 86400 seconds..