./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1985681958

<...>
Warning: Permanently added '10.128.0.114' (ECDSA) to the list of known hosts.
execve("./syz-executor1985681958", ["./syz-executor1985681958"], 0x7ffe9027dbc0 /* 10 vars */) = 0
brk(NULL)                               = 0x55555582c000
brk(0x55555582cc40)                     = 0x55555582cc40
arch_prctl(ARCH_SET_FS, 0x55555582c300) = 0
uname({sysname="Linux", nodename="syzkaller", ...}) = 0
readlink("/proc/self/exe", "/root/syz-executor1985681958", 4096) = 28
brk(0x55555584dc40)                     = 0x55555584dc40
brk(0x55555584e000)                     = 0x55555584e000
mprotect(0x7efc34ef8000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
unshare(CLONE_NEWPID)                   = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5062 attached
, child_tidptr=0x55555582c5d0) = 5062
[pid  5062] mount(NULL, "/sys/fs/fuse/connections", "fusectl", 0, NULL) = -1 EBUSY (Device or resource busy)
[pid  5062] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5062] setsid()                    = 1
[pid  5062] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0
[pid  5062] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0
[pid  5062] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0
[pid  5062] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0
[pid  5062] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, NULL) = 0
[pid  5062] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0
[pid  5062] unshare(CLONE_NEWNS)        = 0
[pid  5062] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0
[pid  5062] unshare(CLONE_NEWIPC)       = 0
[pid  5062] unshare(CLONE_NEWCGROUP)    = 0
[pid  5062] unshare(CLONE_NEWUTS)       = 0
[pid  5062] unshare(CLONE_SYSVSEM)      = 0
[pid  5062] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = 3
[pid  5062] write(3, "16777216", 8)     = 8
[pid  5062] close(3)                    = 0
[pid  5062] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = 3
[pid  5062] write(3, "536870912", 9)    = 9
[pid  5062] close(3)                    = 0
[pid  5062] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = 3
[pid  5062] write(3, "1024", 4)         = 4
[pid  5062] close(3)                    = 0
[pid  5062] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = 3
[pid  5062] write(3, "8192", 4)         = 4
[pid  5062] close(3)                    = 0
[pid  5062] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = 3
[pid  5062] write(3, "1024", 4)         = 4
[pid  5062] close(3)                    = 0
[pid  5062] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = 3
[pid  5062] write(3, "1024", 4)         = 4
[pid  5062] close(3)                    = 0
[pid  5062] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = 3
[pid  5062] write(3, "1024 1048576 500 1024", 21) = 21
[pid  5062] close(3)                    = 0
[pid  5062] getpid()                    = 1
[pid  5062] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1<<CAP_CHOWN|1<<CAP_DAC_OVERRIDE|1<<CAP_DAC_READ_SEARCH|1<<CAP_FOWNER|1<<CAP_FSETID|1<<CAP_KILL|1<<CAP_SETGID|1<<CAP_SETUID|1<<CAP_SETPCAP|1<<CAP_LINUX_IMMUTABLE|1<<CAP_NET_BIND_SERVICE|1<<CAP_NET_BROADCAST|1<<CAP_NET_ADMIN|1<<CAP_NET_RAW|1<<CAP_IPC_LOCK|1<<CAP_IPC_OWNER|1<<CAP_SYS_MODULE|1<<CAP_SYS_RAWIO|1<<CAP_SYS_CHROOT|1<<CAP_SYS_PTRACE|1<<CAP_SYS_PACCT|1<<CAP_SYS_ADMIN|1<<CAP_SYS_BOOT|1<<CAP_SYS_NICE|1<<CAP_SYS_RESOURCE|1<<CAP_SYS_TIME|1<<CAP_SYS_TTY_CONFIG|1<<CAP_MKNOD|1<<CAP_LEASE|1<<CAP_AUDIT_WRITE|1<<CAP_AUDIT_CONTROL|1<<CAP_SETFCAP|1<<CAP_MAC_OVERRIDE|1<<CAP_MAC_ADMIN|1<<CAP_SYSLOG|1<<CAP_WAKE_ALARM|1<<CAP_BLOCK_SUSPEND|1<<CAP_AUDIT_READ|1<<CAP_PERFMON|1<<CAP_BPF|1<<CAP_CHECKPOINT_RESTORE, permitted=1<<CAP_CHOWN|1<<CAP_DAC_OVERRIDE|1<<CAP_DAC_READ_SEARCH|1<<CAP_FOWNER|1<<CAP_FSETID|1<<CAP_KILL|1<<CAP_SETGID|1<<CAP_SETUID|1<<CAP_SETPCAP|1<<CAP_LINUX_IMMUTABLE|1<<CAP_NET_BIND_SERVICE|1<<CAP_NET_BROADCAST|1<<CAP_NET_ADMIN|1<<CAP_NET_RAW|1<<CAP_IPC_LOCK|1<<CAP_IPC_OWNER|1<<CAP_SYS_MODULE|1<<CAP_SYS_RAWIO|1<<CAP_SYS_CHROOT|1<<CAP_SYS_PTRACE|1<<CAP_SYS_PACCT|1<<CAP_SYS_ADMIN|1<<CAP_SYS_BOOT|1<<CAP_SYS_NICE|1<<CAP_SYS_RESOURCE|1<<CAP_SYS_TIME|1<<CAP_SYS_TTY_CONFIG|1<<CAP_MKNOD|1<<CAP_LEASE|1<<CAP_AUDIT_WRITE|1<<CAP_AUDIT_CONTROL|1<<CAP_SETFCAP|1<<CAP_MAC_OVERRIDE|1<<CAP_MAC_ADMIN|1<<CAP_SYSLOG|1<<CAP_WAKE_ALARM|1<<CAP_BLOCK_SUSPEND|1<<CAP_AUDIT_READ|1<<CAP_PERFMON|1<<CAP_BPF|1<<CAP_CHECKPOINT_RESTORE, inheritable=0}) = 0
[pid  5062] capset({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1<<CAP_CHOWN|1<<CAP_DAC_OVERRIDE|1<<CAP_DAC_READ_SEARCH|1<<CAP_FOWNER|1<<CAP_FSETID|1<<CAP_KILL|1<<CAP_SETGID|1<<CAP_SETUID|1<<CAP_SETPCAP|1<<CAP_LINUX_IMMUTABLE|1<<CAP_NET_BIND_SERVICE|1<<CAP_NET_BROADCAST|1<<CAP_NET_ADMIN|1<<CAP_NET_RAW|1<<CAP_IPC_LOCK|1<<CAP_IPC_OWNER|1<<CAP_SYS_MODULE|1<<CAP_SYS_RAWIO|1<<CAP_SYS_CHROOT|1<<CAP_SYS_PACCT|1<<CAP_SYS_ADMIN|1<<CAP_SYS_BOOT|1<<CAP_SYS_RESOURCE|1<<CAP_SYS_TIME|1<<CAP_SYS_TTY_CONFIG|1<<CAP_MKNOD|1<<CAP_LEASE|1<<CAP_AUDIT_WRITE|1<<CAP_AUDIT_CONTROL|1<<CAP_SETFCAP|1<<CAP_MAC_OVERRIDE|1<<CAP_MAC_ADMIN|1<<CAP_SYSLOG|1<<CAP_WAKE_ALARM|1<<CAP_BLOCK_SUSPEND|1<<CAP_AUDIT_READ|1<<CAP_PERFMON|1<<CAP_BPF|1<<CAP_CHECKPOINT_RESTORE, permitted=1<<CAP_CHOWN|1<<CAP_DAC_OVERRIDE|1<<CAP_DAC_READ_SEARCH|1<<CAP_FOWNER|1<<CAP_FSETID|1<<CAP_KILL|1<<CAP_SETGID|1<<CAP_SETUID|1<<CAP_SETPCAP|1<<CAP_LINUX_IMMUTABLE|1<<CAP_NET_BIND_SERVICE|1<<CAP_NET_BROADCAST|1<<CAP_NET_ADMIN|1<<CAP_NET_RAW|1<<CAP_IPC_LOCK|1<<CAP_IPC_OWNER|1<<CAP_SYS_MODULE|1<<CAP_SYS_RAWIO|1<<CAP_SYS_CHROOT|1<<CAP_SYS_PACCT|1<<CAP_SYS_ADMIN|1<<CAP_SYS_BOOT|1<<CAP_SYS_RESOURCE|1<<CAP_SYS_TIME|1<<CAP_SYS_TTY_CONFIG|1<<CAP_MKNOD|1<<CAP_LEASE|1<<CAP_AUDIT_WRITE|1<<CAP_AUDIT_CONTROL|1<<CAP_SETFCAP|1<<CAP_MAC_OVERRIDE|1<<CAP_MAC_ADMIN|1<<CAP_SYSLOG|1<<CAP_WAKE_ALARM|1<<CAP_BLOCK_SUSPEND|1<<CAP_AUDIT_READ|1<<CAP_PERFMON|1<<CAP_BPF|1<<CAP_CHECKPOINT_RESTORE, inheritable=0}) = 0
[pid  5062] unshare(CLONE_NEWNET)       = 0
[pid  5062] openat(AT_FDCWD, "/proc/sys/net/ipv4/ping_group_range", O_WRONLY|O_CLOEXEC) = 3
[pid  5062] write(3, "0 65535", 7)      = 7
[pid  5062] close(3)                    = 0
[pid  5062] mkdir("/dev/binderfs", 0777) = 0
[pid  5062] mount("binder", "/dev/binderfs", "binder", 0, NULL) = 0
[pid  5062] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5062] memfd_create("syzkaller", 0) = 3
[pid  5062] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7efc2ca3c000
[pid  5062] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  5062] munmap(0x7efc2ca3c000, 4194304) = 0
[pid  5062] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5062] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5062] close(3)                    = 0
[pid  5062] mkdir("./file0", 0777)      = 0
[   42.150951][ T5062] loop0: detected capacity change from 0 to 8192
[   42.160766][ T5062] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   42.173803][ T5062] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[   42.183532][ T5062] REISERFS (device loop0): using ordered data mode
[   42.190014][ T5062] reiserfs: using flush barriers
[pid  5062] mount("/dev/loop0", "./file0", "reiserfs", MS_RDONLY|MS_NOEXEC|MS_SYNCHRONOUS|MS_SILENT, "") = 0
[pid  5062] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5062] chdir("./file0")            = 0
[pid  5062] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5062] close(4)                    = 0
[pid  5062] mkdir(".", 0777)            = -1 EEXIST (File exists)
[   42.199373][ T5062] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   42.215866][ T5062] REISERFS (device loop0): checking transaction log (loop0)
[   42.224707][ T5062] REISERFS (device loop0): Using r5 hash to sort names
[   42.235880][ T5062] reiserfs: enabling write barrier flush mode
[   42.247780][ T5062] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2
[   42.263190][ T5062] REISERFS error (device loop0): vs-5150 search_by_key: invalid format found in block 531. Fsck?
[   42.273737][ T5062] REISERFS (device loop0): Remounting filesystem read-only
[   42.280926][ T5062] REISERFS error (device loop0): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 1 0x0 SD] stat data
[   42.294226][ T5062] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2
[   42.309562][ T5062] REISERFS error (device loop0): vs-5150 search_by_key: invalid format found in block 531. Fsck?
[   42.320104][ T5062] REISERFS error (device loop0): zam-7001 reiserfs_find_entry: io error
[   42.328512][ T5062] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2
[pid  5062] mount(NULL, ".", 0x200000c0, MS_SYNCHRONOUS|MS_REMOUNT|MS_NODIRATIME|MS_REC|MS_SILENT|MS_SHARED, "") = 0
[pid  5062] openat(AT_FDCWD, ".", O_RDONLY|O_DIRECTORY) = 4
[pid  5062] chdir(".")                  = 0
[pid  5062] exit_group(1)               = ?
[   42.343858][ T5062] REISERFS error (device loop0): vs-5150 search_by_key: invalid format found in block 531. Fsck?
[   42.354420][ T5062] REISERFS error (device loop0): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 1 0x0 SD] stat data
[   42.367867][ T5062] REISERFS warning (device loop0): jdm-20006 create_privroot: xattrs/ACLs enabled and couldn't find/create .reiserfs_priv. Failing mount.
[   42.391647][ T5062] ------------[ cut here ]------------
[   42.397277][ T5062] kernel BUG at fs/reiserfs/journal.c:1916!
[   42.403432][ T5062] invalid opcode: 0000 [#1] PREEMPT SMP KASAN
[   42.409582][ T5062] CPU: 1 PID: 5062 Comm: syz-executor198 Not tainted 6.2.0-rc5-syzkaller #0
[   42.418246][ T5062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023
[   42.428279][ T5062] RIP: 0010:journal_release+0x378/0x630
[   42.433822][ T5062] Code: 02 00 0f 85 6d 02 00 00 48 8b 33 4c 89 f7 e8 6f 70 ff ff be 01 00 00 00 4c 89 f7 e8 82 94 ff ff e9 48 fe ff ff e8 88 c2 66 ff <0f> 0b e8 81 c2 66 ff ba 38 00 00 00 31 f6 4c 8d 74 24 20 4c 89 f7
[   42.453407][ T5062] RSP: 0018:ffffc90003eafae8 EFLAGS: 00010293
[   42.459449][ T5062] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000
[   42.467396][ T5062] RDX: ffff88801e9ed7c0 RSI: ffffffff821aa038 RDI: 0000000000000005
[   42.475347][ T5062] RBP: ffff88807a166000 R08: 0000000000000005 R09: 0000000000000000
[   42.483311][ T5062] R10: 0000000000000000 R11: 0000000000000000 R12: 1ffff920007d5f5d
[   42.491275][ T5062] R13: ffff88807a166678 R14: ffffc90003eafbe0 R15: ffffc90003efe000
[   42.499238][ T5062] FS:  0000000000000000(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000
[   42.508145][ T5062] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   42.514714][ T5062] CR2: 00007ffe8788d000 CR3: 000000000c48e000 CR4: 0000000000350ee0
[   42.522677][ T5062] Call Trace:
[   42.525940][ T5062]  <TASK>
[   42.528858][ T5062]  ? reiserfs_end_persistent_transaction+0x1b0/0x1b0
[   42.535542][ T5062]  reiserfs_put_super+0xe4/0x5c0
[   42.540472][ T5062]  ? reiserfs_quota_read+0x4f0/0x4f0
[   42.545753][ T5062]  ? sync_blockdev+0x73/0x90
[   42.550368][ T5062]  ? reiserfs_quota_read+0x4f0/0x4f0
[   42.555643][ T5062]  generic_shutdown_super+0x158/0x410
[   42.561019][ T5062]  kill_block_super+0x9b/0xf0
[   42.565685][ T5062]  deactivate_locked_super+0x98/0x160
[   42.571048][ T5062]  deactivate_super+0xb1/0xd0
[   42.575727][ T5062]  cleanup_mnt+0x2ae/0x3d0
[   42.580132][ T5062]  task_work_run+0x16f/0x270
[   42.584718][ T5062]  ? task_work_cancel+0x30/0x30
[   42.589563][ T5062]  do_exit+0xaa8/0x2950
[   42.593717][ T5062]  ? lock_downgrade+0x6e0/0x6e0
[   42.598552][ T5062]  ? do_raw_spin_lock+0x124/0x2b0
[   42.603574][ T5062]  ? mm_update_next_owner+0x7b0/0x7b0
[   42.608944][ T5062]  ? rwlock_bug.part.0+0x90/0x90
[   42.613870][ T5062]  ? _raw_spin_unlock_irq+0x23/0x50
[   42.619059][ T5062]  do_group_exit+0xd4/0x2a0
[   42.623560][ T5062]  __x64_sys_exit_group+0x3e/0x50
[   42.628579][ T5062]  do_syscall_64+0x39/0xb0
[   42.633005][ T5062]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[   42.638888][ T5062] RIP: 0033:0x7efc34e87b59
[   42.643287][ T5062] Code: Unable to access opcode bytes at 0x7efc34e87b2f.
[   42.650284][ T5062] RSP: 002b:00007ffe8788c318 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[   42.658683][ T5062] RAX: ffffffffffffffda RBX: 00007efc34efe330 RCX: 00007efc34e87b59
[   42.666640][ T5062] RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000001
[   42.674597][ T5062] RBP: 0000000000000001 R08: ffffffffffffffc0 R09: 0000000000000000
[   42.682561][ T5062] R10: 0000000000000000 R11: 0000000000000246 R12: 00007efc34efe330
[   42.690532][ T5062] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000001
[   42.698496][ T5062]  </TASK>
[   42.701502][ T5062] Modules linked in:
[   42.705694][ T5062] ---[ end trace 0000000000000000 ]---
[   42.711542][ T5062] RIP: 0010:journal_release+0x378/0x630
[   42.717106][ T5062] Code: 02 00 0f 85 6d 02 00 00 48 8b 33 4c 89 f7 e8 6f 70 ff ff be 01 00 00 00 4c 89 f7 e8 82 94 ff ff e9 48 fe ff ff e8 88 c2 66 ff <0f> 0b e8 81 c2 66 ff ba 38 00 00 00 31 f6 4c 8d 74 24 20 4c 89 f7
[   42.736976][ T5062] RSP: 0018:ffffc90003eafae8 EFLAGS: 00010293
[   42.743165][ T5062] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000
[   42.751239][ T5062] RDX: ffff88801e9ed7c0 RSI: ffffffff821aa038 RDI: 0000000000000005
[   42.759221][ T5062] RBP: ffff88807a166000 R08: 0000000000000005 R09: 0000000000000000
[   42.767225][ T5062] R10: 0000000000000000 R11: 0000000000000000 R12: 1ffff920007d5f5d
[   42.775237][ T5062] R13: ffff88807a166678 R14: ffffc90003eafbe0 R15: ffffc90003efe000
[   42.784111][ T5062] FS:  0000000000000000(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000
[   42.793071][ T5062] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   42.799650][ T5062] CR2: 00005609179ab088 CR3: 000000002ad90000 CR4: 0000000000350ef0
[   42.807642][ T5062] Kernel panic - not syncing: Fatal exception
[   42.814609][ T5062] Kernel Offset: disabled
[   42.818921][ T5062] Rebooting in 86400 seconds..