./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor202506686
<...>
[ 46.092308][ T4730] dhcpcd-run-hook (4730) used greatest stack depth: 18768 bytes left
forked to background, child pid 4726
[ 48.044867][ T4727] 8021q: adding VLAN 0 to HW filter on device bond0
[ 48.066480][ T4727] eql: remember to turn off Van-Jacobson compression on your slave devices
Starting sshd: OK
syzkaller
Warning: Permanently added '10.128.0.186' (ED25519) to the list of known hosts.
execve("./syz-executor202506686", ["./syz-executor202506686"], 0x7ffef1bd98d0 /* 10 vars */) = 0
brk(NULL) = 0x555557024000
brk(0x555557024d00) = 0x555557024d00
arch_prctl(ARCH_SET_FS, 0x555557024380) = 0
set_tid_address(0x555557024650) = 5063
set_robust_list(0x555557024660, 24) = 0
rseq(0x555557024ca0, 0x20, 0, 0x53053053) = 0
prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0
readlink("/proc/self/exe", "/root/syz-executor202506686", 4096) = 27
getrandom("\x03\x6b\x9b\xed\xa1\x5d\x05\xf5", 8, GRND_NONBLOCK) = 8
brk(NULL) = 0x555557024d00
brk(0x555557045d00) = 0x555557045d00
brk(0x555557046000) = 0x555557046000
mprotect(0x7fed4e8d7000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
memfd_create("syzkaller", 0) = 3
mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fed46421000
write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216
munmap(0x7fed46421000, 138412032) = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
ioctl(4, LOOP_SET_FD, 3) = 0
close(3) = 0
mkdir("\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", 0777) = 0
mount("/dev/loop0", "\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", "jfs", MS_REC|MS_LAZYTIME, "") = 0
openat(AT_FDCWD, "\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f", O_RDONLY|O_DIRECTORY) = 3
chdir("\x13\x13\x77\xc5\xfc\x35\xd4\x14\x54\xd5\xd4\x1d\x29\xad\x1a\x60\x29\x59\x81\x46\xe6\xbe\x16\x6e\x41\xad\x0d\xbd\x40\x54\x03\x3c\x9f\x33\xbb\xda\x82\x24\xa2\xf3\xd7\x72\xe7\x63\x6e\x48\xb3\x3c\xbf\x70\x83\x72\xe8\xf1\xb9\x93\x3e\xc5\x12\x77\x43\xbe\x22\x06\x20\x9e\xf0\x2d\xf9\xcb\xf2\xf6\xe8\x80\xd3\x38\x2f") = 0
ioctl(4, LOOP_CLR_FD) = 0
close(4) = 0
syzkaller login: [ 84.446743][ T5063] loop0: detected capacity change from 0 to 32768
[ 84.494739][ T5063] ================================================================================
[ 84.505382][ T5063] UBSAN: array-index-out-of-bounds in fs/jfs/jfs_dtree.c:3392:30
[ 84.513158][ T5063] index -1 is out of range for type 'struct dtslot[128]'
[ 84.520909][ T5063] CPU: 0 PID: 5063 Comm: syz-executor202 Not tainted 6.7.0-rc4-syzkaller-00009-gbee0e7762ad2 #0
[ 84.531357][ T5063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023
[ 84.541430][ T5063] Call Trace:
[ 84.544740][ T5063]
[ 84.547686][ T5063] dump_stack_lvl+0x1e7/0x2d0
[ 84.552415][ T5063] ? nf_tcp_handle_invalid+0x650/0x650
[ 84.557911][ T5063] ? panic+0x850/0x850
[ 84.562024][ T5063] __ubsan_handle_out_of_bounds+0x11c/0x150
[ 84.567961][ T5063] dtSearch+0x16d7/0x24d0
[ 84.572406][ T5063] ? rcu_is_watching+0x15/0xb0
[ 84.577212][ T5063] jfs_lookup+0x17f/0x410
[ 84.581591][ T5063] ? jfs_get_parent+0xa0/0xa0
[ 84.586432][ T5063] ? d_hash_and_lookup+0x1b0/0x1b0
[ 84.591565][ T5063] ? __d_lookup+0x6da/0x7a0
[ 84.596110][ T5063] ? jfs_get_parent+0xa0/0xa0
[ 84.600905][ T5063] path_openat+0x1010/0x3290
[ 84.605554][ T5063] ? do_filp_open+0x490/0x490
[ 84.610260][ T5063] do_filp_open+0x234/0x490
[ 84.614811][ T5063] ? vfs_tmpfile+0x500/0x500
[ 84.619437][ T5063] ? _raw_spin_unlock+0x28/0x40
[ 84.624388][ T5063] ? alloc_fd+0x59c/0x640
[ 84.628828][ T5063] do_sys_openat2+0x13e/0x1d0
[ 84.633560][ T5063] ? do_sys_open+0x230/0x230
[ 84.638173][ T5063] ? _raw_spin_unlock_irq+0x2e/0x50
[ 84.643386][ T5063] ? ptrace_notify+0x278/0x380
[ 84.648175][ T5063] __x64_sys_open+0x225/0x270
[ 84.652872][ T5063] ? do_sys_openat2+0x1d0/0x1d0
[ 84.657746][ T5063] ? syscall_enter_from_user_mode+0xa4/0x2d0
[ 84.663932][ T5063] ? syscall_enter_from_user_mode+0xf5/0x2d0
[ 84.670138][ T5063] do_syscall_64+0x45/0x110
[ 84.674807][ T5063] entry_SYSCALL_64_after_hwframe+0x63/0x6b
[ 84.680774][ T5063] RIP: 0033:0x7fed4e85e639
[ 84.685212][ T5063] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 84.704835][ T5063] RSP: 002b:00007ffcf8f54ee8 EFLAGS: 00000246 ORIG_RAX: 0000000000000002
[ 84.713268][ T5063] RAX: ffffffffffffffda RBX: 00007ffcf8f550c8 RCX: 00007fed4e85e639
[ 84.721258][ T5063] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000180
[ 84.729237][ T5063] RBP: 00007fed4e8d7610 R08: 0000000000005e05 R09: 0000000000000000
[ 84.737225][ T5063] R10: 00007ffcf8f54db0 R11: 0000000000000246 R12: 0000000000000001
[ 84.745233][ T5063] R13: 00007ffcf8f550b8 R14: 0000000000000001 R15: 0000000000000001
[ 84.753340][ T5063]
[ 84.761813][ T5063] ================================================================================
[ 84.772707][ T5063] Kernel panic - not syncing: UBSAN: panic_on_warn set ...
[ 84.779949][ T5063] CPU: 0 PID: 5063 Comm: syz-executor202 Not tainted 6.7.0-rc4-syzkaller-00009-gbee0e7762ad2 #0
[ 84.790559][ T5063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023
[ 84.800672][ T5063] Call Trace:
[ 84.804235][ T5063]
[ 84.807182][ T5063] dump_stack_lvl+0x1e7/0x2d0
[ 84.811900][ T5063] ? nf_tcp_handle_invalid+0x650/0x650
[ 84.817388][ T5063] ? panic+0x850/0x850
[ 84.821518][ T5063] ? vprintk_emit+0x607/0x720
[ 84.826679][ T5063] ? vscnprintf+0x5d/0x80
[ 84.831042][ T5063] panic+0x349/0x850
[ 84.834987][ T5063] ? check_panic_on_warn+0x21/0xa0
[ 84.840377][ T5063] ? __memcpy_flushcache+0x2b0/0x2b0
[ 84.845675][ T5063] ? _printk+0xd5/0x120
[ 84.849883][ T5063] ? panic+0x850/0x850
[ 84.853977][ T5063] check_panic_on_warn+0x82/0xa0
[ 84.859020][ T5063] __ubsan_handle_out_of_bounds+0x13c/0x150
[ 84.865152][ T5063] dtSearch+0x16d7/0x24d0
[ 84.869551][ T5063] ? rcu_is_watching+0x15/0xb0
[ 84.874388][ T5063] jfs_lookup+0x17f/0x410
[ 84.878839][ T5063] ? jfs_get_parent+0xa0/0xa0
[ 84.883756][ T5063] ? d_hash_and_lookup+0x1b0/0x1b0
[ 84.889229][ T5063] ? __d_lookup+0x6da/0x7a0
[ 84.893927][ T5063] ? jfs_get_parent+0xa0/0xa0
[ 84.898637][ T5063] path_openat+0x1010/0x3290
[ 84.903274][ T5063] ? do_filp_open+0x490/0x490
[ 84.908076][ T5063] do_filp_open+0x234/0x490
[ 84.912599][ T5063] ? vfs_tmpfile+0x500/0x500
[ 84.917248][ T5063] ? _raw_spin_unlock+0x28/0x40
[ 84.922714][ T5063] ? alloc_fd+0x59c/0x640
[ 84.927202][ T5063] do_sys_openat2+0x13e/0x1d0
[ 84.931933][ T5063] ? do_sys_open+0x230/0x230
[ 84.936572][ T5063] ? _raw_spin_unlock_irq+0x2e/0x50
[ 84.941974][ T5063] ? ptrace_notify+0x278/0x380
[ 84.946779][ T5063] __x64_sys_open+0x225/0x270
[ 84.951943][ T5063] ? do_sys_openat2+0x1d0/0x1d0
[ 84.956904][ T5063] ? syscall_enter_from_user_mode+0xa4/0x2d0
[ 84.963424][ T5063] ? syscall_enter_from_user_mode+0xf5/0x2d0
[ 84.969424][ T5063] do_syscall_64+0x45/0x110
[ 84.973953][ T5063] entry_SYSCALL_64_after_hwframe+0x63/0x6b
[ 84.979871][ T5063] RIP: 0033:0x7fed4e85e639
[ 84.984473][ T5063] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 85.008956][ T5063] RSP: 002b:00007ffcf8f54ee8 EFLAGS: 00000246 ORIG_RAX: 0000000000000002
[ 85.017836][ T5063] RAX: ffffffffffffffda RBX: 00007ffcf8f550c8 RCX: 00007fed4e85e639
[ 85.025923][ T5063] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000180
[ 85.034082][ T5063] RBP: 00007fed4e8d7610 R08: 0000000000005e05 R09: 0000000000000000
[ 85.042175][ T5063] R10: 00007ffcf8f54db0 R11: 0000000000000246 R12: 0000000000000001
[ 85.050161][ T5063] R13: 00007ffcf8f550b8 R14: 0000000000000001 R15: 0000000000000001
[ 85.058173][ T5063]
[ 85.061402][ T5063] Kernel Offset: disabled
[ 85.065829][ T5063] Rebooting in 86400 seconds..