./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor942827008

<...>
Warning: Permanently added '10.128.1.133' (ED25519) to the list of known hosts.
execve("./syz-executor942827008", ["./syz-executor942827008"], 0x7ffc3e1518e0 /* 10 vars */) = 0
brk(NULL)                               = 0x55555cd1f000
brk(0x55555cd1fd00)                     = 0x55555cd1fd00
arch_prctl(ARCH_SET_FS, 0x55555cd1f380) = 0
set_tid_address(0x55555cd1f650)         = 5089
set_robust_list(0x55555cd1f660, 24)     = 0
rseq(0x55555cd1fca0, 0x20, 0, 0x53053053) = 0
prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0
readlink("/proc/self/exe", "/root/syz-executor942827008", 4096) = 27
getrandom("\x61\xca\x19\xa2\x7c\xa1\x20\xe4", 8, GRND_NONBLOCK) = 8
brk(NULL)                               = 0x55555cd1fd00
brk(0x55555cd40d00)                     = 0x55555cd40d00
brk(0x55555cd41000)                     = 0x55555cd41000
mprotect(0x7fd0bbd6d000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
unshare(CLONE_NEWPID)                   = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555cd1f650) = 5090
./strace-static-x86_64: Process 5090 attached
[pid  5090] set_robust_list(0x55555cd1f660, 24) = 0
[pid  5090] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL) = -1 EBUSY (Device or resource busy)
[pid  5090] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5090] setsid()                    = 1
[pid  5090] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0
[pid  5090] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0
[pid  5090] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0
[pid  5090] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0
[pid  5090] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, NULL) = 0
[pid  5090] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0
[pid  5090] unshare(CLONE_NEWNS)        = 0
[pid  5090] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0
[pid  5090] unshare(CLONE_NEWIPC)       = 0
[pid  5090] unshare(CLONE_NEWCGROUP)    = 0
[pid  5090] unshare(CLONE_NEWUTS)       = 0
[pid  5090] unshare(CLONE_SYSVSEM)      = 0
[pid  5090] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = 3
[pid  5090] write(3, "16777216", 8)     = 8
[pid  5090] close(3)                    = 0
[pid  5090] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = 3
[pid  5090] write(3, "536870912", 9)    = 9
[pid  5090] close(3)                    = 0
[pid  5090] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = 3
[pid  5090] write(3, "1024", 4)         = 4
[pid  5090] close(3)                    = 0
[pid  5090] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = 3
[pid  5090] write(3, "8192", 4)         = 4
[pid  5090] close(3)                    = 0
[pid  5090] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = 3
[pid  5090] write(3, "1024", 4)         = 4
[pid  5090] close(3)                    = 0
[pid  5090] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = 3
[pid  5090] write(3, "1024", 4)         = 4
[pid  5090] close(3)                    = 0
[pid  5090] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = 3
[pid  5090] write(3, "1024 1048576 500 1024", 21) = 21
[pid  5090] close(3)                    = 0
[pid  5090] getpid()                    = 1
[pid  5090] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1<<CAP_CHOWN|1<<CAP_DAC_OVERRIDE|1<<CAP_DAC_READ_SEARCH|1<<CAP_FOWNER|1<<CAP_FSETID|1<<CAP_KILL|1<<CAP_SETGID|1<<CAP_SETUID|1<<CAP_SETPCAP|1<<CAP_LINUX_IMMUTABLE|1<<CAP_NET_BIND_SERVICE|1<<CAP_NET_BROADCAST|1<<CAP_NET_ADMIN|1<<CAP_NET_RAW|1<<CAP_IPC_LOCK|1<<CAP_IPC_OWNER|1<<CAP_SYS_MODULE|1<<CAP_SYS_RAWIO|1<<CAP_SYS_CHROOT|1<<CAP_SYS_PTRACE|1<<CAP_SYS_PACCT|1<<CAP_SYS_ADMIN|1<<CAP_SYS_BOOT|1<<CAP_SYS_NICE|1<<CAP_SYS_RESOURCE|1<<CAP_SYS_TIME|1<<CAP_SYS_TTY_CONFIG|1<<CAP_MKNOD|1<<CAP_LEASE|1<<CAP_AUDIT_WRITE|1<<CAP_AUDIT_CONTROL|1<<CAP_SETFCAP|1<<CAP_MAC_OVERRIDE|1<<CAP_MAC_ADMIN|1<<CAP_SYSLOG|1<<CAP_WAKE_ALARM|1<<CAP_BLOCK_SUSPEND|1<<CAP_AUDIT_READ|1<<CAP_PERFMON|1<<CAP_BPF|1<<CAP_CHECKPOINT_RESTORE, permitted=1<<CAP_CHOWN|1<<CAP_DAC_OVERRIDE|1<<CAP_DAC_READ_SEARCH|1<<CAP_FOWNER|1<<CAP_FSETID|1<<CAP_KILL|1<<CAP_SETGID|1<<CAP_SETUID|1<<CAP_SETPCAP|1<<CAP_LINUX_IMMUTABLE|1<<CAP_NET_BIND_SERVICE|1<<CAP_NET_BROADCAST|1<<CAP_NET_ADMIN|1<<CAP_NET_RAW|1<<CAP_IPC_LOCK|1<<CAP_IPC_OWNER|1<<CAP_SYS_MODULE|1<<CAP_SYS_RAWIO|1<<CAP_SYS_CHROOT|1<<CAP_SYS_PTRACE|1<<CAP_SYS_PACCT|1<<CAP_SYS_ADMIN|1<<CAP_SYS_BOOT|1<<CAP_SYS_NICE|1<<CAP_SYS_RESOURCE|1<<CAP_SYS_TIME|1<<CAP_SYS_TTY_CONFIG|1<<CAP_MKNOD|1<<CAP_LEASE|1<<CAP_AUDIT_WRITE|1<<CAP_AUDIT_CONTROL|1<<CAP_SETFCAP|1<<CAP_MAC_OVERRIDE|1<<CAP_MAC_ADMIN|1<<CAP_SYSLOG|1<<CAP_WAKE_ALARM|1<<CAP_BLOCK_SUSPEND|1<<CAP_AUDIT_READ|1<<CAP_PERFMON|1<<CAP_BPF|1<<CAP_CHECKPOINT_RESTORE, inheritable=0}) = 0
[pid  5090] capset({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1<<CAP_CHOWN|1<<CAP_DAC_OVERRIDE|1<<CAP_DAC_READ_SEARCH|1<<CAP_FOWNER|1<<CAP_FSETID|1<<CAP_KILL|1<<CAP_SETGID|1<<CAP_SETUID|1<<CAP_SETPCAP|1<<CAP_LINUX_IMMUTABLE|1<<CAP_NET_BIND_SERVICE|1<<CAP_NET_BROADCAST|1<<CAP_NET_ADMIN|1<<CAP_NET_RAW|1<<CAP_IPC_LOCK|1<<CAP_IPC_OWNER|1<<CAP_SYS_MODULE|1<<CAP_SYS_RAWIO|1<<CAP_SYS_CHROOT|1<<CAP_SYS_PACCT|1<<CAP_SYS_ADMIN|1<<CAP_SYS_BOOT|1<<CAP_SYS_RESOURCE|1<<CAP_SYS_TIME|1<<CAP_SYS_TTY_CONFIG|1<<CAP_MKNOD|1<<CAP_LEASE|1<<CAP_AUDIT_WRITE|1<<CAP_AUDIT_CONTROL|1<<CAP_SETFCAP|1<<CAP_MAC_OVERRIDE|1<<CAP_MAC_ADMIN|1<<CAP_SYSLOG|1<<CAP_WAKE_ALARM|1<<CAP_BLOCK_SUSPEND|1<<CAP_AUDIT_READ|1<<CAP_PERFMON|1<<CAP_BPF|1<<CAP_CHECKPOINT_RESTORE, permitted=1<<CAP_CHOWN|1<<CAP_DAC_OVERRIDE|1<<CAP_DAC_READ_SEARCH|1<<CAP_FOWNER|1<<CAP_FSETID|1<<CAP_KILL|1<<CAP_SETGID|1<<CAP_SETUID|1<<CAP_SETPCAP|1<<CAP_LINUX_IMMUTABLE|1<<CAP_NET_BIND_SERVICE|1<<CAP_NET_BROADCAST|1<<CAP_NET_ADMIN|1<<CAP_NET_RAW|1<<CAP_IPC_LOCK|1<<CAP_IPC_OWNER|1<<CAP_SYS_MODULE|1<<CAP_SYS_RAWIO|1<<CAP_SYS_CHROOT|1<<CAP_SYS_PACCT|1<<CAP_SYS_ADMIN|1<<CAP_SYS_BOOT|1<<CAP_SYS_RESOURCE|1<<CAP_SYS_TIME|1<<CAP_SYS_TTY_CONFIG|1<<CAP_MKNOD|1<<CAP_LEASE|1<<CAP_AUDIT_WRITE|1<<CAP_AUDIT_CONTROL|1<<CAP_SETFCAP|1<<CAP_MAC_OVERRIDE|1<<CAP_MAC_ADMIN|1<<CAP_SYSLOG|1<<CAP_WAKE_ALARM|1<<CAP_BLOCK_SUSPEND|1<<CAP_AUDIT_READ|1<<CAP_PERFMON|1<<CAP_BPF|1<<CAP_CHECKPOINT_RESTORE, inheritable=0}) = 0
[pid  5090] unshare(CLONE_NEWNET)       = 0
[pid  5090] openat(AT_FDCWD, "/proc/sys/net/ipv4/ping_group_range", O_WRONLY|O_CLOEXEC) = 3
[pid  5090] write(3, "0 65535", 7)      = 7
[pid  5090] close(3)                    = 0
[pid  5090] mkdir("/dev/binderfs", 0777) = 0
[pid  5090] mount("binder", "/dev/binderfs", "binder", 0, NULL) = 0
[pid  5090] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5090] memfd_create("syzkaller", 0) = 3
[pid  5090] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd0b3800000
[pid  5090] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216
[pid  5090] munmap(0x7fd0b3800000, 138412032) = 0
[pid  5090] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5090] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5090] close(3)                    = 0
[pid  5090] close(4)                    = 0
[pid  5090] mkdir("./bus", 0777)        = 0
[   62.684879][ T5090] loop0: detected capacity change from 0 to 32768
[   62.710573][ T5090] =======================================================
[   62.710573][ T5090] WARNING: The mand mount option has been deprecated and
[   62.710573][ T5090]          and is ignored by this kernel. Remove the mand
[pid  5090] mount("/dev/loop0", "./bus", "jfs", MS_NODEV|MS_NOEXEC|MS_MANDLOCK|MS_NODIRATIME|MS_REC|MS_RELATIME, "") = 0
[pid  5090] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3
[pid  5090] chdir("./bus")              = 0
[pid  5090] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy)
[pid  5090] open("./file1", O_RDONLY|O_NOCTTY|O_TRUNC|O_APPEND|O_NOATIME) = 4
[pid  5090] exit_group(1)               = ?
[   62.710573][ T5090]          option from the mount to silence this warning.
[   62.710573][ T5090] =======================================================
[   62.810620][  T112] ------------[ cut here ]------------
[   62.816271][  T112] WARNING: CPU: 0 PID: 112 at fs/jfs/jfs_dmap.c:2873 dbAdjTree+0x420/0x520
[   62.825016][  T112] Modules linked in:
[   62.829351][  T112] CPU: 0 PID: 112 Comm: jfsCommit Not tainted 6.9.0-rc6-next-20240503-syzkaller #0
[   62.838943][  T112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024
[   62.849358][  T112] RIP: 0010:dbAdjTree+0x420/0x520
[   62.854387][  T112] Code: 1a 6f fe eb 0c e8 70 1a 6f fe eb 05 e8 69 1a 6f fe 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc e8 51 1a 6f fe 90 <0f> 0b 90 eb e2 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c 14 fc ff ff 48
[   62.874483][  T112] RSP: 0018:ffffc9000252fa58 EFLAGS: 00010293
[   62.880640][  T112] RAX: ffffffff8326fb8f RBX: 0000000000000155 RCX: ffff888019bf5a00
[   62.888685][  T112] RDX: 0000000000000000 RSI: 0000000000000155 RDI: 0000000000030056
[   62.896753][  T112] RBP: ffff8880786ad018 R08: ffffffff8326f7c7 R09: 1ffffd40003c3568
[   62.904856][  T112] R10: dffffc0000000000 R11: fffff940003c3569 R12: dffffc0000000000
[   62.913055][  T112] R13: 0000000000000004 R14: ffff8880786ad010 R15: 0000000000030056
[   62.921189][  T112] FS:  0000000000000000(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000
[   62.930176][  T112] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   62.936904][  T112] CR2: 00007fd0bbd71130 CR3: 000000000e132000 CR4: 00000000003506f0
[   62.944892][  T112] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   62.952902][  T112] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   62.960941][  T112] Call Trace:
[   62.964300][  T112]  <TASK>
[   62.967276][  T112]  ? __warn+0x163/0x4e0
[   62.971452][  T112]  ? dbAdjTree+0x420/0x520
[   62.975862][  T112]  ? report_bug+0x2b3/0x500
[   62.980434][  T112]  ? dbAdjTree+0x420/0x520
[   62.984864][  T112]  ? handle_bug+0x3e/0x70
[   62.989235][  T112]  ? exc_invalid_op+0x1a/0x50
[   62.993942][  T112]  ? asm_exc_invalid_op+0x1a/0x20
[   62.999033][  T112]  ? dbAdjTree+0x57/0x520
[   63.003399][  T112]  ? dbAdjTree+0x41f/0x520
[   63.007871][  T112]  ? dbAdjTree+0x420/0x520
[   63.012300][  T112]  ? dbAdjTree+0x41f/0x520
[   63.016710][  T112]  dbJoin+0x255/0x310
[   63.020736][  T112]  dbFreeBits+0x4ef/0xdb0
[   63.025083][  T112]  dbFree+0x35b/0x680
[   63.029135][  T112]  txFreeMap+0x798/0xd50
[   63.033414][  T112]  txUpdateMap+0x342/0x9f0
[   63.037888][  T112]  ? __pfx_txUpdateMap+0x10/0x10
[   63.042868][  T112]  jfs_lazycommit+0x49a/0xb80
[   63.047601][  T112]  ? _raw_spin_unlock_irqrestore+0x8f/0x140
[   63.053514][  T112]  ? lockdep_hardirqs_on+0x99/0x150
[   63.058769][  T112]  ? __pfx_jfs_lazycommit+0x10/0x10
[   63.063987][  T112]  ? __pfx_default_wake_function+0x10/0x10
[   63.069838][  T112]  ? __kthread_parkme+0x169/0x1d0
[   63.074876][  T112]  ? __pfx_jfs_lazycommit+0x10/0x10
[   63.080203][  T112]  kthread+0x2f0/0x390
[   63.084291][  T112]  ? __pfx_jfs_lazycommit+0x10/0x10
[   63.089566][  T112]  ? __pfx_kthread+0x10/0x10
[   63.094180][  T112]  ret_from_fork+0x4b/0x80
[   63.098645][  T112]  ? __pfx_kthread+0x10/0x10
[   63.103510][  T112]  ret_from_fork_asm+0x1a/0x30
[   63.108331][  T112]  </TASK>
[   63.111363][  T112] Kernel panic - not syncing: kernel: panic_on_warn set ...
[   63.118714][  T112] CPU: 0 PID: 112 Comm: jfsCommit Not tainted 6.9.0-rc6-next-20240503-syzkaller #0
[   63.127992][  T112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024
[   63.138135][  T112] Call Trace:
[   63.141404][  T112]  <TASK>
[   63.144354][  T112]  dump_stack_lvl+0x241/0x360
[   63.149034][  T112]  ? __pfx_dump_stack_lvl+0x10/0x10
[   63.154226][  T112]  ? __pfx__printk+0x10/0x10
[   63.158813][  T112]  ? _printk+0xd5/0x120
[   63.162969][  T112]  ? vscnprintf+0x5d/0x90
[   63.167316][  T112]  panic+0x349/0x860
[   63.171219][  T112]  ? __warn+0x172/0x4e0
[   63.175371][  T112]  ? __pfx_panic+0x10/0x10
[   63.179869][  T112]  ? show_trace_log_lvl+0x4e6/0x520
[   63.185073][  T112]  ? ret_from_fork_asm+0x1a/0x30
[   63.190012][  T112]  __warn+0x346/0x4e0
[   63.193993][  T112]  ? dbAdjTree+0x420/0x520
[   63.198403][  T112]  report_bug+0x2b3/0x500
[   63.202730][  T112]  ? dbAdjTree+0x420/0x520
[   63.207162][  T112]  handle_bug+0x3e/0x70
[   63.211314][  T112]  exc_invalid_op+0x1a/0x50
[   63.215814][  T112]  asm_exc_invalid_op+0x1a/0x20
[   63.221095][  T112] RIP: 0010:dbAdjTree+0x420/0x520
[   63.226113][  T112] Code: 1a 6f fe eb 0c e8 70 1a 6f fe eb 05 e8 69 1a 6f fe 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc e8 51 1a 6f fe 90 <0f> 0b 90 eb e2 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c 14 fc ff ff 48
[   63.245804][  T112] RSP: 0018:ffffc9000252fa58 EFLAGS: 00010293
[   63.251872][  T112] RAX: ffffffff8326fb8f RBX: 0000000000000155 RCX: ffff888019bf5a00
[   63.259846][  T112] RDX: 0000000000000000 RSI: 0000000000000155 RDI: 0000000000030056
[   63.267812][  T112] RBP: ffff8880786ad018 R08: ffffffff8326f7c7 R09: 1ffffd40003c3568
[   63.275865][  T112] R10: dffffc0000000000 R11: fffff940003c3569 R12: dffffc0000000000
[   63.283921][  T112] R13: 0000000000000004 R14: ffff8880786ad010 R15: 0000000000030056
[   63.291907][  T112]  ? dbAdjTree+0x57/0x520
[   63.296231][  T112]  ? dbAdjTree+0x41f/0x520
[   63.300650][  T112]  ? dbAdjTree+0x41f/0x520
[   63.305071][  T112]  dbJoin+0x255/0x310
[   63.309052][  T112]  dbFreeBits+0x4ef/0xdb0
[   63.313386][  T112]  dbFree+0x35b/0x680
[   63.317632][  T112]  txFreeMap+0x798/0xd50
[   63.321882][  T112]  txUpdateMap+0x342/0x9f0
[   63.326303][  T112]  ? __pfx_txUpdateMap+0x10/0x10
[   63.331248][  T112]  jfs_lazycommit+0x49a/0xb80
[   63.335922][  T112]  ? _raw_spin_unlock_irqrestore+0x8f/0x140
[   63.341829][  T112]  ? lockdep_hardirqs_on+0x99/0x150
[   63.347037][  T112]  ? __pfx_jfs_lazycommit+0x10/0x10
[   63.352235][  T112]  ? __pfx_default_wake_function+0x10/0x10
[   63.358042][  T112]  ? __kthread_parkme+0x169/0x1d0
[   63.363154][  T112]  ? __pfx_jfs_lazycommit+0x10/0x10
[   63.368352][  T112]  kthread+0x2f0/0x390
[   63.372437][  T112]  ? __pfx_jfs_lazycommit+0x10/0x10
[   63.377634][  T112]  ? __pfx_kthread+0x10/0x10
[   63.382237][  T112]  ret_from_fork+0x4b/0x80
[   63.386652][  T112]  ? __pfx_kthread+0x10/0x10
[   63.391255][  T112]  ret_from_fork_asm+0x1a/0x30
[   63.396039][  T112]  </TASK>
[   63.399396][  T112] Kernel Offset: disabled
[   63.403934][  T112] Rebooting in 86400 seconds..