./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1032700427 <...> Warning: Permanently added '10.128.0.144' (ED25519) to the list of known hosts. execve("./syz-executor1032700427", ["./syz-executor1032700427"], 0x7ffe39071fa0 /* 10 vars */) = 0 brk(NULL) = 0x555594569000 brk(0x555594569d00) = 0x555594569d00 arch_prctl(ARCH_SET_FS, 0x555594569380) = 0 set_tid_address(0x555594569650) = 5816 set_robust_list(0x555594569660, 24) = 0 rseq(0x555594569ca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor1032700427", 4096) = 28 getrandom("\x4d\x03\x02\xad\x2a\x42\x91\xfa", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555594569d00 brk(0x55559458ad00) = 0x55559458ad00 brk(0x55559458b000) = 0x55559458b000 mprotect(0x7fcdf6191000, 16384, PROT_READ) = 0 mmap(0x1ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffffffff000 mmap(0x200000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200000000000 mmap(0x200001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200001000000 executing program write(1, "executing program\n", 18) = 18 memfd_create("syzkaller", 0) = 3 mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fcdedc00000 write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 munmap(0x7fcdedc00000, 138412032) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 ioctl(4, LOOP_SET_FD, 3) = 0 close(3) = 0 close(4) = 0 mkdir("./file0", 0777) = 0 [ 88.730616][ T5816] loop0: detected capacity change from 0 to 32768 mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic,") = 0 openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 chdir("./file0") = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) chdir("./file0") = 0 openat(AT_FDCWD, "./file2", O_RDONLY|O_CREAT|O_NOCTTY|O_NONBLOCK|__O_SYNC|O_DIRECT|O_NOFOLLOW|O_NOATIME|FASYNC, 0402) = -1 EIO (Input/output error) openat(AT_FDCWD, "./file1", O_RDWR|O_CREAT|O_SYNC|O_NOATIME, 000) = -1 EIO (Input/output error) [ 88.783040][ T5816] [ 88.783040][ T5816] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 88.783040][ T5816] [ 88.805829][ T5816] read_mapping_page failed! [ 88.810716][ T5816] ERROR: (device loop0): txCommit: [ 88.810716][ T5816] [ 88.821280][ T5816] read_mapping_page failed! [ 88.826038][ T5816] ERROR: (device loop0): txCommit: [ 88.826038][ T5816] [ 88.837987][ T5816] ------------[ cut here ]------------ [ 88.843736][ T5816] UBSAN: array-index-out-of-bounds in fs/jfs/jfs_dtree.c:3688:8 [ 88.851438][ T5816] index -1 is out of range for type 'struct dtslot[128]' [ 88.858505][ T5816] CPU: 1 UID: 0 PID: 5816 Comm: syz-executor103 Not tainted 6.15.0-rc4-syzkaller-00042-gb6ea1680d0ac #0 PREEMPT(full) [ 88.858530][ T5816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 88.858544][ T5816] Call Trace: [ 88.858550][ T5816] [ 88.858559][ T5816] dump_stack_lvl+0x189/0x250 [ 88.858585][ T5816] ? __pfx_dump_stack_lvl+0x10/0x10 [ 88.858605][ T5816] ? __pfx__printk+0x10/0x10 [ 88.858630][ T5816] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 88.858663][ T5816] ubsan_epilogue+0xa/0x40 [ 88.858676][ T5816] __ubsan_handle_out_of_bounds+0xe9/0xf0 [ 88.858698][ T5816] dtInsertEntry+0x936/0x1430 [ 88.858738][ T5816] dtSplitPage+0x2a83/0x3b20 [ 88.858801][ T5816] dtInsert+0x109b/0x5f40 [ 88.858829][ T5816] ? txLockAlloc+0x239/0x380 [ 88.858845][ T5816] ? __pfx_txLockAlloc+0x10/0x10 [ 88.858870][ T5816] ? __pfx_dtInsert+0x10/0x10 [ 88.858886][ T5816] ? txLock+0xaf3/0x1cb0 [ 88.858920][ T5816] ? dtInitRoot+0x22a/0x670 [ 88.858941][ T5816] jfs_mkdir+0x6ec/0xa70 [ 88.858969][ T5816] ? __pfx_jfs_mkdir+0x10/0x10 [ 88.859010][ T5816] ? generic_permission+0x2e5/0x690 [ 88.859031][ T5816] ? bpf_lsm_inode_mkdir+0x9/0x20 [ 88.859048][ T5816] vfs_mkdir+0x303/0x510 [ 88.859071][ T5816] do_mkdirat+0x247/0x590 [ 88.859091][ T5816] ? __pfx_do_mkdirat+0x10/0x10 [ 88.859111][ T5816] ? getname_flags+0x1e5/0x540 [ 88.859128][ T5816] __x64_sys_mkdir+0x6c/0x80 [ 88.859146][ T5816] do_syscall_64+0xf6/0x210 [ 88.859164][ T5816] ? clear_bhb_loop+0x45/0xa0 [ 88.859181][ T5816] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.859195][ T5816] RIP: 0033:0x7fcdf61177d7 [ 88.859212][ T5816] Code: ff ff 77 07 31 c0 c3 0f 1f 40 00 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 88.859224][ T5816] RSP: 002b:00007ffcdac8afc8 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 88.859241][ T5816] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fcdf61177d7 [ 88.859251][ T5816] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000200000000040 [ 88.859260][ T5816] RBP: 0000200000000040 R08: 0000000000000000 R09: 00002000000000c0 [ 88.859269][ T5816] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000140 [ 88.859284][ T5816] R13: 00007ffcdac8b060 R14: 0000000000000000 R15: 0000000000000000 [ 88.859306][ T5816] [ 88.859311][ T5816] ---[ end trace ]--- [ 89.092017][ T5816] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 89.099412][ T5816] CPU: 1 UID: 0 PID: 5816 Comm: syz-executor103 Not tainted 6.15.0-rc4-syzkaller-00042-gb6ea1680d0ac #0 PREEMPT(full) [ 89.111852][ T5816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 89.121909][ T5816] Call Trace: [ 89.125201][ T5816] [ 89.128130][ T5816] dump_stack_lvl+0x99/0x250 [ 89.132757][ T5816] ? __asan_memcpy+0x40/0x70 [ 89.137364][ T5816] ? __pfx_dump_stack_lvl+0x10/0x10 [ 89.142589][ T5816] ? __pfx__printk+0x10/0x10 [ 89.147221][ T5816] panic+0x2db/0x790 [ 89.151387][ T5816] ? __pfx_panic+0x10/0x10 [ 89.155834][ T5816] ? _printk+0xcf/0x120 [ 89.160012][ T5816] ? __pfx__printk+0x10/0x10 [ 89.164727][ T5816] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 89.171263][ T5816] check_panic_on_warn+0x89/0xb0 [ 89.176748][ T5816] __ubsan_handle_out_of_bounds+0xe9/0xf0 [ 89.182489][ T5816] dtInsertEntry+0x936/0x1430 [ 89.187198][ T5816] dtSplitPage+0x2a83/0x3b20 [ 89.192026][ T5816] dtInsert+0x109b/0x5f40 [ 89.196369][ T5816] ? txLockAlloc+0x239/0x380 [ 89.201050][ T5816] ? __pfx_txLockAlloc+0x10/0x10 [ 89.206001][ T5816] ? __pfx_dtInsert+0x10/0x10 [ 89.210689][ T5816] ? txLock+0xaf3/0x1cb0 [ 89.214969][ T5816] ? dtInitRoot+0x22a/0x670 [ 89.219497][ T5816] jfs_mkdir+0x6ec/0xa70 [ 89.223759][ T5816] ? __pfx_jfs_mkdir+0x10/0x10 [ 89.228577][ T5816] ? generic_permission+0x2e5/0x690 [ 89.233802][ T5816] ? bpf_lsm_inode_mkdir+0x9/0x20 [ 89.238851][ T5816] vfs_mkdir+0x303/0x510 [ 89.243110][ T5816] do_mkdirat+0x247/0x590 [ 89.247443][ T5816] ? __pfx_do_mkdirat+0x10/0x10 [ 89.252305][ T5816] ? getname_flags+0x1e5/0x540 [ 89.257101][ T5816] __x64_sys_mkdir+0x6c/0x80 [ 89.261707][ T5816] do_syscall_64+0xf6/0x210 [ 89.266234][ T5816] ? clear_bhb_loop+0x45/0xa0 [ 89.270918][ T5816] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.276826][ T5816] RIP: 0033:0x7fcdf61177d7 [ 89.281289][ T5816] Code: ff ff 77 07 31 c0 c3 0f 1f 40 00 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 89.300912][ T5816] RSP: 002b:00007ffcdac8afc8 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 89.309331][ T5816] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fcdf61177d7 [ 89.317315][ T5816] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000200000000040 [ 89.325297][ T5816] RBP: 0000200000000040 R08: 0000000000000000 R09: 00002000000000c0 [ 89.333276][ T5816] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000140 [ 89.341253][ T5816] R13: 00007ffcdac8b060 R14: 0000000000000000 R15: 0000000000000000 [ 89.349245][ T5816] [ 89.352570][ T5816] Kernel Offset: disabled [ 89.356928][ T5816] Rebooting in 86400 seconds..