./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1856383516
<...>
Warning: Permanently added '10.128.15.207' (ED25519) to the list of known hosts.
execve("./syz-executor1856383516", ["./syz-executor1856383516"], 0x7ffc7cf10180 /* 10 vars */) = 0
brk(NULL) = 0x55555648d000
brk(0x55555648dd00) = 0x55555648dd00
arch_prctl(ARCH_SET_FS, 0x55555648d380) = 0
set_tid_address(0x55555648d650) = 5028
set_robust_list(0x55555648d660, 24) = 0
rseq(0x55555648dca0, 0x20, 0, 0x53053053) = 0
prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0
readlink("/proc/self/exe", "/root/syz-executor1856383516", 4096) = 28
getrandom("\x00\x40\x32\x25\xa4\x82\x49\x49", 8, GRND_NONBLOCK) = 8
brk(NULL) = 0x55555648dd00
brk(0x5555564aed00) = 0x5555564aed00
brk(0x5555564af000) = 0x5555564af000
mprotect(0x7fe27c41a000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3
ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address)
close(3) = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555648d650) = 5029
./strace-static-x86_64: Process 5029 attached
[pid 5029] set_robust_list(0x55555648d660, 24) = 0
[pid 5029] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 5029] setpgid(0, 0) = 0
[pid 5029] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 5029] write(3, "1000", 4) = 4
[pid 5029] close(3) = 0
[pid 5029] memfd_create("syzkaller", 0) = 3
[pid 5029] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe273f63000
[ 55.680653][ T5029] memfd_create() without MFD_EXEC nor MFD_NOEXEC_SEAL, pid=5029 'syz-executor185'
[pid 5029] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216
[pid 5029] munmap(0x7fe273f63000, 16777216) = 0
[pid 5029] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid 5029] ioctl(4, LOOP_SET_FD, 3) = 0
[pid 5029] close(3) = 0
[pid 5029] mkdir("./file1", 0777) = 0
[pid 5029] mount("/dev/loop0", "./file1", "jfs", MS_NOEXEC|MS_POSIXACL, "") = 0
[pid 5029] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3
[pid 5029] chdir("./file1") = 0
[pid 5029] ioctl(4, LOOP_CLR_FD) = 0
[pid 5029] close(4) = 0
[pid 5029] open("./file1", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4
[pid 5029] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 5
[pid 5029] open("./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME|FASYNC, 000) = 6
[pid 5029] ftruncate(6, 33587197) = 0
[ 55.876065][ T5029] loop0: detected capacity change from 0 to 32768
[ 56.469574][ T5029] ================================================================================
[ 56.479086][ T5029] UBSAN: shift-out-of-bounds in fs/jfs/jfs_extent.c:314:16
[ 56.486337][ T5029] shift exponent -1 is negative
[ 56.491264][ T5029] CPU: 0 PID: 5029 Comm: syz-executor185 Not tainted 6.5.0-rc1-next-20230714-syzkaller #0
[ 56.501186][ T5029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023
[ 56.511264][ T5029] Call Trace:
[ 56.514552][ T5029]
[ 56.517476][ T5029] dump_stack_lvl+0x125/0x1b0
[ 56.522171][ T5029] __ubsan_handle_shift_out_of_bounds+0x27a/0x600
[ 56.528605][ T5029] extAlloc.cold+0x8b/0xc5
[ 56.533035][ T5029] ? jfs_ioc_trim+0x5c0/0x5c0
[ 56.537709][ T5029] ? down_write_nested+0x153/0x200
[ 56.542822][ T5029] ? find_held_lock+0x2d/0x110
[ 56.547584][ T5029] jfs_get_block+0x428/0xb20
[ 56.552189][ T5029] ? jfs_read_folio+0x20/0x20
[ 56.556894][ T5029] ? folio_flags.constprop.0+0x56/0x150
[ 56.562461][ T5029] ? do_raw_spin_unlock+0x173/0x230
[ 56.567724][ T5029] ? _raw_spin_unlock+0x28/0x40
[ 56.572587][ T5029] ? jfs_read_folio+0x20/0x20
[ 56.577290][ T5029] __block_write_begin_int+0x3c0/0x1470
[ 56.582835][ T5029] ? jfs_read_folio+0x20/0x20
[ 56.587515][ T5029] ? invalidate_bh_lrus_cpu+0x170/0x170
[ 56.593057][ T5029] ? __filemap_get_folio+0x1e7/0x990
[ 56.598386][ T5029] block_write_begin+0xb1/0x490
[ 56.603259][ T5029] ? jfs_read_folio+0x20/0x20
[ 56.607941][ T5029] jfs_write_begin+0x31/0xd0
[ 56.612542][ T5029] generic_perform_write+0x278/0x600
[ 56.617869][ T5029] ? folio_add_wait_queue+0x1c0/0x1c0
[ 56.623271][ T5029] ? new_inode+0x270/0x270
[ 56.627698][ T5029] ? generic_write_checks_count+0x2d0/0x2d0
[ 56.633596][ T5029] __generic_file_write_iter+0x1f9/0x240
[ 56.639232][ T5029] generic_file_write_iter+0xe3/0x350
[ 56.644609][ T5029] do_iter_readv_writev+0x21e/0x3c0
[ 56.649811][ T5029] ? generic_copy_file_range+0x1d0/0x1d0
[ 56.655450][ T5029] ? bpf_lsm_file_permission+0x9/0x10
[ 56.660903][ T5029] ? security_file_permission+0x94/0x100
[ 56.666542][ T5029] do_iter_write+0x17f/0x830
[ 56.671145][ T5029] vfs_iter_write+0x7a/0xb0
[ 56.675657][ T5029] iter_file_splice_write+0x698/0xbf0
[ 56.681069][ T5029] ? splice_from_pipe_next+0x5d0/0x5d0
[ 56.686538][ T5029] ? security_file_permission+0xdc/0x100
[ 56.692179][ T5029] ? splice_from_pipe_next+0x5d0/0x5d0
[ 56.697642][ T5029] direct_splice_actor+0x118/0x180
[ 56.702758][ T5029] splice_direct_to_actor+0x347/0xa30
[ 56.708154][ T5029] ? folio_flags.constprop.0+0x150/0x150
[ 56.713793][ T5029] ? vfs_splice_read+0x3b0/0x3b0
[ 56.718743][ T5029] ? bpf_lsm_file_permission+0x9/0x10
[ 56.724149][ T5029] ? security_file_permission+0x94/0x100
[ 56.729802][ T5029] do_splice_direct+0x1af/0x280
[ 56.734772][ T5029] ? splice_direct_to_actor+0xa30/0xa30
[ 56.740342][ T5029] ? propagate_umount+0x1af0/0x1af0
[ 56.745551][ T5029] do_sendfile+0xb88/0x1390
[ 56.750062][ T5029] ? vfs_iocb_iter_write+0x4c0/0x4c0
[ 56.755351][ T5029] ? ptrace_notify+0xf4/0x130
[ 56.760021][ T5029] ? reacquire_held_locks+0x4b0/0x4b0
[ 56.765394][ T5029] __x64_sys_sendfile64+0x1d6/0x220
[ 56.770608][ T5029] ? __ia32_sys_sendfile+0x220/0x220
[ 56.775896][ T5029] ? lockdep_hardirqs_on+0x7d/0x100
[ 56.781106][ T5029] ? _raw_spin_unlock_irq+0x2e/0x50
[ 56.786320][ T5029] ? ptrace_notify+0xf4/0x130
[ 56.791006][ T5029] do_syscall_64+0x38/0xb0
[ 56.795445][ T5029] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 56.801344][ T5029] RIP: 0033:0x7fe27c3a1b19
[ 56.805750][ T5029] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 56.825358][ T5029] RSP: 002b:00007ffeca87be68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 56.833787][ T5029] RAX: ffffffffffffffda RBX: 0031656c69662f2e RCX: 00007fe27c3a1b19
[ 56.841793][ T5029] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005
[ 56.849779][ T5029] RBP: 00007fe27c41a5f0 R08: 000055555648e4c0 R09: 000055555648e4c0
[ 56.857743][ T5029] R10: 0001000000201005 R11: 0000000000000246 R12: 00007ffeca87be90
[ 56.865718][ T5029] R13: 00007ffeca87c0b8 R14: 431bde82d7b634db R15: 00007fe27c3ea03b
[ 56.873715][ T5029]
[ 56.877606][ T5029] ================================================================================
[ 56.887076][ T5029] Kernel panic - not syncing: UBSAN: panic_on_warn set ...
[ 56.895673][ T5029] CPU: 0 PID: 5029 Comm: syz-executor185 Not tainted 6.5.0-rc1-next-20230714-syzkaller #0
[ 56.905574][ T5029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023
[ 56.915635][ T5029] Call Trace:
[ 56.918917][ T5029]
[ 56.921853][ T5029] dump_stack_lvl+0xd9/0x1b0
[ 56.926465][ T5029] panic+0x6a4/0x750
[ 56.930378][ T5029] ? panic_smp_self_stop+0xa0/0xa0
[ 56.935508][ T5029] ? syslog_print_all+0x3f0/0x3f0
[ 56.940565][ T5029] check_panic_on_warn+0xab/0xb0
[ 56.945518][ T5029] __ubsan_handle_shift_out_of_bounds+0x2a2/0x600
[ 56.951985][ T5029] extAlloc.cold+0x8b/0xc5
[ 56.956447][ T5029] ? jfs_ioc_trim+0x5c0/0x5c0
[ 56.961138][ T5029] ? down_write_nested+0x153/0x200
[ 56.966273][ T5029] ? find_held_lock+0x2d/0x110
[ 56.971054][ T5029] jfs_get_block+0x428/0xb20
[ 56.975670][ T5029] ? jfs_read_folio+0x20/0x20
[ 56.980370][ T5029] ? folio_flags.constprop.0+0x56/0x150
[ 56.985943][ T5029] ? do_raw_spin_unlock+0x173/0x230
[ 56.991166][ T5029] ? _raw_spin_unlock+0x28/0x40
[ 56.996034][ T5029] ? jfs_read_folio+0x20/0x20
[ 57.000735][ T5029] __block_write_begin_int+0x3c0/0x1470
[ 57.006302][ T5029] ? jfs_read_folio+0x20/0x20
[ 57.011013][ T5029] ? invalidate_bh_lrus_cpu+0x170/0x170
[ 57.016569][ T5029] ? __filemap_get_folio+0x1e7/0x990
[ 57.021880][ T5029] block_write_begin+0xb1/0x490
[ 57.026743][ T5029] ? jfs_read_folio+0x20/0x20
[ 57.031444][ T5029] jfs_write_begin+0x31/0xd0
[ 57.036062][ T5029] generic_perform_write+0x278/0x600
[ 57.041385][ T5029] ? folio_add_wait_queue+0x1c0/0x1c0
[ 57.046782][ T5029] ? new_inode+0x270/0x270
[ 57.051219][ T5029] ? generic_write_checks_count+0x2d0/0x2d0
[ 57.057138][ T5029] __generic_file_write_iter+0x1f9/0x240
[ 57.062787][ T5029] generic_file_write_iter+0xe3/0x350
[ 57.068182][ T5029] do_iter_readv_writev+0x21e/0x3c0
[ 57.073409][ T5029] ? generic_copy_file_range+0x1d0/0x1d0
[ 57.079262][ T5029] ? bpf_lsm_file_permission+0x9/0x10
[ 57.084648][ T5029] ? security_file_permission+0x94/0x100
[ 57.090316][ T5029] do_iter_write+0x17f/0x830
[ 57.094940][ T5029] vfs_iter_write+0x7a/0xb0
[ 57.099471][ T5029] iter_file_splice_write+0x698/0xbf0
[ 57.104885][ T5029] ? splice_from_pipe_next+0x5d0/0x5d0
[ 57.110383][ T5029] ? security_file_permission+0xdc/0x100
[ 57.116044][ T5029] ? splice_from_pipe_next+0x5d0/0x5d0
[ 57.121531][ T5029] direct_splice_actor+0x118/0x180
[ 57.126674][ T5029] splice_direct_to_actor+0x347/0xa30
[ 57.132077][ T5029] ? folio_flags.constprop.0+0x150/0x150
[ 57.137740][ T5029] ? vfs_splice_read+0x3b0/0x3b0
[ 57.142700][ T5029] ? bpf_lsm_file_permission+0x9/0x10
[ 57.148095][ T5029] ? security_file_permission+0x94/0x100
[ 57.153772][ T5029] do_splice_direct+0x1af/0x280
[ 57.158655][ T5029] ? splice_direct_to_actor+0xa30/0xa30
[ 57.164234][ T5029] ? propagate_umount+0x1af0/0x1af0
[ 57.169479][ T5029] do_sendfile+0xb88/0x1390
[ 57.174022][ T5029] ? vfs_iocb_iter_write+0x4c0/0x4c0
[ 57.179334][ T5029] ? ptrace_notify+0xf4/0x130
[ 57.184023][ T5029] ? reacquire_held_locks+0x4b0/0x4b0
[ 57.189422][ T5029] __x64_sys_sendfile64+0x1d6/0x220
[ 57.194633][ T5029] ? __ia32_sys_sendfile+0x220/0x220
[ 57.199926][ T5029] ? lockdep_hardirqs_on+0x7d/0x100
[ 57.205150][ T5029] ? _raw_spin_unlock_irq+0x2e/0x50
[ 57.210360][ T5029] ? ptrace_notify+0xf4/0x130
[ 57.215056][ T5029] do_syscall_64+0x38/0xb0
[ 57.219490][ T5029] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 57.225398][ T5029] RIP: 0033:0x7fe27c3a1b19
[ 57.229822][ T5029] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 57.249439][ T5029] RSP: 002b:00007ffeca87be68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 57.257865][ T5029] RAX: ffffffffffffffda RBX: 0031656c69662f2e RCX: 00007fe27c3a1b19
[ 57.265842][ T5029] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005
[ 57.273820][ T5029] RBP: 00007fe27c41a5f0 R08: 000055555648e4c0 R09: 000055555648e4c0
[ 57.281801][ T5029] R10: 0001000000201005 R11: 0000000000000246 R12: 00007ffeca87be90
[ 57.289778][ T5029] R13: 00007ffeca87c0b8 R14: 431bde82d7b634db R15: 00007fe27c3ea03b
[ 57.297774][ T5029]
[ 57.300900][ T5029] Kernel Offset: disabled
[ 57.305320][ T5029] Rebooting in 86400 seconds..