./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2036780382
<...>
Warning: Permanently added '10.128.0.70' (ED25519) to the list of known hosts.
execve("./syz-executor2036780382", ["./syz-executor2036780382"], 0x7ffe0a0e6320 /* 10 vars */) = 0
brk(NULL) = 0x5555572f2000
brk(0x5555572f2d00) = 0x5555572f2d00
arch_prctl(ARCH_SET_FS, 0x5555572f2380) = 0
set_tid_address(0x5555572f2650) = 5017
set_robust_list(0x5555572f2660, 24) = 0
rseq(0x5555572f2ca0, 0x20, 0, 0x53053053) = 0
prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0
readlink("/proc/self/exe", "/root/syz-executor2036780382", 4096) = 28
getrandom("\x40\x39\xed\x87\xd1\x56\x7b\x58", 8, GRND_NONBLOCK) = 8
brk(NULL) = 0x5555572f2d00
brk(0x555557313d00) = 0x555557313d00
brk(0x555557314000) = 0x555557314000
mprotect(0x7ff868603000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
[ 79.039781][ T26] audit: type=1400 audit(1692762067.305:83): avc: denied { write } for pid=5014 comm="strace-static-x" path="pipe:[30184]" dev="pipefs" ino=30184 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1
[ 79.069163][ T26] audit: type=1400 audit(1692762067.335:84): avc: denied { execmem } for pid=5017 comm="syz-executor203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
memfd_create("syzkaller", 0) = 3
mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff860151000
[ 79.090256][ T5017] memfd_create() without MFD_EXEC nor MFD_NOEXEC_SEAL, pid=5017 'syz-executor203'
write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 7629503) = 7629503
munmap(0x7ff860151000, 7629503) = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
ioctl(4, LOOP_SET_FD, 3) = 0
close(3) = 0
mkdir("./file0", 0777) = 0
mount("/dev/loop0", "./file0", "jfs", MS_RDONLY|MS_NOSUID, "integrity,iocharset=none,discard,iocharset=iso8859-14,noquota,discard,") = 0
openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[ 79.182671][ T26] audit: type=1400 audit(1692762067.445:85): avc: denied { read write } for pid=5017 comm="syz-executor203" name="loop0" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 79.186821][ T5017] loop0: detected capacity change from 0 to 14901
chdir("./file0") = 0
ioctl(4, LOOP_CLR_FD) = 0
close(4) = 0
[ 79.207428][ T26] audit: type=1400 audit(1692762067.445:86): avc: denied { open } for pid=5017 comm="syz-executor203" path="/dev/loop0" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 79.238689][ T26] audit: type=1400 audit(1692762067.455:87): avc: denied { ioctl } for pid=5017 comm="syz-executor203" path="/dev/loop0" dev="devtmpfs" ino=648 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 79.245659][ T5017] ================================================================================
[ 79.265143][ T26] audit: type=1400 audit(1692762067.485:88): avc: denied { mounton } for pid=5017 comm="syz-executor203" path="/root/file0" dev="sda1" ino=1927 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1
[ 79.297280][ T26] audit: type=1400 audit(1692762067.495:89): avc: denied { mount } for pid=5017 comm="syz-executor203" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[ 79.319553][ T5017] UBSAN: array-index-out-of-bounds in fs/jfs/jfs_dtree.c:3392:37
[ 79.328307][ T5017] index -72 is out of range for type 'dtslot [128]'
[ 79.335329][ T5017] CPU: 1 PID: 5017 Comm: syz-executor203 Not tainted 6.5.0-rc7-syzkaller-00013-g53663f4103ff #0
[ 79.345795][ T5017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023
[ 79.355862][ T5017] Call Trace:
[ 79.359145][ T5017] <TASK>
[ 79.362084][ T5017] dump_stack_lvl+0x125/0x1b0
[ 79.366792][ T5017] __ubsan_handle_out_of_bounds+0x111/0x150
[ 79.372713][ T5017] dtSearch+0x211e/0x2450
[ 79.377071][ T5017] ? rcu_is_watching+0x12/0xb0
[ 79.381863][ T5017] jfs_lookup+0x1a1/0x370
[ 79.386218][ T5017] ? jfs_link+0x5f0/0x5f0
[ 79.390571][ T5017] ? d_alloc_parallel+0x6c2/0x15f0
[ 79.395707][ T5017] ? __d_lookup+0x28c/0x4c0
[ 79.400238][ T5017] ? jfs_link+0x5f0/0x5f0
[ 79.404593][ T5017] lookup_open.isra.0+0x8dc/0x1360
[ 79.409736][ T5017] ? try_lookup_one_len+0x190/0x190
[ 79.414953][ T5017] ? reacquire_held_locks+0x4b0/0x4b0
[ 79.420350][ T5017] ? down_write_killable_nested+0x250/0x250
[ 79.426270][ T5017] path_openat+0x931/0x29c0
[ 79.430798][ T5017] ? path_lookupat+0x770/0x770
[ 79.435592][ T5017] ? lockdep_hardirqs_on_prepare+0x410/0x410
[ 79.441608][ T5017] do_filp_open+0x1de/0x430
[ 79.446161][ T5017] ? may_open_dev+0xf0/0xf0
[ 79.450684][ T5017] ? find_held_lock+0x2d/0x110
[ 79.455472][ T5017] ? _raw_spin_unlock+0x28/0x40
[ 79.460357][ T5017] ? alloc_fd+0x2da/0x6c0
[ 79.464716][ T5017] do_sys_openat2+0x176/0x1e0
[ 79.469449][ T5017] ? build_open_flags+0x690/0x690
[ 79.474675][ T5017] ? ptrace_notify+0xf4/0x130
[ 79.479367][ T5017] ? reacquire_held_locks+0x4b0/0x4b0
[ 79.484783][ T5017] __x64_sys_open+0x154/0x1e0
[ 79.489513][ T5017] ? do_sys_open+0x160/0x160
[ 79.494249][ T5017] ? _raw_spin_unlock_irq+0x2e/0x50
[ 79.499510][ T5017] ? ptrace_notify+0xf4/0x130
[ 79.504369][ T5017] do_syscall_64+0x38/0xb0
[ 79.508843][ T5017] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 79.515306][ T5017] RIP: 0033:0x7ff86858e6b9
[ 79.519756][ T5017] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 79.539386][ T5017] RSP: 002b:00007ffcfc66cc58 EFLAGS: 00000246 ORIG_RAX: 0000000000000002
[ 79.547826][ T5017] RAX: ffffffffffffffda RBX: 00007ffcfc66ce38 RCX: 00007ff86858e6b9
[ 79.555819][ T5017] RDX: 0000000000000000 RSI: 000000000014da42 RDI: 00000000200000c0
[ 79.563819][ T5017] RBP: 00007ff868603610 R08: 000000000000234a R09: 0000000000000000
[ 79.571801][ T5017] R10: 00007ffcfc66cb20 R11: 0000000000000246 R12: 0000000000000001
[ 79.579781][ T5017] R13: 00007ffcfc66ce28 R14: 0000000000000001 R15: 0000000000000001
[ 79.587765][ T5017] </TASK>
[ 79.591176][ T5017] ================================================================================
[ 79.600675][ T5017] Kernel panic - not syncing: UBSAN: panic_on_warn set ...
[ 79.607900][ T5017] CPU: 0 PID: 5017 Comm: syz-executor203 Not tainted 6.5.0-rc7-syzkaller-00013-g53663f4103ff #0
[ 79.618324][ T5017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023
[ 79.628394][ T5017] Call Trace:
[ 79.631680][ T5017] <TASK>
[ 79.634617][ T5017] dump_stack_lvl+0xd9/0x1b0
[ 79.639222][ T5017] panic+0x6a4/0x750
[ 79.643133][ T5017] ? panic_smp_self_stop+0xa0/0xa0
[ 79.648285][ T5017] ? syslog_print_all+0x3f0/0x3f0
[ 79.653335][ T5017] check_panic_on_warn+0xab/0xb0
[ 79.658290][ T5017] __ubsan_handle_out_of_bounds+0x139/0x150
[ 79.664211][ T5017] dtSearch+0x211e/0x2450
[ 79.668555][ T5017] ? rcu_is_watching+0x12/0xb0
[ 79.673346][ T5017] jfs_lookup+0x1a1/0x370
[ 79.677694][ T5017] ? jfs_link+0x5f0/0x5f0
[ 79.682066][ T5017] ? d_alloc_parallel+0x6c2/0x15f0
[ 79.687201][ T5017] ? __d_lookup+0x28c/0x4c0
[ 79.691720][ T5017] ? jfs_link+0x5f0/0x5f0
[ 79.696080][ T5017] lookup_open.isra.0+0x8dc/0x1360
[ 79.701206][ T5017] ? try_lookup_one_len+0x190/0x190
[ 79.706429][ T5017] ? reacquire_held_locks+0x4b0/0x4b0
[ 79.711842][ T5017] ? down_write_killable_nested+0x250/0x250
[ 79.717773][ T5017] path_openat+0x931/0x29c0
[ 79.722313][ T5017] ? path_lookupat+0x770/0x770
[ 79.727108][ T5017] ? lockdep_hardirqs_on_prepare+0x410/0x410
[ 79.733130][ T5017] do_filp_open+0x1de/0x430
[ 79.737666][ T5017] ? may_open_dev+0xf0/0xf0
[ 79.742207][ T5017] ? find_held_lock+0x2d/0x110
[ 79.746999][ T5017] ? _raw_spin_unlock+0x28/0x40
[ 79.751887][ T5017] ? alloc_fd+0x2da/0x6c0
[ 79.756252][ T5017] do_sys_openat2+0x176/0x1e0
[ 79.760965][ T5017] ? build_open_flags+0x690/0x690
[ 79.766036][ T5017] ? ptrace_notify+0xf4/0x130
[ 79.770734][ T5017] ? reacquire_held_locks+0x4b0/0x4b0
[ 79.776138][ T5017] __x64_sys_open+0x154/0x1e0
[ 79.780852][ T5017] ? do_sys_open+0x160/0x160
[ 79.785477][ T5017] ? _raw_spin_unlock_irq+0x2e/0x50
[ 79.790711][ T5017] ? ptrace_notify+0xf4/0x130
[ 79.795407][ T5017] do_syscall_64+0x38/0xb0
[ 79.799855][ T5017] entry_SYSCALL_64_after_hwframe+0x63/0xcd
[ 79.805781][ T5017] RIP: 0033:0x7ff86858e6b9
[ 79.810218][ T5017] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
[ 79.829852][ T5017] RSP: 002b:00007ffcfc66cc58 EFLAGS: 00000246 ORIG_RAX: 0000000000000002
[ 79.838303][ T5017] RAX: ffffffffffffffda RBX: 00007ffcfc66ce38 RCX: 00007ff86858e6b9
[ 79.846300][ T5017] RDX: 0000000000000000 RSI: 000000000014da42 RDI: 00000000200000c0
[ 79.854291][ T5017] RBP: 00007ff868603610 R08: 000000000000234a R09: 0000000000000000
[ 79.862282][ T5017] R10: 00007ffcfc66cb20 R11: 0000000000000246 R12: 0000000000000001
[ 79.870276][ T5017] R13: 00007ffcfc66ce28 R14: 0000000000000001 R15: 0000000000000001
[ 79.878381][ T5017] </TASK>
[ 79.881689][ T5017] Kernel Offset: disabled
[ 79.886123][ T5017] Rebooting in 86400 seconds..