./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor4033337738

<...>
Warning: Permanently added '10.128.0.119' (ED25519) to the list of known hosts.
execve("./syz-executor4033337738", ["./syz-executor4033337738"], 0x7ffef5c305a0 /* 10 vars */) = 0
brk(NULL)                               = 0x5555937e8000
brk(0x5555937e8d00)                     = 0x5555937e8d00
arch_prctl(ARCH_SET_FS, 0x5555937e8380) = 0
set_tid_address(0x5555937e8650)         = 5072
set_robust_list(0x5555937e8660, 24)     = 0
rseq(0x5555937e8ca0, 0x20, 0, 0x53053053) = 0
prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0
readlink("/proc/self/exe", "/root/syz-executor4033337738", 4096) = 28
getrandom("\x16\x08\x37\x16\xa0\xb6\x61\xe1", 8, GRND_NONBLOCK) = 8
brk(NULL)                               = 0x5555937e8d00
brk(0x555593809d00)                     = 0x555593809d00
brk(0x55559380a000)                     = 0x55559380a000
mprotect(0x7f2d594b3000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5073 attached
, child_tidptr=0x5555937e8650) = 5073
[pid  5073] set_robust_list(0x5555937e8660, 24) = 0
[pid  5073] mkdir("./syzkaller.y1xDoM", 0700 <unfinished ...>
[pid  5072] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...>
[pid  5073] <... mkdir resumed>)        = 0
[pid  5073] chmod("./syzkaller.y1xDoM", 0777) = 0
[pid  5073] chdir("./syzkaller.y1xDoM"./strace-static-x86_64: Process 5074 attached
) = 0
[pid  5073] mkdir("./0", 0777 <unfinished ...>
[pid  5072] <... clone resumed>, child_tidptr=0x5555937e8650) = 5074
[pid  5074] set_robust_list(0x5555937e8660, 24 <unfinished ...>
[pid  5072] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...>
[pid  5074] <... set_robust_list resumed>) = 0
[pid  5073] <... mkdir resumed>)        = 0
[pid  5073] openat(AT_FDCWD, "/dev/loop0", O_RDWR <unfinished ...>
[pid  5074] mkdir("./syzkaller.jJp5Qd", 0700 <unfinished ...>
[pid  5073] <... openat resumed>)       = 3
[pid  5073] ioctl(3, LOOP_CLR_FD./strace-static-x86_64: Process 5075 attached
 <unfinished ...>
[pid  5074] <... mkdir resumed>)        = 0
[pid  5072] <... clone resumed>, child_tidptr=0x5555937e8650) = 5075
[pid  5073] <... ioctl resumed>)        = -1 ENXIO (No such device or address)
[pid  5072] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...>
[pid  5075] set_robust_list(0x5555937e8660, 24 <unfinished ...>
[pid  5074] chmod("./syzkaller.jJp5Qd", 0777 <unfinished ...>
[pid  5073] close(3)                    = 0
[pid  5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5076 attached
 <unfinished ...>
[pid  5072] <... clone resumed>, child_tidptr=0x5555937e8650) = 5076
[pid  5072] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...>
[pid  5076] set_robust_list(0x5555937e8660, 24) = 0
[pid  5076] mkdir("./syzkaller.JgDfn2", 0700) = 0
[pid  5074] <... chmod resumed>)        = 0
[pid  5075] <... set_robust_list resumed>) = 0
[pid  5072] <... clone resumed>, child_tidptr=0x5555937e8650) = 5078
[pid  5072] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5078 attached
 <unfinished ...>
[pid  5076] chmod("./syzkaller.JgDfn2", 0777 <unfinished ...>
[pid  5075] mkdir("./syzkaller.INQftN", 0700 <unfinished ...>
[pid  5074] chdir("./syzkaller.jJp5Qd" <unfinished ...>
[pid  5078] set_robust_list(0x5555937e8660, 24 <unfinished ...>
[pid  5076] <... chmod resumed>)        = 0
[pid  5074] <... chdir resumed>)        = 0
[pid  5078] <... set_robust_list resumed>) = 0
[pid  5073] <... clone resumed>, child_tidptr=0x5555937e8650) = 5077
[pid  5078] mkdir("./syzkaller.seosvE", 0700 <unfinished ...>
[pid  5075] <... mkdir resumed>)        = 0
[pid  5076] chdir("./syzkaller.JgDfn2"./strace-static-x86_64: Process 5077 attached
) = 0
[pid  5074] mkdir("./0", 0777 <unfinished ...>
[pid  5076] mkdir("./0", 0777 <unfinished ...>
[pid  5077] set_robust_list(0x5555937e8660, 24 <unfinished ...>
[pid  5078] <... mkdir resumed>)        = 0
[pid  5074] <... mkdir resumed>)        = 0
./strace-static-x86_64: Process 5079 attached
[pid  5076] <... mkdir resumed>)        = 0
[pid  5072] <... clone resumed>, child_tidptr=0x5555937e8650) = 5079
[pid  5079] set_robust_list(0x5555937e8660, 24 <unfinished ...>
[pid  5077] <... set_robust_list resumed>) = 0
[pid  5078] chmod("./syzkaller.seosvE", 0777 <unfinished ...>
[pid  5076] openat(AT_FDCWD, "/dev/loop3", O_RDWR <unfinished ...>
[pid  5075] chmod("./syzkaller.INQftN", 0777 <unfinished ...>
[pid  5074] openat(AT_FDCWD, "/dev/loop1", O_RDWR <unfinished ...>
[pid  5079] <... set_robust_list resumed>) = 0
[pid  5077] chdir("./0" <unfinished ...>
[pid  5078] <... chmod resumed>)        = 0
[pid  5074] <... openat resumed>)       = 3
[pid  5077] <... chdir resumed>)        = 0
[pid  5075] <... chmod resumed>)        = 0
[pid  5079] mkdir("./syzkaller.VT8WqD", 0700 <unfinished ...>
[pid  5077] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5077] setpgid(0, 0 <unfinished ...>
[pid  5078] chdir("./syzkaller.seosvE" <unfinished ...>
[pid  5075] chdir("./syzkaller.INQftN" <unfinished ...>
[pid  5077] <... setpgid resumed>)      = 0
[pid  5078] <... chdir resumed>)        = 0
[pid  5077] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC <unfinished ...>
[pid  5076] <... openat resumed>)       = 3
[pid  5079] <... mkdir resumed>)        = 0
[pid  5077] <... openat resumed>)       = 3
[pid  5078] mkdir("./0", 0777 <unfinished ...>
[pid  5076] ioctl(3, LOOP_CLR_FD <unfinished ...>
[pid  5075] <... chdir resumed>)        = 0
[pid  5074] ioctl(3, LOOP_CLR_FD)       = -1 ENXIO (No such device or address)
[pid  5075] mkdir("./0", 0777 <unfinished ...>
[pid  5077] write(3, "1000", 4 <unfinished ...>
[pid  5076] <... ioctl resumed>)        = -1 ENXIO (No such device or address)
[pid  5074] close(3 <unfinished ...>
[pid  5077] <... write resumed>)        = 4
[pid  5078] <... mkdir resumed>)        = 0
[pid  5077] close(3 <unfinished ...>
[pid  5074] <... close resumed>)        = 0
[pid  5079] chmod("./syzkaller.VT8WqD", 0777 <unfinished ...>
[pid  5077] <... close resumed>)        = 0
[pid  5078] openat(AT_FDCWD, "/dev/loop4", O_RDWR <unfinished ...>
[pid  5076] close(3 <unfinished ...>
[pid  5075] <... mkdir resumed>)        = 0
[pid  5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...>
[pid  5079] <... chmod resumed>)        = 0
[pid  5078] <... openat resumed>)       = 3
[pid  5076] <... close resumed>)        = 0
[pid  5079] chdir("./syzkaller.VT8WqD" <unfinished ...>
[pid  5077] symlink("/dev/binderfs", "./binderfs" <unfinished ...>
[pid  5078] ioctl(3, LOOP_CLR_FD <unfinished ...>
[pid  5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...>
[pid  5075] openat(AT_FDCWD, "/dev/loop2", O_RDWR <unfinished ...>
[pid  5079] <... chdir resumed>)        = 0
[pid  5079] mkdir("./0", 0777 <unfinished ...>
[pid  5077] <... symlink resumed>)      = 0
[pid  5075] <... openat resumed>)       = 3
[pid  5078] <... ioctl resumed>)        = -1 ENXIO (No such device or address)
[pid  5074] <... clone resumed>, child_tidptr=0x5555937e8650) = 5080
[pid  5079] <... mkdir resumed>)        = 0
[pid  5075] ioctl(3, LOOP_CLR_FD <unfinished ...>
[pid  5078] close(3 <unfinished ...>
[pid  5075] <... ioctl resumed>)        = -1 ENXIO (No such device or address)
./strace-static-x86_64: Process 5081 attached
[pid  5078] <... close resumed>)        = 0
[pid  5075] close(3./strace-static-x86_64: Process 5080 attached
 <unfinished ...>
[pid  5081] set_robust_list(0x5555937e8660, 24 <unfinished ...>
[pid  5079] openat(AT_FDCWD, "/dev/loop5", O_RDWR <unfinished ...>
[pid  5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...>
[pid  5076] <... clone resumed>, child_tidptr=0x5555937e8650) = 5081
[pid  5075] <... close resumed>)        = 0
[pid  5080] set_robust_list(0x5555937e8660, 24 <unfinished ...>
[pid  5077] memfd_create("syzkaller", 0 <unfinished ...>
[pid  5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...>
[pid  5081] <... set_robust_list resumed>) = 0
[pid  5080] <... set_robust_list resumed>) = 0
[pid  5080] chdir("./0")                = 0
[pid  5080] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5080] setpgid(0, 0 <unfinished ...>
[pid  5081] chdir("./0" <unfinished ...>
[pid  5080] <... setpgid resumed>)      = 0
[pid  5080] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC <unfinished ...>
[pid  5077] <... memfd_create resumed>) = 3
[pid  5080] <... openat resumed>)       = 3
./strace-static-x86_64: Process 5082 attached
./strace-static-x86_64: Process 5083 attached
[pid  5081] <... chdir resumed>)        = 0
[pid  5079] <... openat resumed>)       = 3
[pid  5077] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 <unfinished ...>
[pid  5081] prctl(PR_SET_PDEATHSIG, SIGKILL <unfinished ...>
[pid  5078] <... clone resumed>, child_tidptr=0x5555937e8650) = 5083
[pid  5081] <... prctl resumed>)        = 0
[pid  5080] write(3, "1000", 4 <unfinished ...>
[pid  5077] <... mmap resumed>)         = 0x7f2d50e00000
[pid  5081] setpgid(0, 0 <unfinished ...>
[pid  5075] <... clone resumed>, child_tidptr=0x5555937e8650) = 5082
[pid  5081] <... setpgid resumed>)      = 0
[pid  5080] <... write resumed>)        = 4
[pid  5079] ioctl(3, LOOP_CLR_FD <unfinished ...>
[pid  5080] close(3 <unfinished ...>
[pid  5081] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC <unfinished ...>
[pid  5083] set_robust_list(0x5555937e8660, 24 <unfinished ...>
[pid  5082] set_robust_list(0x5555937e8660, 24) = 0
[pid  5079] <... ioctl resumed>)        = -1 ENXIO (No such device or address)
[pid  5080] <... close resumed>)        = 0
[pid  5083] <... set_robust_list resumed>) = 0
[pid  5080] symlink("/dev/binderfs", "./binderfs" <unfinished ...>
[pid  5082] chdir("./0" <unfinished ...>
[pid  5083] chdir("./0" <unfinished ...>
[pid  5081] <... openat resumed>)       = 3
[pid  5080] <... symlink resumed>)      = 0
[pid  5079] close(3 <unfinished ...>
[pid  5083] <... chdir resumed>)        = 0
[pid  5079] <... close resumed>)        = 0
[pid  5082] <... chdir resumed>)        = 0
[pid  5082] prctl(PR_SET_PDEATHSIG, SIGKILL <unfinished ...>
[pid  5083] prctl(PR_SET_PDEATHSIG, SIGKILL <unfinished ...>
[pid  5081] write(3, "1000", 4 <unfinished ...>
[pid  5079] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...>
[pid  5082] <... prctl resumed>)        = 0
[pid  5083] <... prctl resumed>)        = 0
[pid  5081] <... write resumed>)        = 4
[pid  5083] setpgid(0, 0)               = 0
[pid  5080] memfd_create("syzkaller", 0 <unfinished ...>
[pid  5083] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5080] <... memfd_create resumed>) = 3
[pid  5080] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0./strace-static-x86_64: Process 5084 attached
 <unfinished ...>
[pid  5082] setpgid(0, 0 <unfinished ...>
[pid  5083] write(3, "1000", 4 <unfinished ...>
[pid  5081] close(3 <unfinished ...>
[pid  5082] <... setpgid resumed>)      = 0
[pid  5081] <... close resumed>)        = 0
[pid  5084] set_robust_list(0x5555937e8660, 24 <unfinished ...>
[pid  5082] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC <unfinished ...>
[pid  5083] <... write resumed>)        = 4
[pid  5081] symlink("/dev/binderfs", "./binderfs" <unfinished ...>
[pid  5080] <... mmap resumed>)         = 0x7f2d50e00000
[pid  5079] <... clone resumed>, child_tidptr=0x5555937e8650) = 5084
[pid  5084] <... set_robust_list resumed>) = 0
[pid  5082] <... openat resumed>)       = 3
[pid  5083] close(3 <unfinished ...>
[pid  5081] <... symlink resumed>)      = 0
[pid  5083] <... close resumed>)        = 0
[pid  5082] write(3, "1000", 4)         = 4
[pid  5082] close(3 <unfinished ...>
[pid  5084] chdir("./0" <unfinished ...>
[pid  5082] <... close resumed>)        = 0
[pid  5083] symlink("/dev/binderfs", "./binderfs" <unfinished ...>
[pid  5081] memfd_create("syzkaller", 0 <unfinished ...>
[pid  5082] symlink("/dev/binderfs", "./binderfs" <unfinished ...>
[pid  5083] <... symlink resumed>)      = 0
[pid  5084] <... chdir resumed>)        = 0
[pid  5081] <... memfd_create resumed>) = 3
[pid  5081] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 <unfinished ...>
[pid  5084] prctl(PR_SET_PDEATHSIG, SIGKILL <unfinished ...>
[pid  5081] <... mmap resumed>)         = 0x7f2d50e00000
[pid  5084] <... prctl resumed>)        = 0
[pid  5084] setpgid(0, 0 <unfinished ...>
[pid  5082] <... symlink resumed>)      = 0
[pid  5084] <... setpgid resumed>)      = 0
[pid  5084] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC <unfinished ...>
[pid  5082] memfd_create("syzkaller", 0 <unfinished ...>
[pid  5084] <... openat resumed>)       = 3
[pid  5083] memfd_create("syzkaller", 0 <unfinished ...>
[pid  5082] <... memfd_create resumed>) = 3
[pid  5083] <... memfd_create resumed>) = 3
[pid  5084] write(3, "1000", 4 <unfinished ...>
[pid  5082] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 <unfinished ...>
[pid  5083] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 <unfinished ...>
[pid  5084] <... write resumed>)        = 4
[pid  5084] close(3)                    = 0
[pid  5084] symlink("/dev/binderfs", "./binderfs" <unfinished ...>
[pid  5083] <... mmap resumed>)         = 0x7f2d50e00000
[pid  5084] <... symlink resumed>)      = 0
[pid  5084] memfd_create("syzkaller", 0 <unfinished ...>
[pid  5082] <... mmap resumed>)         = 0x7f2d50e00000
[pid  5084] <... memfd_create resumed>) = 3
[pid  5084] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f2d50e00000
[pid  5077] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 <unfinished ...>
[pid  5083] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 <unfinished ...>
[pid  5081] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 <unfinished ...>
[pid  5080] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 <unfinished ...>
[pid  5084] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 <unfinished ...>
[pid  5082] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 <unfinished ...>
[pid  5083] <... write resumed>)        = 16777216
[pid  5083] munmap(0x7f2d50e00000, 138412032 <unfinished ...>
[pid  5084] <... write resumed>)        = 16777216
[pid  5084] munmap(0x7f2d50e00000, 138412032 <unfinished ...>
[pid  5083] <... munmap resumed>)       = 0
[pid  5081] <... write resumed>)        = 16777216
[pid  5083] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4
[pid  5081] munmap(0x7f2d50e00000, 138412032 <unfinished ...>
[pid  5083] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5083] close(3 <unfinished ...>
[pid  5081] <... munmap resumed>)       = 0
[pid  5084] <... munmap resumed>)       = 0
[pid  5083] <... close resumed>)        = 0
[  109.547426][ T5083] loop4: detected capacity change from 0 to 32768
[pid  5084] openat(AT_FDCWD, "/dev/loop5", O_RDWR <unfinished ...>
[pid  5083] close(4 <unfinished ...>
[pid  5077] <... write resumed>)        = 16777216
[pid  5084] <... openat resumed>)       = 4
[pid  5083] <... close resumed>)        = 0
[pid  5081] openat(AT_FDCWD, "/dev/loop3", O_RDWR <unfinished ...>
[pid  5083] mkdir("./file1", 0777 <unfinished ...>
[pid  5081] <... openat resumed>)       = 4
[pid  5077] munmap(0x7f2d50e00000, 138412032 <unfinished ...>
[pid  5083] <... mkdir resumed>)        = 0
[pid  5081] ioctl(4, LOOP_SET_FD, 3 <unfinished ...>
[pid  5083] mount("/dev/loop4", "./file1", "jfs", MS_NOSUID|MS_NOEXEC|MS_SYNCHRONOUS, "quota,grpquota,discard,integrity,iocharset=iso8859-14,nointegrity,errors=continue," <unfinished ...>
[pid  5084] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5081] <... ioctl resumed>)        = 0
[pid  5081] close(3 <unfinished ...>
[pid  5084] close(3 <unfinished ...>
[pid  5081] <... close resumed>)        = 0
[pid  5084] <... close resumed>)        = 0
[pid  5081] close(4 <unfinished ...>
[pid  5084] close(4 <unfinished ...>
[pid  5081] <... close resumed>)        = 0
[pid  5081] mkdir("./file1", 0777 <unfinished ...>
[pid  5084] <... close resumed>)        = 0
[  109.619908][ T5081] loop3: detected capacity change from 0 to 32768
[  109.633735][ T5084] loop5: detected capacity change from 0 to 32768
[pid  5084] mkdir("./file1", 0777 <unfinished ...>
[pid  5081] <... mkdir resumed>)        = 0
[pid  5077] <... munmap resumed>)       = 0
[pid  5084] <... mkdir resumed>)        = 0
[pid  5081] mount("/dev/loop3", "./file1", "jfs", MS_NOSUID|MS_NOEXEC|MS_SYNCHRONOUS, "quota,grpquota,discard,integrity,iocharset=iso8859-14,nointegrity,errors=continue," <unfinished ...>
[pid  5084] mount("/dev/loop5", "./file1", "jfs", MS_NOSUID|MS_NOEXEC|MS_SYNCHRONOUS, "quota,grpquota,discard,integrity,iocharset=iso8859-14,nointegrity,errors=continue," <unfinished ...>
[pid  5083] <... mount resumed>)        = 0
[pid  5083] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3
[pid  5077] openat(AT_FDCWD, "/dev/loop0", O_RDWR <unfinished ...>
[pid  5080] <... write resumed>)        = 16777216
[pid  5077] <... openat resumed>)       = 4
[pid  5077] ioctl(4, LOOP_SET_FD, 3 <unfinished ...>
[pid  5082] <... write resumed>)        = 16777216
[pid  5083] chdir("./file1" <unfinished ...>
[pid  5081] <... mount resumed>)        = 0
[pid  5084] <... mount resumed>)        = 0
[pid  5082] munmap(0x7f2d50e00000, 138412032 <unfinished ...>
[pid  5083] <... chdir resumed>)        = 0
[pid  5081] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY <unfinished ...>
[pid  5084] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY <unfinished ...>
[pid  5083] openat(AT_FDCWD, "/dev/loop4", O_RDWR <unfinished ...>
[pid  5084] <... openat resumed>)       = 3
[pid  5083] <... openat resumed>)       = -1 EBUSY (Device or resource busy)
[pid  5084] chdir("./file1" <unfinished ...>
[pid  5083] exit_group(0 <unfinished ...>
[pid  5081] <... openat resumed>)       = 3
[pid  5080] munmap(0x7f2d50e00000, 138412032 <unfinished ...>
[pid  5084] <... chdir resumed>)        = 0
[pid  5083] <... exit_group resumed>)   = ?
[pid  5081] chdir("./file1" <unfinished ...>
[pid  5084] openat(AT_FDCWD, "/dev/loop5", O_RDWR <unfinished ...>
[pid  5081] <... chdir resumed>)        = 0
[pid  5084] <... openat resumed>)       = -1 EBUSY (Device or resource busy)
[pid  5083] +++ exited with 0 +++
[pid  5081] openat(AT_FDCWD, "/dev/loop3", O_RDWR <unfinished ...>
[pid  5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5083, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=38 /* 0.38 s */} ---
[pid  5084] exit_group(0 <unfinished ...>
[pid  5081] <... openat resumed>)       = -1 EBUSY (Device or resource busy)
[pid  5084] <... exit_group resumed>)   = ?
[pid  5081] exit_group(0 <unfinished ...>
[pid  5078] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5078] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY <unfinished ...>
[pid  5081] <... exit_group resumed>)   = ?
[pid  5078] <... openat resumed>)       = 3
[pid  5078] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5078] getdents64(3, 0x5555937e96f0 /* 4 entries */, 32768) = 112
[pid  5078] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5077] <... ioctl resumed>)        = 0
[pid  5078] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid  5084] +++ exited with 0 +++
[pid  5077] close(3 <unfinished ...>
[pid  5078] newfstatat(AT_FDCWD, "./0/binderfs",  <unfinished ...>
[pid  5079] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5084, si_uid=0, si_status=0, si_utime=0, si_stime=45 /* 0.45 s */} ---
[pid  5077] <... close resumed>)        = 0
[pid  5078] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5077] close(4 <unfinished ...>
[pid  5078] unlink("./0/binderfs" <unfinished ...>
[pid  5081] +++ exited with 0 +++
[pid  5077] <... close resumed>)        = 0
[pid  5078] <... unlink resumed>)       = 0
[pid  5077] mkdir("./file1", 0777)      = 0
[pid  5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5081, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=40 /* 0.40 s */} ---
[pid  5079] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5078] umount2("./0/file1", MNT_DETACH|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5076] restart_syscall(<... resuming interrupted clone ...> <unfinished ...>
[pid  5079] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid  5077] mount("/dev/loop0", "./file1", "jfs", MS_NOSUID|MS_NOEXEC|MS_SYNCHRONOUS, "quota,grpquota,discard,integrity,iocharset=iso8859-14,nointegrity,errors=continue," <unfinished ...>
[pid  5076] <... restart_syscall resumed>) = 0
[  109.731280][ T5077] loop0: detected capacity change from 0 to 32768
[pid  5079] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
[pid  5079] newfstatat(3, "",  <unfinished ...>
[pid  5076] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5079] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5076] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid  5079] getdents64(3,  <unfinished ...>
[pid  5076] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY <unfinished ...>
[pid  5079] <... getdents64 resumed>0x5555937e96f0 /* 4 entries */, 32768) = 112
[pid  5076] <... openat resumed>)       = 3
[pid  5079] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5076] newfstatat(3, "",  <unfinished ...>
[pid  5079] newfstatat(AT_FDCWD, "./0/binderfs",  <unfinished ...>
[pid  5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5079] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5076] getdents64(3,  <unfinished ...>
[pid  5079] unlink("./0/binderfs" <unfinished ...>
[pid  5076] <... getdents64 resumed>0x5555937e96f0 /* 4 entries */, 32768) = 112
[pid  5079] <... unlink resumed>)       = 0
[pid  5076] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5079] umount2("./0/file1", MNT_DETACH|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5077] <... mount resumed>)        = 0
[pid  5076] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid  5077] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY <unfinished ...>
[pid  5076] newfstatat(AT_FDCWD, "./0/binderfs",  <unfinished ...>
[pid  5077] <... openat resumed>)       = 3
[pid  5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5077] chdir("./file1" <unfinished ...>
[pid  5076] unlink("./0/binderfs" <unfinished ...>
[pid  5080] <... munmap resumed>)       = 0
[pid  5077] <... chdir resumed>)        = 0
[pid  5076] <... unlink resumed>)       = 0
[pid  5077] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy)
[pid  5076] umount2("./0/file1", MNT_DETACH|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5077] exit_group(0)               = ?
[pid  5077] +++ exited with 0 +++
[pid  5073] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5077, si_uid=0, si_status=0, si_utime=0, si_stime=48 /* 0.48 s */} ---
[pid  5080] openat(AT_FDCWD, "/dev/loop1", O_RDWR <unfinished ...>
[pid  5073] restart_syscall(<... resuming interrupted clone ...>) = 0
[pid  5073] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5080] <... openat resumed>)       = 4
[pid  5073] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid  5073] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
[pid  5073] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5073] getdents64(3, 0x5555937e96f0 /* 4 entries */, 32768) = 112
[pid  5073] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5073] newfstatat(AT_FDCWD, "./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5073] unlink("./0/binderfs" <unfinished ...>
[pid  5080] ioctl(4, LOOP_SET_FD, 3 <unfinished ...>
[pid  5073] <... unlink resumed>)       = 0
[pid  5073] umount2("./0/file1", MNT_DETACH|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5082] <... munmap resumed>)       = 0
[pid  5082] openat(AT_FDCWD, "/dev/loop2", O_RDWR <unfinished ...>
[pid  5080] <... ioctl resumed>)        = 0
[pid  5082] <... openat resumed>)       = 4
[pid  5080] close(3 <unfinished ...>
[pid  5082] ioctl(4, LOOP_SET_FD, 3 <unfinished ...>
[pid  5080] <... close resumed>)        = 0
[pid  5080] close(4)                    = 0
[pid  5080] mkdir("./file1", 0777)      = 0
[  109.837857][ T5080] loop1: detected capacity change from 0 to 32768
[  109.841894][ T5079] general protection fault, probably for non-canonical address 0xdffffc0000000006: 0000 [#1] PREEMPT SMP KASAN NOPTI
[  109.856579][ T5079] KASAN: null-ptr-deref in range [0x0000000000000030-0x0000000000000037]
[  109.865027][ T5079] CPU: 0 PID: 5079 Comm: syz-executor403 Not tainted 6.8.0-syzkaller-08951-gfe46a7dd189e #0
[  109.872518][ T5082] loop2: detected capacity change from 0 to 32768
[pid  5080] mount("/dev/loop1", "./file1", "jfs", MS_NOSUID|MS_NOEXEC|MS_SYNCHRONOUS, "quota,grpquota,discard,integrity,iocharset=iso8859-14,nointegrity,errors=continue," <unfinished ...>
[pid  5082] <... ioctl resumed>)        = 0
[pid  5082] close(3)                    = 0
[pid  5082] close(4)                    = 0
[pid  5082] mkdir("./file1", 0777)      = 0
[  109.875115][ T5079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/29/2024
[  109.875138][ T5079] RIP: 0010:write_special_inodes+0xa9/0x170
[  109.875216][ T5079] Code: 2e e8 6b 04 ce 07 48 8d 7b 28 48 89 f8 48 c1 e8 03 80 3c 28 00 0f 85 b1 00 00 00 4c 8b 6b 28 49 8d 7d 30 48 89 f8 48 c1 e8 03 <80> 3c 28 00 0f 85 8e 00 00 00 49 8b 7d 30 2e e8 33 04 ce 07 48 8d
[  109.875256][ T5079] RSP: 0018:ffffc900041e7bb8 EFLAGS: 00010216
[  109.923327][ T5079] RAX: 0000000000000006 RBX: ffff88802d480000 RCX: ffffffff81bf2e0e
[  109.931424][ T5079] RDX: 0000000000000000 RSI: ffffffff81bf2dc1 RDI: 0000000000000030
[  109.939430][ T5079] RBP: dffffc0000000000 R08: 0000000000000005 R09: 0000000000000000
[  109.947436][ T5079] R10: 0000000000000000 R11: 0000000000000001 R12: ffffffff81bfefc0
[  109.955458][ T5079] R13: 0000000000000000 R14: ffff888022510800 R15: ffff88802df578c0
[  109.963465][ T5079] FS:  00005555937e8380(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000
[  109.972436][ T5079] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  109.979056][ T5079] CR2: 00005555937f16f8 CR3: 0000000078530000 CR4: 0000000000350ef0
[  109.987062][ T5079] Call Trace:
[  109.990373][ T5079]  <TASK>
[  109.993327][ T5079]  ? show_regs+0x8c/0xa0
[  109.997605][ T5079]  ? die_addr+0x4f/0xd0
[  110.001802][ T5079]  ? exc_general_protection+0x155/0x230
[  110.007416][ T5079]  ? asm_exc_general_protection+0x26/0x30
[  110.013232][ T5079]  ? __pfx_filemap_flush+0x10/0x10
[  110.018400][ T5079]  ? filemap_fdatawrite_wbc+0xce/0x1c0
[  110.023928][ T5079]  ? filemap_fdatawrite_wbc+0x81/0x1c0
[  110.029463][ T5079]  ? write_special_inodes+0xa9/0x170
[  110.034803][ T5079]  ? write_special_inodes+0x85/0x170
[  110.040142][ T5079]  lmLogSync+0x4a0/0x820
[  110.044441][ T5079]  ? __pfx_lmLogSync+0x10/0x10
[  110.049264][ T5079]  ? __pfx_dquot_writeback_dquots+0x10/0x10
[  110.055233][ T5079]  jfs_syncpt+0x89/0xa0
[  110.059445][ T5079]  jfs_sync_fs+0x83/0xb0
[  110.063751][ T5079]  ? __pfx_jfs_sync_fs+0x10/0x10
[  110.068757][ T5079]  sync_filesystem+0x110/0x290
[  110.073657][ T5079]  generic_shutdown_super+0x7e/0x3d0
[  110.079004][ T5079]  kill_block_super+0x3b/0x90
[  110.083737][ T5079]  deactivate_locked_super+0xc1/0x1a0
[  110.089186][ T5079]  deactivate_super+0xde/0x100
[  110.094017][ T5079]  cleanup_mnt+0x222/0x450
[  110.098486][ T5079]  task_work_run+0x151/0x250
[  110.103130][ T5079]  ? __pfx_task_work_run+0x10/0x10
[  110.108303][ T5079]  ptrace_notify+0x10e/0x130
[  110.112965][ T5079]  syscall_exit_to_user_mode_prepare+0x126/0x240
[  110.119369][ T5079]  syscall_exit_to_user_mode+0x11/0x2a0
[  110.124979][ T5079]  do_syscall_64+0xe2/0x260
[  110.129556][ T5079]  entry_SYSCALL_64_after_hwframe+0x6d/0x75
[  110.135511][ T5079] RIP: 0033:0x7f2d5943a4f7
[  110.139936][ T5079] Code: 07 00 48 83 c4 08 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8
[  110.159650][ T5079] RSP: 002b:00007ffff59dcac8 EFLAGS: 00000202 ORIG_RAX: 00000000000000a6
[  110.168079][ T5079] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f2d5943a4f7
[  110.176253][ T5079] RDX: 0000000000000000 RSI: 000000000000000a RDI: 00007ffff59dcb80
[  110.184233][ T5079] RBP: 00007ffff59dcb80 R08: 0000000000000000 R09: 0000000000000000
[  110.192218][ T5079] R10: 00000000ffffffff R11: 0000000000000202 R12: 00007ffff59ddbe0
[  110.200245][ T5079] R13: 00005555937e96c0 R14: 0000000000000001 R15: 431bde82d7b634db
[  110.208236][ T5079]  </TASK>
[  110.211270][ T5079] Modules linked in:
[  110.216683][ T5079] ---[ end trace 0000000000000000 ]---
[  110.222272][ T5079] RIP: 0010:write_special_inodes+0xa9/0x170
[  110.228256][ T5079] Code: 2e e8 6b 04 ce 07 48 8d 7b 28 48 89 f8 48 c1 e8 03 80 3c 28 00 0f 85 b1 00 00 00 4c 8b 6b 28 49 8d 7d 30 48 89 f8 48 c1 e8 03 <80> 3c 28 00 0f 85 8e 00 00 00 49 8b 7d 30 2e e8 33 04 ce 07 48 8d
[  110.248745][ T5079] RSP: 0018:ffffc900041e7bb8 EFLAGS: 00010216
[  110.257504][ T5079] RAX: 0000000000000006 RBX: ffff88802d480000 RCX: ffffffff81bf2e0e
[  110.265753][ T5079] RDX: 0000000000000000 RSI: ffffffff81bf2dc1 RDI: 0000000000000030
[  110.273760][ T5079] RBP: dffffc0000000000 R08: 0000000000000005 R09: 0000000000000000
[  110.281811][ T5079] R10: 0000000000000000 R11: 0000000000000001 R12: ffffffff81bfefc0
[  110.289869][ T5079] R13: 0000000000000000 R14: ffff888022510800 R15: ffff88802df578c0
[  110.297906][ T5079] FS:  00005555937e8380(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000
[  110.306910][ T5079] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  110.313543][ T5079] CR2: 000055b6b7c95ff0 CR3: 0000000078530000 CR4: 0000000000350ef0
[  110.321652][ T5079] Kernel panic - not syncing: Fatal exception
[  110.327986][ T5079] Kernel Offset: disabled
[  110.332330][ T5079] Rebooting in 86400 seconds..