./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2037332847

<...>
Warning: Permanently added '10.128.1.84' (ED25519) to the list of known hosts.
execve("./syz-executor2037332847", ["./syz-executor2037332847"], 0x7ffe163f8720 /* 10 vars */) = 0
brk(NULL)                               = 0x55556af09000
brk(0x55556af09d00)                     = 0x55556af09d00
arch_prctl(ARCH_SET_FS, 0x55556af09380) = 0
set_tid_address(0x55556af09650)         = 5074
set_robust_list(0x55556af09660, 24)     = 0
rseq(0x55556af09ca0, 0x20, 0, 0x53053053) = 0
prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0
readlink("/proc/self/exe", "/root/syz-executor2037332847", 4096) = 28
getrandom("\x57\x90\xc4\x18\xeb\x51\xd3\xc1", 8, GRND_NONBLOCK) = 8
brk(NULL)                               = 0x55556af09d00
brk(0x55556af2ad00)                     = 0x55556af2ad00
brk(0x55556af2b000)                     = 0x55556af2b000
mprotect(0x7f6786b0d000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55556af09650) = 5075
./strace-static-x86_64: Process 5075 attached
[pid  5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...>
[pid  5075] set_robust_list(0x55556af09660, 24) = 0
./strace-static-x86_64: Process 5076 attached
[pid  5075] mkdir("./syzkaller.iVWrbs", 0700 <unfinished ...>
[pid  5074] <... clone resumed>, child_tidptr=0x55556af09650) = 5076
[pid  5076] set_robust_list(0x55556af09660, 24 <unfinished ...>
[pid  5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...>
[pid  5076] <... set_robust_list resumed>) = 0
[pid  5075] <... mkdir resumed>)        = 0
[pid  5076] mkdir("./syzkaller.QbYMA6", 0700 <unfinished ...>
[pid  5075] chmod("./syzkaller.iVWrbs", 0777./strace-static-x86_64: Process 5077 attached
 <unfinished ...>
[pid  5074] <... clone resumed>, child_tidptr=0x55556af09650) = 5077
[pid  5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...>
[pid  5077] set_robust_list(0x55556af09660, 24 <unfinished ...>
[pid  5076] <... mkdir resumed>)        = 0
[pid  5077] <... set_robust_list resumed>) = 0
[pid  5077] mkdir("./syzkaller.sE8ONZ", 0700 <unfinished ...>
[pid  5076] chmod("./syzkaller.QbYMA6", 0777 <unfinished ...>
[pid  5075] <... chmod resumed>)        = 0
[pid  5075] chdir("./syzkaller.iVWrbs") = 0
[pid  5075] mkdir("./0", 0777 <unfinished ...>
[pid  5077] <... mkdir resumed>)        = 0
[pid  5075] <... mkdir resumed>)        = 0
./strace-static-x86_64: Process 5078 attached
[pid  5076] <... chmod resumed>)        = 0
[pid  5074] <... clone resumed>, child_tidptr=0x55556af09650) = 5078
[pid  5077] chmod("./syzkaller.sE8ONZ", 0777 <unfinished ...>
[pid  5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...>
[pid  5078] set_robust_list(0x55556af09660, 24 <unfinished ...>
[pid  5077] <... chmod resumed>)        = 0
[pid  5076] chdir("./syzkaller.QbYMA6" <unfinished ...>
[pid  5075] openat(AT_FDCWD, "/dev/loop0", O_RDWR <unfinished ...>
[pid  5078] <... set_robust_list resumed>) = 0
[pid  5076] <... chdir resumed>)        = 0
[pid  5078] mkdir("./syzkaller.HHLcmC", 0700 <unfinished ...>
[pid  5076] mkdir("./0", 0777 <unfinished ...>
[pid  5075] <... openat resumed>)       = 3
./strace-static-x86_64: Process 5079 attached
[pid  5077] chdir("./syzkaller.sE8ONZ" <unfinished ...>
[pid  5076] <... mkdir resumed>)        = 0
[pid  5075] ioctl(3, LOOP_CLR_FD <unfinished ...>
[pid  5078] <... mkdir resumed>)        = 0
[pid  5075] <... ioctl resumed>)        = -1 ENXIO (No such device or address)
[pid  5074] <... clone resumed>, child_tidptr=0x55556af09650) = 5079
[pid  5079] set_robust_list(0x55556af09660, 24 <unfinished ...>
[pid  5078] chmod("./syzkaller.HHLcmC", 0777 <unfinished ...>
[pid  5077] <... chdir resumed>)        = 0
[pid  5076] openat(AT_FDCWD, "/dev/loop1", O_RDWR <unfinished ...>
[pid  5075] close(3 <unfinished ...>
[pid  5079] <... set_robust_list resumed>) = 0
[pid  5077] mkdir("./0", 0777 <unfinished ...>
[pid  5075] <... close resumed>)        = 0
[pid  5078] <... chmod resumed>)        = 0
[pid  5077] <... mkdir resumed>)        = 0
[pid  5076] <... openat resumed>)       = 3
[pid  5077] openat(AT_FDCWD, "/dev/loop2", O_RDWR <unfinished ...>
[pid  5079] mkdir("./syzkaller.Roznkz", 0700 <unfinished ...>
[pid  5078] chdir("./syzkaller.HHLcmC" <unfinished ...>
[pid  5076] ioctl(3, LOOP_CLR_FD <unfinished ...>
[pid  5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...>
[pid  5078] <... chdir resumed>)        = 0
[pid  5079] <... mkdir resumed>)        = 0
[pid  5078] mkdir("./0", 0777 <unfinished ...>
[pid  5077] <... openat resumed>)       = 3
./strace-static-x86_64: Process 5081 attached
[pid  5081] set_robust_list(0x55556af09660, 24) = 0
[pid  5077] ioctl(3, LOOP_CLR_FD <unfinished ...>
[pid  5081] chdir("./0" <unfinished ...>
[pid  5077] <... ioctl resumed>)        = -1 ENXIO (No such device or address)
[pid  5081] <... chdir resumed>)        = 0
[pid  5079] chmod("./syzkaller.Roznkz", 0777 <unfinished ...>
[pid  5078] <... mkdir resumed>)        = 0
[pid  5077] close(3 <unfinished ...>
[pid  5076] <... ioctl resumed>)        = -1 ENXIO (No such device or address)
[pid  5075] <... clone resumed>, child_tidptr=0x55556af09650) = 5081
[pid  5081] prctl(PR_SET_PDEATHSIG, SIGKILL <unfinished ...>
[pid  5078] openat(AT_FDCWD, "/dev/loop3", O_RDWR <unfinished ...>
[pid  5081] <... prctl resumed>)        = 0
[pid  5079] <... chmod resumed>)        = 0
[pid  5077] <... close resumed>)        = 0
[pid  5076] close(3)                    = 0
[pid  5078] <... openat resumed>)       = 3
[pid  5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...>
[pid  5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5082 attached
 <unfinished ...>
[pid  5081] setpgid(0, 0 <unfinished ...>
[pid  5079] chdir("./syzkaller.Roznkz" <unfinished ...>
[pid  5078] ioctl(3, LOOP_CLR_FD <unfinished ...>
[pid  5082] set_robust_list(0x55556af09660, 24 <unfinished ...>
[pid  5081] <... setpgid resumed>)      = 0
[pid  5079] <... chdir resumed>)        = 0
[pid  5082] <... set_robust_list resumed>) = 0
[pid  5081] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC <unfinished ...>
[pid  5079] mkdir("./0", 0777 <unfinished ...>
[pid  5078] <... ioctl resumed>)        = -1 ENXIO (No such device or address)
./strace-static-x86_64: Process 5083 attached
[pid  5082] chdir("./0" <unfinished ...>
[pid  5081] <... openat resumed>)       = 3
[pid  5079] <... mkdir resumed>)        = 0
[pid  5078] close(3 <unfinished ...>
[pid  5077] <... clone resumed>, child_tidptr=0x55556af09650) = 5082
[pid  5076] <... clone resumed>, child_tidptr=0x55556af09650) = 5083
[pid  5079] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3
[pid  5079] ioctl(3, LOOP_CLR_FD <unfinished ...>
[pid  5083] set_robust_list(0x55556af09660, 24 <unfinished ...>
[pid  5082] <... chdir resumed>)        = 0
[pid  5081] write(3, "1000", 4 <unfinished ...>
[pid  5078] <... close resumed>)        = 0
[pid  5082] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5082] setpgid(0, 0 <unfinished ...>
[pid  5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...>
[pid  5079] <... ioctl resumed>)        = -1 ENXIO (No such device or address)
./strace-static-x86_64: Process 5084 attached
[pid  5083] <... set_robust_list resumed>) = 0
[pid  5082] <... setpgid resumed>)      = 0
[pid  5081] <... write resumed>)        = 4
[pid  5079] close(3 <unfinished ...>
[pid  5084] set_robust_list(0x55556af09660, 24 <unfinished ...>
[pid  5083] chdir("./0" <unfinished ...>
[pid  5082] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC <unfinished ...>
[pid  5081] close(3 <unfinished ...>
[pid  5084] <... set_robust_list resumed>) = 0
[pid  5083] <... chdir resumed>)        = 0
[pid  5081] <... close resumed>)        = 0
[pid  5079] <... close resumed>)        = 0
[pid  5084] chdir("./0" <unfinished ...>
[pid  5083] prctl(PR_SET_PDEATHSIG, SIGKILL <unfinished ...>
[pid  5082] <... openat resumed>)       = 3
[pid  5081] symlink("/dev/binderfs", "./binderfs" <unfinished ...>
[pid  5079] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...>
[pid  5084] <... chdir resumed>)        = 0
[pid  5083] <... prctl resumed>)        = 0
[pid  5082] write(3, "1000", 4 <unfinished ...>
[pid  5081] <... symlink resumed>)      = 0
[pid  5078] <... clone resumed>, child_tidptr=0x55556af09650) = 5084
[pid  5084] prctl(PR_SET_PDEATHSIG, SIGKILL <unfinished ...>
[pid  5083] setpgid(0, 0 <unfinished ...>
[pid  5082] <... write resumed>)        = 4
[pid  5083] <... setpgid resumed>)      = 0
[pid  5082] close(3./strace-static-x86_64: Process 5086 attached
 <unfinished ...>
[pid  5084] <... prctl resumed>)        = 0
[pid  5083] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC <unfinished ...>
[pid  5082] <... close resumed>)        = 0
[pid  5081] memfd_create("syzkaller", 0 <unfinished ...>
[pid  5086] set_robust_list(0x55556af09660, 24 <unfinished ...>
[pid  5084] setpgid(0, 0 <unfinished ...>
[pid  5083] <... openat resumed>)       = 3
[pid  5082] symlink("/dev/binderfs", "./binderfs" <unfinished ...>
[pid  5081] <... memfd_create resumed>) = 3
[pid  5086] <... set_robust_list resumed>) = 0
[pid  5084] <... setpgid resumed>)      = 0
[pid  5083] write(3, "1000", 4 <unfinished ...>
[pid  5082] <... symlink resumed>)      = 0
[pid  5086] chdir("./0" <unfinished ...>
[pid  5084] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC <unfinished ...>
[pid  5083] <... write resumed>)        = 4
[pid  5081] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 <unfinished ...>
[pid  5079] <... clone resumed>, child_tidptr=0x55556af09650) = 5086
[pid  5083] close(3 <unfinished ...>
[pid  5081] <... mmap resumed>)         = 0x7f677e600000
[pid  5086] <... chdir resumed>)        = 0
[pid  5083] <... close resumed>)        = 0
[pid  5084] <... openat resumed>)       = 3
[pid  5083] symlink("/dev/binderfs", "./binderfs" <unfinished ...>
[pid  5086] prctl(PR_SET_PDEATHSIG, SIGKILL <unfinished ...>
[pid  5084] write(3, "1000", 4 <unfinished ...>
[pid  5083] <... symlink resumed>)      = 0
[pid  5082] memfd_create("syzkaller", 0 <unfinished ...>
[pid  5086] <... prctl resumed>)        = 0
[pid  5084] <... write resumed>)        = 4
[pid  5083] memfd_create("syzkaller", 0 <unfinished ...>
[pid  5082] <... memfd_create resumed>) = 3
[pid  5086] setpgid(0, 0 <unfinished ...>
[pid  5084] close(3 <unfinished ...>
[pid  5082] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 <unfinished ...>
[pid  5086] <... setpgid resumed>)      = 0
[pid  5084] <... close resumed>)        = 0
[pid  5084] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5083] <... memfd_create resumed>) = 3
[pid  5082] <... mmap resumed>)         = 0x7f677e600000
[pid  5086] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC <unfinished ...>
[pid  5084] memfd_create("syzkaller", 0) = 3
[pid  5083] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 <unfinished ...>
[pid  5086] <... openat resumed>)       = 3
[pid  5083] <... mmap resumed>)         = 0x7f677e600000
[pid  5086] write(3, "1000", 4 <unfinished ...>
[pid  5084] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f677e600000
[pid  5086] <... write resumed>)        = 4
[pid  5086] close(3)                    = 0
[pid  5086] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5086] memfd_create("syzkaller", 0) = 3
[pid  5086] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f677e600000
[pid  5084] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 <unfinished ...>
[pid  5083] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 <unfinished ...>
[pid  5082] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 <unfinished ...>
[pid  5081] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 <unfinished ...>
[pid  5086] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 <unfinished ...>
[pid  5084] <... write resumed>)        = 16777216
[pid  5084] munmap(0x7f677e600000, 138412032) = 0
[pid  5084] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4
[pid  5084] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5084] close(3)                    = 0
[pid  5084] close(4)                    = 0
[pid  5084] mkdir("./file0", 0777)      = 0
[pid  5084] mount("/dev/loop3", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000013,nodiscard,errors=continue,iocharset=maccyrillic," <unfinished ...>
[pid  5083] <... write resumed>)        = 16777216
[   56.764147][ T5084] loop3: detected capacity change from 0 to 32768
[pid  5083] munmap(0x7f677e600000, 138412032 <unfinished ...>
[pid  5081] <... write resumed>)        = 16777216
[pid  5082] <... write resumed>)        = 16777216
[pid  5082] munmap(0x7f677e600000, 138412032 <unfinished ...>
[pid  5081] munmap(0x7f677e600000, 138412032 <unfinished ...>
[pid  5083] <... munmap resumed>)       = 0
[pid  5083] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4
[pid  5083] ioctl(4, LOOP_SET_FD, 3 <unfinished ...>
[pid  5082] <... munmap resumed>)       = 0
[pid  5082] openat(AT_FDCWD, "/dev/loop2", O_RDWR <unfinished ...>
[pid  5086] <... write resumed>)        = 16777216
[pid  5082] <... openat resumed>)       = 4
[pid  5086] munmap(0x7f677e600000, 138412032 <unfinished ...>
[pid  5082] ioctl(4, LOOP_SET_FD, 3 <unfinished ...>
[pid  5081] <... munmap resumed>)       = 0
[   56.844800][ T5084] 
[   56.844800][ T5084]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   56.844800][ T5084] 
[   56.870473][ T5083] loop1: detected capacity change from 0 to 32768
[   56.881129][ T5082] loop2: detected capacity change from 0 to 32768
[pid  5083] <... ioctl resumed>)        = 0
[pid  5084] <... mount resumed>)        = 0
[pid  5082] <... ioctl resumed>)        = 0
[pid  5081] openat(AT_FDCWD, "/dev/loop0", O_RDWR <unfinished ...>
[pid  5082] close(3)                    = 0
[pid  5081] <... openat resumed>)       = 4
[pid  5082] close(4 <unfinished ...>
[pid  5081] ioctl(4, LOOP_SET_FD, 3 <unfinished ...>
[pid  5082] <... close resumed>)        = 0
[pid  5082] mkdir("./file0", 0777 <unfinished ...>
[pid  5084] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY <unfinished ...>
[pid  5083] close(3 <unfinished ...>
[pid  5082] <... mkdir resumed>)        = 0
[pid  5084] <... openat resumed>)       = 3
[pid  5083] <... close resumed>)        = 0
[pid  5082] mount("/dev/loop2", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000013,nodiscard,errors=continue,iocharset=maccyrillic," <unfinished ...>
[pid  5083] close(4)                    = 0
[pid  5083] mkdir("./file0", 0777)      = 0
[pid  5084] chdir("./file0" <unfinished ...>
[pid  5083] mount("/dev/loop1", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000013,nodiscard,errors=continue,iocharset=maccyrillic," <unfinished ...>
[pid  5084] <... chdir resumed>)        = 0
[pid  5084] openat(AT_FDCWD, "/dev/loop3", O_RDWR <unfinished ...>
[pid  5081] <... ioctl resumed>)        = 0
[pid  5084] <... openat resumed>)       = -1 EBUSY (Device or resource busy)
[pid  5084] rename("./file0/file1", "./file3" <unfinished ...>
[pid  5081] close(3)                    = 0
[pid  5081] close(4)                    = 0
[pid  5086] <... munmap resumed>)       = 0
[pid  5086] openat(AT_FDCWD, "/dev/loop4", O_RDWR <unfinished ...>
[pid  5081] mkdir("./file0", 0777 <unfinished ...>
[pid  5086] <... openat resumed>)       = 4
[pid  5081] <... mkdir resumed>)        = 0
[pid  5086] ioctl(4, LOOP_SET_FD, 3 <unfinished ...>
[   56.894045][ T5081] loop0: detected capacity change from 0 to 32768
[   56.917334][ T5083] 
[   56.917334][ T5083]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   56.917334][ T5083] 
[   56.920699][ T5082] 
[   56.920699][ T5082]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   56.920699][ T5082] 
[pid  5081] mount("/dev/loop0", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000013,nodiscard,errors=continue,iocharset=maccyrillic," <unfinished ...>
[pid  5086] <... ioctl resumed>)        = 0
[pid  5082] <... mount resumed>)        = 0
[pid  5083] <... mount resumed>)        = 0
[pid  5083] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY <unfinished ...>
[pid  5082] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY <unfinished ...>
[pid  5083] <... openat resumed>)       = 3
[pid  5086] close(3 <unfinished ...>
[pid  5083] chdir("./file0")            = 0
[pid  5086] <... close resumed>)        = 0
[pid  5083] openat(AT_FDCWD, "/dev/loop1", O_RDWR <unfinished ...>
[pid  5082] <... openat resumed>)       = 3
[pid  5086] close(4)                    = 0
[pid  5082] chdir("./file0" <unfinished ...>
[pid  5086] mkdir("./file0", 0777 <unfinished ...>
[pid  5083] <... openat resumed>)       = -1 EBUSY (Device or resource busy)
[pid  5082] <... chdir resumed>)        = 0
[pid  5086] <... mkdir resumed>)        = 0
[pid  5083] rename("./file0/file1", "./file3" <unfinished ...>
[pid  5082] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy)
[   56.955274][ T5086] loop4: detected capacity change from 0 to 32768
[   56.958194][ T5084] read_mapping_page failed!
[   56.975898][ T5081] 
[   56.975898][ T5081]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   56.975898][ T5081] 
[   56.989500][ T5084] ERROR: (device loop3): txCommit: 
[   56.989500][ T5084] 
[   56.990381][ T5082] read_mapping_page failed!
[pid  5082] rename("./file0/file1", "./file3" <unfinished ...>
[pid  5081] <... mount resumed>)        = 0
[pid  5081] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5086] mount("/dev/loop4", "./file0", "jfs", 0, "iocharset=maccroatian,discard=0x0000000000000013,nodiscard,errors=continue,iocharset=maccyrillic," <unfinished ...>
[pid  5081] chdir("./file0")            = 0
[pid  5081] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy)
[pid  5081] rename("./file0/file1", "./file3" <unfinished ...>
[pid  5084] <... rename resumed>)       = -1 EIO (Input/output error)
[pid  5084] exit_group(0)               = ?
[pid  5084] +++ exited with 0 +++
[pid  5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5084, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=33 /* 0.33 s */} ---
[pid  5078] restart_syscall(<... resuming interrupted clone ...>) = 0
[pid  5082] <... rename resumed>)       = -1 EIO (Input/output error)
[pid  5082] exit_group(0 <unfinished ...>
[pid  5078] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5082] <... exit_group resumed>)   = ?
[pid  5078] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid  5082] +++ exited with 0 +++
[pid  5078] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY <unfinished ...>
[pid  5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5082, si_uid=0, si_status=0, si_utime=7 /* 0.07 s */, si_stime=30 /* 0.30 s */} ---
[pid  5078] <... openat resumed>)       = 3
[pid  5077] restart_syscall(<... resuming interrupted clone ...> <unfinished ...>
[pid  5083] <... rename resumed>)       = -1 EIO (Input/output error)
[pid  5078] newfstatat(3, "",  <unfinished ...>
[pid  5077] <... restart_syscall resumed>) = 0
[pid  5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5083] exit_group(0 <unfinished ...>
[pid  5081] <... rename resumed>)       = -1 EIO (Input/output error)
[pid  5078] getdents64(3,  <unfinished ...>
[pid  5081] exit_group(0 <unfinished ...>
[pid  5077] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5078] <... getdents64 resumed>0x55556af0a6f0 /* 4 entries */, 32768) = 112
[pid  5077] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid  5078] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5077] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
[pid  5077] newfstatat(3, "",  <unfinished ...>
[pid  5078] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid  5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5081] <... exit_group resumed>)   = ?
[pid  5078] newfstatat(AT_FDCWD, "./0/binderfs",  <unfinished ...>
[pid  5077] getdents64(3,  <unfinished ...>
[pid  5078] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5077] <... getdents64 resumed>0x55556af0a6f0 /* 4 entries */, 32768) = 112
[pid  5078] unlink("./0/binderfs" <unfinished ...>
[pid  5077] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5081] +++ exited with 0 +++
[pid  5078] <... unlink resumed>)       = 0
[pid  5077] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid  5083] <... exit_group resumed>)   = ?
[pid  5078] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5077] newfstatat(AT_FDCWD, "./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5081, si_uid=0, si_status=0, si_utime=9 /* 0.09 s */, si_stime=29 /* 0.29 s */} ---
[pid  5077] unlink("./0/binderfs")      = 0
[pid  5075] restart_syscall(<... resuming interrupted clone ...> <unfinished ...>
[pid  5077] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5075] <... restart_syscall resumed>) = 0
[pid  5075] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5083] +++ exited with 0 +++
[pid  5075] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY <unfinished ...>
[pid  5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5083, si_uid=0, si_status=0, si_utime=10 /* 0.10 s */, si_stime=28 /* 0.28 s */} ---
[pid  5075] <... openat resumed>)       = 3
[pid  5075] newfstatat(3, "",  <unfinished ...>
[pid  5076] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5076] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid  5075] getdents64(3,  <unfinished ...>
[pid  5076] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
[pid  5075] <... getdents64 resumed>0x55556af0a6f0 /* 4 entries */, 32768) = 112
[pid  5076] newfstatat(3, "",  <unfinished ...>
[pid  5075] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5076] getdents64(3,  <unfinished ...>
[pid  5075] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid  5076] <... getdents64 resumed>0x55556af0a6f0 /* 4 entries */, 32768) = 112
[pid  5075] newfstatat(AT_FDCWD, "./0/binderfs",  <unfinished ...>
[pid  5076] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5086] <... mount resumed>)        = 0
[pid  5076] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[   57.003061][ T5083] read_mapping_page failed!
[   57.009509][ T5082] ERROR: (device loop2): txCommit: 
[   57.009509][ T5082] 
[   57.015460][ T5081] read_mapping_page failed!
[   57.022169][ T5083] ERROR: (device loop1): txCommit: 
[   57.022169][ T5083] 
[   57.029526][ T5081] ERROR: (device loop0): txCommit: 
[   57.029526][ T5081] 
[   57.044552][ T5086] 
[   57.044552][ T5086]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   57.044552][ T5086] 
[pid  5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5076] newfstatat(AT_FDCWD, "./0/binderfs",  <unfinished ...>
[pid  5075] unlink("./0/binderfs" <unfinished ...>
[pid  5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5076] unlink("./0/binderfs")      = 0
[pid  5076] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5086] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5086] chdir("./file0")            = 0
[pid  5086] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy)
[pid  5086] rename("./file0/file1", "./file3" <unfinished ...>
[pid  5075] <... unlink resumed>)       = 0
[   57.085925][  T914] 
[   57.085925][  T914]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   57.085925][  T914] 
[   57.091488][ T1089] 
[   57.091488][ T1089]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   57.091488][ T1089] 
[   57.108464][ T2865] 
[   57.108464][ T2865]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   57.108464][ T2865] 
[   57.120269][ T5086] read_mapping_page failed!
[   57.124808][ T5086] ERROR: (device loop4): txCommit: 
[   57.124808][ T5086] 
[pid  5075] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5086] <... rename resumed>)       = -1 EIO (Input/output error)
[pid  5086] exit_group(0)               = ?
[pid  5086] +++ exited with 0 +++
[   57.134598][ T2858] 
[   57.134598][ T2858]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   57.134598][ T2858] 
[   57.144035][  T914] 
[   57.144035][  T914]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   57.144035][  T914] 
[   57.145533][ T2865] 
[   57.145533][ T2865]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   57.145533][ T2865] 
[   57.166248][ T1089] 
[   57.166248][ T1089]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   57.166248][ T1089] 
[   57.169286][ T2858] 
[   57.169286][ T2858]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[pid  5079] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5086, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=27 /* 0.27 s */} ---
[   57.169286][ T2858] 
[   57.181907][  T112] 
[   57.181907][  T112]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   57.181907][  T112] 
[   57.189646][  T111] 
[   57.189646][  T111]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   57.189646][  T111] 
[   57.199476][  T112] 
[   57.199476][  T112]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   57.199476][  T112] 
[   57.219560][  T914] 
[   57.219560][  T914]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   57.219560][  T914] 
[   57.219909][  T112] 
[pid  5079] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5079] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
[pid  5079] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5079] getdents64(3, 0x55556af0a6f0 /* 4 entries */, 32768) = 112
[pid  5079] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5079] newfstatat(AT_FDCWD, "./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5079] unlink("./0/binderfs")      = 0
[   57.219909][  T112]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   57.219909][  T112] 
[   57.233149][ T2865] 
[   57.233149][ T2865]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   57.233149][ T2865] 
[   57.241334][ T1089] 
[   57.241334][ T1089]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   57.241334][ T1089] 
[   57.252266][  T914] 
[   57.252266][  T914]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   57.252266][  T914] 
[   57.261850][ T2858] 
[   57.261850][ T2858]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   57.261850][ T2858] 
[   57.271953][ T2865] 
[   57.271953][ T2865]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   57.271953][ T2865] 
[   57.272491][ T1089] 
[   57.272491][ T1089]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   57.272491][ T1089] 
[   57.303838][  T111] 
[   57.303838][  T111]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   57.303838][  T111] 
[   57.303902][   T50] 
[   57.303902][   T50]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   57.303902][   T50] 
[   57.314558][  T111] 
[   57.314558][  T111]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   57.314558][  T111] 
[   57.324855][   T50] 
[   57.324855][   T50]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   57.324855][   T50] 
[   57.336830][ T2858] 
[   57.336830][ T2858]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   57.336830][ T2858] 
[   57.345928][ T2865] 
[   57.345928][ T2865]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   57.345928][ T2865] 
[   57.357475][  T111] 
[   57.357475][  T111]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   57.357475][  T111] 
[   57.366913][  T914] 
[   57.366913][  T914]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   57.366913][  T914] 
[   57.377881][ T2865] 
[   57.377881][ T2865]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   57.377881][ T2865] 
[   57.387792][  T112] 
[   57.387792][  T112]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   57.387792][  T112] 
[   57.399544][ T5076] 
[   57.399544][ T5076]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   57.399544][ T5076] 
[   57.420738][  T914] 
[   57.420738][  T914]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   57.420738][  T914] 
[   57.431701][ T5078] 
[   57.431701][ T5078]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   57.431701][ T5078] 
[   57.431790][  T111] 
[   57.431790][  T111]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   57.431790][  T111] 
[   57.442376][ T2858] 
[   57.442376][ T2858]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   57.442376][ T2858] 
[   57.453159][  T111] 
[   57.453159][  T111]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   57.453159][  T111] 
[   57.465640][ T5078] 
[   57.465640][ T5078]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   57.465640][ T5078] 
[   57.473618][   T50] 
[   57.473618][   T50]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   57.473618][   T50] 
[   57.484419][ T1089] 
[   57.484419][ T1089]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   57.484419][ T1089] 
[   57.494461][   T50] 
[   57.494461][   T50]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   57.494461][   T50] 
[   57.506215][ T5076] 
[   57.506215][ T5076]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   57.506215][ T5076] 
[   57.516473][ T2858] 
[   57.516473][ T2858]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   57.516473][ T2858] 
[   57.528005][  T112] 
[   57.528005][  T112]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   57.528005][  T112] 
[   57.536395][  T111] 
[   57.536395][  T111]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   57.536395][  T111] 
[   57.557276][ T1089] 
[   57.557276][ T1089]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   57.557276][ T1089] 
[   57.562943][  T112] ==================================================================
[   57.569032][   T50] 
[   57.569032][   T50]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   57.569032][   T50] 
[   57.575723][  T112] BUG: KASAN: slab-use-after-free in txEnd+0x354/0x560
[   57.575751][  T112] Write of size 8 at addr ffff888022506840 by task jfsCommit/112
[   57.575765][  T112] 
[   57.575771][  T112] CPU: 0 PID: 112 Comm: jfsCommit Not tainted 6.9.0-rc7-syzkaller #0
[   57.575788][  T112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024
[   57.575798][  T112] Call Trace:
[   57.575805][  T112]  <TASK>
[   57.575812][  T112]  dump_stack_lvl+0x241/0x360
[   57.575850][  T112]  ? __pfx_dump_stack_lvl+0x10/0x10
[   57.575872][  T112]  ? __pfx__printk+0x10/0x10
[   57.575894][  T112]  ? _printk+0xd5/0x120
[   57.586375][  T111] 
[   57.586375][  T111]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   57.586375][  T111] 
[   57.593103][  T112]  ? __virt_addr_valid+0x183/0x520
[   57.593129][  T112]  ? __virt_addr_valid+0x183/0x520
[   57.593151][  T112]  print_report+0x169/0x550
[   57.601176][  T111] 
[   57.601176][  T111]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   57.601176][  T111] 
[   57.603149][  T112]  ? __virt_addr_valid+0x183/0x520
[   57.611357][   T50] 
[   57.611357][   T50]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   57.611357][   T50] 
[   57.621217][  T112]  ? __virt_addr_valid+0x183/0x520
[   57.621243][  T112]  ? __virt_addr_valid+0x44e/0x520
[   57.621265][  T112]  ? __phys_addr+0xba/0x170
[   57.624915][  T111] 
[   57.624915][  T111]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   57.624915][  T111] 
[   57.627457][  T112]  ? txEnd+0x354/0x560
[   57.627481][  T112]  kasan_report+0x143/0x180
[   57.627504][  T112]  ? txEnd+0x354/0x560
[   57.637783][ T5075] 
[   57.637783][ T5075]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   57.637783][ T5075] 
[   57.641910][  T112]  kasan_check_range+0x282/0x290
[   57.646269][ T5075] 
[   57.646269][ T5075]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   57.646269][ T5075] 
[   57.656427][  T112]  txEnd+0x354/0x560
[   57.656454][  T112]  jfs_lazycommit+0x634/0xb80
[   57.656475][  T112]  ? _raw_spin_unlock_irqrestore+0x8f/0x140
[   57.656499][  T112]  ? lockdep_hardirqs_on+0x99/0x150
[   57.669187][ T5077] 
[   57.669187][ T5077]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   57.669187][ T5077] 
[   57.671166][  T112]  ? __pfx_jfs_lazycommit+0x10/0x10
[   57.681816][ T5077] 
[   57.681816][ T5077]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   57.681816][ T5077] 
[   57.686630][  T112]  ? __pfx_default_wake_function+0x10/0x10
[   57.686660][  T112]  ? __kthread_parkme+0x169/0x1d0
[   57.686681][  T112]  ? __pfx_jfs_lazycommit+0x10/0x10
[   57.686701][  T112]  kthread+0x2f0/0x390
[   57.704064][ T5079] 
[   57.704064][ T5079]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   57.704064][ T5079] 
[   57.707439][  T112]  ? __pfx_jfs_lazycommit+0x10/0x10
[   57.707466][  T112]  ? __pfx_kthread+0x10/0x10
[   57.707487][  T112]  ret_from_fork+0x4b/0x80
[   57.707509][  T112]  ? __pfx_kthread+0x10/0x10
[   57.707529][  T112]  ret_from_fork_asm+0x1a/0x30
[   57.712417][ T5079] 
[   57.712417][ T5079]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   57.712417][ T5079] 
[   57.722394][  T112]  </TASK>
[   57.722404][  T112] 
[   57.722408][  T112] Allocated by task 5084:
[   57.722417][  T112]  kasan_save_track+0x3f/0x80
[   57.722436][  T112]  __kasan_kmalloc+0x98/0xb0
[   57.722452][  T112]  kmalloc_trace+0x1db/0x360
[   57.894214][  T112]  lmLogOpen+0x320/0x1040
[   57.898544][  T112]  jfs_mount_rw+0xf1/0x6a0
[   57.902945][  T112]  jfs_fill_super+0x681/0xc50
[   57.907607][  T112]  mount_bdev+0x20a/0x2d0
[   57.911924][  T112]  legacy_get_tree+0xee/0x190
[   57.916670][  T112]  vfs_get_tree+0x90/0x2a0
[   57.921066][  T112]  do_new_mount+0x2be/0xb40
[   57.925549][  T112]  __se_sys_mount+0x2d9/0x3c0
[   57.930206][  T112]  do_syscall_64+0xf5/0x240
[   57.934695][  T112]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   57.940572][  T112] 
[   57.942874][  T112] Freed by task 5078:
[   57.946831][  T112]  kasan_save_track+0x3f/0x80
[   57.951488][  T112]  kasan_save_free_info+0x40/0x50
[   57.956495][  T112]  poison_slab_object+0xa6/0xe0
[   57.961323][  T112]  __kasan_slab_free+0x37/0x60
[   57.966069][  T112]  kfree+0x153/0x3a0
[   57.970120][  T112]  lmLogClose+0x2a1/0x530
[   57.974429][  T112]  jfs_umount+0x2ce/0x3a0
[   57.978736][  T112]  jfs_put_super+0x8a/0x190
[   57.983217][  T112]  generic_shutdown_super+0x136/0x2d0
[   57.988565][  T112]  kill_block_super+0x44/0x90
[   57.993217][  T112]  deactivate_locked_super+0xc4/0x130
[   57.998565][  T112]  cleanup_mnt+0x426/0x4c0
[   58.002958][  T112]  task_work_run+0x24f/0x310
[   58.007545][  T112]  ptrace_notify+0x2d2/0x380
[   58.012124][  T112]  syscall_exit_work+0xc6/0x190
[   58.016964][  T112]  syscall_exit_to_user_mode+0x273/0x370
[   58.022580][  T112]  do_syscall_64+0x102/0x240
[   58.027150][  T112]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   58.033020][  T112] 
[   58.035325][  T112] The buggy address belongs to the object at ffff888022506800
[   58.035325][  T112]  which belongs to the cache kmalloc-1k of size 1024
[   58.049358][  T112] The buggy address is located 64 bytes inside of
[   58.049358][  T112]  freed 1024-byte region [ffff888022506800, ffff888022506c00)
[   58.063142][  T112] 
[   58.065464][  T112] The buggy address belongs to the physical page:
[   58.071850][  T112] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x22500
[   58.080593][  T112] head: order:3 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[   58.088134][  T112] anon flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff)
[   58.096698][  T112] page_type: 0xffffffff()
[   58.101004][  T112] raw: 00fff00000000840 ffff888015041dc0 0000000000000000 dead000000000001
[   58.109568][  T112] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000
[   58.118132][  T112] head: 00fff00000000840 ffff888015041dc0 0000000000000000 dead000000000001
[   58.126781][  T112] head: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000
[   58.135435][  T112] head: 00fff00000000003 ffffea0000894001 ffffea0000894048 00000000ffffffff
[   58.144104][  T112] head: 0000000800000000 0000000000000000 00000000ffffffff 0000000000000000
[   58.152759][  T112] page dumped because: kasan: bad access detected
[   58.159156][  T112] page_owner tracks the page as allocated
[   58.164846][  T112] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid -1083071170 (swapper/0), ts 1, free_ts 0
[   58.184536][  T112]  post_alloc_hook+0x1ea/0x210
[   58.189285][  T112]  get_page_from_freelist+0x3410/0x35b0
[   58.194810][  T112]  __alloc_pages+0x256/0x6c0
[   58.199382][  T112]  alloc_slab_page+0x5f/0x160
[   58.204041][  T112]  new_slab+0x84/0x2f0
[   58.208089][  T112]  ___slab_alloc+0xc73/0x1260
[   58.212740][  T112]  kmalloc_node_trace+0x264/0x3a0
[   58.217746][  T112]  alloc_desc+0x60/0x7f0
[   58.221965][  T112]  __irq_alloc_descs+0x3de/0x970
[   58.226883][  T112]  irq_domain_alloc_irqs_locked+0x83/0xbb0
[   58.232666][  T112]  __irq_domain_alloc_irqs+0xaa/0x110
[   58.238013][  T112]  __msi_domain_alloc_irqs+0x727/0x1380
[   58.243539][  T112]  msi_domain_alloc_locked+0x394/0x510
[   58.248977][  T112]  msi_domain_alloc_irqs_all_locked+0x120/0x1d0
[   58.255196][  T112]  msix_capability_init+0x994/0x1380
[   58.260468][  T112]  __pci_enable_msix_range+0x5c1/0x700
[   58.265907][  T112] page_owner free stack trace missing
[   58.271247][  T112] 
[   58.273547][  T112] Memory state around the buggy address:
[   58.279153][  T112]  ffff888022506700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[pid  5079] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5078] <... umount2 resumed>)      = 0
[pid  5079] <... umount2 resumed>)      = 0
[pid  5077] <... umount2 resumed>)      = 0
[pid  5076] <... umount2 resumed>)      = 0
[pid  5075] <... umount2 resumed>)      = 0
[pid  5078] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5076] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5078] newfstatat(AT_FDCWD, "./0/file0",  <unfinished ...>
[pid  5076] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid  5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5076] newfstatat(AT_FDCWD, "./0/file0",  <unfinished ...>
[pid  5078] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5078] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid  5076] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5078] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY <unfinished ...>
[pid  5076] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid  5078] <... openat resumed>)       = 4
[pid  5076] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY <unfinished ...>
[pid  5078] newfstatat(4, "",  <unfinished ...>
[pid  5076] <... openat resumed>)       = 4
[pid  5078] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5076] newfstatat(4, "",  <unfinished ...>
[pid  5078] getdents64(4,  <unfinished ...>
[pid  5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5078] <... getdents64 resumed>0x55556af12730 /* 2 entries */, 32768) = 48
[pid  5076] getdents64(4,  <unfinished ...>
[pid  5078] getdents64(4,  <unfinished ...>
[pid  5076] <... getdents64 resumed>0x55556af12730 /* 2 entries */, 32768) = 48
[pid  5078] <... getdents64 resumed>0x55556af12730 /* 0 entries */, 32768) = 0
[pid  5076] getdents64(4,  <unfinished ...>
[pid  5078] close(4 <unfinished ...>
[pid  5076] <... getdents64 resumed>0x55556af12730 /* 0 entries */, 32768) = 0
[pid  5078] <... close resumed>)        = 0
[pid  5076] close(4 <unfinished ...>
[pid  5078] rmdir("./0/file0" <unfinished ...>
[pid  5076] <... close resumed>)        = 0
[pid  5079] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5078] <... rmdir resumed>)        = 0
[pid  5077] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5076] rmdir("./0/file0" <unfinished ...>
[pid  5075] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5079] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid  5077] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid  5079] newfstatat(AT_FDCWD, "./0/file0",  <unfinished ...>
[pid  5077] newfstatat(AT_FDCWD, "./0/file0",  <unfinished ...>
[pid  5076] <... rmdir resumed>)        = 0
[pid  5075] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid  5079] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5076] getdents64(3,  <unfinished ...>
[pid  5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5075] newfstatat(AT_FDCWD, "./0/file0",  <unfinished ...>
[pid  5079] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5077] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5076] <... getdents64 resumed>0x55556af0a6f0 /* 0 entries */, 32768) = 0
[pid  5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5078] getdents64(3,  <unfinished ...>
[pid  5076] close(3 <unfinished ...>
[pid  5075] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5078] <... getdents64 resumed>0x55556af0a6f0 /* 0 entries */, 32768) = 0
[pid  5077] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid  5076] <... close resumed>)        = 0
[pid  5075] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid  5078] close(3 <unfinished ...>
[pid  5076] rmdir("./0" <unfinished ...>
[pid  5079] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid  5078] <... close resumed>)        = 0
[pid  5076] <... rmdir resumed>)        = 0
[pid  5075] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY <unfinished ...>
[pid  5079] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY <unfinished ...>
[pid  5077] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY <unfinished ...>
[pid  5075] <... openat resumed>)       = 4
[pid  5078] rmdir("./0" <unfinished ...>
[pid  5077] <... openat resumed>)       = 4
[pid  5076] mkdir("./1", 0777 <unfinished ...>
[pid  5075] newfstatat(4, "",  <unfinished ...>
[pid  5079] <... openat resumed>)       = 4
[pid  5078] <... rmdir resumed>)        = 0
[pid  5077] newfstatat(4, "",  <unfinished ...>
[pid  5076] <... mkdir resumed>)        = 0
[pid  5078] mkdir("./1", 0777 <unfinished ...>
[pid  5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5076] openat(AT_FDCWD, "/dev/loop1", O_RDWR <unfinished ...>
[pid  5079] newfstatat(4, "",  <unfinished ...>
[pid  5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5079] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5078] <... mkdir resumed>)        = 0
[pid  5077] getdents64(4,  <unfinished ...>
[pid  5076] <... openat resumed>)       = 3
[pid  5079] getdents64(4,  <unfinished ...>
[pid  5076] ioctl(3, LOOP_CLR_FD <unfinished ...>
[pid  5075] getdents64(4,  <unfinished ...>
[pid  5079] <... getdents64 resumed>0x55556af12730 /* 2 entries */, 32768) = 48
[pid  5077] <... getdents64 resumed>0x55556af12730 /* 2 entries */, 32768) = 48
[   58.287209][  T112]  ffff888022506780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   58.295243][  T112] >ffff888022506800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   58.303294][  T112]                                            ^
[   58.309421][  T112]  ffff888022506880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   58.317458][  T112]  ffff888022506900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   58.325755][  T112] ==================================================================
[pid  5078] openat(AT_FDCWD, "/dev/loop3", O_RDWR <unfinished ...>
[pid  5079] getdents64(4,  <unfinished ...>
[pid  5078] <... openat resumed>)       = 3
[pid  5077] getdents64(4,  <unfinished ...>
[pid  5075] <... getdents64 resumed>0x55556af12730 /* 2 entries */, 32768) = 48
[pid  5079] <... getdents64 resumed>0x55556af12730 /* 0 entries */, 32768) = 0
[pid  5078] ioctl(3, LOOP_CLR_FD <unfinished ...>
[pid  5077] <... getdents64 resumed>0x55556af12730 /* 0 entries */, 32768) = 0
[pid  5079] close(4 <unfinished ...>
[pid  5075] getdents64(4,  <unfinished ...>
[pid  5077] close(4 <unfinished ...>
[pid  5079] <... close resumed>)        = 0
[pid  5075] <... getdents64 resumed>0x55556af12730 /* 0 entries */, 32768) = 0
[pid  5079] rmdir("./0/file0" <unfinished ...>
[pid  5077] <... close resumed>)        = 0
[pid  5075] close(4 <unfinished ...>
[pid  5079] <... rmdir resumed>)        = 0
[pid  5077] rmdir("./0/file0" <unfinished ...>
[pid  5075] <... close resumed>)        = 0
[pid  5079] getdents64(3,  <unfinished ...>
[pid  5077] <... rmdir resumed>)        = 0
[pid  5075] rmdir("./0/file0" <unfinished ...>
[pid  5079] <... getdents64 resumed>0x55556af0a6f0 /* 0 entries */, 32768) = 0
[pid  5077] getdents64(3,  <unfinished ...>
[pid  5075] <... rmdir resumed>)        = 0
[pid  5079] close(3 <unfinished ...>
[pid  5077] <... getdents64 resumed>0x55556af0a6f0 /* 0 entries */, 32768) = 0
[pid  5075] getdents64(3,  <unfinished ...>
[pid  5079] <... close resumed>)        = 0
[pid  5077] close(3 <unfinished ...>
[pid  5075] <... getdents64 resumed>0x55556af0a6f0 /* 0 entries */, 32768) = 0
[pid  5079] rmdir("./0" <unfinished ...>
[pid  5077] <... close resumed>)        = 0
[pid  5075] close(3 <unfinished ...>
[pid  5079] <... rmdir resumed>)        = 0
[pid  5077] rmdir("./0" <unfinished ...>
[pid  5075] <... close resumed>)        = 0
[pid  5079] mkdir("./1", 0777 <unfinished ...>
[pid  5077] <... rmdir resumed>)        = 0
[pid  5075] rmdir("./0" <unfinished ...>
[pid  5079] <... mkdir resumed>)        = 0
[pid  5077] mkdir("./1", 0777 <unfinished ...>
[pid  5075] <... rmdir resumed>)        = 0
[pid  5079] openat(AT_FDCWD, "/dev/loop4", O_RDWR <unfinished ...>
[pid  5077] <... mkdir resumed>)        = 0
[pid  5075] mkdir("./1", 0777 <unfinished ...>
[pid  5079] <... openat resumed>)       = 3
[pid  5077] openat(AT_FDCWD, "/dev/loop2", O_RDWR <unfinished ...>
[pid  5075] <... mkdir resumed>)        = 0
[pid  5079] ioctl(3, LOOP_CLR_FD <unfinished ...>
[pid  5077] <... openat resumed>)       = 3
[pid  5075] openat(AT_FDCWD, "/dev/loop0", O_RDWR <unfinished ...>
[pid  5077] ioctl(3, LOOP_CLR_FD <unfinished ...>
[pid  5075] <... openat resumed>)       = 3
[   58.354424][  T112] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[   58.361679][  T112] CPU: 0 PID: 112 Comm: jfsCommit Not tainted 6.9.0-rc7-syzkaller #0
[   58.369756][  T112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024
[   58.379831][  T112] Call Trace:
[   58.383112][  T112]  <TASK>
[   58.386034][  T112]  dump_stack_lvl+0x241/0x360
[   58.390704][  T112]  ? __pfx_dump_stack_lvl+0x10/0x10
[   58.395910][  T112]  ? __pfx__printk+0x10/0x10
[   58.400485][  T112]  ? preempt_schedule+0xe1/0xf0
[   58.405325][  T112]  ? vscnprintf+0x5d/0x90
[   58.409638][  T112]  panic+0x349/0x860
[   58.413519][  T112]  ? check_panic_on_warn+0x21/0xb0
[   58.418615][  T112]  ? __pfx_panic+0x10/0x10
[   58.423016][  T112]  ? _raw_spin_unlock_irqrestore+0x130/0x140
[   58.428979][  T112]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   58.435321][  T112]  ? print_report+0x502/0x550
[   58.440005][  T112]  check_panic_on_warn+0x86/0xb0
[   58.444934][  T112]  ? txEnd+0x354/0x560
[   58.448991][  T112]  end_report+0x77/0x160
[   58.453224][  T112]  kasan_report+0x154/0x180
[   58.457721][  T112]  ? txEnd+0x354/0x560
[   58.461780][  T112]  kasan_check_range+0x282/0x290
[   58.466711][  T112]  txEnd+0x354/0x560
[   58.470599][  T112]  jfs_lazycommit+0x634/0xb80
[   58.475268][  T112]  ? _raw_spin_unlock_irqrestore+0x8f/0x140
[   58.481153][  T112]  ? lockdep_hardirqs_on+0x99/0x150
[   58.486366][  T112]  ? __pfx_jfs_lazycommit+0x10/0x10
[   58.491578][  T112]  ? __pfx_default_wake_function+0x10/0x10
[   58.497386][  T112]  ? __kthread_parkme+0x169/0x1d0
[   58.502404][  T112]  ? __pfx_jfs_lazycommit+0x10/0x10
[   58.507596][  T112]  kthread+0x2f0/0x390
[   58.511675][  T112]  ? __pfx_jfs_lazycommit+0x10/0x10
[   58.516876][  T112]  ? __pfx_kthread+0x10/0x10
[   58.521551][  T112]  ret_from_fork+0x4b/0x80
[   58.525963][  T112]  ? __pfx_kthread+0x10/0x10
[   58.530557][  T112]  ret_from_fork_asm+0x1a/0x30
[   58.535336][  T112]  </TASK>
[   58.538837][  T112] Kernel Offset: disabled
[   58.543148][  T112] Rebooting in 86400 seconds..