./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3524624749
<...>
forked to background, child pid 4645
[ 30.433950][ T4646] 8021q: adding VLAN 0 to HW filter on device bond0
[ 30.445882][ T4646] eql: remember to turn off Van-Jacobson compression on your slave devices
Starting sshd: [ 30.878843][ T4737] sshd (4737) used greatest stack depth: 15824 bytes left
OK
syzkaller
Warning: Permanently added '10.128.1.163' (ECDSA) to the list of known hosts.
execve("./syz-executor3524624749", ["./syz-executor3524624749"], 0x7ffe1b6a0410 /* 10 vars */) = 0
brk(NULL) = 0x55555642b000
brk(0x55555642bc40) = 0x55555642bc40
arch_prctl(ARCH_SET_FS, 0x55555642b300) = 0
uname({sysname="Linux", nodename="syzkaller", ...}) = 0
readlink("/proc/self/exe", "/root/syz-executor3524624749", 4096) = 28
brk(0x55555644cc40) = 0x55555644cc40
brk(0x55555644d000) = 0x55555644d000
mprotect(0x7fe62a3c3000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
memfd_create("syzkaller", 0) = 3
mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fe621f04000
write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216
munmap(0x7fe621f04000, 16777216) = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
ioctl(4, LOOP_SET_FD, 3) = 0
close(3) = 0
mkdir("./bus", 0777) = 0
mount("/dev/loop0", "./bus", "jfs", 0, "") = 0
openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3
chdir("./bus") = 0
ioctl(4, LOOP_CLR_FD) = 0
close(4) = 0
openat(AT_FDCWD, "memory.events", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4
syzkaller login: [ 55.218892][ T5074] loop0: detected capacity change from 0 to 32768
[ 55.250630][ T5074] ================================================================================
[ 55.260527][ T5074] UBSAN: array-index-out-of-bounds in fs/jfs/jfs_dmap.c:1964:6
[ 55.268196][ T5074] index -84 is out of range for type 's8 [341]'
[ 55.274448][ T5074] CPU: 1 PID: 5074 Comm: syz-executor352 Not tainted 6.1.0-syzkaller-14321-g0a924817d2ed #0
[ 55.284509][ T5074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[ 55.294554][ T5074] Call Trace:
[ 55.297826][ T5074]
[ 55.300745][ T5074] dump_stack_lvl+0x1b1/0x290
[ 55.305445][ T5074] ? nf_tcp_handle_invalid+0x630/0x630
[ 55.310918][ T5074] ? vsnprintf+0x19e/0x1cb0
[ 55.315407][ T5074] ? panic+0x710/0x710
[ 55.319474][ T5074] __ubsan_handle_out_of_bounds+0xe0/0x110
[ 55.325269][ T5074] ? dbFindLeaf+0x35f/0x440
[ 55.329782][ T5074] dbAllocDmapLev+0x3c6/0x420
[ 55.334473][ T5074] ? dbAllocNear+0x390/0x390
[ 55.339076][ T5074] dbAllocCtl+0x113/0x970
[ 55.343410][ T5074] ? __mutex_unlock_slowpath+0x222/0x770
[ 55.349043][ T5074] ? __might_sleep+0xc0/0xc0
[ 55.353640][ T5074] dbAllocAG+0x28b/0x1100
[ 55.357974][ T5074] ? do_sys_openat2+0x124/0x4e0
[ 55.362822][ T5074] ? __x64_sys_openat+0x243/0x290
[ 55.367851][ T5074] ? down_write_nested+0x1ab/0x280
[ 55.372967][ T5074] ? dbAllocDmapLev+0x420/0x420
[ 55.377829][ T5074] dbAlloc+0x661/0xc90
[ 55.381910][ T5074] ? dbNextAG+0x630/0x630
[ 55.386237][ T5074] ? __kmem_cache_alloc_node+0x21a/0x340
[ 55.391871][ T5074] ? dtInsert+0x6ad/0x6b80
[ 55.396302][ T5074] dtInsert+0xc0e/0x6b80
[ 55.400542][ T5074] ? jfs_create+0x523/0xb10
[ 55.405043][ T5074] ? __x64_sys_openat+0x243/0x290
[ 55.410065][ T5074] ? do_syscall_64+0x3d/0xb0
[ 55.414662][ T5074] ? print_irqtrace_events+0x220/0x220
[ 55.420121][ T5074] ? do_raw_spin_unlock+0x134/0x8a0
[ 55.425333][ T5074] ? mark_lock+0x9a/0x350
[ 55.429704][ T5074] ? dtSearch+0x26c0/0x26c0
[ 55.434212][ T5074] ? rcu_read_lock_sched_held+0x87/0x110
[ 55.439847][ T5074] ? __bpf_trace_rcu_stall_warning+0x10/0x10
[ 55.445837][ T5074] ? txLock+0x23a/0x19f0
[ 55.450085][ T5074] ? trace_lock_release+0x95/0x220
[ 55.455205][ T5074] ? read_lock_is_recursive+0x10/0x10
[ 55.460579][ T5074] ? txLock+0x23a/0x19f0
[ 55.464824][ T5074] ? __lock_acquire+0x1f60/0x1f60
[ 55.469848][ T5074] ? do_raw_spin_lock+0x147/0x3a0
[ 55.474892][ T5074] ? do_raw_spin_unlock+0x134/0x8a0
[ 55.480125][ T5074] jfs_create+0x736/0xb10
[ 55.484467][ T5074] ? jfs_lookup+0x380/0x380
[ 55.488971][ T5074] ? jfs_get_parent+0xa0/0xa0
[ 55.493659][ T5074] ? hook_path_mknod+0x157/0x4e0
[ 55.498603][ T5074] ? apparmor_path_mknod+0x466/0x530
[ 55.503893][ T5074] ? from_kgid+0x193/0x6b0
[ 55.508316][ T5074] ? make_kgid+0x710/0x710
[ 55.512735][ T5074] ? generic_permission+0x229/0x500
[ 55.517944][ T5074] ? inode_permission+0xf5/0x450
[ 55.522887][ T5074] ? bpf_lsm_inode_create+0x5/0x10
[ 55.527999][ T5074] ? security_inode_create+0xdd/0x120
[ 55.533379][ T5074] ? jfs_lookup+0x380/0x380
[ 55.537882][ T5074] path_openat+0x12ac/0x2dd0
[ 55.542526][ T5074] ? do_filp_open+0x4f0/0x4f0
[ 55.547241][ T5074] do_filp_open+0x264/0x4f0
[ 55.551760][ T5074] ? vfs_tmpfile+0x490/0x490
[ 55.556374][ T5074] ? do_raw_spin_unlock+0x134/0x8a0
[ 55.561591][ T5074] ? _raw_spin_unlock+0x24/0x40
[ 55.566450][ T5074] ? alloc_fd+0x5a7/0x640
[ 55.570797][ T5074] do_sys_openat2+0x124/0x4e0
[ 55.575477][ T5074] ? print_irqtrace_events+0x220/0x220
[ 55.580939][ T5074] ? ptrace_stop+0x74d/0x970
[ 55.585536][ T5074] ? do_sys_open+0x220/0x220
[ 55.590127][ T5074] ? lockdep_hardirqs_on+0x8d/0x130
[ 55.595333][ T5074] ? _raw_spin_unlock_irq+0x2a/0x40
[ 55.600534][ T5074] ? ptrace_notify+0x245/0x340
[ 55.605308][ T5074] __x64_sys_openat+0x243/0x290
[ 55.610200][ T5074] ? __ia32_sys_open+0x270/0x270
[ 55.615150][ T5074] ? syscall_enter_from_user_mode+0x2e/0x1d0
[ 55.621138][ T5074] ? syscall_enter_from_user_mode+0x86/0x1d0
[ 55.627123][ T5074] do_syscall_64+0x3d/0xb0
[ 55.631547][ T5074] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 55.637441][ T5074] RIP: 0033:0x7fe62a3507c9
[ 55.641858][ T5074] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 55.661465][ T5074] RSP: 002b:00007ffe095987c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 55.669884][ T5074] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fe62a3507c9
[ 55.677854][ T5074] RDX: 000000000000275a RSI: 0000000020000040 RDI: 00000000ffffff9c
[ 55.685821][ T5074] RBP: 00007fe62a310060 R08: 0000000000000000 R09: 0000000000000000
[ 55.693790][ T5074] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe62a3100f0
[ 55.701755][ T5074] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 55.709739][ T5074]
[ 55.713198][ T5074] ================================================================================
[ 55.722642][ T5074] Kernel panic - not syncing: UBSAN: panic_on_warn set ...
[ 55.729851][ T5074] CPU: 1 PID: 5074 Comm: syz-executor352 Not tainted 6.1.0-syzkaller-14321-g0a924817d2ed #0
[ 55.739900][ T5074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[ 55.749939][ T5074] Call Trace:
[ 55.753208][ T5074]
[ 55.756127][ T5074] dump_stack_lvl+0x1b1/0x290
[ 55.760801][ T5074] ? nf_tcp_handle_invalid+0x630/0x630
[ 55.766248][ T5074] ? panic+0x710/0x710
[ 55.770302][ T5074] ? tick_nohz_tick_stopped+0x76/0xb0
[ 55.775698][ T5074] ? __irq_work_queue_local+0x121/0x180
[ 55.781236][ T5074] ? vscnprintf+0x59/0x80
[ 55.785557][ T5074] panic+0x2d6/0x710
[ 55.789441][ T5074] ? check_panic_on_warn+0x1d/0xa0
[ 55.794539][ T5074] ? memcpy_page_flushcache+0x100/0x100
[ 55.800087][ T5074] ? dump_stack_lvl+0x20b/0x290
[ 55.804947][ T5074] check_panic_on_warn+0x80/0xa0
[ 55.809897][ T5074] __ubsan_handle_out_of_bounds+0x102/0x110
[ 55.815794][ T5074] ? dbFindLeaf+0x35f/0x440
[ 55.820303][ T5074] dbAllocDmapLev+0x3c6/0x420
[ 55.825000][ T5074] ? dbAllocNear+0x390/0x390
[ 55.829607][ T5074] dbAllocCtl+0x113/0x970
[ 55.833975][ T5074] ? __mutex_unlock_slowpath+0x222/0x770
[ 55.839619][ T5074] ? __might_sleep+0xc0/0xc0
[ 55.844222][ T5074] dbAllocAG+0x28b/0x1100
[ 55.848558][ T5074] ? do_sys_openat2+0x124/0x4e0
[ 55.853410][ T5074] ? __x64_sys_openat+0x243/0x290
[ 55.858435][ T5074] ? down_write_nested+0x1ab/0x280
[ 55.863547][ T5074] ? dbAllocDmapLev+0x420/0x420
[ 55.868413][ T5074] dbAlloc+0x661/0xc90
[ 55.872492][ T5074] ? dbNextAG+0x630/0x630
[ 55.876820][ T5074] ? __kmem_cache_alloc_node+0x21a/0x340
[ 55.882452][ T5074] ? dtInsert+0x6ad/0x6b80
[ 55.886875][ T5074] dtInsert+0xc0e/0x6b80
[ 55.891120][ T5074] ? jfs_create+0x523/0xb10
[ 55.895622][ T5074] ? __x64_sys_openat+0x243/0x290
[ 55.900656][ T5074] ? do_syscall_64+0x3d/0xb0
[ 55.905252][ T5074] ? print_irqtrace_events+0x220/0x220
[ 55.910715][ T5074] ? do_raw_spin_unlock+0x134/0x8a0
[ 55.915921][ T5074] ? mark_lock+0x9a/0x350
[ 55.920257][ T5074] ? dtSearch+0x26c0/0x26c0
[ 55.924764][ T5074] ? rcu_read_lock_sched_held+0x87/0x110
[ 55.930399][ T5074] ? __bpf_trace_rcu_stall_warning+0x10/0x10
[ 55.936385][ T5074] ? txLock+0x23a/0x19f0
[ 55.940628][ T5074] ? trace_lock_release+0x95/0x220
[ 55.945753][ T5074] ? read_lock_is_recursive+0x10/0x10
[ 55.951126][ T5074] ? txLock+0x23a/0x19f0
[ 55.955372][ T5074] ? __lock_acquire+0x1f60/0x1f60
[ 55.960400][ T5074] ? do_raw_spin_lock+0x147/0x3a0
[ 55.965433][ T5074] ? do_raw_spin_unlock+0x134/0x8a0
[ 55.970660][ T5074] jfs_create+0x736/0xb10
[ 55.974999][ T5074] ? jfs_lookup+0x380/0x380
[ 55.979501][ T5074] ? jfs_get_parent+0xa0/0xa0
[ 55.984182][ T5074] ? hook_path_mknod+0x157/0x4e0
[ 55.989124][ T5074] ? apparmor_path_mknod+0x466/0x530
[ 55.994410][ T5074] ? from_kgid+0x193/0x6b0
[ 55.998827][ T5074] ? make_kgid+0x710/0x710
[ 56.003246][ T5074] ? generic_permission+0x229/0x500
[ 56.008461][ T5074] ? inode_permission+0xf5/0x450
[ 56.013416][ T5074] ? bpf_lsm_inode_create+0x5/0x10
[ 56.018532][ T5074] ? security_inode_create+0xdd/0x120
[ 56.023910][ T5074] ? jfs_lookup+0x380/0x380
[ 56.028409][ T5074] path_openat+0x12ac/0x2dd0
[ 56.033032][ T5074] ? do_filp_open+0x4f0/0x4f0
[ 56.037730][ T5074] do_filp_open+0x264/0x4f0
[ 56.042241][ T5074] ? vfs_tmpfile+0x490/0x490
[ 56.046846][ T5074] ? do_raw_spin_unlock+0x134/0x8a0
[ 56.052051][ T5074] ? _raw_spin_unlock+0x24/0x40
[ 56.056911][ T5074] ? alloc_fd+0x5a7/0x640
[ 56.061251][ T5074] do_sys_openat2+0x124/0x4e0
[ 56.065928][ T5074] ? print_irqtrace_events+0x220/0x220
[ 56.071385][ T5074] ? ptrace_stop+0x74d/0x970
[ 56.075979][ T5074] ? do_sys_open+0x220/0x220
[ 56.080568][ T5074] ? lockdep_hardirqs_on+0x8d/0x130
[ 56.085766][ T5074] ? _raw_spin_unlock_irq+0x2a/0x40
[ 56.090968][ T5074] ? ptrace_notify+0x245/0x340
[ 56.095733][ T5074] __x64_sys_openat+0x243/0x290
[ 56.100586][ T5074] ? __ia32_sys_open+0x270/0x270
[ 56.105529][ T5074] ? syscall_enter_from_user_mode+0x2e/0x1d0
[ 56.111511][ T5074] ? syscall_enter_from_user_mode+0x86/0x1d0
[ 56.117496][ T5074] do_syscall_64+0x3d/0xb0
[ 56.121919][ T5074] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 56.127816][ T5074] RIP: 0033:0x7fe62a3507c9
[ 56.132230][ T5074] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 56.151834][ T5074] RSP: 002b:00007ffe095987c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 56.160246][ T5074] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fe62a3507c9
[ 56.168216][ T5074] RDX: 000000000000275a RSI: 0000000020000040 RDI: 00000000ffffff9c
[ 56.176186][ T5074] RBP: 00007fe62a310060 R08: 0000000000000000 R09: 0000000000000000
[ 56.184174][ T5074] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe62a3100f0
[ 56.192143][ T5074] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 56.200128][ T5074]
[ 56.203330][ T5074] Kernel Offset: disabled
[ 56.207726][ T5074] Rebooting in 86400 seconds..