./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2674370952
<...>
Warning: Permanently added '10.128.0.80' (ED25519) to the list of known hosts.
execve("./syz-executor2674370952", ["./syz-executor2674370952"], 0x7ffcc2aafdd0 /* 10 vars */) = 0
brk(NULL) = 0x55555ee25000
brk(0x55555ee25d00) = 0x55555ee25d00
arch_prctl(ARCH_SET_FS, 0x55555ee25380) = 0
set_tid_address(0x55555ee25650) = 5212
set_robust_list(0x55555ee25660, 24) = 0
rseq(0x55555ee25ca0, 0x20, 0, 0x53053053) = 0
prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0
readlink("/proc/self/exe", "/root/syz-executor2674370952", 4096) = 28
getrandom("\x1e\x28\xcd\x08\x03\x3d\x40\xd2", 8, GRND_NONBLOCK) = 8
brk(NULL) = 0x55555ee25d00
brk(0x55555ee46d00) = 0x55555ee46d00
brk(0x55555ee47000) = 0x55555ee47000
mprotect(0x7fbb263a8000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3
ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address)
close(3) = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5213 attached
, child_tidptr=0x55555ee25650) = 5213
[pid 5213] set_robust_list(0x55555ee25660, 24) = 0
[pid 5213] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 5213] setpgid(0, 0) = 0
[pid 5213] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 5213] write(3, "1000", 4) = 4
[pid 5213] close(3) = 0
executing program
[pid 5213] write(1, "executing program\n", 18) = 18
[pid 5213] memfd_create("syzkaller", 0) = 3
[pid 5213] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fbb1de00000
[pid 5213] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216
[pid 5213] munmap(0x7fbb1de00000, 138412032) = 0
[pid 5213] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid 5213] ioctl(4, LOOP_SET_FD, 3) = 0
[pid 5213] close(3) = 0
[pid 5213] close(4) = 0
[pid 5213] mkdir("./file0", 0777) = 0
syzkaller login: [ 61.648570][ T5213] loop0: detected capacity change from 0 to 32768
[ 61.683425][ T5213] =======================================================
[ 61.683425][ T5213] WARNING: The mand mount option has been deprecated and
[pid 5213] mount("/dev/loop0", "./file0", "jfs", MS_MANDLOCK|MS_DIRSYNC|MS_NODIRATIME|MS_POSIXACL|MS_LAZYTIME, "") = 0
[pid 5213] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid 5213] chdir("./file0") = 0
[pid 5213] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy)
[pid 5213] mknod("./file0", 000) = -1 EEXIST (File exists)
[pid 5213] memfd_create("syzkaller", 0) = 4
[pid 5213] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fbb1de00000
[pid 5213] write(4, "\xeb\x76\x90\x45\x58\x46\x41\x54\x20\x20\x20\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x08\x00\x00\x00\x88\x00\x00\x00\x0f\x00\x00\x00\x05\x00\x00\x00"..., 131072) = 131072
[pid 5213] munmap(0x7fbb1de00000, 138412032) = 0
[pid 5213] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy)
[pid 5213] close(4) = 0
[pid 5213] creat("./bus", 000) = 4
[pid 5213] mount("/dev/loop0", "./bus", NULL, MS_BIND, NULL) = 0
[pid 5213] open("./bus", O_RDONLY) = 5
[ 61.683425][ T5213] and is ignored by this kernel. Remove the mand
[ 61.683425][ T5213] option from the mount to silence this warning.
[ 61.683425][ T5213] =======================================================
[pid 5213] ioctl(5, LOOP_SET_STATUS, {lo_number=0, lo_offset=0x2c6575, lo_encrypt_type=0x1a37ee8e /* LO_CRYPT_??? */, lo_encrypt_key_size=645265316, lo_flags=LO_FLAGS_USE_AOPS|LO_FLAGS_PARTSCAN|LO_FLAGS_DIRECT_IO|0xb0d98de0, lo_name="\x8d\x64\x12\x75\x79\xdc\xb5\x50\x04\x30\xe2\xd3\xb3\x7d\xdc\xbf\x2e\x63\x0f\x2b\x95\xd8\x99\xd8\x23\x86\xe9\x33\x66\x4e\x7e\xd6\xcc\x1c\xad\x9f\xe9\x1d\x8c\x80\x20\x60\x84\xe8\x32\x21\xde\x24\x8d\xd3\xe3\x92\x1e\x1d\xc6\x3f\xc0\x29\x09\x34\x0d\x4e\x03"..., lo_encrypt_key="\xd7\xe0\x54\x61\x90\xe0\x53\x1c\x6d\x5c\x64\x57\xed\xd7\x91\xed\x75\x89\x4f\x68\x0e\x9b\x34\xf2\xb8\xa2\x35\xa0\xde\x9a\x0c\x66", ...}) = 0
[pid 5213] rename("./file0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = -1 EIO (Input/output error)
[ 61.785072][ T5213] loop0: detected capacity change from 32768 to 27085
[ 61.800437][ T5213] ERROR: (device loop0): dbAdjCtl: Corrupt dmapctl page
[ 61.800437][ T5213]
[ 61.811134][ T5213] ERROR: (device loop0): remounting filesystem as read-only
[ 61.819231][ T5213] jfs_rename: dtInsert returned -EIO
[ 61.827005][ T5213] ERROR: (device loop0): dbAllocBits: leaf page corrupt
[pid 5213] openat(AT_FDCWD, ".", O_RDONLY) = 6
[ 61.827005][ T5213]
[ 61.837004][ T5213] ------------[ cut here ]------------
[ 61.842526][ T5213] UBSAN: shift-out-of-bounds in fs/jfs/jfs_dmap.c:3025:47
[ 61.849713][ T5213] shift exponent 32 is too large for 32-bit type 'u32' (aka 'unsigned int')
[ 61.858452][ T5213] CPU: 0 UID: 0 PID: 5213 Comm: syz-executor267 Not tainted 6.11.0-rc2-syzkaller-00239-g34ac1e82e5a7 #0
[ 61.869569][ T5213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[ 61.879629][ T5213] Call Trace:
[ 61.882900][ T5213]
[ 61.885819][ T5213] dump_stack_lvl+0x241/0x360
[ 61.890501][ T5213] ? __pfx_dump_stack_lvl+0x10/0x10
[ 61.895696][ T5213] ? __pfx__printk+0x10/0x10
[ 61.900283][ T5213] __ubsan_handle_shift_out_of_bounds+0x3c8/0x420
[ 61.906698][ T5213] dbFindBits+0x11a/0x1d0
[ 61.911026][ T5213] dbAllocDmapLev+0x1e9/0x4a0
[ 61.915713][ T5213] ? __pfx_dbAllocDmapLev+0x10/0x10
[ 61.920934][ T5213] ? __get_metapage+0x872/0xef0
[ 61.925795][ T5213] dbAllocCtl+0x113/0x920
[ 61.930118][ T5213] ? lockdep_hardirqs_on_prepare+0x43d/0x780
[ 61.936213][ T5213] dbAllocAG+0x28f/0x10b0
[ 61.940537][ T5213] ? __kasan_kmalloc_large+0x8a/0xa0
[ 61.945811][ T5213] ? rcu_is_watching+0x15/0xb0
[ 61.950564][ T5213] ? __pfx_dbAllocAG+0x10/0x10
[ 61.955322][ T5213] ? dbDiscardAG+0x21f/0xa20
[ 61.959904][ T5213] ? dbDiscardAG+0x21f/0xa20
[ 61.964480][ T5213] ? __kmalloc_noprof+0x21a/0x400
[ 61.969509][ T5213] dbDiscardAG+0x352/0xa20
[ 61.973940][ T5213] ? __pfx_dbDiscardAG+0x10/0x10
[ 61.978863][ T5213] ? __pfx_lock_release+0x10/0x10
[ 61.983886][ T5213] jfs_ioc_trim+0x433/0x670
[ 61.988384][ T5213] jfs_ioctl+0x2d0/0x3e0
[ 61.992621][ T5213] ? __pfx_jfs_ioctl+0x10/0x10
[ 61.997392][ T5213] ? bpf_lsm_file_ioctl+0x9/0x10
[ 62.002318][ T5213] ? security_file_ioctl+0x87/0xb0
[ 62.007414][ T5213] ? __pfx_jfs_ioctl+0x10/0x10
[ 62.012339][ T5213] __se_sys_ioctl+0xfc/0x170
[ 62.016938][ T5213] do_syscall_64+0xf3/0x230
[ 62.021441][ T5213] ? clear_bhb_loop+0x35/0x90
[ 62.026114][ T5213] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 62.032015][ T5213] RIP: 0033:0x7fbb2632d059
[ 62.036421][ T5213] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 62.056280][ T5213] RSP: 002b:00007ffe933950b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 62.064688][ T5213] RAX: ffffffffffffffda RBX: 00007fbb26376095 RCX: 00007fbb2632d059
[ 62.072741][ T5213] RDX: 0000000020000080 RSI: 00000000c0185879 RDI: 0000000000000006
[ 62.080700][ T5213] RBP: 00007fbb263a85f0 R08: 000055555ee264c0 R09: 000055555ee264c0
[ 62.088676][ T5213] R10: 000055555ee264c0 R11: 0000000000000246 R12: 00007ffe933950e0
[ 62.096638][ T5213] R13: 00007ffe93395308 R14: 431bde82d7b634db R15: 00007fbb2637603b
[ 62.104628][ T5213]
[ 62.107888][ T5213] ---[ end trace ]---
[ 62.111896][ T5213] Kernel panic - not syncing: UBSAN: panic_on_warn set ...
[ 62.119097][ T5213] CPU: 0 UID: 0 PID: 5213 Comm: syz-executor267 Not tainted 6.11.0-rc2-syzkaller-00239-g34ac1e82e5a7 #0
[ 62.130196][ T5213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[ 62.140241][ T5213] Call Trace:
[ 62.143510][ T5213]
[ 62.146434][ T5213] dump_stack_lvl+0x241/0x360
[ 62.151117][ T5213] ? __pfx_dump_stack_lvl+0x10/0x10
[ 62.156310][ T5213] ? __pfx__printk+0x10/0x10
[ 62.160897][ T5213] ? vprintk_emit+0x631/0x770
[ 62.165574][ T5213] ? vscnprintf+0x5d/0x90
[ 62.169896][ T5213] panic+0x349/0x860
[ 62.173791][ T5213] ? check_panic_on_warn+0x21/0xb0
[ 62.178894][ T5213] ? __pfx_panic+0x10/0x10
[ 62.183312][ T5213] ? _printk+0xd5/0x120
[ 62.187475][ T5213] ? __pfx__printk+0x10/0x10
[ 62.192065][ T5213] check_panic_on_warn+0x86/0xb0
[ 62.197004][ T5213] __ubsan_handle_shift_out_of_bounds+0x3e7/0x420
[ 62.203430][ T5213] dbFindBits+0x11a/0x1d0
[ 62.207761][ T5213] dbAllocDmapLev+0x1e9/0x4a0
[ 62.212436][ T5213] ? __pfx_dbAllocDmapLev+0x10/0x10
[ 62.217626][ T5213] ? __get_metapage+0x872/0xef0
[ 62.222478][ T5213] dbAllocCtl+0x113/0x920
[ 62.226892][ T5213] ? lockdep_hardirqs_on_prepare+0x43d/0x780
[ 62.233046][ T5213] dbAllocAG+0x28f/0x10b0
[ 62.237376][ T5213] ? __kasan_kmalloc_large+0x8a/0xa0
[ 62.242662][ T5213] ? rcu_is_watching+0x15/0xb0
[ 62.247423][ T5213] ? __pfx_dbAllocAG+0x10/0x10
[ 62.252184][ T5213] ? dbDiscardAG+0x21f/0xa20
[ 62.256770][ T5213] ? dbDiscardAG+0x21f/0xa20
[ 62.261352][ T5213] ? __kmalloc_noprof+0x21a/0x400
[ 62.266384][ T5213] dbDiscardAG+0x352/0xa20
[ 62.270808][ T5213] ? __pfx_dbDiscardAG+0x10/0x10
[ 62.275743][ T5213] ? __pfx_lock_release+0x10/0x10
[ 62.280768][ T5213] jfs_ioc_trim+0x433/0x670
[ 62.285276][ T5213] jfs_ioctl+0x2d0/0x3e0
[ 62.289518][ T5213] ? __pfx_jfs_ioctl+0x10/0x10
[ 62.294286][ T5213] ? bpf_lsm_file_ioctl+0x9/0x10
[ 62.299226][ T5213] ? security_file_ioctl+0x87/0xb0
[ 62.304333][ T5213] ? __pfx_jfs_ioctl+0x10/0x10
[ 62.309091][ T5213] __se_sys_ioctl+0xfc/0x170
[ 62.313685][ T5213] do_syscall_64+0xf3/0x230
[ 62.318226][ T5213] ? clear_bhb_loop+0x35/0x90
[ 62.322902][ T5213] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 62.328795][ T5213] RIP: 0033:0x7fbb2632d059
[ 62.333223][ T5213] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 62.353082][ T5213] RSP: 002b:00007ffe933950b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 62.361494][ T5213] RAX: ffffffffffffffda RBX: 00007fbb26376095 RCX: 00007fbb2632d059
[ 62.369573][ T5213] RDX: 0000000020000080 RSI: 00000000c0185879 RDI: 0000000000000006
[ 62.377539][ T5213] RBP: 00007fbb263a85f0 R08: 000055555ee264c0 R09: 000055555ee264c0
[ 62.385502][ T5213] R10: 000055555ee264c0 R11: 0000000000000246 R12: 00007ffe933950e0
[ 62.393467][ T5213] R13: 00007ffe93395308 R14: 431bde82d7b634db R15: 00007fbb2637603b
[ 62.401452][ T5213]
[ 62.404569][ T5213] Kernel Offset: disabled
[ 62.408926][ T5213] Rebooting in 86400 seconds..