./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1735292682
<...>
Warning: Permanently added '10.128.0.130' (ED25519) to the list of known hosts.
execve("./syz-executor1735292682", ["./syz-executor1735292682"], 0x7ffed3052580 /* 10 vars */) = 0
brk(NULL) = 0x555556081000
brk(0x555556081d00) = 0x555556081d00
arch_prctl(ARCH_SET_FS, 0x555556081380) = 0
set_tid_address(0x555556081650) = 5063
set_robust_list(0x555556081660, 24) = 0
rseq(0x555556081ca0, 0x20, 0, 0x53053053) = 0
prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0
readlink("/proc/self/exe", "/root/syz-executor1735292682", 4096) = 28
getrandom("\x3d\x29\x24\x02\x76\x8d\x11\x52", 8, GRND_NONBLOCK) = 8
brk(NULL) = 0x555556081d00
brk(0x5555560a2d00) = 0x5555560a2d00
brk(0x5555560a3000) = 0x5555560a3000
mprotect(0x7f4cc5229000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
memfd_create("syzkaller", 0) = 3
mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f4cbcd73000
write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216
munmap(0x7f4cbcd73000, 138412032) = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
ioctl(4, LOOP_SET_FD, 3) = 0
close(3) = 0
mkdir("./file0", 0777) = 0
mount("/dev/loop0", "./file0", "jfs", MS_POSIXACL, "quota,iocharset=cp1250,nodiscard,gid=0x000000000000ee00,noquota,errors=continue,errors=remount-ro,") = 0
openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
chdir("./file0") = 0
ioctl(4, LOOP_CLR_FD) = 0
close(4) = 0
[ 57.571825][ T5063] loop0: detected capacity change from 0 to 32768
[ 57.602070][ T5063] ================================================================================
[ 57.611786][ T5063] UBSAN: shift-out-of-bounds in fs/jfs/jfs_dmap.c:2639:11
[ 57.619004][ T5063] shift exponent 121 is too large for 32-bit type 'int'
[ 57.626581][ T5063] CPU: 1 PID: 5063 Comm: syz-executor173 Not tainted 6.7.0-rc4-syzkaller-00009-gbee0e7762ad2 #0
[ 57.637159][ T5063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023
[ 57.647246][ T5063] Call Trace:
[ 57.650544][ T5063]
[ 57.653491][ T5063] dump_stack_lvl+0x125/0x1b0
[ 57.658193][ T5063] __ubsan_handle_shift_out_of_bounds+0x2a6/0x480
[ 57.664613][ T5063] dbSplit.cold+0x19/0x1e
[ 57.668947][ T5063] dbAllocBits+0x146/0x630
[ 57.673364][ T5063] dbAllocDmap+0x5c/0x100
[ 57.677683][ T5063] dbAllocDmapLev+0x17a/0x2f0
[ 57.682347][ T5063] ? dbAllocNext+0x410/0x410
[ 57.686932][ T5063] ? folio_unlock+0x81/0xd0
[ 57.693219][ T5063] ? __get_metapage+0x522/0x1170
[ 57.698178][ T5063] dbAllocCtl+0x12c/0x7b0
[ 57.702489][ T5063] ? up_write+0x510/0x510
[ 57.706832][ T5063] dbAllocAG+0x8c5/0xd20
[ 57.711058][ T5063] ? lock_sync+0x190/0x190
[ 57.715471][ T5063] ? dbAllocCtl+0x7b0/0x7b0
[ 57.720039][ T5063] ? preempt_count_sub+0x160/0x160
[ 57.725141][ T5063] dbAlloc+0x415/0xaa0
[ 57.729191][ T5063] ? kasan_set_track+0x25/0x30
[ 57.734037][ T5063] dtSplitUp+0x3f3/0x5850
[ 57.738348][ T5063] ? __x64_sys_finit_module+0x120/0x190
[ 57.743892][ T5063] ? save_trace+0x4e/0xb30
[ 57.748296][ T5063] ? _find_first_zero_bit+0x94/0xb0
[ 57.753487][ T5063] ? add_lock_to_list+0x17d/0x380
[ 57.758504][ T5063] ? dtSplitRoot+0x1760/0x1760
[ 57.763255][ T5063] ? lockdep_unlock+0x11b/0x290
[ 57.768096][ T5063] ? __lock_acquire+0x1fc1/0x3b20
[ 57.773119][ T5063] ? lockdep_hardirqs_on_prepare+0x420/0x420
[ 57.779111][ T5063] ? lock_acquire+0x1ae/0x520
[ 57.783789][ T5063] ? find_held_lock+0x2d/0x110
[ 57.788551][ T5063] ? spin_bug+0x1d0/0x1d0
[ 57.792866][ T5063] dtInsert+0x872/0xb00
[ 57.797018][ T5063] ? dtSearch+0x2450/0x2450
[ 57.801523][ T5063] jfs_create+0x63c/0xb40
[ 57.805858][ T5063] ? jfs_mknod+0x9d0/0x9d0
[ 57.810287][ T5063] ? bpf_lsm_inode_permission+0x9/0x10
[ 57.815736][ T5063] ? security_inode_permission+0xd8/0x100
[ 57.821450][ T5063] ? inode_permission+0xdd/0x5e0
[ 57.826382][ T5063] ? bpf_lsm_inode_create+0x9/0x10
[ 57.831494][ T5063] ? jfs_mknod+0x9d0/0x9d0
[ 57.835914][ T5063] lookup_open.isra.0+0x1095/0x13b0
[ 57.841118][ T5063] ? try_lookup_one_len+0x1a0/0x1a0
[ 57.846342][ T5063] ? lock_sync+0x190/0x190
[ 57.850773][ T5063] ? preempt_count_sub+0x160/0x160
[ 57.855878][ T5063] ? mnt_get_write_access+0x20c/0x300
[ 57.861308][ T5063] path_openat+0x922/0x2c50
[ 57.865826][ T5063] ? path_lookupat+0x770/0x770
[ 57.870868][ T5063] ? lockdep_hardirqs_on_prepare+0x420/0x420
[ 57.876855][ T5063] do_filp_open+0x1de/0x430
[ 57.881359][ T5063] ? may_open_dev+0xf0/0xf0
[ 57.885861][ T5063] ? find_held_lock+0x2d/0x110
[ 57.890729][ T5063] ? _raw_spin_unlock+0x28/0x40
[ 57.895576][ T5063] ? alloc_fd+0x2da/0x6c0
[ 57.899901][ T5063] do_sys_openat2+0x176/0x1e0
[ 57.904580][ T5063] ? build_open_flags+0x690/0x690
[ 57.909630][ T5063] ? reacquire_held_locks+0x4c0/0x4c0
[ 57.915005][ T5063] __x64_sys_open+0x154/0x1e0
[ 57.919676][ T5063] ? do_sys_open+0x160/0x160
[ 57.924259][ T5063] ? ptrace_notify+0xf4/0x130
[ 57.928927][ T5063] ? syscall_trace_enter.constprop.0+0xaf/0x1e0
[ 57.935168][ T5063] do_syscall_64+0x40/0x110
[ 57.939672][ T5063] entry_SYSCALL_64_after_hwframe+0x63/0x6b
[ 57.945574][ T5063] RIP: 0033:0x7f4cc51b09b9
[ 57.949978][ T5063] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 57.969768][ T5063] RSP: 002b:00007ffc3c5e0fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000002
[ 57.978178][ T5063] RAX: ffffffffffffffda RBX: 00007ffc3c5e11c8 RCX: 00007f4cc51b09b9
[ 57.986160][ T5063] RDX: 0000000000000000 RSI: 0000000000000040 RDI: 0000000020000400
[ 57.994237][ T5063] RBP: 00007f4cc5229610 R08: 00000000000060cc R09: 0000000000000000
[ 58.002216][ T5063] R10: 00007ffc3c5e0eb0 R11: 0000000000000246 R12: 0000000000000001
[ 58.010174][ T5063] R13: 00007ffc3c5e11b8 R14: 0000000000000001 R15: 0000000000000001
[ 58.018151][ T5063]
[ 58.021585][ T5063] ================================================================================
[ 58.030934][ T5063] Kernel panic - not syncing: UBSAN: panic_on_warn set ...
[ 58.038130][ T5063] CPU: 1 PID: 5063 Comm: syz-executor173 Not tainted 6.7.0-rc4-syzkaller-00009-gbee0e7762ad2 #0
[ 58.048539][ T5063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023
[ 58.058616][ T5063] Call Trace:
[ 58.061898][ T5063]
[ 58.064833][ T5063] dump_stack_lvl+0xd9/0x1b0
[ 58.069440][ T5063] panic+0x6dc/0x790
[ 58.073341][ T5063] ? mark_held_locks+0x9f/0xe0
[ 58.078114][ T5063] ? panic_smp_self_stop+0xa0/0xa0
[ 58.083237][ T5063] ? kmsg_dump_get_line+0x350/0x350
[ 58.088456][ T5063] ? check_panic_on_warn+0x1f/0xb0
[ 58.093579][ T5063] check_panic_on_warn+0xab/0xb0
[ 58.098522][ T5063] __ubsan_handle_shift_out_of_bounds+0x2ce/0x480
[ 58.104994][ T5063] dbSplit.cold+0x19/0x1e
[ 58.109340][ T5063] dbAllocBits+0x146/0x630
[ 58.113765][ T5063] dbAllocDmap+0x5c/0x100
[ 58.118091][ T5063] dbAllocDmapLev+0x17a/0x2f0
[ 58.122761][ T5063] ? dbAllocNext+0x410/0x410
[ 58.127431][ T5063] ? folio_unlock+0x81/0xd0
[ 58.131949][ T5063] ? __get_metapage+0x522/0x1170
[ 58.136897][ T5063] dbAllocCtl+0x12c/0x7b0
[ 58.141228][ T5063] ? up_write+0x510/0x510
[ 58.145566][ T5063] dbAllocAG+0x8c5/0xd20
[ 58.149806][ T5063] ? lock_sync+0x190/0x190
[ 58.154236][ T5063] ? dbAllocCtl+0x7b0/0x7b0
[ 58.158730][ T5063] ? preempt_count_sub+0x160/0x160
[ 58.163845][ T5063] dbAlloc+0x415/0xaa0
[ 58.167907][ T5063] ? kasan_set_track+0x25/0x30
[ 58.172674][ T5063] dtSplitUp+0x3f3/0x5850
[ 58.176996][ T5063] ? __x64_sys_finit_module+0x120/0x190
[ 58.182552][ T5063] ? save_trace+0x4e/0xb30
[ 58.186972][ T5063] ? _find_first_zero_bit+0x94/0xb0
[ 58.192194][ T5063] ? add_lock_to_list+0x17d/0x380
[ 58.197226][ T5063] ? dtSplitRoot+0x1760/0x1760
[ 58.201981][ T5063] ? lockdep_unlock+0x11b/0x290
[ 58.206839][ T5063] ? __lock_acquire+0x1fc1/0x3b20
[ 58.211989][ T5063] ? lockdep_hardirqs_on_prepare+0x420/0x420
[ 58.217998][ T5063] ? lock_acquire+0x1ae/0x520
[ 58.222676][ T5063] ? find_held_lock+0x2d/0x110
[ 58.227446][ T5063] ? spin_bug+0x1d0/0x1d0
[ 58.231791][ T5063] dtInsert+0x872/0xb00
[ 58.235946][ T5063] ? dtSearch+0x2450/0x2450
[ 58.240458][ T5063] jfs_create+0x63c/0xb40
[ 58.244793][ T5063] ? jfs_mknod+0x9d0/0x9d0
[ 58.249225][ T5063] ? bpf_lsm_inode_permission+0x9/0x10
[ 58.254679][ T5063] ? security_inode_permission+0xd8/0x100
[ 58.260401][ T5063] ? inode_permission+0xdd/0x5e0
[ 58.265333][ T5063] ? bpf_lsm_inode_create+0x9/0x10
[ 58.270437][ T5063] ? jfs_mknod+0x9d0/0x9d0
[ 58.274855][ T5063] lookup_open.isra.0+0x1095/0x13b0
[ 58.280059][ T5063] ? try_lookup_one_len+0x1a0/0x1a0
[ 58.285261][ T5063] ? lock_sync+0x190/0x190
[ 58.289687][ T5063] ? preempt_count_sub+0x160/0x160
[ 58.294796][ T5063] ? mnt_get_write_access+0x20c/0x300
[ 58.300168][ T5063] path_openat+0x922/0x2c50
[ 58.304685][ T5063] ? path_lookupat+0x770/0x770
[ 58.309447][ T5063] ? lockdep_hardirqs_on_prepare+0x420/0x420
[ 58.315475][ T5063] do_filp_open+0x1de/0x430
[ 58.319979][ T5063] ? may_open_dev+0xf0/0xf0
[ 58.324476][ T5063] ? find_held_lock+0x2d/0x110
[ 58.329260][ T5063] ? _raw_spin_unlock+0x28/0x40
[ 58.334108][ T5063] ? alloc_fd+0x2da/0x6c0
[ 58.338433][ T5063] do_sys_openat2+0x176/0x1e0
[ 58.343113][ T5063] ? build_open_flags+0x690/0x690
[ 58.348149][ T5063] ? reacquire_held_locks+0x4c0/0x4c0
[ 58.353564][ T5063] __x64_sys_open+0x154/0x1e0
[ 58.358270][ T5063] ? do_sys_open+0x160/0x160
[ 58.362873][ T5063] ? ptrace_notify+0xf4/0x130
[ 58.367559][ T5063] ? syscall_trace_enter.constprop.0+0xaf/0x1e0
[ 58.373811][ T5063] do_syscall_64+0x40/0x110
[ 58.378324][ T5063] entry_SYSCALL_64_after_hwframe+0x63/0x6b
[ 58.384236][ T5063] RIP: 0033:0x7f4cc51b09b9
[ 58.388645][ T5063] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 58.408267][ T5063] RSP: 002b:00007ffc3c5e0fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000002
[ 58.416685][ T5063] RAX: ffffffffffffffda RBX: 00007ffc3c5e11c8 RCX: 00007f4cc51b09b9
[ 58.424653][ T5063] RDX: 0000000000000000 RSI: 0000000000000040 RDI: 0000000020000400
[ 58.432614][ T5063] RBP: 00007f4cc5229610 R08: 00000000000060cc R09: 0000000000000000
[ 58.440585][ T5063] R10: 00007ffc3c5e0eb0 R11: 0000000000000246 R12: 0000000000000001
[ 58.448558][ T5063] R13: 00007ffc3c5e11b8 R14: 0000000000000001 R15: 0000000000000001
[ 58.456538][ T5063]
[ 58.459936][ T5063] Kernel Offset: disabled
[ 58.464343][ T5063] Rebooting in 86400 seconds..