./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3496433795
<...>
Warning: Permanently added '10.128.0.103' (ED25519) to the list of known hosts.
execve("./syz-executor3496433795", ["./syz-executor3496433795"], 0x7ffe52e085a0 /* 10 vars */) = 0
brk(NULL) = 0x55557bfce000
brk(0x55557bfced00) = 0x55557bfced00
arch_prctl(ARCH_SET_FS, 0x55557bfce380) = 0
set_tid_address(0x55557bfce650) = 5870
set_robust_list(0x55557bfce660, 24) = 0
rseq(0x55557bfceca0, 0x20, 0, 0x53053053) = 0
prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0
readlink("/proc/self/exe", "/root/syz-executor3496433795", 4096) = 28
getrandom("\x38\x77\x82\x26\x07\x28\xa7\x2d", 8, GRND_NONBLOCK) = 8
brk(NULL) = 0x55557bfced00
brk(0x55557bfefd00) = 0x55557bfefd00
brk(0x55557bff0000) = 0x55557bff0000
mprotect(0x7f4134864000, 16384, PROT_READ) = 0
mmap(0x1ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffffffff000
mmap(0x200000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200000000000
mmap(0x200001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200001000000
mkdir("./syzkaller.VHXrxp", 0700) = 0
chmod("./syzkaller.VHXrxp", 0777) = 0
chdir("./syzkaller.VHXrxp") = 0
mkdir("./0", 0777) = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3
ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address)
close(3) = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5871 attached
, child_tidptr=0x55557bfce650) = 5871
[pid 5871] set_robust_list(0x55557bfce660, 24) = 0
[pid 5871] chdir("./0") = 0
[pid 5871] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 5871] setpgid(0, 0) = 0
[pid 5871] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 5871] write(3, "1000", 4) = 4
[pid 5871] close(3) = 0
[pid 5871] symlink("/dev/binderfs", "./binderfs") = 0
executing program
[pid 5871] write(1, "executing program\n", 18) = 18
[pid 5871] memfd_create("syzkaller", 0) = 3
[pid 5871] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f412c200000
[pid 5871] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216
[pid 5871] munmap(0x7f412c200000, 138412032) = 0
[pid 5871] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid 5871] ioctl(4, LOOP_SET_FD, 3) = 0
[pid 5871] close(3) = 0
[pid 5871] close(4) = 0
[pid 5871] mkdir("./file0", 0777) = 0
[pid 5871] mount("/dev/loop0", "./file0", "jfs", MS_NOSUID|MS_STRICTATIME|MS_LAZYTIME, "") = 0
[pid 5871] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid 5871] chdir("./file0") = 0
[pid 5871] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy)
[pid 5871] open(".", O_RDONLY) = 4
[pid 5871] mkdir("./file1", 000) = 0
[pid 5871] mkdir("./file0", 000) = 0
[pid 5871] mkdir("./bus", 000) = 0
[ 111.371225][ T5871] loop0: detected capacity change from 0 to 32768
[ 111.418781][ T5871] ERROR: (device loop0): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 1
[ 111.418781][ T5871]
[ 111.432814][ T5871] ERROR: (device loop0): remounting filesystem as read-only
[ 111.440447][ T5871] ERROR: (device loop0): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 3
[ 111.440447][ T5871]
[ 111.452078][ T5871] ERROR: (device loop0): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 4
[ 111.452078][ T5871]
[pid 5871] getdents(4, 0x2000000076c0 /* 4 entries */, 4102) = 112
[pid 5871] exit_group(0) = ?
[pid 5871] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5871, si_uid=0, si_status=0, si_utime=0, si_stime=28 /* 0.28 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x55557bfcf6f0 /* 4 entries */, 32768) = 112
[ 111.463745][ T5871] ERROR: (device loop0): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 5
[ 111.463745][ T5871]
[ 111.475267][ T5871] ERROR: (device loop0): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 6
[ 111.475267][ T5871]
[ 111.486795][ T5871] ERROR: (device loop0): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 7
[ 111.486795][ T5871]
[ 111.524855][ T5870] ==================================================================
[ 111.532923][ T5870] BUG: KASAN: user-memory-access in __destroy_inode+0x496/0x670
[ 111.540550][ T5870] Write of size 4 at addr 0000000b00000000 by task syz-executor349/5870
[ 111.548852][ T5870]
[ 111.551156][ T5870] CPU: 1 UID: 0 PID: 5870 Comm: syz-executor349 Not tainted 6.16.0-syzkaller-11952-g6e64f4580381 #0 PREEMPT(full)
[ 111.551178][ T5870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 111.551188][ T5870] Call Trace:
[ 111.551197][ T5870]
[ 111.551205][ T5870] dump_stack_lvl+0x189/0x250
[ 111.551231][ T5870] ? __pfx_dump_stack_lvl+0x10/0x10
[ 111.551259][ T5870] ? __virt_addr_valid+0x7c/0x5c0
[ 111.551284][ T5870] ? __destroy_inode+0x496/0x670
[ 111.551310][ T5870] kasan_report+0x118/0x150
[ 111.551337][ T5870] ? __destroy_inode+0x496/0x670
[ 111.551366][ T5870] kasan_check_range+0x2b0/0x2c0
[ 111.551393][ T5870] __destroy_inode+0x496/0x670
[ 111.551421][ T5870] evict+0x797/0x9c0
[ 111.551446][ T5870] ? __pfx_evict+0x10/0x10
[ 111.551467][ T5870] ? srso_alias_return_thunk+0x5/0xfbef5
[ 111.551490][ T5870] ? srso_alias_return_thunk+0x5/0xfbef5
[ 111.551510][ T5870] ? do_raw_spin_unlock+0x122/0x240
[ 111.551534][ T5870] evict_inodes+0x64c/0x6d0
[ 111.551562][ T5870] ? __pfx_evict_inodes+0x10/0x10
[ 111.551593][ T5870] generic_shutdown_super+0x9a/0x2c0
[ 111.551616][ T5870] kill_block_super+0x44/0x90
[ 111.551641][ T5870] deactivate_locked_super+0xbc/0x130
[ 111.551662][ T5870] cleanup_mnt+0x425/0x4c0
[ 111.551681][ T5870] ? srso_alias_return_thunk+0x5/0xfbef5
[ 111.551701][ T5870] ? lockdep_hardirqs_on+0x9c/0x150
[ 111.551737][ T5870] task_work_run+0x1d4/0x260
[ 111.551763][ T5870] ? __pfx_task_work_run+0x10/0x10
[ 111.551789][ T5870] ? srso_alias_return_thunk+0x5/0xfbef5
[ 111.551809][ T5870] ? path_umount+0x1ea/0xb70
[ 111.551833][ T5870] ptrace_notify+0x281/0x2c0
[ 111.551851][ T5870] ? __pfx_ptrace_notify+0x10/0x10
[ 111.551880][ T5870] ? srso_alias_return_thunk+0x5/0xfbef5
[ 111.551900][ T5870] ? __x64_sys_umount+0x122/0x160
[ 111.551923][ T5870] ? __pfx___x64_sys_umount+0x10/0x10
[ 111.551946][ T5870] ? srso_alias_return_thunk+0x5/0xfbef5
[ 111.551970][ T5870] syscall_exit_work+0xc6/0x1d0
[ 111.551998][ T5870] do_syscall_64+0x2ad/0x3b0
[ 111.552022][ T5870] ? lockdep_hardirqs_on+0x9c/0x150
[ 111.552042][ T5870] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 111.552059][ T5870] ? srso_alias_return_thunk+0x5/0xfbef5
[ 111.552079][ T5870] ? exc_page_fault+0x9f/0xf0
[ 111.552101][ T5870] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 111.552118][ T5870] RIP: 0033:0x7f41347eb487
[ 111.552134][ T5870] Code: 07 00 48 83 c4 08 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8
[ 111.552149][ T5870] RSP: 002b:00007fff3fca4798 EFLAGS: 00000202 ORIG_RAX: 00000000000000a6
[ 111.552167][ T5870] RAX: 0000000000000000 RBX: 000000000001b1d7 RCX: 00007f41347eb487
[ 111.552179][ T5870] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff3fca4850
[ 111.552190][ T5870] RBP: 00007fff3fca4850 R08: 0000000000000000 R09: 0000000000000000
[ 111.552201][ T5870] R10: 00000000ffffffff R11: 0000000000000202 R12: 00007fff3fca58c0
[ 111.552213][ T5870] R13: 000055557bfcf6c0 R14: 0000000000000001 R15: 431bde82d7b634db
[ 111.552233][ T5870]
[ 111.552240][ T5870] ==================================================================
[ 111.855297][ T5870] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 111.862498][ T5870] CPU: 0 UID: 0 PID: 5870 Comm: syz-executor349 Not tainted 6.16.0-syzkaller-11952-g6e64f4580381 #0 PREEMPT(full)
[ 111.874543][ T5870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 111.884591][ T5870] Call Trace:
[ 111.887900][ T5870]
[ 111.890813][ T5870] dump_stack_lvl+0x99/0x250
[ 111.895395][ T5870] ? __asan_memcpy+0x40/0x70
[ 111.899974][ T5870] ? __pfx_dump_stack_lvl+0x10/0x10
[ 111.905159][ T5870] ? __pfx__printk+0x10/0x10
[ 111.909754][ T5870] ? srso_alias_return_thunk+0x5/0xfbef5
[ 111.915372][ T5870] vpanic+0x281/0x750
[ 111.919363][ T5870] ? srso_alias_return_thunk+0x5/0xfbef5
[ 111.925000][ T5870] ? preempt_schedule+0xae/0xc0
[ 111.929897][ T5870] ? __pfx_vpanic+0x10/0x10
[ 111.934415][ T5870] ? preempt_schedule_common+0x83/0xd0
[ 111.939864][ T5870] ? srso_alias_return_thunk+0x5/0xfbef5
[ 111.945487][ T5870] ? preempt_schedule+0xae/0xc0
[ 111.950331][ T5870] ? __pfx_preempt_schedule+0x10/0x10
[ 111.955696][ T5870] panic+0xb9/0xc0
[ 111.959407][ T5870] ? __pfx_panic+0x10/0x10
[ 111.963812][ T5870] ? srso_alias_return_thunk+0x5/0xfbef5
[ 111.969433][ T5870] ? _raw_spin_unlock_irqrestore+0xfd/0x110
[ 111.975330][ T5870] ? __destroy_inode+0x496/0x670
[ 111.980265][ T5870] check_panic_on_warn+0x89/0xb0
[ 111.985200][ T5870] ? __destroy_inode+0x496/0x670
[ 111.990127][ T5870] end_report+0x78/0x160
[ 111.994416][ T5870] kasan_report+0x129/0x150
[ 111.999025][ T5870] ? __destroy_inode+0x496/0x670
[ 112.003994][ T5870] kasan_check_range+0x2b0/0x2c0
[ 112.008952][ T5870] __destroy_inode+0x496/0x670
[ 112.013799][ T5870] evict+0x797/0x9c0
[ 112.017690][ T5870] ? __pfx_evict+0x10/0x10
[ 112.022091][ T5870] ? srso_alias_return_thunk+0x5/0xfbef5
[ 112.027799][ T5870] ? srso_alias_return_thunk+0x5/0xfbef5
[ 112.033418][ T5870] ? do_raw_spin_unlock+0x122/0x240
[ 112.038608][ T5870] evict_inodes+0x64c/0x6d0
[ 112.043100][ T5870] ? __pfx_evict_inodes+0x10/0x10
[ 112.048118][ T5870] generic_shutdown_super+0x9a/0x2c0
[ 112.053396][ T5870] kill_block_super+0x44/0x90
[ 112.058170][ T5870] deactivate_locked_super+0xbc/0x130
[ 112.063532][ T5870] cleanup_mnt+0x425/0x4c0
[ 112.067931][ T5870] ? srso_alias_return_thunk+0x5/0xfbef5
[ 112.073547][ T5870] ? lockdep_hardirqs_on+0x9c/0x150
[ 112.078732][ T5870] task_work_run+0x1d4/0x260
[ 112.083318][ T5870] ? __pfx_task_work_run+0x10/0x10
[ 112.088433][ T5870] ? srso_alias_return_thunk+0x5/0xfbef5
[ 112.094146][ T5870] ? path_umount+0x1ea/0xb70
[ 112.098724][ T5870] ptrace_notify+0x281/0x2c0
[ 112.103301][ T5870] ? __pfx_ptrace_notify+0x10/0x10
[ 112.108422][ T5870] ? srso_alias_return_thunk+0x5/0xfbef5
[ 112.114042][ T5870] ? __x64_sys_umount+0x122/0x160
[ 112.119054][ T5870] ? __pfx___x64_sys_umount+0x10/0x10
[ 112.124541][ T5870] ? srso_alias_return_thunk+0x5/0xfbef5
[ 112.130175][ T5870] syscall_exit_work+0xc6/0x1d0
[ 112.135017][ T5870] do_syscall_64+0x2ad/0x3b0
[ 112.139592][ T5870] ? lockdep_hardirqs_on+0x9c/0x150
[ 112.144801][ T5870] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 112.150867][ T5870] ? srso_alias_return_thunk+0x5/0xfbef5
[ 112.156485][ T5870] ? exc_page_fault+0x9f/0xf0
[ 112.161154][ T5870] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 112.167055][ T5870] RIP: 0033:0x7f41347eb487
[ 112.171455][ T5870] Code: 07 00 48 83 c4 08 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8
[ 112.191308][ T5870] RSP: 002b:00007fff3fca4798 EFLAGS: 00000202 ORIG_RAX: 00000000000000a6
[ 112.199714][ T5870] RAX: 0000000000000000 RBX: 000000000001b1d7 RCX: 00007f41347eb487
[ 112.207761][ T5870] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff3fca4850
[ 112.215725][ T5870] RBP: 00007fff3fca4850 R08: 0000000000000000 R09: 0000000000000000
[ 112.223686][ T5870] R10: 00000000ffffffff R11: 0000000000000202 R12: 00007fff3fca58c0
[ 112.231646][ T5870] R13: 000055557bfcf6c0 R14: 0000000000000001 R15: 431bde82d7b634db
[ 112.239618][ T5870]
[ 112.242883][ T5870] Kernel Offset: disabled
[ 112.247198][ T5870] Rebooting in 86400 seconds..