./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1405215999
<...>
Warning: Permanently added '10.128.1.83' (ED25519) to the list of known hosts.
execve("./syz-executor1405215999", ["./syz-executor1405215999"], 0x7fff809c4f60 /* 10 vars */) = 0
brk(NULL) = 0x555565b60000
brk(0x555565b60d00) = 0x555565b60d00
arch_prctl(ARCH_SET_FS, 0x555565b60380) = 0
set_tid_address(0x555565b60650) = 5831
set_robust_list(0x555565b60660, 24) = 0
rseq(0x555565b60ca0, 0x20, 0, 0x53053053) = 0
prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0
readlink("/proc/self/exe", "/root/syz-executor1405215999", 4096) = 28
getrandom("\xf2\x1b\x2c\x40\xf9\x0b\x2f\xff", 8, GRND_NONBLOCK) = 8
brk(NULL) = 0x555565b60d00
brk(0x555565b81d00) = 0x555565b81d00
brk(0x555565b82000) = 0x555565b82000
mprotect(0x7eff1714a000, 16384, PROT_READ) = 0
mmap(0x1ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffffffff000
mmap(0x200000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200000000000
mmap(0x200001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200001000000
write(1, "executing program\n", 18executing program
) = 18
memfd_create("syzkaller", 0) = 3
mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7eff0ec00000
write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216
munmap(0x7eff0ec00000, 138412032) = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
ioctl(4, LOOP_SET_FD, 3) = 0
close(3) = 0
close(4) = 0
mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0
[ 90.342463][ T5831] loop0: detected capacity change from 0 to 32768
mount("/dev/loop0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000003,nodiscard,errors=continue,iocharset=maccyrillic,") = 0
openat(AT_FDCWD, "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", O_RDONLY|O_DIRECTORY) = 3
chdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy)
[ 90.403483][ T5831]
[ 90.403483][ T5831] ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 90.403483][ T5831]
[ 90.426428][ T5831]
[ 90.426428][ T5831] ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 90.426428][ T5831]
[ 90.437860][ T5831]
[ 90.437860][ T5831] ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 90.437860][ T5831]
[ 90.448399][ T5831]
mkdir("./file2", 000) = 0
[ 90.448399][ T5831] ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 90.448399][ T5831]
[ 90.459230][ T5831]
[ 90.459230][ T5831] ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 90.459230][ T5831]
[ 90.469763][ T5831]
[ 90.469763][ T5831] ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 90.469763][ T5831]
[ 90.480294][ T5831]
[ 90.480294][ T5831] ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 90.480294][ T5831]
[ 90.493390][ T115]
[ 90.493390][ T115] ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 90.493390][ T115]
[ 90.504902][ T5831] find_entry called with index >= next_index
[ 90.511166][ T5831] ------------[ cut here ]------------
[ 90.516673][ T5831] UBSAN: array-index-out-of-bounds in fs/jfs/jfs_dtree.c:1998:37
[ 90.524422][ T5831] index -128 is out of range for type 'struct dtslot[128]'
[ 90.531780][ T5831] CPU: 0 UID: 0 PID: 5831 Comm: syz-executor140 Not tainted 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(full)
[ 90.531813][ T5831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[ 90.531834][ T5831] Call Trace:
[ 90.531843][ T5831]
[ 90.531852][ T5831] dump_stack_lvl+0x241/0x360
[ 90.531913][ T5831] ? __pfx_dump_stack_lvl+0x10/0x10
[ 90.531942][ T5831] ? __pfx__printk+0x10/0x10
[ 90.531976][ T5831] ? __pfx_txLock+0x10/0x10
[ 90.532011][ T5831] __ubsan_handle_out_of_bounds+0x121/0x150
[ 90.532047][ T5831] dtSplitRoot+0xca0/0x1900
[ 90.532107][ T5831] ? __pfx_dtSplitRoot+0x10/0x10
[ 90.532140][ T5831] ? __pfx_dbAlloc+0x10/0x10
[ 90.532176][ T5831] ? __kmalloc_cache_noprof+0x236/0x370
[ 90.532202][ T5831] ? dtInsert+0x8f6/0x6fa0
[ 90.532236][ T5831] dtInsert+0x141d/0x6fa0
[ 90.532286][ T5831] ? validate_chain+0x8a7/0x24e0
[ 90.532340][ T5831] ? __pfx_dtInsert+0x10/0x10
[ 90.532378][ T5831] ? __lock_acquire+0xad5/0xd80
[ 90.532403][ T5831] ? txLockAlloc+0x2bf/0x400
[ 90.532432][ T5831] ? do_raw_spin_lock+0x151/0x370
[ 90.532464][ T5831] ? do_raw_spin_unlock+0x13c/0x8b0
[ 90.532535][ T5831] jfs_create+0x7c4/0xbb0
[ 90.532565][ T5831] ? __pfx_jfs_create+0x10/0x10
[ 90.532585][ T5831] ? __pfx_jfs_lookup+0x10/0x10
[ 90.532632][ T5831] ? generic_permission+0x2db/0x680
[ 90.532672][ T5831] ? bpf_lsm_inode_create+0x9/0x10
[ 90.532693][ T5831] ? security_inode_create+0xbe/0x340
[ 90.532714][ T5831] ? __pfx_jfs_create+0x10/0x10
[ 90.532747][ T5831] path_openat+0x194b/0x35d0
[ 90.532815][ T5831] ? __pfx_path_openat+0x10/0x10
[ 90.532843][ T5831] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 90.532888][ T5831] do_filp_open+0x284/0x4e0
[ 90.532923][ T5831] ? __pfx_do_filp_open+0x10/0x10
[ 90.532951][ T5831] ? do_raw_spin_lock+0x151/0x370
[ 90.533018][ T5831] do_sys_openat2+0x12b/0x1d0
[ 90.533051][ T5831] ? __pfx_do_sys_openat2+0x10/0x10
[ 90.533077][ T5831] ? lockdep_hardirqs_on+0x9d/0x150
[ 90.533106][ T5831] ? _raw_spin_unlock_irq+0x2e/0x50
[ 90.533135][ T5831] ? ptrace_notify+0x282/0x390
[ 90.533171][ T5831] __x64_sys_openat+0x249/0x2a0
[ 90.533204][ T5831] ? __pfx___x64_sys_openat+0x10/0x10
[ 90.533251][ T5831] do_syscall_64+0xf3/0x210
[ 90.533274][ T5831] ? clear_bhb_loop+0x45/0xa0
[ 90.533299][ T5831] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 90.533320][ T5831] RIP: 0033:0x7eff170d16f9
[ 90.533345][ T5831] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 90.533362][ T5831] RSP: 002b:00007ffe8e945ee8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 90.533384][ T5831] RAX: ffffffffffffffda RBX: 0000200000000000 RCX: 00007eff170d16f9
[ 90.533400][ T5831] RDX: 000000000000275a RSI: 0000200000000c80 RDI: 00000000ffffff9c
[ 90.533413][ T5831] RBP: 00007eff1714a610 R08: 0000000000000000 R09: 0000000000000000
[ 90.533426][ T5831] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 90.533438][ T5831] R13: 00007ffe8e9460b8 R14: 0000000000000001 R15: 0000000000000001
[ 90.533471][ T5831]
[ 90.533480][ T5831] ---[ end trace ]---
[ 90.839621][ T5831] Kernel panic - not syncing: UBSAN: panic_on_warn set ...
[ 90.846822][ T5831] CPU: 0 UID: 0 PID: 5831 Comm: syz-executor140 Not tainted 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(full)
[ 90.859229][ T5831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[ 90.869279][ T5831] Call Trace:
[ 90.872557][ T5831]
[ 90.875486][ T5831] dump_stack_lvl+0x241/0x360
[ 90.880194][ T5831] ? __pfx_dump_stack_lvl+0x10/0x10
[ 90.885422][ T5831] ? __pfx__printk+0x10/0x10
[ 90.890023][ T5831] ? vscnprintf+0x5d/0x90
[ 90.894377][ T5831] panic+0x349/0x880
[ 90.898278][ T5831] ? check_panic_on_warn+0x21/0xb0
[ 90.903407][ T5831] ? __pfx_panic+0x10/0x10
[ 90.907911][ T5831] ? _printk+0xd5/0x120
[ 90.912072][ T5831] ? __pfx__printk+0x10/0x10
[ 90.916695][ T5831] check_panic_on_warn+0x86/0xb0
[ 90.921659][ T5831] __ubsan_handle_out_of_bounds+0x141/0x150
[ 90.927565][ T5831] dtSplitRoot+0xca0/0x1900
[ 90.932105][ T5831] ? __pfx_dtSplitRoot+0x10/0x10
[ 90.937059][ T5831] ? __pfx_dbAlloc+0x10/0x10
[ 90.941670][ T5831] ? __kmalloc_cache_noprof+0x236/0x370
[ 90.947230][ T5831] ? dtInsert+0x8f6/0x6fa0
[ 90.951664][ T5831] dtInsert+0x141d/0x6fa0
[ 90.956024][ T5831] ? validate_chain+0x8a7/0x24e0
[ 90.960997][ T5831] ? __pfx_dtInsert+0x10/0x10
[ 90.965780][ T5831] ? __lock_acquire+0xad5/0xd80
[ 90.970643][ T5831] ? txLockAlloc+0x2bf/0x400
[ 90.975244][ T5831] ? do_raw_spin_lock+0x151/0x370
[ 90.980284][ T5831] ? do_raw_spin_unlock+0x13c/0x8b0
[ 90.985965][ T5831] jfs_create+0x7c4/0xbb0
[ 90.990364][ T5831] ? __pfx_jfs_create+0x10/0x10
[ 90.995318][ T5831] ? __pfx_jfs_lookup+0x10/0x10
[ 91.000206][ T5831] ? generic_permission+0x2db/0x680
[ 91.005435][ T5831] ? bpf_lsm_inode_create+0x9/0x10
[ 91.010554][ T5831] ? security_inode_create+0xbe/0x340
[ 91.015937][ T5831] ? __pfx_jfs_create+0x10/0x10
[ 91.020801][ T5831] path_openat+0x194b/0x35d0
[ 91.025432][ T5831] ? __pfx_path_openat+0x10/0x10
[ 91.030379][ T5831] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 91.036494][ T5831] do_filp_open+0x284/0x4e0
[ 91.041018][ T5831] ? __pfx_do_filp_open+0x10/0x10
[ 91.046058][ T5831] ? do_raw_spin_lock+0x151/0x370
[ 91.051124][ T5831] do_sys_openat2+0x12b/0x1d0
[ 91.055818][ T5831] ? __pfx_do_sys_openat2+0x10/0x10
[ 91.061027][ T5831] ? lockdep_hardirqs_on+0x9d/0x150
[ 91.066234][ T5831] ? _raw_spin_unlock_irq+0x2e/0x50
[ 91.071443][ T5831] ? ptrace_notify+0x282/0x390
[ 91.076226][ T5831] __x64_sys_openat+0x249/0x2a0
[ 91.081091][ T5831] ? __pfx___x64_sys_openat+0x10/0x10
[ 91.086495][ T5831] do_syscall_64+0xf3/0x210
[ 91.091014][ T5831] ? clear_bhb_loop+0x45/0xa0
[ 91.095703][ T5831] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 91.101611][ T5831] RIP: 0033:0x7eff170d16f9
[ 91.106038][ T5831] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 91.125743][ T5831] RSP: 002b:00007ffe8e945ee8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 91.134168][ T5831] RAX: ffffffffffffffda RBX: 0000200000000000 RCX: 00007eff170d16f9
[ 91.142151][ T5831] RDX: 000000000000275a RSI: 0000200000000c80 RDI: 00000000ffffff9c
[ 91.150130][ T5831] RBP: 00007eff1714a610 R08: 0000000000000000 R09: 0000000000000000
[ 91.158316][ T5831] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 91.166293][ T5831] R13: 00007ffe8e9460b8 R14: 0000000000000001 R15: 0000000000000001
[ 91.174373][ T5831]
[ 91.177658][ T5831] Kernel Offset: disabled
[ 91.182022][ T5831] Rebooting in 86400 seconds..