./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3207230162 <...> Warning: Permanently added '10.128.0.12' (ED25519) to the list of known hosts. execve("./syz-executor3207230162", ["./syz-executor3207230162"], 0x7ffe2b1f7bd0 /* 10 vars */) = 0 brk(NULL) = 0x555555561000 brk(0x555555561d00) = 0x555555561d00 arch_prctl(ARCH_SET_FS, 0x555555561380) = 0 set_tid_address(0x555555561650) = 5016 set_robust_list(0x555555561660, 24) = 0 rseq(0x555555561ca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor3207230162", 4096) = 28 getrandom("\x69\x67\xcb\x15\x89\x89\xad\x5a", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555555561d00 brk(0x555555582d00) = 0x555555582d00 brk(0x555555583000) = 0x555555583000 mprotect(0x7fd0ded3e000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 memfd_create("syzkaller", 0) = 3 mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd0d6888000 [ 61.951834][ T5016] memfd_create() without MFD_EXEC nor MFD_NOEXEC_SEAL, pid=5016 'syz-executor320' write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 munmap(0x7fd0d6888000, 16777216) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 ioctl(4, LOOP_SET_FD, 3) = 0 close(3) = 0 mkdir("./file0", 0777) = 0 mount("/dev/loop0", "./file0", "jfs", 0, "") = 0 openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3 chdir("./file0") = 0 ioctl(4, LOOP_CLR_FD) = 0 close(4) = 0 [ 62.130402][ T5016] loop0: detected capacity change from 0 to 32768 [ 62.152788][ T5016] ================================================================================ [ 62.162323][ T5016] UBSAN: array-index-out-of-bounds in fs/jfs/jfs_dmap.c:639:20 [ 62.170102][ T5016] index 7936 is out of range for type 'atomic_t[128]' [ 62.176963][ T5016] CPU: 0 PID: 5016 Comm: syz-executor320 Not tainted 6.5.0-rc4-syzkaller #0 [ 62.185663][ T5016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2023 [ 62.195818][ T5016] Call Trace: [ 62.199102][ T5016] [ 62.202038][ T5016] dump_stack_lvl+0x1e7/0x2d0 [ 62.206742][ T5016] ? nf_tcp_handle_invalid+0x650/0x650 [ 62.212205][ T5016] ? panic+0x770/0x770 [ 62.216289][ T5016] ? mutex_lock_io_nested+0x60/0x60 [ 62.221497][ T5016] ? __kasan_kmalloc+0x98/0xb0 [ 62.226265][ T5016] ? dtInsert+0x885/0x6b00 [ 62.230692][ T5016] __ubsan_handle_out_of_bounds+0x11c/0x150 [ 62.236605][ T5016] dbNextAG+0x600/0x630 [ 62.240781][ T5016] dbAlloc+0x62d/0xca0 [ 62.244871][ T5016] ? dbNextAG+0x630/0x630 [ 62.249227][ T5016] dtInsert+0xda7/0x6b00 [ 62.253487][ T5016] ? do_symlinkat+0x201/0x610 [ 62.258174][ T5016] ? do_syscall_64+0x41/0xc0 [ 62.262794][ T5016] ? mark_lock+0x9a/0x340 [ 62.267139][ T5016] ? UniStrupr+0x2c0/0x2c0 [ 62.271567][ T5016] ? lockdep_hardirqs_on_prepare+0x43c/0x7a0 [ 62.277560][ T5016] ? print_irqtrace_events+0x220/0x220 [ 62.283032][ T5016] ? lockdep_hardirqs_on+0x98/0x140 [ 62.288261][ T5016] ? __kmem_cache_free+0x25f/0x3b0 [ 62.293392][ T5016] ? dtSearch+0x1f91/0x24d0 [ 62.297973][ T5016] jfs_symlink+0x827/0x10f0 [ 62.302501][ T5016] ? jfs_unlink+0xad0/0xad0 [ 62.307212][ T5016] ? make_vfsuid+0x6f/0xb0 [ 62.311659][ T5016] ? bpf_lsm_inode_symlink+0x9/0x10 [ 62.316979][ T5016] ? security_inode_symlink+0xb3/0x100 [ 62.322545][ T5016] vfs_symlink+0x12f/0x2a0 [ 62.326984][ T5016] do_symlinkat+0x201/0x610 [ 62.331502][ T5016] ? vfs_symlink+0x2a0/0x2a0 [ 62.336133][ T5016] ? getname_flags+0x1f0/0x4e0 [ 62.340915][ T5016] __x64_sys_symlink+0x7e/0x90 [ 62.345781][ T5016] do_syscall_64+0x41/0xc0 [ 62.350223][ T5016] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 62.356137][ T5016] RIP: 0033:0x7fd0decc5679 [ 62.360564][ T5016] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 62.380279][ T5016] RSP: 002b:00007ffc4b25c148 EFLAGS: 00000246 ORIG_RAX: 0000000000000058 [ 62.388707][ T5016] RAX: ffffffffffffffda RBX: 00007ffc4b25c328 RCX: 00007fd0decc5679 [ 62.396695][ T5016] RDX: 00007fd0decc4970 RSI: 0000000020000880 RDI: 0000000020001980 [ 62.404676][ T5016] RBP: 00007fd0ded3e610 R08: 0000000000005e42 R09: 0000000000000000 [ 62.412656][ T5016] R10: 00007ffc4b25c010 R11: 0000000000000246 R12: 0000000000000001 [ 62.420642][ T5016] R13: 00007ffc4b25c318 R14: 0000000000000001 R15: 0000000000000001 [ 62.428722][ T5016] [ 62.435945][ T5016] ================================================================================ [ 62.445298][ T5016] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 62.452502][ T5016] CPU: 0 PID: 5016 Comm: syz-executor320 Not tainted 6.5.0-rc4-syzkaller #0 [ 62.461176][ T5016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2023 [ 62.471240][ T5016] Call Trace: [ 62.474525][ T5016] [ 62.477488][ T5016] dump_stack_lvl+0x1e7/0x2d0 [ 62.482182][ T5016] ? nf_tcp_handle_invalid+0x650/0x650 [ 62.487672][ T5016] ? panic+0x770/0x770 [ 62.491792][ T5016] ? vscnprintf+0x5d/0x80 [ 62.496154][ T5016] panic+0x30f/0x770 [ 62.500094][ T5016] ? check_panic_on_warn+0x21/0xa0 [ 62.505253][ T5016] ? __memcpy_flushcache+0x2b0/0x2b0 [ 62.510593][ T5016] ? dump_stack_lvl+0x253/0x2d0 [ 62.515491][ T5016] ? mutex_lock_io_nested+0x60/0x60 [ 62.520733][ T5016] check_panic_on_warn+0x82/0xa0 [ 62.525683][ T5016] __ubsan_handle_out_of_bounds+0x13c/0x150 [ 62.531588][ T5016] dbNextAG+0x600/0x630 [ 62.535758][ T5016] dbAlloc+0x62d/0xca0 [ 62.539848][ T5016] ? dbNextAG+0x630/0x630 [ 62.544196][ T5016] dtInsert+0xda7/0x6b00 [ 62.548459][ T5016] ? do_symlinkat+0x201/0x610 [ 62.553169][ T5016] ? do_syscall_64+0x41/0xc0 [ 62.557797][ T5016] ? mark_lock+0x9a/0x340 [ 62.562141][ T5016] ? UniStrupr+0x2c0/0x2c0 [ 62.566574][ T5016] ? lockdep_hardirqs_on_prepare+0x43c/0x7a0 [ 62.572590][ T5016] ? print_irqtrace_events+0x220/0x220 [ 62.578090][ T5016] ? lockdep_hardirqs_on+0x98/0x140 [ 62.583318][ T5016] ? __kmem_cache_free+0x25f/0x3b0 [ 62.588546][ T5016] ? dtSearch+0x1f91/0x24d0 [ 62.593109][ T5016] jfs_symlink+0x827/0x10f0 [ 62.597657][ T5016] ? jfs_unlink+0xad0/0xad0 [ 62.602215][ T5016] ? make_vfsuid+0x6f/0xb0 [ 62.606669][ T5016] ? bpf_lsm_inode_symlink+0x9/0x10 [ 62.611888][ T5016] ? security_inode_symlink+0xb3/0x100 [ 62.617366][ T5016] vfs_symlink+0x12f/0x2a0 [ 62.621845][ T5016] do_symlinkat+0x201/0x610 [ 62.626364][ T5016] ? vfs_symlink+0x2a0/0x2a0 [ 62.630972][ T5016] ? getname_flags+0x1f0/0x4e0 [ 62.635747][ T5016] __x64_sys_symlink+0x7e/0x90 [ 62.640521][ T5016] do_syscall_64+0x41/0xc0 [ 62.644947][ T5016] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 62.650863][ T5016] RIP: 0033:0x7fd0decc5679 [ 62.655314][ T5016] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 62.674926][ T5016] RSP: 002b:00007ffc4b25c148 EFLAGS: 00000246 ORIG_RAX: 0000000000000058 [ 62.683355][ T5016] RAX: ffffffffffffffda RBX: 00007ffc4b25c328 RCX: 00007fd0decc5679 [ 62.691330][ T5016] RDX: 00007fd0decc4970 RSI: 0000000020000880 RDI: 0000000020001980 [ 62.699312][ T5016] RBP: 00007fd0ded3e610 R08: 0000000000005e42 R09: 0000000000000000 [ 62.707298][ T5016] R10: 00007ffc4b25c010 R11: 0000000000000246 R12: 0000000000000001 [ 62.715274][ T5016] R13: 00007ffc4b25c318 R14: 0000000000000001 R15: 0000000000000001 [ 62.723286][ T5016] [ 62.726622][ T5016] Kernel Offset: disabled [ 62.731058][ T5016] Rebooting in 86400 seconds..