./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor129086612

<...>
Warning: Permanently added '10.128.0.162' (ED25519) to the list of known hosts.
execve("./syz-executor129086612", ["./syz-executor129086612"], 0x7ffcd31ef390 /* 10 vars */) = 0
brk(NULL)                               = 0x5555575c4000
brk(0x5555575c4d00)                     = 0x5555575c4d00
arch_prctl(ARCH_SET_FS, 0x5555575c4380) = 0
set_tid_address(0x5555575c4650)         = 5079
set_robust_list(0x5555575c4660, 24)     = 0
rseq(0x5555575c4ca0, 0x20, 0, 0x53053053) = 0
prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0
readlink("/proc/self/exe", "/root/syz-executor129086612", 4096) = 27
getrandom("\x97\x37\x73\x30\xd9\x96\xf5\xb7", 8, GRND_NONBLOCK) = 8
brk(NULL)                               = 0x5555575c4d00
brk(0x5555575e5d00)                     = 0x5555575e5d00
brk(0x5555575e6000)                     = 0x5555575e6000
mprotect(0x7f5f2a7b0000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
memfd_create("syzkaller", 0)            = 3
mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5f22200000
write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216
munmap(0x7f5f22200000, 138412032)       = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 4
ioctl(4, LOOP_SET_FD, 3)                = 0
close(3)                                = 0
close(4)                                = 0
mkdir("./bus", 0777)                    = 0
mount("/dev/loop0", "./bus", "jfs", 0, "") = 0
openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3
[   78.413783][ T5079] loop0: detected capacity change from 0 to 32768
chdir("./bus")                          = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = -1 EBUSY (Device or resource busy)
openat(AT_FDCWD, "hugetlb.1GB.usage_in_bytes", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4
[   78.518022][ T5079] ==================================================================
[   78.526122][ T5079] BUG: KASAN: slab-out-of-bounds in dtSearch+0x1664/0x2520
[   78.533345][ T5079] Read of size 1 at addr ffff888077222498 by task syz-executor129/5079
[   78.541581][ T5079] 
[   78.543905][ T5079] CPU: 1 PID: 5079 Comm: syz-executor129 Not tainted 6.9.0-rc5-syzkaller-00042-ge88c4cfcb7b8 #0
[   78.554327][ T5079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024
[   78.564605][ T5079] Call Trace:
[   78.567893][ T5079]  <TASK>
[   78.570828][ T5079]  dump_stack_lvl+0x241/0x360
[   78.575555][ T5079]  ? __pfx_dump_stack_lvl+0x10/0x10
[   78.580785][ T5079]  ? __pfx__printk+0x10/0x10
[   78.585381][ T5079]  ? _printk+0xd5/0x120
[   78.589541][ T5079]  ? __virt_addr_valid+0x183/0x520
[   78.594664][ T5079]  ? __virt_addr_valid+0x183/0x520
[   78.599792][ T5079]  print_report+0x169/0x550
[   78.604303][ T5079]  ? __virt_addr_valid+0x183/0x520
[   78.609438][ T5079]  ? __virt_addr_valid+0x183/0x520
[   78.614578][ T5079]  ? __virt_addr_valid+0x44e/0x520
[   78.619736][ T5079]  ? __phys_addr+0xba/0x170
[   78.624252][ T5079]  ? dtSearch+0x1664/0x2520
[   78.628759][ T5079]  kasan_report+0x143/0x180
[   78.633291][ T5079]  ? dtSearch+0x1664/0x2520
[   78.637796][ T5079]  dtSearch+0x1664/0x2520
[   78.642125][ T5079]  ? get_UCSname+0xe3/0x610
[   78.646638][ T5079]  jfs_lookup+0x17f/0x410
[   78.650991][ T5079]  ? __pfx_jfs_lookup+0x10/0x10
[   78.655853][ T5079]  ? make_vfsuid+0x46/0x90
[   78.660278][ T5079]  ? bpf_lsm_inode_create+0x9/0x10
[   78.665392][ T5079]  ? security_inode_create+0xc2/0x110
[   78.670765][ T5079]  ? __pfx_jfs_lookup+0x10/0x10
[   78.675621][ T5079]  path_openat+0x1033/0x3240
[   78.680230][ T5079]  ? __pfx_path_openat+0x10/0x10
[   78.685176][ T5079]  do_filp_open+0x235/0x490
[   78.689680][ T5079]  ? __pfx_do_filp_open+0x10/0x10
[   78.694804][ T5079]  ? _raw_spin_unlock+0x28/0x50
[   78.699660][ T5079]  ? alloc_fd+0x59d/0x640
[   78.703998][ T5079]  do_sys_openat2+0x13e/0x1d0
[   78.708680][ T5079]  ? __pfx_do_sys_openat2+0x10/0x10
[   78.713897][ T5079]  ? _raw_spin_unlock_irq+0x2e/0x50
[   78.719098][ T5079]  ? ptrace_notify+0x279/0x380
[   78.723885][ T5079]  __x64_sys_creat+0x123/0x170
[   78.728649][ T5079]  ? __pfx___x64_sys_creat+0x10/0x10
[   78.733934][ T5079]  ? do_syscall_64+0x102/0x240
[   78.739657][ T5079]  do_syscall_64+0xf5/0x240
[   78.744194][ T5079]  ? clear_bhb_loop+0x35/0x90
[   78.748883][ T5079]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   78.754805][ T5079] RIP: 0033:0x7f5f2a737639
[   78.759221][ T5079] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[   78.778827][ T5079] RSP: 002b:00007fff3ca43838 EFLAGS: 00000246 ORIG_RAX: 0000000000000055
[   78.787264][ T5079] RAX: ffffffffffffffda RBX: 00007fff3ca43a18 RCX: 00007f5f2a737639
[   78.795265][ T5079] RDX: 00007f5f2a737639 RSI: 0000000000000000 RDI: 0000000020000000
[   78.803320][ T5079] RBP: 00007f5f2a7b0610 R08: 0000000000000000 R09: 0000000000000000
[   78.811301][ T5079] R10: 0000000000006152 R11: 0000000000000246 R12: 0000000000000001
[   78.819270][ T5079] R13: 00007fff3ca43a08 R14: 0000000000000001 R15: 0000000000000001
[   78.827243][ T5079]  </TASK>
[   78.830256][ T5079] 
[   78.832577][ T5079] The buggy address belongs to the object at ffff888077221bc0
[   78.832577][ T5079]  which belongs to the cache jfs_ip of size 2240
[   78.846296][ T5079] The buggy address is located 24 bytes to the right of
[   78.846296][ T5079]  allocated 2240-byte region [ffff888077221bc0, ffff888077222480)
[   78.861059][ T5079] 
[   78.863377][ T5079] The buggy address belongs to the physical page:
[   78.869781][ T5079] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x77220
[   78.878534][ T5079] head: order:3 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[   78.886069][ T5079] flags: 0xfff80000000840(slab|head|node=0|zone=1|lastcpupid=0xfff)
[   78.894039][ T5079] page_type: 0xffffffff()
[   78.898364][ T5079] raw: 00fff80000000840 ffff88801a7f1140 dead000000000122 0000000000000000
[   78.906942][ T5079] raw: 0000000000000000 00000000800d000d 00000001ffffffff 0000000000000000
[   78.915532][ T5079] head: 00fff80000000840 ffff88801a7f1140 dead000000000122 0000000000000000
[   78.924198][ T5079] head: 0000000000000000 00000000800d000d 00000001ffffffff 0000000000000000
[   78.932865][ T5079] head: 00fff80000000003 ffffea0001dc8801 dead000000000122 00000000ffffffff
[   78.941533][ T5079] head: 0000000800000000 0000000000000000 00000000ffffffff 0000000000000000
[   78.950194][ T5079] page dumped because: kasan: bad access detected
[   78.956596][ T5079] page_owner tracks the page as allocated
[   78.962301][ T5079] page last allocated via order 3, migratetype Reclaimable, gfp_mask 0xd2050(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_RECLAIMABLE), pid 5079, tgid 1143321743 (syz-executor129), ts 5079, free_ts 26577297598
[   78.984786][ T5079]  post_alloc_hook+0x1ea/0x210
[   78.989559][ T5079]  get_page_from_freelist+0x3410/0x35b0
[   78.995127][ T5079]  __alloc_pages+0x256/0x6c0
[   78.999749][ T5079]  alloc_slab_page+0x5f/0x160
[   79.004439][ T5079]  new_slab+0x84/0x2f0
[   79.008531][ T5079]  ___slab_alloc+0xc73/0x1260
[   79.013207][ T5079]  kmem_cache_alloc_lru+0x253/0x350
[   79.018418][ T5079]  jfs_alloc_inode+0x28/0x70
[   79.023003][ T5079]  new_inode_pseudo+0x69/0x1e0
[   79.027789][ T5079]  new_inode+0x22/0x1d0
[   79.031972][ T5079]  diReadSpecial+0x52/0x680
[   79.036547][ T5079]  jfs_mount+0x28b/0x830
[   79.040814][ T5079]  jfs_fill_super+0x59c/0xc50
[   79.045497][ T5079]  mount_bdev+0x20a/0x2d0
[   79.049828][ T5079]  legacy_get_tree+0xee/0x190
[   79.054505][ T5079]  vfs_get_tree+0x90/0x2a0
[   79.058938][ T5079] page last free pid 1 tgid 1 stack trace:
[   79.064736][ T5079]  free_unref_page_prepare+0x97b/0xaa0
[   79.070205][ T5079]  free_unref_page+0x37/0x3f0
[   79.074882][ T5079]  free_contig_range+0x9e/0x160
[   79.079729][ T5079]  destroy_args+0x8a/0x890
[   79.084169][ T5079]  debug_vm_pgtable+0x4be/0x550
[   79.089022][ T5079]  do_one_initcall+0x248/0x880
[   79.093805][ T5079]  do_initcall_level+0x157/0x210
[   79.098740][ T5079]  do_initcalls+0x3f/0x80
[   79.103066][ T5079]  kernel_init_freeable+0x435/0x5d0
[   79.108264][ T5079]  kernel_init+0x1d/0x2b0
[   79.112587][ T5079]  ret_from_fork+0x4b/0x80
[   79.117028][ T5079]  ret_from_fork_asm+0x1a/0x30
[   79.121798][ T5079] 
[   79.124114][ T5079] Memory state around the buggy address:
[   79.129823][ T5079]  ffff888077222380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   79.137878][ T5079]  ffff888077222400: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   79.145931][ T5079] >ffff888077222480: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   79.153982][ T5079]                             ^
[   79.158820][ T5079]  ffff888077222500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   79.166875][ T5079]  ffff888077222580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   79.174938][ T5079] ==================================================================
[   79.185655][ T5079] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[   79.193062][ T5079] CPU: 1 PID: 5079 Comm: syz-executor129 Not tainted 6.9.0-rc5-syzkaller-00042-ge88c4cfcb7b8 #0
[   79.203488][ T5079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024
[   79.213550][ T5079] Call Trace:
[   79.216836][ T5079]  <TASK>
[   79.219776][ T5079]  dump_stack_lvl+0x241/0x360
[   79.224477][ T5079]  ? __pfx_dump_stack_lvl+0x10/0x10
[   79.229767][ T5079]  ? __pfx__printk+0x10/0x10
[   79.234390][ T5079]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[   79.240402][ T5079]  ? vscnprintf+0x5d/0x90
[   79.244808][ T5079]  panic+0x349/0x860
[   79.248736][ T5079]  ? check_panic_on_warn+0x21/0xb0
[   79.253879][ T5079]  ? __pfx_panic+0x10/0x10
[   79.258349][ T5079]  ? _raw_spin_unlock_irqrestore+0x130/0x140
[   79.264868][ T5079]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   79.271213][ T5079]  check_panic_on_warn+0x86/0xb0
[   79.276165][ T5079]  ? dtSearch+0x1664/0x2520
[   79.280681][ T5079]  end_report+0x77/0x160
[   79.284937][ T5079]  kasan_report+0x154/0x180
[   79.289456][ T5079]  ? dtSearch+0x1664/0x2520
[   79.293973][ T5079]  dtSearch+0x1664/0x2520
[   79.298316][ T5079]  ? get_UCSname+0xe3/0x610
[   79.302846][ T5079]  jfs_lookup+0x17f/0x410
[   79.307193][ T5079]  ? __pfx_jfs_lookup+0x10/0x10
[   79.312065][ T5079]  ? make_vfsuid+0x46/0x90
[   79.316502][ T5079]  ? bpf_lsm_inode_create+0x9/0x10
[   79.321742][ T5079]  ? security_inode_create+0xc2/0x110
[   79.327123][ T5079]  ? __pfx_jfs_lookup+0x10/0x10
[   79.331983][ T5079]  path_openat+0x1033/0x3240
[   79.336604][ T5079]  ? __pfx_path_openat+0x10/0x10
[   79.341596][ T5079]  do_filp_open+0x235/0x490
[   79.346282][ T5079]  ? __pfx_do_filp_open+0x10/0x10
[   79.351328][ T5079]  ? _raw_spin_unlock+0x28/0x50
[   79.356196][ T5079]  ? alloc_fd+0x59d/0x640
[   79.360542][ T5079]  do_sys_openat2+0x13e/0x1d0
[   79.365238][ T5079]  ? __pfx_do_sys_openat2+0x10/0x10
[   79.370458][ T5079]  ? _raw_spin_unlock_irq+0x2e/0x50
[   79.375669][ T5079]  ? ptrace_notify+0x279/0x380
[   79.380461][ T5079]  __x64_sys_creat+0x123/0x170
[   79.386276][ T5079]  ? __pfx___x64_sys_creat+0x10/0x10
[   79.391569][ T5079]  ? do_syscall_64+0x102/0x240
[   79.396358][ T5079]  do_syscall_64+0xf5/0x240
[   79.400884][ T5079]  ? clear_bhb_loop+0x35/0x90
[   79.405660][ T5079]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   79.411562][ T5079] RIP: 0033:0x7f5f2a737639
[   79.415987][ T5079] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[   79.435600][ T5079] RSP: 002b:00007fff3ca43838 EFLAGS: 00000246 ORIG_RAX: 0000000000000055
[   79.444113][ T5079] RAX: ffffffffffffffda RBX: 00007fff3ca43a18 RCX: 00007f5f2a737639
[   79.452098][ T5079] RDX: 00007f5f2a737639 RSI: 0000000000000000 RDI: 0000000020000000
[   79.460170][ T5079] RBP: 00007f5f2a7b0610 R08: 0000000000000000 R09: 0000000000000000
[   79.468148][ T5079] R10: 0000000000006152 R11: 0000000000000246 R12: 0000000000000001
[   79.476149][ T5079] R13: 00007fff3ca43a08 R14: 0000000000000001 R15: 0000000000000001
[   79.484150][ T5079]  </TASK>
[   79.487302][ T5079] Kernel Offset: disabled
[   79.491676][ T5079] Rebooting in 86400 seconds..