./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor712824840 <...> Warning: Permanently added '10.128.0.232' (ED25519) to the list of known hosts. execve("./syz-executor712824840", ["./syz-executor712824840"], 0x7ffdaf197210 /* 10 vars */) = 0 brk(NULL) = 0x55555596e000 brk(0x55555596ed00) = 0x55555596ed00 arch_prctl(ARCH_SET_FS, 0x55555596e380) = 0 set_tid_address(0x55555596e650) = 5042 set_robust_list(0x55555596e660, 24) = 0 rseq(0x55555596eca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor712824840", 4096) = 27 getrandom("\xc5\xd6\x30\x24\x37\xdd\x0c\x5a", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x55555596ed00 brk(0x55555598fd00) = 0x55555598fd00 brk(0x555555990000) = 0x555555990000 mprotect(0x7fa353b7d000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5043 attached , child_tidptr=0x55555596e650) = 5043 [pid 5043] set_robust_list(0x55555596e660, 24) = 0 [pid 5043] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5043] setpgid(0, 0) = 0 [pid 5043] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5043] write(3, "1000", 4) = 4 [pid 5043] close(3) = 0 [pid 5043] memfd_create("syzkaller", 0) = 3 [pid 5043] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa34b6c2000 [ 96.747832][ T5043] memfd_create() without MFD_EXEC nor MFD_NOEXEC_SEAL, pid=5043 'syz-executor712' [pid 5043] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5043] munmap(0x7fa34b6c2000, 16777216) = 0 [pid 5043] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5043] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5043] close(3) = 0 [pid 5043] mkdir("./bus", 0777) = 0 [pid 5043] mount("/dev/loop0", "./bus", "jfs", MS_SYNCHRONOUS|MS_DIRSYNC|MS_POSIXACL|MS_RELATIME|MS_LAZYTIME, "") = 0 [pid 5043] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 [pid 5043] chdir("./bus") = 0 [pid 5043] ioctl(4, LOOP_CLR_FD) = 0 [pid 5043] close(4) = 0 [pid 5043] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4 [pid 5043] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 5 [pid 5043] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000) = 6 [pid 5043] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1< [ 98.140685][ T5043] dump_stack_lvl+0x125/0x1b0 [ 98.145435][ T5043] __ubsan_handle_shift_out_of_bounds+0x27a/0x600 [ 98.151881][ T5043] extAlloc.cold+0x8b/0xc5 [ 98.156760][ T5043] ? jfs_ioc_trim+0x5c0/0x5c0 [ 98.161469][ T5043] ? down_write_nested+0x153/0x200 [ 98.166635][ T5043] ? lock_acquire+0x464/0x510 [ 98.171367][ T5043] jfs_get_block+0x428/0xb20 [ 98.175999][ T5043] ? jfs_read_folio+0x20/0x20 [ 98.180719][ T5043] ? folio_flags.constprop.0+0x56/0x150 [ 98.186293][ T5043] ? do_raw_spin_unlock+0x173/0x230 [ 98.191531][ T5043] ? _raw_spin_unlock+0x28/0x40 [ 98.196429][ T5043] ? jfs_read_folio+0x20/0x20 [ 98.201147][ T5043] __block_write_begin_int+0x3c0/0x1470 [ 98.206735][ T5043] ? jfs_read_folio+0x20/0x20 [ 98.211455][ T5043] ? invalidate_bh_lrus_cpu+0x170/0x170 [ 98.217036][ T5043] block_write_begin+0xb1/0x490 [ 98.222004][ T5043] ? jfs_read_folio+0x20/0x20 [ 98.226722][ T5043] jfs_write_begin+0x31/0xd0 [ 98.231335][ T5043] generic_perform_write+0x278/0x600 [ 98.236652][ T5043] ? folio_add_wait_queue+0x1c0/0x1c0 [ 98.242171][ T5043] ? generic_file_direct_write+0xca/0x360 [ 98.247924][ T5043] __generic_file_write_iter+0x1d0/0x240 [ 98.253609][ T5043] generic_file_write_iter+0xe3/0x350 [ 98.259016][ T5043] do_iter_readv_writev+0x21e/0x3c0 [ 98.264239][ T5043] ? generic_copy_file_range+0x1d0/0x1d0 [ 98.269900][ T5043] ? bpf_lsm_file_permission+0x9/0x10 [ 98.275299][ T5043] ? security_file_permission+0x94/0x100 [ 98.280968][ T5043] do_iter_write+0x17f/0x830 [ 98.285592][ T5043] vfs_iter_write+0x7a/0xb0 [ 98.290119][ T5043] iter_file_splice_write+0x698/0xbf0 [ 98.295530][ T5043] ? splice_from_pipe_next+0x5d0/0x5d0 [ 98.301028][ T5043] ? security_file_permission+0xdc/0x100 [ 98.306706][ T5043] ? splice_from_pipe_next+0x5d0/0x5d0 [ 98.312196][ T5043] direct_splice_actor+0x118/0x180 [ 98.317338][ T5043] splice_direct_to_actor+0x347/0xa30 [ 98.322739][ T5043] ? folio_flags.constprop.0+0x150/0x150 [ 98.328403][ T5043] ? vfs_splice_read+0x3b0/0x3b0 [ 98.333391][ T5043] ? bpf_lsm_file_permission+0x9/0x10 [ 98.338792][ T5043] ? security_file_permission+0x94/0x100 [ 98.344457][ T5043] do_splice_direct+0x1af/0x280 [ 98.349335][ T5043] ? splice_direct_to_actor+0xa30/0xa30 [ 98.354905][ T5043] ? propagate_umount+0x1af0/0x1af0 [ 98.360128][ T5043] ? preempt_count_sub+0x150/0x150 [ 98.365282][ T5043] do_sendfile+0xb88/0x1390 [ 98.369815][ T5043] ? vfs_iocb_iter_write+0x4c0/0x4c0 [ 98.375121][ T5043] ? lock_release+0x4bf/0x680 [ 98.379830][ T5043] ? ptrace_notify+0xf4/0x130 [ 98.384526][ T5043] ? reacquire_held_locks+0x4b0/0x4b0 [ 98.389935][ T5043] __x64_sys_sendfile64+0x1d6/0x220 [ 98.395160][ T5043] ? rcu_is_watching+0x12/0xb0 [ 98.399943][ T5043] ? __ia32_sys_sendfile+0x220/0x220 [ 98.405428][ T5043] ? _raw_spin_unlock_irq+0x2e/0x50 [ 98.410664][ T5043] ? ptrace_notify+0xf4/0x130 [ 98.415365][ T5043] do_syscall_64+0x38/0xb0 [ 98.419826][ T5043] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 98.425759][ T5043] RIP: 0033:0x7fa353b031d9 [ 98.430196][ T5043] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 98.449827][ T5043] RSP: 002b:00007ffeffed1f38 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 98.458267][ T5043] RAX: ffffffffffffffda RBX: 00007fa353b4c0c8 RCX: 00007fa353b031d9 [ 98.466265][ T5043] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000009 [ 98.474253][ T5043] RBP: 00007fa353b4c08a R08: 000055555596f4c0 R09: 000055555596f4c0 [ 98.482241][ T5043] R10: 0001000000201004 R11: 0000000000000246 R12: 00007fa353b4c092 [ 98.490318][ T5043] R13: 00007fa353b4c082 R14: 431bde82d7b634db R15: 00007fa353b4c01d [ 98.498321][ T5043] [ 98.501608][ T5043] ================================================================================ [ 98.510968][ T5043] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 98.518188][ T5043] CPU: 0 PID: 5043 Comm: syz-executor712 Not tainted 6.5.0-rc5-next-20230809-syzkaller #0 [ 98.528105][ T5043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 98.538221][ T5043] Call Trace: [ 98.541515][ T5043] [ 98.544456][ T5043] dump_stack_lvl+0xd9/0x1b0 [ 98.549093][ T5043] panic+0x6a6/0x750 [ 98.553045][ T5043] ? panic_smp_self_stop+0xa0/0xa0 [ 98.558196][ T5043] ? syslog_print_all+0x3f0/0x3f0 [ 98.563277][ T5043] check_panic_on_warn+0xab/0xb0 [ 98.568271][ T5043] __ubsan_handle_shift_out_of_bounds+0x2a2/0x600 [ 98.574728][ T5043] extAlloc.cold+0x8b/0xc5 [ 98.579200][ T5043] ? jfs_ioc_trim+0x5c0/0x5c0 [ 98.583904][ T5043] ? down_write_nested+0x153/0x200 [ 98.589036][ T5043] ? lock_acquire+0x464/0x510 [ 98.593744][ T5043] jfs_get_block+0x428/0xb20 [ 98.598464][ T5043] ? jfs_read_folio+0x20/0x20 [ 98.603206][ T5043] ? folio_flags.constprop.0+0x56/0x150 [ 98.608784][ T5043] ? do_raw_spin_unlock+0x173/0x230 [ 98.614114][ T5043] ? _raw_spin_unlock+0x28/0x40 [ 98.619006][ T5043] ? jfs_read_folio+0x20/0x20 [ 98.623737][ T5043] __block_write_begin_int+0x3c0/0x1470 [ 98.629354][ T5043] ? jfs_read_folio+0x20/0x20 [ 98.634088][ T5043] ? invalidate_bh_lrus_cpu+0x170/0x170 [ 98.639676][ T5043] block_write_begin+0xb1/0x490 [ 98.644563][ T5043] ? jfs_read_folio+0x20/0x20 [ 98.649307][ T5043] jfs_write_begin+0x31/0xd0 [ 98.653931][ T5043] generic_perform_write+0x278/0x600 [ 98.659258][ T5043] ? folio_add_wait_queue+0x1c0/0x1c0 [ 98.664667][ T5043] ? generic_file_direct_write+0xca/0x360 [ 98.670419][ T5043] __generic_file_write_iter+0x1d0/0x240 [ 98.676091][ T5043] generic_file_write_iter+0xe3/0x350 [ 98.681515][ T5043] do_iter_readv_writev+0x21e/0x3c0 [ 98.686735][ T5043] ? generic_copy_file_range+0x1d0/0x1d0 [ 98.692389][ T5043] ? bpf_lsm_file_permission+0x9/0x10 [ 98.697782][ T5043] ? security_file_permission+0x94/0x100 [ 98.703454][ T5043] do_iter_write+0x17f/0x830 [ 98.708088][ T5043] vfs_iter_write+0x7a/0xb0 [ 98.712630][ T5043] iter_file_splice_write+0x698/0xbf0 [ 98.718058][ T5043] ? splice_from_pipe_next+0x5d0/0x5d0 [ 98.723548][ T5043] ? security_file_permission+0xdc/0x100 [ 98.729215][ T5043] ? splice_from_pipe_next+0x5d0/0x5d0 [ 98.734703][ T5043] direct_splice_actor+0x118/0x180 [ 98.739846][ T5043] splice_direct_to_actor+0x347/0xa30 [ 98.745246][ T5043] ? folio_flags.constprop.0+0x150/0x150 [ 98.750909][ T5043] ? vfs_splice_read+0x3b0/0x3b0 [ 98.755871][ T5043] ? bpf_lsm_file_permission+0x9/0x10 [ 98.761271][ T5043] ? security_file_permission+0x94/0x100 [ 98.766937][ T5043] do_splice_direct+0x1af/0x280 [ 98.771818][ T5043] ? splice_direct_to_actor+0xa30/0xa30 [ 98.777392][ T5043] ? propagate_umount+0x1af0/0x1af0 [ 98.782616][ T5043] ? preempt_count_sub+0x150/0x150 [ 98.787777][ T5043] do_sendfile+0xb88/0x1390 [ 98.792310][ T5043] ? vfs_iocb_iter_write+0x4c0/0x4c0 [ 98.797631][ T5043] ? lock_release+0x4bf/0x680 [ 98.802341][ T5043] ? ptrace_notify+0xf4/0x130 [ 98.807040][ T5043] ? reacquire_held_locks+0x4b0/0x4b0 [ 98.812459][ T5043] __x64_sys_sendfile64+0x1d6/0x220 [ 98.817702][ T5043] ? rcu_is_watching+0x12/0xb0 [ 98.822488][ T5043] ? __ia32_sys_sendfile+0x220/0x220 [ 98.827799][ T5043] ? _raw_spin_unlock_irq+0x2e/0x50 [ 98.833033][ T5043] ? ptrace_notify+0xf4/0x130 [ 98.837739][ T5043] do_syscall_64+0x38/0xb0 [ 98.842197][ T5043] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 98.848133][ T5043] RIP: 0033:0x7fa353b031d9 [ 98.852566][ T5043] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 98.872203][ T5043] RSP: 002b:00007ffeffed1f38 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 98.880642][ T5043] RAX: ffffffffffffffda RBX: 00007fa353b4c0c8 RCX: 00007fa353b031d9 [ 98.888639][ T5043] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000009 [ 98.896631][ T5043] RBP: 00007fa353b4c08a R08: 000055555596f4c0 R09: 000055555596f4c0 [ 98.904625][ T5043] R10: 0001000000201004 R11: 0000000000000246 R12: 00007fa353b4c092 [ 98.912616][ T5043] R13: 00007fa353b4c082 R14: 431bde82d7b634db R15: 00007fa353b4c01d [ 98.920624][ T5043] [ 98.923875][ T5043] Kernel Offset: disabled [ 98.928204][ T5043] Rebooting in 86400 seconds..