./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor90990748

<...>
DUID 00:04:e3:38:52:80:67:3f:e9:c9:a2:47:22:a3:59:23:7d:1e
forked to background, child pid 4661
[   29.666514][ T4662] 8021q: adding VLAN 0 to HW filter on device bond0
[   29.678063][ T4662] eql: remember to turn off Van-Jacobson compression on your slave devices
Starting sshd: OK

syzkaller
Warning: Permanently added '10.128.0.60' (ECDSA) to the list of known hosts.
execve("./syz-executor90990748", ["./syz-executor90990748"], 0x7fffc5755810 /* 10 vars */) = 0
brk(NULL)                               = 0x555555e63000
brk(0x555555e63c40)                     = 0x555555e63c40
arch_prctl(ARCH_SET_FS, 0x555555e63300) = 0
uname({sysname="Linux", nodename="syzkaller", ...}) = 0
readlink("/proc/self/exe", "/root/syz-executor90990748", 4096) = 26
brk(0x555555e84c40)                     = 0x555555e84c40
brk(0x555555e85000)                     = 0x555555e85000
mprotect(0x7f0f6b177000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
getpid()                                = 4992
mkdir("./syzkaller.157JbF", 0700)       = 0
chmod("./syzkaller.157JbF", 0777)       = 0
chdir("./syzkaller.157JbF")             = 0
mkdir("./0", 0777)                      = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e635d0) = 4993
./strace-static-x86_64: Process 4993 attached
[pid  4993] chdir("./0")                = 0
[pid  4993] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  4993] setpgid(0, 0)               = 0
[pid  4993] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  4993] write(3, "1000", 4)         = 4
[pid  4993] close(3)                    = 0
[pid  4993] symlink("/dev/binderfs", "./binderfs") = 0
[pid  4993] memfd_create("syzkaller", 0) = 3
[pid  4993] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0f62cb9000
[pid  4993] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  4993] munmap(0x7f0f62cb9000, 4194304) = 0
[pid  4993] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
syzkaller login: [   54.616563][ T4993] memfd_create() without MFD_EXEC nor MFD_NOEXEC_SEAL, pid=4993 'syz-executor909'
[pid  4993] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  4993] close(3)                    = 0
[pid  4993] mkdir("./file0", 0777)      = 0
[   54.671291][ T4993] loop0: detected capacity change from 0 to 8192
[   54.682491][ T4993] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   54.695998][ T4993] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[   54.705612][ T4993] REISERFS (device loop0): using ordered data mode
[   54.712124][ T4993] reiserfs: using flush barriers
[   54.719032][ T4993] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   54.735775][ T4993] REISERFS (device loop0): checking transaction log (loop0)
[pid  4993] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC, "") = 0
[pid  4993] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  4993] chdir("./file0")            = 0
[pid  4993] ioctl(4, LOOP_CLR_FD)       = 0
[pid  4993] close(4)                    = 0
[pid  4993] open(NULL, O_RDWR|O_CREAT|O_NOCTTY|O_NONBLOCK|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = -1 EFAULT (Bad address)
[   54.783142][ T4993] REISERFS (device loop0): Using r5 hash to sort names
[   54.790456][ T4993] REISERFS (device loop0): using 3.5.x disk format
[   54.798641][ T4993] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[pid  4993] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 4
[pid  4993] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000) = 5
[pid  4993] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<<MAP_HUGE_SHIFT, 5, 0) = 0x20000000
[pid  4993] ftruncate(4, 33587199)      = 0
[pid  4993] ioctl(-1, BTRFS_IOC_SUBVOL_SETFLAGS, 0) = -1 EBADF (Bad file descriptor)
[pid  4993] memfd_create("syzkaller", 0) = 6
[pid  4993] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0f5acb9000
[   54.828846][   T27] audit: type=1800 audit(1686673022.474:2): pid=4993 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor909" name="bus" dev="loop0" ino=2 res=0 errno=0
[   54.856251][   T27] audit: type=1800 audit(1686673022.474:3): pid=4993 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor909" name="bus" dev="loop0" ino=2 res=0 errno=0
[pid  4993] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  4993] munmap(0x7f0f5acb9000, 4194304) = 0
[pid  4993] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 7
[pid  4993] ioctl(7, LOOP_SET_FD, 6)    = -1 EBUSY (Device or resource busy)
[pid  4993] ioctl(7, LOOP_CLR_FD)       = 0
[pid  4993] ioctl(7, LOOP_SET_FD, 6)    = -1 EBUSY (Device or resource busy)
[pid  4993] close(7)                    = 0
[   54.876201][   T27] audit: type=1800 audit(1686673022.474:4): pid=4993 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor909" name="bus" dev="loop0" ino=2 res=0 errno=0
[pid  4993] close(6)                    = 0
[pid  4993] mkdir(".", 0777)            = -1 EEXIST (File exists)
[pid  4993] mount(NULL, ".", 0x200000c0, MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_SILENT|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\xee\xa7\x3c\x3c\xa0\x47\x34\x9a\xb6\x6d\x52\x9f\xb1\xe2\xbd\xc6\x18\x75\xc6\xcc\xeb\xea\x30\xba\x1b\x89\x77\x2f\x99\x5e\xa3\xe0\xed\x04\xf9\x86\xb6\x8e\xe6") = -1 EINVAL (Invalid argument)
[   54.954776][ T4993] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "ÿÿÿÿÿÿÿÿî§<< G4š¶mRŸ±â½ÆuÆÌëê0º‰w/™^£àíù†¶Žæ"
[pid  4993] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 6
[pid  4993] ioctl(6, FS_IOC_GETVERSION, 0x20000000) = 0
[pid  4993] exit_group(0)               = ?
[pid  4993] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4993, si_uid=0, si_status=0, si_utime=0, si_stime=59 /* 0.59 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555e64620 /* 4 entries */, 32768) = 112
umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./0/binderfs")                  = 0
[   55.341700][ T4993] syz-executor909 (4993) used greatest stack depth: 19008 bytes left
umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./0/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555e6c660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555e6c660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./0/file0")                      = 0
getdents64(3, 0x555555e64620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./0")                            = 0
mkdir("./1", 0777)                      = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e635d0) = 4996
./strace-static-x86_64: Process 4996 attached
[pid  4996] chdir("./1")                = 0
[pid  4996] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  4996] setpgid(0, 0)               = 0
[pid  4996] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  4996] write(3, "1000", 4)         = 4
[pid  4996] close(3)                    = 0
[pid  4996] symlink("/dev/binderfs", "./binderfs") = 0
[pid  4996] memfd_create("syzkaller", 0) = 3
[pid  4996] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0f62cb9000
[pid  4996] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  4996] munmap(0x7f0f62cb9000, 4194304) = 0
[pid  4996] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  4996] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  4996] close(3)                    = 0
[pid  4996] mkdir("./file0", 0777)      = 0
[   55.517387][ T4996] loop0: detected capacity change from 0 to 8192
[   55.527852][ T4996] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   55.541109][ T4996] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[   55.550763][ T4996] REISERFS (device loop0): using ordered data mode
[   55.557890][ T4996] reiserfs: using flush barriers
[   55.563738][ T4996] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   55.580536][ T4996] REISERFS (device loop0): checking transaction log (loop0)
[pid  4996] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC, "") = 0
[pid  4996] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  4996] chdir("./file0")            = 0
[pid  4996] ioctl(4, LOOP_CLR_FD)       = 0
[pid  4996] close(4)                    = 0
[pid  4996] open(NULL, O_RDWR|O_CREAT|O_NOCTTY|O_NONBLOCK|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = -1 EFAULT (Bad address)
[   55.629041][ T4996] REISERFS (device loop0): Using r5 hash to sort names
[   55.636191][ T4996] REISERFS (device loop0): using 3.5.x disk format
[   55.643404][ T4996] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[pid  4996] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 4
[pid  4996] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000) = 5
[pid  4996] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<<MAP_HUGE_SHIFT, 5, 0) = 0x20000000
[pid  4996] ftruncate(4, 33587199)      = 0
[pid  4996] ioctl(-1, BTRFS_IOC_SUBVOL_SETFLAGS, 0) = -1 EBADF (Bad file descriptor)
[pid  4996] memfd_create("syzkaller", 0) = 6
[   55.674385][   T27] audit: type=1800 audit(1686673023.324:5): pid=4996 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor909" name="bus" dev="loop0" ino=2 res=0 errno=0
[   55.696476][   T27] audit: type=1800 audit(1686673023.344:6): pid=4996 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor909" name="bus" dev="loop0" ino=2 res=0 errno=0
[pid  4996] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0f5acb9000
[pid  4996] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  4996] munmap(0x7f0f5acb9000, 4194304) = 0
[pid  4996] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 7
[pid  4996] ioctl(7, LOOP_SET_FD, 6)    = -1 EBUSY (Device or resource busy)
[pid  4996] ioctl(7, LOOP_CLR_FD)       = 0
[pid  4996] ioctl(7, LOOP_SET_FD, 6)    = -1 EBUSY (Device or resource busy)
[pid  4996] close(7)                    = 0
[   55.717204][   T27] audit: type=1800 audit(1686673023.344:7): pid=4996 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor909" name="bus" dev="loop0" ino=2 res=0 errno=0
[pid  4996] close(6)                    = 0
[pid  4996] mkdir(".", 0777)            = -1 EEXIST (File exists)
[pid  4996] mount(NULL, ".", 0x200000c0, MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_SILENT|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\xee\xa7\x3c\x3c\xa0\x47\x34\x9a\xb6\x6d\x52\x9f\xb1\xe2\xbd\xc6\x18\x75\xc6\xcc\xeb\xea\x30\xba\x1b\x89\x77\x2f\x99\x5e\xa3\xe0\xed\x04\xf9\x86\xb6\x8e\xe6") = -1 EINVAL (Invalid argument)
[   55.794605][ T4996] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "ÿÿÿÿÿÿÿÿî§<< G4š¶mRŸ±â½ÆuÆÌëê0º‰w/™^£àíù†¶Žæ"
[pid  4996] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 6
[pid  4996] ioctl(6, FS_IOC_GETVERSION, 0x20000000) = 0
[pid  4996] exit_group(0)               = ?
[pid  4996] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4996, si_uid=0, si_status=0, si_utime=0, si_stime=51 /* 0.51 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555e64620 /* 4 entries */, 32768) = 112
umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./1/binderfs")                  = 0
[   56.164315][ T4996] syz-executor909 (4996) used greatest stack depth: 18904 bytes left
umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./1/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555e6c660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555e6c660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./1/file0")                      = 0
getdents64(3, 0x555555e64620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./1")                            = 0
mkdir("./2", 0777)                      = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e635d0) = 4998
./strace-static-x86_64: Process 4998 attached
[pid  4998] chdir("./2")                = 0
[pid  4998] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  4998] setpgid(0, 0)               = 0
[pid  4998] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  4998] write(3, "1000", 4)         = 4
[pid  4998] close(3)                    = 0
[pid  4998] symlink("/dev/binderfs", "./binderfs") = 0
[pid  4998] memfd_create("syzkaller", 0) = 3
[pid  4998] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0f62cb9000
[pid  4998] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  4998] munmap(0x7f0f62cb9000, 4194304) = 0
[pid  4998] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  4998] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  4998] close(3)                    = 0
[pid  4998] mkdir("./file0", 0777)      = 0
[   56.362126][ T4998] loop0: detected capacity change from 0 to 8192
[   56.371910][ T4998] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   56.384956][ T4998] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[   56.394204][ T4998] REISERFS (device loop0): using ordered data mode
[   56.400796][ T4998] reiserfs: using flush barriers
[   56.406515][ T4998] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   56.422963][ T4998] REISERFS (device loop0): checking transaction log (loop0)
[pid  4998] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC, "") = 0
[pid  4998] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  4998] chdir("./file0")            = 0
[pid  4998] ioctl(4, LOOP_CLR_FD)       = 0
[pid  4998] close(4)                    = 0
[pid  4998] open(NULL, O_RDWR|O_CREAT|O_NOCTTY|O_NONBLOCK|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = -1 EFAULT (Bad address)
[pid  4998] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 4
[pid  4998] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000) = 5
[pid  4998] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<<MAP_HUGE_SHIFT, 5, 0) = 0x20000000
[   56.464565][ T4998] REISERFS (device loop0): Using r5 hash to sort names
[   56.471442][ T4998] REISERFS (device loop0): using 3.5.x disk format
[   56.478491][ T4998] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[   56.491090][   T27] audit: type=1800 audit(1686673024.144:8): pid=4998 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor909" name="bus" dev="loop0" ino=2 res=0 errno=0
[pid  4998] ftruncate(4, 33587199)      = 0
[pid  4998] ioctl(-1, BTRFS_IOC_SUBVOL_SETFLAGS, 0) = -1 EBADF (Bad file descriptor)
[pid  4998] memfd_create("syzkaller", 0) = 6
[pid  4998] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0f5acb9000
[pid  4998] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  4998] munmap(0x7f0f5acb9000, 4194304) = 0
[pid  4998] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 7
[pid  4998] ioctl(7, LOOP_SET_FD, 6)    = -1 EBUSY (Device or resource busy)
[pid  4998] ioctl(7, LOOP_CLR_FD)       = 0
[pid  4998] ioctl(7, LOOP_SET_FD, 6)    = -1 EBUSY (Device or resource busy)
[pid  4998] close(7)                    = 0
[   56.514279][   T27] audit: type=1800 audit(1686673024.164:9): pid=4998 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor909" name="bus" dev="loop0" ino=2 res=0 errno=0
[   56.534386][   T27] audit: type=1800 audit(1686673024.164:10): pid=4998 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor909" name="bus" dev="loop0" ino=2 res=0 errno=0
[pid  4998] close(6)                    = 0
[pid  4998] mkdir(".", 0777)            = -1 EEXIST (File exists)
[pid  4998] mount(NULL, ".", 0x200000c0, MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_SILENT|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\xee\xa7\x3c\x3c\xa0\x47\x34\x9a\xb6\x6d\x52\x9f\xb1\xe2\xbd\xc6\x18\x75\xc6\xcc\xeb\xea\x30\xba\x1b\x89\x77\x2f\x99\x5e\xa3\xe0\xed\x04\xf9\x86\xb6\x8e\xe6") = -1 EINVAL (Invalid argument)
[   56.607897][ T4998] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "ÿÿÿÿÿÿÿÿî§<< G4š¶mRŸ±â½ÆuÆÌëê0º‰w/™^£àíù†¶Žæ"
[pid  4998] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 6
[pid  4998] ioctl(6, FS_IOC_GETVERSION, 0x20000000) = 0
[pid  4998] exit_group(0)               = ?
[pid  4998] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4998, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=52 /* 0.52 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555e64620 /* 4 entries */, 32768) = 112
umount2("./2/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./2/binderfs")                  = 0
umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./2/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./2/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555e6c660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555e6c660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./2/file0")                      = 0
getdents64(3, 0x555555e64620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./2")                            = 0
mkdir("./3", 0777)                      = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e635d0) = 5000
./strace-static-x86_64: Process 5000 attached
[pid  5000] chdir("./3")                = 0
[pid  5000] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5000] setpgid(0, 0)               = 0
[pid  5000] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5000] write(3, "1000", 4)         = 4
[pid  5000] close(3)                    = 0
[pid  5000] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5000] memfd_create("syzkaller", 0) = 3
[pid  5000] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0f62cb9000
[pid  5000] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  5000] munmap(0x7f0f62cb9000, 4194304) = 0
[pid  5000] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5000] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5000] close(3)                    = 0
[pid  5000] mkdir("./file0", 0777)      = 0
[   57.101951][ T5000] loop0: detected capacity change from 0 to 8192
[   57.111863][ T5000] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   57.125007][ T5000] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[   57.134341][ T5000] REISERFS (device loop0): using ordered data mode
[   57.140850][ T5000] reiserfs: using flush barriers
[   57.146823][ T5000] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   57.163254][ T5000] REISERFS (device loop0): checking transaction log (loop0)
[pid  5000] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC, "") = 0
[pid  5000] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5000] chdir("./file0")            = 0
[pid  5000] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5000] close(4)                    = 0
[pid  5000] open(NULL, O_RDWR|O_CREAT|O_NOCTTY|O_NONBLOCK|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = -1 EFAULT (Bad address)
[pid  5000] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 4
[pid  5000] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000) = 5
[pid  5000] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<<MAP_HUGE_SHIFT, 5, 0) = 0x20000000
[pid  5000] ftruncate(4, 33587199)      = 0
[pid  5000] ioctl(-1, BTRFS_IOC_SUBVOL_SETFLAGS, 0) = -1 EBADF (Bad file descriptor)
[pid  5000] memfd_create("syzkaller", 0) = 6
[pid  5000] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0f5acb9000
[   57.204503][ T5000] REISERFS (device loop0): Using r5 hash to sort names
[   57.211555][ T5000] REISERFS (device loop0): using 3.5.x disk format
[   57.218443][ T5000] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[   57.230873][   T27] audit: type=1800 audit(1686673024.884:11): pid=5000 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor909" name="bus" dev="loop0" ino=2 res=0 errno=0
[pid  5000] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  5000] munmap(0x7f0f5acb9000, 4194304) = 0
[pid  5000] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 7
[pid  5000] ioctl(7, LOOP_SET_FD, 6)    = -1 EBUSY (Device or resource busy)
[pid  5000] ioctl(7, LOOP_CLR_FD)       = 0
[pid  5000] ioctl(7, LOOP_SET_FD, 6)    = -1 EBUSY (Device or resource busy)
[pid  5000] close(7)                    = 0
[pid  5000] close(6)                    = 0
[pid  5000] mkdir(".", 0777)            = -1 EEXIST (File exists)
[pid  5000] mount(NULL, ".", 0x200000c0, MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_SILENT|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\xee\xa7\x3c\x3c\xa0\x47\x34\x9a\xb6\x6d\x52\x9f\xb1\xe2\xbd\xc6\x18\x75\xc6\xcc\xeb\xea\x30\xba\x1b\x89\x77\x2f\x99\x5e\xa3\xe0\xed\x04\xf9\x86\xb6\x8e\xe6") = -1 EINVAL (Invalid argument)
[   57.324714][ T5000] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "ÿÿÿÿÿÿÿÿî§<< G4š¶mRŸ±â½ÆuÆÌëê0º‰w/™^£àíù†¶Žæ"
[pid  5000] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 6
[pid  5000] ioctl(6, FS_IOC_GETVERSION, 0x20000000) = 0
[pid  5000] exit_group(0)               = ?
[pid  5000] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5000, si_uid=0, si_status=0, si_utime=0, si_stime=51 /* 0.51 s */} ---
umount2("./3", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555e64620 /* 4 entries */, 32768) = 112
umount2("./3/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./3/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./3/binderfs")                  = 0
umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./3/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./3/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555e6c660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555e6c660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./3/file0")                      = 0
getdents64(3, 0x555555e64620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./3")                            = 0
mkdir("./4", 0777)                      = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e635d0) = 5002
./strace-static-x86_64: Process 5002 attached
[pid  5002] chdir("./4")                = 0
[pid  5002] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5002] setpgid(0, 0)               = 0
[pid  5002] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5002] write(3, "1000", 4)         = 4
[pid  5002] close(3)                    = 0
[pid  5002] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5002] memfd_create("syzkaller", 0) = 3
[pid  5002] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0f62cb9000
[pid  5002] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  5002] munmap(0x7f0f62cb9000, 4194304) = 0
[pid  5002] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5002] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5002] close(3)                    = 0
[pid  5002] mkdir("./file0", 0777)      = 0
[   57.819473][ T5002] loop0: detected capacity change from 0 to 8192
[   57.830107][ T5002] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   57.843417][ T5002] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[   57.853799][ T5002] REISERFS (device loop0): using ordered data mode
[   57.860520][ T5002] reiserfs: using flush barriers
[   57.866537][ T5002] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   57.883044][ T5002] REISERFS (device loop0): checking transaction log (loop0)
[pid  5002] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC, "") = 0
[pid  5002] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5002] chdir("./file0")            = 0
[pid  5002] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5002] close(4)                    = 0
[pid  5002] open(NULL, O_RDWR|O_CREAT|O_NOCTTY|O_NONBLOCK|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = -1 EFAULT (Bad address)
[pid  5002] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 4
[pid  5002] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000) = 5
[pid  5002] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<<MAP_HUGE_SHIFT, 5, 0) = 0x20000000
[pid  5002] ftruncate(4, 33587199)      = 0
[pid  5002] ioctl(-1, BTRFS_IOC_SUBVOL_SETFLAGS, 0) = -1 EBADF (Bad file descriptor)
[pid  5002] memfd_create("syzkaller", 0) = 6
[pid  5002] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0f5acb9000
[   57.924365][ T5002] REISERFS (device loop0): Using r5 hash to sort names
[   57.931246][ T5002] REISERFS (device loop0): using 3.5.x disk format
[   57.938089][ T5002] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[pid  5002] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  5002] munmap(0x7f0f5acb9000, 4194304) = 0
[pid  5002] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 7
[pid  5002] ioctl(7, LOOP_SET_FD, 6)    = -1 EBUSY (Device or resource busy)
[pid  5002] ioctl(7, LOOP_CLR_FD)       = 0
[pid  5002] ioctl(7, LOOP_SET_FD, 6)    = -1 EBUSY (Device or resource busy)
[pid  5002] close(7)                    = 0
[pid  5002] close(6)                    = 0
[pid  5002] mkdir(".", 0777)            = -1 EEXIST (File exists)
[pid  5002] mount(NULL, ".", 0x200000c0, MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_SILENT|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\xee\xa7\x3c\x3c\xa0\x47\x34\x9a\xb6\x6d\x52\x9f\xb1\xe2\xbd\xc6\x18\x75\xc6\xcc\xeb\xea\x30\xba\x1b\x89\x77\x2f\x99\x5e\xa3\xe0\xed\x04\xf9\x86\xb6\x8e\xe6") = -1 EINVAL (Invalid argument)
[   58.039249][ T5002] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "ÿÿÿÿÿÿÿÿî§<< G4š¶mRŸ±â½ÆuÆÌëê0º‰w/™^£àíù†¶Žæ"
[pid  5002] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 6
[pid  5002] ioctl(6, FS_IOC_GETVERSION, 0x20000000) = 0
[pid  5002] exit_group(0)               = ?
[pid  5002] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5002, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=54 /* 0.54 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./4", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555e64620 /* 4 entries */, 32768) = 112
umount2("./4/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./4/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./4/binderfs")                  = 0
umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./4/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./4/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555e6c660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555e6c660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./4/file0")                      = 0
getdents64(3, 0x555555e64620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./4")                            = 0
mkdir("./5", 0777)                      = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5004 attached
, child_tidptr=0x555555e635d0) = 5004
[pid  5004] chdir("./5")                = 0
[pid  5004] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5004] setpgid(0, 0)               = 0
[pid  5004] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5004] write(3, "1000", 4)         = 4
[pid  5004] close(3)                    = 0
[pid  5004] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5004] memfd_create("syzkaller", 0) = 3
[pid  5004] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0f62cb9000
[pid  5004] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  5004] munmap(0x7f0f62cb9000, 4194304) = 0
[pid  5004] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5004] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5004] close(3)                    = 0
[pid  5004] mkdir("./file0", 0777)      = 0
[   58.562791][ T5004] loop0: detected capacity change from 0 to 8192
[   58.572856][ T5004] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   58.586104][ T5004] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[   58.595358][ T5004] REISERFS (device loop0): using ordered data mode
[   58.601888][ T5004] reiserfs: using flush barriers
[   58.607874][ T5004] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   58.625392][ T5004] REISERFS (device loop0): checking transaction log (loop0)
[pid  5004] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC, "") = 0
[pid  5004] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5004] chdir("./file0")            = 0
[pid  5004] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5004] close(4)                    = 0
[pid  5004] open(NULL, O_RDWR|O_CREAT|O_NOCTTY|O_NONBLOCK|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = -1 EFAULT (Bad address)
[pid  5004] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 4
[pid  5004] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000) = 5
[pid  5004] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<<MAP_HUGE_SHIFT, 5, 0) = 0x20000000
[pid  5004] ftruncate(4, 33587199)      = 0
[pid  5004] ioctl(-1, BTRFS_IOC_SUBVOL_SETFLAGS, 0) = -1 EBADF (Bad file descriptor)
[pid  5004] memfd_create("syzkaller", 0) = 6
[pid  5004] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0f5acb9000
[   58.669234][ T5004] REISERFS (device loop0): Using r5 hash to sort names
[   58.676267][ T5004] REISERFS (device loop0): using 3.5.x disk format
[   58.683062][ T5004] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[pid  5004] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  5004] munmap(0x7f0f5acb9000, 4194304) = 0
[pid  5004] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 7
[pid  5004] ioctl(7, LOOP_SET_FD, 6)    = -1 EBUSY (Device or resource busy)
[pid  5004] ioctl(7, LOOP_CLR_FD)       = 0
[pid  5004] ioctl(7, LOOP_SET_FD, 6)    = -1 EBUSY (Device or resource busy)
[pid  5004] close(7)                    = 0
[pid  5004] close(6)                    = 0
[pid  5004] mkdir(".", 0777)            = -1 EEXIST (File exists)
[pid  5004] mount(NULL, ".", 0x200000c0, MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_SILENT|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\xee\xa7\x3c\x3c\xa0\x47\x34\x9a\xb6\x6d\x52\x9f\xb1\xe2\xbd\xc6\x18\x75\xc6\xcc\xeb\xea\x30\xba\x1b\x89\x77\x2f\x99\x5e\xa3\xe0\xed\x04\xf9\x86\xb6\x8e\xe6") = -1 EINVAL (Invalid argument)
[   58.797437][ T5004] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "ÿÿÿÿÿÿÿÿî§<< G4š¶mRŸ±â½ÆuÆÌëê0º‰w/™^£àíù†¶Žæ"
[pid  5004] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 6
[pid  5004] ioctl(6, FS_IOC_GETVERSION, 0x20000000) = 0
[pid  5004] exit_group(0)               = ?
[pid  5004] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5004, si_uid=0, si_status=0, si_utime=0, si_stime=50 /* 0.50 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./5", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555e64620 /* 4 entries */, 32768) = 112
umount2("./5/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./5/binderfs")                  = 0
umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./5/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./5/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555e6c660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555e6c660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./5/file0")                      = 0
getdents64(3, 0x555555e64620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./5")                            = 0
mkdir("./6", 0777)                      = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e635d0) = 5006
./strace-static-x86_64: Process 5006 attached
[pid  5006] chdir("./6")                = 0
[pid  5006] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5006] setpgid(0, 0)               = 0
[pid  5006] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5006] write(3, "1000", 4)         = 4
[pid  5006] close(3)                    = 0
[pid  5006] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5006] memfd_create("syzkaller", 0) = 3
[pid  5006] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0f62cb9000
[pid  5006] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  5006] munmap(0x7f0f62cb9000, 4194304) = 0
[pid  5006] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5006] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5006] close(3)                    = 0
[pid  5006] mkdir("./file0", 0777)      = 0
[   59.337372][ T5006] loop0: detected capacity change from 0 to 8192
[   59.347560][ T5006] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   59.360577][ T5006] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[   59.370349][ T5006] REISERFS (device loop0): using ordered data mode
[   59.377181][ T5006] reiserfs: using flush barriers
[   59.383073][ T5006] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   59.399719][ T5006] REISERFS (device loop0): checking transaction log (loop0)
[pid  5006] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC, "") = 0
[pid  5006] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5006] chdir("./file0")            = 0
[pid  5006] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5006] close(4)                    = 0
[pid  5006] open(NULL, O_RDWR|O_CREAT|O_NOCTTY|O_NONBLOCK|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = -1 EFAULT (Bad address)
[pid  5006] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 4
[pid  5006] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000) = 5
[pid  5006] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<<MAP_HUGE_SHIFT, 5, 0) = 0x20000000
[pid  5006] ftruncate(4, 33587199)      = 0
[pid  5006] ioctl(-1, BTRFS_IOC_SUBVOL_SETFLAGS, 0) = -1 EBADF (Bad file descriptor)
[pid  5006] memfd_create("syzkaller", 0) = 6
[pid  5006] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0f5acb9000
[   59.440212][ T5006] REISERFS (device loop0): Using r5 hash to sort names
[   59.447128][ T5006] REISERFS (device loop0): using 3.5.x disk format
[   59.453828][ T5006] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[pid  5006] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  5006] munmap(0x7f0f5acb9000, 4194304) = 0
[pid  5006] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 7
[pid  5006] ioctl(7, LOOP_SET_FD, 6)    = -1 EBUSY (Device or resource busy)
[pid  5006] ioctl(7, LOOP_CLR_FD)       = 0
[pid  5006] ioctl(7, LOOP_SET_FD, 6)    = -1 EBUSY (Device or resource busy)
[pid  5006] close(7)                    = 0
[pid  5006] close(6)                    = 0
[pid  5006] mkdir(".", 0777)            = -1 EEXIST (File exists)
[pid  5006] mount(NULL, ".", 0x200000c0, MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_SILENT|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\xee\xa7\x3c\x3c\xa0\x47\x34\x9a\xb6\x6d\x52\x9f\xb1\xe2\xbd\xc6\x18\x75\xc6\xcc\xeb\xea\x30\xba\x1b\x89\x77\x2f\x99\x5e\xa3\xe0\xed\x04\xf9\x86\xb6\x8e\xe6") = -1 EINVAL (Invalid argument)
[   59.552671][ T5006] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "ÿÿÿÿÿÿÿÿî§<< G4š¶mRŸ±â½ÆuÆÌëê0º‰w/™^£àíù†¶Žæ"
[pid  5006] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 6
[pid  5006] ioctl(6, FS_IOC_GETVERSION, 0x20000000) = 0
[pid  5006] exit_group(0)               = ?
[pid  5006] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5006, si_uid=0, si_status=0, si_utime=0, si_stime=49 /* 0.49 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./6", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555e64620 /* 4 entries */, 32768) = 112
umount2("./6/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./6/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./6/binderfs")                  = 0
umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./6/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./6/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555e6c660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555e6c660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./6/file0")                      = 0
getdents64(3, 0x555555e64620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./6")                            = 0
mkdir("./7", 0777)                      = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e635d0) = 5008
./strace-static-x86_64: Process 5008 attached
[pid  5008] chdir("./7")                = 0
[pid  5008] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5008] setpgid(0, 0)               = 0
[pid  5008] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5008] write(3, "1000", 4)         = 4
[pid  5008] close(3)                    = 0
[pid  5008] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5008] memfd_create("syzkaller", 0) = 3
[pid  5008] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0f62cb9000
[pid  5008] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  5008] munmap(0x7f0f62cb9000, 4194304) = 0
[pid  5008] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5008] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5008] close(3)                    = 0
[pid  5008] mkdir("./file0", 0777)      = 0
[   60.082056][ T5008] loop0: detected capacity change from 0 to 8192
[   60.102023][ T5008] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   60.115446][ T5008] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[   60.124999][ T5008] REISERFS (device loop0): using ordered data mode
[   60.131512][ T5008] reiserfs: using flush barriers
[   60.137955][ T5008] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   60.154357][ T5008] REISERFS (device loop0): checking transaction log (loop0)
[pid  5008] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC, "") = 0
[pid  5008] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5008] chdir("./file0")            = 0
[pid  5008] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5008] close(4)                    = 0
[pid  5008] open(NULL, O_RDWR|O_CREAT|O_NOCTTY|O_NONBLOCK|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = -1 EFAULT (Bad address)
[   60.196941][ T5008] REISERFS (device loop0): Using r5 hash to sort names
[   60.204081][ T5008] REISERFS (device loop0): using 3.5.x disk format
[   60.210833][ T5008] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[   60.235892][   T27] kauditd_printk_skb: 11 callbacks suppressed
[pid  5008] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 4
[pid  5008] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000) = 5
[pid  5008] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<<MAP_HUGE_SHIFT, 5, 0) = 0x20000000
[pid  5008] ftruncate(4, 33587199)      = 0
[pid  5008] ioctl(-1, BTRFS_IOC_SUBVOL_SETFLAGS, 0) = -1 EBADF (Bad file descriptor)
[pid  5008] memfd_create("syzkaller", 0) = 6
[pid  5008] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0f5acb9000
[pid  5008] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  5008] munmap(0x7f0f5acb9000, 4194304) = 0
[pid  5008] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 7
[pid  5008] ioctl(7, LOOP_SET_FD, 6)    = -1 EBUSY (Device or resource busy)
[pid  5008] ioctl(7, LOOP_CLR_FD)       = 0
[pid  5008] ioctl(7, LOOP_SET_FD, 6)    = -1 EBUSY (Device or resource busy)
[pid  5008] close(7)                    = 0
[   60.235906][   T27] audit: type=1800 audit(1686673027.864:23): pid=5008 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor909" name="bus" dev="loop0" ino=2 res=0 errno=0
[pid  5008] close(6)                    = 0
[pid  5008] mkdir(".", 0777)            = -1 EEXIST (File exists)
[pid  5008] mount(NULL, ".", 0x200000c0, MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_SILENT|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\xee\xa7\x3c\x3c\xa0\x47\x34\x9a\xb6\x6d\x52\x9f\xb1\xe2\xbd\xc6\x18\x75\xc6\xcc\xeb\xea\x30\xba\x1b\x89\x77\x2f\x99\x5e\xa3\xe0\xed\x04\xf9\x86\xb6\x8e\xe6") = -1 EINVAL (Invalid argument)
[   60.278488][   T27] audit: type=1800 audit(1686673027.874:24): pid=5008 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor909" name="bus" dev="loop0" ino=2 res=0 errno=0
[   60.311566][   T27] audit: type=1800 audit(1686673027.874:25): pid=5008 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor909" name="bus" dev="loop0" ino=2 res=0 errno=0
[   60.329887][ T5008] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "ÿÿÿÿÿÿÿÿî§<< G4š¶mRŸ±â½ÆuÆÌëê0º‰w/™^£àíù†¶Žæ"
[pid  5008] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 6
[pid  5008] ioctl(6, FS_IOC_GETVERSION, 0x20000000) = 0
[pid  5008] exit_group(0)               = ?
[pid  5008] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5008, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=49 /* 0.49 s */} ---
umount2("./7", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555e64620 /* 4 entries */, 32768) = 112
umount2("./7/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./7/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./7/binderfs")                  = 0
umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./7/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./7/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555e6c660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555e6c660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./7/file0")                      = 0
getdents64(3, 0x555555e64620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./7")                            = 0
mkdir("./8", 0777)                      = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5010 attached
 <unfinished ...>
[pid  5010] chdir("./8")                = 0
[pid  5010] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5010] setpgid(0, 0)               = 0
[pid  5010] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5010] write(3, "1000", 4 <unfinished ...>
[pid  4992] <... clone resumed>, child_tidptr=0x555555e635d0) = 5010
[pid  5010] <... write resumed>)        = 4
[pid  5010] close(3)                    = 0
[pid  5010] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5010] memfd_create("syzkaller", 0) = 3
[pid  5010] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0f62cb9000
[pid  5010] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  5010] munmap(0x7f0f62cb9000, 4194304) = 0
[pid  5010] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5010] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5010] close(3)                    = 0
[pid  5010] mkdir("./file0", 0777)      = 0
[   60.884078][ T5010] loop0: detected capacity change from 0 to 8192
[   60.893589][ T5010] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   60.907049][ T5010] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[   60.916447][ T5010] REISERFS (device loop0): using ordered data mode
[   60.922958][ T5010] reiserfs: using flush barriers
[   60.928918][ T5010] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   60.946185][ T5010] REISERFS (device loop0): checking transaction log (loop0)
[pid  5010] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC, "") = 0
[pid  5010] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5010] chdir("./file0")            = 0
[pid  5010] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5010] close(4)                    = 0
[pid  5010] open(NULL, O_RDWR|O_CREAT|O_NOCTTY|O_NONBLOCK|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = -1 EFAULT (Bad address)
[   60.987160][ T5010] REISERFS (device loop0): Using r5 hash to sort names
[   60.994168][ T5010] REISERFS (device loop0): using 3.5.x disk format
[   61.001104][ T5010] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[pid  5010] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 4
[pid  5010] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000) = 5
[pid  5010] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<<MAP_HUGE_SHIFT, 5, 0) = 0x20000000
[pid  5010] ftruncate(4, 33587199)      = 0
[pid  5010] ioctl(-1, BTRFS_IOC_SUBVOL_SETFLAGS, 0) = -1 EBADF (Bad file descriptor)
[pid  5010] memfd_create("syzkaller", 0) = 6
[pid  5010] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0f5acb9000
[   61.026717][   T27] audit: type=1800 audit(1686673028.674:26): pid=5010 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor909" name="bus" dev="loop0" ino=2 res=0 errno=0
[   61.064093][   T27] audit: type=1800 audit(1686673028.674:27): pid=5010 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor909" name="bus" dev="loop0" ino=2 res=0 errno=0
[pid  5010] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  5010] munmap(0x7f0f5acb9000, 4194304) = 0
[pid  5010] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 7
[pid  5010] ioctl(7, LOOP_SET_FD, 6)    = -1 EBUSY (Device or resource busy)
[pid  5010] ioctl(7, LOOP_CLR_FD)       = 0
[pid  5010] ioctl(7, LOOP_SET_FD, 6)    = -1 EBUSY (Device or resource busy)
[pid  5010] close(7)                    = 0
[pid  5010] close(6)                    = 0
[pid  5010] mkdir(".", 0777)            = -1 EEXIST (File exists)
[   61.084773][   T27] audit: type=1800 audit(1686673028.674:28): pid=5010 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor909" name="bus" dev="loop0" ino=2 res=0 errno=0
[pid  5010] mount(NULL, ".", 0x200000c0, MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_SILENT|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\xee\xa7\x3c\x3c\xa0\x47\x34\x9a\xb6\x6d\x52\x9f\xb1\xe2\xbd\xc6\x18\x75\xc6\xcc\xeb\xea\x30\xba\x1b\x89\x77\x2f\x99\x5e\xa3\xe0\xed\x04\xf9\x86\xb6\x8e\xe6") = -1 EINVAL (Invalid argument)
[   61.134288][ T5010] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "ÿÿÿÿÿÿÿÿî§<< G4š¶mRŸ±â½ÆuÆÌëê0º‰w/™^£àíù†¶Žæ"
[pid  5010] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 6
[pid  5010] ioctl(6, FS_IOC_GETVERSION, 0x20000000) = 0
[pid  5010] exit_group(0)               = ?
[pid  5010] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5010, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=55 /* 0.55 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./8", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555e64620 /* 4 entries */, 32768) = 112
umount2("./8/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./8/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./8/binderfs")                  = 0
umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./8/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./8/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555e6c660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555e6c660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./8/file0")                      = 0
getdents64(3, 0x555555e64620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./8")                            = 0
mkdir("./9", 0777)                      = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e635d0) = 5012
./strace-static-x86_64: Process 5012 attached
[pid  5012] chdir("./9")                = 0
[pid  5012] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5012] setpgid(0, 0)               = 0
[pid  5012] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5012] write(3, "1000", 4)         = 4
[pid  5012] close(3)                    = 0
[pid  5012] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5012] memfd_create("syzkaller", 0) = 3
[pid  5012] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0f62cb9000
[pid  5012] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  5012] munmap(0x7f0f62cb9000, 4194304) = 0
[pid  5012] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5012] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5012] close(3)                    = 0
[pid  5012] mkdir("./file0", 0777)      = 0
[   61.660695][ T5012] loop0: detected capacity change from 0 to 8192
[   61.671636][ T5012] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   61.685197][ T5012] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[   61.694617][ T5012] REISERFS (device loop0): using ordered data mode
[   61.701132][ T5012] reiserfs: using flush barriers
[   61.707081][ T5012] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   61.723451][ T5012] REISERFS (device loop0): checking transaction log (loop0)
[pid  5012] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC, "") = 0
[pid  5012] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5012] chdir("./file0")            = 0
[pid  5012] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5012] close(4)                    = 0
[pid  5012] open(NULL, O_RDWR|O_CREAT|O_NOCTTY|O_NONBLOCK|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = -1 EFAULT (Bad address)
[   61.765001][ T5012] REISERFS (device loop0): Using r5 hash to sort names
[   61.771886][ T5012] REISERFS (device loop0): using 3.5.x disk format
[   61.778765][ T5012] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[pid  5012] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 4
[pid  5012] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000) = 5
[pid  5012] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<<MAP_HUGE_SHIFT, 5, 0) = 0x20000000
[pid  5012] ftruncate(4, 33587199)      = 0
[pid  5012] ioctl(-1, BTRFS_IOC_SUBVOL_SETFLAGS, 0) = -1 EBADF (Bad file descriptor)
[pid  5012] memfd_create("syzkaller", 0) = 6
[pid  5012] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0f5acb9000
[pid  5012] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  5012] munmap(0x7f0f5acb9000, 4194304) = 0
[pid  5012] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 7
[pid  5012] ioctl(7, LOOP_SET_FD, 6)    = -1 EBUSY (Device or resource busy)
[pid  5012] ioctl(7, LOOP_CLR_FD)       = 0
[pid  5012] ioctl(7, LOOP_SET_FD, 6)    = -1 EBUSY (Device or resource busy)
[pid  5012] close(7)                    = 0
[   61.800605][   T27] audit: type=1800 audit(1686673029.444:29): pid=5012 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor909" name="bus" dev="loop0" ino=2 res=0 errno=0
[   61.821186][   T27] audit: type=1800 audit(1686673029.444:30): pid=5012 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor909" name="bus" dev="loop0" ino=2 res=0 errno=0
[   61.842196][   T27] audit: type=1800 audit(1686673029.444:31): pid=5012 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor909" name="bus" dev="loop0" ino=2 res=0 errno=0
[pid  5012] close(6)                    = 0
[pid  5012] mkdir(".", 0777)            = -1 EEXIST (File exists)
[pid  5012] mount(NULL, ".", 0x200000c0, MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_SILENT|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\xee\xa7\x3c\x3c\xa0\x47\x34\x9a\xb6\x6d\x52\x9f\xb1\xe2\xbd\xc6\x18\x75\xc6\xcc\xeb\xea\x30\xba\x1b\x89\x77\x2f\x99\x5e\xa3\xe0\xed\x04\xf9\x86\xb6\x8e\xe6") = -1 EINVAL (Invalid argument)
[   61.907254][ T5012] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "ÿÿÿÿÿÿÿÿî§<< G4š¶mRŸ±â½ÆuÆÌëê0º‰w/™^£àíù†¶Žæ"
[pid  5012] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 6
[pid  5012] ioctl(6, FS_IOC_GETVERSION, 0x20000000) = 0
[pid  5012] exit_group(0)               = ?
[pid  5012] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5012, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=50 /* 0.50 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./9", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555e64620 /* 4 entries */, 32768) = 112
umount2("./9/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./9/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./9/binderfs")                  = 0
umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./9/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./9/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555e6c660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555e6c660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./9/file0")                      = 0
getdents64(3, 0x555555e64620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./9")                            = 0
mkdir("./10", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e635d0) = 5014
./strace-static-x86_64: Process 5014 attached
[pid  5014] chdir("./10")               = 0
[pid  5014] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5014] setpgid(0, 0)               = 0
[pid  5014] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5014] write(3, "1000", 4)         = 4
[pid  5014] close(3)                    = 0
[pid  5014] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5014] memfd_create("syzkaller", 0) = 3
[pid  5014] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0f62cb9000
[pid  5014] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  5014] munmap(0x7f0f62cb9000, 4194304) = 0
[pid  5014] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5014] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5014] close(3)                    = 0
[pid  5014] mkdir("./file0", 0777)      = 0
[   62.427283][ T5014] loop0: detected capacity change from 0 to 8192
[   62.437555][ T5014] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   62.450593][ T5014] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[   62.459938][ T5014] REISERFS (device loop0): using ordered data mode
[   62.466837][ T5014] reiserfs: using flush barriers
[   62.472655][ T5014] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   62.489638][ T5014] REISERFS (device loop0): checking transaction log (loop0)
[pid  5014] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC, "") = 0
[pid  5014] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5014] chdir("./file0")            = 0
[pid  5014] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5014] close(4)                    = 0
[pid  5014] open(NULL, O_RDWR|O_CREAT|O_NOCTTY|O_NONBLOCK|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = -1 EFAULT (Bad address)
[pid  5014] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 4
[pid  5014] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000) = 5
[pid  5014] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<<MAP_HUGE_SHIFT, 5, 0) = 0x20000000
[   62.532576][ T5014] REISERFS (device loop0): Using r5 hash to sort names
[   62.539709][ T5014] REISERFS (device loop0): using 3.5.x disk format
[   62.547199][ T5014] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[pid  5014] ftruncate(4, 33587199)      = 0
[pid  5014] ioctl(-1, BTRFS_IOC_SUBVOL_SETFLAGS, 0) = -1 EBADF (Bad file descriptor)
[pid  5014] memfd_create("syzkaller", 0) = 6
[pid  5014] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0f5acb9000
[   62.564096][   T27] audit: type=1800 audit(1686673030.204:32): pid=5014 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor909" name="bus" dev="loop0" ino=2 res=0 errno=0
[pid  5014] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  5014] munmap(0x7f0f5acb9000, 4194304) = 0
[pid  5014] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 7
[pid  5014] ioctl(7, LOOP_SET_FD, 6)    = -1 EBUSY (Device or resource busy)
[pid  5014] ioctl(7, LOOP_CLR_FD)       = 0
[pid  5014] ioctl(7, LOOP_SET_FD, 6)    = -1 EBUSY (Device or resource busy)
[pid  5014] close(7)                    = 0
[pid  5014] close(6)                    = 0
[pid  5014] mkdir(".", 0777)            = -1 EEXIST (File exists)
[pid  5014] mount(NULL, ".", 0x200000c0, MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_SILENT|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\xee\xa7\x3c\x3c\xa0\x47\x34\x9a\xb6\x6d\x52\x9f\xb1\xe2\xbd\xc6\x18\x75\xc6\xcc\xeb\xea\x30\xba\x1b\x89\x77\x2f\x99\x5e\xa3\xe0\xed\x04\xf9\x86\xb6\x8e\xe6") = -1 EINVAL (Invalid argument)
[   62.665782][ T5014] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "ÿÿÿÿÿÿÿÿî§<< G4š¶mRŸ±â½ÆuÆÌëê0º‰w/™^£àíù†¶Žæ"
[pid  5014] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 6
[pid  5014] ioctl(6, FS_IOC_GETVERSION, 0x20000000) = 0
[pid  5014] exit_group(0)               = ?
[pid  5014] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5014, si_uid=0, si_status=0, si_utime=0, si_stime=56 /* 0.56 s */} ---
umount2("./10", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555e64620 /* 4 entries */, 32768) = 112
umount2("./10/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./10/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./10/binderfs")                 = 0
umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./10/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./10/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555e6c660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555e6c660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./10/file0")                     = 0
getdents64(3, 0x555555e64620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./10")                           = 0
mkdir("./11", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e635d0) = 5016
./strace-static-x86_64: Process 5016 attached
[pid  5016] chdir("./11")               = 0
[pid  5016] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5016] setpgid(0, 0)               = 0
[pid  5016] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5016] write(3, "1000", 4)         = 4
[pid  5016] close(3)                    = 0
[pid  5016] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5016] memfd_create("syzkaller", 0) = 3
[pid  5016] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0f62cb9000
[pid  5016] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  5016] munmap(0x7f0f62cb9000, 4194304) = 0
[pid  5016] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5016] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5016] close(3)                    = 0
[pid  5016] mkdir("./file0", 0777)      = 0
[   63.189836][ T5016] loop0: detected capacity change from 0 to 8192
[   63.199549][ T5016] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   63.212694][ T5016] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[   63.222521][ T5016] REISERFS (device loop0): using ordered data mode
[   63.229245][ T5016] reiserfs: using flush barriers
[   63.235154][ T5016] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   63.251595][ T5016] REISERFS (device loop0): checking transaction log (loop0)
[pid  5016] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC, "") = 0
[pid  5016] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5016] chdir("./file0")            = 0
[pid  5016] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5016] close(4)                    = 0
[pid  5016] open(NULL, O_RDWR|O_CREAT|O_NOCTTY|O_NONBLOCK|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = -1 EFAULT (Bad address)
[pid  5016] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 4
[pid  5016] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000) = 5
[pid  5016] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<<MAP_HUGE_SHIFT, 5, 0) = 0x20000000
[pid  5016] ftruncate(4, 33587199)      = 0
[pid  5016] ioctl(-1, BTRFS_IOC_SUBVOL_SETFLAGS, 0) = -1 EBADF (Bad file descriptor)
[pid  5016] memfd_create("syzkaller", 0) = 6
[pid  5016] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0f5acb9000
[   63.294850][ T5016] REISERFS (device loop0): Using r5 hash to sort names
[   63.302098][ T5016] REISERFS (device loop0): using 3.5.x disk format
[   63.309244][ T5016] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[pid  5016] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  5016] munmap(0x7f0f5acb9000, 4194304) = 0
[pid  5016] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 7
[pid  5016] ioctl(7, LOOP_SET_FD, 6)    = -1 EBUSY (Device or resource busy)
[pid  5016] ioctl(7, LOOP_CLR_FD)       = 0
[pid  5016] ioctl(7, LOOP_SET_FD, 6)    = -1 EBUSY (Device or resource busy)
[pid  5016] close(7)                    = 0
[pid  5016] close(6)                    = 0
[pid  5016] mkdir(".", 0777)            = -1 EEXIST (File exists)
[pid  5016] mount(NULL, ".", 0x200000c0, MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_SILENT|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\xee\xa7\x3c\x3c\xa0\x47\x34\x9a\xb6\x6d\x52\x9f\xb1\xe2\xbd\xc6\x18\x75\xc6\xcc\xeb\xea\x30\xba\x1b\x89\x77\x2f\x99\x5e\xa3\xe0\xed\x04\xf9\x86\xb6\x8e\xe6") = -1 EINVAL (Invalid argument)
[   63.415676][ T5016] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "ÿÿÿÿÿÿÿÿî§<< G4š¶mRŸ±â½ÆuÆÌëê0º‰w/™^£àíù†¶Žæ"
[   63.430308][ T5016] 
[   63.432750][ T5016] ======================================================
[   63.439907][ T5016] WARNING: possible circular locking dependency detected
[   63.446917][ T5016] 6.4.0-rc6-syzkaller-00026-gfb054096aea0 #0 Not tainted
[   63.454007][ T5016] ------------------------------------------------------
[   63.461007][ T5016] syz-executor909/5016 is trying to acquire lock:
[   63.467409][ T5016] ffff888023469090 (&sbi->lock){+.+.}-{3:3}, at: reiserfs_write_lock+0x7a/0xd0
[   63.476554][ T5016] 
[   63.476554][ T5016] but task is already holding lock:
[   63.483897][ T5016] ffff88807b1fa558 (sb_pagefaults){.+.+}-{0:0}, at: do_page_mkwrite+0x1a4/0x600
[   63.492952][ T5016] 
[   63.492952][ T5016] which lock already depends on the new lock.
[   63.492952][ T5016] 
[   63.503692][ T5016] 
[   63.503692][ T5016] the existing dependency chain (in reverse order) is:
[   63.512690][ T5016] 
[   63.512690][ T5016] -> #2 (sb_pagefaults){.+.+}-{0:0}:
[   63.520155][ T5016]        lock_acquire+0x1e3/0x520
[   63.525170][ T5016]        filemap_page_mkwrite+0x16f/0x640
[   63.530874][ T5016]        do_page_mkwrite+0x1a4/0x600
[   63.536150][ T5016]        handle_mm_fault+0x2140/0x5860
[   63.541683][ T5016]        exc_page_fault+0x7d2/0x910
[   63.546877][ T5016]        asm_exc_page_fault+0x26/0x30
[   63.552323][ T5016] 
[   63.552323][ T5016] -> #1 (&mm->mmap_lock){++++}-{3:3}:
[   63.560476][ T5016]        lock_acquire+0x1e3/0x520
[   63.565488][ T5016]        __might_fault+0xba/0x120
[   63.570585][ T5016]        reiserfs_ioctl+0x121/0x340
[   63.575815][ T5016]        __se_sys_ioctl+0xf1/0x160
[   63.581009][ T5016]        do_syscall_64+0x41/0xc0
[   63.585961][ T5016]        entry_SYSCALL_64_after_hwframe+0x63/0xcd
[   63.592456][ T5016] 
[   63.592456][ T5016] -> #0 (&sbi->lock){+.+.}-{3:3}:
[   63.599658][ T5016]        validate_chain+0x166b/0x58f0
[   63.605027][ T5016]        __lock_acquire+0x1316/0x2070
[   63.610413][ T5016]        lock_acquire+0x1e3/0x520
[   63.616304][ T5016]        __mutex_lock_common+0x1d8/0x2530
[   63.622020][ T5016]        mutex_lock_nested+0x1b/0x20
[   63.627295][ T5016]        reiserfs_write_lock+0x7a/0xd0
[   63.632830][ T5016]        reiserfs_dirty_inode+0xf2/0x240
[   63.638581][ T5016]        __mark_inode_dirty+0x305/0xd90
[   63.644207][ T5016]        __file_update_time+0x221/0x240
[   63.649744][ T5016]        file_update_time+0x350/0x3c0
[   63.655189][ T5016]        filemap_page_mkwrite+0x27b/0x640
[   63.661068][ T5016]        do_page_mkwrite+0x1a4/0x600
[   63.666340][ T5016]        do_wp_page+0x501/0x3690
[   63.671269][ T5016]        handle_mm_fault+0x2371/0x5860
[   63.676714][ T5016]        exc_page_fault+0x7d2/0x910
[   63.681928][ T5016]        asm_exc_page_fault+0x26/0x30
[   63.687372][ T5016] 
[   63.687372][ T5016] other info that might help us debug this:
[   63.687372][ T5016] 
[   63.697759][ T5016] Chain exists of:
[   63.697759][ T5016]   &sbi->lock --> &mm->mmap_lock --> sb_pagefaults
[   63.697759][ T5016] 
[   63.710102][ T5016]  Possible unsafe locking scenario:
[   63.710102][ T5016] 
[   63.717545][ T5016]        CPU0                    CPU1
[   63.722898][ T5016]        ----                    ----
[   63.728249][ T5016]   rlock(sb_pagefaults);
[   63.732656][ T5016]                                lock(&mm->mmap_lock);
[   63.739493][ T5016]                                lock(sb_pagefaults);
[   63.746327][ T5016]   lock(&sbi->lock);
[   63.750342][ T5016] 
[   63.750342][ T5016]  *** DEADLOCK ***
[   63.750342][ T5016] 
[   63.758553][ T5016] 2 locks held by syz-executor909/5016:
[   63.764381][ T5016]  #0: ffff88801838e468 (&mm->mmap_lock){++++}-{3:3}, at: exc_page_fault+0x1b9/0x910
[   63.773964][ T5016]  #1: ffff88807b1fa558 (sb_pagefaults){.+.+}-{0:0}, at: do_page_mkwrite+0x1a4/0x600
[   63.783451][ T5016] 
[   63.783451][ T5016] stack backtrace:
[   63.789325][ T5016] CPU: 0 PID: 5016 Comm: syz-executor909 Not tainted 6.4.0-rc6-syzkaller-00026-gfb054096aea0 #0
[   63.800335][ T5016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/25/2023
[   63.810826][ T5016] Call Trace:
[   63.814196][ T5016]  <TASK>
[   63.817596][ T5016]  dump_stack_lvl+0x1e7/0x2d0
[   63.822376][ T5016]  ? nf_tcp_handle_invalid+0x650/0x650
[   63.828006][ T5016]  ? print_circular_bug+0x12b/0x1a0
[   63.833633][ T5016]  check_noncircular+0x2fe/0x3b0
[   63.838605][ T5016]  ? print_irqtrace_events+0x220/0x220
[   63.844056][ T5016]  ? add_chain_block+0x850/0x850
[   63.848995][ T5016]  ? lockdep_lock+0x123/0x2b0
[   63.853661][ T5016]  ? finish_task_switch+0x1f1/0x650
[   63.858933][ T5016]  ? _find_first_zero_bit+0xd4/0x100
[   63.864218][ T5016]  validate_chain+0x166b/0x58f0
[   63.869152][ T5016]  ? reacquire_held_locks+0x660/0x660
[   63.874512][ T5016]  ? validate_chain+0x119/0x58f0
[   63.879450][ T5016]  ? release_firmware_map_entry+0x190/0x190
[   63.885336][ T5016]  ? validate_chain+0x119/0x58f0
[   63.890266][ T5016]  ? rcu_is_watching+0x15/0xb0
[   63.895014][ T5016]  ? trace_sched_overutilized_tp+0x3e/0x120
[   63.900899][ T5016]  ? load_balance+0x2ebb/0x8020
[   63.906088][ T5016]  ? mark_lock+0x9a/0x340
[   63.910417][ T5016]  __lock_acquire+0x1316/0x2070
[   63.915450][ T5016]  lock_acquire+0x1e3/0x520
[   63.919946][ T5016]  ? reiserfs_write_lock+0x7a/0xd0
[   63.925049][ T5016]  ? read_lock_is_recursive+0x20/0x20
[   63.930411][ T5016]  ? __might_sleep+0xc0/0xc0
[   63.934991][ T5016]  ? __lock_acquire+0x1316/0x2070
[   63.940012][ T5016]  __mutex_lock_common+0x1d8/0x2530
[   63.945197][ T5016]  ? reiserfs_write_lock+0x7a/0xd0
[   63.950315][ T5016]  ? reiserfs_write_lock+0x7a/0xd0
[   63.955414][ T5016]  ? mark_lock+0x9a/0x340
[   63.959835][ T5016]  ? mutex_lock_io_nested+0x60/0x60
[   63.965019][ T5016]  ? print_irqtrace_events+0x220/0x220
[   63.970479][ T5016]  mutex_lock_nested+0x1b/0x20
[   63.975236][ T5016]  reiserfs_write_lock+0x7a/0xd0
[   63.980162][ T5016]  reiserfs_dirty_inode+0xf2/0x240
[   63.985266][ T5016]  ? reiserfs_free_inode+0x30/0x30
[   63.990454][ T5016]  ? ktime_get_coarse_real_ts64+0x10b/0x120
[   63.996685][ T5016]  ? reiserfs_free_inode+0x30/0x30
[   64.001965][ T5016]  __mark_inode_dirty+0x305/0xd90
[   64.007070][ T5016]  __file_update_time+0x221/0x240
[   64.012086][ T5016]  file_update_time+0x350/0x3c0
[   64.017279][ T5016]  ? __file_remove_privs+0x640/0x640
[   64.022597][ T5016]  ? do_wp_page+0x4f9/0x3690
[   64.027186][ T5016]  ? __lock_acquire+0x2070/0x2070
[   64.032219][ T5016]  filemap_page_mkwrite+0x27b/0x640
[   64.037413][ T5016]  ? do_page_mkwrite+0x1a4/0x600
[   64.042343][ T5016]  do_page_mkwrite+0x1a4/0x600
[   64.047096][ T5016]  do_wp_page+0x501/0x3690
[   64.051506][ T5016]  ? folio_lock_or_retry+0x1c0/0x1c0
[   64.056782][ T5016]  ? do_raw_spin_lock+0x14d/0x3a0
[   64.061799][ T5016]  ? __rwlock_init+0x150/0x150
[   64.066557][ T5016]  handle_mm_fault+0x2371/0x5860
[   64.071489][ T5016]  ? numa_migrate_prep+0x380/0x380
[   64.076609][ T5016]  ? mtree_destroy+0x30/0x30
[   64.081194][ T5016]  ? exc_page_fault+0x110/0x910
[   64.086136][ T5016]  exc_page_fault+0x7d2/0x910
[   64.090905][ T5016]  asm_exc_page_fault+0x26/0x30
[   64.095842][ T5016] RIP: 0033:0x7f0f6b0c47f1
[   64.100243][ T5016] Code: c8 ff b9 80 05 00 20 50 ba bc 84 a4 01 be 00 01 00 20 bf c0 00 00 20 68 00 00 00 20 e8 a8 f4 ff ff 31 c9 ba 42 30 14 00 31 c0 <c7> 04 25 40 00 00 20 2e 2f 62 75 be 40 00 00 20 bf 02 00 00 00 66
[   64.120795][ T5016] RSP: 002b:00007ffeaee19530 EFLAGS: 00010246
[   64.127023][ T5016] RAX: 0000000000000000 RBX: 000000000000f389 RCX: 0000000000000000
[   64.134987][ T5016] RDX: 0000000000143042 RSI: 0000000020000100 RDI: 0000000000000000
[   64.142950][ T5016] RBP: 0000000000000000 R08: 00007ffeaee193f0 R09: 0000000000000000
[   64.150907][ T5016] R10: 0000000001a484bc R11: 0000000000000286 R12: 00007ffeaee1955c
[   64.158870][ T5016] R13: 00007ffeaee19590 R14: 00007ffeaee19570 R15: 000000000000000b
[   64.167012][ T5016]  </TASK>
[pid  5016] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 6
[pid  5016] ioctl(6, FS_IOC_GETVERSION, 0x20000000) = 0
[pid  5016] exit_group(0)               = ?
[pid  5016] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5016, si_uid=0, si_status=0, si_utime=0, si_stime=44 /* 0.44 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./11", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555e64620 /* 4 entries */, 32768) = 112
umount2("./11/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./11/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./11/binderfs")                 = 0
umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./11/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./11/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555e6c660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555e6c660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./11/file0")                     = 0
getdents64(3, 0x555555e64620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./11")                           = 0
mkdir("./12", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e635d0) = 5018
./strace-static-x86_64: Process 5018 attached
[pid  5018] chdir("./12")               = 0
[pid  5018] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5018] setpgid(0, 0)               = 0
[pid  5018] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5018] write(3, "1000", 4)         = 4
[pid  5018] close(3)                    = 0
[pid  5018] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5018] memfd_create("syzkaller", 0) = 3
[pid  5018] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0f62cb9000
[pid  5018] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  5018] munmap(0x7f0f62cb9000, 4194304) = 0
[pid  5018] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5018] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5018] close(3)                    = 0
[pid  5018] mkdir("./file0", 0777)      = 0
[   64.549443][ T5018] loop0: detected capacity change from 0 to 8192
[   64.559022][ T5018] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   64.572070][ T5018] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[   64.581298][ T5018] REISERFS (device loop0): using ordered data mode
[   64.587828][ T5018] reiserfs: using flush barriers
[   64.593315][ T5018] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   64.609762][ T5018] REISERFS (device loop0): checking transaction log (loop0)
[   64.639178][ T5018] REISERFS (device loop0): Using r5 hash to sort names
[pid  5018] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC, "") = 0
[pid  5018] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5018] chdir("./file0")            = 0
[pid  5018] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5018] close(4)                    = 0
[pid  5018] open(NULL, O_RDWR|O_CREAT|O_NOCTTY|O_NONBLOCK|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = -1 EFAULT (Bad address)
[pid  5018] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 4
[pid  5018] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000) = 5
[pid  5018] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<<MAP_HUGE_SHIFT, 5, 0) = 0x20000000
[pid  5018] ftruncate(4, 33587199)      = 0
[pid  5018] ioctl(-1, BTRFS_IOC_SUBVOL_SETFLAGS, 0) = -1 EBADF (Bad file descriptor)
[pid  5018] memfd_create("syzkaller", 0) = 6
[pid  5018] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0f5acb9000
[pid  5018] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  5018] munmap(0x7f0f5acb9000, 4194304) = 0
[pid  5018] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 7
[pid  5018] ioctl(7, LOOP_SET_FD, 6)    = -1 EBUSY (Device or resource busy)
[pid  5018] ioctl(7, LOOP_CLR_FD)       = 0
[   64.646312][ T5018] REISERFS (device loop0): using 3.5.x disk format
[   64.652999][ T5018] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[pid  5018] ioctl(7, LOOP_SET_FD, 6)    = -1 EBUSY (Device or resource busy)
[pid  5018] close(7)                    = 0
[pid  5018] close(6)                    = 0
[pid  5018] mkdir(".", 0777)            = -1 EEXIST (File exists)
[pid  5018] mount(NULL, ".", 0x200000c0, MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_SILENT|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\xee\xa7\x3c\x3c\xa0\x47\x34\x9a\xb6\x6d\x52\x9f\xb1\xe2\xbd\xc6\x18\x75\xc6\xcc\xeb\xea\x30\xba\x1b\x89\x77\x2f\x99\x5e\xa3\xe0\xed\x04\xf9\x86\xb6\x8e\xe6") = -1 EINVAL (Invalid argument)
[   64.731087][ T5018] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "ÿÿÿÿÿÿÿÿî§<< G4š¶mRŸ±â½ÆuÆÌëê0º‰w/™^£àíù†¶Žæ"
[pid  5018] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 6
[pid  5018] ioctl(6, FS_IOC_GETVERSION, 0x20000000) = 0
[pid  5018] exit_group(0)               = ?
[pid  5018] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5018, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=36 /* 0.36 s */} ---
umount2("./12", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555e64620 /* 4 entries */, 32768) = 112
umount2("./12/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./12/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./12/binderfs")                 = 0
umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./12/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./12/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555e6c660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555e6c660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./12/file0")                     = 0
getdents64(3, 0x555555e64620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./12")                           = 0
mkdir("./13", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e635d0) = 5020
./strace-static-x86_64: Process 5020 attached
[pid  5020] chdir("./13")               = 0
[pid  5020] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5020] setpgid(0, 0)               = 0
[pid  5020] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5020] write(3, "1000", 4)         = 4
[pid  5020] close(3)                    = 0
[pid  5020] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5020] memfd_create("syzkaller", 0) = 3
[pid  5020] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0f62cb9000
[pid  5020] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  5020] munmap(0x7f0f62cb9000, 4194304) = 0
[pid  5020] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5020] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5020] close(3)                    = 0
[pid  5020] mkdir("./file0", 0777)      = 0
[   65.118701][ T5020] loop0: detected capacity change from 0 to 8192
[   65.127202][ T5020] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   65.140190][ T5020] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[   65.149381][ T5020] REISERFS (device loop0): using ordered data mode
[   65.155981][ T5020] reiserfs: using flush barriers
[   65.161494][ T5020] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   65.177860][ T5020] REISERFS (device loop0): checking transaction log (loop0)
[   65.206493][ T5020] REISERFS (device loop0): Using r5 hash to sort names
[pid  5020] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC, "") = 0
[pid  5020] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5020] chdir("./file0")            = 0
[pid  5020] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5020] close(4)                    = 0
[pid  5020] open(NULL, O_RDWR|O_CREAT|O_NOCTTY|O_NONBLOCK|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = -1 EFAULT (Bad address)
[pid  5020] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 4
[pid  5020] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000) = 5
[pid  5020] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<<MAP_HUGE_SHIFT, 5, 0) = 0x20000000
[pid  5020] ftruncate(4, 33587199)      = 0
[pid  5020] ioctl(-1, BTRFS_IOC_SUBVOL_SETFLAGS, 0) = -1 EBADF (Bad file descriptor)
[pid  5020] memfd_create("syzkaller", 0) = 6
[pid  5020] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0f5acb9000
[pid  5020] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  5020] munmap(0x7f0f5acb9000, 4194304) = 0
[pid  5020] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 7
[pid  5020] ioctl(7, LOOP_SET_FD, 6)    = -1 EBUSY (Device or resource busy)
[pid  5020] ioctl(7, LOOP_CLR_FD)       = 0
[pid  5020] ioctl(7, LOOP_SET_FD, 6)    = -1 EBUSY (Device or resource busy)
[   65.213374][ T5020] REISERFS (device loop0): using 3.5.x disk format
[   65.220172][ T5020] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[pid  5020] close(7)                    = 0
[pid  5020] close(6)                    = 0
[pid  5020] mkdir(".", 0777)            = -1 EEXIST (File exists)
[pid  5020] mount(NULL, ".", 0x200000c0, MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_SILENT|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\xee\xa7\x3c\x3c\xa0\x47\x34\x9a\xb6\x6d\x52\x9f\xb1\xe2\xbd\xc6\x18\x75\xc6\xcc\xeb\xea\x30\xba\x1b\x89\x77\x2f\x99\x5e\xa3\xe0\xed\x04\xf9\x86\xb6\x8e\xe6") = -1 EINVAL (Invalid argument)
[   65.294710][ T5020] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "ÿÿÿÿÿÿÿÿî§<< G4š¶mRŸ±â½ÆuÆÌëê0º‰w/™^£àíù†¶Žæ"
[pid  5020] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 6
[pid  5020] ioctl(6, FS_IOC_GETVERSION, 0x20000000) = 0
[pid  5020] exit_group(0)               = ?
[pid  5020] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5020, si_uid=0, si_status=0, si_utime=0, si_stime=35 /* 0.35 s */} ---
umount2("./13", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./13", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555e64620 /* 4 entries */, 32768) = 112
umount2("./13/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./13/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./13/binderfs")                 = 0
umount2("./13/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./13/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./13/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./13/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./13/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555e6c660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555e6c660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./13/file0")                     = 0
getdents64(3, 0x555555e64620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./13")                           = 0
mkdir("./14", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e635d0) = 5022
./strace-static-x86_64: Process 5022 attached
[pid  5022] chdir("./14")               = 0
[pid  5022] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5022] setpgid(0, 0)               = 0
[pid  5022] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5022] write(3, "1000", 4)         = 4
[pid  5022] close(3)                    = 0
[pid  5022] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5022] memfd_create("syzkaller", 0) = 3
[pid  5022] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0f62cb9000
[pid  5022] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  5022] munmap(0x7f0f62cb9000, 4194304) = 0
[pid  5022] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5022] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5022] close(3)                    = 0
[pid  5022] mkdir("./file0", 0777)      = 0
[   65.671454][ T5022] loop0: detected capacity change from 0 to 8192
[   65.681057][ T5022] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   65.694188][ T5022] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[   65.703361][ T5022] REISERFS (device loop0): using ordered data mode
[   65.709952][ T5022] reiserfs: using flush barriers
[   65.715466][ T5022] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   65.731814][ T5022] REISERFS (device loop0): checking transaction log (loop0)
[   65.760407][ T5022] REISERFS (device loop0): Using r5 hash to sort names
[pid  5022] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC, "") = 0
[pid  5022] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5022] chdir("./file0")            = 0
[pid  5022] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5022] close(4)                    = 0
[pid  5022] open(NULL, O_RDWR|O_CREAT|O_NOCTTY|O_NONBLOCK|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = -1 EFAULT (Bad address)
[   65.767326][ T5022] REISERFS (device loop0): using 3.5.x disk format
[   65.774127][ T5022] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[   65.799148][   T27] kauditd_printk_skb: 11 callbacks suppressed
[pid  5022] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 4
[pid  5022] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000) = 5
[pid  5022] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<<MAP_HUGE_SHIFT, 5, 0) = 0x20000000
[pid  5022] ftruncate(4, 33587199)      = 0
[pid  5022] ioctl(-1, BTRFS_IOC_SUBVOL_SETFLAGS, 0) = -1 EBADF (Bad file descriptor)
[pid  5022] memfd_create("syzkaller", 0) = 6
[pid  5022] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0f5acb9000
[pid  5022] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  5022] munmap(0x7f0f5acb9000, 4194304) = 0
[pid  5022] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 7
[pid  5022] ioctl(7, LOOP_SET_FD, 6)    = -1 EBUSY (Device or resource busy)
[pid  5022] ioctl(7, LOOP_CLR_FD)       = 0
[pid  5022] ioctl(7, LOOP_SET_FD, 6)    = -1 EBUSY (Device or resource busy)
[pid  5022] close(7)                    = 0
[pid  5022] close(6)                    = 0
[pid  5022] mkdir(".", 0777)            = -1 EEXIST (File exists)
[   65.799157][   T27] audit: type=1800 audit(1686673033.444:44): pid=5022 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor909" name="bus" dev="loop0" ino=2 res=0 errno=0
[   65.825614][   T27] audit: type=1800 audit(1686673033.444:45): pid=5022 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor909" name="bus" dev="loop0" ino=2 res=0 errno=0
[pid  5022] mount(NULL, ".", 0x200000c0, MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_SILENT|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\xee\xa7\x3c\x3c\xa0\x47\x34\x9a\xb6\x6d\x52\x9f\xb1\xe2\xbd\xc6\x18\x75\xc6\xcc\xeb\xea\x30\xba\x1b\x89\x77\x2f\x99\x5e\xa3\xe0\xed\x04\xf9\x86\xb6\x8e\xe6") = -1 EINVAL (Invalid argument)
[   65.860594][   T27] audit: type=1800 audit(1686673033.444:46): pid=5022 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor909" name="bus" dev="loop0" ino=2 res=0 errno=0
[   65.867323][ T5022] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "ÿÿÿÿÿÿÿÿî§<< G4š¶mRŸ±â½ÆuÆÌëê0º‰w/™^£àíù†¶Žæ"
[pid  5022] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 6
[pid  5022] ioctl(6, FS_IOC_GETVERSION, 0x20000000) = 0
[pid  5022] exit_group(0)               = ?
[pid  5022] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5022, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=37 /* 0.37 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./14", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./14", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555e64620 /* 4 entries */, 32768) = 112
umount2("./14/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./14/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./14/binderfs")                 = 0
umount2("./14/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./14/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./14/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./14/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./14/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555e6c660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555e6c660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./14/file0")                     = 0
getdents64(3, 0x555555e64620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./14")                           = 0
mkdir("./15", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e635d0) = 5024
./strace-static-x86_64: Process 5024 attached
[pid  5024] chdir("./15")               = 0
[pid  5024] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5024] setpgid(0, 0)               = 0
[pid  5024] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5024] write(3, "1000", 4)         = 4
[pid  5024] close(3)                    = 0
[pid  5024] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5024] memfd_create("syzkaller", 0) = 3
[pid  5024] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0f62cb9000
[pid  5024] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  5024] munmap(0x7f0f62cb9000, 4194304) = 0
[pid  5024] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5024] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5024] close(3)                    = 0
[pid  5024] mkdir("./file0", 0777)      = 0
[   66.271815][ T5024] loop0: detected capacity change from 0 to 8192
[   66.281326][ T5024] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   66.294410][ T5024] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[   66.303796][ T5024] REISERFS (device loop0): using ordered data mode
[   66.313009][ T5024] reiserfs: using flush barriers
[   66.318802][ T5024] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   66.335245][ T5024] REISERFS (device loop0): checking transaction log (loop0)
[pid  5024] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC, "") = 0
[pid  5024] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5024] chdir("./file0")            = 0
[pid  5024] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5024] close(4)                    = 0
[pid  5024] open(NULL, O_RDWR|O_CREAT|O_NOCTTY|O_NONBLOCK|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = -1 EFAULT (Bad address)
[pid  5024] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 4
[pid  5024] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000) = 5
[pid  5024] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<<MAP_HUGE_SHIFT, 5, 0) = 0x20000000
[pid  5024] ftruncate(4, 33587199)      = 0
[pid  5024] ioctl(-1, BTRFS_IOC_SUBVOL_SETFLAGS, 0) = -1 EBADF (Bad file descriptor)
[pid  5024] memfd_create("syzkaller", 0) = 6
[pid  5024] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0f5acb9000
[   66.363232][ T5024] REISERFS (device loop0): Using r5 hash to sort names
[   66.370129][ T5024] REISERFS (device loop0): using 3.5.x disk format
[   66.376907][ T5024] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[pid  5024] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  5024] munmap(0x7f0f5acb9000, 4194304) = 0
[pid  5024] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 7
[pid  5024] ioctl(7, LOOP_SET_FD, 6)    = -1 EBUSY (Device or resource busy)
[pid  5024] ioctl(7, LOOP_CLR_FD)       = 0
[pid  5024] ioctl(7, LOOP_SET_FD, 6)    = -1 EBUSY (Device or resource busy)
[pid  5024] close(7)                    = 0
[pid  5024] close(6)                    = 0
[pid  5024] mkdir(".", 0777)            = -1 EEXIST (File exists)
[   66.397648][   T27] audit: type=1800 audit(1686673034.044:47): pid=5024 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor909" name="bus" dev="loop0" ino=2 res=0 errno=0
[   66.418274][   T27] audit: type=1800 audit(1686673034.044:48): pid=5024 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor909" name="bus" dev="loop0" ino=2 res=0 errno=0
[   66.438844][   T27] audit: type=1800 audit(1686673034.044:49): pid=5024 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor909" name="bus" dev="loop0" ino=2 res=0 errno=0
[pid  5024] mount(NULL, ".", 0x200000c0, MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_SILENT|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\xee\xa7\x3c\x3c\xa0\x47\x34\x9a\xb6\x6d\x52\x9f\xb1\xe2\xbd\xc6\x18\x75\xc6\xcc\xeb\xea\x30\xba\x1b\x89\x77\x2f\x99\x5e\xa3\xe0\xed\x04\xf9\x86\xb6\x8e\xe6") = -1 EINVAL (Invalid argument)
[   66.485894][ T5024] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "ÿÿÿÿÿÿÿÿî§<< G4š¶mRŸ±â½ÆuÆÌëê0º‰w/™^£àíù†¶Žæ"
[pid  5024] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 6
[pid  5024] ioctl(6, FS_IOC_GETVERSION, 0x20000000) = 0
[pid  5024] exit_group(0)               = ?
[pid  5024] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5024, si_uid=0, si_status=0, si_utime=0, si_stime=40 /* 0.40 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./15", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./15", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555e64620 /* 4 entries */, 32768) = 112
umount2("./15/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./15/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./15/binderfs")                 = 0
umount2("./15/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./15/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./15/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./15/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./15/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555e6c660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555e6c660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./15/file0")                     = 0
getdents64(3, 0x555555e64620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./15")                           = 0
mkdir("./16", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e635d0) = 5026
./strace-static-x86_64: Process 5026 attached
[pid  5026] chdir("./16")               = 0
[pid  5026] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5026] setpgid(0, 0)               = 0
[pid  5026] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5026] write(3, "1000", 4)         = 4
[pid  5026] close(3)                    = 0
[pid  5026] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5026] memfd_create("syzkaller", 0) = 3
[pid  5026] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0f62cb9000
[pid  5026] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  5026] munmap(0x7f0f62cb9000, 4194304) = 0
[pid  5026] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5026] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5026] close(3)                    = 0
[pid  5026] mkdir("./file0", 0777)      = 0
[   66.885274][ T5026] loop0: detected capacity change from 0 to 8192
[   66.894889][ T5026] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   66.908790][ T5026] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[   66.918042][ T5026] REISERFS (device loop0): using ordered data mode
[   66.924561][ T5026] reiserfs: using flush barriers
[   66.930284][ T5026] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   66.946628][ T5026] REISERFS (device loop0): checking transaction log (loop0)
[   66.974084][ T5026] REISERFS (device loop0): Using r5 hash to sort names
[pid  5026] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC, "") = 0
[pid  5026] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5026] chdir("./file0")            = 0
[pid  5026] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5026] close(4)                    = 0
[pid  5026] open(NULL, O_RDWR|O_CREAT|O_NOCTTY|O_NONBLOCK|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = -1 EFAULT (Bad address)
[pid  5026] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 4
[pid  5026] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000) = 5
[pid  5026] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<<MAP_HUGE_SHIFT, 5, 0) = 0x20000000
[pid  5026] ftruncate(4, 33587199)      = 0
[pid  5026] ioctl(-1, BTRFS_IOC_SUBVOL_SETFLAGS, 0) = -1 EBADF (Bad file descriptor)
[pid  5026] memfd_create("syzkaller", 0) = 6
[pid  5026] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0f5acb9000
[   66.980955][ T5026] REISERFS (device loop0): using 3.5.x disk format
[   66.987708][ T5026] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[   67.013855][   T27] audit: type=1800 audit(1686673034.654:50): pid=5026 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor909" name="bus" dev="loop0" ino=2 res=0 errno=0
[pid  5026] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  5026] munmap(0x7f0f5acb9000, 4194304) = 0
[pid  5026] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 7
[pid  5026] ioctl(7, LOOP_SET_FD, 6)    = -1 EBUSY (Device or resource busy)
[pid  5026] ioctl(7, LOOP_CLR_FD)       = 0
[pid  5026] ioctl(7, LOOP_SET_FD, 6)    = -1 EBUSY (Device or resource busy)
[pid  5026] close(7)                    = 0
[pid  5026] close(6)                    = 0
[pid  5026] mkdir(".", 0777)            = -1 EEXIST (File exists)
[   67.034413][   T27] audit: type=1800 audit(1686673034.674:51): pid=5026 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor909" name="bus" dev="loop0" ino=2 res=0 errno=0
[   67.054503][   T27] audit: type=1800 audit(1686673034.674:52): pid=5026 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor909" name="bus" dev="loop0" ino=2 res=0 errno=0
[pid  5026] mount(NULL, ".", 0x200000c0, MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_SILENT|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\xee\xa7\x3c\x3c\xa0\x47\x34\x9a\xb6\x6d\x52\x9f\xb1\xe2\xbd\xc6\x18\x75\xc6\xcc\xeb\xea\x30\xba\x1b\x89\x77\x2f\x99\x5e\xa3\xe0\xed\x04\xf9\x86\xb6\x8e\xe6") = -1 EINVAL (Invalid argument)
[   67.100160][ T5026] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "ÿÿÿÿÿÿÿÿî§<< G4š¶mRŸ±â½ÆuÆÌëê0º‰w/™^£àíù†¶Žæ"
[pid  5026] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 6
[pid  5026] ioctl(6, FS_IOC_GETVERSION, 0x20000000) = 0
[pid  5026] exit_group(0)               = ?
[pid  5026] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5026, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=38 /* 0.38 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./16", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./16", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555e64620 /* 4 entries */, 32768) = 112
umount2("./16/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./16/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./16/binderfs")                 = 0
umount2("./16/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./16/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./16/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./16/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./16/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555e6c660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555e6c660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./16/file0")                     = 0
getdents64(3, 0x555555e64620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./16")                           = 0
mkdir("./17", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e635d0) = 5028
./strace-static-x86_64: Process 5028 attached
[pid  5028] chdir("./17")               = 0
[pid  5028] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5028] setpgid(0, 0)               = 0
[pid  5028] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5028] write(3, "1000", 4)         = 4
[pid  5028] close(3)                    = 0
[pid  5028] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5028] memfd_create("syzkaller", 0) = 3
[pid  5028] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0f62cb9000
[pid  5028] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  5028] munmap(0x7f0f62cb9000, 4194304) = 0
[pid  5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5028] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5028] close(3)                    = 0
[pid  5028] mkdir("./file0", 0777)      = 0
[   67.506813][ T5028] loop0: detected capacity change from 0 to 8192
[   67.516394][ T5028] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   67.529546][ T5028] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[   67.538848][ T5028] REISERFS (device loop0): using ordered data mode
[   67.545387][ T5028] reiserfs: using flush barriers
[   67.550874][ T5028] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   67.567326][ T5028] REISERFS (device loop0): checking transaction log (loop0)
[   67.594363][ T5028] REISERFS (device loop0): Using r5 hash to sort names
[pid  5028] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC, "") = 0
[pid  5028] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5028] chdir("./file0")            = 0
[pid  5028] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5028] close(4)                    = 0
[pid  5028] open(NULL, O_RDWR|O_CREAT|O_NOCTTY|O_NONBLOCK|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = -1 EFAULT (Bad address)
[pid  5028] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 4
[pid  5028] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000) = 5
[pid  5028] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<<MAP_HUGE_SHIFT, 5, 0) = 0x20000000
[pid  5028] ftruncate(4, 33587199)      = 0
[pid  5028] ioctl(-1, BTRFS_IOC_SUBVOL_SETFLAGS, 0) = -1 EBADF (Bad file descriptor)
[pid  5028] memfd_create("syzkaller", 0) = 6
[pid  5028] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0f5acb9000
[pid  5028] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  5028] munmap(0x7f0f5acb9000, 4194304) = 0
[pid  5028] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 7
[pid  5028] ioctl(7, LOOP_SET_FD, 6)    = -1 EBUSY (Device or resource busy)
[pid  5028] ioctl(7, LOOP_CLR_FD)       = 0
[pid  5028] ioctl(7, LOOP_SET_FD, 6)    = -1 EBUSY (Device or resource busy)
[pid  5028] close(7)                    = 0
[   67.601247][ T5028] REISERFS (device loop0): using 3.5.x disk format
[   67.608130][ T5028] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[   67.634079][   T27] audit: type=1800 audit(1686673035.284:53): pid=5028 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor909" name="bus" dev="loop0" ino=2 res=0 errno=0
[pid  5028] close(6)                    = 0
[pid  5028] mkdir(".", 0777)            = -1 EEXIST (File exists)
[pid  5028] mount(NULL, ".", 0x200000c0, MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_SILENT|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\xee\xa7\x3c\x3c\xa0\x47\x34\x9a\xb6\x6d\x52\x9f\xb1\xe2\xbd\xc6\x18\x75\xc6\xcc\xeb\xea\x30\xba\x1b\x89\x77\x2f\x99\x5e\xa3\xe0\xed\x04\xf9\x86\xb6\x8e\xe6") = -1 EINVAL (Invalid argument)
[   67.699483][ T5028] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "ÿÿÿÿÿÿÿÿî§<< G4š¶mRŸ±â½ÆuÆÌëê0º‰w/™^£àíù†¶Žæ"
[pid  5028] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 6
[pid  5028] ioctl(6, FS_IOC_GETVERSION, 0x20000000) = 0
[pid  5028] exit_group(0)               = ?
[pid  5028] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5028, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=40 /* 0.40 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./17", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./17", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555e64620 /* 4 entries */, 32768) = 112
umount2("./17/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./17/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./17/binderfs")                 = 0
umount2("./17/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./17/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./17/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./17/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./17/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555e6c660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555e6c660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./17/file0")                     = 0
getdents64(3, 0x555555e64620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./17")                           = 0
mkdir("./18", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e635d0) = 5030
./strace-static-x86_64: Process 5030 attached
[pid  5030] chdir("./18")               = 0
[pid  5030] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5030] setpgid(0, 0)               = 0
[pid  5030] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5030] write(3, "1000", 4)         = 4
[pid  5030] close(3)                    = 0
[pid  5030] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5030] memfd_create("syzkaller", 0) = 3
[pid  5030] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0f62cb9000
[pid  5030] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  5030] munmap(0x7f0f62cb9000, 4194304) = 0
[pid  5030] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5030] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5030] close(3)                    = 0
[pid  5030] mkdir("./file0", 0777)      = 0
[   68.108998][ T5030] loop0: detected capacity change from 0 to 8192
[   68.118348][ T5030] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   68.131521][ T5030] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[   68.140879][ T5030] REISERFS (device loop0): using ordered data mode
[   68.147484][ T5030] reiserfs: using flush barriers
[   68.153039][ T5030] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   68.169535][ T5030] REISERFS (device loop0): checking transaction log (loop0)
[   68.197886][ T5030] REISERFS (device loop0): Using r5 hash to sort names
[pid  5030] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC, "") = 0
[pid  5030] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5030] chdir("./file0")            = 0
[pid  5030] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5030] close(4)                    = 0
[pid  5030] open(NULL, O_RDWR|O_CREAT|O_NOCTTY|O_NONBLOCK|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = -1 EFAULT (Bad address)
[pid  5030] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 4
[pid  5030] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000) = 5
[pid  5030] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<<MAP_HUGE_SHIFT, 5, 0) = 0x20000000
[pid  5030] ftruncate(4, 33587199)      = 0
[pid  5030] ioctl(-1, BTRFS_IOC_SUBVOL_SETFLAGS, 0) = -1 EBADF (Bad file descriptor)
[pid  5030] memfd_create("syzkaller", 0) = 6
[pid  5030] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0f5acb9000
[pid  5030] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  5030] munmap(0x7f0f5acb9000, 4194304) = 0
[pid  5030] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 7
[pid  5030] ioctl(7, LOOP_SET_FD, 6)    = -1 EBUSY (Device or resource busy)
[pid  5030] ioctl(7, LOOP_CLR_FD)       = 0
[pid  5030] ioctl(7, LOOP_SET_FD, 6)    = -1 EBUSY (Device or resource busy)
[   68.204847][ T5030] REISERFS (device loop0): using 3.5.x disk format
[   68.212068][ T5030] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[pid  5030] close(7)                    = 0
[pid  5030] close(6)                    = 0
[pid  5030] mkdir(".", 0777)            = -1 EEXIST (File exists)
[pid  5030] mount(NULL, ".", 0x200000c0, MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_SILENT|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\xee\xa7\x3c\x3c\xa0\x47\x34\x9a\xb6\x6d\x52\x9f\xb1\xe2\xbd\xc6\x18\x75\xc6\xcc\xeb\xea\x30\xba\x1b\x89\x77\x2f\x99\x5e\xa3\xe0\xed\x04\xf9\x86\xb6\x8e\xe6") = -1 EINVAL (Invalid argument)
[   68.285648][ T5030] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "ÿÿÿÿÿÿÿÿî§<< G4š¶mRŸ±â½ÆuÆÌëê0º‰w/™^£àíù†¶Žæ"
[pid  5030] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 6
[pid  5030] ioctl(6, FS_IOC_GETVERSION, 0x20000000) = 0
[pid  5030] exit_group(0)               = ?
[pid  5030] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5030, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=36 /* 0.36 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./18", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./18", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555e64620 /* 4 entries */, 32768) = 112
umount2("./18/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./18/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./18/binderfs")                 = 0
umount2("./18/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./18/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./18/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./18/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./18/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555e6c660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555e6c660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./18/file0")                     = 0
getdents64(3, 0x555555e64620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./18")                           = 0
mkdir("./19", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e635d0) = 5032
./strace-static-x86_64: Process 5032 attached
[pid  5032] chdir("./19")               = 0
[pid  5032] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5032] setpgid(0, 0)               = 0
[pid  5032] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5032] write(3, "1000", 4)         = 4
[pid  5032] close(3)                    = 0
[pid  5032] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5032] memfd_create("syzkaller", 0) = 3
[pid  5032] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0f62cb9000
[pid  5032] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  5032] munmap(0x7f0f62cb9000, 4194304) = 0
[pid  5032] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5032] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5032] close(3)                    = 0
[pid  5032] mkdir("./file0", 0777)      = 0
[   68.658430][ T5032] loop0: detected capacity change from 0 to 8192
[   68.666903][ T5032] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   68.680001][ T5032] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[   68.689216][ T5032] REISERFS (device loop0): using ordered data mode
[   68.695776][ T5032] reiserfs: using flush barriers
[   68.701289][ T5032] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   68.717718][ T5032] REISERFS (device loop0): checking transaction log (loop0)
[   68.748139][ T5032] REISERFS (device loop0): Using r5 hash to sort names
[pid  5032] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC, "") = 0
[pid  5032] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5032] chdir("./file0")            = 0
[pid  5032] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5032] close(4)                    = 0
[pid  5032] open(NULL, O_RDWR|O_CREAT|O_NOCTTY|O_NONBLOCK|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = -1 EFAULT (Bad address)
[pid  5032] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 4
[pid  5032] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000) = 5
[pid  5032] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<<MAP_HUGE_SHIFT, 5, 0) = 0x20000000
[pid  5032] ftruncate(4, 33587199)      = 0
[pid  5032] ioctl(-1, BTRFS_IOC_SUBVOL_SETFLAGS, 0) = -1 EBADF (Bad file descriptor)
[pid  5032] memfd_create("syzkaller", 0) = 6
[pid  5032] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0f5acb9000
[pid  5032] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  5032] munmap(0x7f0f5acb9000, 4194304) = 0
[pid  5032] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 7
[pid  5032] ioctl(7, LOOP_SET_FD, 6)    = -1 EBUSY (Device or resource busy)
[pid  5032] ioctl(7, LOOP_CLR_FD)       = 0
[pid  5032] ioctl(7, LOOP_SET_FD, 6)    = -1 EBUSY (Device or resource busy)
[pid  5032] close(7)                    = 0
[   68.755186][ T5032] REISERFS (device loop0): using 3.5.x disk format
[   68.761839][ T5032] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[pid  5032] close(6)                    = 0
[pid  5032] mkdir(".", 0777)            = -1 EEXIST (File exists)
[pid  5032] mount(NULL, ".", 0x200000c0, MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_SILENT|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\xee\xa7\x3c\x3c\xa0\x47\x34\x9a\xb6\x6d\x52\x9f\xb1\xe2\xbd\xc6\x18\x75\xc6\xcc\xeb\xea\x30\xba\x1b\x89\x77\x2f\x99\x5e\xa3\xe0\xed\x04\xf9\x86\xb6\x8e\xe6") = -1 EINVAL (Invalid argument)
[   68.828701][ T5032] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "ÿÿÿÿÿÿÿÿî§<< G4š¶mRŸ±â½ÆuÆÌëê0º‰w/™^£àíù†¶Žæ"
[pid  5032] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 6
[pid  5032] ioctl(6, FS_IOC_GETVERSION, 0x20000000) = 0
[pid  5032] exit_group(0)               = ?
[pid  5032] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5032, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=36 /* 0.36 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./19", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./19", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555e64620 /* 4 entries */, 32768) = 112
umount2("./19/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./19/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./19/binderfs")                 = 0
umount2("./19/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./19/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./19/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./19/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./19/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555e6c660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555e6c660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./19/file0")                     = 0
getdents64(3, 0x555555e64620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./19")                           = 0
mkdir("./20", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e635d0) = 5034
./strace-static-x86_64: Process 5034 attached
[pid  5034] chdir("./20")               = 0
[pid  5034] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5034] setpgid(0, 0)               = 0
[pid  5034] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5034] write(3, "1000", 4)         = 4
[pid  5034] close(3)                    = 0
[pid  5034] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5034] memfd_create("syzkaller", 0) = 3
[pid  5034] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0f62cb9000
[pid  5034] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  5034] munmap(0x7f0f62cb9000, 4194304) = 0
[pid  5034] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5034] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5034] close(3)                    = 0
[pid  5034] mkdir("./file0", 0777)      = 0
[   69.208073][ T5034] loop0: detected capacity change from 0 to 8192
[   69.217512][ T5034] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   69.230585][ T5034] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[   69.239784][ T5034] REISERFS (device loop0): using ordered data mode
[   69.246297][ T5034] reiserfs: using flush barriers
[   69.251792][ T5034] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   69.268151][ T5034] REISERFS (device loop0): checking transaction log (loop0)
[   69.297034][ T5034] REISERFS (device loop0): Using r5 hash to sort names
[pid  5034] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC, "") = 0
[pid  5034] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5034] chdir("./file0")            = 0
[pid  5034] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5034] close(4)                    = 0
[pid  5034] open(NULL, O_RDWR|O_CREAT|O_NOCTTY|O_NONBLOCK|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = -1 EFAULT (Bad address)
[pid  5034] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 4
[pid  5034] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000) = 5
[pid  5034] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<<MAP_HUGE_SHIFT, 5, 0) = 0x20000000
[pid  5034] ftruncate(4, 33587199)      = 0
[pid  5034] ioctl(-1, BTRFS_IOC_SUBVOL_SETFLAGS, 0) = -1 EBADF (Bad file descriptor)
[pid  5034] memfd_create("syzkaller", 0) = 6
[pid  5034] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0f5acb9000
[pid  5034] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[   69.303972][ T5034] REISERFS (device loop0): using 3.5.x disk format
[   69.310646][ T5034] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[pid  5034] munmap(0x7f0f5acb9000, 4194304) = 0
[pid  5034] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 7
[pid  5034] ioctl(7, LOOP_SET_FD, 6)    = -1 EBUSY (Device or resource busy)
[pid  5034] ioctl(7, LOOP_CLR_FD)       = 0
[pid  5034] ioctl(7, LOOP_SET_FD, 6)    = -1 EBUSY (Device or resource busy)
[pid  5034] close(7)                    = 0
[pid  5034] close(6)                    = 0
[pid  5034] mkdir(".", 0777)            = -1 EEXIST (File exists)
[pid  5034] mount(NULL, ".", 0x200000c0, MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_SILENT|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\xee\xa7\x3c\x3c\xa0\x47\x34\x9a\xb6\x6d\x52\x9f\xb1\xe2\xbd\xc6\x18\x75\xc6\xcc\xeb\xea\x30\xba\x1b\x89\x77\x2f\x99\x5e\xa3\xe0\xed\x04\xf9\x86\xb6\x8e\xe6") = -1 EINVAL (Invalid argument)
[   69.392470][ T5034] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "ÿÿÿÿÿÿÿÿî§<< G4š¶mRŸ±â½ÆuÆÌëê0º‰w/™^£àíù†¶Žæ"
[pid  5034] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 6
[pid  5034] ioctl(6, FS_IOC_GETVERSION, 0x20000000) = 0
[pid  5034] exit_group(0)               = ?
[pid  5034] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5034, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=37 /* 0.37 s */} ---
umount2("./20", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./20", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555e64620 /* 4 entries */, 32768) = 112
umount2("./20/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./20/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./20/binderfs")                 = 0
umount2("./20/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./20/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./20/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./20/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./20/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555e6c660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555e6c660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./20/file0")                     = 0
getdents64(3, 0x555555e64620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./20")                           = 0
mkdir("./21", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e635d0) = 5036
./strace-static-x86_64: Process 5036 attached
[pid  5036] chdir("./21")               = 0
[pid  5036] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5036] setpgid(0, 0)               = 0
[pid  5036] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5036] write(3, "1000", 4)         = 4
[pid  5036] close(3)                    = 0
[pid  5036] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5036] memfd_create("syzkaller", 0) = 3
[pid  5036] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0f62cb9000
[pid  5036] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  5036] munmap(0x7f0f62cb9000, 4194304) = 0
[pid  5036] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5036] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5036] close(3)                    = 0
[pid  5036] mkdir("./file0", 0777)      = 0
[   69.768513][ T5036] loop0: detected capacity change from 0 to 8192
[   69.778222][ T5036] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   69.791300][ T5036] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[   69.800507][ T5036] REISERFS (device loop0): using ordered data mode
[   69.807072][ T5036] reiserfs: using flush barriers
[   69.812647][ T5036] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   69.829216][ T5036] REISERFS (device loop0): checking transaction log (loop0)
[   69.856764][ T5036] REISERFS (device loop0): Using r5 hash to sort names
[pid  5036] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC, "") = 0
[pid  5036] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5036] chdir("./file0")            = 0
[pid  5036] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5036] close(4)                    = 0
[pid  5036] open(NULL, O_RDWR|O_CREAT|O_NOCTTY|O_NONBLOCK|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = -1 EFAULT (Bad address)
[pid  5036] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 4
[pid  5036] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000) = 5
[pid  5036] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<<MAP_HUGE_SHIFT, 5, 0) = 0x20000000
[pid  5036] ftruncate(4, 33587199)      = 0
[pid  5036] ioctl(-1, BTRFS_IOC_SUBVOL_SETFLAGS, 0) = -1 EBADF (Bad file descriptor)
[pid  5036] memfd_create("syzkaller", 0) = 6
[pid  5036] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0f5acb9000
[   69.863642][ T5036] REISERFS (device loop0): using 3.5.x disk format
[   69.870424][ T5036] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[pid  5036] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  5036] munmap(0x7f0f5acb9000, 4194304) = 0
[pid  5036] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 7
[pid  5036] ioctl(7, LOOP_SET_FD, 6)    = -1 EBUSY (Device or resource busy)
[pid  5036] ioctl(7, LOOP_CLR_FD)       = 0
[pid  5036] ioctl(7, LOOP_SET_FD, 6)    = -1 EBUSY (Device or resource busy)
[pid  5036] close(7)                    = 0
[pid  5036] close(6)                    = 0
[pid  5036] mkdir(".", 0777)            = -1 EEXIST (File exists)
[pid  5036] mount(NULL, ".", 0x200000c0, MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_SILENT|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\xee\xa7\x3c\x3c\xa0\x47\x34\x9a\xb6\x6d\x52\x9f\xb1\xe2\xbd\xc6\x18\x75\xc6\xcc\xeb\xea\x30\xba\x1b\x89\x77\x2f\x99\x5e\xa3\xe0\xed\x04\xf9\x86\xb6\x8e\xe6") = -1 EINVAL (Invalid argument)
[   69.959534][ T5036] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "ÿÿÿÿÿÿÿÿî§<< G4š¶mRŸ±â½ÆuÆÌëê0º‰w/™^£àíù†¶Žæ"
[pid  5036] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 6
[pid  5036] ioctl(6, FS_IOC_GETVERSION, 0x20000000) = 0
[pid  5036] exit_group(0)               = ?
[pid  5036] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5036, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=39 /* 0.39 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./21", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./21", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555e64620 /* 4 entries */, 32768) = 112
umount2("./21/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./21/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./21/binderfs")                 = 0
umount2("./21/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./21/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./21/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./21/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./21/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555e6c660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555e6c660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./21/file0")                     = 0
getdents64(3, 0x555555e64620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./21")                           = 0
mkdir("./22", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e635d0) = 5038
./strace-static-x86_64: Process 5038 attached
[pid  5038] chdir("./22")               = 0
[pid  5038] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5038] setpgid(0, 0)               = 0
[pid  5038] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5038] write(3, "1000", 4)         = 4
[pid  5038] close(3)                    = 0
[pid  5038] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5038] memfd_create("syzkaller", 0) = 3
[pid  5038] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0f62cb9000
[pid  5038] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  5038] munmap(0x7f0f62cb9000, 4194304) = 0
[pid  5038] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5038] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5038] close(3)                    = 0
[pid  5038] mkdir("./file0", 0777)      = 0
[   70.335129][ T5038] loop0: detected capacity change from 0 to 8192
[   70.343665][ T5038] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   70.356660][ T5038] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[   70.366027][ T5038] REISERFS (device loop0): using ordered data mode
[   70.372536][ T5038] reiserfs: using flush barriers
[   70.378168][ T5038] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   70.394519][ T5038] REISERFS (device loop0): checking transaction log (loop0)
[   70.423728][ T5038] REISERFS (device loop0): Using r5 hash to sort names
[pid  5038] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC, "") = 0
[pid  5038] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5038] chdir("./file0")            = 0
[pid  5038] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5038] close(4)                    = 0
[pid  5038] open(NULL, O_RDWR|O_CREAT|O_NOCTTY|O_NONBLOCK|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = -1 EFAULT (Bad address)
[pid  5038] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 4
[pid  5038] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000) = 5
[pid  5038] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<<MAP_HUGE_SHIFT, 5, 0) = 0x20000000
[pid  5038] ftruncate(4, 33587199)      = 0
[pid  5038] ioctl(-1, BTRFS_IOC_SUBVOL_SETFLAGS, 0) = -1 EBADF (Bad file descriptor)
[pid  5038] memfd_create("syzkaller", 0) = 6
[pid  5038] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0f5acb9000
[pid  5038] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  5038] munmap(0x7f0f5acb9000, 4194304) = 0
[pid  5038] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 7
[pid  5038] ioctl(7, LOOP_SET_FD, 6)    = -1 EBUSY (Device or resource busy)
[pid  5038] ioctl(7, LOOP_CLR_FD)       = 0
[   70.430644][ T5038] REISERFS (device loop0): using 3.5.x disk format
[   70.437435][ T5038] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[pid  5038] ioctl(7, LOOP_SET_FD, 6)    = -1 EBUSY (Device or resource busy)
[pid  5038] close(7)                    = 0
[pid  5038] close(6)                    = 0
[pid  5038] mkdir(".", 0777)            = -1 EEXIST (File exists)
[pid  5038] mount(NULL, ".", 0x200000c0, MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_SILENT|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\xee\xa7\x3c\x3c\xa0\x47\x34\x9a\xb6\x6d\x52\x9f\xb1\xe2\xbd\xc6\x18\x75\xc6\xcc\xeb\xea\x30\xba\x1b\x89\x77\x2f\x99\x5e\xa3\xe0\xed\x04\xf9\x86\xb6\x8e\xe6") = -1 EINVAL (Invalid argument)
[   70.515974][ T5038] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "ÿÿÿÿÿÿÿÿî§<< G4š¶mRŸ±â½ÆuÆÌëê0º‰w/™^£àíù†¶Žæ"
[pid  5038] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 6
[pid  5038] ioctl(6, FS_IOC_GETVERSION, 0x20000000) = 0
[pid  5038] exit_group(0)               = ?
[pid  5038] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5038, si_uid=0, si_status=0, si_utime=0, si_stime=39 /* 0.39 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./22", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./22", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555e64620 /* 4 entries */, 32768) = 112
umount2("./22/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./22/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./22/binderfs")                 = 0
umount2("./22/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./22/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./22/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./22/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./22/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555e6c660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555e6c660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./22/file0")                     = 0
getdents64(3, 0x555555e64620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./22")                           = 0
mkdir("./23", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e635d0) = 5040
./strace-static-x86_64: Process 5040 attached
[pid  5040] chdir("./23")               = 0
[pid  5040] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5040] setpgid(0, 0)               = 0
[pid  5040] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5040] write(3, "1000", 4)         = 4
[pid  5040] close(3)                    = 0
[pid  5040] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5040] memfd_create("syzkaller", 0) = 3
[pid  5040] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0f62cb9000
[pid  5040] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  5040] munmap(0x7f0f62cb9000, 4194304) = 0
[pid  5040] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5040] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5040] close(3)                    = 0
[pid  5040] mkdir("./file0", 0777)      = 0
[   70.887311][ T5040] loop0: detected capacity change from 0 to 8192
[   70.895484][ T5040] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   70.908562][ T5040] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[   70.917752][ T5040] REISERFS (device loop0): using ordered data mode
[   70.924279][ T5040] reiserfs: using flush barriers
[   70.929828][ T5040] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   70.946200][ T5040] REISERFS (device loop0): checking transaction log (loop0)
[   70.974334][ T5040] REISERFS (device loop0): Using r5 hash to sort names
[   70.981467][ T5040] REISERFS (device loop0): using 3.5.x disk format
[pid  5040] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC, "") = 0
[pid  5040] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5040] chdir("./file0")            = 0
[pid  5040] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5040] close(4)                    = 0
[pid  5040] open(NULL, O_RDWR|O_CREAT|O_NOCTTY|O_NONBLOCK|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = -1 EFAULT (Bad address)
[pid  5040] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 4
[pid  5040] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000) = 5
[pid  5040] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<<MAP_HUGE_SHIFT, 5, 0) = 0x20000000
[   70.988517][ T5040] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[   71.005898][   T27] kauditd_printk_skb: 17 callbacks suppressed
[   71.005911][   T27] audit: type=1800 audit(1686673038.654:71): pid=5040 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor909" name="bus" dev="loop0" ino=2 res=0 errno=0
[pid  5040] ftruncate(4, 33587199)      = 0
[pid  5040] ioctl(-1, BTRFS_IOC_SUBVOL_SETFLAGS, 0) = -1 EBADF (Bad file descriptor)
[pid  5040] memfd_create("syzkaller", 0) = 6
[pid  5040] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0f5acb9000
[pid  5040] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  5040] munmap(0x7f0f5acb9000, 4194304) = 0
[pid  5040] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 7
[pid  5040] ioctl(7, LOOP_SET_FD, 6)    = -1 EBUSY (Device or resource busy)
[pid  5040] ioctl(7, LOOP_CLR_FD)       = 0
[pid  5040] ioctl(7, LOOP_SET_FD, 6)    = -1 EBUSY (Device or resource busy)
[pid  5040] close(7)                    = 0
[pid  5040] close(6)                    = 0
[pid  5040] mkdir(".", 0777)            = -1 EEXIST (File exists)
[   71.033092][   T27] audit: type=1800 audit(1686673038.664:72): pid=5040 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor909" name="bus" dev="loop0" ino=2 res=0 errno=0
[   71.053566][   T27] audit: type=1800 audit(1686673038.664:73): pid=5040 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor909" name="bus" dev="loop0" ino=2 res=0 errno=0
[pid  5040] mount(NULL, ".", 0x200000c0, MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_SILENT|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\xee\xa7\x3c\x3c\xa0\x47\x34\x9a\xb6\x6d\x52\x9f\xb1\xe2\xbd\xc6\x18\x75\xc6\xcc\xeb\xea\x30\xba\x1b\x89\x77\x2f\x99\x5e\xa3\xe0\xed\x04\xf9\x86\xb6\x8e\xe6") = -1 EINVAL (Invalid argument)
[   71.096339][ T5040] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "ÿÿÿÿÿÿÿÿî§<< G4š¶mRŸ±â½ÆuÆÌëê0º‰w/™^£àíù†¶Žæ"
[pid  5040] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 6
[pid  5040] ioctl(6, FS_IOC_GETVERSION, 0x20000000) = 0
[pid  5040] exit_group(0)               = ?
[pid  5040] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5040, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=40 /* 0.40 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./23", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./23", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555e64620 /* 4 entries */, 32768) = 112
umount2("./23/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./23/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./23/binderfs")                 = 0
umount2("./23/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./23/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./23/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./23/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./23/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555e6c660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555e6c660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./23/file0")                     = 0
getdents64(3, 0x555555e64620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./23")                           = 0
mkdir("./24", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e635d0) = 5042
./strace-static-x86_64: Process 5042 attached
[pid  5042] chdir("./24")               = 0
[pid  5042] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5042] setpgid(0, 0)               = 0
[pid  5042] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5042] write(3, "1000", 4)         = 4
[pid  5042] close(3)                    = 0
[pid  5042] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5042] memfd_create("syzkaller", 0) = 3
[pid  5042] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0f62cb9000
[pid  5042] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  5042] munmap(0x7f0f62cb9000, 4194304) = 0
[pid  5042] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5042] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5042] close(3)                    = 0
[pid  5042] mkdir("./file0", 0777)      = 0
[   71.496361][ T5042] loop0: detected capacity change from 0 to 8192
[   71.506055][ T5042] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   71.519363][ T5042] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[   71.528586][ T5042] REISERFS (device loop0): using ordered data mode
[   71.535122][ T5042] reiserfs: using flush barriers
[   71.540726][ T5042] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   71.557139][ T5042] REISERFS (device loop0): checking transaction log (loop0)
[pid  5042] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC, "") = 0
[pid  5042] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5042] chdir("./file0")            = 0
[pid  5042] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5042] close(4)                    = 0
[pid  5042] open(NULL, O_RDWR|O_CREAT|O_NOCTTY|O_NONBLOCK|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = -1 EFAULT (Bad address)
[   71.597246][ T5042] REISERFS (device loop0): Using r5 hash to sort names
[   71.604366][ T5042] REISERFS (device loop0): using 3.5.x disk format
[   71.611301][ T5042] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[pid  5042] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 4
[pid  5042] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000) = 5
[pid  5042] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<<MAP_HUGE_SHIFT, 5, 0) = 0x20000000
[pid  5042] ftruncate(4, 33587199)      = 0
[pid  5042] ioctl(-1, BTRFS_IOC_SUBVOL_SETFLAGS, 0) = -1 EBADF (Bad file descriptor)
[pid  5042] memfd_create("syzkaller", 0) = 6
[pid  5042] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0f5acb9000
[   71.632961][   T27] audit: type=1800 audit(1686673039.274:74): pid=5042 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor909" name="bus" dev="loop0" ino=2 res=0 errno=0
[pid  5042] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  5042] munmap(0x7f0f5acb9000, 4194304) = 0
[pid  5042] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 7
[pid  5042] ioctl(7, LOOP_SET_FD, 6)    = -1 EBUSY (Device or resource busy)
[pid  5042] ioctl(7, LOOP_CLR_FD)       = 0
[pid  5042] ioctl(7, LOOP_SET_FD, 6)    = -1 EBUSY (Device or resource busy)
[pid  5042] close(7)                    = 0
[pid  5042] close(6)                    = 0
[pid  5042] mkdir(".", 0777)            = -1 EEXIST (File exists)
[   71.673979][   T27] audit: type=1800 audit(1686673039.274:75): pid=5042 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor909" name="bus" dev="loop0" ino=2 res=0 errno=0
[   71.700327][   T27] audit: type=1800 audit(1686673039.274:76): pid=5042 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor909" name="bus" dev="loop0" ino=2 res=0 errno=0
[pid  5042] mount(NULL, ".", 0x200000c0, MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_SILENT|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\xee\xa7\x3c\x3c\xa0\x47\x34\x9a\xb6\x6d\x52\x9f\xb1\xe2\xbd\xc6\x18\x75\xc6\xcc\xeb\xea\x30\xba\x1b\x89\x77\x2f\x99\x5e\xa3\xe0\xed\x04\xf9\x86\xb6\x8e\xe6") = -1 EINVAL (Invalid argument)
[   71.749615][ T5042] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "ÿÿÿÿÿÿÿÿî§<< G4š¶mRŸ±â½ÆuÆÌëê0º‰w/™^£àíù†¶Žæ"
[pid  5042] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 6
[pid  5042] ioctl(6, FS_IOC_GETVERSION, 0x20000000) = 0
[pid  5042] exit_group(0)               = ?
[pid  5042] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5042, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=39 /* 0.39 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./24", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./24", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555e64620 /* 4 entries */, 32768) = 112
umount2("./24/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./24/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./24/binderfs")                 = 0
umount2("./24/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./24/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./24/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./24/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./24/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555e6c660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555e6c660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./24/file0")                     = 0
getdents64(3, 0x555555e64620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./24")                           = 0
mkdir("./25", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e635d0) = 5044
./strace-static-x86_64: Process 5044 attached
[pid  5044] chdir("./25")               = 0
[pid  5044] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5044] setpgid(0, 0)               = 0
[pid  5044] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5044] write(3, "1000", 4)         = 4
[pid  5044] close(3)                    = 0
[pid  5044] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5044] memfd_create("syzkaller", 0) = 3
[pid  5044] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0f62cb9000
[pid  5044] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  5044] munmap(0x7f0f62cb9000, 4194304) = 0
[pid  5044] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5044] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5044] close(3)                    = 0
[pid  5044] mkdir("./file0", 0777)      = 0
[   72.119208][ T5044] loop0: detected capacity change from 0 to 8192
[   72.128752][ T5044] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   72.141816][ T5044] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[   72.151108][ T5044] REISERFS (device loop0): using ordered data mode
[   72.157646][ T5044] reiserfs: using flush barriers
[   72.163158][ T5044] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   72.179628][ T5044] REISERFS (device loop0): checking transaction log (loop0)
[pid  5044] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC, "") = 0
[pid  5044] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5044] chdir("./file0")            = 0
[pid  5044] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5044] close(4)                    = 0
[pid  5044] open(NULL, O_RDWR|O_CREAT|O_NOCTTY|O_NONBLOCK|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = -1 EFAULT (Bad address)
[pid  5044] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 4
[pid  5044] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000) = 5
[pid  5044] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<<MAP_HUGE_SHIFT, 5, 0) = 0x20000000
[pid  5044] ftruncate(4, 33587199)      = 0
[pid  5044] ioctl(-1, BTRFS_IOC_SUBVOL_SETFLAGS, 0) = -1 EBADF (Bad file descriptor)
[pid  5044] memfd_create("syzkaller", 0) = 6
[pid  5044] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0f5acb9000
[   72.217681][ T5044] REISERFS (device loop0): Using r5 hash to sort names
[   72.224640][ T5044] REISERFS (device loop0): using 3.5.x disk format
[   72.231457][ T5044] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[   72.244589][   T27] audit: type=1800 audit(1686673039.894:77): pid=5044 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor909" name="bus" dev="loop0" ino=2 res=0 errno=0
[pid  5044] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  5044] munmap(0x7f0f5acb9000, 4194304) = 0
[pid  5044] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 7
[pid  5044] ioctl(7, LOOP_SET_FD, 6)    = -1 EBUSY (Device or resource busy)
[pid  5044] ioctl(7, LOOP_CLR_FD)       = 0
[pid  5044] ioctl(7, LOOP_SET_FD, 6)    = -1 EBUSY (Device or resource busy)
[pid  5044] close(7)                    = 0
[pid  5044] close(6)                    = 0
[pid  5044] mkdir(".", 0777)            = -1 EEXIST (File exists)
[   72.264741][   T27] audit: type=1800 audit(1686673039.894:78): pid=5044 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor909" name="bus" dev="loop0" ino=2 res=0 errno=0
[   72.284692][   T27] audit: type=1800 audit(1686673039.894:79): pid=5044 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor909" name="bus" dev="loop0" ino=2 res=0 errno=0
[pid  5044] mount(NULL, ".", 0x200000c0, MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_SILENT|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\xee\xa7\x3c\x3c\xa0\x47\x34\x9a\xb6\x6d\x52\x9f\xb1\xe2\xbd\xc6\x18\x75\xc6\xcc\xeb\xea\x30\xba\x1b\x89\x77\x2f\x99\x5e\xa3\xe0\xed\x04\xf9\x86\xb6\x8e\xe6") = -1 EINVAL (Invalid argument)
[   72.327181][ T5044] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "ÿÿÿÿÿÿÿÿî§<< G4š¶mRŸ±â½ÆuÆÌëê0º‰w/™^£àíù†¶Žæ"
[pid  5044] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 6
[pid  5044] ioctl(6, FS_IOC_GETVERSION, 0x20000000) = 0
[pid  5044] exit_group(0)               = ?
[pid  5044] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5044, si_uid=0, si_status=0, si_utime=0, si_stime=44 /* 0.44 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./25", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./25", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555e64620 /* 4 entries */, 32768) = 112
umount2("./25/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./25/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./25/binderfs")                 = 0
umount2("./25/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./25/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./25/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./25/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./25/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555e6c660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555e6c660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./25/file0")                     = 0
getdents64(3, 0x555555e64620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./25")                           = 0
mkdir("./26", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555e635d0) = 5046
./strace-static-x86_64: Process 5046 attached
[pid  5046] chdir("./26")               = 0
[pid  5046] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5046] setpgid(0, 0)               = 0
[pid  5046] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5046] write(3, "1000", 4)         = 4
[pid  5046] close(3)                    = 0
[pid  5046] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5046] memfd_create("syzkaller", 0) = 3
[pid  5046] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0f62cb9000
[pid  5046] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  5046] munmap(0x7f0f62cb9000, 4194304) = 0
[pid  5046] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5046] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5046] close(3)                    = 0
[pid  5046] mkdir("./file0", 0777)      = 0
[   72.693268][ T5046] loop0: detected capacity change from 0 to 8192
[   72.702701][ T5046] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   72.716059][ T5046] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[   72.725310][ T5046] REISERFS (device loop0): using ordered data mode
[   72.731807][ T5046] reiserfs: using flush barriers
[   72.737443][ T5046] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   72.753709][ T5046] REISERFS (device loop0): checking transaction log (loop0)
[   72.781639][ T5046] REISERFS (device loop0): Using r5 hash to sort names
[pid  5046] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC, "") = 0
[pid  5046] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5046] chdir("./file0")            = 0
[pid  5046] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5046] close(4)                    = 0
[pid  5046] open(NULL, O_RDWR|O_CREAT|O_NOCTTY|O_NONBLOCK|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = -1 EFAULT (Bad address)
[pid  5046] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 4
[pid  5046] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000) = 5
[pid  5046] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<<MAP_HUGE_SHIFT, 5, 0) = 0x20000000
[pid  5046] ftruncate(4, 33587199)      = 0
[pid  5046] ioctl(-1, BTRFS_IOC_SUBVOL_SETFLAGS, 0) = -1 EBADF (Bad file descriptor)
[pid  5046] memfd_create("syzkaller", 0) = 6
[pid  5046] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0f5acb9000
[pid  5046] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  5046] munmap(0x7f0f5acb9000, 4194304) = 0
[pid  5046] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 7
[pid  5046] ioctl(7, LOOP_SET_FD, 6)    = -1 EBUSY (Device or resource busy)
[pid  5046] ioctl(7, LOOP_CLR_FD)       = 0
[pid  5046] ioctl(7, LOOP_SET_FD, 6)    = -1 EBUSY (Device or resource busy)
[pid  5046] close(7)                    = 0
[   72.788588][ T5046] REISERFS (device loop0): using 3.5.x disk format
[   72.795481][ T5046] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[   72.813873][   T27] audit: type=1800 audit(1686673040.454:80): pid=5046 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor909" name="bus" dev="loop0" ino=2 res=0 errno=0
[pid  5046] close(6)                    = 0
[pid  5046] mkdir(".", 0777)            = -1 EEXIST (File exists)
[pid  5046] mount(NULL, ".", 0x200000c0, MS_NODEV|MS_NOEXEC|MS_SYNCHRONOUS|MS_REMOUNT|MS_DIRSYNC|MS_NOATIME|MS_SILENT|MS_PRIVATE|MS_RELATIME|MS_I_VERSION|MS_STRICTATIME, "\xff\xff\xff\xff\xff\xff\xff\xff\xee\xa7\x3c\x3c\xa0\x47\x34\x9a\xb6\x6d\x52\x9f\xb1\xe2\xbd\xc6\x18\x75\xc6\xcc\xeb\xea\x30\xba\x1b\x89\x77\x2f\x99\x5e\xa3\xe0\xed\x04\xf9\x86\xb6\x8e\xe6") = -1 EINVAL (Invalid argument)
[   72.888887][ T5046] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "ÿÿÿÿÿÿÿÿî§<< G4š¶mRŸ±â½ÆuÆÌëê0º‰w/™^£àíù†¶Žæ"
[pid  5046] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_NOATIME|FASYNC, 000) = 6
[pid  5046] ioctl(6, FS_IOC_GETVERSION, 0x20000000) = 0
[pid  5046] exit_group(0)               = ?
[pid  5046] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5046, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=41 /* 0.41 s */} ---
umount2("./26", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./26", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555e64620 /* 4 entries */, 32768) = 112
umount2("./26/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./26/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./26/binderfs")                 = 0
umount2("./26/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./26/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./26/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./26/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./26/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555e6c660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555e6c660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./26/file0")                     = 0
getdents64(3, 0x555555e64620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./26")                           = 0
mkdir("./27", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5048 attached
, child_tidptr=0x555555e635d0) = 5048
[pid  5048] chdir("./27")               = 0
[pid  5048] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5048] setpgid(0, 0)               = 0
[pid  5048] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5048] write(3, "1000", 4)         = 4
[pid  5048] close(3)                    = 0
[pid  5048] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5048] memfd_create("syzkaller", 0) = 3
[pid  5048] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0f62cb9000
[pid  5048] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  5048] munmap(0x7f0f62cb9000, 4194304) = 0
[pid  5048] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5048] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5048] close(3)                    = 0
[pid  5048] mkdir("./file0", 0777)      = 0
[   73.296448][ T5048] loop0: detected capacity change from 0 to 8192
[   73.305378][ T5048] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   73.318353][ T5048] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[   73.327540][ T5048] REISERFS (device loop0): using ordered data mode
[   73.334101][ T5048] reiserfs: using flush barriers
[   73.339650][ T5048] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   73.356037][ T5048] REISERFS (device loop0): checking transaction log (loop0)
[   73.384594][ T5048] REISERFS (device loop0): Using r5 hash to sort names
[pid  5048] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC, "") = 0
[pid  5048] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5048] chdir("./file0")            = 0
[pid  5048] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5048] close(4)                    = 0
[pid  5048] open(NULL, O_RDWR|O_CREAT|O_NOCTTY|O_NONBLOCK|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = -1 EFAULT (Bad address)
[pid  5048] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 4
[pid  5048] open("./bus", O_RDWR|O_CREAT|O_TRUNC|O_SYNC|O_DIRECT|O_LARGEFILE|O_NOATIME|0x3c, 000) = 5
[pid  5048] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<<MAP_HUGE_SHIFT, 5, 0) = 0x20000000
[pid  5048] ftruncate(4, 33587199)      = 0
[pid  5048] ioctl(-1, BTRFS_IOC_SUBVOL_SETFLAGS, 0) = -1 EBADF (Bad file descriptor)
[pid  5048] memfd_create("syzkaller", 0) = 6
[pid  5048] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f0f5acb9000
[pid  5048] write(6, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  5048] munmap(0x7f0f5acb9000, 4194304) = 0
[pid  5048] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 7
[pid  5048] ioctl(7, LOOP_SET_FD, 6)    = -1 EBUSY (Device or resource busy)
[pid  5048] ioctl(7, LOOP_CLR_FD)       = 0
[pid  5048] ioctl(7, LOOP_SET_FD, 6)    = -1 EBUSY (Device or resource busy)
[   73.391474][ T5048] REISERFS (device loop0): using 3.5.x disk format
[   73.398452][ T5048] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.