./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1640004712
<...>
Warning: Permanently added '10.128.0.39' (ECDSA) to the list of known hosts.
execve("./syz-executor1640004712", ["./syz-executor1640004712"], 0x7fffacd74070 /* 10 vars */) = 0
brk(NULL) = 0x555556719000
brk(0x555556719c40) = 0x555556719c40
arch_prctl(ARCH_SET_FS, 0x555556719300) = 0
uname({sysname="Linux", nodename="syzkaller", ...}) = 0
readlink("/proc/self/exe", "/root/syz-executor1640004712", 4096) = 28
brk(0x55555673ac40) = 0x55555673ac40
brk(0x55555673b000) = 0x55555673b000
mprotect(0x7f2c63616000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
memfd_create("syzkaller", 0) = 3
mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2c5b11a000
write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 64165852) = 64165852
munmap(0x7f2c5b11a000, 64165852) = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
ioctl(4, LOOP_SET_FD, 3) = 0
close(3) = 0
mkdir("./file0", 0777) = 0
[ 54.822463][ T5067] loop0: detected capacity change from 0 to 125323
[ 54.834872][ T5067] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[ 54.843596][ T5067] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[ 54.854696][ T5067] ================================================================================
[ 54.864213][ T5067] UBSAN: array-index-out-of-bounds in fs/gfs2/bmap.c:901:46
[ 54.871709][ T5067] index 11 is out of range for type 'u64 [11]'
[ 54.877917][ T5067] CPU: 0 PID: 5067 Comm: syz-executor164 Not tainted 6.1.0-syzkaller-13031-g77856d911a8c #0
[ 54.887983][ T5067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[ 54.898027][ T5067] Call Trace:
[ 54.901293][ T5067]
[ 54.904215][ T5067] dump_stack_lvl+0x1b1/0x290
[ 54.908902][ T5067] ? nf_tcp_handle_invalid+0x630/0x630
[ 54.914388][ T5067] ? vsnprintf+0x19e/0x1cb0
[ 54.918883][ T5067] ? panic+0x710/0x710
[ 54.922940][ T5067] ? gfs2_meta_buffer+0x218/0x3a0
[ 54.927956][ T5067] __ubsan_handle_out_of_bounds+0xe0/0x110
[ 54.933754][ T5067] ? __down_read_common+0x156/0x2a0
[ 54.938940][ T5067] __gfs2_iomap_get+0x4a4/0x16e0
[ 54.943882][ T5067] ? gfs2_alloc_extent+0x600/0x600
[ 54.948990][ T5067] gfs2_block_map+0x28f/0x7f0
[ 54.953685][ T5067] ? bit_wait+0xc0/0xc0
[ 54.957835][ T5067] ? gfs2_iomap_end+0x700/0x700
[ 54.962675][ T5067] ? bit_waitqueue+0x30/0x30
[ 54.967275][ T5067] ? gfs2_meta_buffer+0x218/0x3a0
[ 54.972285][ T5067] gfs2_write_alloc_required+0x441/0x6e0
[ 54.977912][ T5067] ? gfs2_map_journal_extents+0xc10/0xc10
[ 54.983624][ T5067] ? inode_dio_wait+0x2dc/0x390
[ 54.988464][ T5067] ? inode_owner_or_capable+0x200/0x200
[ 54.994003][ T5067] ? gfs2_inode_metasync+0xf0/0xf0
[ 54.999128][ T5067] ? gfs2_glock_nq+0xe2d/0x1890
[ 55.003975][ T5067] gfs2_jdesc_check+0x1b9/0x290
[ 55.008822][ T5067] init_journal+0x5a4/0x22c0
[ 55.013402][ T5067] ? vsnprintf+0x1cb0/0x1cb0
[ 55.017991][ T5067] ? init_inodes+0xdc/0x340
[ 55.022489][ T5067] ? _compound_head+0x130/0x130
[ 55.027338][ T5067] ? ptr_to_hashval+0x70/0x70
[ 55.032044][ T5067] ? init_sb+0xb7b/0x12b0
[ 55.036382][ T5067] ? snprintf+0xc0/0x110
[ 55.040618][ T5067] ? init_inodes+0xdc/0x340
[ 55.045111][ T5067] ? vscnprintf+0x80/0x80
[ 55.049436][ T5067] init_inodes+0xdc/0x340
[ 55.053762][ T5067] gfs2_fill_super+0x1bb2/0x2700
[ 55.058701][ T5067] ? gfs2_reconfigure+0xce0/0xce0
[ 55.063714][ T5067] ? ptr_to_hashval+0x70/0x70
[ 55.068390][ T5067] ? up_write+0x19a/0x580
[ 55.072719][ T5067] ? init_locking+0xbd/0x220
[ 55.077303][ T5067] ? vscnprintf+0x80/0x80
[ 55.081621][ T5067] ? set_blocksize+0x1ec/0x390
[ 55.086377][ T5067] ? sb_set_blocksize+0x95/0xf0
[ 55.091219][ T5067] get_tree_bdev+0x400/0x620
[ 55.095800][ T5067] ? gfs2_reconfigure+0xce0/0xce0
[ 55.100814][ T5067] gfs2_get_tree+0x50/0x210
[ 55.105315][ T5067] ? bpf_lsm_capable+0x5/0x10
[ 55.109988][ T5067] vfs_get_tree+0x88/0x270
[ 55.114394][ T5067] do_new_mount+0x289/0xad0
[ 55.118888][ T5067] ? do_move_mount_old+0x150/0x150
[ 55.123991][ T5067] ? user_path_at_empty+0x149/0x1a0
[ 55.129183][ T5067] __se_sys_mount+0x2d3/0x3c0
[ 55.133937][ T5067] ? __x64_sys_mount+0xc0/0xc0
[ 55.138774][ T5067] ? syscall_enter_from_user_mode+0x2e/0x1d0
[ 55.144742][ T5067] ? __x64_sys_mount+0x1c/0xc0
[ 55.149494][ T5067] do_syscall_64+0x3d/0xb0
[ 55.153902][ T5067] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 55.159783][ T5067] RIP: 0033:0x7f2c63567aca
[ 55.164189][ T5067] Code: 83 c4 08 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 55.183796][ T5067] RSP: 002b:00007ffd0e3a28d8 EFLAGS: 00000282 ORIG_RAX: 00000000000000a5
[ 55.192205][ T5067] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f2c63567aca
[ 55.200163][ T5067] RDX: 0000000020037f40 RSI: 0000000020037f80 RDI: 00007ffd0e3a28e0
[ 55.208139][ T5067] RBP: 00007ffd0e3a28e0 R08: 00007ffd0e3a2920 R09: 0000000000043350
[ 55.216097][ T5067] R10: 0000000002000011 R11: 0000000000000282 R12: 0000000000000004
[ 55.224075][ T5067] R13: 00005555567192c0 R14: 00007ffd0e3a2920 R15: 0000000000000000
[ 55.232050][ T5067]
[ 55.235405][ T5067] ================================================================================
[ 55.244773][ T5067] Kernel panic - not syncing: UBSAN: panic_on_warn set ...
[ 55.251969][ T5067] CPU: 0 PID: 5067 Comm: syz-executor164 Not tainted 6.1.0-syzkaller-13031-g77856d911a8c #0
[ 55.262020][ T5067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[ 55.272063][ T5067] Call Trace:
[ 55.275333][ T5067]
[ 55.278253][ T5067] dump_stack_lvl+0x1b1/0x290
[ 55.282925][ T5067] ? nf_tcp_handle_invalid+0x630/0x630
[ 55.288368][ T5067] ? panic+0x710/0x710
[ 55.292441][ T5067] ? tick_nohz_tick_stopped+0x76/0xb0
[ 55.297805][ T5067] ? __irq_work_queue_local+0x121/0x180
[ 55.303348][ T5067] ? vscnprintf+0x59/0x80
[ 55.307667][ T5067] panic+0x2d6/0x710
[ 55.311552][ T5067] ? check_panic_on_warn+0x1d/0xa0
[ 55.316653][ T5067] ? memcpy_page_flushcache+0x100/0x100
[ 55.322186][ T5067] ? dump_stack_lvl+0x20b/0x290
[ 55.327061][ T5067] ? gfs2_meta_buffer+0x218/0x3a0
[ 55.332082][ T5067] check_panic_on_warn+0x80/0xa0
[ 55.337007][ T5067] __ubsan_handle_out_of_bounds+0x102/0x110
[ 55.342904][ T5067] ? __down_read_common+0x156/0x2a0
[ 55.348103][ T5067] __gfs2_iomap_get+0x4a4/0x16e0
[ 55.353058][ T5067] ? gfs2_alloc_extent+0x600/0x600
[ 55.358181][ T5067] gfs2_block_map+0x28f/0x7f0
[ 55.362856][ T5067] ? bit_wait+0xc0/0xc0
[ 55.367015][ T5067] ? gfs2_iomap_end+0x700/0x700
[ 55.371866][ T5067] ? bit_waitqueue+0x30/0x30
[ 55.376563][ T5067] ? gfs2_meta_buffer+0x218/0x3a0
[ 55.381587][ T5067] gfs2_write_alloc_required+0x441/0x6e0
[ 55.387224][ T5067] ? gfs2_map_journal_extents+0xc10/0xc10
[ 55.392975][ T5067] ? inode_dio_wait+0x2dc/0x390
[ 55.397847][ T5067] ? inode_owner_or_capable+0x200/0x200
[ 55.403419][ T5067] ? gfs2_inode_metasync+0xf0/0xf0
[ 55.408535][ T5067] ? gfs2_glock_nq+0xe2d/0x1890
[ 55.413391][ T5067] gfs2_jdesc_check+0x1b9/0x290
[ 55.418246][ T5067] init_journal+0x5a4/0x22c0
[ 55.422833][ T5067] ? vsnprintf+0x1cb0/0x1cb0
[ 55.427430][ T5067] ? init_inodes+0xdc/0x340
[ 55.431932][ T5067] ? _compound_head+0x130/0x130
[ 55.436781][ T5067] ? ptr_to_hashval+0x70/0x70
[ 55.441453][ T5067] ? init_sb+0xb7b/0x12b0
[ 55.445784][ T5067] ? snprintf+0xc0/0x110
[ 55.450024][ T5067] ? init_inodes+0xdc/0x340
[ 55.454525][ T5067] ? vscnprintf+0x80/0x80
[ 55.458855][ T5067] init_inodes+0xdc/0x340
[ 55.463185][ T5067] gfs2_fill_super+0x1bb2/0x2700
[ 55.468133][ T5067] ? gfs2_reconfigure+0xce0/0xce0
[ 55.473154][ T5067] ? ptr_to_hashval+0x70/0x70
[ 55.477827][ T5067] ? up_write+0x19a/0x580
[ 55.482154][ T5067] ? init_locking+0xbd/0x220
[ 55.486739][ T5067] ? vscnprintf+0x80/0x80
[ 55.491067][ T5067] ? set_blocksize+0x1ec/0x390
[ 55.495828][ T5067] ? sb_set_blocksize+0x95/0xf0
[ 55.500675][ T5067] get_tree_bdev+0x400/0x620
[ 55.505265][ T5067] ? gfs2_reconfigure+0xce0/0xce0
[ 55.510324][ T5067] gfs2_get_tree+0x50/0x210
[ 55.514823][ T5067] ? bpf_lsm_capable+0x5/0x10
[ 55.519506][ T5067] vfs_get_tree+0x88/0x270
[ 55.523946][ T5067] do_new_mount+0x289/0xad0
[ 55.528469][ T5067] ? do_move_mount_old+0x150/0x150
[ 55.533671][ T5067] ? user_path_at_empty+0x149/0x1a0
[ 55.538869][ T5067] __se_sys_mount+0x2d3/0x3c0
[ 55.543601][ T5067] ? __x64_sys_mount+0xc0/0xc0
[ 55.548361][ T5067] ? syscall_enter_from_user_mode+0x2e/0x1d0
[ 55.554340][ T5067] ? __x64_sys_mount+0x1c/0xc0
[ 55.559101][ T5067] do_syscall_64+0x3d/0xb0
[ 55.563512][ T5067] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 55.569402][ T5067] RIP: 0033:0x7f2c63567aca
[ 55.573810][ T5067] Code: 83 c4 08 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 55.593612][ T5067] RSP: 002b:00007ffd0e3a28d8 EFLAGS: 00000282 ORIG_RAX: 00000000000000a5
[ 55.602026][ T5067] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f2c63567aca
[ 55.609991][ T5067] RDX: 0000000020037f40 RSI: 0000000020037f80 RDI: 00007ffd0e3a28e0
[ 55.617969][ T5067] RBP: 00007ffd0e3a28e0 R08: 00007ffd0e3a2920 R09: 0000000000043350
[ 55.625931][ T5067] R10: 0000000002000011 R11: 0000000000000282 R12: 0000000000000004
[ 55.633907][ T5067] R13: 00005555567192c0 R14: 00007ffd0e3a2920 R15: 0000000000000000
[ 55.641899][ T5067]
[ 55.645053][ T5067] Kernel Offset: disabled
[ 55.649445][ T5067] Rebooting in 86400 seconds..