./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3305514222
<...>
Warning: Permanently added '10.128.1.217' (ED25519) to the list of known hosts.
execve("./syz-executor3305514222", ["./syz-executor3305514222"], 0x7ffd803a3330 /* 10 vars */) = 0
brk(NULL) = 0x555559bab000
brk(0x555559babd00) = 0x555559babd00
arch_prctl(ARCH_SET_FS, 0x555559bab380) = 0
set_tid_address(0x555559bab650) = 5829
set_robust_list(0x555559bab660, 24) = 0
rseq(0x555559babca0, 0x20, 0, 0x53053053) = 0
prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0
readlink("/proc/self/exe", "/root/syz-executor3305514222", 4096) = 28
getrandom("\x2d\x91\xf1\xd4\xbe\x1d\x0a\x7e", 8, GRND_NONBLOCK) = 8
brk(NULL) = 0x555559babd00
brk(0x555559bccd00) = 0x555559bccd00
brk(0x555559bcd000) = 0x555559bcd000
mprotect(0x7fb89ecc0000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
mkdir("./syzkaller.2uOtq9", 0700) = 0
chmod("./syzkaller.2uOtq9", 0777) = 0
chdir("./syzkaller.2uOtq9") = 0
mkdir("./0", 0777) = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3
ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address)
close(3) = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5831 attached
, child_tidptr=0x555559bab650) = 5831
[pid 5831] set_robust_list(0x555559bab660, 24) = 0
[pid 5831] chdir("./0") = 0
[pid 5831] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 5831] setpgid(0, 0) = 0
[pid 5831] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 5831] write(3, "1000", 4) = 4
[pid 5831] close(3) = 0
[pid 5831] symlink("/dev/binderfs", "./binderfs") = 0
[pid 5831] write(1, "executing program\n", 18executing program
) = 18
[pid 5831] memfd_create("syzkaller", 0) = 3
[pid 5831] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb896800000
[pid 5831] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216
[pid 5831] munmap(0x7fb896800000, 138412032) = 0
[pid 5831] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid 5831] ioctl(4, LOOP_SET_FD, 3) = 0
[pid 5831] close(3) = 0
[pid 5831] close(4) = 0
[pid 5831] mkdir("./file0", 0777) = 0
syzkaller login: [ 61.094295][ T5831] loop0: detected capacity change from 0 to 32768
[pid 5831] mount("/dev/loop0", "./file0", "jfs", MS_MANDLOCK|MS_DIRSYNC|MS_NODIRATIME|MS_POSIXACL|MS_LAZYTIME, "") = 0
[pid 5831] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid 5831] chdir("./file0") = 0
[pid 5831] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy)
[pid 5831] mount(".", "./file0/../file0", NULL, MS_RDONLY|MS_SYNCHRONOUS|MS_DIRSYNC|MS_BIND|MS_SHARED, NULL) = 0
[pid 5831] exit_group(0) = ?
[pid 5831] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5831, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=14 /* 0.14 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x555559bac6f0 /* 4 entries */, 32768) = 112
umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./0/binderfs") = 0
umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EBUSY (Device or resource busy)
newfstatat(AT_FDCWD, "./0/file0", {st_mode=S_IFDIR|0755, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EBUSY (Device or resource busy)
openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0755, st_size=40, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x555559bb4730 /* 7 entries */, 32768) = 208
umount2("./0/file0/file.cold", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./0/file0/file.cold", {st_mode=S_IFREG|0755, st_size=100, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./0/file0/file.cold") = 0
umount2("./0/file0/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0
umount2("./0/file0/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./0/file0/file0", {st_mode=S_IFDIR|0755, st_size=16, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./0/file0/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./0/file0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 5
newfstatat(5, "", {st_mode=S_IFDIR|0755, st_size=16, ...}, AT_EMPTY_PATH) = 0
[ 61.145522][ T5831] =======================================================
[ 61.145522][ T5831] WARNING: The mand mount option has been deprecated and
[ 61.145522][ T5831] and is ignored by this kernel. Remove the mand
[ 61.145522][ T5831] option from the mount to silence this warning.
[ 61.145522][ T5831] =======================================================
getdents64(5, 0x555559bbc770 /* 4 entries */, 32768) = 112
umount2("./0/file0/file0/?ile0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 ENOENT (No such file or directory)
newfstatat(AT_FDCWD, "./0/file0/file0/?ile0", 0x7ffc654e6a10, AT_SYMLINK_NOFOLLOW) = -1 ENOENT (No such file or directory)
exit_group(1) = ?
+++ exited with 1 +++
[ 61.222281][ T5829] non-latin1 character 0x2e66 found in JFS file name
[ 61.229231][ T5829] mount with iocharset=utf8 to access
[ 66.199496][ T113] ------------[ cut here ]------------
[ 66.205036][ T113] WARNING: CPU: 0 PID: 113 at fs/jfs/jfs_dmap.c:2875 dbAdjTree+0x420/0x520
[ 66.213912][ T113] Modules linked in:
[ 66.217883][ T113] CPU: 0 UID: 0 PID: 113 Comm: jfsCommit Not tainted 6.12.0-rc6-syzkaller-00077-g2e1b3cc9d7f7 #0
[ 66.228427][ T113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[ 66.238553][ T113] RIP: 0010:dbAdjTree+0x420/0x520
[ 66.243588][ T113] Code: 60 6b fe eb 0c e8 90 60 6b fe eb 05 e8 89 60 6b fe 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc e8 71 60 6b fe 90 <0f> 0b 90 eb e2 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c 14 fc ff ff 48
[ 66.263261][ T113] RSP: 0018:ffffc90002ccf4f8 EFLAGS: 00010293
[ 66.269372][ T113] RAX: ffffffff8329798f RBX: 0000000000000155 RCX: ffff88801ff41e00
[ 66.277554][ T113] RDX: 0000000000000000 RSI: 0000000000000155 RDI: 0000000000020056
[ 66.285535][ T113] RBP: ffff8880777bc018 R08: ffffffff832975c7 R09: 1ffffd40003bbde0
[ 66.293551][ T113] R10: dffffc0000000000 R11: fffff940003bbde1 R12: dffffc0000000000
[ 66.301557][ T113] R13: 0000000000000004 R14: ffff8880777bc010 R15: 0000000000020056
[ 66.309592][ T113] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000
[ 66.318590][ T113] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 66.325191][ T113] CR2: 00007f8d28442580 CR3: 000000000e734000 CR4: 00000000003526f0
[ 66.333220][ T113] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 66.341228][ T113] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 66.349253][ T113] Call Trace:
[ 66.352562][ T113]
[ 66.355499][ T113] ? __warn+0x168/0x4e0
[ 66.359744][ T113] ? dbAdjTree+0x420/0x520
[ 66.364179][ T113] ? report_bug+0x2b3/0x500
[ 66.368732][ T113] ? dbAdjTree+0x420/0x520
[ 66.373165][ T113] ? handle_bug+0x60/0x90
[ 66.377544][ T113] ? exc_invalid_op+0x1a/0x50
[ 66.382237][ T113] ? asm_exc_invalid_op+0x1a/0x20
[ 66.387318][ T113] ? dbAdjTree+0x57/0x520
[ 66.391664][ T113] ? dbAdjTree+0x41f/0x520
[ 66.396127][ T113] ? dbAdjTree+0x420/0x520
[ 66.400556][ T113] ? dbAdjTree+0x41f/0x520
[ 66.404981][ T113] ? folio_mark_accessed+0x6f6/0x11b0
[ 66.410463][ T113] dbJoin+0x255/0x310
[ 66.414461][ T113] ? do_read_cache_folio+0x77a/0x850
[ 66.419790][ T113] dbFreeBits+0x4db/0xd90
[ 66.424174][ T113] dbFree+0x35b/0x680
[ 66.428236][ T113] txFreeMap+0x96a/0xd50
[ 66.432497][ T113] ? _raw_spin_unlock+0x28/0x50
[ 66.437413][ T113] ? __mark_inode_dirty+0x5b2/0xe90
[ 66.442636][ T113] xtTruncate+0xe65/0x3270
[ 66.447132][ T113] ? __pfx_xtTruncate+0x10/0x10
[ 66.452013][ T113] jfs_free_zero_link+0x46e/0x6e0
[ 66.457097][ T113] ? inode_wait_for_writeback+0x111/0x2a0
[ 66.462849][ T113] ? __pfx_jfs_free_zero_link+0x10/0x10
[ 66.468457][ T113] jfs_evict_inode+0x35f/0x440
[ 66.473237][ T113] ? __pfx_jfs_evict_inode+0x10/0x10
[ 66.478566][ T113] evict+0x4e8/0x9b0
[ 66.482478][ T113] ? __pfx_evict+0x10/0x10
[ 66.486936][ T113] ? iput+0x713/0xa50
[ 66.490927][ T113] txUpdateMap+0x931/0xb10
[ 66.495336][ T113] ? __pfx_txUpdateMap+0x10/0x10
[ 66.500318][ T113] jfs_lazycommit+0x49a/0xb80
[ 66.505004][ T113] ? _raw_spin_unlock_irqrestore+0x8f/0x140
[ 66.510930][ T113] ? lockdep_hardirqs_on+0x99/0x150
[ 66.516184][ T113] ? __pfx_jfs_lazycommit+0x10/0x10
[ 66.521391][ T113] ? __pfx_default_wake_function+0x10/0x10
[ 66.527285][ T113] ? __kthread_parkme+0x169/0x1d0
[ 66.532361][ T113] ? __pfx_jfs_lazycommit+0x10/0x10
[ 66.537621][ T113] kthread+0x2f0/0x390
[ 66.541701][ T113] ? __pfx_jfs_lazycommit+0x10/0x10
[ 66.546934][ T113] ? __pfx_kthread+0x10/0x10
[ 66.551537][ T113] ret_from_fork+0x4b/0x80
[ 66.555957][ T113] ? __pfx_kthread+0x10/0x10
[ 66.560594][ T113] ret_from_fork_asm+0x1a/0x30
[ 66.565392][ T113]
[ 66.568454][ T113] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 66.575751][ T113] CPU: 0 UID: 0 PID: 113 Comm: jfsCommit Not tainted 6.12.0-rc6-syzkaller-00077-g2e1b3cc9d7f7 #0
[ 66.586244][ T113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[ 66.596301][ T113] Call Trace:
[ 66.599580][ T113]
[ 66.602507][ T113] dump_stack_lvl+0x241/0x360
[ 66.607190][ T113] ? __pfx_dump_stack_lvl+0x10/0x10
[ 66.612385][ T113] ? __pfx__printk+0x10/0x10
[ 66.616972][ T113] ? _printk+0xd5/0x120
[ 66.621125][ T113] ? __init_begin+0x41000/0x41000
[ 66.626150][ T113] ? vscnprintf+0x5d/0x90
[ 66.630482][ T113] panic+0x349/0x880
[ 66.634375][ T113] ? __warn+0x177/0x4e0
[ 66.638529][ T113] ? __pfx_panic+0x10/0x10
[ 66.642936][ T113] ? show_trace_log_lvl+0x3b2/0x410
[ 66.648134][ T113] ? ret_from_fork_asm+0x1a/0x30
[ 66.653072][ T113] __warn+0x34b/0x4e0
[ 66.657050][ T113] ? dbAdjTree+0x420/0x520
[ 66.661472][ T113] report_bug+0x2b3/0x500
[ 66.665796][ T113] ? dbAdjTree+0x420/0x520
[ 66.670217][ T113] handle_bug+0x60/0x90
[ 66.674373][ T113] exc_invalid_op+0x1a/0x50
[ 66.678872][ T113] asm_exc_invalid_op+0x1a/0x20
[ 66.683716][ T113] RIP: 0010:dbAdjTree+0x420/0x520
[ 66.688736][ T113] Code: 60 6b fe eb 0c e8 90 60 6b fe eb 05 e8 89 60 6b fe 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc e8 71 60 6b fe 90 <0f> 0b 90 eb e2 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c 14 fc ff ff 48
[ 66.708338][ T113] RSP: 0018:ffffc90002ccf4f8 EFLAGS: 00010293
[ 66.714402][ T113] RAX: ffffffff8329798f RBX: 0000000000000155 RCX: ffff88801ff41e00
[ 66.722366][ T113] RDX: 0000000000000000 RSI: 0000000000000155 RDI: 0000000000020056
[ 66.730341][ T113] RBP: ffff8880777bc018 R08: ffffffff832975c7 R09: 1ffffd40003bbde0
[ 66.738309][ T113] R10: dffffc0000000000 R11: fffff940003bbde1 R12: dffffc0000000000
[ 66.746274][ T113] R13: 0000000000000004 R14: ffff8880777bc010 R15: 0000000000020056
[ 66.754246][ T113] ? dbAdjTree+0x57/0x520
[ 66.758575][ T113] ? dbAdjTree+0x41f/0x520
[ 66.762991][ T113] ? dbAdjTree+0x41f/0x520
[ 66.767403][ T113] ? folio_mark_accessed+0x6f6/0x11b0
[ 66.772773][ T113] dbJoin+0x255/0x310
[ 66.776755][ T113] ? do_read_cache_folio+0x77a/0x850
[ 66.782036][ T113] dbFreeBits+0x4db/0xd90
[ 66.786369][ T113] dbFree+0x35b/0x680
[ 66.790355][ T113] txFreeMap+0x96a/0xd50
[ 66.794591][ T113] ? _raw_spin_unlock+0x28/0x50
[ 66.799436][ T113] ? __mark_inode_dirty+0x5b2/0xe90
[ 66.804637][ T113] xtTruncate+0xe65/0x3270
[ 66.809070][ T113] ? __pfx_xtTruncate+0x10/0x10
[ 66.813938][ T113] jfs_free_zero_link+0x46e/0x6e0
[ 66.818960][ T113] ? inode_wait_for_writeback+0x111/0x2a0
[ 66.824677][ T113] ? __pfx_jfs_free_zero_link+0x10/0x10
[ 66.830227][ T113] jfs_evict_inode+0x35f/0x440
[ 66.835027][ T113] ? __pfx_jfs_evict_inode+0x10/0x10
[ 66.840311][ T113] evict+0x4e8/0x9b0
[ 66.844209][ T113] ? __pfx_evict+0x10/0x10
[ 66.848621][ T113] ? iput+0x713/0xa50
[ 66.852600][ T113] txUpdateMap+0x931/0xb10
[ 66.857020][ T113] ? __pfx_txUpdateMap+0x10/0x10
[ 66.861958][ T113] jfs_lazycommit+0x49a/0xb80
[ 66.866631][ T113] ? _raw_spin_unlock_irqrestore+0x8f/0x140
[ 66.872516][ T113] ? lockdep_hardirqs_on+0x99/0x150
[ 66.877723][ T113] ? __pfx_jfs_lazycommit+0x10/0x10
[ 66.882914][ T113] ? __pfx_default_wake_function+0x10/0x10
[ 66.888719][ T113] ? __kthread_parkme+0x169/0x1d0
[ 66.893742][ T113] ? __pfx_jfs_lazycommit+0x10/0x10
[ 66.898935][ T113] kthread+0x2f0/0x390
[ 66.902996][ T113] ? __pfx_jfs_lazycommit+0x10/0x10
[ 66.908188][ T113] ? __pfx_kthread+0x10/0x10
[ 66.912768][ T113] ret_from_fork+0x4b/0x80
[ 66.917198][ T113] ? __pfx_kthread+0x10/0x10
[ 66.921779][ T113] ret_from_fork_asm+0x1a/0x30
[ 66.926555][ T113]
[ 66.929824][ T113] Kernel Offset: disabled
[ 66.934168][ T113] Rebooting in 86400 seconds..