./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor31747920

<...>
DUID 00:04:b0:cd:33:f9:4f:8a:55:45:4d:7b:3b:ee:3a:71:f0:8b
forked to background, child pid 4646
[   29.953685][ T4647] 8021q: adding VLAN 0 to HW filter on device bond0
[   29.962925][ T4647] eql: remember to turn off Van-Jacobson compression on your slave devices
Starting sshd: OK

syzkaller
Warning: Permanently added '10.128.0.3' (ECDSA) to the list of known hosts.
execve("./syz-executor31747920", ["./syz-executor31747920"], 0x7ffdabcb09d0 /* 10 vars */) = 0
brk(NULL)                               = 0x5555565e3000
brk(0x5555565e3c40)                     = 0x5555565e3c40
arch_prctl(ARCH_SET_FS, 0x5555565e3300) = 0
uname({sysname="Linux", nodename="syzkaller", ...}) = 0
readlink("/proc/self/exe", "/root/syz-executor31747920", 4096) = 26
brk(0x555556604c40)                     = 0x555556604c40
brk(0x555556605000)                     = 0x555556605000
mprotect(0x7f24fcf8b000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
unshare(CLONE_NEWPID)                   = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5068 attached
, child_tidptr=0x5555565e35d0) = 5068
[pid  5068] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL) = -1 EBUSY (Device or resource busy)
[pid  5068] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5068] setsid()                    = 1
[pid  5068] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0
[pid  5068] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0
[pid  5068] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0
[pid  5068] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0
[pid  5068] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, NULL) = 0
[pid  5068] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0
[pid  5068] unshare(CLONE_NEWNS)        = 0
[pid  5068] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0
[pid  5068] unshare(CLONE_NEWIPC)       = 0
[pid  5068] unshare(CLONE_NEWCGROUP)    = 0
[pid  5068] unshare(CLONE_NEWUTS)       = 0
[pid  5068] unshare(CLONE_SYSVSEM)      = 0
[pid  5068] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = 3
[pid  5068] write(3, "16777216", 8)     = 8
[pid  5068] close(3)                    = 0
[pid  5068] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = 3
[pid  5068] write(3, "536870912", 9)    = 9
[pid  5068] close(3)                    = 0
[pid  5068] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = 3
[pid  5068] write(3, "1024", 4)         = 4
[pid  5068] close(3)                    = 0
[pid  5068] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = 3
[pid  5068] write(3, "8192", 4)         = 4
[pid  5068] close(3)                    = 0
[pid  5068] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = 3
[pid  5068] write(3, "1024", 4)         = 4
[pid  5068] close(3)                    = 0
[pid  5068] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = 3
[pid  5068] write(3, "1024", 4)         = 4
[pid  5068] close(3)                    = 0
[pid  5068] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = 3
[pid  5068] write(3, "1024 1048576 500 1024", 21) = 21
[pid  5068] close(3)                    = 0
[pid  5068] getpid()                    = 1
[pid  5068] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1<<CAP_CHOWN|1<<CAP_DAC_OVERRIDE|1<<CAP_DAC_READ_SEARCH|1<<CAP_FOWNER|1<<CAP_FSETID|1<<CAP_KILL|1<<CAP_SETGID|1<<CAP_SETUID|1<<CAP_SETPCAP|1<<CAP_LINUX_IMMUTABLE|1<<CAP_NET_BIND_SERVICE|1<<CAP_NET_BROADCAST|1<<CAP_NET_ADMIN|1<<CAP_NET_RAW|1<<CAP_IPC_LOCK|1<<CAP_IPC_OWNER|1<<CAP_SYS_MODULE|1<<CAP_SYS_RAWIO|1<<CAP_SYS_CHROOT|1<<CAP_SYS_PTRACE|1<<CAP_SYS_PACCT|1<<CAP_SYS_ADMIN|1<<CAP_SYS_BOOT|1<<CAP_SYS_NICE|1<<CAP_SYS_RESOURCE|1<<CAP_SYS_TIME|1<<CAP_SYS_TTY_CONFIG|1<<CAP_MKNOD|1<<CAP_LEASE|1<<CAP_AUDIT_WRITE|1<<CAP_AUDIT_CONTROL|1<<CAP_SETFCAP|1<<CAP_MAC_OVERRIDE|1<<CAP_MAC_ADMIN|1<<CAP_SYSLOG|1<<CAP_WAKE_ALARM|1<<CAP_BLOCK_SUSPEND|1<<CAP_AUDIT_READ|1<<CAP_PERFMON|1<<CAP_BPF|1<<CAP_CHECKPOINT_RESTORE, permitted=1<<CAP_CHOWN|1<<CAP_DAC_OVERRIDE|1<<CAP_DAC_READ_SEARCH|1<<CAP_FOWNER|1<<CAP_FSETID|1<<CAP_KILL|1<<CAP_SETGID|1<<CAP_SETUID|1<<CAP_SETPCAP|1<<CAP_LINUX_IMMUTABLE|1<<CAP_NET_BIND_SERVICE|1<<CAP_NET_BROADCAST|1<<CAP_NET_ADMIN|1<<CAP_NET_RAW|1<<CAP_IPC_LOCK|1<<CAP_IPC_OWNER|1<<CAP_SYS_MODULE|1<<CAP_SYS_RAWIO|1<<CAP_SYS_CHROOT|1<<CAP_SYS_PTRACE|1<<CAP_SYS_PACCT|1<<CAP_SYS_ADMIN|1<<CAP_SYS_BOOT|1<<CAP_SYS_NICE|1<<CAP_SYS_RESOURCE|1<<CAP_SYS_TIME|1<<CAP_SYS_TTY_CONFIG|1<<CAP_MKNOD|1<<CAP_LEASE|1<<CAP_AUDIT_WRITE|1<<CAP_AUDIT_CONTROL|1<<CAP_SETFCAP|1<<CAP_MAC_OVERRIDE|1<<CAP_MAC_ADMIN|1<<CAP_SYSLOG|1<<CAP_WAKE_ALARM|1<<CAP_BLOCK_SUSPEND|1<<CAP_AUDIT_READ|1<<CAP_PERFMON|1<<CAP_BPF|1<<CAP_CHECKPOINT_RESTORE, inheritable=0}) = 0
[pid  5068] capset({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1<<CAP_CHOWN|1<<CAP_DAC_OVERRIDE|1<<CAP_DAC_READ_SEARCH|1<<CAP_FOWNER|1<<CAP_FSETID|1<<CAP_KILL|1<<CAP_SETGID|1<<CAP_SETUID|1<<CAP_SETPCAP|1<<CAP_LINUX_IMMUTABLE|1<<CAP_NET_BIND_SERVICE|1<<CAP_NET_BROADCAST|1<<CAP_NET_ADMIN|1<<CAP_NET_RAW|1<<CAP_IPC_LOCK|1<<CAP_IPC_OWNER|1<<CAP_SYS_MODULE|1<<CAP_SYS_RAWIO|1<<CAP_SYS_CHROOT|1<<CAP_SYS_PACCT|1<<CAP_SYS_ADMIN|1<<CAP_SYS_BOOT|1<<CAP_SYS_RESOURCE|1<<CAP_SYS_TIME|1<<CAP_SYS_TTY_CONFIG|1<<CAP_MKNOD|1<<CAP_LEASE|1<<CAP_AUDIT_WRITE|1<<CAP_AUDIT_CONTROL|1<<CAP_SETFCAP|1<<CAP_MAC_OVERRIDE|1<<CAP_MAC_ADMIN|1<<CAP_SYSLOG|1<<CAP_WAKE_ALARM|1<<CAP_BLOCK_SUSPEND|1<<CAP_AUDIT_READ|1<<CAP_PERFMON|1<<CAP_BPF|1<<CAP_CHECKPOINT_RESTORE, permitted=1<<CAP_CHOWN|1<<CAP_DAC_OVERRIDE|1<<CAP_DAC_READ_SEARCH|1<<CAP_FOWNER|1<<CAP_FSETID|1<<CAP_KILL|1<<CAP_SETGID|1<<CAP_SETUID|1<<CAP_SETPCAP|1<<CAP_LINUX_IMMUTABLE|1<<CAP_NET_BIND_SERVICE|1<<CAP_NET_BROADCAST|1<<CAP_NET_ADMIN|1<<CAP_NET_RAW|1<<CAP_IPC_LOCK|1<<CAP_IPC_OWNER|1<<CAP_SYS_MODULE|1<<CAP_SYS_RAWIO|1<<CAP_SYS_CHROOT|1<<CAP_SYS_PACCT|1<<CAP_SYS_ADMIN|1<<CAP_SYS_BOOT|1<<CAP_SYS_RESOURCE|1<<CAP_SYS_TIME|1<<CAP_SYS_TTY_CONFIG|1<<CAP_MKNOD|1<<CAP_LEASE|1<<CAP_AUDIT_WRITE|1<<CAP_AUDIT_CONTROL|1<<CAP_SETFCAP|1<<CAP_MAC_OVERRIDE|1<<CAP_MAC_ADMIN|1<<CAP_SYSLOG|1<<CAP_WAKE_ALARM|1<<CAP_BLOCK_SUSPEND|1<<CAP_AUDIT_READ|1<<CAP_PERFMON|1<<CAP_BPF|1<<CAP_CHECKPOINT_RESTORE, inheritable=0}) = 0
[pid  5068] unshare(CLONE_NEWNET)       = 0
[pid  5068] openat(AT_FDCWD, "/proc/sys/net/ipv4/ping_group_range", O_WRONLY|O_CLOEXEC) = 3
[pid  5068] write(3, "0 65535", 7)      = 7
[pid  5068] close(3)                    = 0
[pid  5068] mkdir("/dev/binderfs", 0777) = 0
[pid  5068] mount("binder", "/dev/binderfs", "binder", 0, NULL) = 0
[pid  5068] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5068] memfd_create("syzkaller", 0) = 3
[pid  5068] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f24f4ad0000
[pid  5068] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  5068] munmap(0x7f24f4ad0000, 4194304) = 0
[pid  5068] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5068] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5068] close(3)                    = 0
[pid  5068] mkdir("./file0", 0777)      = 0
syzkaller login: [   51.458244][ T5068] loop0: detected capacity change from 0 to 8192
[   51.467050][ T5068] =======================================================
[   51.467050][ T5068] WARNING: The mand mount option has been deprecated and
[   51.467050][ T5068]          and is ignored by this kernel. Remove the mand
[   51.467050][ T5068]          option from the mount to silence this warning.
[   51.467050][ T5068] =======================================================
[   51.503866][ T5068] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   51.517113][ T5068] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal
[   51.526520][ T5068] REISERFS (device loop0): using ordered data mode
[   51.533263][ T5068] reiserfs: using flush barriers
[   51.539304][ T5068] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   51.555991][ T5068] REISERFS (device loop0): checking transaction log (loop0)
[pid  5068] mount("/dev/loop0", "./file0", "reiserfs", MS_SYNCHRONOUS|MS_MANDLOCK|MS_DIRSYNC|MS_NODIRATIME|MS_REC|MS_RELATIME|MS_I_VERSION, "") = 0
[pid  5068] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5068] chdir("./file0")            = 0
[pid  5068] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5068] close(4)                    = 0
[   51.600473][ T5068] REISERFS (device loop0): Using r5 hash to sort names
[   51.608223][ T5068] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[pid  5068] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_NONBLOCK|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME, 000) = 4
[pid  5068] mount("/dev/loop0", "./bus", NULL, MS_BIND|MS_REC|MS_SHARED, NULL) = 0
[pid  5068] creat("./bus", 000)         = 5
[pid  5068] lseek(5, 512, SEEK_SET)     = 512
[pid  5068] open("./bus", O_RDONLY|O_DIRECT|O_NOFOLLOW) = 6
[pid  5068] sendfile(5, 6, NULL, 130817) = 65536
[pid  5068] exit_group(1)               = ?
[   51.630784][   T27] audit: type=1800 audit(1673864444.252:2): pid=5068 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor317" name="bus" dev="loop0" ino=4 res=0 errno=0
[   51.669683][ T5068] divide error: 0000 [#1] PREEMPT SMP KASAN
[   51.675606][ T5068] CPU: 1 PID: 5068 Comm: syz-executor317 Not tainted 6.2.0-rc4-syzkaller #0
[   51.684274][ T5068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[   51.694307][ T5068] RIP: 0010:do_journal_end+0x1822/0x4a30
[   51.699937][ T5068] Code: 04 28 84 c0 0f 85 f7 2b 00 00 4a 8d 5c 33 01 4c 89 e0 48 c1 e8 03 42 8a 04 28 84 c0 0f 85 ff 2b 00 00 41 8b 0f 48 89 d8 31 d2 <48> f7 f1 48 89 d3 48 03 5c 24 20 48 8b 84 24 d8 00 00 00 42 80 3c
[   51.719531][ T5068] RSP: 0018:ffffc90003b7f820 EFLAGS: 00010246
[   51.725585][ T5068] RAX: 0000000000000003 RBX: 0000000000000003 RCX: 0000000000000000
[   51.733536][ T5068] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff888029c4f000
[   51.741486][ T5068] RBP: ffffc90003b7fa90 R08: dffffc0000000000 R09: ffff888029c4f000
[   51.749434][ T5068] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88807a8e9017
[   51.757387][ T5068] R13: dffffc0000000000 R14: 0000000000000002 R15: ffff88807a8e9014
[   51.765345][ T5068] FS:  0000000000000000(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000
[   51.774255][ T5068] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   51.780822][ T5068] CR2: 00000000005fdeb8 CR3: 0000000026e6b000 CR4: 00000000003506e0
[   51.788780][ T5068] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   51.796734][ T5068] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   51.804698][ T5068] Call Trace:
[   51.807972][ T5068]  <TASK>
[   51.810900][ T5068]  ? journal_join_abort+0xe0/0xe0
[   51.815922][ T5068]  ? journal_mark_dirty+0xe00/0xe00
[   51.821110][ T5068]  ? dqput+0x810/0x810
[   51.825178][ T5068]  ? journal_end_sync+0x10c/0x1e0
[   51.830192][ T5068]  reiserfs_sync_fs+0xbb/0x130
[   51.834992][ T5068]  ? handle_attrs+0x1f0/0x1f0
[   51.839667][ T5068]  sync_filesystem+0xe8/0x220
[   51.844334][ T5068]  generic_shutdown_super+0x6b/0x310
[   51.849606][ T5068]  kill_block_super+0x79/0xd0
[   51.854274][ T5068]  deactivate_locked_super+0xa7/0xf0
[   51.859547][ T5068]  cleanup_mnt+0x494/0x520
[   51.863952][ T5068]  ? lockdep_hardirqs_on+0x8d/0x130
[   51.869160][ T5068]  task_work_run+0x243/0x300
[   51.873753][ T5068]  ? task_work_cancel+0x290/0x290
[   51.878770][ T5068]  ? do_exit+0x63f/0x2150
[   51.883091][ T5068]  do_exit+0x644/0x2150
[   51.887239][ T5068]  ? mm_update_next_owner+0x6d0/0x6d0
[   51.892597][ T5068]  ? print_irqtrace_events+0x220/0x220
[   51.898043][ T5068]  ? _raw_spin_unlock_irq+0x1f/0x40
[   51.903226][ T5068]  ? lockdep_hardirqs_on+0x8d/0x130
[   51.908415][ T5068]  do_group_exit+0x1fd/0x2b0
[   51.912992][ T5068]  __x64_sys_exit_group+0x3b/0x40
[   51.917997][ T5068]  do_syscall_64+0x3d/0xb0
[   51.922402][ T5068]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[   51.928291][ T5068] RIP: 0033:0x7f24fcf1bad9
[   51.932693][ T5068] Code: Unable to access opcode bytes at 0x7f24fcf1baaf.
[   51.939692][ T5068] RSP: 002b:00007ffda2e53128 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[   51.948094][ T5068] RAX: ffffffffffffffda RBX: 00007f24fcf91350 RCX: 00007f24fcf1bad9
[   51.956053][ T5068] RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000001
[   51.964009][ T5068] RBP: 0000000000000001 R08: ffffffffffffffc0 R09: 00007f24fcf8be40
[   51.971964][ T5068] R10: 000000000001ff01 R11: 0000000000000246 R12: 00007f24fcf91350
[   51.979918][ T5068] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000001
[   51.987880][ T5068]  </TASK>
[   51.990882][ T5068] Modules linked in:
[   51.995983][ T5068] ---[ end trace 0000000000000000 ]---
[   52.001970][ T5068] RIP: 0010:do_journal_end+0x1822/0x4a30
[   52.007646][ T5068] Code: 04 28 84 c0 0f 85 f7 2b 00 00 4a 8d 5c 33 01 4c 89 e0 48 c1 e8 03 42 8a 04 28 84 c0 0f 85 ff 2b 00 00 41 8b 0f 48 89 d8 31 d2 <48> f7 f1 48 89 d3 48 03 5c 24 20 48 8b 84 24 d8 00 00 00 42 80 3c
[   52.027343][ T5068] RSP: 0018:ffffc90003b7f820 EFLAGS: 00010246
[   52.033734][ T5068] RAX: 0000000000000003 RBX: 0000000000000003 RCX: 0000000000000000
[   52.041745][ T5068] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff888029c4f000
[   52.049761][ T5068] RBP: ffffc90003b7fa90 R08: dffffc0000000000 R09: ffff888029c4f000
[   52.057762][ T5068] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88807a8e9017
[   52.065735][ T5068] R13: dffffc0000000000 R14: 0000000000000002 R15: ffff88807a8e9014
[   52.073748][ T5068] FS:  0000000000000000(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000
[   52.082698][ T5068] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   52.089321][ T5068] CR2: 000056252d1db088 CR3: 000000001da35000 CR4: 00000000003506f0
[   52.097297][ T5068] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   52.105299][ T5068] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   52.113391][ T5068] Kernel panic - not syncing: Fatal exception
[   52.119587][ T5068] Kernel Offset: disabled
[   52.123896][ T5068] Rebooting in 86400 seconds..