./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2726983136
<...>
Warning: Permanently added '10.128.1.142' (ED25519) to the list of known hosts.
execve("./syz-executor2726983136", ["./syz-executor2726983136"], 0x7ffe80e0e750 /* 10 vars */) = 0
brk(NULL) = 0x555590f3e000
brk(0x555590f3ed00) = 0x555590f3ed00
arch_prctl(ARCH_SET_FS, 0x555590f3e380) = 0
set_tid_address(0x555590f3e650) = 5228
set_robust_list(0x555590f3e660, 24) = 0
rseq(0x555590f3eca0, 0x20, 0, 0x53053053) = 0
prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0
readlink("/proc/self/exe", "/root/syz-executor2726983136", 4096) = 28
getrandom("\x83\x00\x7a\xdc\x24\x80\x13\x57", 8, GRND_NONBLOCK) = 8
brk(NULL) = 0x555590f3ed00
brk(0x555590f5fd00) = 0x555590f5fd00
brk(0x555590f60000) = 0x555590f60000
mprotect(0x7f751c9ad000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
mkdir("./syzkaller.pjpliD", 0700) = 0
chmod("./syzkaller.pjpliD", 0777) = 0
chdir("./syzkaller.pjpliD") = 0
mkdir("./0", 0777) = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3
ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address)
close(3) = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5229 attached
, child_tidptr=0x555590f3e650) = 5229
[pid 5229] set_robust_list(0x555590f3e660, 24) = 0
[pid 5229] chdir("./0") = 0
[pid 5229] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 5229] setpgid(0, 0) = 0
[pid 5229] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 5229] write(3, "1000", 4) = 4
[pid 5229] close(3) = 0
[pid 5229] symlink("/dev/binderfs", "./binderfs") = 0
[pid 5229] write(1, "executing program\n", 18executing program
) = 18
[pid 5229] memfd_create("syzkaller", 0) = 3
[pid 5229] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7514400000
[pid 5229] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216
[pid 5229] munmap(0x7f7514400000, 138412032) = 0
[pid 5229] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid 5229] ioctl(4, LOOP_SET_FD, 3) = 0
[pid 5229] close(3) = 0
[pid 5229] close(4) = 0
[pid 5229] mkdir("./file0", 0777) = 0
[ 59.782209][ T5229] loop0: detected capacity change from 0 to 32768
[ 59.814270][ T5229] =======================================================
[ 59.814270][ T5229] WARNING: The mand mount option has been deprecated and
[pid 5229] mount("/dev/loop0", "./file0", "jfs", MS_MANDLOCK, "iocharset=none") = 0
[pid 5229] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid 5229] chdir("./file0") = 0
[pid 5229] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy)
[pid 5229] openat(AT_FDCWD, "memory.events", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4
[pid 5229] write(4, "\x23\x21\x20\x0a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x69\x6f\x63\x68\x61\x72\x73\x65\x74\x3d\x6e\x6f\x6e\x65\x00\x00\x6f\x64\x69\x73\x63\x61\x72\x64\x2c\x75\x73\x72\x71\x75\x6f\x74\x61\x2c\x64\x69"..., 65228) = 65228
[ 59.814270][ T5229] and is ignored by this kernel. Remove the mand
[ 59.814270][ T5229] option from the mount to silence this warning.
[ 59.814270][ T5229] =======================================================
[pid 5229] openat(AT_FDCWD, "cpuacct.usage_sys", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = -1 EIO (Input/output error)
[pid 5229] exit_group(0) = ?
[pid 5229] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5229, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=16 /* 0.16 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x555590f3f6f0 /* 4 entries */, 32768) = 112
umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./0/binderfs") = 0
[ 59.898858][ T5229] ERROR: (device loop0): dbAlloc: the hint is outside the map
[ 59.898858][ T5229]
[ 59.909810][ T5229] ERROR: (device loop0): remounting filesystem as read-only
[ 59.917190][ T5229] ialloc: diAlloc returned -5!
[ 59.937959][ T5228] ------------[ cut here ]------------
[ 59.943525][ T5228] kernel BUG at fs/jfs/inode.c:169!
[ 59.948911][ T5228] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI
[ 59.948941][ T5228] CPU: 0 UID: 0 PID: 5228 Comm: syz-executor272 Not tainted 6.11.0-rc1-next-20240729-syzkaller #0
[ 59.948960][ T5228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[ 59.948973][ T5228] RIP: 0010:jfs_evict_inode+0x434/0x440
[ 59.948999][ T5228] Code: df e8 70 11 da fe e9 1d fe ff ff e8 66 8c 72 fe 48 c7 c7 c0 08 d4 8e 4c 89 ee e8 f7 55 cb 01 e9 92 fd ff ff e8 4d 8c 72 fe 90 <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90
[ 59.949020][ T5228] RSP: 0018:ffffc90003387a68 EFLAGS: 00010293
[ 59.949036][ T5228] RAX: ffffffff83213f13 RBX: ffff888075b600b8 RCX: ffff888024668000
[ 59.949050][ T5228] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff888075b60430
[ 59.949061][ T5228] RBP: ffff888075b605f0 R08: ffffffff822f1a03 R09: 1ffffffff26e6f1a
[ 59.949074][ T5228] R10: dffffc0000000000 R11: ffffffff83211c80 R12: ffff888075b60430
[ 59.949086][ T5228] R13: ffffffff8c428970 R14: dffffc0000000000 R15: ffff888075b60430
[ 59.949099][ T5228] FS: 0000555590f3e380(0000) GS:ffff8880b9200000(0000) knlGS:0000000000000000
[ 59.949116][ T5228] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 59.949128][ T5228] CR2: 0000555590f476f8 CR3: 0000000074ade000 CR4: 00000000003506f0
[ 59.949143][ T5228] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 59.949154][ T5228] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 59.949166][ T5228] Call Trace:
[ 59.949172][ T5228] <TASK>
[ 59.949179][ T5228] ? __die_body+0x88/0xe0
[ 59.949203][ T5228] ? die+0xcf/0x110
[ 59.949225][ T5228] ? do_trap+0x15a/0x3a0
[ 59.949246][ T5228] ? jfs_evict_inode+0x434/0x440
[ 59.949264][ T5228] ? do_error_trap+0x1dc/0x2c0
[ 59.949284][ T5228] ? jfs_evict_inode+0x434/0x440
[ 59.949304][ T5228] ? __pfx_do_error_trap+0x10/0x10
[ 59.949322][ T5228] ? report_bug+0x3e8/0x500
[ 59.949354][ T5228] ? handle_invalid_op+0x34/0x40
[ 59.949373][ T5228] ? jfs_evict_inode+0x434/0x440
[ 59.949390][ T5228] ? exc_invalid_op+0x38/0x50
[ 59.949408][ T5228] ? asm_exc_invalid_op+0x1a/0x20
[ 59.949426][ T5228] ? __pfx_jfs_get_dquots+0x10/0x10
[ 59.949442][ T5228] ? dquot_drop+0x43/0x160
[ 59.949461][ T5228] ? jfs_evict_inode+0x433/0x440
[ 59.949476][ T5228] ? jfs_evict_inode+0x434/0x440
[ 59.949490][ T5228] ? jfs_evict_inode+0x433/0x440
[ 59.949504][ T5228] ? __pfx_jfs_evict_inode+0x10/0x10
[ 59.949523][ T5228] evict+0x2a8/0x630
[ 59.949546][ T5228] evict_inodes+0x5f9/0x690
[ 59.949567][ T5228] ? __pfx_evict_inodes+0x10/0x10
[ 59.949591][ T5228] ? dput+0x37/0x2b0
[ 59.949612][ T5228] generic_shutdown_super+0x9d/0x2d0
[ 59.949636][ T5228] kill_block_super+0x44/0x90
[ 59.949651][ T5228] deactivate_locked_super+0xc4/0x130
[ 59.949674][ T5228] cleanup_mnt+0x41f/0x4b0
[ 59.949691][ T5228] ? lockdep_hardirqs_on+0x99/0x150
[ 59.949711][ T5228] task_work_run+0x24f/0x310
[ 59.949729][ T5228] ? __pfx_task_work_run+0x10/0x10
[ 59.949745][ T5228] ? path_umount+0x284/0xf70
[ 59.949770][ T5228] ptrace_notify+0x2d2/0x380
[ 59.949790][ T5228] ? __pfx_path_umount+0x10/0x10
[ 59.949812][ T5228] ? __pfx_ptrace_notify+0x10/0x10
[ 59.949833][ T5228] ? __x64_sys_umount+0x123/0x170
[ 59.949854][ T5228] ? __pfx___x64_sys_umount+0x10/0x10
[ 59.949877][ T5228] syscall_exit_work+0xc6/0x190
[ 59.949898][ T5228] syscall_exit_to_user_mode+0x279/0x370
[ 59.949922][ T5228] do_syscall_64+0x100/0x230
[ 59.949937][ T5228] ? clear_bhb_loop+0x35/0x90
[ 59.949957][ T5228] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 59.949975][ T5228] RIP: 0033:0x7f751c934407
[ 59.949995][ T5228] Code: 07 00 48 83 c4 08 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8
[ 59.950008][ T5228] RSP: 002b:00007ffd8b21fee8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a6
[ 59.950025][ T5228] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f751c934407
[ 59.950037][ T5228] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd8b21ffa0
[ 59.950048][ T5228] RBP: 00007ffd8b21ffa0 R08: 0000000000000000 R09: 0000000000000000
[ 59.950059][ T5228] R10: 00000000ffffffff R11: 0000000000000206 R12: 00007ffd8b221000
[ 59.950070][ T5228] R13: 0000555590f3f6c0 R14: 0000000000000001 R15: 431bde82d7b634db
[ 59.950090][ T5228] </TASK>
[ 59.950095][ T5228] Modules linked in:
[ 59.950108][ T5228] ---[ end trace 0000000000000000 ]---
[ 60.372009][ T5228] RIP: 0010:jfs_evict_inode+0x434/0x440
[ 60.377636][ T5228] Code: df e8 70 11 da fe e9 1d fe ff ff e8 66 8c 72 fe 48 c7 c7 c0 08 d4 8e 4c 89 ee e8 f7 55 cb 01 e9 92 fd ff ff e8 4d 8c 72 fe 90 <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90
[ 60.397306][ T5228] RSP: 0018:ffffc90003387a68 EFLAGS: 00010293
[ 60.403392][ T5228] RAX: ffffffff83213f13 RBX: ffff888075b600b8 RCX: ffff888024668000
[ 60.411600][ T5228] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff888075b60430
[ 60.419767][ T5228] RBP: ffff888075b605f0 R08: ffffffff822f1a03 R09: 1ffffffff26e6f1a
[ 60.427774][ T5228] R10: dffffc0000000000 R11: ffffffff83211c80 R12: ffff888075b60430
[ 60.435745][ T5228] R13: ffffffff8c428970 R14: dffffc0000000000 R15: ffff888075b60430
[ 60.443792][ T5228] FS: 0000555590f3e380(0000) GS:ffff8880b9300000(0000) knlGS:0000000000000000
[ 60.452748][ T5228] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 60.459433][ T5228] CR2: 000000000045bdd0 CR3: 0000000074ade000 CR4: 00000000003506f0
[ 60.467530][ T5228] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 60.475487][ T5228] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 60.483618][ T5228] Kernel panic - not syncing: Fatal exception
[ 60.490396][ T5228] Kernel Offset: disabled
[ 60.494711][ T5228] Rebooting in 86400 seconds..