./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1520533390 <...> Warning: Permanently added '10.128.0.168' (ED25519) to the list of known hosts. execve("./syz-executor1520533390", ["./syz-executor1520533390"], 0x7ffda03a25a0 /* 10 vars */) = 0 brk(NULL) = 0x55557478d000 brk(0x55557478dd00) = 0x55557478dd00 arch_prctl(ARCH_SET_FS, 0x55557478d380) = 0 set_tid_address(0x55557478d650) = 5088 set_robust_list(0x55557478d660, 24) = 0 rseq(0x55557478dca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor1520533390", 4096) = 28 getrandom("\x33\xb7\x3a\x83\x6b\x33\x02\x2f", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x55557478dd00 brk(0x5555747aed00) = 0x5555747aed00 brk(0x5555747af000) = 0x5555747af000 mprotect(0x7f211f4c7000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 mkdir("./syzkaller.h4tFX2", 0700) = 0 chmod("./syzkaller.h4tFX2", 0777) = 0 chdir("./syzkaller.h4tFX2") = 0 unshare(CLONE_NEWPID) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5089 attached , child_tidptr=0x55557478d650) = 5089 [pid 5089] set_robust_list(0x55557478d660, 24) = 0 [pid 5089] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL) = -1 EBUSY (Device or resource busy) [pid 5089] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5089] setsid() = 1 [pid 5089] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0 [pid 5089] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0 [pid 5089] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0 [pid 5089] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 5089] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, NULL) = 0 [pid 5089] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0 [pid 5089] unshare(CLONE_NEWNS) = 0 [pid 5089] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0 [pid 5089] unshare(CLONE_NEWIPC) = 0 [pid 5089] unshare(CLONE_NEWCGROUP) = 0 [pid 5089] unshare(CLONE_NEWUTS) = 0 [pid 5089] unshare(CLONE_SYSVSEM) = 0 [pid 5089] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5089] write(3, "16777216", 8) = 8 [pid 5089] close(3) = 0 [pid 5089] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = 3 [pid 5089] write(3, "536870912", 9) = 9 [pid 5089] close(3) = 0 [pid 5089] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5089] write(3, "1024", 4) = 4 [pid 5089] close(3) = 0 [pid 5089] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5089] write(3, "8192", 4) = 4 [pid 5089] close(3) = 0 [pid 5089] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5089] write(3, "1024", 4) = 4 [pid 5089] close(3) = 0 [pid 5089] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = 3 [pid 5089] write(3, "1024", 4) = 4 [pid 5089] close(3) = 0 [pid 5089] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = 3 [pid 5089] write(3, "1024 1048576 500 1024", 21) = 21 [pid 5089] close(3) = 0 [pid 5089] getpid() = 1 [pid 5089] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1<= next_index [ 56.021215][ T5092] find_entry called with index >= next_index [ 56.027731][ T5092] find_entry called with index >= next_index [pid 5089] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5089] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0 [pid 5089] getdents64(3, 0x55557478e6f0 /* 4 entries */, 32768) = 104 [pid 5089] umount2("./0/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EBUSY (Device or resource busy) [pid 5089] newfstatat(AT_FDCWD, "./0/bus", {st_mode=S_IFDIR|0755, st_size=72, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5089] umount2("./0/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EBUSY (Device or resource busy) [pid 5089] openat(AT_FDCWD, "./0/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5089] newfstatat(4, "", {st_mode=S_IFDIR|0755, st_size=72, ...}, AT_EMPTY_PATH) = 0 [pid 5089] getdents64(4, [pid 5093] exit(0) = ? [pid 5093] +++ exited with 0 +++ [pid 5089] <... getdents64 resumed>0x555574796730 /* 3 entries */, 32768) = 80 [pid 5089] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- [pid 5089] umount2("./0/bus/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 ENOENT (No such file or directory) [pid 5089] newfstatat(AT_FDCWD, "./0/bus/file0", 0x7ffc5b8e4f60, AT_SYMLINK_NOFOLLOW) = -1 ENOENT (No such file or directory) [pid 5089] exit_group(1) = ? [ 56.127954][ T5089] ERROR: (device loop0): jfs_readdir: JFS:Dtree error: ino = 2, bn=48, index = 1 [ 56.127954][ T5089] [ 56.140483][ T5089] ERROR: (device loop0): remounting filesystem as read-only [ 56.148217][ T5089] ERROR: (device loop0): jfs_readdir: JFS:Dtree error: ino = 2, bn=48, index = 3 [ 56.148217][ T5089] [ 56.159606][ T5089] ERROR: (device loop0): jfs_readdir: JFS:Dtree error: ino = 2, bn=48, index = 4 [ 56.159606][ T5089] [ 56.210521][ T5089] ------------[ cut here ]------------ [ 56.216518][ T5089] kernel BUG at fs/jfs/inode.c:169! [ 56.222074][ T5089] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI [ 56.229028][ T5089] CPU: 1 PID: 5089 Comm: syz-executor152 Not tainted 6.9.0-rc4-next-20240418-syzkaller #0 [ 56.238922][ T5089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 56.248964][ T5089] RIP: 0010:jfs_evict_inode+0x434/0x440 [ 56.254515][ T5089] Code: df e8 f0 33 d9 fe e9 1d fe ff ff e8 86 e3 73 fe 48 c7 c7 e0 4c 73 8e 4c 89 ee e8 07 bc c9 01 e9 92 fd ff ff e8 6d e3 73 fe 90 <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 [ 56.274114][ T5089] RSP: 0018:ffffc90002d479e8 EFLAGS: 00010293 [ 56.280168][ T5089] RAX: ffffffff83227a23 RBX: ffff8880481d9c78 RCX: ffff88802bf33c00 [ 56.288125][ T5089] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff8880481d9ff0 [ 56.296081][ T5089] RBP: ffff8880481da1b8 R08: ffffffff822f59f3 R09: 1ffffffff25ef6ce [ 56.304038][ T5089] R10: dffffc0000000000 R11: ffffffff83225790 R12: ffff8880481d9ff0 [ 56.312009][ T5089] R13: ffffffff8c0200f0 R14: dffffc0000000000 R15: ffff8880481d9ff0 [ 56.319982][ T5089] FS: 0000000000000000(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 [ 56.328911][ T5089] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 56.335485][ T5089] CR2: 00007ffc5b8e6f88 CR3: 000000007b7e0000 CR4: 00000000003506f0 [ 56.343449][ T5089] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 56.351407][ T5089] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 56.359364][ T5089] Call Trace: [ 56.362633][ T5089] [ 56.365550][ T5089] ? __die_body+0x88/0xe0 [ 56.369873][ T5089] ? die+0xcf/0x110 [ 56.373685][ T5089] ? do_trap+0x15a/0x3a0 [ 56.377926][ T5089] ? jfs_evict_inode+0x434/0x440 [ 56.382863][ T5089] ? do_error_trap+0x1dc/0x2c0 [ 56.387622][ T5089] ? jfs_evict_inode+0x434/0x440 [ 56.392556][ T5089] ? __pfx_do_error_trap+0x10/0x10 [ 56.397663][ T5089] ? report_bug+0x3e8/0x500 [ 56.402174][ T5089] ? handle_invalid_op+0x34/0x40 [ 56.407100][ T5089] ? jfs_evict_inode+0x434/0x440 [ 56.412019][ T5089] ? exc_invalid_op+0x38/0x50 [ 56.416683][ T5089] ? asm_exc_invalid_op+0x1a/0x20 [ 56.421699][ T5089] ? __pfx_jfs_get_dquots+0x10/0x10 [ 56.426888][ T5089] ? dquot_drop+0x43/0x160 [ 56.431290][ T5089] ? jfs_evict_inode+0x433/0x440 [ 56.436223][ T5089] ? jfs_evict_inode+0x434/0x440 [ 56.442188][ T5089] ? jfs_evict_inode+0x433/0x440 [ 56.447108][ T5089] ? __pfx_jfs_evict_inode+0x10/0x10 [ 56.452379][ T5089] evict+0x2a8/0x630 [ 56.456272][ T5089] evict_inodes+0x5f9/0x690 [ 56.460763][ T5089] ? __pfx_evict_inodes+0x10/0x10 [ 56.465778][ T5089] generic_shutdown_super+0x9d/0x2d0 [ 56.471055][ T5089] kill_block_super+0x44/0x90 [ 56.475725][ T5089] deactivate_locked_super+0xc4/0x130 [ 56.481087][ T5089] cleanup_mnt+0x426/0x4c0 [ 56.485495][ T5089] ? _raw_spin_unlock_irq+0x23/0x50 [ 56.490685][ T5089] task_work_run+0x24f/0x310 [ 56.495266][ T5089] ? __pfx_task_work_run+0x10/0x10 [ 56.500567][ T5089] ? do_exit+0xa16/0x27e0 [ 56.504906][ T5089] ? kmem_cache_free+0x145/0x340 [ 56.509856][ T5089] do_exit+0xa1b/0x27e0 [ 56.514016][ T5089] ? __pfx_do_exit+0x10/0x10 [ 56.518598][ T5089] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 56.524575][ T5089] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 56.530892][ T5089] ? _raw_spin_unlock_irq+0x23/0x50 [ 56.536082][ T5089] ? lockdep_hardirqs_on+0x99/0x150 [ 56.541270][ T5089] do_group_exit+0x207/0x2c0 [ 56.545856][ T5089] __x64_sys_exit_group+0x3f/0x40 [ 56.550872][ T5089] do_syscall_64+0xf5/0x240 [ 56.555365][ T5089] ? clear_bhb_loop+0x35/0x90 [ 56.560028][ T5089] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.565915][ T5089] RIP: 0033:0x7f211f44b489 [ 56.570316][ T5089] Code: Unable to access opcode bytes at 0x7f211f44b45f. [ 56.577319][ T5089] RSP: 002b:00007ffc5b8e4ed8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 56.585721][ T5089] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007f211f44b489 [ 56.593685][ T5089] RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000001 [ 56.601642][ T5089] RBP: 00007f211f4cd390 R08: ffffffffffffffb8 R09: 0000000000000000 [ 56.609599][ T5089] R10: 0000000000000100 R11: 0000000000000246 R12: 00007f211f4cd390 [ 56.617559][ T5089] R13: 0000000000000000 R14: 00007f211f4ce100 R15: 00007f211f419440 [ 56.625524][ T5089] [ 56.628537][ T5089] Modules linked in: [ 56.633984][ T5089] ---[ end trace 0000000000000000 ]--- [ 56.639452][ T5089] RIP: 0010:jfs_evict_inode+0x434/0x440 [ 56.645198][ T5089] Code: df e8 f0 33 d9 fe e9 1d fe ff ff e8 86 e3 73 fe 48 c7 c7 e0 4c 73 8e 4c 89 ee e8 07 bc c9 01 e9 92 fd ff ff e8 6d e3 73 fe 90 <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 [ 56.665112][ T5089] RSP: 0018:ffffc90002d479e8 EFLAGS: 00010293 [ 56.671204][ T5089] RAX: ffffffff83227a23 RBX: ffff8880481d9c78 RCX: ffff88802bf33c00 [ 56.679669][ T5089] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff8880481d9ff0 [ 56.687911][ T5089] RBP: ffff8880481da1b8 R08: ffffffff822f59f3 R09: 1ffffffff25ef6ce [ 56.695958][ T5089] R10: dffffc0000000000 R11: ffffffff83225790 R12: ffff8880481d9ff0 [ 56.704019][ T5089] R13: ffffffff8c0200f0 R14: dffffc0000000000 R15: ffff8880481d9ff0 [ 56.712047][ T5089] FS: 0000000000000000(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 [ 56.720994][ T5089] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 56.727637][ T5089] CR2: 00007ffc5b8e6f88 CR3: 000000007b498000 CR4: 00000000003506f0 [ 56.735651][ T5089] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 56.743957][ T5089] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 56.752067][ T5089] Kernel panic - not syncing: Fatal exception [ 56.758376][ T5089] Kernel Offset: disabled [ 56.762684][ T5089] Rebooting in 86400 seconds..