./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor519177106
<...>
DUID 00:04:f8:32:f0:25:6b:f7:7b:d6:d2:5e:34:7f:1d:07:e3:4e
forked to background, child pid 4726
[ 55.483622][ T4727] 8021q: adding VLAN 0 to HW filter on device bond0
[ 55.497105][ T4727] eql: remember to turn off Van-Jacobson compression on your slave devices
Starting sshd: OK
syzkaller
Warning: Permanently added '10.128.1.116' (ED25519) to the list of known hosts.
execve("./syz-executor519177106", ["./syz-executor519177106"], 0x7ffc573271f0 /* 10 vars */) = 0
brk(NULL) = 0x55555608a000
brk(0x55555608ad00) = 0x55555608ad00
arch_prctl(ARCH_SET_FS, 0x55555608a380) = 0
set_tid_address(0x55555608a650) = 5061
set_robust_list(0x55555608a660, 24) = 0
rseq(0x55555608aca0, 0x20, 0, 0x53053053) = 0
prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0
readlink("/proc/self/exe", "/root/syz-executor519177106", 4096) = 27
getrandom("\x85\xd5\xdd\x2e\xc8\xec\xe0\x7c", 8, GRND_NONBLOCK) = 8
brk(NULL) = 0x55555608ad00
brk(0x5555560abd00) = 0x5555560abd00
brk(0x5555560ac000) = 0x5555560ac000
mprotect(0x7f061daa2000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
memfd_create("syzkaller", 0) = 3
mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0615400000
write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216
munmap(0x7f0615400000, 138412032) = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
ioctl(4, LOOP_SET_FD, 3) = 0
close(3) = 0
close(4) = 0
mkdir("./bus", 0777) = 0
mount("/dev/loop0", "./bus", "jfs", MS_NOSUID|MS_POSIXACL, "") = 0
openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3
chdir("./bus") = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy)
openat(AT_FDCWD, ".", O_RDONLY) = 4
syzkaller login: [ 87.762539][ T5061] loop0: detected capacity change from 0 to 32768
[ 87.810777][ T5061] ------------[ cut here ]------------
[ 87.818421][ T5061] UBSAN: array-index-out-of-bounds in fs/jfs/jfs_dtree.c:2892:30
[ 87.827150][ T5061] index -1 is out of range for type 'struct dtslot[128]'
[ 87.834254][ T5061] CPU: 1 PID: 5061 Comm: syz-executor519 Not tainted 6.8.0-syzkaller-08951-gfe46a7dd189e #0
[ 87.844622][ T5061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024
[ 87.854722][ T5061] Call Trace:
[ 87.858043][ T5061]
[ 87.860996][ T5061] dump_stack_lvl+0x241/0x360
[ 87.865985][ T5061] ? __pfx_dump_stack_lvl+0x10/0x10
[ 87.871252][ T5061] ? __pfx__printk+0x10/0x10
[ 87.875966][ T5061] ? alloc_pages_mpol+0x40c/0x650
[ 87.881351][ T5061] __ubsan_handle_out_of_bounds+0x121/0x150
[ 87.887480][ T5061] ? alloc_pages+0xef/0x170
[ 87.892500][ T5061] jfs_readdir+0x1cb4/0x4660
[ 87.897190][ T5061] ? __pfx_jfs_readdir+0x10/0x10
[ 87.902576][ T5061] ? __pfx___down_write_common+0x10/0x10
[ 87.908305][ T5061] ? __pfx___mutex_lock+0x10/0x10
[ 87.913402][ T5061] ? __pfx_jfs_readdir+0x10/0x10
[ 87.918380][ T5061] wrap_directory_iterator+0x94/0xe0
[ 87.923812][ T5061] iterate_dir+0x539/0x6f0
[ 87.928300][ T5061] __se_sys_getdents64+0x20d/0x4f0
[ 87.933484][ T5061] ? _raw_spin_unlock_irq+0x2e/0x50
[ 87.938872][ T5061] ? __pfx___se_sys_getdents64+0x10/0x10
[ 87.944571][ T5061] ? __pfx_filldir64+0x10/0x10
[ 87.949435][ T5061] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[ 87.956146][ T5061] ? do_syscall_64+0x10a/0x240
[ 87.961013][ T5061] ? syscall_trace_enter+0x5f/0x150
[ 87.966311][ T5061] do_syscall_64+0xfb/0x240
[ 87.970967][ T5061] entry_SYSCALL_64_after_hwframe+0x6d/0x75
[ 87.976985][ T5061] RIP: 0033:0x7f061da295f9
[ 87.981518][ T5061] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 88.001594][ T5061] RSP: 002b:00007ffc75a93c48 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9
[ 88.010200][ T5061] RAX: ffffffffffffffda RBX: 00007ffc75a93e18 RCX: 00007f061da295f9
[ 88.018419][ T5061] RDX: 000000000000102a RSI: 0000000020002280 RDI: 0000000000000004
[ 88.026453][ T5061] RBP: 00007f061daa2610 R08: 0000000000000000 R09: 00007ffc75a93e18
[ 88.034648][ T5061] R10: 00000000000060cc R11: 0000000000000246 R12: 0000000000000001
[ 88.043088][ T5061] R13: 00007ffc75a93e08 R14: 0000000000000001 R15: 0000000000000001
[ 88.051121][ T5061]
[ 88.054803][ T5061] ---[ end trace ]---
[ 88.059558][ T5061] Kernel panic - not syncing: UBSAN: panic_on_warn set ...
[ 88.067150][ T5061] CPU: 0 PID: 5061 Comm: syz-executor519 Not tainted 6.8.0-syzkaller-08951-gfe46a7dd189e #0
[ 88.077265][ T5061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024
[ 88.087547][ T5061] Call Trace:
[ 88.090847][ T5061]
[ 88.093781][ T5061] dump_stack_lvl+0x241/0x360
[ 88.098488][ T5061] ? __pfx_dump_stack_lvl+0x10/0x10
[ 88.103701][ T5061] ? __pfx__printk+0x10/0x10
[ 88.108411][ T5061] ? vprintk_emit+0x631/0x770
[ 88.113164][ T5061] ? vscnprintf+0x5d/0x90
[ 88.117610][ T5061] panic+0x349/0x860
[ 88.121597][ T5061] ? check_panic_on_warn+0x21/0xb0
[ 88.126761][ T5061] ? __pfx_panic+0x10/0x10
[ 88.131346][ T5061] ? _printk+0xd5/0x120
[ 88.135569][ T5061] ? __pfx__printk+0x10/0x10
[ 88.140226][ T5061] ? alloc_pages_mpol+0x40c/0x650
[ 88.145374][ T5061] check_panic_on_warn+0x86/0xb0
[ 88.150497][ T5061] __ubsan_handle_out_of_bounds+0x141/0x150
[ 88.156472][ T5061] ? alloc_pages+0xef/0x170
[ 88.161167][ T5061] jfs_readdir+0x1cb4/0x4660
[ 88.165934][ T5061] ? __pfx_jfs_readdir+0x10/0x10
[ 88.170986][ T5061] ? __pfx___down_write_common+0x10/0x10
[ 88.176695][ T5061] ? __pfx___mutex_lock+0x10/0x10
[ 88.181872][ T5061] ? __pfx_jfs_readdir+0x10/0x10
[ 88.186902][ T5061] wrap_directory_iterator+0x94/0xe0
[ 88.192268][ T5061] iterate_dir+0x539/0x6f0
[ 88.196769][ T5061] __se_sys_getdents64+0x20d/0x4f0
[ 88.201945][ T5061] ? _raw_spin_unlock_irq+0x2e/0x50
[ 88.207219][ T5061] ? __pfx___se_sys_getdents64+0x10/0x10
[ 88.213082][ T5061] ? __pfx_filldir64+0x10/0x10
[ 88.217924][ T5061] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[ 88.224487][ T5061] ? do_syscall_64+0x10a/0x240
[ 88.230388][ T5061] ? syscall_trace_enter+0x5f/0x150
[ 88.235770][ T5061] do_syscall_64+0xfb/0x240
[ 88.240886][ T5061] entry_SYSCALL_64_after_hwframe+0x6d/0x75
[ 88.247275][ T5061] RIP: 0033:0x7f061da295f9
[ 88.252052][ T5061] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 88.272580][ T5061] RSP: 002b:00007ffc75a93c48 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9
[ 88.281382][ T5061] RAX: ffffffffffffffda RBX: 00007ffc75a93e18 RCX: 00007f061da295f9
[ 88.289504][ T5061] RDX: 000000000000102a RSI: 0000000020002280 RDI: 0000000000000004
[ 88.297598][ T5061] RBP: 00007f061daa2610 R08: 0000000000000000 R09: 00007ffc75a93e18
[ 88.305783][ T5061] R10: 00000000000060cc R11: 0000000000000246 R12: 0000000000000001
[ 88.314144][ T5061] R13: 00007ffc75a93e08 R14: 0000000000000001 R15: 0000000000000001
[ 88.322262][ T5061]
[ 88.325568][ T5061] Kernel Offset: disabled
[ 88.330166][ T5061] Rebooting in 86400 seconds..