./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor367010346 <...> Warning: Permanently added '10.128.1.13' (ED25519) to the list of known hosts. execve("./syz-executor367010346", ["./syz-executor367010346"], 0x7ffce7e7b9e0 /* 10 vars */) = 0 brk(NULL) = 0x55556961e000 brk(0x55556961ed00) = 0x55556961ed00 arch_prctl(ARCH_SET_FS, 0x55556961e380) = 0 set_tid_address(0x55556961e650) = 5069 set_robust_list(0x55556961e660, 24) = 0 rseq(0x55556961eca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor367010346", 4096) = 27 getrandom("\x42\x52\xc0\x67\xc9\x0b\xae\x2a", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x55556961ed00 brk(0x55556963fd00) = 0x55556963fd00 brk(0x555569640000) = 0x555569640000 mprotect(0x7fc7ce890000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 memfd_create("syzkaller", 0) = 3 mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fc7c6200000 write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 munmap(0x7fc7c6200000, 138412032) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 ioctl(4, LOOP_SET_FD, 3) = 0 close(3) = 0 close(4) = 0 mkdir("./file1", 0777) = 0 mount("/dev/loop0", "./file1", "jfs", MS_NOSUID|MS_NOATIME|MS_LAZYTIME, "") = 0 openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 chdir("./file1") = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 58.615661][ T5069] loop0: detected capacity change from 0 to 32768 open_tree(AT_FDCWD, "", OPEN_TREE_CLOEXEC|AT_EMPTY_PATH) = 4 [ 58.689438][ T5069] ------------[ cut here ]------------ [ 58.694989][ T5069] UBSAN: shift-out-of-bounds in fs/jfs/jfs_dmap.c:2639:11 [ 58.702168][ T5069] shift exponent 80 is too large for 32-bit type 'int' [ 58.709085][ T5069] CPU: 0 PID: 5069 Comm: syz-executor367 Not tainted 6.9.0-rc4-syzkaller-00173-g3cdb45594619 #0 [ 58.719485][ T5069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 58.729534][ T5069] Call Trace: [ 58.732798][ T5069] [ 58.735724][ T5069] dump_stack_lvl+0x241/0x360 [ 58.740408][ T5069] ? __pfx_dump_stack_lvl+0x10/0x10 [ 58.745605][ T5069] ? __pfx__printk+0x10/0x10 [ 58.750190][ T5069] __ubsan_handle_shift_out_of_bounds+0x3c8/0x420 [ 58.756602][ T5069] ? mempool_alloc+0x197/0x5a0 [ 58.761359][ T5069] dbSplit+0x21a/0x220 [ 58.765414][ T5069] dbAllocBits+0x4e5/0x9a0 [ 58.769818][ T5069] ? dbFindBits+0x132/0x1d0 [ 58.774302][ T5069] dbAllocDmapLev+0x250/0x4a0 [ 58.778971][ T5069] ? __pfx_dbAllocDmapLev+0x10/0x10 [ 58.784159][ T5069] dbAllocCtl+0x113/0x920 [ 58.788477][ T5069] dbAllocAG+0x28f/0x10b0 [ 58.792797][ T5069] ? __down_write_common+0x162/0x200 [ 58.798067][ T5069] ? __pfx_dbAllocAG+0x10/0x10 [ 58.802825][ T5069] dbAlloc+0x658/0xca0 [ 58.806881][ T5069] ? __pfx_dbAlloc+0x10/0x10 [ 58.811454][ T5069] ? __kasan_kmalloc+0x98/0xb0 [ 58.816202][ T5069] ? dtInsert+0x885/0x6b00 [ 58.820601][ T5069] ? kmalloc_trace+0x1db/0x360 [ 58.825354][ T5069] ? dtInsert+0x885/0x6b00 [ 58.829753][ T5069] dtInsert+0xda7/0x6b00 [ 58.833992][ T5069] ? dtSearch+0x1d59/0x2520 [ 58.838474][ T5069] ? vfs_symlink+0x137/0x2a0 [ 58.843048][ T5069] ? do_syscall_64+0xf5/0x240 [ 58.847709][ T5069] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.853771][ T5069] ? mark_lock+0x9a/0x350 [ 58.858082][ T5069] ? __pfx_dtInsert+0x10/0x10 [ 58.862741][ T5069] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 58.868789][ T5069] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 58.875105][ T5069] ? kasan_quarantine_put+0xdc/0x230 [ 58.880377][ T5069] ? lockdep_hardirqs_on+0x99/0x150 [ 58.885566][ T5069] ? dtSearch+0x1d59/0x2520 [ 58.890057][ T5069] ? kfree+0x153/0x3a0 [ 58.894140][ T5069] jfs_symlink+0x824/0x10d0 [ 58.898661][ T5069] ? __pfx_jfs_symlink+0x10/0x10 [ 58.903599][ T5069] ? make_vfsuid+0x46/0x90 [ 58.908027][ T5069] ? bpf_lsm_inode_symlink+0x9/0x10 [ 58.913226][ T5069] ? security_inode_symlink+0xb9/0x100 [ 58.918667][ T5069] vfs_symlink+0x137/0x2a0 [ 58.923156][ T5069] do_symlinkat+0x222/0x3a0 [ 58.927643][ T5069] ? __check_object_size+0x4bc/0xa00 [ 58.932919][ T5069] ? __pfx_do_symlinkat+0x10/0x10 [ 58.937929][ T5069] ? getname_flags+0x1fe/0x4f0 [ 58.942682][ T5069] __x64_sys_symlinkat+0x99/0xb0 [ 58.947607][ T5069] do_syscall_64+0xf5/0x240 [ 58.952095][ T5069] ? clear_bhb_loop+0x35/0x90 [ 58.956758][ T5069] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.962633][ T5069] RIP: 0033:0x7fc7ce8176b9 [ 58.967032][ T5069] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 58.986621][ T5069] RSP: 002b:00007ffd0600e278 EFLAGS: 00000246 ORIG_RAX: 000000000000010a [ 58.995033][ T5069] RAX: ffffffffffffffda RBX: 00007ffd0600e448 RCX: 00007fc7ce8176b9 [ 59.002990][ T5069] RDX: 0000000020000340 RSI: 0000000000000004 RDI: 0000000020000440 [ 59.010942][ T5069] RBP: 00007fc7ce890610 R08: 0000000000000000 R09: 00007ffd0600e448 [ 59.018912][ T5069] R10: 00000000000060f8 R11: 0000000000000246 R12: 0000000000000001 [ 59.026871][ T5069] R13: 00007ffd0600e438 R14: 0000000000000001 R15: 0000000000000001 [ 59.034835][ T5069] [ 59.038154][ T5069] ---[ end trace ]--- [ 59.042150][ T5069] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 59.049351][ T5069] CPU: 0 PID: 5069 Comm: syz-executor367 Not tainted 6.9.0-rc4-syzkaller-00173-g3cdb45594619 #0 [ 59.059751][ T5069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 59.069798][ T5069] Call Trace: [ 59.073070][ T5069] [ 59.075991][ T5069] dump_stack_lvl+0x241/0x360 [ 59.080672][ T5069] ? __pfx_dump_stack_lvl+0x10/0x10 [ 59.085867][ T5069] ? __pfx__printk+0x10/0x10 [ 59.090453][ T5069] ? vprintk_emit+0x631/0x770 [ 59.095136][ T5069] ? vscnprintf+0x5d/0x90 [ 59.099458][ T5069] panic+0x349/0x860 [ 59.103355][ T5069] ? check_panic_on_warn+0x21/0xb0 [ 59.108464][ T5069] ? __pfx_panic+0x10/0x10 [ 59.112872][ T5069] ? _printk+0xd5/0x120 [ 59.117024][ T5069] ? __pfx__printk+0x10/0x10 [ 59.121617][ T5069] check_panic_on_warn+0x86/0xb0 [ 59.126551][ T5069] __ubsan_handle_shift_out_of_bounds+0x3e7/0x420 [ 59.132965][ T5069] ? mempool_alloc+0x197/0x5a0 [ 59.137736][ T5069] dbSplit+0x21a/0x220 [ 59.141887][ T5069] dbAllocBits+0x4e5/0x9a0 [ 59.146303][ T5069] ? dbFindBits+0x132/0x1d0 [ 59.150801][ T5069] dbAllocDmapLev+0x250/0x4a0 [ 59.155480][ T5069] ? __pfx_dbAllocDmapLev+0x10/0x10 [ 59.160685][ T5069] dbAllocCtl+0x113/0x920 [ 59.165019][ T5069] dbAllocAG+0x28f/0x10b0 [ 59.169352][ T5069] ? __down_write_common+0x162/0x200 [ 59.174635][ T5069] ? __pfx_dbAllocAG+0x10/0x10 [ 59.179401][ T5069] dbAlloc+0x658/0xca0 [ 59.183474][ T5069] ? __pfx_dbAlloc+0x10/0x10 [ 59.188059][ T5069] ? __kasan_kmalloc+0x98/0xb0 [ 59.192816][ T5069] ? dtInsert+0x885/0x6b00 [ 59.197228][ T5069] ? kmalloc_trace+0x1db/0x360 [ 59.201990][ T5069] ? dtInsert+0x885/0x6b00 [ 59.206401][ T5069] dtInsert+0xda7/0x6b00 [ 59.210641][ T5069] ? dtSearch+0x1d59/0x2520 [ 59.215132][ T5069] ? vfs_symlink+0x137/0x2a0 [ 59.219729][ T5069] ? do_syscall_64+0xf5/0x240 [ 59.224398][ T5069] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.230473][ T5069] ? mark_lock+0x9a/0x350 [ 59.234798][ T5069] ? __pfx_dtInsert+0x10/0x10 [ 59.239467][ T5069] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 59.245437][ T5069] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 59.251759][ T5069] ? kasan_quarantine_put+0xdc/0x230 [ 59.257043][ T5069] ? lockdep_hardirqs_on+0x99/0x150 [ 59.262265][ T5069] ? dtSearch+0x1d59/0x2520 [ 59.266773][ T5069] ? kfree+0x153/0x3a0 [ 59.270874][ T5069] jfs_symlink+0x824/0x10d0 [ 59.275401][ T5069] ? __pfx_jfs_symlink+0x10/0x10 [ 59.280369][ T5069] ? make_vfsuid+0x46/0x90 [ 59.284796][ T5069] ? bpf_lsm_inode_symlink+0x9/0x10 [ 59.289990][ T5069] ? security_inode_symlink+0xb9/0x100 [ 59.295448][ T5069] vfs_symlink+0x137/0x2a0 [ 59.299867][ T5069] do_symlinkat+0x222/0x3a0 [ 59.304368][ T5069] ? __check_object_size+0x4bc/0xa00 [ 59.309664][ T5069] ? __pfx_do_symlinkat+0x10/0x10 [ 59.314688][ T5069] ? getname_flags+0x1fe/0x4f0 [ 59.319453][ T5069] __x64_sys_symlinkat+0x99/0xb0 [ 59.324385][ T5069] do_syscall_64+0xf5/0x240 [ 59.328887][ T5069] ? clear_bhb_loop+0x35/0x90 [ 59.333562][ T5069] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.339449][ T5069] RIP: 0033:0x7fc7ce8176b9 [ 59.343857][ T5069] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 59.363460][ T5069] RSP: 002b:00007ffd0600e278 EFLAGS: 00000246 ORIG_RAX: 000000000000010a [ 59.371871][ T5069] RAX: ffffffffffffffda RBX: 00007ffd0600e448 RCX: 00007fc7ce8176b9 [ 59.379889][ T5069] RDX: 0000000020000340 RSI: 0000000000000004 RDI: 0000000020000440 [ 59.387942][ T5069] RBP: 00007fc7ce890610 R08: 0000000000000000 R09: 00007ffd0600e448 [ 59.395921][ T5069] R10: 00000000000060f8 R11: 0000000000000246 R12: 0000000000000001 [ 59.403891][ T5069] R13: 00007ffd0600e438 R14: 0000000000000001 R15: 0000000000000001 [ 59.411870][ T5069] [ 59.415141][ T5069] Kernel Offset: disabled [ 59.419495][ T5069] Rebooting in 86400 seconds..