./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3015306569
<...>
Warning: Permanently added '10.128.0.106' (ED25519) to the list of known hosts.
execve("./syz-executor3015306569", ["./syz-executor3015306569"], 0x7fffeb0fe2a0 /* 10 vars */) = 0
brk(NULL) = 0x555557361000
brk(0x555557361d00) = 0x555557361d00
arch_prctl(ARCH_SET_FS, 0x555557361380) = 0
set_tid_address(0x555557361650) = 5035
set_robust_list(0x555557361660, 24) = 0
rseq(0x555557361ca0, 0x20, 0, 0x53053053) = 0
prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0
readlink("/proc/self/exe", "/root/syz-executor3015306569", 4096) = 28
getrandom("\xd7\x57\x7c\x47\xce\x89\x0a\x11", 8, GRND_NONBLOCK) = 8
brk(NULL) = 0x555557361d00
brk(0x555557382d00) = 0x555557382d00
brk(0x555557383000) = 0x555557383000
mprotect(0x7f871f10c000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
memfd_create("syzkaller", 0) = 3
mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8716c56000
[ 66.785822][ T5035] memfd_create() without MFD_EXEC nor MFD_NOEXEC_SEAL, pid=5035 'syz-executor301'
write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216
munmap(0x7f8716c56000, 16777216) = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
ioctl(4, LOOP_SET_FD, 3) = 0
close(3) = 0
mkdir("./bus", 0777) = 0
mount("/dev/loop0", "./bus", "jfs", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME|MS_LAZYTIME, "") = 0
openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3
chdir("./bus") = 0
ioctl(4, LOOP_CLR_FD) = 0
close(4) = 0
open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4
open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 5
ftruncate(5, 33587199) = 0
open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6
open("./bus", O_RDONLY) = 7
lseek(6, 0, SEEK_END) = 33587199
[ 66.940300][ T5035] loop0: detected capacity change from 0 to 32768
[ 66.963020][ T26] audit: type=1804 audit(1690939062.647:2): pid=5035 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor301" name="/root/bus/bus" dev="loop0" ino=7 res=1 errno=0
[ 67.387343][ T5035] ================================================================================
[ 67.396700][ T5035] UBSAN: shift-out-of-bounds in fs/jfs/jfs_extent.c:314:16
[ 67.404181][ T5035] shift exponent -1 is negative
[ 67.409054][ T5035] CPU: 1 PID: 5035 Comm: syz-executor301 Not tainted 6.5.0-rc4-next-20230801-syzkaller #0
[ 67.418959][ T5035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2023
[ 67.429053][ T5035] Call Trace:
[ 67.432334][ T5035]
[ 67.435287][ T5035] dump_stack_lvl+0x125/0x1b0
[ 67.439986][ T5035] __ubsan_handle_shift_out_of_bounds+0x27a/0x600
[ 67.446435][ T5035] extAlloc.cold+0x8b/0xc5
[ 67.450884][ T5035] ? jfs_ioc_trim+0x5c0/0x5c0
[ 67.455578][ T5035] ? down_write_nested+0x153/0x200
[ 67.460720][ T5035] ? lock_acquire+0x464/0x510
[ 67.465416][ T5035] ? lock_sync+0x190/0x190
[ 67.469955][ T5035] jfs_get_block+0x428/0xb20
[ 67.474573][ T5035] ? jfs_read_folio+0x20/0x20
[ 67.479315][ T5035] ? folio_flags.constprop.0+0x56/0x150
[ 67.484913][ T5035] ? do_raw_spin_unlock+0x173/0x230
[ 67.490135][ T5035] ? _raw_spin_unlock+0x28/0x40
[ 67.495002][ T5035] ? jfs_read_folio+0x20/0x20
[ 67.499707][ T5035] __block_write_begin_int+0x3c0/0x1470
[ 67.505273][ T5035] ? jfs_read_folio+0x20/0x20
[ 67.509992][ T5035] ? invalidate_bh_lrus_cpu+0x170/0x170
[ 67.515558][ T5035] block_write_begin+0xb1/0x490
[ 67.520423][ T5035] ? jfs_read_folio+0x20/0x20
[ 67.525127][ T5035] jfs_write_begin+0x31/0xd0
[ 67.529760][ T5035] generic_perform_write+0x278/0x600
[ 67.535089][ T5035] ? folio_add_wait_queue+0x1c0/0x1c0
[ 67.540472][ T5035] ? new_inode+0x270/0x270
[ 67.544913][ T5035] ? generic_write_checks_count+0x2d0/0x2d0
[ 67.550826][ T5035] __generic_file_write_iter+0x1f9/0x240
[ 67.556507][ T5035] generic_file_write_iter+0xe3/0x350
[ 67.561901][ T5035] do_iter_readv_writev+0x21e/0x3c0
[ 67.567217][ T5035] ? generic_copy_file_range+0x1d0/0x1d0
[ 67.572884][ T5035] ? bpf_lsm_file_permission+0x9/0x10
[ 67.578294][ T5035] ? security_file_permission+0x94/0x100
[ 67.583971][ T5035] do_iter_write+0x17f/0x830
[ 67.588577][ T5035] vfs_iter_write+0x7a/0xb0
[ 67.593089][ T5035] iter_file_splice_write+0x698/0xbf0
[ 67.598479][ T5035] ? splice_from_pipe_next+0x5d0/0x5d0
[ 67.603963][ T5035] ? security_file_permission+0xdc/0x100
[ 67.609610][ T5035] ? splice_from_pipe_next+0x5d0/0x5d0
[ 67.615203][ T5035] direct_splice_actor+0x118/0x180
[ 67.620340][ T5035] splice_direct_to_actor+0x347/0xa30
[ 67.625746][ T5035] ? folio_flags.constprop.0+0x150/0x150
[ 67.631403][ T5035] ? vfs_splice_read+0x3b0/0x3b0
[ 67.636455][ T5035] ? bpf_lsm_file_permission+0x9/0x10
[ 67.641863][ T5035] ? security_file_permission+0x94/0x100
[ 67.647516][ T5035] do_splice_direct+0x1af/0x280
[ 67.652378][ T5035] ? splice_direct_to_actor+0xa30/0xa30
[ 67.657952][ T5035] ? propagate_umount+0x1af0/0x1af0
[ 67.663173][ T5035] ? preempt_count_sub+0x150/0x150
[ 67.668329][ T5035] do_sendfile+0xb88/0x1390
[ 67.672867][ T5035] ? vfs_iocb_iter_write+0x4c0/0x4c0
[ 67.678338][ T5035] ? lock_release+0x4bf/0x680
[ 67.683207][ T5035] ? ptrace_notify+0xf4/0x130
[ 67.687898][ T5035] ? reacquire_held_locks+0x4b0/0x4b0
[ 67.693295][ T5035] __x64_sys_sendfile64+0x1d6/0x220
[ 67.698524][ T5035] ? rcu_is_watching+0x12/0xb0
[ 67.703304][ T5035] ? __ia32_sys_sendfile+0x220/0x220
[ 67.708639][ T5035] ? _raw_spin_unlock_irq+0x2e/0x50
[ 67.713864][ T5035] ? ptrace_notify+0xf4/0x130
[ 67.718642][ T5035] do_syscall_64+0x38/0xb0
[ 67.723162][ T5035] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 67.729078][ T5035] RIP: 0033:0x7f871f0936f9
[ 67.733551][ T5035] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 67.753171][ T5035] RSP: 002b:00007ffcea892628 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 67.761615][ T5035] RAX: ffffffffffffffda RBX: 00007ffcea8927f8 RCX: 00007f871f0936f9
[ 67.769596][ T5035] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000006
[ 67.777573][ T5035] RBP: 00007f871f10c610 R08: 00007ffcea8927f8 R09: 00007ffcea8927f8
[ 67.785750][ T5035] R10: 0001000000201005 R11: 0000000000000246 R12: 0000000000000001
[ 67.793730][ T5035] R13: 00007ffcea8927e8 R14: 0000000000000001 R15: 0000000000000001
[ 67.801716][ T5035]
[ 67.804849][ T5035] ================================================================================
[ 67.814260][ T5035] Kernel panic - not syncing: UBSAN: panic_on_warn set ...
[ 67.821473][ T5035] CPU: 1 PID: 5035 Comm: syz-executor301 Not tainted 6.5.0-rc4-next-20230801-syzkaller #0
[ 67.831476][ T5035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2023
[ 67.841549][ T5035] Call Trace:
[ 67.844838][ T5035]
[ 67.847778][ T5035] dump_stack_lvl+0xd9/0x1b0
[ 67.852401][ T5035] panic+0x6a4/0x750
[ 67.856323][ T5035] ? panic_smp_self_stop+0xa0/0xa0
[ 67.861462][ T5035] ? syslog_print_all+0x3f0/0x3f0
[ 67.866527][ T5035] check_panic_on_warn+0xab/0xb0
[ 67.871502][ T5035] __ubsan_handle_shift_out_of_bounds+0x2a2/0x600
[ 67.878225][ T5035] extAlloc.cold+0x8b/0xc5
[ 67.882684][ T5035] ? jfs_ioc_trim+0x5c0/0x5c0
[ 67.887386][ T5035] ? down_write_nested+0x153/0x200
[ 67.892524][ T5035] ? lock_acquire+0x464/0x510
[ 67.897327][ T5035] ? lock_sync+0x190/0x190
[ 67.902075][ T5035] jfs_get_block+0x428/0xb20
[ 67.906773][ T5035] ? jfs_read_folio+0x20/0x20
[ 67.911491][ T5035] ? folio_flags.constprop.0+0x56/0x150
[ 67.917062][ T5035] ? do_raw_spin_unlock+0x173/0x230
[ 67.922295][ T5035] ? _raw_spin_unlock+0x28/0x40
[ 67.927173][ T5035] ? jfs_read_folio+0x20/0x20
[ 67.931884][ T5035] __block_write_begin_int+0x3c0/0x1470
[ 67.937463][ T5035] ? jfs_read_folio+0x20/0x20
[ 67.942178][ T5035] ? invalidate_bh_lrus_cpu+0x170/0x170
[ 67.947753][ T5035] block_write_begin+0xb1/0x490
[ 67.952631][ T5035] ? jfs_read_folio+0x20/0x20
[ 67.957345][ T5035] jfs_write_begin+0x31/0xd0
[ 67.961976][ T5035] generic_perform_write+0x278/0x600
[ 67.967287][ T5035] ? folio_add_wait_queue+0x1c0/0x1c0
[ 67.972682][ T5035] ? new_inode+0x270/0x270
[ 67.977132][ T5035] ? generic_write_checks_count+0x2d0/0x2d0
[ 67.983055][ T5035] __generic_file_write_iter+0x1f9/0x240
[ 67.988722][ T5035] generic_file_write_iter+0xe3/0x350
[ 67.994127][ T5035] do_iter_readv_writev+0x21e/0x3c0
[ 67.999363][ T5035] ? generic_copy_file_range+0x1d0/0x1d0
[ 68.005036][ T5035] ? bpf_lsm_file_permission+0x9/0x10
[ 68.010437][ T5035] ? security_file_permission+0x94/0x100
[ 68.016115][ T5035] do_iter_write+0x17f/0x830
[ 68.020729][ T5035] vfs_iter_write+0x7a/0xb0
[ 68.025254][ T5035] iter_file_splice_write+0x698/0xbf0
[ 68.030680][ T5035] ? splice_from_pipe_next+0x5d0/0x5d0
[ 68.036173][ T5035] ? security_file_permission+0xdc/0x100
[ 68.041835][ T5035] ? splice_from_pipe_next+0x5d0/0x5d0
[ 68.047413][ T5035] direct_splice_actor+0x118/0x180
[ 68.052559][ T5035] splice_direct_to_actor+0x347/0xa30
[ 68.057958][ T5035] ? folio_flags.constprop.0+0x150/0x150
[ 68.063622][ T5035] ? vfs_splice_read+0x3b0/0x3b0
[ 68.068615][ T5035] ? bpf_lsm_file_permission+0x9/0x10
[ 68.074451][ T5035] ? security_file_permission+0x94/0x100
[ 68.080113][ T5035] do_splice_direct+0x1af/0x280
[ 68.084990][ T5035] ? splice_direct_to_actor+0xa30/0xa30
[ 68.090564][ T5035] ? propagate_umount+0x1af0/0x1af0
[ 68.095788][ T5035] ? preempt_count_sub+0x150/0x150
[ 68.100945][ T5035] do_sendfile+0xb88/0x1390
[ 68.105476][ T5035] ? vfs_iocb_iter_write+0x4c0/0x4c0
[ 68.110783][ T5035] ? lock_release+0x4bf/0x680
[ 68.115840][ T5035] ? ptrace_notify+0xf4/0x130
[ 68.120544][ T5035] ? reacquire_held_locks+0x4b0/0x4b0
[ 68.126127][ T5035] __x64_sys_sendfile64+0x1d6/0x220
[ 68.131351][ T5035] ? rcu_is_watching+0x12/0xb0
[ 68.136147][ T5035] ? __ia32_sys_sendfile+0x220/0x220
[ 68.141477][ T5035] ? _raw_spin_unlock_irq+0x2e/0x50
[ 68.146701][ T5035] ? ptrace_notify+0xf4/0x130
[ 68.151401][ T5035] do_syscall_64+0x38/0xb0
[ 68.155857][ T5035] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 68.161787][ T5035] RIP: 0033:0x7f871f0936f9
[ 68.166223][ T5035] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 68.186290][ T5035] RSP: 002b:00007ffcea892628 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 68.194725][ T5035] RAX: ffffffffffffffda RBX: 00007ffcea8927f8 RCX: 00007f871f0936f9
[ 68.202714][ T5035] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000006
[ 68.210724][ T5035] RBP: 00007f871f10c610 R08: 00007ffcea8927f8 R09: 00007ffcea8927f8
[ 68.218713][ T5035] R10: 0001000000201005 R11: 0000000000000246 R12: 0000000000000001
[ 68.226724][ T5035] R13: 00007ffcea8927e8 R14: 0000000000000001 R15: 0000000000000001
[ 68.234723][ T5035]
[ 68.237843][ T5035] Kernel Offset: disabled
[ 68.242168][ T5035] Rebooting in 86400 seconds..