./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3280105263
<...>
Warning: Permanently added '10.128.1.163' (ED25519) to the list of known hosts.
execve("./syz-executor3280105263", ["./syz-executor3280105263"], 0x7ffe45332bc0 /* 10 vars */) = 0
brk(NULL) = 0x5555568a8000
brk(0x5555568a8d00) = 0x5555568a8d00
arch_prctl(ARCH_SET_FS, 0x5555568a8380) = 0
set_tid_address(0x5555568a8650) = 5043
set_robust_list(0x5555568a8660, 24) = 0
rseq(0x5555568a8ca0, 0x20, 0, 0x53053053) = 0
prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0
readlink("/proc/self/exe", "/root/syz-executor3280105263", 4096) = 28
getrandom("\xed\x6c\xdf\x41\xe6\xdf\xc5\x5c", 8, GRND_NONBLOCK) = 8
brk(NULL) = 0x5555568a8d00
brk(0x5555568c9d00) = 0x5555568c9d00
brk(0x5555568ca000) = 0x5555568ca000
mprotect(0x7fc191b94000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
memfd_create("syzkaller", 0) = 3
mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fc1896de000
[ 52.424198][ T5043] memfd_create() without MFD_EXEC nor MFD_NOEXEC_SEAL, pid=5043 'syz-executor328'
write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216
munmap(0x7fc1896de000, 16777216) = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
ioctl(4, LOOP_SET_FD, 3) = 0
close(3) = 0
mkdir("./bus", 0777) = 0
mount("/dev/loop0", "./bus", "jfs", MS_SYNCHRONOUS|MS_NODIRATIME|MS_RELATIME|MS_LAZYTIME, "") = 0
openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3
chdir("./bus") = 0
ioctl(4, LOOP_CLR_FD) = 0
close(4) = 0
open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 4
open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 5
ftruncate(5, 33587199) = 0
open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_SYNC|O_NOATIME|FASYNC, 000) = 6
open("./bus", O_RDONLY) = 7
lseek(6, 0, SEEK_END) = 33587199
[ 52.543750][ T5043] loop0: detected capacity change from 0 to 32768
[ 52.565822][ T26] audit: type=1804 audit(1691231844.500:2): pid=5043 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor328" name="/root/bus/bus" dev="loop0" ino=7 res=1 errno=0
[ 52.863650][ T5043] ================================================================================
[ 52.872988][ T5043] UBSAN: shift-out-of-bounds in fs/jfs/jfs_extent.c:314:16
[ 52.880217][ T5043] shift exponent -1 is negative
[ 52.885311][ T5043] CPU: 1 PID: 5043 Comm: syz-executor328 Not tainted 6.5.0-rc4-next-20230804-syzkaller #0
[ 52.895249][ T5043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2023
[ 52.905480][ T5043] Call Trace:
[ 52.908760][ T5043]
[ 52.911708][ T5043] dump_stack_lvl+0x125/0x1b0
[ 52.916392][ T5043] __ubsan_handle_shift_out_of_bounds+0x27a/0x600
[ 52.922901][ T5043] extAlloc.cold+0x8b/0xc5
[ 52.927326][ T5043] ? jfs_ioc_trim+0x5c0/0x5c0
[ 52.932003][ T5043] ? down_write_nested+0x153/0x200
[ 52.937110][ T5043] ? lock_acquire+0x464/0x510
[ 52.942139][ T5043] ? lock_sync+0x190/0x190
[ 52.946548][ T5043] jfs_get_block+0x428/0xb20
[ 52.951154][ T5043] ? jfs_read_folio+0x20/0x20
[ 52.955841][ T5043] ? folio_flags.constprop.0+0x56/0x150
[ 52.961640][ T5043] ? do_raw_spin_unlock+0x173/0x230
[ 52.966863][ T5043] ? _raw_spin_unlock+0x28/0x40
[ 52.971733][ T5043] ? jfs_read_folio+0x20/0x20
[ 52.976414][ T5043] __block_write_begin_int+0x3c0/0x1470
[ 52.981962][ T5043] ? jfs_read_folio+0x20/0x20
[ 52.986746][ T5043] ? invalidate_bh_lrus_cpu+0x170/0x170
[ 52.992288][ T5043] block_write_begin+0xb1/0x490
[ 52.997323][ T5043] ? jfs_read_folio+0x20/0x20
[ 53.002034][ T5043] jfs_write_begin+0x31/0xd0
[ 53.006636][ T5043] generic_perform_write+0x278/0x600
[ 53.012030][ T5043] ? __mnt_drop_write_file+0x45/0xf0
[ 53.017321][ T5043] ? folio_add_wait_queue+0x1c0/0x1c0
[ 53.022712][ T5043] ? new_inode+0x270/0x270
[ 53.027149][ T5043] ? generic_write_checks_count+0x2d0/0x2d0
[ 53.033215][ T5043] __generic_file_write_iter+0x1f9/0x240
[ 53.038954][ T5043] generic_file_write_iter+0xe3/0x350
[ 53.044325][ T5043] do_iter_readv_writev+0x21e/0x3c0
[ 53.049596][ T5043] ? generic_copy_file_range+0x1d0/0x1d0
[ 53.055228][ T5043] ? bpf_lsm_file_permission+0x9/0x10
[ 53.060603][ T5043] ? security_file_permission+0x94/0x100
[ 53.066233][ T5043] do_iter_write+0x17f/0x830
[ 53.070842][ T5043] vfs_iter_write+0x7a/0xb0
[ 53.075470][ T5043] iter_file_splice_write+0x698/0xbf0
[ 53.080956][ T5043] ? splice_from_pipe_next+0x5d0/0x5d0
[ 53.086445][ T5043] ? security_file_permission+0xdc/0x100
[ 53.092193][ T5043] ? splice_from_pipe_next+0x5d0/0x5d0
[ 53.097676][ T5043] direct_splice_actor+0x118/0x180
[ 53.102797][ T5043] splice_direct_to_actor+0x347/0xa30
[ 53.108181][ T5043] ? folio_flags.constprop.0+0x150/0x150
[ 53.113919][ T5043] ? vfs_splice_read+0x3b0/0x3b0
[ 53.118852][ T5043] ? bpf_lsm_file_permission+0x9/0x10
[ 53.124359][ T5043] ? security_file_permission+0x94/0x100
[ 53.130187][ T5043] do_splice_direct+0x1af/0x280
[ 53.135330][ T5043] ? splice_direct_to_actor+0xa30/0xa30
[ 53.140874][ T5043] ? propagate_umount+0x1af0/0x1af0
[ 53.146064][ T5043] ? preempt_count_sub+0x150/0x150
[ 53.151173][ T5043] do_sendfile+0xb88/0x1390
[ 53.155695][ T5043] ? vfs_iocb_iter_write+0x4c0/0x4c0
[ 53.163772][ T5043] ? lock_release+0x4bf/0x680
[ 53.168602][ T5043] ? ptrace_notify+0xf4/0x130
[ 53.173277][ T5043] ? reacquire_held_locks+0x4b0/0x4b0
[ 53.178737][ T5043] __x64_sys_sendfile64+0x1d6/0x220
[ 53.183931][ T5043] ? rcu_is_watching+0x12/0xb0
[ 53.188715][ T5043] ? __ia32_sys_sendfile+0x220/0x220
[ 53.194032][ T5043] ? _raw_spin_unlock_irq+0x2e/0x50
[ 53.199245][ T5043] ? ptrace_notify+0xf4/0x130
[ 53.204060][ T5043] do_syscall_64+0x38/0xb0
[ 53.208583][ T5043] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 53.214740][ T5043] RIP: 0033:0x7fc191b1b6f9
[ 53.219259][ T5043] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 53.238871][ T5043] RSP: 002b:00007ffe6f63aa78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 53.247286][ T5043] RAX: ffffffffffffffda RBX: 00007ffe6f63ac48 RCX: 00007fc191b1b6f9
[ 53.255266][ T5043] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000006
[ 53.263268][ T5043] RBP: 00007fc191b94610 R08: 00007ffe6f63ac48 R09: 00007ffe6f63ac48
[ 53.271528][ T5043] R10: 0001000000201005 R11: 0000000000000246 R12: 0000000000000001
[ 53.279505][ T5043] R13: 00007ffe6f63ac38 R14: 0000000000000001 R15: 0000000000000001
[ 53.288545][ T5043]
[ 53.291694][ T5043] ================================================================================
[ 53.301045][ T5043] Kernel panic - not syncing: UBSAN: panic_on_warn set ...
[ 53.308255][ T5043] CPU: 0 PID: 5043 Comm: syz-executor328 Not tainted 6.5.0-rc4-next-20230804-syzkaller #0
[ 53.318248][ T5043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2023
[ 53.328314][ T5043] Call Trace:
[ 53.331612][ T5043]
[ 53.334545][ T5043] dump_stack_lvl+0xd9/0x1b0
[ 53.339177][ T5043] panic+0x6a4/0x750
[ 53.343095][ T5043] ? panic_smp_self_stop+0xa0/0xa0
[ 53.348317][ T5043] ? syslog_print_all+0x3f0/0x3f0
[ 53.353534][ T5043] check_panic_on_warn+0xab/0xb0
[ 53.358485][ T5043] __ubsan_handle_shift_out_of_bounds+0x2a2/0x600
[ 53.364916][ T5043] extAlloc.cold+0x8b/0xc5
[ 53.369343][ T5043] ? jfs_ioc_trim+0x5c0/0x5c0
[ 53.374035][ T5043] ? down_write_nested+0x153/0x200
[ 53.379190][ T5043] ? lock_acquire+0x464/0x510
[ 53.383895][ T5043] ? lock_sync+0x190/0x190
[ 53.388368][ T5043] jfs_get_block+0x428/0xb20
[ 53.392987][ T5043] ? jfs_read_folio+0x20/0x20
[ 53.397687][ T5043] ? folio_flags.constprop.0+0x56/0x150
[ 53.403247][ T5043] ? do_raw_spin_unlock+0x173/0x230
[ 53.408475][ T5043] ? _raw_spin_unlock+0x28/0x40
[ 53.413433][ T5043] ? jfs_read_folio+0x20/0x20
[ 53.418843][ T5043] __block_write_begin_int+0x3c0/0x1470
[ 53.424432][ T5043] ? jfs_read_folio+0x20/0x20
[ 53.429140][ T5043] ? invalidate_bh_lrus_cpu+0x170/0x170
[ 53.434800][ T5043] block_write_begin+0xb1/0x490
[ 53.439671][ T5043] ? jfs_read_folio+0x20/0x20
[ 53.444380][ T5043] jfs_write_begin+0x31/0xd0
[ 53.449003][ T5043] generic_perform_write+0x278/0x600
[ 53.454313][ T5043] ? __mnt_drop_write_file+0x45/0xf0
[ 53.459625][ T5043] ? folio_add_wait_queue+0x1c0/0x1c0
[ 53.465022][ T5043] ? new_inode+0x270/0x270
[ 53.469468][ T5043] ? generic_write_checks_count+0x2d0/0x2d0
[ 53.475391][ T5043] __generic_file_write_iter+0x1f9/0x240
[ 53.481324][ T5043] generic_file_write_iter+0xe3/0x350
[ 53.486716][ T5043] do_iter_readv_writev+0x21e/0x3c0
[ 53.491927][ T5043] ? generic_copy_file_range+0x1d0/0x1d0
[ 53.497589][ T5043] ? bpf_lsm_file_permission+0x9/0x10
[ 53.502985][ T5043] ? security_file_permission+0x94/0x100
[ 53.508641][ T5043] do_iter_write+0x17f/0x830
[ 53.513350][ T5043] vfs_iter_write+0x7a/0xb0
[ 53.517873][ T5043] iter_file_splice_write+0x698/0xbf0
[ 53.523270][ T5043] ? splice_from_pipe_next+0x5d0/0x5d0
[ 53.528753][ T5043] ? security_file_permission+0xdc/0x100
[ 53.534427][ T5043] ? splice_from_pipe_next+0x5d0/0x5d0
[ 53.539903][ T5043] direct_splice_actor+0x118/0x180
[ 53.545073][ T5043] splice_direct_to_actor+0x347/0xa30
[ 53.550456][ T5043] ? folio_flags.constprop.0+0x150/0x150
[ 53.556130][ T5043] ? vfs_splice_read+0x3b0/0x3b0
[ 53.561085][ T5043] ? bpf_lsm_file_permission+0x9/0x10
[ 53.566479][ T5043] ? security_file_permission+0x94/0x100
[ 53.572138][ T5043] do_splice_direct+0x1af/0x280
[ 53.577006][ T5043] ? splice_direct_to_actor+0xa30/0xa30
[ 53.582562][ T5043] ? propagate_umount+0x1af0/0x1af0
[ 53.587767][ T5043] ? preempt_count_sub+0x150/0x150
[ 53.592912][ T5043] do_sendfile+0xb88/0x1390
[ 53.597435][ T5043] ? vfs_iocb_iter_write+0x4c0/0x4c0
[ 53.602732][ T5043] ? lock_release+0x4bf/0x680
[ 53.607521][ T5043] ? ptrace_notify+0xf4/0x130
[ 53.612210][ T5043] ? reacquire_held_locks+0x4b0/0x4b0
[ 53.617611][ T5043] __x64_sys_sendfile64+0x1d6/0x220
[ 53.622910][ T5043] ? rcu_is_watching+0x12/0xb0
[ 53.627723][ T5043] ? __ia32_sys_sendfile+0x220/0x220
[ 53.633104][ T5043] ? _raw_spin_unlock_irq+0x2e/0x50
[ 53.638316][ T5043] ? ptrace_notify+0xf4/0x130
[ 53.643002][ T5043] do_syscall_64+0x38/0xb0
[ 53.647434][ T5043] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 53.653344][ T5043] RIP: 0033:0x7fc191b1b6f9
[ 53.657762][ T5043] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 53.677546][ T5043] RSP: 002b:00007ffe6f63aa78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 53.685965][ T5043] RAX: ffffffffffffffda RBX: 00007ffe6f63ac48 RCX: 00007fc191b1b6f9
[ 53.693939][ T5043] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000006
[ 53.701914][ T5043] RBP: 00007fc191b94610 R08: 00007ffe6f63ac48 R09: 00007ffe6f63ac48
[ 53.709891][ T5043] R10: 0001000000201005 R11: 0000000000000246 R12: 0000000000000001
[ 53.717886][ T5043] R13: 00007ffe6f63ac38 R14: 0000000000000001 R15: 0000000000000001
[ 53.725898][ T5043]
[ 53.729201][ T5043] Kernel Offset: disabled
[ 53.733527][ T5043] Rebooting in 86400 seconds..