./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1601613519 <...> Warning: Permanently added '10.128.1.3' (ECDSA) to the list of known hosts. execve("./syz-executor1601613519", ["./syz-executor1601613519"], 0x7ffc78320e20 /* 10 vars */) = 0 brk(NULL) = 0x555555930000 brk(0x555555930c40) = 0x555555930c40 arch_prctl(ARCH_SET_FS, 0x555555930300) = 0 uname({sysname="Linux", nodename="syzkaller", ...}) = 0 readlink("/proc/self/exe", "/root/syz-executor1601613519", 4096) = 28 brk(0x555555951c40) = 0x555555951c40 brk(0x555555952000) = 0x555555952000 mprotect(0x7fd03191a000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 memfd_create("syzkaller", 0) = 3 mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd02945f000 syzkaller login: [ 65.532532][ T4998] memfd_create() without MFD_EXEC nor MFD_NOEXEC_SEAL, pid=4998 'syz-executor160' write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 7629503) = 7629503 munmap(0x7fd02945f000, 7629503) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 ioctl(4, LOOP_SET_FD, 3) = 0 close(3) = 0 mkdir("./file0", 0777) = 0 mount("/dev/loop0", "./file0", "jfs", MS_RDONLY|MS_NOSUID, "integrity,iocharset=none,discard,iocharset=iso8859-14,noquota,discard,") = 0 openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 chdir("./file0") = 0 ioctl(4, LOOP_CLR_FD) = 0 close(4) = 0 [ 65.615484][ T4998] loop0: detected capacity change from 0 to 14901 [ 65.642359][ T4998] ================================================================================ [ 65.656357][ T4998] UBSAN: array-index-out-of-bounds in fs/jfs/jfs_dtree.c:3392:30 [ 65.664744][ T4998] index -72 is out of range for type 'struct dtslot[128]' [ 65.671911][ T4998] CPU: 0 PID: 4998 Comm: syz-executor160 Not tainted 6.4.0-rc7-syzkaller-00194-g8a28a0b6f1a1 #0 [ 65.682535][ T4998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023 [ 65.692955][ T4998] Call Trace: [ 65.696237][ T4998] [ 65.699166][ T4998] dump_stack_lvl+0x1e7/0x2d0 [ 65.703867][ T4998] ? nf_tcp_handle_invalid+0x650/0x650 [ 65.709326][ T4998] ? panic+0x770/0x770 [ 65.713415][ T4998] __ubsan_handle_out_of_bounds+0x11c/0x150 [ 65.719316][ T4998] dtSearch+0x16d7/0x24d0 [ 65.723699][ T4998] jfs_lookup+0x17f/0x410 [ 65.728592][ T4998] ? jfs_get_parent+0xa0/0xa0 [ 65.733335][ T4998] ? __d_lookup+0x675/0x730 [ 65.737865][ T4998] ? mode_strip_sgid+0xa1/0x1a0 [ 65.742727][ T4998] ? jfs_get_parent+0xa0/0xa0 [ 65.747412][ T4998] path_openat+0x11e9/0x3170 [ 65.752053][ T4998] ? do_filp_open+0x490/0x490 [ 65.756864][ T4998] do_filp_open+0x234/0x490 [ 65.761378][ T4998] ? vfs_tmpfile+0x4a0/0x4a0 [ 65.765995][ T4998] ? _raw_spin_unlock+0x28/0x40 [ 65.770863][ T4998] ? alloc_fd+0x59c/0x640 [ 65.775230][ T4998] do_sys_openat2+0x13f/0x500 [ 65.779924][ T4998] ? print_irqtrace_events+0x220/0x220 [ 65.785403][ T4998] ? do_sys_open+0x230/0x230 [ 65.790010][ T4998] ? lockdep_hardirqs_on+0x98/0x140 [ 65.795247][ T4998] ? _raw_spin_unlock_irq+0x2e/0x50 [ 65.800480][ T4998] ? ptrace_notify+0x278/0x380 [ 65.805285][ T4998] __x64_sys_open+0x225/0x270 [ 65.810087][ T4998] ? do_sys_openat2+0x500/0x500 [ 65.814958][ T4998] ? syscall_enter_from_user_mode+0x32/0x230 [ 65.820958][ T4998] ? syscall_enter_from_user_mode+0x8c/0x230 [ 65.826954][ T4998] do_syscall_64+0x41/0xc0 [ 65.831382][ T4998] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 65.837290][ T4998] RIP: 0033:0x7fd0318ab879 [ 65.841714][ T4998] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 65.861328][ T4998] RSP: 002b:00007ffc605782e8 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 65.869854][ T4998] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fd0318ab879 [ 65.877831][ T4998] RDX: 0000000000000000 RSI: 000000000014da42 RDI: 00000000200000c0 [ 65.885896][ T4998] RBP: 00007fd03186b110 R08: 000000000000234a R09: 0000000000000000 [ 65.893874][ T4998] R10: 0000000000000073 R11: 0000000000000246 R12: 00007fd03186b1a0 [ 65.901858][ T4998] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 65.910021][ T4998] [ 65.913893][ T4998] ================================================================================ [ 65.923226][ T4998] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 65.930458][ T4998] CPU: 0 PID: 4998 Comm: syz-executor160 Not tainted 6.4.0-rc7-syzkaller-00194-g8a28a0b6f1a1 #0 [ 65.940877][ T4998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023 [ 65.950947][ T4998] Call Trace: [ 65.954240][ T4998] [ 65.957263][ T4998] dump_stack_lvl+0x1e7/0x2d0 [ 65.961973][ T4998] ? nf_tcp_handle_invalid+0x650/0x650 [ 65.967569][ T4998] ? panic+0x770/0x770 [ 65.971682][ T4998] ? vscnprintf+0x5d/0x80 [ 65.976055][ T4998] panic+0x30f/0x770 [ 65.979993][ T4998] ? check_panic_on_warn+0x21/0xa0 [ 65.985129][ T4998] ? __memcpy_flushcache+0x2b0/0x2b0 [ 65.990560][ T4998] ? dump_stack_lvl+0x253/0x2d0 [ 65.995455][ T4998] check_panic_on_warn+0x82/0xa0 [ 66.000421][ T4998] __ubsan_handle_out_of_bounds+0x13c/0x150 [ 66.006607][ T4998] dtSearch+0x16d7/0x24d0 [ 66.010985][ T4998] jfs_lookup+0x17f/0x410 [ 66.015327][ T4998] ? jfs_get_parent+0xa0/0xa0 [ 66.020031][ T4998] ? __d_lookup+0x675/0x730 [ 66.024557][ T4998] ? mode_strip_sgid+0xa1/0x1a0 [ 66.029435][ T4998] ? jfs_get_parent+0xa0/0xa0 [ 66.034129][ T4998] path_openat+0x11e9/0x3170 [ 66.038839][ T4998] ? do_filp_open+0x490/0x490 [ 66.043553][ T4998] do_filp_open+0x234/0x490 [ 66.048085][ T4998] ? vfs_tmpfile+0x4a0/0x4a0 [ 66.052703][ T4998] ? _raw_spin_unlock+0x28/0x40 [ 66.057571][ T4998] ? alloc_fd+0x59c/0x640 [ 66.061933][ T4998] do_sys_openat2+0x13f/0x500 [ 66.066624][ T4998] ? print_irqtrace_events+0x220/0x220 [ 66.072097][ T4998] ? do_sys_open+0x230/0x230 [ 66.076707][ T4998] ? lockdep_hardirqs_on+0x98/0x140 [ 66.082019][ T4998] ? _raw_spin_unlock_irq+0x2e/0x50 [ 66.087244][ T4998] ? ptrace_notify+0x278/0x380 [ 66.092029][ T4998] __x64_sys_open+0x225/0x270 [ 66.096731][ T4998] ? do_sys_openat2+0x500/0x500 [ 66.101629][ T4998] ? syscall_enter_from_user_mode+0x32/0x230 [ 66.107643][ T4998] ? syscall_enter_from_user_mode+0x8c/0x230 [ 66.113821][ T4998] do_syscall_64+0x41/0xc0 [ 66.118337][ T4998] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 66.124246][ T4998] RIP: 0033:0x7fd0318ab879 [ 66.128762][ T4998] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 66.148466][ T4998] RSP: 002b:00007ffc605782e8 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 66.156889][ T4998] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fd0318ab879 [ 66.164886][ T4998] RDX: 0000000000000000 RSI: 000000000014da42 RDI: 00000000200000c0 [ 66.172893][ T4998] RBP: 00007fd03186b110 R08: 000000000000234a R09: 0000000000000000 [ 66.180900][ T4998] R10: 0000000000000073 R11: 0000000000000246 R12: 00007fd03186b1a0 [ 66.188982][ T4998] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 66.196982][ T4998] [ 66.200075][ T4998] Kernel Offset: disabled [ 66.204487][ T4998] Rebooting in 86400 seconds..