./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2935313906
<...>
Warning: Permanently added '10.128.1.49' (ED25519) to the list of known hosts.
execve("./syz-executor2935313906", ["./syz-executor2935313906"], 0x7ffdd6057530 /* 10 vars */) = 0
brk(NULL) = 0x555556b0a000
brk(0x555556b0ad00) = 0x555556b0ad00
arch_prctl(ARCH_SET_FS, 0x555556b0a380) = 0
set_tid_address(0x555556b0a650) = 5035
set_robust_list(0x555556b0a660, 24) = 0
rseq(0x555556b0aca0, 0x20, 0, 0x53053053) = 0
prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0
readlink("/proc/self/exe", "/root/syz-executor2935313906", 4096) = 28
getrandom("\xaa\x62\x18\xc8\x50\xad\x85\xd3", 8, GRND_NONBLOCK) = 8
brk(NULL) = 0x555556b0ad00
brk(0x555556b2bd00) = 0x555556b2bd00
brk(0x555556b2c000) = 0x555556b2c000
mprotect(0x7fc3c25ad000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
memfd_create("syzkaller", 0) = 3
mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fc3ba0f7000
[ 46.852029][ T5035] memfd_create() without MFD_EXEC nor MFD_NOEXEC_SEAL, pid=5035 'syz-executor293'
write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216
munmap(0x7fc3ba0f7000, 16777216) = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
ioctl(4, LOOP_SET_FD, 3) = 0
close(3) = 0
mkdir("./bus", 0777) = 0
mount("/dev/loop0", "./bus", "jfs", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME|MS_LAZYTIME, "") = 0
openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3
chdir("./bus") = 0
ioctl(4, LOOP_CLR_FD) = 0
close(4) = 0
open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4
open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 5
ftruncate(5, 33587199) = 0
open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6
open("./bus", O_RDONLY) = 7
lseek(6, 0, SEEK_END) = 33587199
[ 46.976363][ T5035] loop0: detected capacity change from 0 to 32768
[ 47.001703][ T27] audit: type=1804 audit(1691233049.149:2): pid=5035 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor293" name="/root/bus/bus" dev="loop0" ino=7 res=1 errno=0
[ 47.289942][ T5035] ================================================================================
[ 47.299362][ T5035] UBSAN: shift-out-of-bounds in fs/jfs/jfs_extent.c:314:16
[ 47.306561][ T5035] shift exponent -1 is negative
[ 47.311482][ T5035] CPU: 1 PID: 5035 Comm: syz-executor293 Not tainted 6.5.0-rc4-next-20230804-syzkaller #0
[ 47.321396][ T5035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2023
[ 47.331578][ T5035] Call Trace:
[ 47.334896][ T5035]
[ 47.337891][ T5035] dump_stack_lvl+0x125/0x1b0
[ 47.342647][ T5035] __ubsan_handle_shift_out_of_bounds+0x27a/0x600
[ 47.349098][ T5035] extAlloc.cold+0x8b/0xc5
[ 47.353556][ T5035] ? jfs_ioc_trim+0x5c0/0x5c0
[ 47.358281][ T5035] ? down_write_nested+0x153/0x200
[ 47.363406][ T5035] ? lock_acquire+0x464/0x510
[ 47.368102][ T5035] ? lock_sync+0x190/0x190
[ 47.372626][ T5035] jfs_get_block+0x428/0xb20
[ 47.377431][ T5035] ? jfs_read_folio+0x20/0x20
[ 47.382154][ T5035] ? folio_flags.constprop.0+0x56/0x150
[ 47.387728][ T5035] ? do_raw_spin_unlock+0x173/0x230
[ 47.392952][ T5035] ? _raw_spin_unlock+0x28/0x40
[ 47.398212][ T5035] ? jfs_read_folio+0x20/0x20
[ 47.403013][ T5035] __block_write_begin_int+0x3c0/0x1470
[ 47.408695][ T5035] ? jfs_read_folio+0x20/0x20
[ 47.413419][ T5035] ? invalidate_bh_lrus_cpu+0x170/0x170
[ 47.419103][ T5035] block_write_begin+0xb1/0x490
[ 47.423999][ T5035] ? jfs_read_folio+0x20/0x20
[ 47.428888][ T5035] jfs_write_begin+0x31/0xd0
[ 47.433644][ T5035] generic_perform_write+0x278/0x600
[ 47.439001][ T5035] ? folio_add_wait_queue+0x1c0/0x1c0
[ 47.444520][ T5035] ? new_inode+0x270/0x270
[ 47.448983][ T5035] ? generic_write_checks_count+0x2d0/0x2d0
[ 47.454936][ T5035] __generic_file_write_iter+0x1f9/0x240
[ 47.460857][ T5035] generic_file_write_iter+0xe3/0x350
[ 47.466595][ T5035] do_iter_readv_writev+0x21e/0x3c0
[ 47.472069][ T5035] ? generic_copy_file_range+0x1d0/0x1d0
[ 47.477727][ T5035] ? bpf_lsm_file_permission+0x9/0x10
[ 47.483124][ T5035] ? security_file_permission+0x94/0x100
[ 47.488955][ T5035] do_iter_write+0x17f/0x830
[ 47.493693][ T5035] vfs_iter_write+0x7a/0xb0
[ 47.498318][ T5035] iter_file_splice_write+0x698/0xbf0
[ 47.504088][ T5035] ? splice_from_pipe_next+0x5d0/0x5d0
[ 47.509595][ T5035] ? security_file_permission+0xdc/0x100
[ 47.515272][ T5035] ? splice_from_pipe_next+0x5d0/0x5d0
[ 47.520858][ T5035] direct_splice_actor+0x118/0x180
[ 47.525999][ T5035] splice_direct_to_actor+0x347/0xa30
[ 47.531491][ T5035] ? folio_flags.constprop.0+0x150/0x150
[ 47.537159][ T5035] ? vfs_splice_read+0x3b0/0x3b0
[ 47.542297][ T5035] ? bpf_lsm_file_permission+0x9/0x10
[ 47.547863][ T5035] ? security_file_permission+0x94/0x100
[ 47.553783][ T5035] do_splice_direct+0x1af/0x280
[ 47.558851][ T5035] ? splice_direct_to_actor+0xa30/0xa30
[ 47.565047][ T5035] ? propagate_umount+0x1af0/0x1af0
[ 47.570826][ T5035] ? preempt_count_sub+0x150/0x150
[ 47.576584][ T5035] do_sendfile+0xb88/0x1390
[ 47.581220][ T5035] ? vfs_iocb_iter_write+0x4c0/0x4c0
[ 47.586796][ T5035] ? lock_release+0x4bf/0x680
[ 47.591937][ T5035] ? ptrace_notify+0xf4/0x130
[ 47.596765][ T5035] ? reacquire_held_locks+0x4b0/0x4b0
[ 47.602375][ T5035] __x64_sys_sendfile64+0x1d6/0x220
[ 47.607601][ T5035] ? rcu_is_watching+0x12/0xb0
[ 47.612398][ T5035] ? __ia32_sys_sendfile+0x220/0x220
[ 47.617754][ T5035] ? _raw_spin_unlock_irq+0x2e/0x50
[ 47.623007][ T5035] ? ptrace_notify+0xf4/0x130
[ 47.627725][ T5035] do_syscall_64+0x38/0xb0
[ 47.632172][ T5035] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 47.638084][ T5035] RIP: 0033:0x7fc3c25346f9
[ 47.642503][ T5035] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 47.662117][ T5035] RSP: 002b:00007ffeed206628 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 47.670574][ T5035] RAX: ffffffffffffffda RBX: 00007ffeed2067f8 RCX: 00007fc3c25346f9
[ 47.678672][ T5035] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000006
[ 47.686872][ T5035] RBP: 00007fc3c25ad610 R08: 00007ffeed2067f8 R09: 00007ffeed2067f8
[ 47.694872][ T5035] R10: 0001000000201005 R11: 0000000000000246 R12: 0000000000000001
[ 47.702849][ T5035] R13: 00007ffeed2067e8 R14: 0000000000000001 R15: 0000000000000001
[ 47.710924][ T5035]
[ 47.714056][ T5035] ================================================================================
[ 47.723486][ T5035] Kernel panic - not syncing: UBSAN: panic_on_warn set ...
[ 47.730779][ T5035] CPU: 1 PID: 5035 Comm: syz-executor293 Not tainted 6.5.0-rc4-next-20230804-syzkaller #0
[ 47.740770][ T5035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2023
[ 47.750862][ T5035] Call Trace:
[ 47.754134][ T5035]
[ 47.757085][ T5035] dump_stack_lvl+0xd9/0x1b0
[ 47.761700][ T5035] panic+0x6a4/0x750
[ 47.765622][ T5035] ? panic_smp_self_stop+0xa0/0xa0
[ 47.770834][ T5035] ? syslog_print_all+0x3f0/0x3f0
[ 47.775882][ T5035] check_panic_on_warn+0xab/0xb0
[ 47.780950][ T5035] __ubsan_handle_shift_out_of_bounds+0x2a2/0x600
[ 47.787540][ T5035] extAlloc.cold+0x8b/0xc5
[ 47.791954][ T5035] ? jfs_ioc_trim+0x5c0/0x5c0
[ 47.796628][ T5035] ? down_write_nested+0x153/0x200
[ 47.801742][ T5035] ? lock_acquire+0x464/0x510
[ 47.806416][ T5035] ? lock_sync+0x190/0x190
[ 47.810919][ T5035] jfs_get_block+0x428/0xb20
[ 47.815515][ T5035] ? jfs_read_folio+0x20/0x20
[ 47.820212][ T5035] ? folio_flags.constprop.0+0x56/0x150
[ 47.826100][ T5035] ? do_raw_spin_unlock+0x173/0x230
[ 47.831315][ T5035] ? _raw_spin_unlock+0x28/0x40
[ 47.836465][ T5035] ? jfs_read_folio+0x20/0x20
[ 47.841177][ T5035] __block_write_begin_int+0x3c0/0x1470
[ 47.846846][ T5035] ? jfs_read_folio+0x20/0x20
[ 47.851558][ T5035] ? invalidate_bh_lrus_cpu+0x170/0x170
[ 47.858439][ T5035] block_write_begin+0xb1/0x490
[ 47.863309][ T5035] ? jfs_read_folio+0x20/0x20
[ 47.868010][ T5035] jfs_write_begin+0x31/0xd0
[ 47.872742][ T5035] generic_perform_write+0x278/0x600
[ 47.878480][ T5035] ? folio_add_wait_queue+0x1c0/0x1c0
[ 47.883863][ T5035] ? new_inode+0x270/0x270
[ 47.888308][ T5035] ? generic_write_checks_count+0x2d0/0x2d0
[ 47.894216][ T5035] __generic_file_write_iter+0x1f9/0x240
[ 47.899883][ T5035] generic_file_write_iter+0xe3/0x350
[ 47.905372][ T5035] do_iter_readv_writev+0x21e/0x3c0
[ 47.911380][ T5035] ? generic_copy_file_range+0x1d0/0x1d0
[ 47.917058][ T5035] ? bpf_lsm_file_permission+0x9/0x10
[ 47.922457][ T5035] ? security_file_permission+0x94/0x100
[ 47.928111][ T5035] do_iter_write+0x17f/0x830
[ 47.932809][ T5035] vfs_iter_write+0x7a/0xb0
[ 47.937321][ T5035] iter_file_splice_write+0x698/0xbf0
[ 47.942804][ T5035] ? splice_from_pipe_next+0x5d0/0x5d0
[ 47.948290][ T5035] ? security_file_permission+0xdc/0x100
[ 47.953942][ T5035] ? splice_from_pipe_next+0x5d0/0x5d0
[ 47.959503][ T5035] direct_splice_actor+0x118/0x180
[ 47.964624][ T5035] splice_direct_to_actor+0x347/0xa30
[ 47.970010][ T5035] ? folio_flags.constprop.0+0x150/0x150
[ 47.976008][ T5035] ? vfs_splice_read+0x3b0/0x3b0
[ 47.980975][ T5035] ? bpf_lsm_file_permission+0x9/0x10
[ 47.986373][ T5035] ? security_file_permission+0x94/0x100
[ 47.992041][ T5035] do_splice_direct+0x1af/0x280
[ 47.996916][ T5035] ? splice_direct_to_actor+0xa30/0xa30
[ 48.002473][ T5035] ? propagate_umount+0x1af0/0x1af0
[ 48.007711][ T5035] ? preempt_count_sub+0x150/0x150
[ 48.012853][ T5035] do_sendfile+0xb88/0x1390
[ 48.017372][ T5035] ? vfs_iocb_iter_write+0x4c0/0x4c0
[ 48.022678][ T5035] ? lock_release+0x4bf/0x680
[ 48.027455][ T5035] ? ptrace_notify+0xf4/0x130
[ 48.032575][ T5035] ? reacquire_held_locks+0x4b0/0x4b0
[ 48.038140][ T5035] __x64_sys_sendfile64+0x1d6/0x220
[ 48.043436][ T5035] ? rcu_is_watching+0x12/0xb0
[ 48.048207][ T5035] ? __ia32_sys_sendfile+0x220/0x220
[ 48.054300][ T5035] ? _raw_spin_unlock_irq+0x2e/0x50
[ 48.059513][ T5035] ? ptrace_notify+0xf4/0x130
[ 48.064299][ T5035] do_syscall_64+0x38/0xb0
[ 48.068735][ T5035] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 48.074736][ T5035] RIP: 0033:0x7fc3c25346f9
[ 48.079154][ T5035] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 48.098874][ T5035] RSP: 002b:00007ffeed206628 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 48.107473][ T5035] RAX: ffffffffffffffda RBX: 00007ffeed2067f8 RCX: 00007fc3c25346f9
[ 48.115629][ T5035] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000006
[ 48.123700][ T5035] RBP: 00007fc3c25ad610 R08: 00007ffeed2067f8 R09: 00007ffeed2067f8
[ 48.132049][ T5035] R10: 0001000000201005 R11: 0000000000000246 R12: 0000000000000001
[ 48.140110][ T5035] R13: 00007ffeed2067e8 R14: 0000000000000001 R15: 0000000000000001
[ 48.148283][ T5035]
[ 48.151556][ T5035] Kernel Offset: disabled
[ 48.155888][ T5035] Rebooting in 86400 seconds..