./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor4062750520 <...> Warning: Permanently added '10.128.0.177' (ED25519) to the list of known hosts. execve("./syz-executor4062750520", ["./syz-executor4062750520"], 0x7ffed0ff1360 /* 10 vars */) = 0 brk(NULL) = 0x555557502000 brk(0x555557502d00) = 0x555557502d00 arch_prctl(ARCH_SET_FS, 0x555557502380) = 0 set_tid_address(0x555557502650) = 5013 set_robust_list(0x555557502660, 24) = 0 rseq(0x555557502ca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor4062750520", 4096) = 28 getrandom("\x8d\xc8\xfa\xe3\xfd\xc2\x79\x98", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555557502d00 brk(0x555557523d00) = 0x555557523d00 brk(0x555557524000) = 0x555557524000 mprotect(0x7f47bc8e8000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 memfd_create("syzkaller", 0) = 3 mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f47b4432000 [ 52.054981][ T5013] memfd_create() without MFD_EXEC nor MFD_NOEXEC_SEAL, pid=5013 'syz-executor406' write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 munmap(0x7f47b4432000, 16777216) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 ioctl(4, LOOP_SET_FD, 3) = 0 close(3) = 0 mkdir("./file0", 0777) = 0 mount("/dev/loop0", "./file0", "jfs", 0, "nodiscard,errors=continue,iocharset=cp1251,") = 0 openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 chdir("./file0") = 0 ioctl(4, LOOP_CLR_FD) = 0 close(4) = 0 openat(AT_FDCWD, ".", O_RDONLY) = 4 [ 52.199728][ T5013] loop0: detected capacity change from 0 to 32768 [ 52.225043][ T5013] ================================================================================ [ 52.235003][ T5013] UBSAN: array-index-out-of-bounds in fs/jfs/jfs_dtree.c:2887:30 [ 52.243147][ T5013] index -28 is out of range for type 'struct dtslot[128]' [ 52.250662][ T5013] CPU: 1 PID: 5013 Comm: syz-executor406 Not tainted 6.5.0-rc1-syzkaller-00201-g2772d7df3c93 #0 [ 52.261276][ T5013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 52.271362][ T5013] Call Trace: [ 52.274657][ T5013] [ 52.277577][ T5013] dump_stack_lvl+0x1e7/0x2d0 [ 52.282256][ T5013] ? nf_tcp_handle_invalid+0x650/0x650 [ 52.287701][ T5013] ? panic+0x770/0x770 [ 52.291752][ T5013] ? __alloc_pages+0x309/0x670 [ 52.296520][ T5013] ? zone_statistics+0x170/0x170 [ 52.301453][ T5013] __ubsan_handle_out_of_bounds+0x11c/0x150 [ 52.307397][ T5013] jfs_readdir+0x1c88/0x4620 [ 52.311994][ T5013] ? lockdep_hardirqs_on+0x98/0x140 [ 52.317204][ T5013] ? dtInitRoot+0x690/0x690 [ 52.321715][ T5013] ? _raw_spin_lock_irqsave+0x120/0x120 [ 52.327254][ T5013] ? iterate_dir+0x13e/0x5a0 [ 52.331857][ T5013] iterate_dir+0x231/0x5a0 [ 52.336268][ T5013] __se_sys_getdents64+0x20d/0x4f0 [ 52.341366][ T5013] ? _raw_spin_unlock_irq+0x2e/0x50 [ 52.346592][ T5013] ? __x64_sys_getdents64+0x80/0x80 [ 52.351775][ T5013] ? filldir+0x6a0/0x6a0 [ 52.356014][ T5013] ? syscall_enter_from_user_mode+0x32/0x230 [ 52.362163][ T5013] ? syscall_enter_from_user_mode+0x8c/0x230 [ 52.368158][ T5013] do_syscall_64+0x41/0xc0 [ 52.372579][ T5013] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 52.378483][ T5013] RIP: 0033:0x7f47bc86f679 [ 52.382907][ T5013] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 52.402593][ T5013] RSP: 002b:00007ffe4c5ffd28 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 52.411172][ T5013] RAX: ffffffffffffffda RBX: 00007ffe4c5ffef8 RCX: 00007f47bc86f679 [ 52.419166][ T5013] RDX: 00000000000000c5 RSI: 0000000020000200 RDI: 0000000000000004 [ 52.427150][ T5013] RBP: 00007f47bc8e8610 R08: 0000000000000000 R09: 00007ffe4c5ffef8 [ 52.435110][ T5013] R10: 002c313532317063 R11: 0000000000000246 R12: 0000000000000001 [ 52.443070][ T5013] R13: 00007ffe4c5ffee8 R14: 0000000000000001 R15: 0000000000000001 [ 52.451137][ T5013] [ 52.454323][ T5013] ================================================================================ [ 52.463977][ T5013] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 52.471259][ T5013] CPU: 1 PID: 5013 Comm: syz-executor406 Not tainted 6.5.0-rc1-syzkaller-00201-g2772d7df3c93 #0 [ 52.481764][ T5013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/03/2023 [ 52.491915][ T5013] Call Trace: [ 52.495200][ T5013] [ 52.498125][ T5013] dump_stack_lvl+0x1e7/0x2d0 [ 52.502800][ T5013] ? nf_tcp_handle_invalid+0x650/0x650 [ 52.508511][ T5013] ? panic+0x770/0x770 [ 52.512583][ T5013] ? vscnprintf+0x5d/0x80 [ 52.516905][ T5013] panic+0x30f/0x770 [ 52.520785][ T5013] ? check_panic_on_warn+0x21/0xa0 [ 52.525896][ T5013] ? __memcpy_flushcache+0x2b0/0x2b0 [ 52.531364][ T5013] ? dump_stack_lvl+0x253/0x2d0 [ 52.536334][ T5013] ? __alloc_pages+0x309/0x670 [ 52.541095][ T5013] ? zone_statistics+0x170/0x170 [ 52.546036][ T5013] check_panic_on_warn+0x82/0xa0 [ 52.551074][ T5013] __ubsan_handle_out_of_bounds+0x13c/0x150 [ 52.556964][ T5013] jfs_readdir+0x1c88/0x4620 [ 52.561587][ T5013] ? lockdep_hardirqs_on+0x98/0x140 [ 52.566897][ T5013] ? dtInitRoot+0x690/0x690 [ 52.571402][ T5013] ? _raw_spin_lock_irqsave+0x120/0x120 [ 52.577381][ T5013] ? iterate_dir+0x13e/0x5a0 [ 52.581985][ T5013] iterate_dir+0x231/0x5a0 [ 52.586405][ T5013] __se_sys_getdents64+0x20d/0x4f0 [ 52.591526][ T5013] ? _raw_spin_unlock_irq+0x2e/0x50 [ 52.596746][ T5013] ? __x64_sys_getdents64+0x80/0x80 [ 52.601938][ T5013] ? filldir+0x6a0/0x6a0 [ 52.606182][ T5013] ? syscall_enter_from_user_mode+0x32/0x230 [ 52.612165][ T5013] ? syscall_enter_from_user_mode+0x8c/0x230 [ 52.618141][ T5013] do_syscall_64+0x41/0xc0 [ 52.622558][ T5013] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 52.628493][ T5013] RIP: 0033:0x7f47bc86f679 [ 52.632918][ T5013] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 52.653161][ T5013] RSP: 002b:00007ffe4c5ffd28 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 52.661594][ T5013] RAX: ffffffffffffffda RBX: 00007ffe4c5ffef8 RCX: 00007f47bc86f679 [ 52.669647][ T5013] RDX: 00000000000000c5 RSI: 0000000020000200 RDI: 0000000000000004 [ 52.677697][ T5013] RBP: 00007f47bc8e8610 R08: 0000000000000000 R09: 00007ffe4c5ffef8 [ 52.685662][ T5013] R10: 002c313532317063 R11: 0000000000000246 R12: 0000000000000001 [ 52.693628][ T5013] R13: 00007ffe4c5ffee8 R14: 0000000000000001 R15: 0000000000000001 [ 52.701602][ T5013] [ 52.704799][ T5013] Kernel Offset: disabled [ 52.709362][ T5013] Rebooting in 86400 seconds..