./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2971077179
<...>
Warning: Permanently added '10.128.1.18' (ED25519) to the list of known hosts.
execve("./syz-executor2971077179", ["./syz-executor2971077179"], 0x7ffdf968ae30 /* 10 vars */) = 0
brk(NULL) = 0x555555c0a000
brk(0x555555c0ad00) = 0x555555c0ad00
arch_prctl(ARCH_SET_FS, 0x555555c0a380) = 0
set_tid_address(0x555555c0a650) = 5037
set_robust_list(0x555555c0a660, 24) = 0
rseq(0x555555c0aca0, 0x20, 0, 0x53053053) = 0
prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0
readlink("/proc/self/exe", "/root/syz-executor2971077179", 4096) = 28
getrandom("\xd3\xa0\x94\xbd\x51\x38\x2b\x03", 8, GRND_NONBLOCK) = 8
brk(NULL) = 0x555555c0ad00
brk(0x555555c2bd00) = 0x555555c2bd00
brk(0x555555c2c000) = 0x555555c2c000
mprotect(0x7f15e3d25000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3
ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address)
close(3) = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5038 attached
, child_tidptr=0x555555c0a650) = 5038
[pid 5038] set_robust_list(0x555555c0a660, 24) = 0
[pid 5038] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 5038] setpgid(0, 0) = 0
[pid 5038] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 5038] write(3, "1000", 4) = 4
[pid 5038] close(3) = 0
[pid 5038] memfd_create("syzkaller", 0) = 3
[pid 5038] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f15db86d000
[ 43.738393][ T5038] memfd_create() without MFD_EXEC nor MFD_NOEXEC_SEAL, pid=5038 'syz-executor297'
[pid 5038] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216
[pid 5038] munmap(0x7f15db86d000, 16777216) = 0
[pid 5038] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid 5038] ioctl(4, LOOP_SET_FD, 3) = 0
[pid 5038] close(3) = 0
[pid 5038] mkdir("./bus", 0777) = 0
[pid 5038] mount("/dev/loop0", "./bus", "jfs", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME|MS_LAZYTIME, "") = 0
[pid 5038] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3
[pid 5038] chdir("./bus") = 0
[pid 5038] ioctl(4, LOOP_CLR_FD) = 0
[pid 5038] close(4) = 0
[pid 5038] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4
[pid 5038] ftruncate(4, 33587199) = 0
[pid 5038] open("./bus", O_RDONLY) = 5
[ 43.869362][ T5038] loop0: detected capacity change from 0 to 32768
[ 43.886822][ T27] audit: type=1804 audit(1691322345.686:2): pid=5038 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor297" name="/root/bus/bus" dev="loop0" ino=7 res=1 errno=0
[pid 5038] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 6
[pid 5038] dup(6) = 7
[ 43.908530][ T27] audit: type=1804 audit(1691322345.706:3): pid=5038 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor297" name="/root/bus/bus" dev="loop0" ino=7 res=1 errno=0
[ 44.354086][ T5038] ================================================================================
[ 44.363587][ T5038] UBSAN: shift-out-of-bounds in fs/jfs/jfs_extent.c:314:16
[ 44.370902][ T5038] shift exponent -1 is negative
[ 44.376300][ T5038] CPU: 0 PID: 5038 Comm: syz-executor297 Not tainted 6.5.0-rc4-next-20230804-syzkaller #0
[ 44.386391][ T5038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2023
[ 44.396605][ T5038] Call Trace:
[ 44.399869][ T5038]
[ 44.402789][ T5038] dump_stack_lvl+0x125/0x1b0
[ 44.407652][ T5038] __ubsan_handle_shift_out_of_bounds+0x27a/0x600
[ 44.414058][ T5038] extAlloc.cold+0x8b/0xc5
[ 44.418472][ T5038] ? jfs_ioc_trim+0x5c0/0x5c0
[ 44.423142][ T5038] ? down_write_nested+0x153/0x200
[ 44.428245][ T5038] ? lock_acquire+0x464/0x510
[ 44.432931][ T5038] jfs_get_block+0x428/0xb20
[ 44.437616][ T5038] ? jfs_read_folio+0x20/0x20
[ 44.442388][ T5038] ? folio_flags.constprop.0+0x56/0x150
[ 44.448277][ T5038] ? do_raw_spin_unlock+0x173/0x230
[ 44.453501][ T5038] ? _raw_spin_unlock+0x28/0x40
[ 44.458354][ T5038] ? jfs_read_folio+0x20/0x20
[ 44.463056][ T5038] __block_write_begin_int+0x3c0/0x1470
[ 44.468688][ T5038] ? jfs_read_folio+0x20/0x20
[ 44.473403][ T5038] ? invalidate_bh_lrus_cpu+0x170/0x170
[ 44.478943][ T5038] block_write_begin+0xb1/0x490
[ 44.483789][ T5038] ? jfs_read_folio+0x20/0x20
[ 44.488659][ T5038] jfs_write_begin+0x31/0xd0
[ 44.493248][ T5038] generic_perform_write+0x278/0x600
[ 44.498551][ T5038] ? folio_add_wait_queue+0x1c0/0x1c0
[ 44.503913][ T5038] ? generic_file_direct_write+0xca/0x360
[ 44.509655][ T5038] __generic_file_write_iter+0x1d0/0x240
[ 44.515387][ T5038] generic_file_write_iter+0xe3/0x350
[ 44.520753][ T5038] do_iter_readv_writev+0x21e/0x3c0
[ 44.525987][ T5038] ? generic_copy_file_range+0x1d0/0x1d0
[ 44.531613][ T5038] ? bpf_lsm_file_permission+0x9/0x10
[ 44.536986][ T5038] ? security_file_permission+0x94/0x100
[ 44.542655][ T5038] do_iter_write+0x17f/0x830
[ 44.547260][ T5038] vfs_iter_write+0x7a/0xb0
[ 44.551842][ T5038] iter_file_splice_write+0x698/0xbf0
[ 44.557207][ T5038] ? splice_from_pipe_next+0x5d0/0x5d0
[ 44.562670][ T5038] ? security_file_permission+0xdc/0x100
[ 44.568315][ T5038] ? splice_from_pipe_next+0x5d0/0x5d0
[ 44.573765][ T5038] direct_splice_actor+0x118/0x180
[ 44.578870][ T5038] splice_direct_to_actor+0x347/0xa30
[ 44.584233][ T5038] ? folio_flags.constprop.0+0x150/0x150
[ 44.589889][ T5038] ? vfs_splice_read+0x3b0/0x3b0
[ 44.594816][ T5038] ? bpf_lsm_file_permission+0x9/0x10
[ 44.600177][ T5038] ? security_file_permission+0x94/0x100
[ 44.605823][ T5038] do_splice_direct+0x1af/0x280
[ 44.610674][ T5038] ? splice_direct_to_actor+0xa30/0xa30
[ 44.616403][ T5038] ? propagate_umount+0x1af0/0x1af0
[ 44.621608][ T5038] ? preempt_count_sub+0x150/0x150
[ 44.626746][ T5038] do_sendfile+0xb88/0x1390
[ 44.631275][ T5038] ? vfs_iocb_iter_write+0x4c0/0x4c0
[ 44.636557][ T5038] ? lock_release+0x4bf/0x680
[ 44.641278][ T5038] ? ptrace_notify+0xf4/0x130
[ 44.645957][ T5038] ? reacquire_held_locks+0x4b0/0x4b0
[ 44.651349][ T5038] __x64_sys_sendfile64+0x1d6/0x220
[ 44.656554][ T5038] ? rcu_is_watching+0x12/0xb0
[ 44.661315][ T5038] ? __ia32_sys_sendfile+0x220/0x220
[ 44.666690][ T5038] ? _raw_spin_unlock_irq+0x2e/0x50
[ 44.671985][ T5038] ? ptrace_notify+0xf4/0x130
[ 44.676697][ T5038] do_syscall_64+0x38/0xb0
[ 44.681138][ T5038] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 44.687040][ T5038] RIP: 0033:0x7f15e3cac619
[ 44.691447][ T5038] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 44.711052][ T5038] RSP: 002b:00007ffe4fb7dc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 44.719498][ T5038] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f15e3cac619
[ 44.727469][ T5038] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000007
[ 44.735431][ T5038] RBP: 00007f15e3d255f0 R08: 0000555555c0b4c0 R09: 0000555555c0b4c0
[ 44.743566][ T5038] R10: 0001000000201004 R11: 0000000000000246 R12: 00007ffe4fb7dc90
[ 44.751653][ T5038] R13: 00007ffe4fb7deb8 R14: 431bde82d7b634db R15: 00007f15e3cf503b
[ 44.759622][ T5038]
[ 44.762920][ T5038] ================================================================================
[ 44.772316][ T5038] Kernel panic - not syncing: UBSAN: panic_on_warn set ...
[ 44.779946][ T5038] CPU: 1 PID: 5038 Comm: syz-executor297 Not tainted 6.5.0-rc4-next-20230804-syzkaller #0
[ 44.789932][ T5038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2023
[ 44.799988][ T5038] Call Trace:
[ 44.803269][ T5038]
[ 44.806205][ T5038] dump_stack_lvl+0xd9/0x1b0
[ 44.810854][ T5038] panic+0x6a4/0x750
[ 44.814761][ T5038] ? panic_smp_self_stop+0xa0/0xa0
[ 44.819887][ T5038] ? syslog_print_all+0x3f0/0x3f0
[ 44.824933][ T5038] check_panic_on_warn+0xab/0xb0
[ 44.829974][ T5038] __ubsan_handle_shift_out_of_bounds+0x2a2/0x600
[ 44.836491][ T5038] extAlloc.cold+0x8b/0xc5
[ 44.841038][ T5038] ? jfs_ioc_trim+0x5c0/0x5c0
[ 44.845737][ T5038] ? down_write_nested+0x153/0x200
[ 44.850874][ T5038] ? lock_acquire+0x464/0x510
[ 44.855839][ T5038] jfs_get_block+0x428/0xb20
[ 44.860476][ T5038] ? jfs_read_folio+0x20/0x20
[ 44.865173][ T5038] ? folio_flags.constprop.0+0x56/0x150
[ 44.870729][ T5038] ? do_raw_spin_unlock+0x173/0x230
[ 44.875946][ T5038] ? _raw_spin_unlock+0x28/0x40
[ 44.880811][ T5038] ? jfs_read_folio+0x20/0x20
[ 44.885943][ T5038] __block_write_begin_int+0x3c0/0x1470
[ 44.891509][ T5038] ? jfs_read_folio+0x20/0x20
[ 44.896728][ T5038] ? invalidate_bh_lrus_cpu+0x170/0x170
[ 44.902377][ T5038] block_write_begin+0xb1/0x490
[ 44.907243][ T5038] ? jfs_read_folio+0x20/0x20
[ 44.912026][ T5038] jfs_write_begin+0x31/0xd0
[ 44.916984][ T5038] generic_perform_write+0x278/0x600
[ 44.922281][ T5038] ? folio_add_wait_queue+0x1c0/0x1c0
[ 44.927677][ T5038] ? generic_file_direct_write+0xca/0x360
[ 44.933413][ T5038] __generic_file_write_iter+0x1d0/0x240
[ 44.939054][ T5038] generic_file_write_iter+0xe3/0x350
[ 44.944529][ T5038] do_iter_readv_writev+0x21e/0x3c0
[ 44.949736][ T5038] ? generic_copy_file_range+0x1d0/0x1d0
[ 44.955399][ T5038] ? bpf_lsm_file_permission+0x9/0x10
[ 44.960974][ T5038] ? security_file_permission+0x94/0x100
[ 44.966630][ T5038] do_iter_write+0x17f/0x830
[ 44.971233][ T5038] vfs_iter_write+0x7a/0xb0
[ 44.975921][ T5038] iter_file_splice_write+0x698/0xbf0
[ 44.981311][ T5038] ? splice_from_pipe_next+0x5d0/0x5d0
[ 44.986791][ T5038] ? security_file_permission+0xdc/0x100
[ 44.992444][ T5038] ? splice_from_pipe_next+0x5d0/0x5d0
[ 44.997915][ T5038] direct_splice_actor+0x118/0x180
[ 45.003036][ T5038] splice_direct_to_actor+0x347/0xa30
[ 45.008417][ T5038] ? folio_flags.constprop.0+0x150/0x150
[ 45.014058][ T5038] ? vfs_splice_read+0x3b0/0x3b0
[ 45.019010][ T5038] ? bpf_lsm_file_permission+0x9/0x10
[ 45.024391][ T5038] ? security_file_permission+0x94/0x100
[ 45.030035][ T5038] do_splice_direct+0x1af/0x280
[ 45.034919][ T5038] ? splice_direct_to_actor+0xa30/0xa30
[ 45.040472][ T5038] ? propagate_umount+0x1af0/0x1af0
[ 45.045675][ T5038] ? preempt_count_sub+0x150/0x150
[ 45.050806][ T5038] do_sendfile+0xb88/0x1390
[ 45.055318][ T5038] ? vfs_iocb_iter_write+0x4c0/0x4c0
[ 45.060723][ T5038] ? lock_release+0x4bf/0x680
[ 45.065507][ T5038] ? ptrace_notify+0xf4/0x130
[ 45.070192][ T5038] ? reacquire_held_locks+0x4b0/0x4b0
[ 45.075579][ T5038] __x64_sys_sendfile64+0x1d6/0x220
[ 45.080795][ T5038] ? rcu_is_watching+0x12/0xb0
[ 45.085565][ T5038] ? __ia32_sys_sendfile+0x220/0x220
[ 45.091486][ T5038] ? _raw_spin_unlock_irq+0x2e/0x50
[ 45.096697][ T5038] ? ptrace_notify+0xf4/0x130
[ 45.101385][ T5038] do_syscall_64+0x38/0xb0
[ 45.105817][ T5038] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 45.111813][ T5038] RIP: 0033:0x7f15e3cac619
[ 45.116494][ T5038] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 45.136457][ T5038] RSP: 002b:00007ffe4fb7dc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 45.145320][ T5038] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f15e3cac619
[ 45.153407][ T5038] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000007
[ 45.161487][ T5038] RBP: 00007f15e3d255f0 R08: 0000555555c0b4c0 R09: 0000555555c0b4c0
[ 45.169557][ T5038] R10: 0001000000201004 R11: 0000000000000246 R12: 00007ffe4fb7dc90
[ 45.178412][ T5038] R13: 00007ffe4fb7deb8 R14: 431bde82d7b634db R15: 00007f15e3cf503b
[ 45.186409][ T5038]
[ 45.189522][ T5038] Kernel Offset: disabled
[ 45.193852][ T5038] Rebooting in 86400 seconds..