./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1872675518
<...>
Warning: Permanently added '10.128.0.197' (ECDSA) to the list of known hosts.
execve("./syz-executor1872675518", ["./syz-executor1872675518"], 0x7ffd669be5d0 /* 10 vars */) = 0
brk(NULL) = 0x5555570e4000
brk(0x5555570e4c40) = 0x5555570e4c40
arch_prctl(ARCH_SET_FS, 0x5555570e4300) = 0
uname({sysname="Linux", nodename="syzkaller", ...}) = 0
readlink("/proc/self/exe", "/root/syz-executor1872675518", 4096) = 28
brk(0x555557105c40) = 0x555557105c40
brk(0x555557106000) = 0x555557106000
mprotect(0x7f2166185000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
memfd_create("syzkaller", 0) = 3
mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f215dca5000
[ 55.217288][ T4993] memfd_create() without MFD_EXEC nor MFD_NOEXEC_SEAL, pid=4993 'syz-executor187'
write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216
munmap(0x7f215dca5000, 16777216) = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
ioctl(4, LOOP_SET_FD, 3) = 0
close(3) = 0
mkdir("./bus", 0777) = 0
mount("/dev/loop0", "./bus", "jfs", MS_NOSUID|MS_DIRSYNC|MS_NODIRATIME|MS_POSIXACL|MS_LAZYTIME, "errors=continue,nodiscard,uid=0x000000000000ee01,nodiscard,discard=0x0000000000000008,iocharset=cp94"...) = 0
openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3
chdir("./bus") = 0
ioctl(4, LOOP_CLR_FD) = 0
close(4) = 0
memfd_create("syzkaller", 0) = 4
mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f21568a5000
write(4, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x02\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x0f\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x00\x00\x00\xff\x03\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x04\x00\x00\x00\x8f\x24\x2d\x5f\x49\x6d\x50\x0b\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152
munmap(0x7f21568a5000, 2097152) = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 5
[ 55.356420][ T4993] loop0: detected capacity change from 0 to 32768
ioctl(5, LOOP_SET_FD, 4) = -1 EBUSY (Device or resource busy)
ioctl(5, LOOP_CLR_FD) = 0
ioctl(5, LOOP_SET_FD, 4) = -1 EBUSY (Device or resource busy)
close(5) = 0
close(4) = 0
open("./file2", O_RDWR|O_CREAT|O_NOCTTY|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|FASYNC, 000) = 4
open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 5
ftruncate(5, 33587199) = 0
[ 55.431714][ T27] audit: type=1800 audit(1686893380.238:2): pid=4993 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor187" name="file2" dev="loop0" ino=5 res=0 errno=0
[ 55.454887][ T27] audit: type=1800 audit(1686893380.268:3): pid=4993 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor187" name="bus" dev="loop0" ino=7 res=0 errno=0
[ 55.658799][ T4993] ================================================================================
[ 55.668539][ T4993] UBSAN: shift-out-of-bounds in fs/jfs/jfs_extent.c:314:16
[ 55.675795][ T4993] shift exponent -1 is negative
[ 55.680683][ T4993] CPU: 1 PID: 4993 Comm: syz-executor187 Not tainted 6.4.0-rc6-syzkaller-00049-g62d8779610bb #0
[ 55.691080][ T4993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023
[ 55.701127][ T4993] Call Trace:
[ 55.704406][ T4993]
[ 55.707321][ T4993] dump_stack_lvl+0x1e7/0x2d0
[ 55.712003][ T4993] ? nf_tcp_handle_invalid+0x650/0x650
[ 55.717447][ T4993] ? panic+0x770/0x770
[ 55.721504][ T4993] ? extAlloc+0x10a/0x1010
[ 55.725909][ T4993] __ubsan_handle_shift_out_of_bounds+0x3c3/0x420
[ 55.732314][ T4993] ? do_raw_spin_unlock+0x13b/0x8b0
[ 55.737506][ T4993] extAlloc+0xe53/0x1010
[ 55.741742][ T4993] ? jfs_ioc_trim+0x660/0x660
[ 55.746403][ T4993] ? clear_nonspinnable+0x60/0x60
[ 55.751416][ T4993] jfs_get_block+0x41b/0xe60
[ 55.755990][ T4993] ? __iov_iter_get_pages_alloc+0x7c1/0x940
[ 55.761876][ T4993] ? jfs_dirty_inode+0x240/0x240
[ 55.766795][ T4993] ? iov_iter_get_pages2+0xd2/0x130
[ 55.771978][ T4993] ? __iov_iter_get_pages_alloc+0x940/0x940
[ 55.777870][ T4993] ? jfs_dirty_inode+0x240/0x240
[ 55.782878][ T4993] __blockdev_direct_IO+0x1ada/0x40e0
[ 55.788263][ T4993] ? show_vfsstat+0x570/0x570
[ 55.792949][ T4993] ? jfs_dirty_inode+0x240/0x240
[ 55.797875][ T4993] ? seqcount_lockdep_reader_access+0x1d7/0x220
[ 55.804100][ T4993] ? ktime_get_real_ts64+0x460/0x460
[ 55.809380][ T4993] ? filemap_write_and_wait_range+0x20a/0x2c0
[ 55.815437][ T4993] jfs_direct_IO+0xf8/0x1e0
[ 55.820013][ T4993] generic_file_direct_write+0x208/0x460
[ 55.825634][ T4993] __generic_file_write_iter+0x1c8/0x400
[ 55.831254][ T4993] generic_file_write_iter+0xaf/0x310
[ 55.836611][ T4993] do_iter_write+0x7b1/0xcb0
[ 55.841311][ T4993] ? vfs_iter_write+0xa0/0xa0
[ 55.846522][ T4993] ? vfs_iter_write+0x6d/0xa0
[ 55.851470][ T4993] iter_file_splice_write+0x843/0xfe0
[ 55.857051][ T4993] ? splice_from_pipe+0x230/0x230
[ 55.862077][ T4993] ? direct_splice_read+0xa10/0xa10
[ 55.867295][ T4993] ? splice_from_pipe+0x230/0x230
[ 55.872528][ T4993] direct_splice_actor+0xe7/0x1c0
[ 55.877564][ T4993] splice_direct_to_actor+0x4c4/0xbd0
[ 55.882938][ T4993] ? do_splice_direct+0x3d0/0x3d0
[ 55.887952][ T4993] ? pipe_to_sendpage+0x350/0x350
[ 55.893130][ T4993] ? fsnotify_perm+0x67/0x590
[ 55.897790][ T4993] ? bpf_lsm_file_permission+0x9/0x10
[ 55.903150][ T4993] do_splice_direct+0x283/0x3d0
[ 55.907981][ T4993] ? splice_direct_to_actor+0xbd0/0xbd0
[ 55.913504][ T4993] ? rcu_read_lock_any_held+0xb7/0x160
[ 55.918961][ T4993] do_sendfile+0x620/0xff0
[ 55.923451][ T4993] ? ptrace_stop+0x75a/0x970
[ 55.928039][ T4993] ? do_pwritev+0x360/0x360
[ 55.932533][ T4993] ? _raw_spin_unlock_irq+0x2e/0x50
[ 55.937718][ T4993] ? ptrace_notify+0x278/0x380
[ 55.942468][ T4993] __se_sys_sendfile64+0x17c/0x1e0
[ 55.947564][ T4993] ? __x64_sys_sendfile64+0xb0/0xb0
[ 55.952762][ T4993] ? syscall_enter_from_user_mode+0x32/0x230
[ 55.958760][ T4993] ? syscall_enter_from_user_mode+0x8c/0x230
[ 55.964753][ T4993] do_syscall_64+0x41/0xc0
[ 55.969171][ T4993] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 55.975290][ T4993] RIP: 0033:0x7f21660f2259
[ 55.979695][ T4993] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 55.999552][ T4993] RSP: 002b:00007ffe778248e8 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 56.007953][ T4993] RAX: ffffffffffffffda RBX: 7261637369646f6e RCX: 00007f21660f2259
[ 56.015910][ T4993] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004
[ 56.023865][ T4993] RBP: 6573726168636f69 R08: 0000000000000000 R09: 0000000000000000
[ 56.031822][ T4993] R10: 0001000000201004 R11: 0000000000000246 R12: 0000000000007261
[ 56.039775][ T4993] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 56.047745][ T4993]
[ 56.051257][ T4993] ================================================================================
[ 56.060589][ T4993] Kernel panic - not syncing: UBSAN: panic_on_warn set ...
[ 56.067767][ T4993] CPU: 1 PID: 4993 Comm: syz-executor187 Not tainted 6.4.0-rc6-syzkaller-00049-g62d8779610bb #0
[ 56.078161][ T4993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023
[ 56.088200][ T4993] Call Trace:
[ 56.091489][ T4993]
[ 56.094407][ T4993] dump_stack_lvl+0x1e7/0x2d0
[ 56.099073][ T4993] ? nf_tcp_handle_invalid+0x650/0x650
[ 56.104516][ T4993] ? panic+0x770/0x770
[ 56.108598][ T4993] ? vscnprintf+0x5d/0x80
[ 56.112920][ T4993] panic+0x30f/0x770
[ 56.116811][ T4993] ? check_panic_on_warn+0x21/0xa0
[ 56.121909][ T4993] ? __memcpy_flushcache+0x2b0/0x2b0
[ 56.127180][ T4993] ? dump_stack_lvl+0x253/0x2d0
[ 56.132108][ T4993] check_panic_on_warn+0x82/0xa0
[ 56.137041][ T4993] __ubsan_handle_shift_out_of_bounds+0x3e2/0x420
[ 56.143446][ T4993] ? do_raw_spin_unlock+0x13b/0x8b0
[ 56.148637][ T4993] extAlloc+0xe53/0x1010
[ 56.152872][ T4993] ? jfs_ioc_trim+0x660/0x660
[ 56.157533][ T4993] ? clear_nonspinnable+0x60/0x60
[ 56.162548][ T4993] jfs_get_block+0x41b/0xe60
[ 56.167121][ T4993] ? __iov_iter_get_pages_alloc+0x7c1/0x940
[ 56.173019][ T4993] ? jfs_dirty_inode+0x240/0x240
[ 56.177938][ T4993] ? iov_iter_get_pages2+0xd2/0x130
[ 56.183188][ T4993] ? __iov_iter_get_pages_alloc+0x940/0x940
[ 56.189138][ T4993] ? jfs_dirty_inode+0x240/0x240
[ 56.194080][ T4993] __blockdev_direct_IO+0x1ada/0x40e0
[ 56.199477][ T4993] ? show_vfsstat+0x570/0x570
[ 56.204143][ T4993] ? jfs_dirty_inode+0x240/0x240
[ 56.209084][ T4993] ? seqcount_lockdep_reader_access+0x1d7/0x220
[ 56.215328][ T4993] ? ktime_get_real_ts64+0x460/0x460
[ 56.220620][ T4993] ? filemap_write_and_wait_range+0x20a/0x2c0
[ 56.226687][ T4993] jfs_direct_IO+0xf8/0x1e0
[ 56.231178][ T4993] generic_file_direct_write+0x208/0x460
[ 56.236805][ T4993] __generic_file_write_iter+0x1c8/0x400
[ 56.242421][ T4993] generic_file_write_iter+0xaf/0x310
[ 56.247783][ T4993] do_iter_write+0x7b1/0xcb0
[ 56.252452][ T4993] ? vfs_iter_write+0xa0/0xa0
[ 56.257118][ T4993] ? vfs_iter_write+0x6d/0xa0
[ 56.262145][ T4993] iter_file_splice_write+0x843/0xfe0
[ 56.267631][ T4993] ? splice_from_pipe+0x230/0x230
[ 56.272663][ T4993] ? direct_splice_read+0xa10/0xa10
[ 56.277853][ T4993] ? splice_from_pipe+0x230/0x230
[ 56.282863][ T4993] direct_splice_actor+0xe7/0x1c0
[ 56.287873][ T4993] splice_direct_to_actor+0x4c4/0xbd0
[ 56.293234][ T4993] ? do_splice_direct+0x3d0/0x3d0
[ 56.298237][ T4993] ? pipe_to_sendpage+0x350/0x350
[ 56.303243][ T4993] ? fsnotify_perm+0x67/0x590
[ 56.307902][ T4993] ? bpf_lsm_file_permission+0x9/0x10
[ 56.313257][ T4993] do_splice_direct+0x283/0x3d0
[ 56.318089][ T4993] ? splice_direct_to_actor+0xbd0/0xbd0
[ 56.323617][ T4993] ? rcu_read_lock_any_held+0xb7/0x160
[ 56.329078][ T4993] do_sendfile+0x620/0xff0
[ 56.333749][ T4993] ? ptrace_stop+0x75a/0x970
[ 56.338363][ T4993] ? do_pwritev+0x360/0x360
[ 56.342860][ T4993] ? _raw_spin_unlock_irq+0x2e/0x50
[ 56.348043][ T4993] ? ptrace_notify+0x278/0x380
[ 56.352792][ T4993] __se_sys_sendfile64+0x17c/0x1e0
[ 56.357904][ T4993] ? __x64_sys_sendfile64+0xb0/0xb0
[ 56.363098][ T4993] ? syscall_enter_from_user_mode+0x32/0x230
[ 56.369111][ T4993] ? syscall_enter_from_user_mode+0x8c/0x230
[ 56.375106][ T4993] do_syscall_64+0x41/0xc0
[ 56.379553][ T4993] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 56.385454][ T4993] RIP: 0033:0x7f21660f2259
[ 56.389865][ T4993] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 56.409748][ T4993] RSP: 002b:00007ffe778248e8 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 56.418151][ T4993] RAX: ffffffffffffffda RBX: 7261637369646f6e RCX: 00007f21660f2259
[ 56.426110][ T4993] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004
[ 56.434062][ T4993] RBP: 6573726168636f69 R08: 0000000000000000 R09: 0000000000000000
[ 56.442014][ T4993] R10: 0001000000201004 R11: 0000000000000246 R12: 0000000000007261
[ 56.450061][ T4993] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 56.458023][ T4993]
[ 56.461211][ T4993] Kernel Offset: disabled
[ 56.465606][ T4993] Rebooting in 86400 seconds..