./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor449691020
<...>
Warning: Permanently added '10.128.10.4' (ECDSA) to the list of known hosts.
execve("./syz-executor449691020", ["./syz-executor449691020"], 0x7fff00661700 /* 10 vars */) = 0
brk(NULL) = 0x55555651a000
brk(0x55555651ac40) = 0x55555651ac40
arch_prctl(ARCH_SET_FS, 0x55555651a300) = 0
uname({sysname="Linux", nodename="syzkaller", ...}) = 0
readlink("/proc/self/exe", "/root/syz-executor449691020", 4096) = 27
brk(0x55555653bc40) = 0x55555653bc40
brk(0x55555653c000) = 0x55555653c000
mprotect(0x7f619e098000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3
ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address)
close(3) = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555651a5d0) = 4992
./strace-static-x86_64: Process 4992 attached
[pid 4992] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 4992] setpgid(0, 0) = 0
[pid 4992] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 4992] write(3, "1000", 4) = 4
[pid 4992] close(3) = 0
[pid 4992] memfd_create("syzkaller", 0) = 3
[pid 4992] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f6195bd8000
[ 54.177335][ T4992] memfd_create() without MFD_EXEC nor MFD_NOEXEC_SEAL, pid=4992 'syz-executor449'
[pid 4992] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216
[pid 4992] munmap(0x7f6195bd8000, 16777216) = 0
[pid 4992] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid 4992] ioctl(4, LOOP_SET_FD, 3) = 0
[pid 4992] close(3) = 0
[pid 4992] mkdir("./bus", 0777) = 0
[pid 4992] mount("/dev/loop0", "./bus", "jfs", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME|MS_LAZYTIME, "") = 0
[pid 4992] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3
[pid 4992] chdir("./bus") = 0
[pid 4992] ioctl(4, LOOP_CLR_FD) = 0
[pid 4992] close(4) = 0
[pid 4992] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4
[pid 4992] openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = 5
[ 54.345177][ T4992] loop0: detected capacity change from 0 to 32768
[pid 4992] write(5, "\x74\xef\xc4\xc4\x19\xfd\xb8\xd6\x6b\xbb\xa7\x28\xf3\x71\xd0\x56\xad\x6f\x01\xe9\x76\x2d\x70\x40\x1d\x1c\x9d\x33\x1b\x48\xb9\x25\xe9\xe6\xa7\x75\x9a\xbb\x20\x6b\x9b\x18\xbf\xc3\xf3\xf9\x6a\xdb\x2b\x37\xc2\x12\x1e\xf2\x1e\x91\xba\xc7\x68\xdd\x33\xdf\x29\x64\x9d\xa1\xd8\x2e\x82\x6a\x55\xc4\xd6\x20\xb6\xf5\x10\xda\xee\x26\x00\x4b\x74\x1c\x95\x1d\x52\x8d\x80\x6e\xfb\xe0\x0c\x43\x9f\x2d\xf4\x6d\x3a\xdf"..., 1048064) = 1048064
[pid 4992] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 6
[pid 4992] ftruncate(6, 33587199) = 0
[pid 4992] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|FASYNC, 000) = 7
[pid 4992] open("./bus", O_RDONLY) = 8
[ 54.416994][ T27] audit: type=1804 audit(1685855351.745:2): pid=4992 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor449" name="/root/bus/bus" dev="loop0" ino=7 res=1 errno=0
[ 55.169815][ T4992] ================================================================================
[ 55.179493][ T4992] UBSAN: shift-out-of-bounds in fs/jfs/jfs_extent.c:314:16
[ 55.186971][ T4992] shift exponent -1 is negative
[ 55.192261][ T4992] CPU: 1 PID: 4992 Comm: syz-executor449 Not tainted 6.4.0-rc4-syzkaller-00268-g51f269a6ecc7 #0
[ 55.203024][ T4992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023
[ 55.213062][ T4992] Call Trace:
[ 55.216332][ T4992]
[ 55.219254][ T4992] dump_stack_lvl+0x1e7/0x2d0
[ 55.223938][ T4992] ? nf_tcp_handle_invalid+0x650/0x650
[ 55.229388][ T4992] ? panic+0x770/0x770
[ 55.233446][ T4992] ? extAlloc+0x10a/0x1010
[ 55.237851][ T4992] __ubsan_handle_shift_out_of_bounds+0x3c3/0x420
[ 55.244257][ T4992] ? do_raw_spin_unlock+0x13b/0x8b0
[ 55.249449][ T4992] extAlloc+0xe53/0x1010
[ 55.253709][ T4992] ? jfs_ioc_trim+0x660/0x660
[ 55.258427][ T4992] jfs_get_block+0x41b/0xe60
[ 55.263031][ T4992] ? jfs_dirty_inode+0x240/0x240
[ 55.267970][ T4992] ? _raw_spin_unlock+0x28/0x40
[ 55.272807][ T4992] ? folio_create_buffers+0x132/0x250
[ 55.278169][ T4992] __block_write_begin_int+0x548/0x1a50
[ 55.283779][ T4992] ? jfs_dirty_inode+0x240/0x240
[ 55.288740][ T4992] ? PageUptodate+0x290/0x290
[ 55.293417][ T4992] ? folio_test_hugetlb+0xa0/0x1d0
[ 55.298539][ T4992] ? pagecache_get_page+0xeb/0x220
[ 55.303641][ T4992] ? jfs_dirty_inode+0x240/0x240
[ 55.308569][ T4992] block_write_begin+0x9c/0x1f0
[ 55.313441][ T4992] ? jfs_write_begin+0x1a/0x70
[ 55.318210][ T4992] jfs_write_begin+0x31/0x70
[ 55.322798][ T4992] generic_perform_write+0x300/0x5e0
[ 55.328095][ T4992] ? generic_file_direct_write+0x460/0x460
[ 55.333899][ T4992] ? generic_file_direct_write+0x40f/0x460
[ 55.339699][ T4992] __generic_file_write_iter+0x29b/0x400
[ 55.345322][ T4992] generic_file_write_iter+0xaf/0x310
[ 55.350694][ T4992] do_iter_write+0x7b1/0xcb0
[ 55.355295][ T4992] ? vfs_iter_write+0xa0/0xa0
[ 55.359969][ T4992] ? vfs_iter_write+0x6d/0xa0
[ 55.364656][ T4992] iter_file_splice_write+0x843/0xfe0
[ 55.370033][ T4992] ? splice_from_pipe+0x230/0x230
[ 55.375060][ T4992] ? lockdep_hardirqs_on+0x98/0x140
[ 55.380272][ T4992] ? direct_splice_read+0xa10/0xa10
[ 55.385481][ T4992] ? splice_from_pipe+0x230/0x230
[ 55.390495][ T4992] direct_splice_actor+0xe7/0x1c0
[ 55.395505][ T4992] splice_direct_to_actor+0x4c4/0xbd0
[ 55.400882][ T4992] ? do_splice_direct+0x3d0/0x3d0
[ 55.405908][ T4992] ? pipe_to_sendpage+0x350/0x350
[ 55.410926][ T4992] ? fsnotify_perm+0x67/0x590
[ 55.415591][ T4992] ? bpf_lsm_file_permission+0x9/0x10
[ 55.420954][ T4992] do_splice_direct+0x283/0x3d0
[ 55.425794][ T4992] ? splice_direct_to_actor+0xbd0/0xbd0
[ 55.431324][ T4992] ? rcu_read_lock_any_held+0xb7/0x160
[ 55.436779][ T4992] do_sendfile+0x620/0xff0
[ 55.441191][ T4992] ? ptrace_stop+0x75a/0x970
[ 55.445780][ T4992] ? do_pwritev+0x360/0x360
[ 55.450267][ T4992] ? _raw_spin_unlock_irq+0x2e/0x50
[ 55.455456][ T4992] ? ptrace_notify+0x278/0x380
[ 55.460224][ T4992] __se_sys_sendfile64+0x17c/0x1e0
[ 55.465342][ T4992] ? __x64_sys_sendfile64+0xb0/0xb0
[ 55.470526][ T4992] ? syscall_enter_from_user_mode+0x32/0x230
[ 55.476494][ T4992] ? syscall_enter_from_user_mode+0x8c/0x230
[ 55.482461][ T4992] do_syscall_64+0x41/0xc0
[ 55.486882][ T4992] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 55.492779][ T4992] RIP: 0033:0x7f619e025339
[ 55.497181][ T4992] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 55.516770][ T4992] RSP: 002b:00007ffc715b6578 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 55.525170][ T4992] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f619e025339
[ 55.533125][ T4992] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000007
[ 55.541079][ T4992] RBP: 0000000000000000 R08: 00007f619e098ec0 R09: 00007f619e098ec0
[ 55.549036][ T4992] R10: 0001000000201004 R11: 0000000000000246 R12: 00007ffc715b65a0
[ 55.557011][ T4992] R13: 0000000000000000 R14: 431bde82d7b634db R15: 0000000000000000
[ 55.565020][ T4992]
[ 55.571916][ T4992] ================================================================================
[ 55.581792][ T4992] Kernel panic - not syncing: UBSAN: panic_on_warn set ...
[ 55.589003][ T4992] CPU: 1 PID: 4992 Comm: syz-executor449 Not tainted 6.4.0-rc4-syzkaller-00268-g51f269a6ecc7 #0
[ 55.599426][ T4992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023
[ 55.609507][ T4992] Call Trace:
[ 55.612793][ T4992]
[ 55.615732][ T4992] dump_stack_lvl+0x1e7/0x2d0
[ 55.620435][ T4992] ? nf_tcp_handle_invalid+0x650/0x650
[ 55.625907][ T4992] ? panic+0x770/0x770
[ 55.629971][ T4992] ? vscnprintf+0x5d/0x80
[ 55.634296][ T4992] panic+0x30f/0x770
[ 55.638180][ T4992] ? check_panic_on_warn+0x21/0xa0
[ 55.643283][ T4992] ? __memcpy_flushcache+0x2b0/0x2b0
[ 55.648558][ T4992] ? dump_stack_lvl+0x253/0x2d0
[ 55.653405][ T4992] check_panic_on_warn+0x82/0xa0
[ 55.658343][ T4992] __ubsan_handle_shift_out_of_bounds+0x3e2/0x420
[ 55.664769][ T4992] ? do_raw_spin_unlock+0x13b/0x8b0
[ 55.669962][ T4992] extAlloc+0xe53/0x1010
[ 55.674204][ T4992] ? jfs_ioc_trim+0x660/0x660
[ 55.678889][ T4992] jfs_get_block+0x41b/0xe60
[ 55.683485][ T4992] ? jfs_dirty_inode+0x240/0x240
[ 55.688430][ T4992] ? _raw_spin_unlock+0x28/0x40
[ 55.693289][ T4992] ? folio_create_buffers+0x132/0x250
[ 55.698658][ T4992] __block_write_begin_int+0x548/0x1a50
[ 55.704208][ T4992] ? jfs_dirty_inode+0x240/0x240
[ 55.709135][ T4992] ? PageUptodate+0x290/0x290
[ 55.713802][ T4992] ? folio_test_hugetlb+0xa0/0x1d0
[ 55.718907][ T4992] ? pagecache_get_page+0xeb/0x220
[ 55.724009][ T4992] ? jfs_dirty_inode+0x240/0x240
[ 55.728934][ T4992] block_write_begin+0x9c/0x1f0
[ 55.733775][ T4992] ? jfs_write_begin+0x1a/0x70
[ 55.738531][ T4992] jfs_write_begin+0x31/0x70
[ 55.743118][ T4992] generic_perform_write+0x300/0x5e0
[ 55.748402][ T4992] ? generic_file_direct_write+0x460/0x460
[ 55.754197][ T4992] ? generic_file_direct_write+0x40f/0x460
[ 55.759998][ T4992] __generic_file_write_iter+0x29b/0x400
[ 55.765626][ T4992] generic_file_write_iter+0xaf/0x310
[ 55.770992][ T4992] do_iter_write+0x7b1/0xcb0
[ 55.775585][ T4992] ? vfs_iter_write+0xa0/0xa0
[ 55.780280][ T4992] ? vfs_iter_write+0x6d/0xa0
[ 55.784966][ T4992] iter_file_splice_write+0x843/0xfe0
[ 55.790345][ T4992] ? splice_from_pipe+0x230/0x230
[ 55.795364][ T4992] ? lockdep_hardirqs_on+0x98/0x140
[ 55.800556][ T4992] ? direct_splice_read+0xa10/0xa10
[ 55.805758][ T4992] ? splice_from_pipe+0x230/0x230
[ 55.810776][ T4992] direct_splice_actor+0xe7/0x1c0
[ 55.815811][ T4992] splice_direct_to_actor+0x4c4/0xbd0
[ 55.821206][ T4992] ? do_splice_direct+0x3d0/0x3d0
[ 55.826226][ T4992] ? pipe_to_sendpage+0x350/0x350
[ 55.831244][ T4992] ? fsnotify_perm+0x67/0x590
[ 55.835915][ T4992] ? bpf_lsm_file_permission+0x9/0x10
[ 55.841283][ T4992] do_splice_direct+0x283/0x3d0
[ 55.846144][ T4992] ? splice_direct_to_actor+0xbd0/0xbd0
[ 55.851686][ T4992] ? rcu_read_lock_any_held+0xb7/0x160
[ 55.857151][ T4992] do_sendfile+0x620/0xff0
[ 55.861563][ T4992] ? ptrace_stop+0x75a/0x970
[ 55.866152][ T4992] ? do_pwritev+0x360/0x360
[ 55.870654][ T4992] ? _raw_spin_unlock_irq+0x2e/0x50
[ 55.875849][ T4992] ? ptrace_notify+0x278/0x380
[ 55.880619][ T4992] __se_sys_sendfile64+0x17c/0x1e0
[ 55.885731][ T4992] ? __x64_sys_sendfile64+0xb0/0xb0
[ 55.890924][ T4992] ? syscall_enter_from_user_mode+0x32/0x230
[ 55.896906][ T4992] ? syscall_enter_from_user_mode+0x8c/0x230
[ 55.902881][ T4992] do_syscall_64+0x41/0xc0
[ 55.907294][ T4992] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 55.913180][ T4992] RIP: 0033:0x7f619e025339
[ 55.917585][ T4992] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 55.937182][ T4992] RSP: 002b:00007ffc715b6578 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 55.945597][ T4992] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f619e025339
[ 55.953560][ T4992] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000007
[ 55.961520][ T4992] RBP: 0000000000000000 R08: 00007f619e098ec0 R09: 00007f619e098ec0
[ 55.969478][ T4992] R10: 0001000000201004 R11: 0000000000000246 R12: 00007ffc715b65a0
[ 55.977492][ T4992] R13: 0000000000000000 R14: 431bde82d7b634db R15: 0000000000000000
[ 55.985466][ T4992]
[ 55.988622][ T4992] Kernel Offset: disabled
[ 55.993001][ T4992] Rebooting in 86400 seconds..