./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1561137153

<...>
Warning: Permanently added '10.128.1.143' (ED25519) to the list of known hosts.
execve("./syz-executor1561137153", ["./syz-executor1561137153"], 0x7ffe265d9570 /* 10 vars */) = 0
brk(NULL)                               = 0x5555574a3000
brk(0x5555574a3d00)                     = 0x5555574a3d00
arch_prctl(ARCH_SET_FS, 0x5555574a3380) = 0
set_tid_address(0x5555574a3650)         = 5042
set_robust_list(0x5555574a3660, 24)     = 0
rseq(0x5555574a3ca0, 0x20, 0, 0x53053053) = 0
prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0
readlink("/proc/self/exe", "/root/syz-executor1561137153", 4096) = 28
getrandom("\x4d\xeb\x14\xd8\xf4\x82\xfa\xc9", 8, GRND_NONBLOCK) = 8
brk(NULL)                               = 0x5555574a3d00
brk(0x5555574c4d00)                     = 0x5555574c4d00
brk(0x5555574c5000)                     = 0x5555574c5000
mprotect(0x7f14c930f000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5043 attached
, child_tidptr=0x5555574a3650) = 5043
[pid  5043] set_robust_list(0x5555574a3660, 24) = 0
[pid  5043] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5043] setpgid(0, 0)               = 0
[pid  5043] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5043] write(3, "1000", 4)         = 4
[pid  5043] close(3)                    = 0
[pid  5043] memfd_create("syzkaller", 0) = 3
[pid  5043] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f14c0e37000
[   90.064413][ T5043] syz-executor156[5043]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set
[pid  5043] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216
[pid  5043] munmap(0x7f14c0e37000, 16777216) = 0
[pid  5043] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5043] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5043] close(3)                    = 0
[pid  5043] mkdir("./file0", 0777)      = 0
[pid  5043] mount("/dev/loop0", "./file0", "jfs", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME|MS_LAZYTIME, "") = 0
[pid  5043] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5043] chdir("./file0")            = 0
[pid  5043] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5043] close(4)                    = 0
[pid  5043] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4
[pid  5043] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 5
[pid  5043] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000) = 6
[pid  5043] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<<MAP_HUGE_SHIFT, 6, 0) = 0x20000000
[pid  5043] ftruncate(5, 33587199)      = 0
[pid  5043] open("./bus", O_RDONLY)     = 7
[pid  5043] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 8
[   90.308282][ T5043] loop0: detected capacity change from 0 to 32768
[   90.335164][   T28] audit: type=1804 audit(1692999331.120:2): pid=5043 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor156" name="/root/file0/bus" dev="loop0" ino=7 res=1 errno=0
[pid  5043] dup(8)                      = 9
[pid  5043] memfd_create("syzkaller", 0) = 10
[pid  5043] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f14b9a37000
[pid  5043] write(10, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152
[   90.356684][   T28] audit: type=1804 audit(1692999331.140:3): pid=5043 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor156" name="/root/file0/bus" dev="loop0" ino=7 res=1 errno=0
[   90.360426][ T5043] syz-executor156[5043]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set
[pid  5043] munmap(0x7f14b9a37000, 2097152) = 0
[pid  5043] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 11
[pid  5043] ioctl(11, LOOP_SET_FD, 10)  = -1 EBUSY (Device or resource busy)
[pid  5043] ioctl(11, LOOP_CLR_FD)      = 0
[pid  5043] ioctl(11, LOOP_SET_FD, 10)  = -1 EBUSY (Device or resource busy)
[pid  5043] close(11)                   = 0
[pid  5043] close(10)                   = 0
[   91.474257][ T5043] ================================================================================
[   91.483795][ T5043] UBSAN: shift-out-of-bounds in fs/jfs/jfs_extent.c:314:16
[   91.491023][ T5043] shift exponent -1 is negative
[   91.495950][ T5043] CPU: 1 PID: 5043 Comm: syz-executor156 Not tainted 6.5.0-rc7-next-20230825-syzkaller #0
[   91.506169][ T5043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023
[   91.516247][ T5043] Call Trace:
[   91.519547][ T5043]  <TASK>
[   91.522492][ T5043]  dump_stack_lvl+0x125/0x1b0
[   91.527234][ T5043]  __ubsan_handle_shift_out_of_bounds+0x27a/0x600
[   91.533705][ T5043]  extAlloc.cold+0x8b/0xc5
[   91.538163][ T5043]  ? jfs_ioc_trim+0x5c0/0x5c0
[   91.542878][ T5043]  ? down_write_nested+0x153/0x200
[   91.548043][ T5043]  ? lock_acquire+0x464/0x510
[   91.552775][ T5043]  ? lockdep_init_map_type+0x16d/0x7c0
[   91.558296][ T5043]  jfs_get_block+0x428/0xb20
[   91.562932][ T5043]  ? jfs_read_folio+0x20/0x20
[   91.567641][ T5043]  ? folio_flags.constprop.0+0x56/0x150
[   91.573223][ T5043]  ? do_raw_spin_unlock+0x173/0x230
[   91.578467][ T5043]  ? _raw_spin_unlock+0x28/0x40
[   91.583363][ T5043]  ? jfs_read_folio+0x20/0x20
[   91.588067][ T5043]  __block_write_begin_int+0x3c0/0x1470
[   91.593656][ T5043]  ? jfs_read_folio+0x20/0x20
[   91.598368][ T5043]  ? invalidate_bh_lrus_cpu+0x170/0x170
[   91.603956][ T5043]  ? folio_flags+0x71/0x1f0
[   91.608490][ T5043]  block_write_begin+0xb1/0x490
[   91.613378][ T5043]  ? jfs_read_folio+0x20/0x20
[   91.618101][ T5043]  jfs_write_begin+0x31/0xd0
[   91.622808][ T5043]  generic_perform_write+0x278/0x600
[   91.628136][ T5043]  ? folio_add_wait_queue+0x1c0/0x1c0
[   91.633546][ T5043]  ? generic_file_direct_write+0xca/0x360
[   91.639319][ T5043]  ? __mnt_drop_write_file+0x45/0xf0
[   91.644736][ T5043]  __generic_file_write_iter+0x1d0/0x240
[   91.650432][ T5043]  generic_file_write_iter+0xe3/0x350
[   91.655843][ T5043]  do_iter_readv_writev+0x21e/0x3c0
[   91.661081][ T5043]  ? generic_copy_file_range+0x1d0/0x1d0
[   91.666748][ T5043]  ? bpf_lsm_file_permission+0x9/0x10
[   91.672157][ T5043]  ? security_file_permission+0x94/0x100
[   91.677843][ T5043]  do_iter_write+0x17f/0x830
[   91.682472][ T5043]  vfs_iter_write+0x7a/0xb0
[   91.687099][ T5043]  iter_file_splice_write+0x698/0xbf0
[   91.692519][ T5043]  ? splice_from_pipe_next+0x5d0/0x5d0
[   91.698022][ T5043]  ? security_file_permission+0xdc/0x100
[   91.703701][ T5043]  ? splice_from_pipe_next+0x5d0/0x5d0
[   91.709201][ T5043]  direct_splice_actor+0x118/0x180
[   91.714350][ T5043]  splice_direct_to_actor+0x347/0xa30
[   91.719761][ T5043]  ? folio_flags.constprop.0+0x150/0x150
[   91.725524][ T5043]  ? vfs_splice_read+0x3b0/0x3b0
[   91.730507][ T5043]  ? bpf_lsm_file_permission+0x9/0x10
[   91.735919][ T5043]  ? security_file_permission+0x94/0x100
[   91.741601][ T5043]  do_splice_direct+0x1af/0x280
[   91.746487][ T5043]  ? splice_direct_to_actor+0xa30/0xa30
[   91.752071][ T5043]  ? propagate_umount+0x1af0/0x1af0
[   91.757305][ T5043]  ? preempt_count_sub+0x150/0x150
[   91.762462][ T5043]  do_sendfile+0xb88/0x1390
[   91.766999][ T5043]  ? vfs_iocb_iter_write+0x4c0/0x4c0
[   91.772312][ T5043]  ? lock_release+0x4bf/0x680
[   91.777023][ T5043]  ? ptrace_notify+0xf4/0x130
[   91.781727][ T5043]  ? reacquire_held_locks+0x4b0/0x4b0
[   91.787138][ T5043]  __x64_sys_sendfile64+0x1d6/0x220
[   91.792371][ T5043]  ? rcu_is_watching+0x12/0xb0
[   91.797160][ T5043]  ? __ia32_sys_sendfile+0x220/0x220
[   91.802485][ T5043]  ? _raw_spin_unlock_irq+0x2e/0x50
[   91.807716][ T5043]  ? ptrace_notify+0xf4/0x130
[   91.812427][ T5043]  do_syscall_64+0x38/0xb0
[   91.816887][ T5043]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[   91.822838][ T5043] RIP: 0033:0x7f14c9276299
[   91.827377][ T5043] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[   91.847184][ T5043] RSP: 002b:00007ffdb70c63b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[   91.855623][ T5043] RAX: ffffffffffffffda RBX: 00007f14c92bf08a RCX: 00007f14c9276299
[   91.863618][ T5043] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000009
[   91.871610][ T5043] RBP: 00007f14c92bf082 R08: 000000000001ee4f R09: 000000002001f200
[   91.879606][ T5043] R10: 0001000000201004 R11: 0000000000000246 R12: 00007ffdb70c63f0
[   91.887599][ T5043] R13: 00007ffdb70c6618 R14: 431bde82d7b634db R15: 00007f14c92bf03b
[   91.895603][ T5043]  </TASK>
[   91.898905][ T5043] ================================================================================
[   91.908466][ T5043] Kernel panic - not syncing: UBSAN: panic_on_warn set ...
[   91.915693][ T5043] CPU: 1 PID: 5043 Comm: syz-executor156 Not tainted 6.5.0-rc7-next-20230825-syzkaller #0
[   91.925611][ T5043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023
[   91.935686][ T5043] Call Trace:
[   91.938982][ T5043]  <TASK>
[   91.941933][ T5043]  dump_stack_lvl+0xd9/0x1b0
[   91.946570][ T5043]  panic+0x6a6/0x750
[   91.950494][ T5043]  ? panic_smp_self_stop+0xa0/0xa0
[   91.955643][ T5043]  ? syslog_print_all+0x3f0/0x3f0
[   91.960710][ T5043]  check_panic_on_warn+0xab/0xb0
[   91.965683][ T5043]  __ubsan_handle_shift_out_of_bounds+0x2a2/0x600
[   91.972147][ T5043]  extAlloc.cold+0x8b/0xc5
[   91.976600][ T5043]  ? jfs_ioc_trim+0x5c0/0x5c0
[   91.981317][ T5043]  ? down_write_nested+0x153/0x200
[   91.986461][ T5043]  ? lock_acquire+0x464/0x510
[   91.991181][ T5043]  ? lockdep_init_map_type+0x16d/0x7c0
[   91.996685][ T5043]  jfs_get_block+0x428/0xb20
[   92.001312][ T5043]  ? jfs_read_folio+0x20/0x20
[   92.006018][ T5043]  ? folio_flags.constprop.0+0x56/0x150
[   92.011600][ T5043]  ? do_raw_spin_unlock+0x173/0x230
[   92.016847][ T5043]  ? _raw_spin_unlock+0x28/0x40
[   92.021735][ T5043]  ? jfs_read_folio+0x20/0x20
[   92.026461][ T5043]  __block_write_begin_int+0x3c0/0x1470
[   92.032048][ T5043]  ? jfs_read_folio+0x20/0x20
[   92.036755][ T5043]  ? invalidate_bh_lrus_cpu+0x170/0x170
[   92.042343][ T5043]  ? folio_flags+0x71/0x1f0
[   92.046884][ T5043]  block_write_begin+0xb1/0x490
[   92.051859][ T5043]  ? jfs_read_folio+0x20/0x20
[   92.056563][ T5043]  jfs_write_begin+0x31/0xd0
[   92.061183][ T5043]  generic_perform_write+0x278/0x600
[   92.066505][ T5043]  ? folio_add_wait_queue+0x1c0/0x1c0
[   92.071921][ T5043]  ? generic_file_direct_write+0xca/0x360
[   92.077863][ T5043]  ? __mnt_drop_write_file+0x45/0xf0
[   92.083196][ T5043]  __generic_file_write_iter+0x1d0/0x240
[   92.088873][ T5043]  generic_file_write_iter+0xe3/0x350
[   92.094314][ T5043]  do_iter_readv_writev+0x21e/0x3c0
[   92.099552][ T5043]  ? generic_copy_file_range+0x1d0/0x1d0
[   92.105241][ T5043]  ? bpf_lsm_file_permission+0x9/0x10
[   92.110746][ T5043]  ? security_file_permission+0x94/0x100
[   92.116431][ T5043]  do_iter_write+0x17f/0x830
[   92.121079][ T5043]  vfs_iter_write+0x7a/0xb0
[   92.125612][ T5043]  iter_file_splice_write+0x698/0xbf0
[   92.131040][ T5043]  ? splice_from_pipe_next+0x5d0/0x5d0
[   92.136541][ T5043]  ? security_file_permission+0xdc/0x100
[   92.142221][ T5043]  ? splice_from_pipe_next+0x5d0/0x5d0
[   92.147718][ T5043]  direct_splice_actor+0x118/0x180
[   92.152867][ T5043]  splice_direct_to_actor+0x347/0xa30
[   92.158279][ T5043]  ? folio_flags.constprop.0+0x150/0x150
[   92.164059][ T5043]  ? vfs_splice_read+0x3b0/0x3b0
[   92.169032][ T5043]  ? bpf_lsm_file_permission+0x9/0x10
[   92.174434][ T5043]  ? security_file_permission+0x94/0x100
[   92.180110][ T5043]  do_splice_direct+0x1af/0x280
[   92.184997][ T5043]  ? splice_direct_to_actor+0xa30/0xa30
[   92.190583][ T5043]  ? propagate_umount+0x1af0/0x1af0
[   92.195817][ T5043]  ? preempt_count_sub+0x150/0x150
[   92.200978][ T5043]  do_sendfile+0xb88/0x1390
[   92.205603][ T5043]  ? vfs_iocb_iter_write+0x4c0/0x4c0
[   92.210919][ T5043]  ? lock_release+0x4bf/0x680
[   92.215627][ T5043]  ? ptrace_notify+0xf4/0x130
[   92.220327][ T5043]  ? reacquire_held_locks+0x4b0/0x4b0
[   92.225738][ T5043]  __x64_sys_sendfile64+0x1d6/0x220
[   92.230972][ T5043]  ? rcu_is_watching+0x12/0xb0
[   92.235770][ T5043]  ? __ia32_sys_sendfile+0x220/0x220
[   92.241092][ T5043]  ? _raw_spin_unlock_irq+0x2e/0x50
[   92.246417][ T5043]  ? ptrace_notify+0xf4/0x130
[   92.251125][ T5043]  do_syscall_64+0x38/0xb0
[   92.255582][ T5043]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[   92.261539][ T5043] RIP: 0033:0x7f14c9276299
[   92.265971][ T5043] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[   92.285792][ T5043] RSP: 002b:00007ffdb70c63b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[   92.294235][ T5043] RAX: ffffffffffffffda RBX: 00007f14c92bf08a RCX: 00007f14c9276299
[   92.302233][ T5043] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000009
[   92.310231][ T5043] RBP: 00007f14c92bf082 R08: 000000000001ee4f R09: 000000002001f200
[   92.318239][ T5043] R10: 0001000000201004 R11: 0000000000000246 R12: 00007ffdb70c63f0
[   92.326250][ T5043] R13: 00007ffdb70c6618 R14: 431bde82d7b634db R15: 00007f14c92bf03b
[   92.334263][ T5043]  </TASK>
[   92.337407][ T5043] Kernel Offset: disabled
[   92.341738][ T5043] Rebooting in 86400 seconds..