./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor887343444
<...>
Warning: Permanently added '10.128.0.223' (ED25519) to the list of known hosts.
execve("./syz-executor887343444", ["./syz-executor887343444"], 0x7fffb020e880 /* 10 vars */) = 0
brk(NULL) = 0x55556bb5e000
brk(0x55556bb5ed00) = 0x55556bb5ed00
arch_prctl(ARCH_SET_FS, 0x55556bb5e380) = 0
set_tid_address(0x55556bb5e650) = 5828
set_robust_list(0x55556bb5e660, 24) = 0
rseq(0x55556bb5eca0, 0x20, 0, 0x53053053) = 0
prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0
readlink("/proc/self/exe", "/root/syz-executor887343444", 4096) = 27
getrandom("\x51\x31\xae\x75\x1e\xfa\x81\x9b", 8, GRND_NONBLOCK) = 8
brk(NULL) = 0x55556bb5ed00
brk(0x55556bb7fd00) = 0x55556bb7fd00
brk(0x55556bb80000) = 0x55556bb80000
mprotect(0x7f994c226000, 16384, PROT_READ) = 0
mmap(0x1ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffffffff000
mmap(0x200000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200000000000
mmap(0x200001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200001000000
executing program
write(1, "executing program\n", 18) = 18
memfd_create("syzkaller", 0) = 3
mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9943c00000
write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216
munmap(0x7f9943c00000, 138412032) = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
ioctl(4, LOOP_SET_FD, 3) = 0
close(3) = 0
close(4) = 0
mkdir("./file7", 0777) = 0
mount("/dev/loop0", "./file7", "jfs", MS_RDONLY|MS_NOSUID|MS_NOATIME|MS_NODIRATIME, "") = 0
[ 90.099892][ T5828] loop0: detected capacity change from 0 to 32768
openat(AT_FDCWD, "./file7", O_RDONLY|O_DIRECTORY) = 3
chdir("./file7") = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy)
mkdir(".", 0777) = -1 EEXIST (File exists)
mount(NULL, ".", 0x200000000f40, MS_NOEXEC|MS_SYNCHRONOUS|MS_REMOUNT|MS_NOATIME|MS_MOVE|MS_SILENT|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "") = -1 EINVAL (Invalid argument)
mkdir(".", 0777) = -1 EEXIST (File exists)
mount(NULL, ".", 0x200000000f40, MS_NOEXEC|MS_SYNCHRONOUS|MS_REMOUNT|MS_NOATIME|MS_MOVE|MS_SILENT|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "") = 0
openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4
chdir(".") = 0
[ 90.167776][ T5828] syz-executor887: attempt to access beyond end of device
[ 90.167776][ T5828] loop14: rw=0, sector=8, nr_sectors = 8 limit=0
[ 90.181422][ T5828] lbmIODone: I/O error in JFS log
[ 90.186634][ T5828] *** Log Format Error ! ***
[ 90.191869][ T5828] lmLogInit: exit(-22)
[ 90.196026][ T5828] lmLogOpen: exit(-22)
[ 90.207282][ T5828] ERROR: (device loop0): txBegin: read-only filesystem
[ 90.207282][ T5828]
[ 90.217189][ T5828] ERROR: (device loop0): remounting filesystem as read-only
[ 90.225143][ T5828] jfs_dirty_inode called on read-only volume
[ 90.231322][ T5828] Is remount racy?
[ 90.235094][ T5828] find_entry called with index = 0
[ 90.240282][ T5828] find_entry called with index = 0
[ 90.245402][ T5828] find_entry called with index = 0
[ 90.250641][ T5828] find_entry called with index = 0
[ 90.255771][ T5828] find_entry called with index = 0
[ 90.260984][ T5828] jfs_dirty_inode called on read-only volume
[ 90.267003][ T5828] Is remount racy?
[ 90.270813][ T5828] jfs_dirty_inode called on read-only volume
[ 90.276903][ T5828] Is remount racy?
[ 90.280741][ T5828] INFO: trying to register non-static key.
[ 90.286561][ T5828] The code is fine but needs lockdep annotation, or maybe
[ 90.293662][ T5828] you didn't initialize this object before use?
[ 90.299890][ T5828] turning off the locking correctness validator.
[ 90.306234][ T5828] CPU: 1 UID: 0 PID: 5828 Comm: syz-executor887 Not tainted 6.15.0-rc2-syzkaller-00037-g834a4a689699 #0 PREEMPT(full)
[ 90.306259][ T5828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[ 90.306274][ T5828] Call Trace:
[ 90.306282][ T5828]
[ 90.306289][ T5828] dump_stack_lvl+0x241/0x360
[ 90.306316][ T5828] ? __pfx_dump_stack_lvl+0x10/0x10
[ 90.306336][ T5828] ? __pfx__printk+0x10/0x10
[ 90.306355][ T5828] ? __is_module_percpu_address+0x396/0x3f0
[ 90.306377][ T5828] assign_lock_key+0x135/0x150
[ 90.306393][ T5828] register_lock_class+0xd6/0x330
[ 90.306409][ T5828] __lock_acquire+0x80/0xd80
[ 90.306422][ T5828] ? __pfx_vprintk_emit+0x10/0x10
[ 90.306441][ T5828] lock_acquire+0x116/0x2f0
[ 90.306453][ T5828] ? __wake_up_common_lock+0x25/0x1e0
[ 90.306479][ T5828] _raw_spin_lock_irqsave+0xd8/0x130
[ 90.306498][ T5828] ? __wake_up_common_lock+0x25/0x1e0
[ 90.306518][ T5828] ? __pfx__raw_spin_lock_irqsave+0x10/0x10
[ 90.306532][ T5828] ? do_raw_spin_lock+0x151/0x370
[ 90.306553][ T5828] ? __pfx_do_raw_spin_lock+0x10/0x10
[ 90.306573][ T5828] __wake_up_common_lock+0x25/0x1e0
[ 90.306596][ T5828] txEnd+0x8f/0x570
[ 90.306615][ T5828] jfs_create+0x373/0xbb0
[ 90.306639][ T5828] ? __pfx_jfs_create+0x10/0x10
[ 90.306653][ T5828] ? __pfx_jfs_lookup+0x10/0x10
[ 90.306676][ T5828] ? generic_permission+0x2db/0x680
[ 90.306697][ T5828] ? bpf_lsm_inode_create+0x9/0x10
[ 90.306716][ T5828] ? security_inode_create+0xbe/0x340
[ 90.306734][ T5828] ? __pfx_jfs_create+0x10/0x10
[ 90.306749][ T5828] path_openat+0x194b/0x35d0
[ 90.306780][ T5828] ? __pfx_path_openat+0x10/0x10
[ 90.306798][ T5828] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 90.306819][ T5828] do_filp_open+0x284/0x4e0
[ 90.306839][ T5828] ? __pfx_do_filp_open+0x10/0x10
[ 90.306857][ T5828] ? do_raw_spin_lock+0x151/0x370
[ 90.306889][ T5828] do_sys_openat2+0x12b/0x1d0
[ 90.306906][ T5828] ? __pfx_do_sys_openat2+0x10/0x10
[ 90.306920][ T5828] ? lockdep_hardirqs_on+0x9d/0x150
[ 90.306937][ T5828] ? _raw_spin_unlock_irq+0x2e/0x50
[ 90.306951][ T5828] ? ptrace_notify+0x282/0x390
[ 90.306975][ T5828] __x64_sys_openat+0x249/0x2a0
[ 90.306992][ T5828] ? __pfx___x64_sys_openat+0x10/0x10
[ 90.307013][ T5828] do_syscall_64+0xf3/0x230
[ 90.307031][ T5828] ? clear_bhb_loop+0x45/0xa0
[ 90.307046][ T5828] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 90.307064][ T5828] RIP: 0033:0x7f994c1adab9
[ 90.307080][ T5828] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 90.307092][ T5828] RSP: 002b:00007ffc336c1428 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 90.307107][ T5828] RAX: ffffffffffffffda RBX: 0000200000000f40 RCX: 00007f994c1adab9
[ 90.307118][ T5828] RDX: 000000000000275a RSI: 0000200000000280 RDI: 00000000ffffff9c
[ 90.307127][ T5828] RBP: 0000200000000000 R08: 0000000000000000 R09: 0000200000000000
[ 90.307137][ T5828] R10: 0000000000000000 R11: 0000000000000246 R12: 00002000000008c0
[ 90.307146][ T5828] R13: 0000200000008040 R14: 00007f994c1f605e R15: 0000000000000001
[ 90.307161][ T5828]
[ 90.307211][ T5828] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN PTI
[ 90.623053][ T5828] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007]
[ 90.631470][ T5828] CPU: 1 UID: 0 PID: 5828 Comm: syz-executor887 Not tainted 6.15.0-rc2-syzkaller-00037-g834a4a689699 #0 PREEMPT(full)
[ 90.643903][ T5828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[ 90.653973][ T5828] RIP: 0010:__wake_up_common_lock+0xcf/0x1e0
[ 90.659979][ T5828] Code: fb 0f 84 d1 00 00 00 8b 6c 24 04 eb 13 48 ba 00 00 00 00 00 fc ff df 4c 39 fb 0f 84 b8 00 00 00 49 89 de 48 89 d8 48 c1 e8 03 <80> 3c 10 00 74 12 4c 89 f7 e8 93 ff 8e 00 48 ba 00 00 00 00 00 fc
[ 90.679768][ T5828] RSP: 0018:ffffc90003e87610 EFLAGS: 00010046
[ 90.685838][ T5828] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000001
[ 90.693830][ T5828] RDX: dffffc0000000000 RSI: 0000000000000004 RDI: ffffc90003e874e0
[ 90.701803][ T5828] RBP: 0000000000000000 R08: 0000000000000003 R09: fffff520007d0e9c
[ 90.709772][ T5828] R10: dffffc0000000000 R11: fffff520007d0e9c R12: dffffc0000000000
[ 90.717742][ T5828] R13: 0000000000000000 R14: 0000000000000000 R15: ffffc900026f5070
[ 90.725797][ T5828] FS: 000055556bb5e380(0000) GS:ffff8881250c9000(0000) knlGS:0000000000000000
[ 90.734731][ T5828] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 90.741316][ T5828] CR2: 00007f3b5139d628 CR3: 00000000338be000 CR4: 00000000003526f0
[ 90.749289][ T5828] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 90.757260][ T5828] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 90.765232][ T5828] Call Trace:
[ 90.768512][ T5828]
[ 90.771448][ T5828] txEnd+0x8f/0x570
[ 90.775275][ T5828] jfs_create+0x373/0xbb0
[ 90.779624][ T5828] ? __pfx_jfs_create+0x10/0x10
[ 90.784483][ T5828] ? __pfx_jfs_lookup+0x10/0x10
[ 90.789343][ T5828] ? generic_permission+0x2db/0x680
[ 90.794549][ T5828] ? bpf_lsm_inode_create+0x9/0x10
[ 90.799671][ T5828] ? security_inode_create+0xbe/0x340
[ 90.805047][ T5828] ? __pfx_jfs_create+0x10/0x10
[ 90.809903][ T5828] path_openat+0x194b/0x35d0
[ 90.814512][ T5828] ? __pfx_path_openat+0x10/0x10
[ 90.819451][ T5828] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 90.825522][ T5828] do_filp_open+0x284/0x4e0
[ 90.830035][ T5828] ? __pfx_do_filp_open+0x10/0x10
[ 90.835062][ T5828] ? do_raw_spin_lock+0x151/0x370
[ 90.840104][ T5828] do_sys_openat2+0x12b/0x1d0
[ 90.844781][ T5828] ? __pfx_do_sys_openat2+0x10/0x10
[ 90.849975][ T5828] ? lockdep_hardirqs_on+0x9d/0x150
[ 90.855179][ T5828] ? _raw_spin_unlock_irq+0x2e/0x50
[ 90.860378][ T5828] ? ptrace_notify+0x282/0x390
[ 90.865155][ T5828] __x64_sys_openat+0x249/0x2a0
[ 90.870012][ T5828] ? __pfx___x64_sys_openat+0x10/0x10
[ 90.875393][ T5828] do_syscall_64+0xf3/0x230
[ 90.879907][ T5828] ? clear_bhb_loop+0x45/0xa0
[ 90.884588][ T5828] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 90.890485][ T5828] RIP: 0033:0x7f994c1adab9
[ 90.894900][ T5828] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 90.914504][ T5828] RSP: 002b:00007ffc336c1428 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 90.922920][ T5828] RAX: ffffffffffffffda RBX: 0000200000000f40 RCX: 00007f994c1adab9
[ 90.930892][ T5828] RDX: 000000000000275a RSI: 0000200000000280 RDI: 00000000ffffff9c
[ 90.938864][ T5828] RBP: 0000200000000000 R08: 0000000000000000 R09: 0000200000000000
[ 90.946836][ T5828] R10: 0000000000000000 R11: 0000000000000246 R12: 00002000000008c0
[ 90.954814][ T5828] R13: 0000200000008040 R14: 00007f994c1f605e R15: 0000000000000001
[ 90.962821][ T5828]
[ 90.965865][ T5828] Modules linked in:
[ 90.969776][ T5828] ---[ end trace 0000000000000000 ]---
[ 90.975235][ T5828] RIP: 0010:__wake_up_common_lock+0xcf/0x1e0
[ 90.981235][ T5828] Code: fb 0f 84 d1 00 00 00 8b 6c 24 04 eb 13 48 ba 00 00 00 00 00 fc ff df 4c 39 fb 0f 84 b8 00 00 00 49 89 de 48 89 d8 48 c1 e8 03 <80> 3c 10 00 74 12 4c 89 f7 e8 93 ff 8e 00 48 ba 00 00 00 00 00 fc
[ 91.000850][ T5828] RSP: 0018:ffffc90003e87610 EFLAGS: 00010046
[ 91.006929][ T5828] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000001
[ 91.014902][ T5828] RDX: dffffc0000000000 RSI: 0000000000000004 RDI: ffffc90003e874e0
[ 91.022873][ T5828] RBP: 0000000000000000 R08: 0000000000000003 R09: fffff520007d0e9c
[ 91.030847][ T5828] R10: dffffc0000000000 R11: fffff520007d0e9c R12: dffffc0000000000
[ 91.038823][ T5828] R13: 0000000000000000 R14: 0000000000000000 R15: ffffc900026f5070
[ 91.046797][ T5828] FS: 000055556bb5e380(0000) GS:ffff8881250c9000(0000) knlGS:0000000000000000
[ 91.055734][ T5828] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 91.062320][ T5828] CR2: 00007f3b5139d628 CR3: 00000000338be000 CR4: 00000000003526f0
[ 91.070293][ T5828] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 91.078262][ T5828] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 91.086242][ T5828] Kernel panic - not syncing: Fatal exception
[ 91.092620][ T5828] Kernel Offset: disabled
[ 91.096942][ T5828] Rebooting in 86400 seconds..