./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor49250471
<...>
Warning: Permanently added '10.128.0.199' (ED25519) to the list of known hosts.
execve("./syz-executor49250471", ["./syz-executor49250471"], 0x7ffd8e6bb8e0 /* 10 vars */) = 0
brk(NULL) = 0x555556de3000
brk(0x555556de3d00) = 0x555556de3d00
arch_prctl(ARCH_SET_FS, 0x555556de3380) = 0
set_tid_address(0x555556de3650) = 5069
set_robust_list(0x555556de3660, 24) = 0
rseq(0x555556de3ca0, 0x20, 0, 0x53053053) = 0
prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0
readlink("/proc/self/exe", "/root/syz-executor49250471", 4096) = 26
getrandom("\xa7\x88\x48\x60\xab\xce\x19\xdb", 8, GRND_NONBLOCK) = 8
brk(NULL) = 0x555556de3d00
brk(0x555556e04d00) = 0x555556e04d00
brk(0x555556e05000) = 0x555556e05000
mprotect(0x7f8a2fe87000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
memfd_create("syzkaller", 0) = 3
mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8a279d1000
write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216
munmap(0x7f8a279d1000, 138412032) = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
ioctl(4, LOOP_SET_FD, 3) = 0
close(3) = 0
mkdir("./file0", 0777) = 0
mount("/dev/loop0", "./file0", "jfs", MS_POSIXACL, "quota,iocharset=cp1250,nodiscard,gid=0x000000000000ee00,noquota,errors=continue,errors=remount-ro,") = 0
openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
chdir("./file0") = 0
ioctl(4, LOOP_CLR_FD) = 0
close(4) = 0
[ 53.328549][ T5069] loop0: detected capacity change from 0 to 32768
[ 53.372650][ T5069] ================================================================================
[ 53.382196][ T5069] UBSAN: shift-out-of-bounds in fs/jfs/jfs_dmap.c:2639:11
[ 53.389877][ T5069] shift exponent 121 is too large for 32-bit type 'int'
[ 53.396879][ T5069] CPU: 0 PID: 5069 Comm: syz-executor492 Not tainted 6.7.0-rc6-syzkaller #0
[ 53.405569][ T5069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023
[ 53.415619][ T5069] Call Trace:
[ 53.418897][ T5069]
[ 53.421835][ T5069] dump_stack_lvl+0x125/0x1b0
[ 53.426569][ T5069] __ubsan_handle_shift_out_of_bounds+0x2a6/0x480
[ 53.433005][ T5069] dbSplit.cold+0x19/0x1e
[ 53.437326][ T5069] dbAllocBits+0x146/0x630
[ 53.441730][ T5069] dbAllocDmap+0x5c/0x100
[ 53.446041][ T5069] dbAllocDmapLev+0x17a/0x2f0
[ 53.450698][ T5069] ? dbAllocNext+0x410/0x410
[ 53.455266][ T5069] ? folio_unlock+0x81/0xd0
[ 53.459757][ T5069] ? __get_metapage+0x522/0x1170
[ 53.464679][ T5069] dbAllocCtl+0x12c/0x7b0
[ 53.468993][ T5069] ? up_write+0x510/0x510
[ 53.473307][ T5069] dbAllocAG+0x8c5/0xd20
[ 53.477529][ T5069] ? lock_sync+0x190/0x190
[ 53.481935][ T5069] ? dbAllocCtl+0x7b0/0x7b0
[ 53.486416][ T5069] ? preempt_count_sub+0x160/0x160
[ 53.491528][ T5069] dbAlloc+0x415/0xaa0
[ 53.495583][ T5069] ? kasan_set_track+0x25/0x30
[ 53.500338][ T5069] dtSplitUp+0x3f3/0x5850
[ 53.504860][ T5069] ? module_enable_x+0x90/0x160
[ 53.509739][ T5069] ? save_trace+0x4e/0xb30
[ 53.514142][ T5069] ? _find_first_zero_bit+0x94/0xb0
[ 53.519329][ T5069] ? add_lock_to_list+0x17d/0x380
[ 53.524343][ T5069] ? dtSplitRoot+0x1760/0x1760
[ 53.529091][ T5069] ? lockdep_unlock+0x11b/0x290
[ 53.533925][ T5069] ? __lock_acquire+0x1fc1/0x3b20
[ 53.538940][ T5069] ? lockdep_hardirqs_on_prepare+0x420/0x420
[ 53.544909][ T5069] ? lock_acquire+0x1ae/0x520
[ 53.549570][ T5069] ? find_held_lock+0x2d/0x110
[ 53.554318][ T5069] ? spin_bug+0x1d0/0x1d0
[ 53.558631][ T5069] dtInsert+0x872/0xb00
[ 53.562769][ T5069] ? dtSearch+0x2450/0x2450
[ 53.567263][ T5069] jfs_create+0x63c/0xb40
[ 53.571585][ T5069] ? jfs_mknod+0x9d0/0x9d0
[ 53.575999][ T5069] ? bpf_lsm_inode_permission+0x9/0x10
[ 53.581438][ T5069] ? security_inode_permission+0xd8/0x100
[ 53.587140][ T5069] ? inode_permission+0xdd/0x5e0
[ 53.592062][ T5069] ? bpf_lsm_inode_create+0x9/0x10
[ 53.597153][ T5069] ? jfs_mknod+0x9d0/0x9d0
[ 53.601557][ T5069] lookup_open.isra.0+0x1095/0x13b0
[ 53.606743][ T5069] ? try_lookup_one_len+0x1a0/0x1a0
[ 53.611924][ T5069] ? lock_sync+0x190/0x190
[ 53.616327][ T5069] ? preempt_count_sub+0x160/0x160
[ 53.621416][ T5069] ? mnt_get_write_access+0x20c/0x300
[ 53.626772][ T5069] path_openat+0x922/0x2c50
[ 53.631266][ T5069] ? path_lookupat+0x770/0x770
[ 53.636011][ T5069] ? lockdep_hardirqs_on_prepare+0x420/0x420
[ 53.641978][ T5069] do_filp_open+0x1de/0x430
[ 53.646464][ T5069] ? may_open_dev+0xf0/0xf0
[ 53.650950][ T5069] ? find_held_lock+0x2d/0x110
[ 53.655701][ T5069] ? _raw_spin_unlock+0x28/0x40
[ 53.660532][ T5069] ? alloc_fd+0x2da/0x6c0
[ 53.664841][ T5069] do_sys_openat2+0x176/0x1e0
[ 53.669505][ T5069] ? build_open_flags+0x690/0x690
[ 53.674510][ T5069] ? reacquire_held_locks+0x4c0/0x4c0
[ 53.679873][ T5069] __x64_sys_open+0x154/0x1e0
[ 53.684620][ T5069] ? do_sys_open+0x160/0x160
[ 53.689192][ T5069] ? ptrace_notify+0xf4/0x130
[ 53.693851][ T5069] ? syscall_trace_enter.constprop.0+0xaf/0x1e0
[ 53.700073][ T5069] do_syscall_64+0x40/0x110
[ 53.704557][ T5069] entry_SYSCALL_64_after_hwframe+0x63/0x6b
[ 53.710429][ T5069] RIP: 0033:0x7f8a2fe0e9b9
[ 53.714822][ T5069] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 53.734413][ T5069] RSP: 002b:00007fffb50651e8 EFLAGS: 00000246 ORIG_RAX: 0000000000000002
[ 53.742806][ T5069] RAX: ffffffffffffffda RBX: 00007fffb50653c8 RCX: 00007f8a2fe0e9b9
[ 53.750760][ T5069] RDX: 0000000000000000 RSI: 0000000000000040 RDI: 0000000020000400
[ 53.758711][ T5069] RBP: 00007f8a2fe87610 R08: 00000000000060cc R09: 0000000000000000
[ 53.766664][ T5069] R10: 00007fffb50650b0 R11: 0000000000000246 R12: 0000000000000001
[ 53.774615][ T5069] R13: 00007fffb50653b8 R14: 0000000000000001 R15: 0000000000000001
[ 53.782578][ T5069]
[ 53.785807][ T5069] ================================================================================
[ 53.795459][ T5069] Kernel panic - not syncing: UBSAN: panic_on_warn set ...
[ 53.802656][ T5069] CPU: 0 PID: 5069 Comm: syz-executor492 Not tainted 6.7.0-rc6-syzkaller #0
[ 53.811323][ T5069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023
[ 53.821369][ T5069] Call Trace:
[ 53.824640][ T5069]
[ 53.827562][ T5069] dump_stack_lvl+0xd9/0x1b0
[ 53.832152][ T5069] panic+0x6dc/0x790
[ 53.836041][ T5069] ? mark_held_locks+0x9f/0xe0
[ 53.840805][ T5069] ? panic_smp_self_stop+0xa0/0xa0
[ 53.845918][ T5069] ? kmsg_dump_get_line+0x350/0x350
[ 53.851120][ T5069] ? check_panic_on_warn+0x1f/0xb0
[ 53.856228][ T5069] check_panic_on_warn+0xab/0xb0
[ 53.861165][ T5069] __ubsan_handle_shift_out_of_bounds+0x2ce/0x480
[ 53.867584][ T5069] dbSplit.cold+0x19/0x1e
[ 53.871916][ T5069] dbAllocBits+0x146/0x630
[ 53.876331][ T5069] dbAllocDmap+0x5c/0x100
[ 53.880653][ T5069] dbAllocDmapLev+0x17a/0x2f0
[ 53.885321][ T5069] ? dbAllocNext+0x410/0x410
[ 53.889921][ T5069] ? folio_unlock+0x81/0xd0
[ 53.894462][ T5069] ? __get_metapage+0x522/0x1170
[ 53.899413][ T5069] dbAllocCtl+0x12c/0x7b0
[ 53.903751][ T5069] ? up_write+0x510/0x510
[ 53.908075][ T5069] dbAllocAG+0x8c5/0xd20
[ 53.912308][ T5069] ? lock_sync+0x190/0x190
[ 53.916726][ T5069] ? dbAllocCtl+0x7b0/0x7b0
[ 53.921222][ T5069] ? preempt_count_sub+0x160/0x160
[ 53.926330][ T5069] dbAlloc+0x415/0xaa0
[ 53.930395][ T5069] ? kasan_set_track+0x25/0x30
[ 53.935257][ T5069] dtSplitUp+0x3f3/0x5850
[ 53.939585][ T5069] ? module_enable_x+0x90/0x160
[ 53.944439][ T5069] ? save_trace+0x4e/0xb30
[ 53.948865][ T5069] ? _find_first_zero_bit+0x94/0xb0
[ 53.954067][ T5069] ? add_lock_to_list+0x17d/0x380
[ 53.959093][ T5069] ? dtSplitRoot+0x1760/0x1760
[ 53.963845][ T5069] ? lockdep_unlock+0x11b/0x290
[ 53.968692][ T5069] ? __lock_acquire+0x1fc1/0x3b20
[ 53.973722][ T5069] ? lockdep_hardirqs_on_prepare+0x420/0x420
[ 53.979707][ T5069] ? lock_acquire+0x1ae/0x520
[ 53.984385][ T5069] ? find_held_lock+0x2d/0x110
[ 53.989152][ T5069] ? spin_bug+0x1d0/0x1d0
[ 53.993480][ T5069] dtInsert+0x872/0xb00
[ 53.997628][ T5069] ? dtSearch+0x2450/0x2450
[ 54.002145][ T5069] jfs_create+0x63c/0xb40
[ 54.006486][ T5069] ? jfs_mknod+0x9d0/0x9d0
[ 54.010920][ T5069] ? bpf_lsm_inode_permission+0x9/0x10
[ 54.016368][ T5069] ? security_inode_permission+0xd8/0x100
[ 54.022097][ T5069] ? inode_permission+0xdd/0x5e0
[ 54.027037][ T5069] ? bpf_lsm_inode_create+0x9/0x10
[ 54.032146][ T5069] ? jfs_mknod+0x9d0/0x9d0
[ 54.036560][ T5069] lookup_open.isra.0+0x1095/0x13b0
[ 54.041763][ T5069] ? try_lookup_one_len+0x1a0/0x1a0
[ 54.046980][ T5069] ? lock_sync+0x190/0x190
[ 54.051412][ T5069] ? preempt_count_sub+0x160/0x160
[ 54.056518][ T5069] ? mnt_get_write_access+0x20c/0x300
[ 54.061887][ T5069] path_openat+0x922/0x2c50
[ 54.066394][ T5069] ? path_lookupat+0x770/0x770
[ 54.071150][ T5069] ? lockdep_hardirqs_on_prepare+0x420/0x420
[ 54.077139][ T5069] do_filp_open+0x1de/0x430
[ 54.081681][ T5069] ? may_open_dev+0xf0/0xf0
[ 54.086182][ T5069] ? find_held_lock+0x2d/0x110
[ 54.090958][ T5069] ? _raw_spin_unlock+0x28/0x40
[ 54.095805][ T5069] ? alloc_fd+0x2da/0x6c0
[ 54.100131][ T5069] do_sys_openat2+0x176/0x1e0
[ 54.104805][ T5069] ? build_open_flags+0x690/0x690
[ 54.109824][ T5069] ? reacquire_held_locks+0x4c0/0x4c0
[ 54.115202][ T5069] __x64_sys_open+0x154/0x1e0
[ 54.119876][ T5069] ? do_sys_open+0x160/0x160
[ 54.124462][ T5069] ? ptrace_notify+0xf4/0x130
[ 54.129133][ T5069] ? syscall_trace_enter.constprop.0+0xaf/0x1e0
[ 54.135380][ T5069] do_syscall_64+0x40/0x110
[ 54.139892][ T5069] entry_SYSCALL_64_after_hwframe+0x63/0x6b
[ 54.145797][ T5069] RIP: 0033:0x7f8a2fe0e9b9
[ 54.150205][ T5069] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 54.169810][ T5069] RSP: 002b:00007fffb50651e8 EFLAGS: 00000246 ORIG_RAX: 0000000000000002
[ 54.178222][ T5069] RAX: ffffffffffffffda RBX: 00007fffb50653c8 RCX: 00007f8a2fe0e9b9
[ 54.186191][ T5069] RDX: 0000000000000000 RSI: 0000000000000040 RDI: 0000000020000400
[ 54.194157][ T5069] RBP: 00007f8a2fe87610 R08: 00000000000060cc R09: 0000000000000000
[ 54.202122][ T5069] R10: 00007fffb50650b0 R11: 0000000000000246 R12: 0000000000000001
[ 54.210083][ T5069] R13: 00007fffb50653b8 R14: 0000000000000001 R15: 0000000000000001
[ 54.218052][ T5069]
[ 54.221309][ T5069] Kernel Offset: disabled
[ 54.225735][ T5069] Rebooting in 86400 seconds..