./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2251811239
<...>
forked to background, child pid 4728
[ 48.037943][ T4729] 8021q: adding VLAN 0 to HW filter on device bond0
[ 48.048747][ T4729] eql: remember to turn off Van-Jacobson compression on your slave devices
Starting sshd: [ 48.328277][ T4806] ssh-keygen (4806) used greatest stack depth: 18776 bytes left
OK
syzkaller
Warning: Permanently added '10.128.1.124' (ED25519) to the list of known hosts.
execve("./syz-executor2251811239", ["./syz-executor2251811239"], 0x7fff81249c10 /* 10 vars */) = 0
brk(NULL) = 0x55555745f000
brk(0x55555745fd00) = 0x55555745fd00
arch_prctl(ARCH_SET_FS, 0x55555745f380) = 0
set_tid_address(0x55555745f650) = 5065
set_robust_list(0x55555745f660, 24) = 0
rseq(0x55555745fca0, 0x20, 0, 0x53053053) = 0
prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0
readlink("/proc/self/exe", "/root/syz-executor2251811239", 4096) = 28
getrandom("\x64\x72\x8b\xb9\x29\x6c\xeb\x9d", 8, GRND_NONBLOCK) = 8
brk(NULL) = 0x55555745fd00
brk(0x555557480d00) = 0x555557480d00
brk(0x555557481000) = 0x555557481000
mprotect(0x7f85f6390000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
memfd_create("syzkaller", 0) = 3
mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f85ededa000
write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216
munmap(0x7f85ededa000, 138412032) = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
ioctl(4, LOOP_SET_FD, 3) = 0
close(3) = 0
mkdir("\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", 0777) = 0
mount("/dev/loop0", "\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", "jfs", MS_REC|MS_LAZYTIME, "") = 0
openat(AT_FDCWD, "\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", O_RDONLY|O_DIRECTORY) = 3
chdir("\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f") = 0
ioctl(4, LOOP_CLR_FD) = 0
close(4) = 0
syzkaller login: [ 76.654201][ T5065] loop0: detected capacity change from 0 to 32768
[ 76.711665][ T5065] ================================================================================
[ 76.722246][ T5065] UBSAN: array-index-out-of-bounds in fs/jfs/jfs_dtree.c:3392:30
[ 76.730448][ T5065] index -1 is out of range for type 'struct dtslot[128]'
[ 76.737523][ T5065] CPU: 1 PID: 5065 Comm: syz-executor225 Not tainted 6.7.0-rc4-syzkaller-00009-gbee0e7762ad2 #0
[ 76.747994][ T5065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023
[ 76.758105][ T5065] Call Trace:
[ 76.761435][ T5065] <TASK>
[ 76.764417][ T5065] dump_stack_lvl+0x1e7/0x2d0
[ 76.769178][ T5065] ? nf_tcp_handle_invalid+0x650/0x650
[ 76.774702][ T5065] ? panic+0x850/0x850
[ 76.778844][ T5065] __ubsan_handle_out_of_bounds+0x11c/0x150
[ 76.784794][ T5065] dtSearch+0x16d7/0x24d0
[ 76.789148][ T5065] ? rcu_is_watching+0x15/0xb0
[ 76.794004][ T5065] jfs_lookup+0x17f/0x410
[ 76.798393][ T5065] ? jfs_get_parent+0xa0/0xa0
[ 76.803271][ T5065] ? d_hash_and_lookup+0x1b0/0x1b0
[ 76.808399][ T5065] ? __d_lookup+0x6da/0x7a0
[ 76.812918][ T5065] ? jfs_get_parent+0xa0/0xa0
[ 76.817612][ T5065] path_openat+0x1010/0x3290
[ 76.822382][ T5065] ? do_filp_open+0x490/0x490
[ 76.827131][ T5065] do_filp_open+0x234/0x490
[ 76.831671][ T5065] ? vfs_tmpfile+0x500/0x500
[ 76.836288][ T5065] ? _raw_spin_unlock+0x28/0x40
[ 76.841147][ T5065] ? alloc_fd+0x59c/0x640
[ 76.845499][ T5065] do_sys_openat2+0x13e/0x1d0
[ 76.850207][ T5065] ? do_sys_open+0x230/0x230
[ 76.854833][ T5065] ? _raw_spin_unlock_irq+0x2e/0x50
[ 76.860048][ T5065] ? ptrace_notify+0x278/0x380
[ 76.864845][ T5065] __x64_sys_open+0x225/0x270
[ 76.869544][ T5065] ? do_sys_openat2+0x1d0/0x1d0
[ 76.874420][ T5065] ? syscall_enter_from_user_mode+0xa4/0x2d0
[ 76.880506][ T5065] ? syscall_enter_from_user_mode+0xf5/0x2d0
[ 76.886546][ T5065] do_syscall_64+0x45/0x110
[ 76.891072][ T5065] entry_SYSCALL_64_after_hwframe+0x63/0x6b
[ 76.897008][ T5065] RIP: 0033:0x7f85f6317639
[ 76.901489][ T5065] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 76.921122][ T5065] RSP: 002b:00007ffd29127758 EFLAGS: 00000246 ORIG_RAX: 0000000000000002
[ 76.929553][ T5065] RAX: ffffffffffffffda RBX: 00007ffd29127938 RCX: 00007f85f6317639
[ 76.937542][ T5065] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000180
[ 76.945526][ T5065] RBP: 00007f85f6390610 R08: 0000000000005e05 R09: 0000000000000000
[ 76.953546][ T5065] R10: 00007ffd29127620 R11: 0000000000000246 R12: 0000000000000001
[ 76.962326][ T5065] R13: 00007ffd29127928 R14: 0000000000000001 R15: 0000000000000001
[ 76.970323][ T5065] </TASK>
[ 76.973566][ T5065] ================================================================================
[ 76.983173][ T5065] Kernel panic - not syncing: UBSAN: panic_on_warn set ...
[ 76.990401][ T5065] CPU: 1 PID: 5065 Comm: syz-executor225 Not tainted 6.7.0-rc4-syzkaller-00009-gbee0e7762ad2 #0
[ 77.000850][ T5065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023
[ 77.010971][ T5065] Call Trace:
[ 77.014277][ T5065] <TASK>
[ 77.017274][ T5065] dump_stack_lvl+0x1e7/0x2d0
[ 77.021999][ T5065] ? nf_tcp_handle_invalid+0x650/0x650
[ 77.027518][ T5065] ? panic+0x850/0x850
[ 77.031647][ T5065] ? vprintk_emit+0x607/0x720
[ 77.036377][ T5065] ? vscnprintf+0x5d/0x80
[ 77.040738][ T5065] panic+0x349/0x850
[ 77.044665][ T5065] ? check_panic_on_warn+0x21/0xa0
[ 77.049814][ T5065] ? __memcpy_flushcache+0x2b0/0x2b0
[ 77.055130][ T5065] ? _printk+0xd5/0x120
[ 77.059327][ T5065] ? panic+0x850/0x850
[ 77.063432][ T5065] check_panic_on_warn+0x82/0xa0
[ 77.068404][ T5065] __ubsan_handle_out_of_bounds+0x13c/0x150
[ 77.074341][ T5065] dtSearch+0x16d7/0x24d0
[ 77.078718][ T5065] ? rcu_is_watching+0x15/0xb0
[ 77.083543][ T5065] jfs_lookup+0x17f/0x410
[ 77.087916][ T5065] ? jfs_get_parent+0xa0/0xa0
[ 77.092653][ T5065] ? d_hash_and_lookup+0x1b0/0x1b0
[ 77.097806][ T5065] ? __d_lookup+0x6da/0x7a0
[ 77.102347][ T5065] ? jfs_get_parent+0xa0/0xa0
[ 77.107083][ T5065] path_openat+0x1010/0x3290
[ 77.111738][ T5065] ? do_filp_open+0x490/0x490
[ 77.116493][ T5065] do_filp_open+0x234/0x490
[ 77.121033][ T5065] ? vfs_tmpfile+0x500/0x500
[ 77.125689][ T5065] ? _raw_spin_unlock+0x28/0x40
[ 77.130571][ T5065] ? alloc_fd+0x59c/0x640
[ 77.134935][ T5065] do_sys_openat2+0x13e/0x1d0
[ 77.139645][ T5065] ? do_sys_open+0x230/0x230
[ 77.144262][ T5065] ? _raw_spin_unlock_irq+0x2e/0x50
[ 77.149508][ T5065] ? ptrace_notify+0x278/0x380
[ 77.154310][ T5065] __x64_sys_open+0x225/0x270
[ 77.159021][ T5065] ? do_sys_openat2+0x1d0/0x1d0
[ 77.164005][ T5065] ? syscall_enter_from_user_mode+0xa4/0x2d0
[ 77.170010][ T5065] ? syscall_enter_from_user_mode+0xf5/0x2d0
[ 77.176015][ T5065] do_syscall_64+0x45/0x110
[ 77.180553][ T5065] entry_SYSCALL_64_after_hwframe+0x63/0x6b
[ 77.186480][ T5065] RIP: 0033:0x7f85f6317639
[ 77.191000][ T5065] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 77.210626][ T5065] RSP: 002b:00007ffd29127758 EFLAGS: 00000246 ORIG_RAX: 0000000000000002
[ 77.219068][ T5065] RAX: ffffffffffffffda RBX: 00007ffd29127938 RCX: 00007f85f6317639
[ 77.227063][ T5065] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000180
[ 77.235073][ T5065] RBP: 00007f85f6390610 R08: 0000000000005e05 R09: 0000000000000000
[ 77.243090][ T5065] R10: 00007ffd29127620 R11: 0000000000000246 R12: 0000000000000001
[ 77.251110][ T5065] R13: 00007ffd29127928 R14: 0000000000000001 R15: 0000000000000001
[ 77.259117][ T5065] </TASK>
[ 77.262375][ T5065] Kernel Offset: disabled
[ 77.266830][ T5065] Rebooting in 86400 seconds..