./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3736680171
<...>
Warning: Permanently added '10.128.0.127' (ECDSA) to the list of known hosts.
execve("./syz-executor3736680171", ["./syz-executor3736680171"], 0x7ffc9b369970 /* 10 vars */) = 0
brk(NULL) = 0x555556b51000
brk(0x555556b51c40) = 0x555556b51c40
arch_prctl(ARCH_SET_FS, 0x555556b51300) = 0
uname({sysname="Linux", nodename="syzkaller", ...}) = 0
readlink("/proc/self/exe", "/root/syz-executor3736680171", 4096) = 28
brk(0x555556b72c40) = 0x555556b72c40
brk(0x555556b73000) = 0x555556b73000
mprotect(0x7f7caadfe000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
memfd_create("syzkaller", 0) = 3
ftruncate(3, 135266304) = 0
pwrite64(3, "\x01\x16\x19\x70\x00\x00\x00\x01\x00\x03\x00\x00\x00\x00\x00\x00\x00\x00\x00\x64\x00\x00\x00\x00\x00\x00\x07\x09\x00\x00\x07\x6c\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x0f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x08\x19\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0c\x00\x00\x00\x00\x00\x00\x09\x25\x6c\x6f\x63\x6b"..., 101, 65536) = 101
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
ioctl(4, LOOP_SET_FD, 3) = 0
mkdir("./file0", 0777) = 0
syzkaller login: [ 35.093139][ T3612] loop0: detected capacity change from 0 to 264192
[ 35.104438][ T3612] gfs2: fsid=loop0: Trying to join cluster "lock_nolock", "loop0"
[ 35.112337][ T3612] gfs2: fsid=loop0: Now mounting FS (format 1801)...
[ 35.119482][ T3612] ================================================================================
[ 35.128823][ T3612] UBSAN: shift-out-of-bounds in fs/gfs2/meta_io.c:128:16
[ 35.136073][ T3612] shift exponent 4294967293 is too large for 64-bit type 'u64' (aka 'unsigned long long')
[ 35.145984][ T3612] CPU: 1 PID: 3612 Comm: syz-executor373 Not tainted 6.0.0-syzkaller-09589-g55be6084c8e0 #0
[ 35.156044][ T3612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022
[ 35.166093][ T3612] Call Trace:
[ 35.169364][ T3612]
[ 35.172284][ T3612] dump_stack_lvl+0x1e3/0x2cb
[ 35.176961][ T3612] ? io_alloc_page_table+0x110/0x110
[ 35.182236][ T3612] ? panic+0x766/0x766
[ 35.186294][ T3612] ? sched_clock_cpu+0x71/0x2b0
[ 35.191132][ T3612] ? print_irqtrace_events+0x220/0x220
[ 35.196577][ T3612] ? do_raw_spin_unlock+0x134/0x8a0
[ 35.201771][ T3612] __ubsan_handle_shift_out_of_bounds+0x3a6/0x420
[ 35.208195][ T3612] gfs2_getbuf+0x759/0x7d0
[ 35.212614][ T3612] gfs2_meta_read+0x16a/0x910
[ 35.217284][ T3612] ? __bpf_trace_rcu_stall_warning+0x10/0x10
[ 35.223268][ T3612] ? trace_lock_release+0x7b/0x1a0
[ 35.228380][ T3612] ? gfs2_meta_new+0x150/0x150
[ 35.233145][ T3612] ? trace_lock_acquire+0x7f/0x1d0
[ 35.238251][ T3612] gfs2_meta_buffer+0x195/0x400
[ 35.243106][ T3612] ? gfs2_journal_wipe+0x9a0/0x9a0
[ 35.248221][ T3612] ? do_raw_spin_lock+0x148/0x360
[ 35.253246][ T3612] ? __lock_acquire+0x1f60/0x1f60
[ 35.258266][ T3612] gfs2_inode_refresh+0xd6/0xdc0
[ 35.263198][ T3612] ? do_raw_spin_unlock+0x134/0x8a0
[ 35.268390][ T3612] ? gfs2_inode_metasync+0xf0/0xf0
[ 35.273494][ T3612] ? _raw_spin_unlock+0x24/0x40
[ 35.278339][ T3612] gfs2_instantiate+0x15e/0x220
[ 35.283176][ T3612] gfs2_glock_wait+0x1d9/0x2a0
[ 35.287932][ T3612] gfs2_lookupi+0x411/0x5f0
[ 35.292424][ T3612] ? d_make_root+0x46/0xd0
[ 35.296826][ T3612] ? gfs2_lookup_simple+0x170/0x170
[ 35.302012][ T3612] ? rcu_read_lock_sched_held+0x5f/0x130
[ 35.307635][ T3612] ? gfs2_lookup_simple+0xec/0x170
[ 35.312736][ T3612] ? rcu_read_lock_sched_held+0x5f/0x130
[ 35.318358][ T3612] ? crc32_le_base+0x7a0/0xd00
[ 35.323117][ T3612] ? __bpf_trace_rcu_stall_warning+0x10/0x10
[ 35.329181][ T3612] ? rcu_read_lock_sched_held+0x5f/0x130
[ 35.334812][ T3612] gfs2_lookup_simple+0xec/0x170
[ 35.339743][ T3612] ? trace_lock_release+0x7b/0x1a0
[ 35.344851][ T3612] ? gfs2_lookup_by_inum+0xe0/0xe0
[ 35.349966][ T3612] ? format_decode+0x43e/0x1a50
[ 35.354827][ T3612] init_journal+0x1c3/0x2310
[ 35.359415][ T3612] ? string+0x289/0x2d0
[ 35.363568][ T3612] ? vsnprintf+0x1fa/0x1ce0
[ 35.368067][ T3612] ? memcpy+0x3c/0x60
[ 35.372050][ T3612] ? vsnprintf+0x1c02/0x1ce0
[ 35.376636][ T3612] ? _compound_head+0x130/0x130
[ 35.381487][ T3612] ? __ptr_to_hashval+0x330/0x330
[ 35.386505][ T3612] ? init_sb+0xb8b/0x12c0
[ 35.390824][ T3612] ? lockref_put_or_lock+0x6f/0xb0
[ 35.395931][ T3612] ? snprintf+0xd6/0x120
[ 35.400165][ T3612] ? vscnprintf+0x80/0x80
[ 35.404488][ T3612] init_inodes+0xdc/0x340
[ 35.408807][ T3612] gfs2_fill_super+0x1be3/0x2710
[ 35.413741][ T3612] ? gfs2_reconfigure+0xcf0/0xcf0
[ 35.418754][ T3612] ? __ptr_to_hashval+0x330/0x330
[ 35.423861][ T3612] ? init_locking+0xbd/0x220
[ 35.428441][ T3612] ? set_blocksize+0x1d5/0x360
[ 35.433198][ T3612] get_tree_bdev+0x400/0x620
[ 35.437780][ T3612] ? gfs2_reconfigure+0xcf0/0xcf0
[ 35.442791][ T3612] gfs2_get_tree+0x50/0x210
[ 35.447282][ T3612] ? bpf_lsm_capable+0x5/0x10
[ 35.451952][ T3612] vfs_get_tree+0x88/0x270
[ 35.456354][ T3612] do_new_mount+0x289/0xad0
[ 35.460848][ T3612] ? do_move_mount_old+0x160/0x160
[ 35.465948][ T3612] ? user_path_at_empty+0x149/0x1a0
[ 35.471132][ T3612] __se_sys_mount+0x2e3/0x3d0
[ 35.475802][ T3612] ? __x64_sys_mount+0xc0/0xc0
[ 35.480557][ T3612] ? __x64_sys_mount+0x1c/0xc0
[ 35.485307][ T3612] do_syscall_64+0x2b/0x70
[ 35.489714][ T3612] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 35.495599][ T3612] RIP: 0033:0x7f7caad9342a
[ 35.500006][ T3612] Code: 83 c4 08 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 35.519596][ T3612] RSP: 002b:00007ffc97eb3c68 EFLAGS: 00000282 ORIG_RAX: 00000000000000a5
[ 35.527998][ T3612] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f7caad9342a
[ 35.535962][ T3612] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007ffc97eb3c80
[ 35.543923][ T3612] RBP: 00007ffc97eb3c80 R08: 00007ffc97eb3cc0 R09: 0000555556b512c0
[ 35.551878][ T3612] R10: 0000000000000008 R11: 0000000000000282 R12: 0000000000000004
[ 35.559835][ T3612] R13: 00007ffc97eb3cc0 R14: 0000000000000001 R15: 0000000020000218
[ 35.567798][ T3612]
[ 35.571161][ T3612] ================================================================================
[ 35.580498][ T3612] Kernel panic - not syncing: panic_on_warn set ...
[ 35.587075][ T3612] CPU: 0 PID: 3612 Comm: syz-executor373 Not tainted 6.0.0-syzkaller-09589-g55be6084c8e0 #0
[ 35.597113][ T3612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022
[ 35.607144][ T3612] Call Trace:
[ 35.610404][ T3612]
[ 35.613314][ T3612] dump_stack_lvl+0x1e3/0x2cb
[ 35.617973][ T3612] ? io_alloc_page_table+0x110/0x110
[ 35.623234][ T3612] ? panic+0x766/0x766
[ 35.627284][ T3612] ? preempt_schedule_thunk+0x16/0x18
[ 35.632638][ T3612] ? vscnprintf+0x59/0x80
[ 35.636951][ T3612] panic+0x316/0x766
[ 35.640828][ T3612] ? __ubsan_handle_shift_out_of_bounds+0x3c9/0x420
[ 35.647396][ T3612] ? fb_is_primary_device+0xcc/0xcc
[ 35.652571][ T3612] ? panic+0x766/0x766
[ 35.656618][ T3612] ? sched_clock_cpu+0x71/0x2b0
[ 35.661446][ T3612] ? print_irqtrace_events+0x220/0x220
[ 35.666884][ T3612] ? do_raw_spin_unlock+0x134/0x8a0
[ 35.672063][ T3612] __ubsan_handle_shift_out_of_bounds+0x418/0x420
[ 35.678463][ T3612] gfs2_getbuf+0x759/0x7d0
[ 35.682861][ T3612] gfs2_meta_read+0x16a/0x910
[ 35.687526][ T3612] ? __bpf_trace_rcu_stall_warning+0x10/0x10
[ 35.693499][ T3612] ? trace_lock_release+0x7b/0x1a0
[ 35.698601][ T3612] ? gfs2_meta_new+0x150/0x150
[ 35.703358][ T3612] ? trace_lock_acquire+0x7f/0x1d0
[ 35.708459][ T3612] gfs2_meta_buffer+0x195/0x400
[ 35.713306][ T3612] ? gfs2_journal_wipe+0x9a0/0x9a0
[ 35.718411][ T3612] ? do_raw_spin_lock+0x148/0x360
[ 35.723425][ T3612] ? __lock_acquire+0x1f60/0x1f60
[ 35.728438][ T3612] gfs2_inode_refresh+0xd6/0xdc0
[ 35.733366][ T3612] ? do_raw_spin_unlock+0x134/0x8a0
[ 35.738555][ T3612] ? gfs2_inode_metasync+0xf0/0xf0
[ 35.743657][ T3612] ? _raw_spin_unlock+0x24/0x40
[ 35.748499][ T3612] gfs2_instantiate+0x15e/0x220
[ 35.753341][ T3612] gfs2_glock_wait+0x1d9/0x2a0
[ 35.758091][ T3612] gfs2_lookupi+0x411/0x5f0
[ 35.762583][ T3612] ? d_make_root+0x46/0xd0
[ 35.766984][ T3612] ? gfs2_lookup_simple+0x170/0x170
[ 35.772172][ T3612] ? rcu_read_lock_sched_held+0x5f/0x130
[ 35.777793][ T3612] ? gfs2_lookup_simple+0xec/0x170
[ 35.782892][ T3612] ? rcu_read_lock_sched_held+0x5f/0x130
[ 35.788512][ T3612] ? crc32_le_base+0x7a0/0xd00
[ 35.793269][ T3612] ? __bpf_trace_rcu_stall_warning+0x10/0x10
[ 35.799235][ T3612] ? rcu_read_lock_sched_held+0x5f/0x130
[ 35.804857][ T3612] gfs2_lookup_simple+0xec/0x170
[ 35.809781][ T3612] ? trace_lock_release+0x7b/0x1a0
[ 35.814881][ T3612] ? gfs2_lookup_by_inum+0xe0/0xe0
[ 35.819979][ T3612] ? format_decode+0x43e/0x1a50
[ 35.824825][ T3612] init_journal+0x1c3/0x2310
[ 35.829405][ T3612] ? string+0x289/0x2d0
[ 35.833549][ T3612] ? vsnprintf+0x1fa/0x1ce0
[ 35.838043][ T3612] ? memcpy+0x3c/0x60
[ 35.842018][ T3612] ? vsnprintf+0x1c02/0x1ce0
[ 35.846597][ T3612] ? _compound_head+0x130/0x130
[ 35.851434][ T3612] ? __ptr_to_hashval+0x330/0x330
[ 35.856449][ T3612] ? init_sb+0xb8b/0x12c0
[ 35.860764][ T3612] ? lockref_put_or_lock+0x6f/0xb0
[ 35.865881][ T3612] ? snprintf+0xd6/0x120
[ 35.870114][ T3612] ? vscnprintf+0x80/0x80
[ 35.874436][ T3612] init_inodes+0xdc/0x340
[ 35.878751][ T3612] gfs2_fill_super+0x1be3/0x2710
[ 35.883684][ T3612] ? gfs2_reconfigure+0xcf0/0xcf0
[ 35.888699][ T3612] ? __ptr_to_hashval+0x330/0x330
[ 35.893725][ T3612] ? init_locking+0xbd/0x220
[ 35.898305][ T3612] ? set_blocksize+0x1d5/0x360
[ 35.903062][ T3612] get_tree_bdev+0x400/0x620
[ 35.907641][ T3612] ? gfs2_reconfigure+0xcf0/0xcf0
[ 35.912743][ T3612] gfs2_get_tree+0x50/0x210
[ 35.917231][ T3612] ? bpf_lsm_capable+0x5/0x10
[ 35.921901][ T3612] vfs_get_tree+0x88/0x270
[ 35.926305][ T3612] do_new_mount+0x289/0xad0
[ 35.930797][ T3612] ? do_move_mount_old+0x160/0x160
[ 35.935901][ T3612] ? user_path_at_empty+0x149/0x1a0
[ 35.941093][ T3612] __se_sys_mount+0x2e3/0x3d0
[ 35.945759][ T3612] ? __x64_sys_mount+0xc0/0xc0
[ 35.950511][ T3612] ? __x64_sys_mount+0x1c/0xc0
[ 35.955261][ T3612] do_syscall_64+0x2b/0x70
[ 35.959665][ T3612] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 35.965548][ T3612] RIP: 0033:0x7f7caad9342a
[ 35.969957][ T3612] Code: 83 c4 08 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 35.989576][ T3612] RSP: 002b:00007ffc97eb3c68 EFLAGS: 00000282 ORIG_RAX: 00000000000000a5
[ 35.997976][ T3612] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f7caad9342a
[ 36.005940][ T3612] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007ffc97eb3c80
[ 36.013895][ T3612] RBP: 00007ffc97eb3c80 R08: 00007ffc97eb3cc0 R09: 0000555556b512c0
[ 36.021853][ T3612] R10: 0000000000000008 R11: 0000000000000282 R12: 0000000000000004
[ 36.029809][ T3612] R13: 00007ffc97eb3cc0 R14: 0000000000000001 R15: 0000000020000218
[ 36.037772][ T3612]
[ 36.040931][ T3612] Kernel Offset: disabled
[ 36.045243][ T3612] Rebooting in 86400 seconds..