./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor1544332035
<...>
Warning: Permanently added '10.128.10.1' (ED25519) to the list of known hosts.
execve("./syz-executor1544332035", ["./syz-executor1544332035"], 0x7ffd07dc6750 /* 10 vars */) = 0
brk(NULL) = 0x55558f198000
brk(0x55558f198d00) = 0x55558f198d00
arch_prctl(ARCH_SET_FS, 0x55558f198380) = 0
set_tid_address(0x55558f198650) = 5218
set_robust_list(0x55558f198660, 24) = 0
rseq(0x55558f198ca0, 0x20, 0, 0x53053053) = 0
prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0
readlink("/proc/self/exe", "/root/syz-executor1544332035", 4096) = 28
getrandom("\x01\x19\xb2\x87\x4a\xc0\x8e\x11", 8, GRND_NONBLOCK) = 8
brk(NULL) = 0x55558f198d00
brk(0x55558f1b9d00) = 0x55558f1b9d00
brk(0x55558f1ba000) = 0x55558f1ba000
mprotect(0x7f0bdc539000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
mkdir("./syzkaller.6I9BRL", 0700) = 0
chmod("./syzkaller.6I9BRL", 0777) = 0
chdir("./syzkaller.6I9BRL") = 0
mkdir("./0", 0777) = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3
ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address)
close(3) = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5219 attached
, child_tidptr=0x55558f198650) = 5219
[pid 5219] set_robust_list(0x55558f198660, 24) = 0
[pid 5219] chdir("./0") = 0
[pid 5219] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 5219] setpgid(0, 0) = 0
[pid 5219] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 5219] write(3, "1000", 4) = 4
[pid 5219] close(3) = 0
[pid 5219] symlink("/dev/binderfs", "./binderfs") = 0
[pid 5219] write(1, "executing program\n", 18executing program
) = 18
[pid 5219] memfd_create("syzkaller", 0) = 3
[pid 5219] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0bd4000000
[pid 5219] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216
[pid 5219] munmap(0x7f0bd4000000, 138412032) = 0
[pid 5219] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid 5219] ioctl(4, LOOP_SET_FD, 3) = 0
[pid 5219] close(3) = 0
[pid 5219] close(4) = 0
[pid 5219] mkdir("./file7", 0777) = 0
[pid 5219] mount("/dev/loop0", "./file7", "jfs", MS_SYNCHRONOUS|MS_NODIRATIME, "") = 0
[pid 5219] openat(AT_FDCWD, "./file7", O_RDONLY|O_DIRECTORY) = 3
[pid 5219] chdir("./file7") = 0
[pid 5219] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy)
[pid 5219] openat(AT_FDCWD, "/dev/fuse", O_RDWR) = 4
[ 70.179317][ T5219] loop0: detected capacity change from 0 to 32768
[pid 5219] mount(NULL, "./file0", "fuse", 0, "fd=0x0000000000000004,rootmode=00000000000000000040000,user_id=00000000000000000000,group_id=0000000"...) = 0
[pid 5219] exit_group(0) = ?
[pid 5219] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5219, si_uid=0, si_status=0, si_utime=0, si_stime=22 /* 0.22 s */} ---
umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
getdents64(3, 0x55558f1996f0 /* 4 entries */, 32768) = 112
umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./0/binderfs") = 0
umount2("./0/file7", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EBUSY (Device or resource busy)
newfstatat(AT_FDCWD, "./0/file7", {st_mode=S_IFDIR|0755, st_size=256, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./0/file7", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EBUSY (Device or resource busy)
openat(AT_FDCWD, "./0/file7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
newfstatat(4, "", {st_mode=S_IFDIR|0755, st_size=256, ...}, AT_EMPTY_PATH) = 0
getdents64(4, 0x55558f1a1730 /* 7 entries */, 32768) = 208
umount2("./0/file7/file.cold", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./0/file7/file.cold", {st_mode=S_IFREG|0755, st_size=100, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./0/file7/file.cold") = 0
umount2("./0/file7/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0
umount2("./0/file7/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./0/file7/file0", {st_mode=S_IFDIR|0755, st_size=256, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./0/file7/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./0/file7/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 5
newfstatat(5, "", {st_mode=S_IFDIR|0755, st_size=256, ...}, AT_EMPTY_PATH) = 0
getdents64(5, 0x55558f1a9770 /* 4 entries */, 32768) = 112
umount2("./0/file7/file0/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./0/file7/file0/file0", {st_mode=S_IFREG|0755, st_size=1050, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./0/file7/file0/file0") = 0
umount2("./0/file7/file0/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./0/file7/file0/file1", {st_mode=S_IFLNK|0777, st_size=39, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./0/file7/file0/file1") = 0
getdents64(5, 0x55558f1a9770 /* 0 entries */, 32768) = 0
close(5) = 0
rmdir("./0/file7/file0") = 0
umount2("./0/file7/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./0/file7/file1", {st_mode=S_IFREG|0755, st_size=10, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./0/file7/file1") = 0
umount2("./0/file7/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./0/file7/file2", {st_mode=S_IFREG|0755, st_size=9000, ...}, AT_SYMLINK_NOFOLLOW) = 0
[ 70.302096][ T113] BUG: spinlock bad magic on CPU#1, jfsCommit/113
[ 70.308561][ T113] lock: 0xffff888071cbb7f8, .magic: ffffffff, .owner: /0, .owner_cpu: 512
[ 70.317300][ T113] CPU: 1 UID: 0 PID: 113 Comm: jfsCommit Not tainted 6.11.0-syzkaller-04744-gbdf56c7580d2 #0
[ 70.327497][ T113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[ 70.337590][ T113] Call Trace:
[ 70.340902][ T113]
[ 70.343837][ T113] dump_stack_lvl+0x241/0x360
unlink("./0/file7/file2") = 0
umount2("./0/file7/file3", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./0/file7/file3", {st_mode=S_IFREG|0755, st_size=9000, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./0/file7/file3") = 0
[ 70.348560][ T113] ? __pfx_dump_stack_lvl+0x10/0x10
[ 70.353797][ T113] ? spin_bug+0x13b/0x1d0
[ 70.358172][ T113] do_raw_spin_lock+0x209/0x370
[ 70.363049][ T113] ? __pfx_do_raw_spin_lock+0x10/0x10
[ 70.368435][ T113] _raw_spin_lock_irqsave+0xe1/0x120
[ 70.373827][ T113] ? __pfx__raw_spin_lock_irqsave+0x10/0x10
[ 70.379913][ T113] __wake_up_common_lock+0x25/0x1e0
[ 70.385163][ T113] release_metapage+0xb2/0x960
[ 70.389967][ T113] ? txFreeMap+0xa9c/0xd50
[ 70.394404][ T113] ? __mark_inode_dirty+0x3db/0xe90
getdents64(4, 0x55558f1a1730 /* 0 entries */, 32768) = 0
close(4) = 0
rmdir("./0/file7") = -1 EBUSY (Device or resource busy)
[ 70.399723][ T113] xtTruncate+0x1006/0x3270
[ 70.404239][ T113] ? __pfx_xtTruncate+0x10/0x10
[ 70.409240][ T113] jfs_free_zero_link+0x46e/0x6e0
[ 70.414269][ T113] ? inode_wait_for_writeback+0x111/0x2a0
[ 70.420000][ T113] ? __pfx_jfs_free_zero_link+0x10/0x10
[ 70.425553][ T113] jfs_evict_inode+0x35f/0x440
[ 70.430346][ T113] ? __pfx_jfs_evict_inode+0x10/0x10
[ 70.435650][ T113] evict+0x4e8/0x9b0
[ 70.439562][ T113] ? __pfx_evict+0x10/0x10
[ 70.443989][ T113] ? iput+0x713/0xa50
[ 70.447976][ T113] txUpdateMap+0x931/0xb10
[ 70.452417][ T113] ? __pfx_txUpdateMap+0x10/0x10
[ 70.457384][ T113] ? __wake_up_common_lock+0x18c/0x1e0
[ 70.462852][ T113] jfs_lazycommit+0x49a/0xb80
[ 70.467555][ T113] ? _raw_spin_unlock_irqrestore+0x8f/0x140
[ 70.473623][ T113] ? lockdep_hardirqs_on+0x99/0x150
[ 70.478918][ T113] ? __pfx_jfs_lazycommit+0x10/0x10
[ 70.484119][ T113] ? __pfx_default_wake_function+0x10/0x10
[ 70.489933][ T113] ? __kthread_parkme+0x169/0x1d0
[ 70.494977][ T113] ? __pfx_jfs_lazycommit+0x10/0x10
[ 70.500175][ T113] kthread+0x2f0/0x390
[ 70.504241][ T113] ? __pfx_jfs_lazycommit+0x10/0x10
[ 70.509458][ T113] ? __pfx_kthread+0x10/0x10
[ 70.514048][ T113] ret_from_fork+0x4b/0x80
[ 70.518467][ T113] ? __pfx_kthread+0x10/0x10
[ 70.523051][ T113] ret_from_fork_asm+0x1a/0x30
[ 70.527823][ T113]
[ 70.530868][ T113] ------------[ cut here ]------------
[ 70.536323][ T113] UBSAN: array-index-out-of-bounds in kernel/locking/qspinlock.c:131:9
[ 70.544552][ T113] index 8975 is out of range for type 'unsigned long[8]'
[ 70.551569][ T113] CPU: 1 UID: 0 PID: 113 Comm: jfsCommit Not tainted 6.11.0-syzkaller-04744-gbdf56c7580d2 #0
[ 70.561719][ T113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[ 70.571790][ T113] Call Trace:
[ 70.575067][ T113]
[ 70.577996][ T113] dump_stack_lvl+0x241/0x360
[ 70.582680][ T113] ? __pfx_dump_stack_lvl+0x10/0x10
[ 70.587899][ T113] ? __pfx__printk+0x10/0x10
[ 70.592528][ T113] ? is_bpf_text_address+0x26/0x2a0
[ 70.597745][ T113] __ubsan_handle_out_of_bounds+0x121/0x150
[ 70.603639][ T113] ? rcu_is_watching+0x15/0xb0
[ 70.608428][ T113] __pv_queued_spin_lock_slowpath+0xd54/0xdb0
[ 70.614524][ T113] ? ret_from_fork_asm+0x1a/0x30
[ 70.619474][ T113] ? __printk_cpu_sync_put+0x67/0x80
[ 70.624850][ T113] ? __pfx___pv_queued_spin_lock_slowpath+0x10/0x10
[ 70.631452][ T113] queued_spin_lock_slowpath+0x42/0x50
[ 70.636930][ T113] do_raw_spin_lock+0x272/0x370
[ 70.641808][ T113] ? __pfx_do_raw_spin_lock+0x10/0x10
[ 70.647199][ T113] _raw_spin_lock_irqsave+0xe1/0x120
[ 70.652499][ T113] ? __pfx__raw_spin_lock_irqsave+0x10/0x10
[ 70.658408][ T113] __wake_up_common_lock+0x25/0x1e0
[ 70.663617][ T113] release_metapage+0xb2/0x960
[ 70.668380][ T113] ? txFreeMap+0xa9c/0xd50
[ 70.672799][ T113] ? __mark_inode_dirty+0x3db/0xe90
[ 70.678024][ T113] xtTruncate+0x1006/0x3270
[ 70.682540][ T113] ? __pfx_xtTruncate+0x10/0x10
[ 70.687441][ T113] jfs_free_zero_link+0x46e/0x6e0
[ 70.692577][ T113] ? inode_wait_for_writeback+0x111/0x2a0
[ 70.698312][ T113] ? __pfx_jfs_free_zero_link+0x10/0x10
[ 70.703929][ T113] jfs_evict_inode+0x35f/0x440
[ 70.708733][ T113] ? __pfx_jfs_evict_inode+0x10/0x10
[ 70.714050][ T113] evict+0x4e8/0x9b0
[ 70.717961][ T113] ? __pfx_evict+0x10/0x10
[ 70.722388][ T113] ? iput+0x713/0xa50
[ 70.726375][ T113] txUpdateMap+0x931/0xb10
[ 70.730901][ T113] ? __pfx_txUpdateMap+0x10/0x10
[ 70.735846][ T113] ? __wake_up_common_lock+0x18c/0x1e0
[ 70.741311][ T113] jfs_lazycommit+0x49a/0xb80
[ 70.745989][ T113] ? _raw_spin_unlock_irqrestore+0x8f/0x140
[ 70.751885][ T113] ? lockdep_hardirqs_on+0x99/0x150
[ 70.757093][ T113] ? __pfx_jfs_lazycommit+0x10/0x10
[ 70.762294][ T113] ? __pfx_default_wake_function+0x10/0x10
[ 70.768103][ T113] ? __kthread_parkme+0x169/0x1d0
[ 70.773131][ T113] ? __pfx_jfs_lazycommit+0x10/0x10
[ 70.778332][ T113] kthread+0x2f0/0x390
[ 70.782398][ T113] ? __pfx_jfs_lazycommit+0x10/0x10
[ 70.787597][ T113] ? __pfx_kthread+0x10/0x10
[ 70.792184][ T113] ret_from_fork+0x4b/0x80
[ 70.796609][ T113] ? __pfx_kthread+0x10/0x10
[ 70.801395][ T113] ret_from_fork_asm+0x1a/0x30
[ 70.806191][ T113]
[ 70.809208][ T113] ---[ end trace ]---
[ 70.813175][ T113] Kernel panic - not syncing: UBSAN: panic_on_warn set ...
[ 70.820366][ T113] CPU: 1 UID: 0 PID: 113 Comm: jfsCommit Not tainted 6.11.0-syzkaller-04744-gbdf56c7580d2 #0
[ 70.830567][ T113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[ 70.840677][ T113] Call Trace:
[ 70.843960][ T113]
[ 70.846890][ T113] dump_stack_lvl+0x241/0x360
[ 70.851576][ T113] ? __pfx_dump_stack_lvl+0x10/0x10
[ 70.856789][ T113] ? __pfx__printk+0x10/0x10
[ 70.861386][ T113] ? vscnprintf+0x5d/0x90
[ 70.865717][ T113] panic+0x349/0x870
[ 70.869636][ T113] ? check_panic_on_warn+0x21/0xb0
[ 70.874802][ T113] ? __pfx_panic+0x10/0x10
[ 70.879239][ T113] ? _printk+0xd5/0x120
[ 70.883494][ T113] ? __pfx__printk+0x10/0x10
[ 70.888090][ T113] ? is_bpf_text_address+0x26/0x2a0
[ 70.893288][ T113] check_panic_on_warn+0x86/0xb0
[ 70.898228][ T113] __ubsan_handle_out_of_bounds+0x141/0x150
[ 70.904125][ T113] ? rcu_is_watching+0x15/0xb0
[ 70.908892][ T113] __pv_queued_spin_lock_slowpath+0xd54/0xdb0
[ 70.914969][ T113] ? ret_from_fork_asm+0x1a/0x30
[ 70.919915][ T113] ? __printk_cpu_sync_put+0x67/0x80
[ 70.925395][ T113] ? __pfx___pv_queued_spin_lock_slowpath+0x10/0x10
[ 70.931991][ T113] queued_spin_lock_slowpath+0x42/0x50
[ 70.937452][ T113] do_raw_spin_lock+0x272/0x370
[ 70.942306][ T113] ? __pfx_do_raw_spin_lock+0x10/0x10
[ 70.947678][ T113] _raw_spin_lock_irqsave+0xe1/0x120
[ 70.952959][ T113] ? __pfx__raw_spin_lock_irqsave+0x10/0x10
[ 70.958876][ T113] __wake_up_common_lock+0x25/0x1e0
[ 70.964082][ T113] release_metapage+0xb2/0x960
[ 70.968844][ T113] ? txFreeMap+0xa9c/0xd50
[ 70.973263][ T113] ? __mark_inode_dirty+0x3db/0xe90
[ 70.978466][ T113] xtTruncate+0x1006/0x3270
[ 70.982978][ T113] ? __pfx_xtTruncate+0x10/0x10
[ 70.987837][ T113] jfs_free_zero_link+0x46e/0x6e0
[ 70.992878][ T113] ? inode_wait_for_writeback+0x111/0x2a0
[ 70.998604][ T113] ? __pfx_jfs_free_zero_link+0x10/0x10
[ 71.004151][ T113] jfs_evict_inode+0x35f/0x440
[ 71.008937][ T113] ? __pfx_jfs_evict_inode+0x10/0x10
[ 71.014230][ T113] evict+0x4e8/0x9b0
[ 71.018152][ T113] ? __pfx_evict+0x10/0x10
[ 71.022665][ T113] ? iput+0x713/0xa50
[ 71.026660][ T113] txUpdateMap+0x931/0xb10
[ 71.031081][ T113] ? __pfx_txUpdateMap+0x10/0x10
[ 71.036019][ T113] ? __wake_up_common_lock+0x18c/0x1e0
[ 71.041494][ T113] jfs_lazycommit+0x49a/0xb80
[ 71.046172][ T113] ? _raw_spin_unlock_irqrestore+0x8f/0x140
[ 71.052068][ T113] ? lockdep_hardirqs_on+0x99/0x150
[ 71.057358][ T113] ? __pfx_jfs_lazycommit+0x10/0x10
[ 71.062562][ T113] ? __pfx_default_wake_function+0x10/0x10
[ 71.068375][ T113] ? __kthread_parkme+0x169/0x1d0
[ 71.073405][ T113] ? __pfx_jfs_lazycommit+0x10/0x10
[ 71.078610][ T113] kthread+0x2f0/0x390
[ 71.082699][ T113] ? __pfx_jfs_lazycommit+0x10/0x10
[ 71.087906][ T113] ? __pfx_kthread+0x10/0x10
[ 71.092494][ T113] ret_from_fork+0x4b/0x80
[ 71.096932][ T113] ? __pfx_kthread+0x10/0x10
[ 71.101611][ T113] ret_from_fork_asm+0x1a/0x30
[ 71.106390][ T113]
[ 71.109823][ T113] Kernel Offset: disabled
[ 71.114186][ T113] Rebooting in 86400 seconds..