./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2356881333 <...> Warning: Permanently added '10.128.1.27' (ED25519) to the list of known hosts. execve("./syz-executor2356881333", ["./syz-executor2356881333"], 0x7ffdd9ec90b0 /* 10 vars */) = 0 brk(NULL) = 0x555570126000 brk(0x555570126d00) = 0x555570126d00 arch_prctl(ARCH_SET_FS, 0x555570126380) = 0 set_tid_address(0x555570126650) = 5076 set_robust_list(0x555570126660, 24) = 0 rseq(0x555570126ca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor2356881333", 4096) = 28 getrandom("\x85\x66\x5a\xc6\x03\xf4\xae\x9b", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555570126d00 brk(0x555570147d00) = 0x555570147d00 brk(0x555570148000) = 0x555570148000 mprotect(0x7f37c3819000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 memfd_create("syzkaller", 0) = 3 mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f37bb200000 write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 munmap(0x7f37bb200000, 138412032) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 ioctl(4, LOOP_SET_FD, 3) = 0 close(3) = 0 close(4) = 0 mkdir("./file1", 0777) = 0 [ 57.850838][ T5076] loop0: detected capacity change from 0 to 32768 mount("/dev/loop0", "./file1", "jfs", MS_NOSUID|MS_NOATIME|MS_LAZYTIME, "") = 0 openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 chdir("./file1") = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) open_tree(AT_FDCWD, "", OPEN_TREE_CLOEXEC|AT_EMPTY_PATH) = 4 [ 57.954267][ T5076] ------------[ cut here ]------------ [ 57.959884][ T5076] UBSAN: shift-out-of-bounds in fs/jfs/jfs_dmap.c:2639:11 [ 57.967064][ T5076] shift exponent 80 is too large for 32-bit type 'int' [ 57.973914][ T5076] CPU: 0 PID: 5076 Comm: syz-executor235 Not tainted 6.9.0-rc4-syzkaller-00173-g3cdb45594619 #0 [ 57.984305][ T5076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 57.994341][ T5076] Call Trace: [ 57.997603][ T5076] [ 58.000517][ T5076] dump_stack_lvl+0x241/0x360 [ 58.005198][ T5076] ? __pfx_dump_stack_lvl+0x10/0x10 [ 58.010379][ T5076] ? __pfx__printk+0x10/0x10 [ 58.014979][ T5076] __ubsan_handle_shift_out_of_bounds+0x3c8/0x420 [ 58.021419][ T5076] ? mempool_alloc+0x197/0x5a0 [ 58.026177][ T5076] dbSplit+0x21a/0x220 [ 58.030233][ T5076] dbAllocBits+0x4e5/0x9a0 [ 58.034638][ T5076] ? dbFindBits+0x132/0x1d0 [ 58.039140][ T5076] dbAllocDmapLev+0x250/0x4a0 [ 58.043808][ T5076] ? __pfx_dbAllocDmapLev+0x10/0x10 [ 58.048998][ T5076] dbAllocCtl+0x113/0x920 [ 58.053321][ T5076] dbAllocAG+0x28f/0x10b0 [ 58.057639][ T5076] ? __down_write_common+0x162/0x200 [ 58.062911][ T5076] ? __pfx_dbAllocAG+0x10/0x10 [ 58.067664][ T5076] dbAlloc+0x658/0xca0 [ 58.071724][ T5076] ? __pfx_dbAlloc+0x10/0x10 [ 58.076297][ T5076] ? __kasan_kmalloc+0x98/0xb0 [ 58.081046][ T5076] ? dtInsert+0x885/0x6b00 [ 58.085445][ T5076] ? kmalloc_trace+0x1db/0x360 [ 58.090198][ T5076] ? dtInsert+0x885/0x6b00 [ 58.094598][ T5076] dtInsert+0xda7/0x6b00 [ 58.098830][ T5076] ? dtSearch+0x1d59/0x2520 [ 58.103313][ T5076] ? vfs_symlink+0x137/0x2a0 [ 58.107888][ T5076] ? do_syscall_64+0xf5/0x240 [ 58.112550][ T5076] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.118612][ T5076] ? mark_lock+0x9a/0x350 [ 58.122925][ T5076] ? __pfx_dtInsert+0x10/0x10 [ 58.127583][ T5076] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 58.133549][ T5076] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 58.139864][ T5076] ? kasan_quarantine_put+0xdc/0x230 [ 58.145133][ T5076] ? lockdep_hardirqs_on+0x99/0x150 [ 58.150321][ T5076] ? dtSearch+0x1d59/0x2520 [ 58.154805][ T5076] ? kfree+0x153/0x3a0 [ 58.158883][ T5076] jfs_symlink+0x824/0x10d0 [ 58.163380][ T5076] ? __pfx_jfs_symlink+0x10/0x10 [ 58.168319][ T5076] ? make_vfsuid+0x46/0x90 [ 58.172726][ T5076] ? bpf_lsm_inode_symlink+0x9/0x10 [ 58.177907][ T5076] ? security_inode_symlink+0xb9/0x100 [ 58.183348][ T5076] vfs_symlink+0x137/0x2a0 [ 58.187751][ T5076] do_symlinkat+0x222/0x3a0 [ 58.192242][ T5076] ? __check_object_size+0x4bc/0xa00 [ 58.197520][ T5076] ? __pfx_do_symlinkat+0x10/0x10 [ 58.202536][ T5076] ? getname_flags+0x1fe/0x4f0 [ 58.207290][ T5076] __x64_sys_symlinkat+0x99/0xb0 [ 58.212230][ T5076] do_syscall_64+0xf5/0x240 [ 58.216722][ T5076] ? clear_bhb_loop+0x35/0x90 [ 58.221382][ T5076] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.227261][ T5076] RIP: 0033:0x7f37c37a06b9 [ 58.231659][ T5076] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 58.251247][ T5076] RSP: 002b:00007ffdaa14f3b8 EFLAGS: 00000246 ORIG_RAX: 000000000000010a [ 58.259658][ T5076] RAX: ffffffffffffffda RBX: 00007ffdaa14f588 RCX: 00007f37c37a06b9 [ 58.267614][ T5076] RDX: 0000000020000340 RSI: 0000000000000004 RDI: 0000000020000440 [ 58.275565][ T5076] RBP: 00007f37c3819610 R08: 0000000000000000 R09: 00007ffdaa14f588 [ 58.283520][ T5076] R10: 00000000000060f8 R11: 0000000000000246 R12: 0000000000000001 [ 58.291473][ T5076] R13: 00007ffdaa14f578 R14: 0000000000000001 R15: 0000000000000001 [ 58.299434][ T5076] [ 58.302643][ T5076] ---[ end trace ]--- [ 58.306809][ T5076] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 58.314005][ T5076] CPU: 0 PID: 5076 Comm: syz-executor235 Not tainted 6.9.0-rc4-syzkaller-00173-g3cdb45594619 #0 [ 58.324403][ T5076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 58.334446][ T5076] Call Trace: [ 58.337717][ T5076] [ 58.340641][ T5076] dump_stack_lvl+0x241/0x360 [ 58.345318][ T5076] ? __pfx_dump_stack_lvl+0x10/0x10 [ 58.350511][ T5076] ? __pfx__printk+0x10/0x10 [ 58.355094][ T5076] ? vprintk_emit+0x631/0x770 [ 58.359774][ T5076] ? vscnprintf+0x5d/0x90 [ 58.364095][ T5076] panic+0x349/0x860 [ 58.367990][ T5076] ? check_panic_on_warn+0x21/0xb0 [ 58.373097][ T5076] ? __pfx_panic+0x10/0x10 [ 58.377507][ T5076] ? _printk+0xd5/0x120 [ 58.381657][ T5076] ? __pfx__printk+0x10/0x10 [ 58.386246][ T5076] check_panic_on_warn+0x86/0xb0 [ 58.391179][ T5076] __ubsan_handle_shift_out_of_bounds+0x3e7/0x420 [ 58.397593][ T5076] ? mempool_alloc+0x197/0x5a0 [ 58.402360][ T5076] dbSplit+0x21a/0x220 [ 58.406424][ T5076] dbAllocBits+0x4e5/0x9a0 [ 58.410841][ T5076] ? dbFindBits+0x132/0x1d0 [ 58.415337][ T5076] dbAllocDmapLev+0x250/0x4a0 [ 58.420017][ T5076] ? __pfx_dbAllocDmapLev+0x10/0x10 [ 58.425222][ T5076] dbAllocCtl+0x113/0x920 [ 58.429550][ T5076] dbAllocAG+0x28f/0x10b0 [ 58.433886][ T5076] ? __down_write_common+0x162/0x200 [ 58.439168][ T5076] ? __pfx_dbAllocAG+0x10/0x10 [ 58.443933][ T5076] dbAlloc+0x658/0xca0 [ 58.448004][ T5076] ? __pfx_dbAlloc+0x10/0x10 [ 58.452594][ T5076] ? __kasan_kmalloc+0x98/0xb0 [ 58.457352][ T5076] ? dtInsert+0x885/0x6b00 [ 58.461755][ T5076] ? kmalloc_trace+0x1db/0x360 [ 58.466513][ T5076] ? dtInsert+0x885/0x6b00 [ 58.470923][ T5076] dtInsert+0xda7/0x6b00 [ 58.475162][ T5076] ? dtSearch+0x1d59/0x2520 [ 58.479655][ T5076] ? vfs_symlink+0x137/0x2a0 [ 58.484238][ T5076] ? do_syscall_64+0xf5/0x240 [ 58.488918][ T5076] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.494989][ T5076] ? mark_lock+0x9a/0x350 [ 58.499312][ T5076] ? __pfx_dtInsert+0x10/0x10 [ 58.503980][ T5076] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 58.509957][ T5076] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 58.516282][ T5076] ? kasan_quarantine_put+0xdc/0x230 [ 58.521562][ T5076] ? lockdep_hardirqs_on+0x99/0x150 [ 58.526757][ T5076] ? dtSearch+0x1d59/0x2520 [ 58.531248][ T5076] ? kfree+0x153/0x3a0 [ 58.535340][ T5076] jfs_symlink+0x824/0x10d0 [ 58.539846][ T5076] ? __pfx_jfs_symlink+0x10/0x10 [ 58.544794][ T5076] ? make_vfsuid+0x46/0x90 [ 58.549214][ T5076] ? bpf_lsm_inode_symlink+0x9/0x10 [ 58.554410][ T5076] ? security_inode_symlink+0xb9/0x100 [ 58.559862][ T5076] vfs_symlink+0x137/0x2a0 [ 58.564275][ T5076] do_symlinkat+0x222/0x3a0 [ 58.568772][ T5076] ? __check_object_size+0x4bc/0xa00 [ 58.574063][ T5076] ? __pfx_do_symlinkat+0x10/0x10 [ 58.579083][ T5076] ? getname_flags+0x1fe/0x4f0 [ 58.583846][ T5076] __x64_sys_symlinkat+0x99/0xb0 [ 58.588782][ T5076] do_syscall_64+0xf5/0x240 [ 58.593282][ T5076] ? clear_bhb_loop+0x35/0x90 [ 58.597954][ T5076] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.603838][ T5076] RIP: 0033:0x7f37c37a06b9 [ 58.608243][ T5076] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 58.627838][ T5076] RSP: 002b:00007ffdaa14f3b8 EFLAGS: 00000246 ORIG_RAX: 000000000000010a [ 58.636248][ T5076] RAX: ffffffffffffffda RBX: 00007ffdaa14f588 RCX: 00007f37c37a06b9 [ 58.644297][ T5076] RDX: 0000000020000340 RSI: 0000000000000004 RDI: 0000000020000440 [ 58.652257][ T5076] RBP: 00007f37c3819610 R08: 0000000000000000 R09: 00007ffdaa14f588 [ 58.660216][ T5076] R10: 00000000000060f8 R11: 0000000000000246 R12: 0000000000000001 [ 58.668178][ T5076] R13: 00007ffdaa14f578 R14: 0000000000000001 R15: 0000000000000001 [ 58.676153][ T5076] [ 58.679503][ T5076] Kernel Offset: disabled [ 58.683943][ T5076] Rebooting in 86400 seconds..