./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3055956625 <...> Warning: Permanently added '10.128.0.216' (ED25519) to the list of known hosts. execve("./syz-executor3055956625", ["./syz-executor3055956625"], 0x7fff3b210e10 /* 10 vars */) = 0 brk(NULL) = 0x555576e20000 brk(0x555576e20d00) = 0x555576e20d00 arch_prctl(ARCH_SET_FS, 0x555576e20380) = 0 set_tid_address(0x555576e20650) = 5072 set_robust_list(0x555576e20660, 24) = 0 rseq(0x555576e20ca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor3055956625", 4096) = 28 getrandom("\xcc\x96\xd8\x4e\x03\x76\x2e\x9d", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555576e20d00 brk(0x555576e41d00) = 0x555576e41d00 brk(0x555576e42000) = 0x555576e42000 mprotect(0x7f6ff85cd000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 memfd_create("syzkaller", 0) = 3 mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f6ff0000000 write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 munmap(0x7f6ff0000000, 138412032) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 ioctl(4, LOOP_SET_FD, 3) = 0 close(3) = 0 close(4) = 0 mkdir("./bus", 0777) = 0 mount("/dev/loop0", "./bus", "jfs", MS_NOSUID|MS_POSIXACL, "") = 0 openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3 chdir("./bus") = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) openat(AT_FDCWD, ".", O_RDONLY) = 4 [ 72.495949][ T5072] loop0: detected capacity change from 0 to 32768 [ 72.539932][ T5072] ------------[ cut here ]------------ [ 72.545745][ T5072] UBSAN: array-index-out-of-bounds in fs/jfs/jfs_dtree.c:2892:30 [ 72.553645][ T5072] index -1 is out of range for type 'struct dtslot[128]' [ 72.560688][ T5072] CPU: 0 PID: 5072 Comm: syz-executor305 Not tainted 6.8.0-syzkaller-08951-gfe46a7dd189e #0 [ 72.570772][ T5072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 72.580852][ T5072] Call Trace: [ 72.584136][ T5072] [ 72.587065][ T5072] dump_stack_lvl+0x241/0x360 [ 72.591780][ T5072] ? __pfx_dump_stack_lvl+0x10/0x10 [ 72.597006][ T5072] ? __pfx__printk+0x10/0x10 [ 72.601638][ T5072] ? srso_return_thunk+0x5/0x5f [ 72.606762][ T5072] ? alloc_pages_mpol+0x40c/0x650 [ 72.611804][ T5072] ? srso_return_thunk+0x5/0x5f [ 72.616669][ T5072] __ubsan_handle_out_of_bounds+0x121/0x150 [ 72.622610][ T5072] ? alloc_pages+0xef/0x170 [ 72.627230][ T5072] jfs_readdir+0x1cb4/0x4660 [ 72.631871][ T5072] ? srso_return_thunk+0x5/0x5f [ 72.636768][ T5072] ? __pfx_jfs_readdir+0x10/0x10 [ 72.641736][ T5072] ? lock_acquire+0x25b/0x530 [ 72.646471][ T5072] ? __pfx___down_write_common+0x10/0x10 [ 72.652140][ T5072] ? srso_return_thunk+0x5/0x5f [ 72.657010][ T5072] ? end_current_label_crit_section+0x14e/0x180 [ 72.663391][ T5072] ? srso_return_thunk+0x5/0x5f [ 72.668266][ T5072] ? __pfx_jfs_readdir+0x10/0x10 [ 72.673237][ T5072] wrap_directory_iterator+0x96/0xe0 [ 72.678556][ T5072] iterate_dir+0x53b/0x6f0 [ 72.683001][ T5072] ? srso_return_thunk+0x5/0x5f [ 72.687879][ T5072] __se_sys_getdents64+0x20d/0x4f0 [ 72.693022][ T5072] ? srso_return_thunk+0x5/0x5f [ 72.697891][ T5072] ? _raw_spin_unlock_irq+0x2e/0x50 [ 72.703212][ T5072] ? __pfx___se_sys_getdents64+0x10/0x10 [ 72.708863][ T5072] ? __pfx_filldir64+0x10/0x10 [ 72.713652][ T5072] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 72.719999][ T5072] ? do_syscall_64+0x10a/0x240 [ 72.724805][ T5072] ? srso_return_thunk+0x5/0x5f [ 72.729674][ T5072] ? syscall_trace_enter+0x5f/0x150 [ 72.734902][ T5072] do_syscall_64+0xfd/0x240 [ 72.739423][ T5072] entry_SYSCALL_64_after_hwframe+0x6d/0x75 [ 72.745335][ T5072] RIP: 0033:0x7f6ff85545f9 [ 72.749759][ T5072] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 72.769388][ T5072] RSP: 002b:00007fffe71b71b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 72.777823][ T5072] RAX: ffffffffffffffda RBX: 00007fffe71b7388 RCX: 00007f6ff85545f9 [ 72.785832][ T5072] RDX: 000000000000102a RSI: 0000000020002280 RDI: 0000000000000004 [ 72.793838][ T5072] RBP: 00007f6ff85cd610 R08: 0000000000000000 R09: 00007fffe71b7388 [ 72.801823][ T5072] R10: 00000000000060cc R11: 0000000000000246 R12: 0000000000000001 [ 72.809897][ T5072] R13: 00007fffe71b7378 R14: 0000000000000001 R15: 0000000000000001 [ 72.817900][ T5072] [ 72.821322][ T5072] ---[ end trace ]--- [ 72.825401][ T5072] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 72.832612][ T5072] CPU: 0 PID: 5072 Comm: syz-executor305 Not tainted 6.8.0-syzkaller-08951-gfe46a7dd189e #0 [ 72.843214][ T5072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 72.853280][ T5072] Call Trace: [ 72.856575][ T5072] [ 72.859512][ T5072] dump_stack_lvl+0x241/0x360 [ 72.864222][ T5072] ? __pfx_dump_stack_lvl+0x10/0x10 [ 72.869447][ T5072] ? __pfx__printk+0x10/0x10 [ 72.874058][ T5072] ? vprintk_emit+0x631/0x770 [ 72.878790][ T5072] ? srso_return_thunk+0x5/0x5f [ 72.883743][ T5072] ? vscnprintf+0x5d/0x90 [ 72.888091][ T5072] panic+0x349/0x860 [ 72.892014][ T5072] ? check_panic_on_warn+0x21/0xb0 [ 72.897178][ T5072] ? __pfx_panic+0x10/0x10 [ 72.901612][ T5072] ? _printk+0xd5/0x120 [ 72.905816][ T5072] ? __pfx__printk+0x10/0x10 [ 72.910436][ T5072] ? srso_return_thunk+0x5/0x5f [ 72.915393][ T5072] ? alloc_pages_mpol+0x40c/0x650 [ 72.920630][ T5072] check_panic_on_warn+0x86/0xb0 [ 72.925617][ T5072] __ubsan_handle_out_of_bounds+0x141/0x150 [ 72.931544][ T5072] ? alloc_pages+0xef/0x170 [ 72.936078][ T5072] jfs_readdir+0x1cb4/0x4660 [ 72.940697][ T5072] ? srso_return_thunk+0x5/0x5f [ 72.945598][ T5072] ? __pfx_jfs_readdir+0x10/0x10 [ 72.950563][ T5072] ? lock_acquire+0x25b/0x530 [ 72.955274][ T5072] ? __pfx___down_write_common+0x10/0x10 [ 72.960935][ T5072] ? srso_return_thunk+0x5/0x5f [ 72.965818][ T5072] ? end_current_label_crit_section+0x14e/0x180 [ 72.972091][ T5072] ? srso_return_thunk+0x5/0x5f [ 72.976964][ T5072] ? __pfx_jfs_readdir+0x10/0x10 [ 72.981929][ T5072] wrap_directory_iterator+0x96/0xe0 [ 72.987242][ T5072] iterate_dir+0x53b/0x6f0 [ 72.991681][ T5072] ? srso_return_thunk+0x5/0x5f [ 72.996563][ T5072] __se_sys_getdents64+0x20d/0x4f0 [ 73.001704][ T5072] ? srso_return_thunk+0x5/0x5f [ 73.006575][ T5072] ? _raw_spin_unlock_irq+0x2e/0x50 [ 73.011805][ T5072] ? __pfx___se_sys_getdents64+0x10/0x10 [ 73.017460][ T5072] ? __pfx_filldir64+0x10/0x10 [ 73.022244][ T5072] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 73.028589][ T5072] ? do_syscall_64+0x10a/0x240 [ 73.033367][ T5072] ? srso_return_thunk+0x5/0x5f [ 73.038232][ T5072] ? syscall_trace_enter+0x5f/0x150 [ 73.043452][ T5072] do_syscall_64+0xfd/0x240 [ 73.047975][ T5072] entry_SYSCALL_64_after_hwframe+0x6d/0x75 [ 73.053895][ T5072] RIP: 0033:0x7f6ff85545f9 [ 73.058325][ T5072] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 73.078036][ T5072] RSP: 002b:00007fffe71b71b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 73.086475][ T5072] RAX: ffffffffffffffda RBX: 00007fffe71b7388 RCX: 00007f6ff85545f9 [ 73.094461][ T5072] RDX: 000000000000102a RSI: 0000000020002280 RDI: 0000000000000004 [ 73.102445][ T5072] RBP: 00007f6ff85cd610 R08: 0000000000000000 R09: 00007fffe71b7388 [ 73.110426][ T5072] R10: 00000000000060cc R11: 0000000000000246 R12: 0000000000000001 [ 73.118409][ T5072] R13: 00007fffe71b7378 R14: 0000000000000001 R15: 0000000000000001 [ 73.126432][ T5072] [ 73.129749][ T5072] Kernel Offset: disabled [ 73.134113][ T5072] Rebooting in 86400 seconds..