./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor233324102

<...>
Warning: Permanently added '10.128.1.147' (ED25519) to the list of known hosts.
execve("./syz-executor233324102", ["./syz-executor233324102"], 0x7ffe6a377920 /* 10 vars */) = 0
brk(NULL)                               = 0x5555739cc000
brk(0x5555739ccd00)                     = 0x5555739ccd00
arch_prctl(ARCH_SET_FS, 0x5555739cc380) = 0
set_tid_address(0x5555739cc650)         = 5827
set_robust_list(0x5555739cc660, 24)     = 0
rseq(0x5555739ccca0, 0x20, 0, 0x53053053) = 0
prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0
readlink("/proc/self/exe", "/root/syz-executor233324102", 4096) = 27
getrandom("\xda\x60\x78\x1a\x70\x59\x15\xa5", 8, GRND_NONBLOCK) = 8
brk(NULL)                               = 0x5555739ccd00
brk(0x5555739edd00)                     = 0x5555739edd00
brk(0x5555739ee000)                     = 0x5555739ee000
mprotect(0x7fef1db0e000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
executing program
write(1, "executing program\n", 18)     = 18
memfd_create("syzkaller", 0)            = 3
mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fef15600000
write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216
munmap(0x7fef15600000, 138412032)       = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 4
ioctl(4, LOOP_SET_FD, 3)                = 0
close(3)                                = 0
close(4)                                = 0
mkdir("./bus", 0777)                    = 0
mount("/dev/loop0", "./bus", "jfs", 0, "") = 0
openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3
chdir("./bus")                          = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = -1 EBUSY (Device or resource busy)
openat(AT_FDCWD, "hugetlb.1GB.usage_in_bytes", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4
syzkaller login: [   63.230430][ T5827] loop0: detected capacity change from 0 to 32768
[   63.279279][ T5827] ==================================================================
[   63.287393][ T5827] BUG: KASAN: slab-out-of-bounds in dtSearch+0x1664/0x2520
[   63.294656][ T5827] Read of size 1 at addr ffff8880783b4030 by task syz-executor233/5827
[   63.302912][ T5827] 
[   63.305272][ T5827] CPU: 1 UID: 0 PID: 5827 Comm: syz-executor233 Not tainted 6.12.0-rc7-syzkaller-00042-gf1b785f4c787 #0
[   63.316391][ T5827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024
[   63.326475][ T5827] Call Trace:
[   63.329771][ T5827]  <TASK>
[   63.332700][ T5827]  dump_stack_lvl+0x241/0x360
[   63.337425][ T5827]  ? __pfx_dump_stack_lvl+0x10/0x10
[   63.342649][ T5827]  ? __pfx__printk+0x10/0x10
[   63.347243][ T5827]  ? _printk+0xd5/0x120
[   63.351406][ T5827]  ? __virt_addr_valid+0x183/0x530
[   63.356522][ T5827]  ? __virt_addr_valid+0x183/0x530
[   63.361635][ T5827]  print_report+0x169/0x550
[   63.366145][ T5827]  ? __virt_addr_valid+0x183/0x530
[   63.371254][ T5827]  ? __virt_addr_valid+0x183/0x530
[   63.376455][ T5827]  ? __virt_addr_valid+0x45f/0x530
[   63.381567][ T5827]  ? __phys_addr+0xba/0x170
[   63.386097][ T5827]  ? dtSearch+0x1664/0x2520
[   63.390618][ T5827]  kasan_report+0x143/0x180
[   63.395143][ T5827]  ? dtSearch+0x1664/0x2520
[   63.399656][ T5827]  dtSearch+0x1664/0x2520
[   63.403995][ T5827]  ? get_UCSname+0xe3/0x610
[   63.408511][ T5827]  jfs_lookup+0x17f/0x410
[   63.412867][ T5827]  ? __pfx_jfs_lookup+0x10/0x10
[   63.417733][ T5827]  ? make_vfsuid+0x52/0xa0
[   63.422155][ T5827]  ? bpf_lsm_inode_create+0x9/0x10
[   63.427275][ T5827]  ? security_inode_create+0xbe/0x340
[   63.432653][ T5827]  ? __pfx_jfs_lookup+0x10/0x10
[   63.437511][ T5827]  path_openat+0x11a7/0x3590
[   63.442114][ T5827]  ? __pfx_path_openat+0x10/0x10
[   63.447061][ T5827]  do_filp_open+0x235/0x490
[   63.451578][ T5827]  ? __pfx_do_filp_open+0x10/0x10
[   63.456616][ T5827]  ? _raw_spin_unlock+0x28/0x50
[   63.461473][ T5827]  ? alloc_fd+0x5a1/0x640
[   63.465811][ T5827]  do_sys_openat2+0x13e/0x1d0
[   63.470493][ T5827]  ? __pfx_do_sys_openat2+0x10/0x10
[   63.475708][ T5827]  ? lockdep_hardirqs_on+0x99/0x150
[   63.480915][ T5827]  ? _raw_spin_unlock_irq+0x2e/0x50
[   63.486114][ T5827]  ? ptrace_notify+0x279/0x380
[   63.490892][ T5827]  __x64_sys_openat+0x247/0x2a0
[   63.495750][ T5827]  ? __pfx___x64_sys_openat+0x10/0x10
[   63.501128][ T5827]  ? do_syscall_64+0x100/0x230
[   63.505975][ T5827]  do_syscall_64+0xf3/0x230
[   63.510508][ T5827]  ? clear_bhb_loop+0x35/0x90
[   63.515193][ T5827]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   63.521097][ T5827] RIP: 0033:0x7fef1da95639
[   63.525534][ T5827] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[   63.545164][ T5827] RSP: 002b:00007ffcdf6b9158 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[   63.553599][ T5827] RAX: ffffffffffffffda RBX: 00007ffcdf6b9338 RCX: 00007fef1da95639
[   63.561585][ T5827] RDX: 000000000000275a RSI: 0000000020000140 RDI: 00000000ffffff9c
[   63.569662][ T5827] RBP: 00007fef1db0e610 R08: 0000000000000000 R09: 0000000000000000
[   63.577635][ T5827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   63.585604][ T5827] R13: 00007ffcdf6b9328 R14: 0000000000000001 R15: 0000000000000001
[   63.593588][ T5827]  </TASK>
[   63.596629][ T5827] 
[   63.598952][ T5827] The buggy address belongs to the object at ffff8880783b3750
[   63.598952][ T5827]  which belongs to the cache jfs_ip of size 2232
[   63.612668][ T5827] The buggy address is located 40 bytes to the right of
[   63.612668][ T5827]  allocated 2232-byte region [ffff8880783b3750, ffff8880783b4008)
[   63.627338][ T5827] 
[   63.629658][ T5827] The buggy address belongs to the physical page:
[   63.636073][ T5827] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x783b0
[   63.644847][ T5827] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[   63.653343][ T5827] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[   63.660903][ T5827] page_type: f5(slab)
[   63.665143][ T5827] raw: 00fff00000000040 ffff88801ef28280 dead000000000122 0000000000000000
[   63.673729][ T5827] raw: 0000000000000000 00000000800d000d 00000001f5000000 0000000000000000
[   63.682399][ T5827] head: 00fff00000000040 ffff88801ef28280 dead000000000122 0000000000000000
[   63.691333][ T5827] head: 0000000000000000 00000000800d000d 00000001f5000000 0000000000000000
[   63.700889][ T5827] head: 00fff00000000003 ffffea0001e0ec01 ffffffffffffffff 0000000000000000
[   63.710265][ T5827] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000
[   63.719537][ T5827] page dumped because: kasan: bad access detected
[   63.726151][ T5827] page_owner tracks the page as allocated
[   63.731861][ T5827] page last allocated via order 3, migratetype Reclaimable, gfp_mask 0xd2050(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_RECLAIMABLE), pid 5827, tgid 5827 (syz-executor233), ts 63258563094, free_ts 17791500412
[   63.755045][ T5827]  post_alloc_hook+0x1f3/0x230
[   63.759813][ T5827]  get_page_from_freelist+0x363e/0x3790
[   63.765363][ T5827]  __alloc_pages_noprof+0x292/0x710
[   63.770561][ T5827]  alloc_pages_mpol_noprof+0x3e8/0x680
[   63.776023][ T5827]  alloc_slab_page+0x6a/0x140
[   63.780700][ T5827]  allocate_slab+0x5a/0x2f0
[   63.785205][ T5827]  ___slab_alloc+0xcd1/0x14b0
[   63.789876][ T5827]  __slab_alloc+0x58/0xa0
[   63.794204][ T5827]  kmem_cache_alloc_lru_noprof+0x1c5/0x2b0
[   63.800007][ T5827]  jfs_alloc_inode+0x28/0x70
[   63.804598][ T5827]  alloc_inode+0x65/0x1a0
[   63.808935][ T5827]  new_inode+0x22/0x1d0
[   63.813126][ T5827]  jfs_fill_super+0x408/0xc50
[   63.817806][ T5827]  mount_bdev+0x20a/0x2d0
[   63.822133][ T5827]  legacy_get_tree+0xee/0x190
[   63.826808][ T5827]  vfs_get_tree+0x90/0x2b0
[   63.831234][ T5827] page last free pid 1 tgid 1 stack trace:
[   63.837036][ T5827]  free_unref_page+0xcd0/0xf00
[   63.841805][ T5827]  free_contig_range+0x152/0x550
[   63.846744][ T5827]  destroy_args+0x92/0x910
[   63.851160][ T5827]  debug_vm_pgtable+0x4be/0x550
[   63.856006][ T5827]  do_one_initcall+0x248/0x880
[   63.860768][ T5827]  do_initcall_level+0x157/0x210
[   63.865795][ T5827]  do_initcalls+0x3f/0x80
[   63.870132][ T5827]  kernel_init_freeable+0x435/0x5d0
[   63.875340][ T5827]  kernel_init+0x1d/0x2b0
[   63.879671][ T5827]  ret_from_fork+0x4b/0x80
[   63.884091][ T5827]  ret_from_fork_asm+0x1a/0x30
[   63.888863][ T5827] 
[   63.891180][ T5827] Memory state around the buggy address:
[   63.896802][ T5827]  ffff8880783b3f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   63.904860][ T5827]  ffff8880783b3f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   63.912919][ T5827] >ffff8880783b4000: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   63.920978][ T5827]                                      ^
[   63.926604][ T5827]  ffff8880783b4080: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   63.934666][ T5827]  ffff8880783b4100: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   63.942723][ T5827] ==================================================================
[   63.951657][ T5827] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[   63.958875][ T5827] CPU: 1 UID: 0 PID: 5827 Comm: syz-executor233 Not tainted 6.12.0-rc7-syzkaller-00042-gf1b785f4c787 #0
[   63.970004][ T5827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024
[   63.980056][ T5827] Call Trace:
[   63.983329][ T5827]  <TASK>
[   63.986250][ T5827]  dump_stack_lvl+0x241/0x360
[   63.990955][ T5827]  ? __pfx_dump_stack_lvl+0x10/0x10
[   63.996146][ T5827]  ? __pfx__printk+0x10/0x10
[   64.000747][ T5827]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[   64.006723][ T5827]  ? vscnprintf+0x5d/0x90
[   64.011043][ T5827]  panic+0x349/0x880
[   64.014932][ T5827]  ? check_panic_on_warn+0x21/0xb0
[   64.020039][ T5827]  ? __pfx_panic+0x10/0x10
[   64.024446][ T5827]  ? _raw_spin_unlock_irqrestore+0x130/0x140
[   64.030421][ T5827]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   64.036739][ T5827]  check_panic_on_warn+0x86/0xb0
[   64.041674][ T5827]  ? dtSearch+0x1664/0x2520
[   64.046168][ T5827]  end_report+0x77/0x160
[   64.050405][ T5827]  kasan_report+0x154/0x180
[   64.054911][ T5827]  ? dtSearch+0x1664/0x2520
[   64.059426][ T5827]  dtSearch+0x1664/0x2520
[   64.063767][ T5827]  ? get_UCSname+0xe3/0x610
[   64.068293][ T5827]  jfs_lookup+0x17f/0x410
[   64.072632][ T5827]  ? __pfx_jfs_lookup+0x10/0x10
[   64.077551][ T5827]  ? make_vfsuid+0x52/0xa0
[   64.081968][ T5827]  ? bpf_lsm_inode_create+0x9/0x10
[   64.087083][ T5827]  ? security_inode_create+0xbe/0x340
[   64.092457][ T5827]  ? __pfx_jfs_lookup+0x10/0x10
[   64.097315][ T5827]  path_openat+0x11a7/0x3590
[   64.101914][ T5827]  ? __pfx_path_openat+0x10/0x10
[   64.106869][ T5827]  do_filp_open+0x235/0x490
[   64.111378][ T5827]  ? __pfx_do_filp_open+0x10/0x10
[   64.116420][ T5827]  ? _raw_spin_unlock+0x28/0x50
[   64.121270][ T5827]  ? alloc_fd+0x5a1/0x640
[   64.125606][ T5827]  do_sys_openat2+0x13e/0x1d0
[   64.130291][ T5827]  ? __pfx_do_sys_openat2+0x10/0x10
[   64.135492][ T5827]  ? lockdep_hardirqs_on+0x99/0x150
[   64.140696][ T5827]  ? _raw_spin_unlock_irq+0x2e/0x50
[   64.145896][ T5827]  ? ptrace_notify+0x279/0x380
[   64.150663][ T5827]  __x64_sys_openat+0x247/0x2a0
[   64.155518][ T5827]  ? __pfx___x64_sys_openat+0x10/0x10
[   64.160892][ T5827]  ? do_syscall_64+0x100/0x230
[   64.165661][ T5827]  do_syscall_64+0xf3/0x230
[   64.170170][ T5827]  ? clear_bhb_loop+0x35/0x90
[   64.174853][ T5827]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   64.180751][ T5827] RIP: 0033:0x7fef1da95639
[   64.185166][ T5827] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[   64.204777][ T5827] RSP: 002b:00007ffcdf6b9158 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[   64.213209][ T5827] RAX: ffffffffffffffda RBX: 00007ffcdf6b9338 RCX: 00007fef1da95639
[   64.221183][ T5827] RDX: 000000000000275a RSI: 0000000020000140 RDI: 00000000ffffff9c
[   64.229154][ T5827] RBP: 00007fef1db0e610 R08: 0000000000000000 R09: 0000000000000000
[   64.237130][ T5827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   64.245099][ T5827] R13: 00007ffcdf6b9328 R14: 0000000000000001 R15: 0000000000000001
[   64.253076][ T5827]  </TASK>
[   64.256249][ T5827] Kernel Offset: disabled
[   64.260567][ T5827] Rebooting in 86400 seconds..