./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor754908954

<...>
[   91.989898][  T917] cfg80211: failed to load regulatory.db
Warning: Permanently added '10.128.0.136' (ED25519) to the list of known hosts.
execve("./syz-executor754908954", ["./syz-executor754908954"], 0x7ffda3acc570 /* 10 vars */) = 0
brk(NULL)                               = 0x55558cf2d000
brk(0x55558cf2dd00)                     = 0x55558cf2dd00
arch_prctl(ARCH_SET_FS, 0x55558cf2d380) = 0
set_tid_address(0x55558cf2d650)         = 5830
set_robust_list(0x55558cf2d660, 24)     = 0
rseq(0x55558cf2dca0, 0x20, 0, 0x53053053) = 0
prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0
readlink("/proc/self/exe", "/root/syz-executor754908954", 4096) = 27
getrandom("\xfa\x4a\x7e\x41\x59\xc9\x21\x81", 8, GRND_NONBLOCK) = 8
brk(NULL)                               = 0x55558cf2dd00
brk(0x55558cf4ed00)                     = 0x55558cf4ed00
brk(0x55558cf4f000)                     = 0x55558cf4f000
mprotect(0x7f30c519a000, 16384, PROT_READ) = 0
mmap(0x1ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffffffff000
mmap(0x200000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200000000000
mmap(0x200001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200001000000
mkdir("./syzkaller.0dKZs6", 0700)       = 0
chmod("./syzkaller.0dKZs6", 0777)       = 0
chdir("./syzkaller.0dKZs6")             = 0
mkdir("./0", 0777)                      = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5831 attached
 <unfinished ...>
[pid  5831] set_robust_list(0x55558cf2d660, 24) = 0
[pid  5831] chdir("./0")                = 0
[pid  5830] <... clone resumed>, child_tidptr=0x55558cf2d650) = 5831
[pid  5831] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5831] setpgid(0, 0)               = 0
[pid  5831] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5831] write(3, "1000", 4)         = 4
[pid  5831] close(3)                    = 0
[pid  5831] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5831] write(1, "executing program\n", 18executing program
) = 18
[pid  5831] memfd_create("syzkaller", 0) = 3
[pid  5831] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f30bcc00000
[pid  5831] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216
[pid  5831] munmap(0x7f30bcc00000, 138412032) = 0
[pid  5831] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5831] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5831] close(3)                    = 0
[pid  5831] close(4)                    = 0
[pid  5831] mkdir("./bus", 0777)        = 0
[   92.925883][ T5831] loop0: detected capacity change from 0 to 32768
[pid  5831] mount("/dev/loop0", "./bus", "jfs", MS_NOSUID|MS_NODIRATIME|MS_REC|MS_SILENT|MS_POSIXACL|MS_STRICTATIME|MS_LAZYTIME, "") = 0
[pid  5831] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3
[pid  5831] chdir("./bus")              = 0
[pid  5831] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy)
[pid  5831] openat(AT_FDCWD, "blkio.throttle.io_service_bytes", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4
[pid  5831] openat(AT_FDCWD, "blkio.bfq.io_queued_recursive", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = -1 EIO (Input/output error)
[pid  5831] write(4, " 00000000000000000119 00000000000000000005 00000000000000000052 00000000002000000142 000000000000000"..., 149) = 149
[pid  5831] memfd_create("syzkaller", 0) = 5
[   93.028711][ T5831] ERROR: (device loop0): dbAlloc: the hint is outside the map
[   93.028711][ T5831] 
[   93.039529][ T5831] ERROR: (device loop0): remounting filesystem as read-only
[   93.046907][ T5831] ialloc: diAlloc returned -5!
[pid  5831] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f30bcc00000
[pid  5831] write(5, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 262144) = 262144
[pid  5831] munmap(0x7f30bcc00000, 138412032) = 0
[pid  5831] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy)
[pid  5831] close(5)                    = 0
[pid  5831] exit_group(0)               = ?
[pid  5831] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5831, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=19 /* 0.19 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x55558cf2e6f0 /* 4 entries */, 32768) = 104
umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./0/binderfs")                  = 0
[   93.249135][ T5830] ------------[ cut here ]------------
[   93.254713][ T5830] kernel BUG at fs/jfs/inode.c:169!
[   93.260507][ T5830] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI
[   93.266796][ T5830] CPU: 0 UID: 0 PID: 5830 Comm: syz-executor754 Not tainted 6.16.0-rc1-syzkaller-00239-g08215f5486ec #0 PREEMPT(full) 
[   93.279241][ T5830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[   93.289330][ T5830] RIP: 0010:jfs_evict_inode+0x438/0x440
[   93.294909][ T5830] Code: fe e9 e0 fd ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 17 fe ff ff 4c 89 f7 e8 e3 27 ea fe e9 0a fe ff ff e8 a9 d4 88 fe 90 <0f> 0b 66 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[   93.314740][ T5830] RSP: 0018:ffffc9000446f9c0 EFLAGS: 00010293
[   93.320937][ T5830] RAX: ffffffff83378697 RBX: ffff88804ea4bb80 RCX: ffff88802e578000
[   93.329015][ T5830] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88804ea4bb80
[   93.336989][ T5830] RBP: 0000000000000001 R08: ffffffff8f9fe2f7 R09: 1ffffffff1f3fc5e
[   93.345060][ T5830] R10: dffffc0000000000 R11: ffffffff83376430 R12: dffffc0000000000
[   93.353051][ T5830] R13: dffffc0000000000 R14: ffff88804ea4b808 R15: ffffffff83378260
[   93.361043][ T5830] FS:  000055558cf2d380(0000) GS:ffff888125c85000(0000) knlGS:0000000000000000
[   93.369980][ T5830] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   93.376683][ T5830] CR2: 00007ffe42c3ec78 CR3: 0000000076872000 CR4: 00000000003526f0
[   93.384826][ T5830] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   93.393166][ T5830] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   93.401232][ T5830] Call Trace:
[   93.404612][ T5830]  <TASK>
[   93.407549][ T5830]  ? evict+0x4f8/0x9c0
[   93.411638][ T5830]  ? __pfx_jfs_evict_inode+0x10/0x10
[   93.416945][ T5830]  evict+0x501/0x9c0
[   93.420846][ T5830]  ? __pfx_evict+0x10/0x10
[   93.425273][ T5830]  ? do_raw_spin_unlock+0x122/0x240
[   93.430570][ T5830]  evict_inodes+0x636/0x6c0
[   93.435086][ T5830]  ? __pfx_evict_inodes+0x10/0x10
[   93.440124][ T5830]  generic_shutdown_super+0x9a/0x2c0
[   93.445412][ T5830]  kill_block_super+0x44/0x90
[   93.450108][ T5830]  deactivate_locked_super+0xbc/0x130
[   93.455577][ T5830]  cleanup_mnt+0x425/0x4c0
[   93.460000][ T5830]  ? lockdep_hardirqs_on+0x9c/0x150
[   93.465223][ T5830]  task_work_run+0x1d1/0x260
[   93.469929][ T5830]  ? __pfx_task_work_run+0x10/0x10
[   93.475133][ T5830]  ? __x64_sys_umount+0x122/0x160
[   93.480252][ T5830]  ptrace_notify+0x281/0x2c0
[   93.484865][ T5830]  ? __pfx_ptrace_notify+0x10/0x10
[   93.489989][ T5830]  ? __x64_sys_umount+0x122/0x160
[   93.495098][ T5830]  ? __pfx___x64_sys_umount+0x10/0x10
[   93.500562][ T5830]  ? rcu_is_watching+0x15/0xb0
[   93.505430][ T5830]  syscall_exit_work+0xc6/0x1d0
[   93.510293][ T5830]  do_syscall_64+0x2ad/0x3b0
[   93.514894][ T5830]  ? lockdep_hardirqs_on+0x9c/0x150
[   93.520102][ T5830]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   93.526171][ T5830]  ? clear_bhb_loop+0x60/0xb0
[   93.530868][ T5830]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   93.536855][ T5830] RIP: 0033:0x7f30c51215c7
[   93.541552][ T5830] Code: 07 00 48 83 c4 08 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8
[   93.561335][ T5830] RSP: 002b:00007ffe42c3f428 EFLAGS: 00000206 ORIG_RAX: 00000000000000a6
[   93.569763][ T5830] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f30c51215c7
[   93.577743][ T5830] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe42c3f4e0
[   93.585848][ T5830] RBP: 00007ffe42c3f4e0 R08: 0000000000000000 R09: 0000000000000000
[   93.594354][ T5830] R10: 00000000ffffffff R11: 0000000000000206 R12: 00007ffe42c40550
[   93.602545][ T5830] R13: 000055558cf2e6c0 R14: 431bde82d7b634db R15: 00007ffe42c40570
[   93.610534][ T5830]  </TASK>
[   93.613567][ T5830] Modules linked in:
[   93.617786][ T5830] ---[ end trace 0000000000000000 ]---
[   93.623381][ T5830] RIP: 0010:jfs_evict_inode+0x438/0x440
[   93.629309][ T5830] Code: fe e9 e0 fd ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 17 fe ff ff 4c 89 f7 e8 e3 27 ea fe e9 0a fe ff ff e8 a9 d4 88 fe 90 <0f> 0b 66 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[   93.649473][ T5830] RSP: 0018:ffffc9000446f9c0 EFLAGS: 00010293
[   93.655565][ T5830] RAX: ffffffff83378697 RBX: ffff88804ea4bb80 RCX: ffff88802e578000
[   93.663695][ T5830] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88804ea4bb80
[   93.671818][ T5830] RBP: 0000000000000001 R08: ffffffff8f9fe2f7 R09: 1ffffffff1f3fc5e
[   93.680316][ T5830] R10: dffffc0000000000 R11: ffffffff83376430 R12: dffffc0000000000
[   93.688368][ T5830] R13: dffffc0000000000 R14: ffff88804ea4b808 R15: ffffffff83378260
[   93.696379][ T5830] FS:  000055558cf2d380(0000) GS:ffff888125c85000(0000) knlGS:0000000000000000
[   93.705633][ T5830] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   93.712300][ T5830] CR2: 00007ffe42c3ec78 CR3: 0000000076872000 CR4: 00000000003526f0
[   93.720339][ T5830] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   93.728489][ T5830] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   93.736680][ T5830] Kernel panic - not syncing: Fatal exception
[   93.743259][ T5830] Kernel Offset: disabled
[   93.747614][ T5830] Rebooting in 86400 seconds..