./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1897680110 <...> Warning: Permanently added '10.128.0.191' (ED25519) to the list of known hosts. execve("./syz-executor1897680110", ["./syz-executor1897680110"], 0x7ffc384516a0 /* 10 vars */) = 0 brk(NULL) = 0x55555d2f2000 brk(0x55555d2f2d00) = 0x55555d2f2d00 arch_prctl(ARCH_SET_FS, 0x55555d2f2380) = 0 set_tid_address(0x55555d2f2650) = 5074 set_robust_list(0x55555d2f2660, 24) = 0 rseq(0x55555d2f2ca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor1897680110", 4096) = 28 getrandom("\x2a\xe0\xd8\xc6\xb7\x17\x36\x10", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x55555d2f2d00 brk(0x55555d313d00) = 0x55555d313d00 brk(0x55555d314000) = 0x55555d314000 mprotect(0x7ff083a57000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 memfd_create("syzkaller", 0) = 3 mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff07b400000 write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 munmap(0x7ff07b400000, 138412032) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 ioctl(4, LOOP_SET_FD, 3) = 0 close(3) = 0 close(4) = 0 mkdir("./file1", 0777) = 0 mount("/dev/loop0", "./file1", "jfs", MS_NOSUID|MS_NOATIME|MS_LAZYTIME, "") = 0 openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 chdir("./file1") = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) syzkaller login: [ 73.412256][ T5074] loop0: detected capacity change from 0 to 32768 open_tree(AT_FDCWD, "", OPEN_TREE_CLOEXEC|AT_EMPTY_PATH) = 4 [ 73.476807][ T5074] ------------[ cut here ]------------ [ 73.482460][ T5074] UBSAN: shift-out-of-bounds in fs/jfs/jfs_dmap.c:2639:11 [ 73.489640][ T5074] shift exponent 80 is too large for 32-bit type 'int' [ 73.496490][ T5074] CPU: 1 PID: 5074 Comm: syz-executor189 Not tainted 6.9.0-rc4-syzkaller-00173-g3cdb45594619 #0 [ 73.506928][ T5074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 73.517008][ T5074] Call Trace: [ 73.520395][ T5074] [ 73.523342][ T5074] dump_stack_lvl+0x241/0x360 [ 73.528058][ T5074] ? __pfx_dump_stack_lvl+0x10/0x10 [ 73.533275][ T5074] ? __pfx__printk+0x10/0x10 [ 73.537887][ T5074] __ubsan_handle_shift_out_of_bounds+0x3c8/0x420 [ 73.544335][ T5074] ? mempool_alloc+0x197/0x5a0 [ 73.549143][ T5074] dbSplit+0x21a/0x220 [ 73.553225][ T5074] dbAllocBits+0x4e5/0x9a0 [ 73.557657][ T5074] ? dbFindBits+0x132/0x1d0 [ 73.562163][ T5074] dbAllocDmapLev+0x250/0x4a0 [ 73.566856][ T5074] ? __pfx_dbAllocDmapLev+0x10/0x10 [ 73.572072][ T5074] dbAllocCtl+0x113/0x920 [ 73.576412][ T5074] dbAllocAG+0x28f/0x10b0 [ 73.580759][ T5074] ? __down_write_common+0x162/0x200 [ 73.586072][ T5074] ? __pfx_dbAllocAG+0x10/0x10 [ 73.590853][ T5074] dbAlloc+0x658/0xca0 [ 73.594936][ T5074] ? __pfx_dbAlloc+0x10/0x10 [ 73.599535][ T5074] ? __kasan_kmalloc+0x98/0xb0 [ 73.604309][ T5074] ? dtInsert+0x885/0x6b00 [ 73.608729][ T5074] ? kmalloc_trace+0x1db/0x360 [ 73.613503][ T5074] ? dtInsert+0x885/0x6b00 [ 73.617924][ T5074] dtInsert+0xda7/0x6b00 [ 73.622174][ T5074] ? dtSearch+0x1d59/0x2520 [ 73.626674][ T5074] ? vfs_symlink+0x137/0x2a0 [ 73.631284][ T5074] ? do_syscall_64+0xf5/0x240 [ 73.635966][ T5074] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.642049][ T5074] ? mark_lock+0x9a/0x350 [ 73.646379][ T5074] ? __pfx_dtInsert+0x10/0x10 [ 73.651078][ T5074] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 73.657064][ T5074] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 73.663396][ T5074] ? kasan_quarantine_put+0xdc/0x230 [ 73.668685][ T5074] ? lockdep_hardirqs_on+0x99/0x150 [ 73.673891][ T5074] ? dtSearch+0x1d59/0x2520 [ 73.678393][ T5074] ? kfree+0x153/0x3a0 [ 73.682500][ T5074] jfs_symlink+0x824/0x10d0 [ 73.687019][ T5074] ? __pfx_jfs_symlink+0x10/0x10 [ 73.691983][ T5074] ? make_vfsuid+0x46/0x90 [ 73.696413][ T5074] ? bpf_lsm_inode_symlink+0x9/0x10 [ 73.701632][ T5074] ? security_inode_symlink+0xb9/0x100 [ 73.707112][ T5074] vfs_symlink+0x137/0x2a0 [ 73.711536][ T5074] do_symlinkat+0x222/0x3a0 [ 73.716040][ T5074] ? __check_object_size+0x4bc/0xa00 [ 73.721337][ T5074] ? __pfx_do_symlinkat+0x10/0x10 [ 73.726363][ T5074] ? getname_flags+0x1fe/0x4f0 [ 73.731138][ T5074] __x64_sys_symlinkat+0x99/0xb0 [ 73.736078][ T5074] do_syscall_64+0xf5/0x240 [ 73.740588][ T5074] ? clear_bhb_loop+0x35/0x90 [ 73.745270][ T5074] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.751163][ T5074] RIP: 0033:0x7ff0839de6b9 [ 73.755576][ T5074] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 73.775608][ T5074] RSP: 002b:00007ffe20934b08 EFLAGS: 00000246 ORIG_RAX: 000000000000010a [ 73.784023][ T5074] RAX: ffffffffffffffda RBX: 00007ffe20934cd8 RCX: 00007ff0839de6b9 [ 73.791993][ T5074] RDX: 0000000020000340 RSI: 0000000000000004 RDI: 0000000020000440 [ 73.799967][ T5074] RBP: 00007ff083a57610 R08: 0000000000000000 R09: 00007ffe20934cd8 [ 73.807940][ T5074] R10: 00000000000060f8 R11: 0000000000000246 R12: 0000000000000001 [ 73.815923][ T5074] R13: 00007ffe20934cc8 R14: 0000000000000001 R15: 0000000000000001 [ 73.823903][ T5074] [ 73.827197][ T5074] ---[ end trace ]--- [ 73.831198][ T5074] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 73.838401][ T5074] CPU: 1 PID: 5074 Comm: syz-executor189 Not tainted 6.9.0-rc4-syzkaller-00173-g3cdb45594619 #0 [ 73.848817][ T5074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 73.858963][ T5074] Call Trace: [ 73.862248][ T5074] [ 73.865183][ T5074] dump_stack_lvl+0x241/0x360 [ 73.869887][ T5074] ? __pfx_dump_stack_lvl+0x10/0x10 [ 73.875097][ T5074] ? __pfx__printk+0x10/0x10 [ 73.879695][ T5074] ? vprintk_emit+0x631/0x770 [ 73.884390][ T5074] ? vscnprintf+0x5d/0x90 [ 73.888730][ T5074] panic+0x349/0x860 [ 73.892642][ T5074] ? check_panic_on_warn+0x21/0xb0 [ 73.897768][ T5074] ? __pfx_panic+0x10/0x10 [ 73.902193][ T5074] ? _printk+0xd5/0x120 [ 73.906364][ T5074] ? __pfx__printk+0x10/0x10 [ 73.910971][ T5074] check_panic_on_warn+0x86/0xb0 [ 73.915919][ T5074] __ubsan_handle_shift_out_of_bounds+0x3e7/0x420 [ 73.922347][ T5074] ? mempool_alloc+0x197/0x5a0 [ 73.927144][ T5074] dbSplit+0x21a/0x220 [ 73.931221][ T5074] dbAllocBits+0x4e5/0x9a0 [ 73.935654][ T5074] ? dbFindBits+0x132/0x1d0 [ 73.940166][ T5074] dbAllocDmapLev+0x250/0x4a0 [ 73.944864][ T5074] ? __pfx_dbAllocDmapLev+0x10/0x10 [ 73.950084][ T5074] dbAllocCtl+0x113/0x920 [ 73.954429][ T5074] dbAllocAG+0x28f/0x10b0 [ 73.958783][ T5074] ? __down_write_common+0x162/0x200 [ 73.964082][ T5074] ? __pfx_dbAllocAG+0x10/0x10 [ 73.968864][ T5074] dbAlloc+0x658/0xca0 [ 73.972954][ T5074] ? __pfx_dbAlloc+0x10/0x10 [ 73.977556][ T5074] ? __kasan_kmalloc+0x98/0xb0 [ 73.982330][ T5074] ? dtInsert+0x885/0x6b00 [ 73.986751][ T5074] ? kmalloc_trace+0x1db/0x360 [ 73.991530][ T5074] ? dtInsert+0x885/0x6b00 [ 73.995947][ T5074] dtInsert+0xda7/0x6b00 [ 74.000197][ T5074] ? dtSearch+0x1d59/0x2520 [ 74.004704][ T5074] ? vfs_symlink+0x137/0x2a0 [ 74.009327][ T5074] ? do_syscall_64+0xf5/0x240 [ 74.014016][ T5074] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.020125][ T5074] ? mark_lock+0x9a/0x350 [ 74.024460][ T5074] ? __pfx_dtInsert+0x10/0x10 [ 74.029145][ T5074] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 74.035319][ T5074] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 74.041745][ T5074] ? kasan_quarantine_put+0xdc/0x230 [ 74.047039][ T5074] ? lockdep_hardirqs_on+0x99/0x150 [ 74.052254][ T5074] ? dtSearch+0x1d59/0x2520 [ 74.056762][ T5074] ? kfree+0x153/0x3a0 [ 74.060868][ T5074] jfs_symlink+0x824/0x10d0 [ 74.065392][ T5074] ? __pfx_jfs_symlink+0x10/0x10 [ 74.070366][ T5074] ? make_vfsuid+0x46/0x90 [ 74.074806][ T5074] ? bpf_lsm_inode_symlink+0x9/0x10 [ 74.080011][ T5074] ? security_inode_symlink+0xb9/0x100 [ 74.085478][ T5074] vfs_symlink+0x137/0x2a0 [ 74.089910][ T5074] do_symlinkat+0x222/0x3a0 [ 74.094430][ T5074] ? __check_object_size+0x4bc/0xa00 [ 74.099736][ T5074] ? __pfx_do_symlinkat+0x10/0x10 [ 74.104775][ T5074] ? getname_flags+0x1fe/0x4f0 [ 74.109558][ T5074] __x64_sys_symlinkat+0x99/0xb0 [ 74.114511][ T5074] do_syscall_64+0xf5/0x240 [ 74.119034][ T5074] ? clear_bhb_loop+0x35/0x90 [ 74.123722][ T5074] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.129632][ T5074] RIP: 0033:0x7ff0839de6b9 [ 74.134049][ T5074] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 74.153742][ T5074] RSP: 002b:00007ffe20934b08 EFLAGS: 00000246 ORIG_RAX: 000000000000010a [ 74.162162][ T5074] RAX: ffffffffffffffda RBX: 00007ffe20934cd8 RCX: 00007ff0839de6b9 [ 74.170142][ T5074] RDX: 0000000020000340 RSI: 0000000000000004 RDI: 0000000020000440 [ 74.178118][ T5074] RBP: 00007ff083a57610 R08: 0000000000000000 R09: 00007ffe20934cd8 [ 74.186092][ T5074] R10: 00000000000060f8 R11: 0000000000000246 R12: 0000000000000001 [ 74.194096][ T5074] R13: 00007ffe20934cc8 R14: 0000000000000001 R15: 0000000000000001 [ 74.202088][ T5074] [ 74.205450][ T5074] Kernel Offset: disabled [ 74.209831][ T5074] Rebooting in 86400 seconds..