./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3540595705
<...>
Warning: Permanently added '10.128.1.120' (ED25519) to the list of known hosts.
execve("./syz-executor3540595705", ["./syz-executor3540595705"], 0x7fffc9d848f0 /* 10 vars */) = 0
brk(NULL) = 0x55558137e000
brk(0x55558137ee00) = 0x55558137ee00
arch_prctl(ARCH_SET_FS, 0x55558137e480) = 0
set_tid_address(0x55558137e750) = 5827
set_robust_list(0x55558137e760, 24) = 0
rseq(0x55558137eda0, 0x20, 0, 0x53053053) = 0
prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0
readlink("/proc/self/exe", "/root/syz-executor3540595705", 4096) = 28
getrandom("\x12\x83\xb8\x7c\xa3\x69\x90\x5c", 8, GRND_NONBLOCK) = 8
brk(NULL) = 0x55558137ee00
brk(0x55558139fe00) = 0x55558139fe00
brk(0x5555813a0000) = 0x5555813a0000
mprotect(0x7fdc2d14a000, 16384, PROT_READ) = 0
mmap(0x3ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x3ffffffff000
mmap(0x400000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x400000000000
mmap(0x400001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x400001000000
rt_sigaction(SIGRTMIN, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=0}, NULL, 8) = 0
rt_sigaction(SIGRT_1, {sa_handler=SIG_IGN, sa_mask=[], sa_flags=0}, NULL, 8) = 0
rt_sigaction(SIGSEGV, {sa_handler=0x7fdc2d09cea0, sa_mask=[], sa_flags=SA_RESTORER|SA_NODEFER|SA_SIGINFO, sa_restorer=0x7fdc2d0a4f10}, NULL, 8) = 0
rt_sigaction(SIGBUS, {sa_handler=0x7fdc2d09cea0, sa_mask=[], sa_flags=SA_RESTORER|SA_NODEFER|SA_SIGINFO, sa_restorer=0x7fdc2d0a4f10}, NULL, 8) = 0
write(1, "executing program\n", 18executing program
) = 18
memfd_create("syzkaller", 0) = 3
mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fdc24c00000
write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216
munmap(0x7fdc24c00000, 138412032) = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
ioctl(4, LOOP_SET_FD, 3) = 0
close(3) = 0
close(4) = 0
[ 106.165212][ T5827] loop0: detected capacity change from 0 to 32768
mkdir("./file0", 0777) = 0
mount("/dev/loop0", "./file0", "jfs", MS_SILENT|MS_RELATIME, "") = 0
openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
chdir("./file0") = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy)
creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000) = 4
mkdir("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 0777) = 0
--- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=NULL} ---
mknod("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000) = 0
symlink("./file0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0
creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000) = 5
creat("./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa", 000) = 6
[ 106.314851][ T5827] ------------[ cut here ]------------
[ 106.320406][ T5827] UBSAN: array-index-out-of-bounds in fs/jfs/jfs_dtree.c:1600:11
[ 106.328202][ T5827] index 27 is out of range for type 'struct lv[20]'
[ 106.334866][ T5827] CPU: 1 UID: 0 PID: 5827 Comm: syz-executor354 Not tainted 6.14.0-rc6-syzkaller-00244-g31d7109a19f6 #0
[ 106.334884][ T5827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[ 106.334896][ T5827] Call Trace:
[ 106.334901][ T5827] <TASK>
[ 106.334908][ T5827] dump_stack_lvl+0x241/0x360
[ 106.334948][ T5827] ? __pfx_dump_stack_lvl+0x10/0x10
[ 106.334963][ T5827] ? __pfx__printk+0x10/0x10
[ 106.334992][ T5827] ? __pfx_dtInsertEntry+0x10/0x10
[ 106.335018][ T5827] __ubsan_handle_out_of_bounds+0x121/0x150
[ 106.335044][ T5827] dtSplitPage+0x3e58/0x3ec0
[ 106.335105][ T5827] ? __pfx_dtSplitPage+0x10/0x10
[ 106.335128][ T5827] ? __pfx_dbAlloc+0x10/0x10
[ 106.335149][ T5827] ? __kmalloc_cache_noprof+0x243/0x390
[ 106.335163][ T5827] ? dtInsert+0x85a/0x6d10
[ 106.335185][ T5827] dtInsert+0x14d5/0x6d10
[ 106.335216][ T5827] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 106.335249][ T5827] ? mark_lock+0x9a/0x360
[ 106.335272][ T5827] ? __pfx_dtInsert+0x10/0x10
[ 106.335297][ T5827] ? lockdep_hardirqs_on_prepare+0x43d/0x780
[ 106.335320][ T5827] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[ 106.335346][ T5827] ? kasan_quarantine_put+0xdc/0x230
[ 106.335365][ T5827] ? lockdep_hardirqs_on+0x99/0x150
[ 106.335391][ T5827] ? dtSearch+0x1d59/0x2520
[ 106.335411][ T5827] ? kfree+0x196/0x430
[ 106.335433][ T5827] ? dtSearch+0x1d59/0x2520
[ 106.335482][ T5827] jfs_rename+0xafe/0x1bf0
[ 106.335512][ T5827] ? __pfx_jfs_rename+0x10/0x10
[ 106.335565][ T5827] ? do_raw_spin_unlock+0x13c/0x8b0
[ 106.335585][ T5827] ? __pfx_jfs_rename+0x10/0x10
[ 106.335609][ T5827] vfs_rename+0xbdb/0xf00
[ 106.335643][ T5827] ? __pfx_vfs_rename+0x10/0x10
[ 106.335670][ T5827] ? bpf_lsm_path_rename+0x9/0x10
[ 106.335690][ T5827] do_renameat2+0xd94/0x13f0
[ 106.335747][ T5827] ? __pfx_do_renameat2+0x10/0x10
[ 106.335779][ T5827] ? __virt_addr_valid+0x183/0x530
[ 106.335801][ T5827] ? __virt_addr_valid+0x45f/0x530
[ 106.335823][ T5827] ? __phys_addr_symbol+0x2f/0x70
[ 106.335850][ T5827] ? strncpy_from_user+0x146/0x270
[ 106.335874][ T5827] ? getname_flags+0x1e3/0x540
[ 106.335892][ T5827] __x64_sys_rename+0x82/0x90
[ 106.335916][ T5827] do_syscall_64+0xf3/0x230
[ 106.335938][ T5827] ? clear_bhb_loop+0x35/0x90
[ 106.335962][ T5827] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 106.335989][ T5827] RIP: 0033:0x7fdc2d0d0f39
[ 106.336005][ T5827] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 106.336017][ T5827] RSP: 002b:00007ffd6f6245a8 EFLAGS: 00000246 ORIG_RAX: 0000000000000052
[ 106.336035][ T5827] RAX: ffffffffffffffda RBX: 00007ffd6f6245b0 RCX: 00007fdc2d0d0f39
[ 106.336045][ T5827] RDX: 0000000000000000 RSI: 0000400000000f40 RDI: 0000400000000300
[ 106.336055][ T5827] RBP: 00007ffd6f6245b8 R08: 00007fdc2d09cea0 R09: 00007fdc2d09cea0
[ 106.336065][ T5827] R10: 00007fdc2d09cea0 R11: 0000000000000246 R12: 0000000000000000
[ 106.336074][ T5827] R13: 00007ffd6f624818 R14: 0000000000000001 R15: 0000000000000001
[ 106.336095][ T5827] </TASK>
[ 106.336101][ T5827] ---[ end trace ]---
[ 106.636031][ T5827] Kernel panic - not syncing: UBSAN: panic_on_warn set ...
[ 106.643233][ T5827] CPU: 1 UID: 0 PID: 5827 Comm: syz-executor354 Not tainted 6.14.0-rc6-syzkaller-00244-g31d7109a19f6 #0
[ 106.654354][ T5827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[ 106.664411][ T5827] Call Trace:
[ 106.667691][ T5827] <TASK>
[ 106.670618][ T5827] dump_stack_lvl+0x241/0x360
[ 106.675300][ T5827] ? __pfx_dump_stack_lvl+0x10/0x10
[ 106.680498][ T5827] ? __pfx__printk+0x10/0x10
[ 106.685109][ T5827] ? vscnprintf+0x5d/0x90
[ 106.689450][ T5827] panic+0x349/0x880
[ 106.693347][ T5827] ? check_panic_on_warn+0x21/0xb0
[ 106.698461][ T5827] ? __pfx_panic+0x10/0x10
[ 106.702873][ T5827] ? _printk+0xd5/0x120
[ 106.707043][ T5827] ? __pfx__printk+0x10/0x10
[ 106.711644][ T5827] check_panic_on_warn+0x86/0xb0
[ 106.716590][ T5827] __ubsan_handle_out_of_bounds+0x141/0x150
[ 106.722487][ T5827] dtSplitPage+0x3e58/0x3ec0
[ 106.727113][ T5827] ? __pfx_dtSplitPage+0x10/0x10
[ 106.732052][ T5827] ? __pfx_dbAlloc+0x10/0x10
[ 106.736653][ T5827] ? __kmalloc_cache_noprof+0x243/0x390
[ 106.742205][ T5827] ? dtInsert+0x85a/0x6d10
[ 106.746633][ T5827] dtInsert+0x14d5/0x6d10
[ 106.751003][ T5827] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 106.757101][ T5827] ? mark_lock+0x9a/0x360
[ 106.761439][ T5827] ? __pfx_dtInsert+0x10/0x10
[ 106.766128][ T5827] ? lockdep_hardirqs_on_prepare+0x43d/0x780
[ 106.772120][ T5827] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[ 106.778466][ T5827] ? kasan_quarantine_put+0xdc/0x230
[ 106.783768][ T5827] ? lockdep_hardirqs_on+0x99/0x150
[ 106.788981][ T5827] ? dtSearch+0x1d59/0x2520
[ 106.793496][ T5827] ? kfree+0x196/0x430
[ 106.797570][ T5827] ? dtSearch+0x1d59/0x2520
[ 106.802098][ T5827] jfs_rename+0xafe/0x1bf0
[ 106.806527][ T5827] ? __pfx_jfs_rename+0x10/0x10
[ 106.811425][ T5827] ? do_raw_spin_unlock+0x13c/0x8b0
[ 106.816638][ T5827] ? __pfx_jfs_rename+0x10/0x10
[ 106.821497][ T5827] vfs_rename+0xbdb/0xf00
[ 106.825835][ T5827] ? __pfx_vfs_rename+0x10/0x10
[ 106.830692][ T5827] ? bpf_lsm_path_rename+0x9/0x10
[ 106.835714][ T5827] do_renameat2+0xd94/0x13f0
[ 106.840327][ T5827] ? __pfx_do_renameat2+0x10/0x10
[ 106.845382][ T5827] ? __virt_addr_valid+0x183/0x530
[ 106.850500][ T5827] ? __virt_addr_valid+0x45f/0x530
[ 106.855616][ T5827] ? __phys_addr_symbol+0x2f/0x70
[ 106.860652][ T5827] ? strncpy_from_user+0x146/0x270
[ 106.865778][ T5827] ? getname_flags+0x1e3/0x540
[ 106.870547][ T5827] __x64_sys_rename+0x82/0x90
[ 106.875232][ T5827] do_syscall_64+0xf3/0x230
[ 106.879737][ T5827] ? clear_bhb_loop+0x35/0x90
[ 106.884420][ T5827] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 106.890311][ T5827] RIP: 0033:0x7fdc2d0d0f39
[ 106.894720][ T5827] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 106.914354][ T5827] RSP: 002b:00007ffd6f6245a8 EFLAGS: 00000246 ORIG_RAX: 0000000000000052
[ 106.922793][ T5827] RAX: ffffffffffffffda RBX: 00007ffd6f6245b0 RCX: 00007fdc2d0d0f39
[ 106.930779][ T5827] RDX: 0000000000000000 RSI: 0000400000000f40 RDI: 0000400000000300
[ 106.938763][ T5827] RBP: 00007ffd6f6245b8 R08: 00007fdc2d09cea0 R09: 00007fdc2d09cea0
[ 106.946758][ T5827] R10: 00007fdc2d09cea0 R11: 0000000000000246 R12: 0000000000000000
[ 106.954745][ T5827] R13: 00007ffd6f624818 R14: 0000000000000001 R15: 0000000000000001
[ 106.962751][ T5827] </TASK>
[ 106.966085][ T5827] Kernel Offset: disabled
[ 106.970484][ T5827] Rebooting in 86400 seconds..