./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2043362922

<...>
forked to background, child pid 3208
no interfaces have a carrier
[   27.878556][ T3209] 8021q: adding VLAN 0 to HW filter on device bond0
[   27.888109][ T3209] eql: remember to turn off Van-Jacobson compression on your slave devices
Starting sshd: OK

syzkaller
Warning: Permanently added '10.128.1.130' (ECDSA) to the list of known hosts.
execve("./syz-executor2043362922", ["./syz-executor2043362922"], 0x7fff18aff0b0 /* 10 vars */) = 0
brk(NULL)                               = 0x555556931000
brk(0x555556931c40)                     = 0x555556931c40
arch_prctl(ARCH_SET_FS, 0x555556931300) = 0
uname({sysname="Linux", nodename="syzkaller", ...}) = 0
readlink("/proc/self/exe", "/root/syz-executor2043362922", 4096) = 28
brk(0x555556952c40)                     = 0x555556952c40
brk(0x555556953000)                     = 0x555556953000
mprotect(0x7f649a928000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
getpid()                                = 3629
mkdir("./syzkaller.jRvnZB", 0700)       = 0
chmod("./syzkaller.jRvnZB", 0777)       = 0
chdir("./syzkaller.jRvnZB")             = 0
mkdir("./0", 0777)                      = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555569315d0) = 3630
./strace-static-x86_64: Process 3630 attached
[pid  3630] chdir("./0")                = 0
[pid  3630] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  3630] setpgid(0, 0)               = 0
[pid  3630] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  3630] write(3, "1000", 4)         = 4
[pid  3630] close(3)                    = 0
[pid  3630] symlink("/dev/binderfs", "./binderfs") = 0
[pid  3630] memfd_create("syzkaller", 0) = 3
[pid  3630] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f649246b000
[pid  3630] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  3630] munmap(0x7f649246b000, 4194304) = 0
[pid  3630] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  3630] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  3630] close(3)                    = 0
[pid  3630] mkdir("./file0", 0777)      = 0
syzkaller login: [   53.250931][ T3630] loop0: detected capacity change from 0 to 8192
[   53.262976][ T3630] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   53.276436][ T3630] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal
[   53.285980][ T3630] REISERFS (device loop0): using ordered data mode
[   53.292648][ T3630] reiserfs: using flush barriers
[   53.298813][ T3630] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   53.315732][ T3630] REISERFS (device loop0): checking transaction log (loop0)
[pid  3630] mount("/dev/loop0", "./file0", "reiserfs", MS_SYNCHRONOUS|MS_DIRSYNC|MS_RELATIME|MS_STRICTATIME, "") = 0
[pid  3630] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  3630] chdir("./file0")            = 0
[pid  3630] ioctl(4, LOOP_CLR_FD)       = 0
[pid  3630] close(4)                    = 0
[pid  3630] openat(AT_FDCWD, "cpuset.effective_mems", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4
[pid  3630] write(4, "\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 16) = 16
[pid  3630] mmap(0x20000000, 12288, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED, 4, 0) = 0x20000000
[pid  3630] openat(AT_FDCWD, "cpuset.effective_mems", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 5
[pid  3630] ioctl(5, FS_IOC_GETVERSION, 0) = -1 EFAULT (Bad address)
[pid  3630] exit_group(0)               = ?
[pid  3630] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3630, si_uid=0, si_status=0, si_utime=1, si_stime=13} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
[   53.364728][ T3630] REISERFS (device loop0): Using r5 hash to sort names
[   53.372657][ T3630] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555556932620 /* 4 entries */, 32768) = 112
umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./0/binderfs")                  = 0
umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./0/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x55555693a660 /* 2 entries */, 32768) = 48
getdents64(4, 0x55555693a660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./0/file0")                      = 0
getdents64(3, 0x555556932620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./0")                            = 0
mkdir("./1", 0777)                      = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555569315d0) = 3633
./strace-static-x86_64: Process 3633 attached
[pid  3633] chdir("./1")                = 0
[pid  3633] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  3633] setpgid(0, 0)               = 0
[pid  3633] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  3633] write(3, "1000", 4)         = 4
[pid  3633] close(3)                    = 0
[pid  3633] symlink("/dev/binderfs", "./binderfs") = 0
[pid  3633] memfd_create("syzkaller", 0) = 3
[pid  3633] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f649246b000
[pid  3633] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  3633] munmap(0x7f649246b000, 4194304) = 0
[pid  3633] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  3633] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  3633] close(3)                    = 0
[pid  3633] mkdir("./file0", 0777)      = 0
[   53.540248][ T3633] loop0: detected capacity change from 0 to 8192
[   53.550544][ T3633] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   53.563600][ T3633] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal
[   53.572902][ T3633] REISERFS (device loop0): using ordered data mode
[   53.579645][ T3633] reiserfs: using flush barriers
[   53.585661][ T3633] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   53.602645][ T3633] REISERFS (device loop0): checking transaction log (loop0)
[pid  3633] mount("/dev/loop0", "./file0", "reiserfs", MS_SYNCHRONOUS|MS_DIRSYNC|MS_RELATIME|MS_STRICTATIME, "") = 0
[pid  3633] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  3633] chdir("./file0")            = 0
[pid  3633] ioctl(4, LOOP_CLR_FD)       = 0
[pid  3633] close(4)                    = 0
[pid  3633] openat(AT_FDCWD, "cpuset.effective_mems", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4
[pid  3633] write(4, "\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 16) = 16
[pid  3633] mmap(0x20000000, 12288, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED, 4, 0) = 0x20000000
[pid  3633] openat(AT_FDCWD, "cpuset.effective_mems", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 5
[pid  3633] ioctl(5, FS_IOC_GETVERSION, 0) = -1 EFAULT (Bad address)
[pid  3633] exit_group(0)               = ?
[pid  3633] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3633, si_uid=0, si_status=0, si_utime=0, si_stime=14} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555556932620 /* 4 entries */, 32768) = 112
umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./1/binderfs")                  = 0
[   53.644189][ T3633] REISERFS (device loop0): Using r5 hash to sort names
[   53.651756][ T3633] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./1/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x55555693a660 /* 2 entries */, 32768) = 48
getdents64(4, 0x55555693a660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./1/file0")                      = 0
getdents64(3, 0x555556932620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./1")                            = 0
mkdir("./2", 0777)                      = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555569315d0) = 3635
./strace-static-x86_64: Process 3635 attached
[pid  3635] chdir("./2")                = 0
[pid  3635] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  3635] setpgid(0, 0)               = 0
[pid  3635] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  3635] write(3, "1000", 4)         = 4
[pid  3635] close(3)                    = 0
[pid  3635] symlink("/dev/binderfs", "./binderfs") = 0
[pid  3635] memfd_create("syzkaller", 0) = 3
[pid  3635] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f649246b000
[pid  3635] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  3635] munmap(0x7f649246b000, 4194304) = 0
[pid  3635] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  3635] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  3635] close(3)                    = 0
[pid  3635] mkdir("./file0", 0777)      = 0
[   53.801837][ T3635] loop0: detected capacity change from 0 to 8192
[   53.812337][ T3635] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   53.825569][ T3635] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal
[   53.835084][ T3635] REISERFS (device loop0): using ordered data mode
[   53.841731][ T3635] reiserfs: using flush barriers
[   53.847630][ T3635] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   53.864149][ T3635] REISERFS (device loop0): checking transaction log (loop0)
[pid  3635] mount("/dev/loop0", "./file0", "reiserfs", MS_SYNCHRONOUS|MS_DIRSYNC|MS_RELATIME|MS_STRICTATIME, "") = 0
[pid  3635] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  3635] chdir("./file0")            = 0
[pid  3635] ioctl(4, LOOP_CLR_FD)       = 0
[pid  3635] close(4)                    = 0
[pid  3635] openat(AT_FDCWD, "cpuset.effective_mems", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4
[pid  3635] write(4, "\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 16) = 16
[pid  3635] mmap(0x20000000, 12288, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED, 4, 0) = 0x20000000
[pid  3635] openat(AT_FDCWD, "cpuset.effective_mems", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 5
[pid  3635] ioctl(5, FS_IOC_GETVERSION, 0) = -1 EFAULT (Bad address)
[pid  3635] exit_group(0)               = ?
[pid  3635] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3635, si_uid=0, si_status=0, si_utime=0, si_stime=15} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555556932620 /* 4 entries */, 32768) = 112
umount2("./2/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./2/binderfs")                  = 0
[   53.906461][ T3635] REISERFS (device loop0): Using r5 hash to sort names
[   53.913921][ T3635] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./2/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./2/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x55555693a660 /* 2 entries */, 32768) = 48
getdents64(4, 0x55555693a660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./2/file0")                      = 0
getdents64(3, 0x555556932620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./2")                            = 0
mkdir("./3", 0777)                      = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555569315d0) = 3637
./strace-static-x86_64: Process 3637 attached
[pid  3637] chdir("./3")                = 0
[pid  3637] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  3637] setpgid(0, 0)               = 0
[pid  3637] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  3637] write(3, "1000", 4)         = 4
[pid  3637] close(3)                    = 0
[pid  3637] symlink("/dev/binderfs", "./binderfs") = 0
[pid  3637] memfd_create("syzkaller", 0) = 3
[pid  3637] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f649246b000
[pid  3637] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  3637] munmap(0x7f649246b000, 4194304) = 0
[pid  3637] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  3637] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  3637] close(3)                    = 0
[pid  3637] mkdir("./file0", 0777)      = 0
[   54.064973][ T3637] loop0: detected capacity change from 0 to 8192
[   54.075751][ T3637] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   54.088812][ T3637] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal
[   54.098625][ T3637] REISERFS (device loop0): using ordered data mode
[   54.105124][ T3637] reiserfs: using flush barriers
[   54.111159][ T3637] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   54.128094][ T3637] REISERFS (device loop0): checking transaction log (loop0)
[pid  3637] mount("/dev/loop0", "./file0", "reiserfs", MS_SYNCHRONOUS|MS_DIRSYNC|MS_RELATIME|MS_STRICTATIME, "") = 0
[pid  3637] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  3637] chdir("./file0")            = 0
[pid  3637] ioctl(4, LOOP_CLR_FD)       = 0
[pid  3637] close(4)                    = 0
[pid  3637] openat(AT_FDCWD, "cpuset.effective_mems", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4
[pid  3637] write(4, "\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 16) = 16
[pid  3637] mmap(0x20000000, 12288, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED, 4, 0) = 0x20000000
[pid  3637] openat(AT_FDCWD, "cpuset.effective_mems", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 5
[pid  3637] ioctl(5, FS_IOC_GETVERSION, 0) = -1 EFAULT (Bad address)
[pid  3637] exit_group(0)               = ?
[pid  3637] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3637, si_uid=0, si_status=0, si_utime=0, si_stime=15} ---
umount2("./3", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555556932620 /* 4 entries */, 32768) = 112
umount2("./3/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./3/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./3/binderfs")                  = 0
[   54.171581][ T3637] REISERFS (device loop0): Using r5 hash to sort names
[   54.179169][ T3637] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./3/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./3/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x55555693a660 /* 2 entries */, 32768) = 48
getdents64(4, 0x55555693a660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./3/file0")                      = 0
getdents64(3, 0x555556932620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./3")                            = 0
mkdir("./4", 0777)                      = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555569315d0) = 3639
./strace-static-x86_64: Process 3639 attached
[pid  3639] chdir("./4")                = 0
[pid  3639] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  3639] setpgid(0, 0)               = 0
[pid  3639] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  3639] write(3, "1000", 4)         = 4
[pid  3639] close(3)                    = 0
[pid  3639] symlink("/dev/binderfs", "./binderfs") = 0
[pid  3639] memfd_create("syzkaller", 0) = 3
[pid  3639] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f649246b000
[pid  3639] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  3639] munmap(0x7f649246b000, 4194304) = 0
[pid  3639] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  3639] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  3639] close(3)                    = 0
[pid  3639] mkdir("./file0", 0777)      = 0
[   54.333661][ T3639] loop0: detected capacity change from 0 to 8192
[   54.344151][ T3639] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   54.357981][ T3639] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal
[   54.367560][ T3639] REISERFS (device loop0): using ordered data mode
[   54.374120][ T3639] reiserfs: using flush barriers
[   54.380237][ T3639] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   54.396828][ T3639] REISERFS (device loop0): checking transaction log (loop0)
[pid  3639] mount("/dev/loop0", "./file0", "reiserfs", MS_SYNCHRONOUS|MS_DIRSYNC|MS_RELATIME|MS_STRICTATIME, "") = 0
[pid  3639] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  3639] chdir("./file0")            = 0
[pid  3639] ioctl(4, LOOP_CLR_FD)       = 0
[pid  3639] close(4)                    = 0
[pid  3639] openat(AT_FDCWD, "cpuset.effective_mems", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4
[pid  3639] write(4, "\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 16) = 16
[pid  3639] mmap(0x20000000, 12288, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED, 4, 0) = 0x20000000
[pid  3639] openat(AT_FDCWD, "cpuset.effective_mems", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 5
[pid  3639] ioctl(5, FS_IOC_GETVERSION, 0) = -1 EFAULT (Bad address)
[pid  3639] exit_group(0)               = ?
[pid  3639] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3639, si_uid=0, si_status=0, si_utime=1, si_stime=13} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./4", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555556932620 /* 4 entries */, 32768) = 112
umount2("./4/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./4/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./4/binderfs")                  = 0
[   54.438288][ T3639] REISERFS (device loop0): Using r5 hash to sort names
[   54.445531][ T3639] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./4/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./4/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x55555693a660 /* 2 entries */, 32768) = 48
getdents64(4, 0x55555693a660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./4/file0")                      = 0
getdents64(3, 0x555556932620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./4")                            = 0
mkdir("./5", 0777)                      = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555569315d0) = 3641
./strace-static-x86_64: Process 3641 attached
[pid  3641] chdir("./5")                = 0
[pid  3641] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  3641] setpgid(0, 0)               = 0
[pid  3641] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  3641] write(3, "1000", 4)         = 4
[pid  3641] close(3)                    = 0
[pid  3641] symlink("/dev/binderfs", "./binderfs") = 0
[pid  3641] memfd_create("syzkaller", 0) = 3
[pid  3641] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f649246b000
[pid  3641] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  3641] munmap(0x7f649246b000, 4194304) = 0
[pid  3641] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  3641] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  3641] close(3)                    = 0
[pid  3641] mkdir("./file0", 0777)      = 0
[   54.588049][ T3641] loop0: detected capacity change from 0 to 8192
[   54.598526][ T3641] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   54.611653][ T3641] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal
[   54.620941][ T3641] REISERFS (device loop0): using ordered data mode
[   54.627671][ T3641] reiserfs: using flush barriers
[   54.633835][ T3641] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   54.650320][ T3641] REISERFS (device loop0): checking transaction log (loop0)
[pid  3641] mount("/dev/loop0", "./file0", "reiserfs", MS_SYNCHRONOUS|MS_DIRSYNC|MS_RELATIME|MS_STRICTATIME, "") = 0
[pid  3641] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  3641] chdir("./file0")            = 0
[pid  3641] ioctl(4, LOOP_CLR_FD)       = 0
[pid  3641] close(4)                    = 0
[pid  3641] openat(AT_FDCWD, "cpuset.effective_mems", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4
[pid  3641] write(4, "\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 16) = 16
[pid  3641] mmap(0x20000000, 12288, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED, 4, 0) = 0x20000000
[pid  3641] openat(AT_FDCWD, "cpuset.effective_mems", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 5
[pid  3641] ioctl(5, FS_IOC_GETVERSION, 0) = -1 EFAULT (Bad address)
[pid  3641] exit_group(0)               = ?
[pid  3641] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3641, si_uid=0, si_status=0, si_utime=0, si_stime=14} ---
umount2("./5", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555556932620 /* 4 entries */, 32768) = 112
umount2("./5/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./5/binderfs")                  = 0
[   54.693509][ T3641] REISERFS (device loop0): Using r5 hash to sort names
[   54.700971][ T3641] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./5/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./5/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x55555693a660 /* 2 entries */, 32768) = 48
getdents64(4, 0x55555693a660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./5/file0")                      = 0
getdents64(3, 0x555556932620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./5")                            = 0
mkdir("./6", 0777)                      = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555569315d0) = 3643
./strace-static-x86_64: Process 3643 attached
[pid  3643] chdir("./6")                = 0
[pid  3643] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  3643] setpgid(0, 0)               = 0
[pid  3643] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  3643] write(3, "1000", 4)         = 4
[pid  3643] close(3)                    = 0
[pid  3643] symlink("/dev/binderfs", "./binderfs") = 0
[pid  3643] memfd_create("syzkaller", 0) = 3
[pid  3643] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f649246b000
[pid  3643] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  3643] munmap(0x7f649246b000, 4194304) = 0
[pid  3643] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  3643] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  3643] close(3)                    = 0
[pid  3643] mkdir("./file0", 0777)      = 0
[   54.833580][ T3643] loop0: detected capacity change from 0 to 8192
[   54.843390][ T3643] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   54.856619][ T3643] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal
[   54.865988][ T3643] REISERFS (device loop0): using ordered data mode
[   54.872624][ T3643] reiserfs: using flush barriers
[   54.878346][ T3643] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   54.894949][ T3643] REISERFS (device loop0): checking transaction log (loop0)
[pid  3643] mount("/dev/loop0", "./file0", "reiserfs", MS_SYNCHRONOUS|MS_DIRSYNC|MS_RELATIME|MS_STRICTATIME, "") = 0
[pid  3643] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  3643] chdir("./file0")            = 0
[pid  3643] ioctl(4, LOOP_CLR_FD)       = 0
[pid  3643] close(4)                    = 0
[pid  3643] openat(AT_FDCWD, "cpuset.effective_mems", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4
[pid  3643] write(4, "\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 16) = 16
[pid  3643] mmap(0x20000000, 12288, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED, 4, 0) = 0x20000000
[pid  3643] openat(AT_FDCWD, "cpuset.effective_mems", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 5
[pid  3643] ioctl(5, FS_IOC_GETVERSION, 0) = -1 EFAULT (Bad address)
[pid  3643] exit_group(0)               = ?
[pid  3643] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3643, si_uid=0, si_status=0, si_utime=0, si_stime=13} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./6", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555556932620 /* 4 entries */, 32768) = 112
umount2("./6/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./6/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./6/binderfs")                  = 0
[   54.937312][ T3643] REISERFS (device loop0): Using r5 hash to sort names
[   54.944748][ T3643] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./6/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./6/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x55555693a660 /* 2 entries */, 32768) = 48
getdents64(4, 0x55555693a660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./6/file0")                      = 0
getdents64(3, 0x555556932620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./6")                            = 0
mkdir("./7", 0777)                      = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555569315d0) = 3645
./strace-static-x86_64: Process 3645 attached
[pid  3645] chdir("./7")                = 0
[pid  3645] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  3645] setpgid(0, 0)               = 0
[pid  3645] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  3645] write(3, "1000", 4)         = 4
[pid  3645] close(3)                    = 0
[pid  3645] symlink("/dev/binderfs", "./binderfs") = 0
[pid  3645] memfd_create("syzkaller", 0) = 3
[pid  3645] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f649246b000
[pid  3645] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  3645] munmap(0x7f649246b000, 4194304) = 0
[pid  3645] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  3645] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  3645] close(3)                    = 0
[pid  3645] mkdir("./file0", 0777)      = 0
[   55.098644][ T3645] loop0: detected capacity change from 0 to 8192
[   55.108763][ T3645] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   55.121873][ T3645] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal
[   55.131594][ T3645] REISERFS (device loop0): using ordered data mode
[   55.138288][ T3645] reiserfs: using flush barriers
[   55.144488][ T3645] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   55.161197][ T3645] REISERFS (device loop0): checking transaction log (loop0)
[pid  3645] mount("/dev/loop0", "./file0", "reiserfs", MS_SYNCHRONOUS|MS_DIRSYNC|MS_RELATIME|MS_STRICTATIME, "") = 0
[pid  3645] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  3645] chdir("./file0")            = 0
[pid  3645] ioctl(4, LOOP_CLR_FD)       = 0
[pid  3645] close(4)                    = 0
[pid  3645] openat(AT_FDCWD, "cpuset.effective_mems", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4
[pid  3645] write(4, "\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 16) = 16
[pid  3645] mmap(0x20000000, 12288, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED, 4, 0) = 0x20000000
[pid  3645] openat(AT_FDCWD, "cpuset.effective_mems", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 5
[pid  3645] ioctl(5, FS_IOC_GETVERSION, 0) = -1 EFAULT (Bad address)
[pid  3645] exit_group(0)               = ?
[pid  3645] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3645, si_uid=0, si_status=0, si_utime=0, si_stime=10} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./7", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555556932620 /* 4 entries */, 32768) = 112
umount2("./7/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./7/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./7/binderfs")                  = 0
[   55.197642][ T3645] REISERFS (device loop0): Using r5 hash to sort names
[   55.204874][ T3645] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./7/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./7/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x55555693a660 /* 2 entries */, 32768) = 48
getdents64(4, 0x55555693a660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./7/file0")                      = 0
getdents64(3, 0x555556932620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./7")                            = 0
mkdir("./8", 0777)                      = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3647 attached
, child_tidptr=0x5555569315d0) = 3647
[pid  3647] chdir("./8")                = 0
[pid  3647] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  3647] setpgid(0, 0)               = 0
[pid  3647] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  3647] write(3, "1000", 4)         = 4
[pid  3647] close(3)                    = 0
[pid  3647] symlink("/dev/binderfs", "./binderfs") = 0
[pid  3647] memfd_create("syzkaller", 0) = 3
[pid  3647] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f649246b000
[pid  3647] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  3647] munmap(0x7f649246b000, 4194304) = 0
[pid  3647] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  3647] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  3647] close(3)                    = 0
[pid  3647] mkdir("./file0", 0777)      = 0
[   55.351555][ T3647] loop0: detected capacity change from 0 to 8192
[   55.362558][ T3647] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   55.375937][ T3647] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal
[   55.385300][ T3647] REISERFS (device loop0): using ordered data mode
[   55.391840][ T3647] reiserfs: using flush barriers
[   55.397790][ T3647] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   55.414261][ T3647] REISERFS (device loop0): checking transaction log (loop0)
[pid  3647] mount("/dev/loop0", "./file0", "reiserfs", MS_SYNCHRONOUS|MS_DIRSYNC|MS_RELATIME|MS_STRICTATIME, "") = 0
[pid  3647] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  3647] chdir("./file0")            = 0
[pid  3647] ioctl(4, LOOP_CLR_FD)       = 0
[pid  3647] close(4)                    = 0
[pid  3647] openat(AT_FDCWD, "cpuset.effective_mems", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4
[pid  3647] write(4, "\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 16) = 16
[pid  3647] mmap(0x20000000, 12288, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED, 4, 0) = 0x20000000
[pid  3647] openat(AT_FDCWD, "cpuset.effective_mems", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 5
[pid  3647] ioctl(5, FS_IOC_GETVERSION, 0) = -1 EFAULT (Bad address)
[pid  3647] exit_group(0)               = ?
[pid  3647] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3647, si_uid=0, si_status=0, si_utime=0, si_stime=15} ---
umount2("./8", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555556932620 /* 4 entries */, 32768) = 112
umount2("./8/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./8/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./8/binderfs")                  = 0
[   55.452628][ T3647] REISERFS (device loop0): Using r5 hash to sort names
[   55.459920][ T3647] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./8/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./8/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x55555693a660 /* 2 entries */, 32768) = 48
getdents64(4, 0x55555693a660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./8/file0")                      = 0
getdents64(3, 0x555556932620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./8")                            = 0
mkdir("./9", 0777)                      = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555569315d0) = 3649
./strace-static-x86_64: Process 3649 attached
[pid  3649] chdir("./9")                = 0
[pid  3649] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  3649] setpgid(0, 0)               = 0
[pid  3649] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  3649] write(3, "1000", 4)         = 4
[pid  3649] close(3)                    = 0
[pid  3649] symlink("/dev/binderfs", "./binderfs") = 0
[pid  3649] memfd_create("syzkaller", 0) = 3
[pid  3649] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f649246b000
[pid  3649] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  3649] munmap(0x7f649246b000, 4194304) = 0
[pid  3649] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  3649] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  3649] close(3)                    = 0
[pid  3649] mkdir("./file0", 0777)      = 0
[   55.590056][ T3649] loop0: detected capacity change from 0 to 8192
[   55.600417][ T3649] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   55.613436][ T3649] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal
[   55.622700][ T3649] REISERFS (device loop0): using ordered data mode
[   55.629281][ T3649] reiserfs: using flush barriers
[   55.635148][ T3649] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   55.651638][ T3649] REISERFS (device loop0): checking transaction log (loop0)
[pid  3649] mount("/dev/loop0", "./file0", "reiserfs", MS_SYNCHRONOUS|MS_DIRSYNC|MS_RELATIME|MS_STRICTATIME, "") = 0
[pid  3649] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  3649] chdir("./file0")            = 0
[pid  3649] ioctl(4, LOOP_CLR_FD)       = 0
[pid  3649] close(4)                    = 0
[pid  3649] openat(AT_FDCWD, "cpuset.effective_mems", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4
[pid  3649] write(4, "\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 16) = 16
[pid  3649] mmap(0x20000000, 12288, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED, 4, 0) = 0x20000000
[pid  3649] openat(AT_FDCWD, "cpuset.effective_mems", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 5
[pid  3649] ioctl(5, FS_IOC_GETVERSION, 0) = -1 EFAULT (Bad address)
[pid  3649] exit_group(0)               = ?
[pid  3649] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3649, si_uid=0, si_status=0, si_utime=0, si_stime=13} ---
umount2("./9", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555556932620 /* 4 entries */, 32768) = 112
umount2("./9/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[   55.697132][ T3649] REISERFS (device loop0): Using r5 hash to sort names
[   55.704452][ T3649] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
lstat("./9/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./9/binderfs")                  = 0
umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./9/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./9/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x55555693a660 /* 2 entries */, 32768) = 48
getdents64(4, 0x55555693a660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./9/file0")                      = 0
getdents64(3, 0x555556932620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./9")                            = 0
mkdir("./10", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555569315d0) = 3651
./strace-static-x86_64: Process 3651 attached
[pid  3651] chdir("./10")               = 0
[pid  3651] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  3651] setpgid(0, 0)               = 0
[pid  3651] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  3651] write(3, "1000", 4)         = 4
[pid  3651] close(3)                    = 0
[pid  3651] symlink("/dev/binderfs", "./binderfs") = 0
[pid  3651] memfd_create("syzkaller", 0) = 3
[pid  3651] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f649246b000
[pid  3651] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  3651] munmap(0x7f649246b000, 4194304) = 0
[pid  3651] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  3651] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  3651] close(3)                    = 0
[pid  3651] mkdir("./file0", 0777)      = 0
[   55.859192][ T3651] loop0: detected capacity change from 0 to 8192
[   55.869248][ T3651] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   55.882486][ T3651] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal
[   55.891788][ T3651] REISERFS (device loop0): using ordered data mode
[   55.898368][ T3651] reiserfs: using flush barriers
[   55.904421][ T3651] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   55.921269][ T3651] REISERFS (device loop0): checking transaction log (loop0)
[pid  3651] mount("/dev/loop0", "./file0", "reiserfs", MS_SYNCHRONOUS|MS_DIRSYNC|MS_RELATIME|MS_STRICTATIME, "") = 0
[pid  3651] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  3651] chdir("./file0")            = 0
[pid  3651] ioctl(4, LOOP_CLR_FD)       = 0
[pid  3651] close(4)                    = 0
[pid  3651] openat(AT_FDCWD, "cpuset.effective_mems", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4
[pid  3651] write(4, "\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 16) = 16
[pid  3651] mmap(0x20000000, 12288, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED, 4, 0) = 0x20000000
[pid  3651] openat(AT_FDCWD, "cpuset.effective_mems", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 5
[pid  3651] ioctl(5, FS_IOC_GETVERSION, 0) = -1 EFAULT (Bad address)
[pid  3651] exit_group(0)               = ?
[pid  3651] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3651, si_uid=0, si_status=0, si_utime=0, si_stime=12} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./10", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555556932620 /* 4 entries */, 32768) = 112
umount2("./10/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./10/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
[   55.959922][ T3651] REISERFS (device loop0): Using r5 hash to sort names
[   55.967605][ T3651] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
unlink("./10/binderfs")                 = 0
umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./10/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./10/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x55555693a660 /* 2 entries */, 32768) = 48
getdents64(4, 0x55555693a660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./10/file0")                     = 0
getdents64(3, 0x555556932620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./10")                           = 0
mkdir("./11", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555569315d0) = 3653
./strace-static-x86_64: Process 3653 attached
[pid  3653] chdir("./11")               = 0
[pid  3653] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  3653] setpgid(0, 0)               = 0
[pid  3653] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  3653] write(3, "1000", 4)         = 4
[pid  3653] close(3)                    = 0
[pid  3653] symlink("/dev/binderfs", "./binderfs") = 0
[pid  3653] memfd_create("syzkaller", 0) = 3
[pid  3653] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f649246b000
[pid  3653] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  3653] munmap(0x7f649246b000, 4194304) = 0
[pid  3653] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  3653] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  3653] close(3)                    = 0
[pid  3653] mkdir("./file0", 0777)      = 0
[   56.127343][ T3653] loop0: detected capacity change from 0 to 8192
[   56.137507][ T3653] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   56.150739][ T3653] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal
[   56.160360][ T3653] REISERFS (device loop0): using ordered data mode
[   56.166915][ T3653] reiserfs: using flush barriers
[   56.172916][ T3653] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   56.189341][ T3653] REISERFS (device loop0): checking transaction log (loop0)
[pid  3653] mount("/dev/loop0", "./file0", "reiserfs", MS_SYNCHRONOUS|MS_DIRSYNC|MS_RELATIME|MS_STRICTATIME, "") = 0
[pid  3653] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  3653] chdir("./file0")            = 0
[pid  3653] ioctl(4, LOOP_CLR_FD)       = 0
[pid  3653] close(4)                    = 0
[pid  3653] openat(AT_FDCWD, "cpuset.effective_mems", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4
[pid  3653] write(4, "\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 16) = 16
[pid  3653] mmap(0x20000000, 12288, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED, 4, 0) = 0x20000000
[pid  3653] openat(AT_FDCWD, "cpuset.effective_mems", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 5
[pid  3653] ioctl(5, FS_IOC_GETVERSION, 0) = -1 EFAULT (Bad address)
[pid  3653] exit_group(0)               = ?
[pid  3653] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3653, si_uid=0, si_status=0, si_utime=0, si_stime=12} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./11", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555556932620 /* 4 entries */, 32768) = 112
umount2("./11/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./11/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./11/binderfs")                 = 0
[   56.227828][ T3653] REISERFS (device loop0): Using r5 hash to sort names
[   56.236114][ T3653] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./11/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./11/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x55555693a660 /* 2 entries */, 32768) = 48
getdents64(4, 0x55555693a660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./11/file0")                     = 0
getdents64(3, 0x555556932620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./11")                           = 0
mkdir("./12", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555569315d0) = 3655
./strace-static-x86_64: Process 3655 attached
[pid  3655] chdir("./12")               = 0
[pid  3655] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  3655] setpgid(0, 0)               = 0
[pid  3655] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  3655] write(3, "1000", 4)         = 4
[pid  3655] close(3)                    = 0
[pid  3655] symlink("/dev/binderfs", "./binderfs") = 0
[pid  3655] memfd_create("syzkaller", 0) = 3
[pid  3655] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f649246b000
[pid  3655] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  3655] munmap(0x7f649246b000, 4194304) = 0
[pid  3655] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  3655] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  3655] close(3)                    = 0
[pid  3655] mkdir("./file0", 0777)      = 0
[   56.379392][ T3655] loop0: detected capacity change from 0 to 8192
[   56.390583][ T3655] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   56.403628][ T3655] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal
[   56.413021][ T3655] REISERFS (device loop0): using ordered data mode
[   56.419613][ T3655] reiserfs: using flush barriers
[   56.425552][ T3655] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   56.442191][ T3655] REISERFS (device loop0): checking transaction log (loop0)
[pid  3655] mount("/dev/loop0", "./file0", "reiserfs", MS_SYNCHRONOUS|MS_DIRSYNC|MS_RELATIME|MS_STRICTATIME, "") = 0
[pid  3655] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  3655] chdir("./file0")            = 0
[pid  3655] ioctl(4, LOOP_CLR_FD)       = 0
[pid  3655] close(4)                    = 0
[pid  3655] openat(AT_FDCWD, "cpuset.effective_mems", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4
[pid  3655] write(4, "\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 16) = 16
[pid  3655] mmap(0x20000000, 12288, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED, 4, 0) = 0x20000000
[pid  3655] openat(AT_FDCWD, "cpuset.effective_mems", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 5
[pid  3655] ioctl(5, FS_IOC_GETVERSION, 0) = -1 EFAULT (Bad address)
[pid  3655] exit_group(0)               = ?
[pid  3655] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3655, si_uid=0, si_status=0, si_utime=0, si_stime=17} ---
umount2("./12", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555556932620 /* 4 entries */, 32768) = 112
umount2("./12/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./12/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./12/binderfs")                 = 0
[   56.483130][ T3655] REISERFS (device loop0): Using r5 hash to sort names
[   56.490205][ T3655] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./12/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./12/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x55555693a660 /* 2 entries */, 32768) = 48
getdents64(4, 0x55555693a660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./12/file0")                     = 0
getdents64(3, 0x555556932620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./12")                           = 0
mkdir("./13", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555569315d0) = 3657
./strace-static-x86_64: Process 3657 attached
[pid  3657] chdir("./13")               = 0
[pid  3657] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  3657] setpgid(0, 0)               = 0
[pid  3657] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  3657] write(3, "1000", 4)         = 4
[pid  3657] close(3)                    = 0
[pid  3657] symlink("/dev/binderfs", "./binderfs") = 0
[pid  3657] memfd_create("syzkaller", 0) = 3
[pid  3657] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f649246b000
[pid  3657] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  3657] munmap(0x7f649246b000, 4194304) = 0
[pid  3657] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  3657] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  3657] close(3)                    = 0
[pid  3657] mkdir("./file0", 0777)      = 0
[   56.636417][ T3657] loop0: detected capacity change from 0 to 8192
[   56.646820][ T3657] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   56.660202][ T3657] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal
[   56.669546][ T3657] REISERFS (device loop0): using ordered data mode
[   56.676068][ T3657] reiserfs: using flush barriers
[   56.682044][ T3657] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   56.698390][ T3657] REISERFS (device loop0): checking transaction log (loop0)
[pid  3657] mount("/dev/loop0", "./file0", "reiserfs", MS_SYNCHRONOUS|MS_DIRSYNC|MS_RELATIME|MS_STRICTATIME, "") = 0
[pid  3657] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  3657] chdir("./file0")            = 0
[pid  3657] ioctl(4, LOOP_CLR_FD)       = 0
[pid  3657] close(4)                    = 0
[pid  3657] openat(AT_FDCWD, "cpuset.effective_mems", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4
[pid  3657] write(4, "\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 16) = 16
[pid  3657] mmap(0x20000000, 12288, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED, 4, 0) = 0x20000000
[pid  3657] openat(AT_FDCWD, "cpuset.effective_mems", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 5
[pid  3657] ioctl(5, FS_IOC_GETVERSION, 0) = -1 EFAULT (Bad address)
[pid  3657] exit_group(0)               = ?
[pid  3657] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3657, si_uid=0, si_status=0, si_utime=0, si_stime=14} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./13", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./13", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555556932620 /* 4 entries */, 32768) = 112
umount2("./13/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./13/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./13/binderfs")                 = 0
[   56.742038][ T3657] REISERFS (device loop0): Using r5 hash to sort names
[   56.749228][ T3657] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
umount2("./13/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./13/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./13/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./13/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./13/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x55555693a660 /* 2 entries */, 32768) = 48
getdents64(4, 0x55555693a660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./13/file0")                     = 0
getdents64(3, 0x555556932620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./13")                           = 0
mkdir("./14", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555569315d0) = 3659
./strace-static-x86_64: Process 3659 attached
[pid  3659] chdir("./14")               = 0
[pid  3659] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  3659] setpgid(0, 0)               = 0
[pid  3659] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  3659] write(3, "1000", 4)         = 4
[pid  3659] close(3)                    = 0
[pid  3659] symlink("/dev/binderfs", "./binderfs") = 0
[pid  3659] memfd_create("syzkaller", 0) = 3
[pid  3659] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f649246b000
[pid  3659] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  3659] munmap(0x7f649246b000, 4194304) = 0
[pid  3659] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  3659] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  3659] close(3)                    = 0
[pid  3659] mkdir("./file0", 0777)      = 0
[   56.895870][ T3659] loop0: detected capacity change from 0 to 8192
[   56.906213][ T3659] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   56.919681][ T3659] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal
[   56.928916][ T3659] REISERFS (device loop0): using ordered data mode
[   56.935423][ T3659] reiserfs: using flush barriers
[   56.941237][ T3659] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   56.957815][ T3659] REISERFS (device loop0): checking transaction log (loop0)
[pid  3659] mount("/dev/loop0", "./file0", "reiserfs", MS_SYNCHRONOUS|MS_DIRSYNC|MS_RELATIME|MS_STRICTATIME, "") = 0
[pid  3659] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  3659] chdir("./file0")            = 0
[pid  3659] ioctl(4, LOOP_CLR_FD)       = 0
[pid  3659] close(4)                    = 0
[pid  3659] openat(AT_FDCWD, "cpuset.effective_mems", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4
[pid  3659] write(4, "\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 16) = 16
[pid  3659] mmap(0x20000000, 12288, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED, 4, 0) = 0x20000000
[pid  3659] openat(AT_FDCWD, "cpuset.effective_mems", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 5
[pid  3659] ioctl(5, FS_IOC_GETVERSION, 0) = -1 EFAULT (Bad address)
[pid  3659] exit_group(0)               = ?
[pid  3659] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3659, si_uid=0, si_status=0, si_utime=1, si_stime=12} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./14", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./14", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555556932620 /* 4 entries */, 32768) = 112
umount2("./14/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./14/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./14/binderfs")                 = 0
[   57.000744][ T3659] REISERFS (device loop0): Using r5 hash to sort names
[   57.008310][ T3659] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
umount2("./14/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./14/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./14/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./14/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./14/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x55555693a660 /* 2 entries */, 32768) = 48
getdents64(4, 0x55555693a660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./14/file0")                     = 0
getdents64(3, 0x555556932620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./14")                           = 0
mkdir("./15", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555569315d0) = 3661
./strace-static-x86_64: Process 3661 attached
[pid  3661] chdir("./15")               = 0
[pid  3661] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  3661] setpgid(0, 0)               = 0
[pid  3661] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  3661] write(3, "1000", 4)         = 4
[pid  3661] close(3)                    = 0
[pid  3661] symlink("/dev/binderfs", "./binderfs") = 0
[pid  3661] memfd_create("syzkaller", 0) = 3
[pid  3661] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f649246b000
[pid  3661] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  3661] munmap(0x7f649246b000, 4194304) = 0
[pid  3661] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  3661] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  3661] close(3)                    = 0
[pid  3661] mkdir("./file0", 0777)      = 0
[   57.153297][ T3661] loop0: detected capacity change from 0 to 8192
[   57.163279][ T3661] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   57.176718][ T3661] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal
[   57.186064][ T3661] REISERFS (device loop0): using ordered data mode
[   57.192698][ T3661] reiserfs: using flush barriers
[   57.198721][ T3661] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   57.215225][ T3661] REISERFS (device loop0): checking transaction log (loop0)
[pid  3661] mount("/dev/loop0", "./file0", "reiserfs", MS_SYNCHRONOUS|MS_DIRSYNC|MS_RELATIME|MS_STRICTATIME, "") = 0
[pid  3661] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  3661] chdir("./file0")            = 0
[pid  3661] ioctl(4, LOOP_CLR_FD)       = 0
[pid  3661] close(4)                    = 0
[pid  3661] openat(AT_FDCWD, "cpuset.effective_mems", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4
[pid  3661] write(4, "\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 16) = 16
[pid  3661] mmap(0x20000000, 12288, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED, 4, 0) = 0x20000000
[pid  3661] openat(AT_FDCWD, "cpuset.effective_mems", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 5
[pid  3661] ioctl(5, FS_IOC_GETVERSION, 0) = -1 EFAULT (Bad address)
[pid  3661] exit_group(0)               = ?
[pid  3661] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3661, si_uid=0, si_status=0, si_utime=0, si_stime=13} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./15", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./15", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555556932620 /* 4 entries */, 32768) = 112
umount2("./15/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./15/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./15/binderfs")                 = 0
[   57.259056][ T3661] REISERFS (device loop0): Using r5 hash to sort names
[   57.266441][ T3661] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
umount2("./15/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./15/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./15/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./15/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./15/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x55555693a660 /* 2 entries */, 32768) = 48
getdents64(4, 0x55555693a660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./15/file0")                     = 0
getdents64(3, 0x555556932620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./15")                           = 0
mkdir("./16", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555569315d0) = 3663
./strace-static-x86_64: Process 3663 attached
[pid  3663] chdir("./16")               = 0
[pid  3663] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  3663] setpgid(0, 0)               = 0
[pid  3663] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  3663] write(3, "1000", 4)         = 4
[pid  3663] close(3)                    = 0
[pid  3663] symlink("/dev/binderfs", "./binderfs") = 0
[pid  3663] memfd_create("syzkaller", 0) = 3
[pid  3663] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f649246b000
[pid  3663] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  3663] munmap(0x7f649246b000, 4194304) = 0
[pid  3663] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  3663] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  3663] close(3)                    = 0
[pid  3663] mkdir("./file0", 0777)      = 0
[   57.415439][ T3663] loop0: detected capacity change from 0 to 8192
[   57.425651][ T3663] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   57.439658][ T3663] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal
[   57.449130][ T3663] REISERFS (device loop0): using ordered data mode
[   57.455748][ T3663] reiserfs: using flush barriers
[   57.461987][ T3663] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   57.478439][ T3663] REISERFS (device loop0): checking transaction log (loop0)
[pid  3663] mount("/dev/loop0", "./file0", "reiserfs", MS_SYNCHRONOUS|MS_DIRSYNC|MS_RELATIME|MS_STRICTATIME, "") = 0
[pid  3663] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  3663] chdir("./file0")            = 0
[pid  3663] ioctl(4, LOOP_CLR_FD)       = 0
[pid  3663] close(4)                    = 0
[pid  3663] openat(AT_FDCWD, "cpuset.effective_mems", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4
[pid  3663] write(4, "\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 16) = 16
[pid  3663] mmap(0x20000000, 12288, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED, 4, 0) = 0x20000000
[pid  3663] openat(AT_FDCWD, "cpuset.effective_mems", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 5
[pid  3663] ioctl(5, FS_IOC_GETVERSION, 0) = -1 EFAULT (Bad address)
[   57.519985][ T3663] REISERFS (device loop0): Using r5 hash to sort names
[   57.527077][ T3663] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[pid  3663] exit_group(0)               = ?
[pid  3663] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3663, si_uid=0, si_status=0, si_utime=0, si_stime=13} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./16", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./16", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555556932620 /* 4 entries */, 32768) = 112
umount2("./16/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./16/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./16/binderfs")                 = 0
umount2("./16/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./16/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./16/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./16/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./16/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x55555693a660 /* 2 entries */, 32768) = 48
getdents64(4, 0x55555693a660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./16/file0")                     = 0
getdents64(3, 0x555556932620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./16")                           = 0
mkdir("./17", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555569315d0) = 3665
./strace-static-x86_64: Process 3665 attached
[pid  3665] chdir("./17")               = 0
[pid  3665] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  3665] setpgid(0, 0)               = 0
[pid  3665] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  3665] write(3, "1000", 4)         = 4
[pid  3665] close(3)                    = 0
[pid  3665] symlink("/dev/binderfs", "./binderfs") = 0
[pid  3665] memfd_create("syzkaller", 0) = 3
[pid  3665] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f649246b000
[pid  3665] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  3665] munmap(0x7f649246b000, 4194304) = 0
[pid  3665] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  3665] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  3665] close(3)                    = 0
[pid  3665] mkdir("./file0", 0777)      = 0
[   57.692252][ T3665] loop0: detected capacity change from 0 to 8192
[   57.702671][ T3665] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   57.715741][ T3665] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal
[   57.726002][ T3665] REISERFS (device loop0): using ordered data mode
[   57.732594][ T3665] reiserfs: using flush barriers
[   57.738768][ T3665] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   57.755143][ T3665] REISERFS (device loop0): checking transaction log (loop0)
[pid  3665] mount("/dev/loop0", "./file0", "reiserfs", MS_SYNCHRONOUS|MS_DIRSYNC|MS_RELATIME|MS_STRICTATIME, "") = 0
[pid  3665] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  3665] chdir("./file0")            = 0
[pid  3665] ioctl(4, LOOP_CLR_FD)       = 0
[pid  3665] close(4)                    = 0
[pid  3665] openat(AT_FDCWD, "cpuset.effective_mems", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4
[pid  3665] write(4, "\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 16) = 16
[pid  3665] mmap(0x20000000, 12288, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED, 4, 0) = 0x20000000
[pid  3665] openat(AT_FDCWD, "cpuset.effective_mems", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 5
[pid  3665] ioctl(5, FS_IOC_GETVERSION, 0) = -1 EFAULT (Bad address)
[pid  3665] exit_group(0)               = ?
[pid  3665] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3665, si_uid=0, si_status=0, si_utime=0, si_stime=14} ---
umount2("./17", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./17", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555556932620 /* 4 entries */, 32768) = 112
umount2("./17/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./17/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./17/binderfs")                 = 0
[   57.793751][ T3665] REISERFS (device loop0): Using r5 hash to sort names
[   57.801238][ T3665] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
umount2("./17/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./17/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./17/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./17/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./17/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x55555693a660 /* 2 entries */, 32768) = 48
getdents64(4, 0x55555693a660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./17/file0")                     = 0
getdents64(3, 0x555556932620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./17")                           = 0
mkdir("./18", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555569315d0) = 3667
./strace-static-x86_64: Process 3667 attached
[pid  3667] chdir("./18")               = 0
[pid  3667] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  3667] setpgid(0, 0)               = 0
[pid  3667] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  3667] write(3, "1000", 4)         = 4
[pid  3667] close(3)                    = 0
[pid  3667] symlink("/dev/binderfs", "./binderfs") = 0
[pid  3667] memfd_create("syzkaller", 0) = 3
[pid  3667] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f649246b000
[pid  3667] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  3667] munmap(0x7f649246b000, 4194304) = 0
[pid  3667] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  3667] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  3667] close(3)                    = 0
[pid  3667] mkdir("./file0", 0777)      = 0
[   57.944700][ T3667] loop0: detected capacity change from 0 to 8192
[   57.954776][ T3667] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   57.968923][ T3667] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal
[   57.978215][ T3667] REISERFS (device loop0): using ordered data mode
[   57.984751][ T3667] reiserfs: using flush barriers
[   57.991161][ T3667] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   58.007634][ T3667] REISERFS (device loop0): checking transaction log (loop0)
[pid  3667] mount("/dev/loop0", "./file0", "reiserfs", MS_SYNCHRONOUS|MS_DIRSYNC|MS_RELATIME|MS_STRICTATIME, "") = 0
[pid  3667] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  3667] chdir("./file0")            = 0
[pid  3667] ioctl(4, LOOP_CLR_FD)       = 0
[pid  3667] close(4)                    = 0
[pid  3667] openat(AT_FDCWD, "cpuset.effective_mems", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4
[pid  3667] write(4, "\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 16) = 16
[pid  3667] mmap(0x20000000, 12288, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED, 4, 0) = 0x20000000
[pid  3667] openat(AT_FDCWD, "cpuset.effective_mems", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 5
[pid  3667] ioctl(5, FS_IOC_GETVERSION, 0) = -1 EFAULT (Bad address)
[pid  3667] exit_group(0)               = ?
[pid  3667] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3667, si_uid=0, si_status=0, si_utime=0, si_stime=15} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./18", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./18", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555556932620 /* 4 entries */, 32768) = 112
umount2("./18/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./18/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./18/binderfs")                 = 0
[   58.052844][ T3667] REISERFS (device loop0): Using r5 hash to sort names
[   58.060276][ T3667] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
umount2("./18/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./18/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./18/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./18/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./18/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x55555693a660 /* 2 entries */, 32768) = 48
getdents64(4, 0x55555693a660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./18/file0")                     = 0
getdents64(3, 0x555556932620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./18")                           = 0
mkdir("./19", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555569315d0) = 3669
./strace-static-x86_64: Process 3669 attached
[pid  3669] chdir("./19")               = 0
[pid  3669] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  3669] setpgid(0, 0)               = 0
[pid  3669] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  3669] write(3, "1000", 4)         = 4
[pid  3669] close(3)                    = 0
[pid  3669] symlink("/dev/binderfs", "./binderfs") = 0
[pid  3669] memfd_create("syzkaller", 0) = 3
[pid  3669] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f649246b000
[pid  3669] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  3669] munmap(0x7f649246b000, 4194304) = 0
[pid  3669] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  3669] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  3669] close(3)                    = 0
[pid  3669] mkdir("./file0", 0777)      = 0
[   58.225833][ T3669] loop0: detected capacity change from 0 to 8192
[   58.236046][ T3669] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   58.249628][ T3669] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal
[   58.259110][ T3669] REISERFS (device loop0): using ordered data mode
[   58.265650][ T3669] reiserfs: using flush barriers
[   58.271779][ T3669] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   58.288186][ T3669] REISERFS (device loop0): checking transaction log (loop0)
[pid  3669] mount("/dev/loop0", "./file0", "reiserfs", MS_SYNCHRONOUS|MS_DIRSYNC|MS_RELATIME|MS_STRICTATIME, "") = 0
[pid  3669] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  3669] chdir("./file0")            = 0
[pid  3669] ioctl(4, LOOP_CLR_FD)       = 0
[pid  3669] close(4)                    = 0
[pid  3669] openat(AT_FDCWD, "cpuset.effective_mems", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4
[pid  3669] write(4, "\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 16) = 16
[pid  3669] mmap(0x20000000, 12288, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED, 4, 0) = 0x20000000
[pid  3669] openat(AT_FDCWD, "cpuset.effective_mems", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 5
[pid  3669] ioctl(5, FS_IOC_GETVERSION, 0) = -1 EFAULT (Bad address)
[pid  3669] exit_group(0)               = ?
[pid  3669] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3669, si_uid=0, si_status=0, si_utime=0, si_stime=14} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./19", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./19", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555556932620 /* 4 entries */, 32768) = 112
umount2("./19/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./19/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./19/binderfs")                 = 0
[   58.332555][ T3669] REISERFS (device loop0): Using r5 hash to sort names
[   58.340008][ T3669] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
umount2("./19/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./19/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./19/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./19/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./19/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x55555693a660 /* 2 entries */, 32768) = 48
getdents64(4, 0x55555693a660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./19/file0")                     = 0
getdents64(3, 0x555556932620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./19")                           = 0
mkdir("./20", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555569315d0) = 3671
./strace-static-x86_64: Process 3671 attached
[pid  3671] chdir("./20")               = 0
[pid  3671] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  3671] setpgid(0, 0)               = 0
[pid  3671] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  3671] write(3, "1000", 4)         = 4
[pid  3671] close(3)                    = 0
[pid  3671] symlink("/dev/binderfs", "./binderfs") = 0
[pid  3671] memfd_create("syzkaller", 0) = 3
[pid  3671] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f649246b000
[pid  3671] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  3671] munmap(0x7f649246b000, 4194304) = 0
[pid  3671] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  3671] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  3671] close(3)                    = 0
[pid  3671] mkdir("./file0", 0777)      = 0
[   58.482396][ T3671] loop0: detected capacity change from 0 to 8192
[   58.492630][ T3671] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   58.505882][ T3671] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal
[   58.515575][ T3671] REISERFS (device loop0): using ordered data mode
[   58.522274][ T3671] reiserfs: using flush barriers
[   58.528195][ T3671] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   58.545103][ T3671] REISERFS (device loop0): checking transaction log (loop0)
[pid  3671] mount("/dev/loop0", "./file0", "reiserfs", MS_SYNCHRONOUS|MS_DIRSYNC|MS_RELATIME|MS_STRICTATIME, "") = 0
[pid  3671] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  3671] chdir("./file0")            = 0
[pid  3671] ioctl(4, LOOP_CLR_FD)       = 0
[pid  3671] close(4)                    = 0
[pid  3671] openat(AT_FDCWD, "cpuset.effective_mems", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4
[pid  3671] write(4, "\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 16) = 16
[pid  3671] mmap(0x20000000, 12288, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED, 4, 0) = 0x20000000
[pid  3671] openat(AT_FDCWD, "cpuset.effective_mems", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 5
[pid  3671] ioctl(5, FS_IOC_GETVERSION, 0) = -1 EFAULT (Bad address)
[pid  3671] exit_group(0)               = ?
[pid  3671] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3671, si_uid=0, si_status=0, si_utime=0, si_stime=15} ---
umount2("./20", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./20", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555556932620 /* 4 entries */, 32768) = 112
umount2("./20/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./20/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./20/binderfs")                 = 0
[   58.587358][ T3671] REISERFS (device loop0): Using r5 hash to sort names
[   58.594636][ T3671] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
umount2("./20/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./20/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./20/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./20/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./20/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x55555693a660 /* 2 entries */, 32768) = 48
getdents64(4, 0x55555693a660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./20/file0")                     = 0
getdents64(3, 0x555556932620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./20")                           = 0
mkdir("./21", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555569315d0) = 3673
./strace-static-x86_64: Process 3673 attached
[pid  3673] chdir("./21")               = 0
[pid  3673] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  3673] setpgid(0, 0)               = 0
[pid  3673] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  3673] write(3, "1000", 4)         = 4
[pid  3673] close(3)                    = 0
[pid  3673] symlink("/dev/binderfs", "./binderfs") = 0
[pid  3673] memfd_create("syzkaller", 0) = 3
[pid  3673] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f649246b000
[pid  3673] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  3673] munmap(0x7f649246b000, 4194304) = 0
[pid  3673] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  3673] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  3673] close(3)                    = 0
[pid  3673] mkdir("./file0", 0777)      = 0
[   58.744137][ T3673] loop0: detected capacity change from 0 to 8192
[   58.754937][ T3673] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   58.768074][ T3673] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal
[   58.777847][ T3673] REISERFS (device loop0): using ordered data mode
[   58.784397][ T3673] reiserfs: using flush barriers
[   58.790559][ T3673] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   58.807010][ T3673] REISERFS (device loop0): checking transaction log (loop0)
[pid  3673] mount("/dev/loop0", "./file0", "reiserfs", MS_SYNCHRONOUS|MS_DIRSYNC|MS_RELATIME|MS_STRICTATIME, "") = 0
[pid  3673] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  3673] chdir("./file0")            = 0
[pid  3673] ioctl(4, LOOP_CLR_FD)       = 0
[pid  3673] close(4)                    = 0
[pid  3673] openat(AT_FDCWD, "cpuset.effective_mems", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4
[pid  3673] write(4, "\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 16) = 16
[pid  3673] mmap(0x20000000, 12288, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED, 4, 0) = 0x20000000
[pid  3673] openat(AT_FDCWD, "cpuset.effective_mems", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 5
[pid  3673] ioctl(5, FS_IOC_GETVERSION, 0) = -1 EFAULT (Bad address)
[pid  3673] exit_group(0)               = ?
[pid  3673] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3673, si_uid=0, si_status=0, si_utime=0, si_stime=13} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./21", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./21", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555556932620 /* 4 entries */, 32768) = 112
umount2("./21/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./21/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./21/binderfs")                 = 0
[   58.852553][ T3673] REISERFS (device loop0): Using r5 hash to sort names
[   58.860634][ T3673] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
umount2("./21/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./21/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./21/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./21/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./21/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x55555693a660 /* 2 entries */, 32768) = 48
getdents64(4, 0x55555693a660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./21/file0")                     = 0
getdents64(3, 0x555556932620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./21")                           = 0
mkdir("./22", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555569315d0) = 3675
./strace-static-x86_64: Process 3675 attached
[pid  3675] chdir("./22")               = 0
[pid  3675] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  3675] setpgid(0, 0)               = 0
[pid  3675] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  3675] write(3, "1000", 4)         = 4
[pid  3675] close(3)                    = 0
[pid  3675] symlink("/dev/binderfs", "./binderfs") = 0
[pid  3675] memfd_create("syzkaller", 0) = 3
[pid  3675] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f649246b000
[pid  3675] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  3675] munmap(0x7f649246b000, 4194304) = 0
[pid  3675] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  3675] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  3675] close(3)                    = 0
[pid  3675] mkdir("./file0", 0777)      = 0
[   58.996321][ T3675] loop0: detected capacity change from 0 to 8192
[   59.006670][ T3675] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   59.019817][ T3675] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal
[   59.029238][ T3675] REISERFS (device loop0): using ordered data mode
[   59.035848][ T3675] reiserfs: using flush barriers
[   59.041957][ T3675] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   59.058358][ T3675] REISERFS (device loop0): checking transaction log (loop0)
[pid  3675] mount("/dev/loop0", "./file0", "reiserfs", MS_SYNCHRONOUS|MS_DIRSYNC|MS_RELATIME|MS_STRICTATIME, "") = 0
[pid  3675] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  3675] chdir("./file0")            = 0
[pid  3675] ioctl(4, LOOP_CLR_FD)       = 0
[pid  3675] close(4)                    = 0
[pid  3675] openat(AT_FDCWD, "cpuset.effective_mems", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4
[pid  3675] write(4, "\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 16) = 16
[pid  3675] mmap(0x20000000, 12288, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED, 4, 0) = 0x20000000
[pid  3675] openat(AT_FDCWD, "cpuset.effective_mems", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 5
[pid  3675] ioctl(5, FS_IOC_GETVERSION, 0) = -1 EFAULT (Bad address)
[pid  3675] exit_group(0)               = ?
[pid  3675] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3675, si_uid=0, si_status=0, si_utime=0, si_stime=13} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./22", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./22", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555556932620 /* 4 entries */, 32768) = 112
umount2("./22/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./22/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./22/binderfs")                 = 0
[   59.099757][ T3675] REISERFS (device loop0): Using r5 hash to sort names
[   59.107903][ T3675] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
umount2("./22/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./22/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./22/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./22/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./22/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x55555693a660 /* 2 entries */, 32768) = 48
getdents64(4, 0x55555693a660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./22/file0")                     = 0
getdents64(3, 0x555556932620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./22")                           = 0
mkdir("./23", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555569315d0) = 3677
./strace-static-x86_64: Process 3677 attached
[pid  3677] chdir("./23")               = 0
[pid  3677] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  3677] setpgid(0, 0)               = 0
[pid  3677] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  3677] write(3, "1000", 4)         = 4
[pid  3677] close(3)                    = 0
[pid  3677] symlink("/dev/binderfs", "./binderfs") = 0
[pid  3677] memfd_create("syzkaller", 0) = 3
[pid  3677] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f649246b000
[pid  3677] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  3677] munmap(0x7f649246b000, 4194304) = 0
[pid  3677] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  3677] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  3677] close(3)                    = 0
[pid  3677] mkdir("./file0", 0777)      = 0
[   59.333056][ T3677] loop0: detected capacity change from 0 to 8192
[   59.346925][ T3677] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   59.360344][ T3677] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal
[   59.369612][ T3677] REISERFS (device loop0): using ordered data mode
[   59.376138][ T3677] reiserfs: using flush barriers
[   59.382133][ T3677] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   59.398567][ T3677] REISERFS (device loop0): checking transaction log (loop0)
[pid  3677] mount("/dev/loop0", "./file0", "reiserfs", MS_SYNCHRONOUS|MS_DIRSYNC|MS_RELATIME|MS_STRICTATIME, "") = 0
[pid  3677] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  3677] chdir("./file0")            = 0
[pid  3677] ioctl(4, LOOP_CLR_FD)       = 0
[pid  3677] close(4)                    = 0
[pid  3677] openat(AT_FDCWD, "cpuset.effective_mems", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4
[pid  3677] write(4, "\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 16) = 16
[pid  3677] mmap(0x20000000, 12288, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED, 4, 0) = 0x20000000
[pid  3677] openat(AT_FDCWD, "cpuset.effective_mems", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 5
[pid  3677] ioctl(5, FS_IOC_GETVERSION, 0) = -1 EFAULT (Bad address)
[pid  3677] exit_group(0)               = ?
[pid  3677] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3677, si_uid=0, si_status=0, si_utime=0, si_stime=13} ---
umount2("./23", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./23", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555556932620 /* 4 entries */, 32768) = 112
umount2("./23/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./23/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./23/binderfs")                 = 0
[   59.436428][ T3677] REISERFS (device loop0): Using r5 hash to sort names
[   59.443904][ T3677] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
umount2("./23/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./23/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./23/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./23/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./23/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x55555693a660 /* 2 entries */, 32768) = 48
getdents64(4, 0x55555693a660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./23/file0")                     = 0
getdents64(3, 0x555556932620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./23")                           = 0
mkdir("./24", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555569315d0) = 3679
./strace-static-x86_64: Process 3679 attached
[pid  3679] chdir("./24")               = 0
[pid  3679] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  3679] setpgid(0, 0)               = 0
[pid  3679] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  3679] write(3, "1000", 4)         = 4
[pid  3679] close(3)                    = 0
[pid  3679] symlink("/dev/binderfs", "./binderfs") = 0
[pid  3679] memfd_create("syzkaller", 0) = 3
[pid  3679] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f649246b000
[pid  3679] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  3679] munmap(0x7f649246b000, 4194304) = 0
[pid  3679] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  3679] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  3679] close(3)                    = 0
[pid  3679] mkdir("./file0", 0777)      = 0
[   59.591820][ T3679] loop0: detected capacity change from 0 to 8192
[   59.602220][ T3679] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   59.615463][ T3679] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal
[   59.625021][ T3679] REISERFS (device loop0): using ordered data mode
[   59.631736][ T3679] reiserfs: using flush barriers
[   59.637774][ T3679] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   59.654195][ T3679] REISERFS (device loop0): checking transaction log (loop0)
[pid  3679] mount("/dev/loop0", "./file0", "reiserfs", MS_SYNCHRONOUS|MS_DIRSYNC|MS_RELATIME|MS_STRICTATIME, "") = 0
[pid  3679] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  3679] chdir("./file0")            = 0
[pid  3679] ioctl(4, LOOP_CLR_FD)       = 0
[pid  3679] close(4)                    = 0
[pid  3679] openat(AT_FDCWD, "cpuset.effective_mems", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4
[pid  3679] write(4, "\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 16) = 16
[pid  3679] mmap(0x20000000, 12288, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED, 4, 0) = 0x20000000
[pid  3679] openat(AT_FDCWD, "cpuset.effective_mems", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 5
[pid  3679] ioctl(5, FS_IOC_GETVERSION, 0) = -1 EFAULT (Bad address)
[pid  3679] exit_group(0)               = ?
[pid  3679] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3679, si_uid=0, si_status=0, si_utime=0, si_stime=15} ---
umount2("./24", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./24", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555556932620 /* 4 entries */, 32768) = 112
umount2("./24/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./24/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./24/binderfs")                 = 0
[   59.696642][ T3679] REISERFS (device loop0): Using r5 hash to sort names
[   59.703813][ T3679] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
umount2("./24/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./24/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./24/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./24/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./24/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x55555693a660 /* 2 entries */, 32768) = 48
getdents64(4, 0x55555693a660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./24/file0")                     = 0
getdents64(3, 0x555556932620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./24")                           = 0
mkdir("./25", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555569315d0) = 3681
./strace-static-x86_64: Process 3681 attached
[pid  3681] chdir("./25")               = 0
[pid  3681] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  3681] setpgid(0, 0)               = 0
[pid  3681] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  3681] write(3, "1000", 4)         = 4
[pid  3681] close(3)                    = 0
[pid  3681] symlink("/dev/binderfs", "./binderfs") = 0
[pid  3681] memfd_create("syzkaller", 0) = 3
[pid  3681] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f649246b000
[pid  3681] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  3681] munmap(0x7f649246b000, 4194304) = 0
[pid  3681] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  3681] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  3681] close(3)                    = 0
[pid  3681] mkdir("./file0", 0777)      = 0
[   59.844420][ T3681] loop0: detected capacity change from 0 to 8192
[   59.855341][ T3681] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   59.869335][ T3681] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal
[   59.878636][ T3681] REISERFS (device loop0): using ordered data mode
[   59.885153][ T3681] reiserfs: using flush barriers
[   59.891101][ T3681] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   59.907595][ T3681] REISERFS (device loop0): checking transaction log (loop0)
[pid  3681] mount("/dev/loop0", "./file0", "reiserfs", MS_SYNCHRONOUS|MS_DIRSYNC|MS_RELATIME|MS_STRICTATIME, "") = 0
[pid  3681] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  3681] chdir("./file0")            = 0
[pid  3681] ioctl(4, LOOP_CLR_FD)       = 0
[pid  3681] close(4)                    = 0
[pid  3681] openat(AT_FDCWD, "cpuset.effective_mems", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4
[pid  3681] write(4, "\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 16) = 16
[pid  3681] mmap(0x20000000, 12288, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED, 4, 0) = 0x20000000
[pid  3681] openat(AT_FDCWD, "cpuset.effective_mems", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 5
[pid  3681] ioctl(5, FS_IOC_GETVERSION, 0) = -1 EFAULT (Bad address)
[pid  3681] exit_group(0)               = ?
[pid  3681] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3681, si_uid=0, si_status=0, si_utime=1, si_stime=12} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./25", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./25", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555556932620 /* 4 entries */, 32768) = 112
umount2("./25/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./25/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./25/binderfs")                 = 0
[   59.944540][ T3681] REISERFS (device loop0): Using r5 hash to sort names
[   59.952180][ T3681] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
umount2("./25/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./25/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./25/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./25/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./25/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x55555693a660 /* 2 entries */, 32768) = 48
getdents64(4, 0x55555693a660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./25/file0")                     = 0
getdents64(3, 0x555556932620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./25")                           = 0
mkdir("./26", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555569315d0) = 3683
./strace-static-x86_64: Process 3683 attached
[pid  3683] chdir("./26")               = 0
[pid  3683] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  3683] setpgid(0, 0)               = 0
[pid  3683] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  3683] write(3, "1000", 4)         = 4
[pid  3683] close(3)                    = 0
[pid  3683] symlink("/dev/binderfs", "./binderfs") = 0
[pid  3683] memfd_create("syzkaller", 0) = 3
[pid  3683] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f649246b000
[pid  3683] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  3683] munmap(0x7f649246b000, 4194304) = 0
[pid  3683] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  3683] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  3683] close(3)                    = 0
[pid  3683] mkdir("./file0", 0777)      = 0
[   60.099610][ T3683] loop0: detected capacity change from 0 to 8192
[   60.110448][ T3683] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   60.123511][ T3683] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal
[   60.132833][ T3683] REISERFS (device loop0): using ordered data mode
[   60.139455][ T3683] reiserfs: using flush barriers
[   60.145513][ T3683] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   60.162132][ T3683] REISERFS (device loop0): checking transaction log (loop0)
[pid  3683] mount("/dev/loop0", "./file0", "reiserfs", MS_SYNCHRONOUS|MS_DIRSYNC|MS_RELATIME|MS_STRICTATIME, "") = 0
[pid  3683] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  3683] chdir("./file0")            = 0
[pid  3683] ioctl(4, LOOP_CLR_FD)       = 0
[pid  3683] close(4)                    = 0
[pid  3683] openat(AT_FDCWD, "cpuset.effective_mems", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4
[   60.205029][ T3683] REISERFS (device loop0): Using r5 hash to sort names
[   60.212408][ T3683] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[pid  3683] write(4, "\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 16) = 16
[   60.251256][ T3683] 
[   60.253643][ T3683] ======================================================
[   60.260655][ T3683] WARNING: possible circular locking dependency detected
[   60.267677][ T3683] 6.1.0-rc8-syzkaller-00152-g3ecc37918c80 #0 Not tainted
[   60.274763][ T3683] ------------------------------------------------------
[   60.281941][ T3683] syz-executor204/3683 is trying to acquire lock:
[   60.288339][ T3683] ffff8880184d9090 (&sbi->lock){+.+.}-{3:3}, at: reiserfs_write_lock+0x79/0x100
[   60.297476][ T3683] 
[   60.297476][ T3683] but task is already holding lock:
[   60.304824][ T3683] ffff88807a4e8898 (&mm->mmap_lock#2){++++}-{3:3}, at: vm_mmap_pgoff+0x159/0x280
[   60.313951][ T3683] 
[   60.313951][ T3683] which lock already depends on the new lock.
[   60.313951][ T3683] 
[   60.324448][ T3683] 
[   60.324448][ T3683] the existing dependency chain (in reverse order) is:
[   60.333739][ T3683] 
[   60.333739][ T3683] -> #1 (&mm->mmap_lock#2){++++}-{3:3}:
[   60.341481][ T3683]        __might_fault+0x10c/0x180
[   60.346586][ T3683]        reiserfs_ioctl+0x1d2/0x330
[   60.351777][ T3683]        __x64_sys_ioctl+0x197/0x210
[   60.357139][ T3683]        do_syscall_64+0x39/0xb0
[   60.362265][ T3683]        entry_SYSCALL_64_after_hwframe+0x63/0xcd
[   60.368695][ T3683] 
[   60.368695][ T3683] -> #0 (&sbi->lock){+.+.}-{3:3}:
[   60.375899][ T3683]        __lock_acquire+0x2a43/0x56d0
[   60.381268][ T3683]        lock_acquire+0x1e3/0x630
[   60.386285][ T3683]        __mutex_lock+0x12f/0x1360
[   60.391401][ T3683]        reiserfs_write_lock+0x79/0x100
[   60.396934][ T3683]        reiserfs_dirty_inode+0xd2/0x260
[   60.402562][ T3683]        __mark_inode_dirty+0x247/0x11e0
[   60.408203][ T3683]        touch_atime+0x641/0x700
[   60.413152][ T3683]        generic_file_mmap+0x119/0x150
[   60.418643][ T3683]        mmap_region+0x6c3/0x1dd0
[   60.423949][ T3683]        do_mmap+0x831/0xf60
[   60.428576][ T3683]        vm_mmap_pgoff+0x1af/0x280
[   60.433671][ T3683]        ksys_mmap_pgoff+0x41f/0x5a0
[   60.438942][ T3683]        do_syscall_64+0x39/0xb0
[   60.443889][ T3683]        entry_SYSCALL_64_after_hwframe+0x63/0xcd
[   60.450294][ T3683] 
[   60.450294][ T3683] other info that might help us debug this:
[   60.450294][ T3683] 
[   60.460892][ T3683]  Possible unsafe locking scenario:
[   60.460892][ T3683] 
[   60.468354][ T3683]        CPU0                    CPU1
[   60.473707][ T3683]        ----                    ----
[   60.479100][ T3683]   lock(&mm->mmap_lock#2);
[   60.483595][ T3683]                                lock(&sbi->lock);
[   60.490103][ T3683]                                lock(&mm->mmap_lock#2);
[   60.497164][ T3683]   lock(&sbi->lock);
[   60.501165][ T3683] 
[   60.501165][ T3683]  *** DEADLOCK ***
[   60.501165][ T3683] 
[   60.509326][ T3683] 2 locks held by syz-executor204/3683:
[   60.514876][ T3683]  #0: ffff88807a4e8898 (&mm->mmap_lock#2){++++}-{3:3}, at: vm_mmap_pgoff+0x159/0x280
[   60.524443][ T3683]  #1: ffff888077c0e460 (sb_writers#9){.+.+}-{0:0}, at: generic_file_mmap+0x119/0x150
[   60.534020][ T3683] 
[   60.534020][ T3683] stack backtrace:
[   60.539919][ T3683] CPU: 0 PID: 3683 Comm: syz-executor204 Not tainted 6.1.0-rc8-syzkaller-00152-g3ecc37918c80 #0
[   60.550334][ T3683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022
[   60.560403][ T3683] Call Trace:
[   60.563668][ T3683]  <TASK>
[   60.566579][ T3683]  dump_stack_lvl+0xd1/0x138
[   60.571172][ T3683]  check_noncircular+0x25f/0x2e0
[   60.576103][ T3683]  ? print_circular_bug+0x1e0/0x1e0
[   60.581297][ T3683]  ? save_trace+0x43/0xad0
[   60.585702][ T3683]  ? _find_first_zero_bit+0x94/0xb0
[   60.590898][ T3683]  __lock_acquire+0x2a43/0x56d0
[   60.595749][ T3683]  ? lockdep_hardirqs_on_prepare+0x410/0x410
[   60.601812][ T3683]  lock_acquire+0x1e3/0x630
[   60.606475][ T3683]  ? reiserfs_write_lock+0x79/0x100
[   60.611660][ T3683]  ? lock_release+0x810/0x810
[   60.616346][ T3683]  ? __lock_acquire+0x2567/0x56d0
[   60.621471][ T3683]  __mutex_lock+0x12f/0x1360
[   60.626073][ T3683]  ? reiserfs_write_lock+0x79/0x100
[   60.631258][ T3683]  ? lock_chain_count+0x20/0x20
[   60.636106][ T3683]  ? reiserfs_write_lock+0x79/0x100
[   60.641296][ T3683]  ? mutex_lock_io_nested+0x11a0/0x11a0
[   60.646852][ T3683]  ? find_held_lock+0x2d/0x110
[   60.651606][ T3683]  ? current_time+0x76/0x2c0
[   60.656184][ T3683]  reiserfs_write_lock+0x79/0x100
[   60.661201][ T3683]  reiserfs_dirty_inode+0xd2/0x260
[   60.666393][ T3683]  ? reiserfs_unfreeze+0xa0/0xa0
[   60.671320][ T3683]  ? ktime_get_coarse_real_ts64+0x1bb/0x200
[   60.677303][ T3683]  ? ktime_get_coarse_real_ts64+0x15e/0x200
[   60.683200][ T3683]  ? lock_downgrade+0x6e0/0x6e0
[   60.688139][ T3683]  ? reiserfs_unfreeze+0xa0/0xa0
[   60.693084][ T3683]  __mark_inode_dirty+0x247/0x11e0
[   60.698195][ T3683]  touch_atime+0x641/0x700
[   60.702600][ T3683]  ? atime_needs_update+0x870/0x870
[   60.707782][ T3683]  ? vm_area_alloc+0x20/0x100
[   60.712441][ T3683]  ? rcu_read_lock_sched_held+0x3e/0x70
[   60.718063][ T3683]  ? trace_kmem_cache_alloc+0x35/0x100
[   60.723503][ T3683]  generic_file_mmap+0x119/0x150
[   60.728454][ T3683]  mmap_region+0x6c3/0x1dd0
[   60.732946][ T3683]  ? do_munmap+0x100/0x100
[   60.737349][ T3683]  ? security_mmap_addr+0x77/0xa0
[   60.742378][ T3683]  ? get_unmapped_area+0x1e8/0x3c0
[   60.748205][ T3683]  do_mmap+0x831/0xf60
[   60.752277][ T3683]  vm_mmap_pgoff+0x1af/0x280
[   60.756855][ T3683]  ? randomize_page+0xb0/0xb0
[   60.761629][ T3683]  ksys_mmap_pgoff+0x41f/0x5a0
[   60.766387][ T3683]  do_syscall_64+0x39/0xb0
[   60.770877][ T3683]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[   60.776778][ T3683] RIP: 0033:0x7f649a8b89d9
[   60.781199][ T3683] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 11 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[pid  3683] mmap(0x20000000, 12288, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED, 4, 0) = 0x20000000
[pid  3683] openat(AT_FDCWD, "cpuset.effective_mems", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 5
[pid  3683] ioctl(5, FS_IOC_GETVERSION, 0) = -1 EFAULT (Bad address)
[pid  3683] exit_group(0)               = ?
[pid  3683] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3683, si_uid=0, si_status=0, si_utime=1, si_stime=13} ---
umount2("./26", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./26", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555556932620 /* 4 entries */, 32768) = 112
umount2("./26/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./26/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./26/binderfs")                 = 0
[   60.800975][ T3683] RSP: 002b:00007ffc2c698488 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[   60.809380][ T3683] RAX: ffffffffffffffda RBX: 00007f649a8fe1ad RCX: 00007f649a8b89d9
[   60.817348][ T3683] RDX: 00000000007fffff RSI: 0000000000003000 RDI: 0000000020000000
[   60.825329][ T3683] RBP: 0000000000000000 R08: 0000000000000004 R09: 0000000000000000
[   60.833383][ T3683] R10: 0000040000000011 R11: 0000000000000246 R12: 00007ffc2c6984bc
[   60.841456][ T3683] R13: 00007ffc2c6984f0 R14: 00007ffc2c6984d0 R15: 000000000000001a
[   60.849524][ T3683]  </TASK>
umount2("./26/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./26/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./26/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./26/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./26/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x55555693a660 /* 2 entries */, 32768) = 48
getdents64(4, 0x55555693a660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./26/file0")                     = 0
getdents64(3, 0x555556932620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./26")                           = 0
mkdir("./27", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555569315d0) = 3685
./strace-static-x86_64: Process 3685 attached
[pid  3685] chdir("./27")               = 0
[pid  3685] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  3685] setpgid(0, 0)               = 0
[pid  3685] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  3685] write(3, "1000", 4)         = 4
[pid  3685] close(3)                    = 0
[pid  3685] symlink("/dev/binderfs", "./binderfs") = 0
[pid  3685] memfd_create("syzkaller", 0) = 3
[pid  3685] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f649246b000
[pid  3685] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  3685] munmap(0x7f649246b000, 4194304) = 0
[pid  3685] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  3685] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  3685] close(3)                    = 0
[pid  3685] mkdir("./file0", 0777)      = 0
[   60.924970][ T3685] loop0: detected capacity change from 0 to 8192
[   60.934693][ T3685] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   60.947767][ T3685] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal
[   60.956943][ T3685] REISERFS (device loop0): using ordered data mode
[   60.963515][ T3685] reiserfs: using flush barriers
[   60.969396][ T3685] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   60.985755][ T3685] REISERFS (device loop0): checking transaction log (loop0)
[   61.012692][ T3685] REISERFS (device loop0): Using r5 hash to sort names
[pid  3685] mount("/dev/loop0", "./file0", "reiserfs", MS_SYNCHRONOUS|MS_DIRSYNC|MS_RELATIME|MS_STRICTATIME, "") = 0
[pid  3685] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  3685] chdir("./file0")            = 0
[pid  3685] ioctl(4, LOOP_CLR_FD)       = 0
[pid  3685] close(4)                    = 0
[pid  3685] openat(AT_FDCWD, "cpuset.effective_mems", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4
[pid  3685] write(4, "\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 16) = 16
[pid  3685] mmap(0x20000000, 12288, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED, 4, 0) = 0x20000000
[pid  3685] openat(AT_FDCWD, "cpuset.effective_mems", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 5
[pid  3685] ioctl(5, FS_IOC_GETVERSION, 0) = -1 EFAULT (Bad address)
[pid  3685] exit_group(0)               = ?
[pid  3685] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3685, si_uid=0, si_status=0, si_utime=0, si_stime=10} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./27", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./27", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555556932620 /* 4 entries */, 32768) = 112
umount2("./27/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./27/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./27/binderfs")                 = 0
[   61.020004][ T3685] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
umount2("./27/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./27/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./27/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./27/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./27/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x55555693a660 /* 2 entries */, 32768) = 48
getdents64(4, 0x55555693a660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./27/file0")                     = 0
getdents64(3, 0x555556932620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./27")                           = 0
mkdir("./28", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555569315d0) = 3687
./strace-static-x86_64: Process 3687 attached
[pid  3687] chdir("./28")               = 0
[pid  3687] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  3687] setpgid(0, 0)               = 0
[pid  3687] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  3687] write(3, "1000", 4)         = 4
[pid  3687] close(3)                    = 0
[pid  3687] symlink("/dev/binderfs", "./binderfs") = 0
[pid  3687] memfd_create("syzkaller", 0) = 3
[pid  3687] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f649246b000
[pid  3687] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  3687] munmap(0x7f649246b000, 4194304) = 0
[pid  3687] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  3687] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  3687] close(3)                    = 0
[pid  3687] mkdir("./file0", 0777)      = 0
[   61.135257][ T3687] loop0: detected capacity change from 0 to 8192
[   61.144620][ T3687] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   61.158054][ T3687] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal
[   61.167538][ T3687] REISERFS (device loop0): using ordered data mode
[   61.174169][ T3687] reiserfs: using flush barriers
[   61.179871][ T3687] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   61.196149][ T3687] REISERFS (device loop0): checking transaction log (loop0)
[   61.223037][ T3687] REISERFS (device loop0): Using r5 hash to sort names
[pid  3687] mount("/dev/loop0", "./file0", "reiserfs", MS_SYNCHRONOUS|MS_DIRSYNC|MS_RELATIME|MS_STRICTATIME, "") = 0
[pid  3687] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  3687] chdir("./file0")            = 0
[pid  3687] ioctl(4, LOOP_CLR_FD)       = 0
[pid  3687] close(4)                    = 0
[pid  3687] openat(AT_FDCWD, "cpuset.effective_mems", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4
[pid  3687] write(4, "\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 16) = 16
[pid  3687] mmap(0x20000000, 12288, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED, 4, 0) = 0x20000000
[pid  3687] openat(AT_FDCWD, "cpuset.effective_mems", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 5
[pid  3687] ioctl(5, FS_IOC_GETVERSION, 0) = -1 EFAULT (Bad address)
[pid  3687] exit_group(0)               = ?
[pid  3687] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3687, si_uid=0, si_status=0, si_utime=0, si_stime=11} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./28", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./28", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555556932620 /* 4 entries */, 32768) = 112
umount2("./28/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./28/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./28/binderfs")                 = 0
[   61.230203][ T3687] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
umount2("./28/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./28/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./28/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./28/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./28/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x55555693a660 /* 2 entries */, 32768) = 48
getdents64(4, 0x55555693a660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./28/file0")                     = 0
getdents64(3, 0x555556932620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./28")                           = 0
mkdir("./29", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555569315d0) = 3689
./strace-static-x86_64: Process 3689 attached
[pid  3689] chdir("./29")               = 0
[pid  3689] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  3689] setpgid(0, 0)               = 0
[pid  3689] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  3689] write(3, "1000", 4)         = 4
[pid  3689] close(3)                    = 0
[pid  3689] symlink("/dev/binderfs", "./binderfs") = 0
[pid  3689] memfd_create("syzkaller", 0) = 3
[pid  3689] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f649246b000
[pid  3689] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  3689] munmap(0x7f649246b000, 4194304) = 0
[pid  3689] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  3689] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  3689] close(3)                    = 0
[pid  3689] mkdir("./file0", 0777)      = 0
[   61.336368][ T3689] loop0: detected capacity change from 0 to 8192
[   61.347526][ T3689] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   61.360791][ T3689] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal
[   61.370174][ T3689] REISERFS (device loop0): using ordered data mode
[   61.376696][ T3689] reiserfs: using flush barriers
[   61.382469][ T3689] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   61.398789][ T3689] REISERFS (device loop0): checking transaction log (loop0)
[   61.424915][ T3689] REISERFS (device loop0): Using r5 hash to sort names
[pid  3689] mount("/dev/loop0", "./file0", "reiserfs", MS_SYNCHRONOUS|MS_DIRSYNC|MS_RELATIME|MS_STRICTATIME, "") = 0
[pid  3689] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  3689] chdir("./file0")            = 0
[pid  3689] ioctl(4, LOOP_CLR_FD)       = 0
[pid  3689] close(4)                    = 0
[pid  3689] openat(AT_FDCWD, "cpuset.effective_mems", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4
[pid  3689] write(4, "\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 16) = 16
[pid  3689] mmap(0x20000000, 12288, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED, 4, 0) = 0x20000000
[pid  3689] openat(AT_FDCWD, "cpuset.effective_mems", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 5
[pid  3689] ioctl(5, FS_IOC_GETVERSION, 0) = -1 EFAULT (Bad address)
[pid  3689] exit_group(0)               = ?
[pid  3689] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3689, si_uid=0, si_status=0, si_utime=0, si_stime=10} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./29", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./29", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555556932620 /* 4 entries */, 32768) = 112
umount2("./29/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./29/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./29/binderfs")                 = 0
[   61.432188][ T3689] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
umount2("./29/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./29/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./29/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./29/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./29/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x55555693a660 /* 2 entries */, 32768) = 48
getdents64(4, 0x55555693a660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./29/file0")                     = 0
getdents64(3, 0x555556932620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./29")                           = 0
mkdir("./30", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555569315d0) = 3691
./strace-static-x86_64: Process 3691 attached
[pid  3691] chdir("./30")               = 0
[pid  3691] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  3691] setpgid(0, 0)               = 0
[pid  3691] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  3691] write(3, "1000", 4)         = 4
[pid  3691] close(3)                    = 0
[pid  3691] symlink("/dev/binderfs", "./binderfs") = 0
[pid  3691] memfd_create("syzkaller", 0) = 3
[pid  3691] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f649246b000
[pid  3691] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  3691] munmap(0x7f649246b000, 4194304) = 0
[pid  3691] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  3691] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  3691] close(3)                    = 0
[pid  3691] mkdir("./file0", 0777)      = 0
[   61.530818][ T3691] loop0: detected capacity change from 0 to 8192
[   61.539780][ T3691] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   61.552917][ T3691] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal
[   61.562164][ T3691] REISERFS (device loop0): using ordered data mode
[   61.568700][ T3691] reiserfs: using flush barriers
[   61.574424][ T3691] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   61.590769][ T3691] REISERFS (device loop0): checking transaction log (loop0)
[   61.616632][ T3691] REISERFS (device loop0): Using r5 hash to sort names
[pid  3691] mount("/dev/loop0", "./file0", "reiserfs", MS_SYNCHRONOUS|MS_DIRSYNC|MS_RELATIME|MS_STRICTATIME, "") = 0
[pid  3691] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  3691] chdir("./file0")            = 0
[pid  3691] ioctl(4, LOOP_CLR_FD)       = 0
[pid  3691] close(4)                    = 0
[pid  3691] openat(AT_FDCWD, "cpuset.effective_mems", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4
[pid  3691] write(4, "\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 16) = 16
[pid  3691] mmap(0x20000000, 12288, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED, 4, 0) = 0x20000000
[pid  3691] openat(AT_FDCWD, "cpuset.effective_mems", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 5
[pid  3691] ioctl(5, FS_IOC_GETVERSION, 0) = -1 EFAULT (Bad address)
[pid  3691] exit_group(0)               = ?
[pid  3691] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3691, si_uid=0, si_status=0, si_utime=0, si_stime=10} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./30", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./30", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555556932620 /* 4 entries */, 32768) = 112
umount2("./30/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./30/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./30/binderfs")                 = 0
[   61.623973][ T3691] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
umount2("./30/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./30/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./30/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./30/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./30/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x55555693a660 /* 2 entries */, 32768) = 48
getdents64(4, 0x55555693a660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./30/file0")                     = 0
getdents64(3, 0x555556932620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./30")                           = 0
mkdir("./31", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555569315d0) = 3693
./strace-static-x86_64: Process 3693 attached
[pid  3693] chdir("./31")               = 0
[pid  3693] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  3693] setpgid(0, 0)               = 0
[pid  3693] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  3693] write(3, "1000", 4)         = 4
[pid  3693] close(3)                    = 0
[pid  3693] symlink("/dev/binderfs", "./binderfs") = 0
[pid  3693] memfd_create("syzkaller", 0) = 3
[pid  3693] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f649246b000
[pid  3693] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  3693] munmap(0x7f649246b000, 4194304) = 0
[pid  3693] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  3693] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  3693] close(3)                    = 0
[pid  3693] mkdir("./file0", 0777)      = 0
[   61.721677][ T3693] loop0: detected capacity change from 0 to 8192
[   61.730379][ T3693] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   61.743736][ T3693] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal
[   61.753249][ T3693] REISERFS (device loop0): using ordered data mode
[   61.760183][ T3693] reiserfs: using flush barriers
[   61.765775][ T3693] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   61.782412][ T3693] REISERFS (device loop0): checking transaction log (loop0)
[   61.809144][ T3693] REISERFS (device loop0): Using r5 hash to sort names
[pid  3693] mount("/dev/loop0", "./file0", "reiserfs", MS_SYNCHRONOUS|MS_DIRSYNC|MS_RELATIME|MS_STRICTATIME, "") = 0
[pid  3693] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  3693] chdir("./file0")            = 0
[pid  3693] ioctl(4, LOOP_CLR_FD)       = 0
[pid  3693] close(4)                    = 0
[pid  3693] openat(AT_FDCWD, "cpuset.effective_mems", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4
[pid  3693] write(4, "\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 16) = 16
[pid  3693] mmap(0x20000000, 12288, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED, 4, 0) = 0x20000000
[pid  3693] openat(AT_FDCWD, "cpuset.effective_mems", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 5
[pid  3693] ioctl(5, FS_IOC_GETVERSION, 0) = -1 EFAULT (Bad address)
[pid  3693] exit_group(0)               = ?
[pid  3693] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3693, si_uid=0, si_status=0, si_utime=0, si_stime=11} ---
umount2("./31", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./31", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555556932620 /* 4 entries */, 32768) = 112
[   61.816545][ T3693] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
umount2("./31/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./31/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./31/binderfs")                 = 0
umount2("./31/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./31/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./31/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./31/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./31/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x55555693a660 /* 2 entries */, 32768) = 48
getdents64(4, 0x55555693a660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./31/file0")                     = 0
getdents64(3, 0x555556932620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./31")                           = 0
mkdir("./32", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555569315d0) = 3695
./strace-static-x86_64: Process 3695 attached
[pid  3695] chdir("./32")               = 0
[pid  3695] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  3695] setpgid(0, 0)               = 0
[pid  3695] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  3695] write(3, "1000", 4)         = 4
[pid  3695] close(3)                    = 0
[pid  3695] symlink("/dev/binderfs", "./binderfs") = 0
[pid  3695] memfd_create("syzkaller", 0) = 3
[pid  3695] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f649246b000
[pid  3695] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  3695] munmap(0x7f649246b000, 4194304) = 0
[pid  3695] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  3695] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  3695] close(3)                    = 0
[pid  3695] mkdir("./file0", 0777)      = 0
[   61.932900][ T3695] loop0: detected capacity change from 0 to 8192
[   61.941963][ T3695] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   61.955028][ T3695] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal
[   61.964539][ T3695] REISERFS (device loop0): using ordered data mode
[   61.971112][ T3695] reiserfs: using flush barriers
[pid  3695] mount("/dev/loop0", "./file0", "reiserfs", MS_SYNCHRONOUS|MS_DIRSYNC|MS_RELATIME|MS_STRICTATIME, "") = 0
[pid  3695] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  3695] chdir("./file0")            = 0
[pid  3695] ioctl(4, LOOP_CLR_FD)       = 0
[pid  3695] close(4)                    = 0
[pid  3695] openat(AT_FDCWD, "cpuset.effective_mems", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4
[   61.976603][ T3695] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   61.993154][ T3695] REISERFS (device loop0): checking transaction log (loop0)
[   62.016742][ T3695] REISERFS (device loop0): Using r5 hash to sort names
[   62.023922][ T3695] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[pid  3695] write(4, "\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 16) = 16
[pid  3695] mmap(0x20000000, 12288, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED, 4, 0) = 0x20000000
[pid  3695] openat(AT_FDCWD, "cpuset.effective_mems", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 5
[pid  3695] ioctl(5, FS_IOC_GETVERSION, 0) = -1 EFAULT (Bad address)
[pid  3695] exit_group(0)               = ?
[pid  3695] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3695, si_uid=0, si_status=0, si_utime=0, si_stime=9} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./32", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./32", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555556932620 /* 4 entries */, 32768) = 112
umount2("./32/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./32/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./32/binderfs")                 = 0
umount2("./32/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./32/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./32/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./32/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./32/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x55555693a660 /* 2 entries */, 32768) = 48
getdents64(4, 0x55555693a660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./32/file0")                     = 0
getdents64(3, 0x555556932620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./32")                           = 0
mkdir("./33", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3697 attached
, child_tidptr=0x5555569315d0) = 3697
[pid  3697] chdir("./33")               = 0
[pid  3697] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  3697] setpgid(0, 0)               = 0
[pid  3697] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  3697] write(3, "1000", 4)         = 4
[pid  3697] close(3)                    = 0
[pid  3697] symlink("/dev/binderfs", "./binderfs") = 0
[pid  3697] memfd_create("syzkaller", 0) = 3
[pid  3697] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f649246b000
[pid  3697] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  3697] munmap(0x7f649246b000, 4194304) = 0
[pid  3697] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  3697] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  3697] close(3)                    = 0
[pid  3697] mkdir("./file0", 0777)      = 0
[   62.127944][ T3697] loop0: detected capacity change from 0 to 8192
[   62.137505][ T3697] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   62.150556][ T3697] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal
[   62.159832][ T3697] REISERFS (device loop0): using ordered data mode
[   62.166425][ T3697] reiserfs: using flush barriers
[   62.172096][ T3697] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   62.188371][ T3697] REISERFS (device loop0): checking transaction log (loop0)
[   62.214558][ T3697] REISERFS (device loop0): Using r5 hash to sort names
[pid  3697] mount("/dev/loop0", "./file0", "reiserfs", MS_SYNCHRONOUS|MS_DIRSYNC|MS_RELATIME|MS_STRICTATIME, "") = 0
[pid  3697] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  3697] chdir("./file0")            = 0
[pid  3697] ioctl(4, LOOP_CLR_FD)       = 0
[pid  3697] close(4)                    = 0
[pid  3697] openat(AT_FDCWD, "cpuset.effective_mems", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4
[pid  3697] write(4, "\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 16) = 16
[pid  3697] mmap(0x20000000, 12288, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED, 4, 0) = 0x20000000
[pid  3697] openat(AT_FDCWD, "cpuset.effective_mems", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 5
[pid  3697] ioctl(5, FS_IOC_GETVERSION, 0) = -1 EFAULT (Bad address)
[pid  3697] exit_group(0)               = ?
[pid  3697] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3697, si_uid=0, si_status=0, si_utime=0, si_stime=9} ---
umount2("./33", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./33", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555556932620 /* 4 entries */, 32768) = 112
umount2("./33/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./33/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./33/binderfs")                 = 0
[   62.221675][ T3697] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
umount2("./33/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./33/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./33/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./33/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./33/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x55555693a660 /* 2 entries */, 32768) = 48
getdents64(4, 0x55555693a660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./33/file0")                     = 0
getdents64(3, 0x555556932620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./33")                           = 0
mkdir("./34", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555569315d0) = 3699
./strace-static-x86_64: Process 3699 attached
[pid  3699] chdir("./34")               = 0
[pid  3699] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  3699] setpgid(0, 0)               = 0
[pid  3699] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  3699] write(3, "1000", 4)         = 4
[pid  3699] close(3)                    = 0
[pid  3699] symlink("/dev/binderfs", "./binderfs") = 0
[pid  3699] memfd_create("syzkaller", 0) = 3
[pid  3699] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f649246b000
[pid  3699] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  3699] munmap(0x7f649246b000, 4194304) = 0
[pid  3699] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  3699] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  3699] close(3)                    = 0
[pid  3699] mkdir("./file0", 0777)      = 0
[   62.321182][ T3699] loop0: detected capacity change from 0 to 8192
[   62.331229][ T3699] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   62.344273][ T3699] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal
[   62.353539][ T3699] REISERFS (device loop0): using ordered data mode
[   62.360122][ T3699] reiserfs: using flush barriers
[   62.365628][ T3699] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   62.382047][ T3699] REISERFS (device loop0): checking transaction log (loop0)
[   62.406062][ T3699] REISERFS (device loop0): Using r5 hash to sort names
[pid  3699] mount("/dev/loop0", "./file0", "reiserfs", MS_SYNCHRONOUS|MS_DIRSYNC|MS_RELATIME|MS_STRICTATIME, "") = 0
[pid  3699] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  3699] chdir("./file0")            = 0
[pid  3699] ioctl(4, LOOP_CLR_FD)       = 0
[pid  3699] close(4)                    = 0
[pid  3699] openat(AT_FDCWD, "cpuset.effective_mems", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4
[pid  3699] write(4, "\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 16) = 16
[pid  3699] mmap(0x20000000, 12288, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED, 4, 0) = 0x20000000
[pid  3699] openat(AT_FDCWD, "cpuset.effective_mems", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 5
[pid  3699] ioctl(5, FS_IOC_GETVERSION, 0) = -1 EFAULT (Bad address)
[pid  3699] exit_group(0)               = ?
[pid  3699] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3699, si_uid=0, si_status=0, si_utime=0, si_stime=11} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./34", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./34", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555556932620 /* 4 entries */, 32768) = 112
umount2("./34/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./34/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./34/binderfs")                 = 0
[   62.413428][ T3699] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
umount2("./34/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./34/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./34/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./34/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./34/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x55555693a660 /* 2 entries */, 32768) = 48
getdents64(4, 0x55555693a660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./34/file0")                     = 0
getdents64(3, 0x555556932620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./34")                           = 0
mkdir("./35", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555569315d0) = 3701
./strace-static-x86_64: Process 3701 attached
[pid  3701] chdir("./35")               = 0
[pid  3701] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  3701] setpgid(0, 0)               = 0
[pid  3701] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  3701] write(3, "1000", 4)         = 4
[pid  3701] close(3)                    = 0
[pid  3701] symlink("/dev/binderfs", "./binderfs") = 0
[pid  3701] memfd_create("syzkaller", 0) = 3
[pid  3701] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f649246b000
[pid  3701] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  3701] munmap(0x7f649246b000, 4194304) = 0
[pid  3701] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  3701] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  3701] close(3)                    = 0
[pid  3701] mkdir("./file0", 0777)      = 0
[   62.523471][ T3701] loop0: detected capacity change from 0 to 8192
[   62.532682][ T3701] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   62.545784][ T3701] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal
[   62.555125][ T3701] REISERFS (device loop0): using ordered data mode
[   62.561682][ T3701] reiserfs: using flush barriers
[pid  3701] mount("/dev/loop0", "./file0", "reiserfs", MS_SYNCHRONOUS|MS_DIRSYNC|MS_RELATIME|MS_STRICTATIME, "") = 0
[   62.567634][ T3701] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   62.584205][ T3701] REISERFS (device loop0): checking transaction log (loop0)
[   62.607992][ T3701] REISERFS (device loop0): Using r5 hash to sort names
[   62.615185][ T3701] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[pid  3701] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  3701] chdir("./file0")            = 0
[pid  3701] ioctl(4, LOOP_CLR_FD)       = 0
[pid  3701] close(4)                    = 0
[pid  3701] openat(AT_FDCWD, "cpuset.effective_mems", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4
[pid  3701] write(4, "\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 16) = 16
[pid  3701] mmap(0x20000000, 12288, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED, 4, 0) = 0x20000000
[pid  3701] openat(AT_FDCWD, "cpuset.effective_mems", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 5
[pid  3701] ioctl(5, FS_IOC_GETVERSION, 0) = -1 EFAULT (Bad address)
[pid  3701] exit_group(0)               = ?
[pid  3701] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3701, si_uid=0, si_status=0, si_utime=0, si_stime=10} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./35", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./35", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555556932620 /* 4 entries */, 32768) = 112
umount2("./35/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./35/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./35/binderfs")                 = 0
umount2("./35/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./35/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./35/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./35/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./35/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x55555693a660 /* 2 entries */, 32768) = 48
getdents64(4, 0x55555693a660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./35/file0")                     = 0
getdents64(3, 0x555556932620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./35")                           = 0
mkdir("./36", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555569315d0) = 3703
./strace-static-x86_64: Process 3703 attached
[pid  3703] chdir("./36")               = 0
[pid  3703] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  3703] setpgid(0, 0)               = 0
[pid  3703] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  3703] write(3, "1000", 4)         = 4
[pid  3703] close(3)                    = 0
[pid  3703] symlink("/dev/binderfs", "./binderfs") = 0
[pid  3703] memfd_create("syzkaller", 0) = 3
[pid  3703] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f649246b000
[pid  3703] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  3703] munmap(0x7f649246b000, 4194304) = 0
[pid  3703] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  3703] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  3703] close(3)                    = 0
[pid  3703] mkdir("./file0", 0777)      = 0
[   62.723910][ T3703] loop0: detected capacity change from 0 to 8192
[   62.734234][ T3703] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   62.747644][ T3703] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal
[   62.756974][ T3703] REISERFS (device loop0): using ordered data mode
[   62.763621][ T3703] reiserfs: using flush barriers
[   62.769340][ T3703] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   62.786718][ T3703] REISERFS (device loop0): checking transaction log (loop0)
[   62.810559][ T3703] REISERFS (device loop0): Using r5 hash to sort names
[pid  3703] mount("/dev/loop0", "./file0", "reiserfs", MS_SYNCHRONOUS|MS_DIRSYNC|MS_RELATIME|MS_STRICTATIME, "") = 0
[pid  3703] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  3703] chdir("./file0")            = 0
[pid  3703] ioctl(4, LOOP_CLR_FD)       = 0
[pid  3703] close(4)                    = 0
[pid  3703] openat(AT_FDCWD, "cpuset.effective_mems", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4
[pid  3703] write(4, "\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 16) = 16
[pid  3703] mmap(0x20000000, 12288, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED, 4, 0) = 0x20000000
[pid  3703] openat(AT_FDCWD, "cpuset.effective_mems", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 5
[pid  3703] ioctl(5, FS_IOC_GETVERSION, 0) = -1 EFAULT (Bad address)
[pid  3703] exit_group(0)               = ?
[pid  3703] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3703, si_uid=0, si_status=0, si_utime=0, si_stime=10} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./36", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./36", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555556932620 /* 4 entries */, 32768) = 112
umount2("./36/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./36/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./36/binderfs")                 = 0
[   62.817829][ T3703] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
umount2("./36/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./36/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./36/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./36/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./36/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x55555693a660 /* 2 entries */, 32768) = 48
getdents64(4, 0x55555693a660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./36/file0")                     = 0
getdents64(3, 0x555556932620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./36")                           = 0
mkdir("./37", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555569315d0) = 3705
./strace-static-x86_64: Process 3705 attached
[pid  3705] chdir("./37")               = 0
[pid  3705] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  3705] setpgid(0, 0)               = 0
[pid  3705] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  3705] write(3, "1000", 4)         = 4
[pid  3705] close(3)                    = 0
[pid  3705] symlink("/dev/binderfs", "./binderfs") = 0
[pid  3705] memfd_create("syzkaller", 0) = 3
[pid  3705] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f649246b000
[pid  3705] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  3705] munmap(0x7f649246b000, 4194304) = 0
[pid  3705] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  3705] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  3705] close(3)                    = 0
[pid  3705] mkdir("./file0", 0777)      = 0
[   62.930930][ T3705] loop0: detected capacity change from 0 to 8192
[   62.940107][ T3705] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   62.953097][ T3705] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal
[   62.962327][ T3705] REISERFS (device loop0): using ordered data mode
[   62.968881][ T3705] reiserfs: using flush barriers
[pid  3705] mount("/dev/loop0", "./file0", "reiserfs", MS_SYNCHRONOUS|MS_DIRSYNC|MS_RELATIME|MS_STRICTATIME, "") = 0
[pid  3705] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  3705] chdir("./file0")            = 0
[pid  3705] ioctl(4, LOOP_CLR_FD)       = 0
[pid  3705] close(4)                    = 0
[pid  3705] openat(AT_FDCWD, "cpuset.effective_mems", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4
[pid  3705] write(4, "\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 16) = 16
[pid  3705] mmap(0x20000000, 12288, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED, 4, 0) = 0x20000000
[pid  3705] openat(AT_FDCWD, "cpuset.effective_mems", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 5
[pid  3705] ioctl(5, FS_IOC_GETVERSION, 0) = -1 EFAULT (Bad address)
[pid  3705] exit_group(0)               = ?
[pid  3705] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3705, si_uid=0, si_status=0, si_utime=0, si_stime=10} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./37", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./37", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555556932620 /* 4 entries */, 32768) = 112
umount2("./37/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./37/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./37/binderfs")                 = 0
[   62.974477][ T3705] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   62.990840][ T3705] REISERFS (device loop0): checking transaction log (loop0)
[   63.014696][ T3705] REISERFS (device loop0): Using r5 hash to sort names
[   63.022058][ T3705] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
umount2("./37/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./37/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./37/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./37/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./37/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x55555693a660 /* 2 entries */, 32768) = 48
getdents64(4, 0x55555693a660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./37/file0")                     = 0
getdents64(3, 0x555556932620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./37")                           = 0
mkdir("./38", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555569315d0) = 3707
./strace-static-x86_64: Process 3707 attached
[pid  3707] chdir("./38")               = 0
[pid  3707] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  3707] setpgid(0, 0)               = 0
[pid  3707] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  3707] write(3, "1000", 4)         = 4
[pid  3707] close(3)                    = 0
[pid  3707] symlink("/dev/binderfs", "./binderfs") = 0
[pid  3707] memfd_create("syzkaller", 0) = 3
[pid  3707] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f649246b000
[pid  3707] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  3707] munmap(0x7f649246b000, 4194304) = 0
[pid  3707] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  3707] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  3707] close(3)                    = 0
[pid  3707] mkdir("./file0", 0777)      = 0
[   63.117538][ T3707] loop0: detected capacity change from 0 to 8192
[   63.126057][ T3707] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   63.139286][ T3707] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal
[   63.148523][ T3707] REISERFS (device loop0): using ordered data mode
[   63.155081][ T3707] reiserfs: using flush barriers
[   63.160784][ T3707] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   63.177302][ T3707] REISERFS (device loop0): checking transaction log (loop0)
[   63.206081][ T3707] REISERFS (device loop0): Using r5 hash to sort names
[pid  3707] mount("/dev/loop0", "./file0", "reiserfs", MS_SYNCHRONOUS|MS_DIRSYNC|MS_RELATIME|MS_STRICTATIME, "") = 0
[pid  3707] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  3707] chdir("./file0")            = 0
[pid  3707] ioctl(4, LOOP_CLR_FD)       = 0
[pid  3707] close(4)                    = 0
[pid  3707] openat(AT_FDCWD, "cpuset.effective_mems", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4
[pid  3707] write(4, "\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 16) = 16
[pid  3707] mmap(0x20000000, 12288, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED, 4, 0) = 0x20000000
[pid  3707] openat(AT_FDCWD, "cpuset.effective_mems", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 5
[pid  3707] ioctl(5, FS_IOC_GETVERSION, 0) = -1 EFAULT (Bad address)
[pid  3707] exit_group(0)               = ?
[pid  3707] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3707, si_uid=0, si_status=0, si_utime=0, si_stime=11} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./38", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./38", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555556932620 /* 4 entries */, 32768) = 112
umount2("./38/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./38/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./38/binderfs")                 = 0
[   63.213427][ T3707] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
umount2("./38/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./38/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./38/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./38/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./38/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x55555693a660 /* 2 entries */, 32768) = 48
getdents64(4, 0x55555693a660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./38/file0")                     = 0
getdents64(3, 0x555556932620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./38")                           = 0
mkdir("./39", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555569315d0) = 3709
./strace-static-x86_64: Process 3709 attached
[pid  3709] chdir("./39")               = 0
[pid  3709] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  3709] setpgid(0, 0)               = 0
[pid  3709] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  3709] write(3, "1000", 4)         = 4
[pid  3709] close(3)                    = 0
[pid  3709] symlink("/dev/binderfs", "./binderfs") = 0
[pid  3709] memfd_create("syzkaller", 0) = 3
[pid  3709] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f649246b000
[pid  3709] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  3709] munmap(0x7f649246b000, 4194304) = 0
[pid  3709] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  3709] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  3709] close(3)                    = 0
[pid  3709] mkdir("./file0", 0777)      = 0
[   63.315070][ T3709] loop0: detected capacity change from 0 to 8192
[   63.325278][ T3709] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   63.338475][ T3709] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal
[   63.347788][ T3709] REISERFS (device loop0): using ordered data mode
[   63.354339][ T3709] reiserfs: using flush barriers
[   63.360067][ T3709] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   63.376652][ T3709] REISERFS (device loop0): checking transaction log (loop0)
[   63.400400][ T3709] REISERFS (device loop0): Using r5 hash to sort names
[pid  3709] mount("/dev/loop0", "./file0", "reiserfs", MS_SYNCHRONOUS|MS_DIRSYNC|MS_RELATIME|MS_STRICTATIME, "") = 0
[pid  3709] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  3709] chdir("./file0")            = 0
[pid  3709] ioctl(4, LOOP_CLR_FD)       = 0
[pid  3709] close(4)                    = 0
[pid  3709] openat(AT_FDCWD, "cpuset.effective_mems", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4
[pid  3709] write(4, "\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 16) = 16
[pid  3709] mmap(0x20000000, 12288, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED, 4, 0) = 0x20000000
[pid  3709] openat(AT_FDCWD, "cpuset.effective_mems", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 5
[pid  3709] ioctl(5, FS_IOC_GETVERSION, 0) = -1 EFAULT (Bad address)
[pid  3709] exit_group(0)               = ?
[pid  3709] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3709, si_uid=0, si_status=0, si_utime=1, si_stime=9} ---
umount2("./39", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./39", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555556932620 /* 4 entries */, 32768) = 112
umount2("./39/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./39/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./39/binderfs")                 = 0
[   63.407576][ T3709] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
umount2("./39/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./39/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./39/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./39/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./39/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x55555693a660 /* 2 entries */, 32768) = 48
getdents64(4, 0x55555693a660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./39/file0")                     = 0
getdents64(3, 0x555556932620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./39")                           = 0
mkdir("./40", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555569315d0) = 3711
./strace-static-x86_64: Process 3711 attached
[pid  3711] chdir("./40")               = 0
[pid  3711] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  3711] setpgid(0, 0)               = 0
[pid  3711] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  3711] write(3, "1000", 4)         = 4
[pid  3711] close(3)                    = 0
[pid  3711] symlink("/dev/binderfs", "./binderfs") = 0
[pid  3711] memfd_create("syzkaller", 0) = 3
[pid  3711] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f649246b000
[pid  3711] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  3711] munmap(0x7f649246b000, 4194304) = 0
[pid  3711] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  3711] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  3711] close(3)                    = 0
[pid  3711] mkdir("./file0", 0777)      = 0
[   63.521466][ T3711] loop0: detected capacity change from 0 to 8192
[   63.530025][ T3711] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   63.543497][ T3711] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal
[   63.553039][ T3711] REISERFS (device loop0): using ordered data mode
[   63.559853][ T3711] reiserfs: using flush barriers
[   63.565511][ T3711] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   63.582192][ T3711] REISERFS (device loop0): checking transaction log (loop0)
[   63.607275][ T3711] REISERFS (device loop0): Using r5 hash to sort names
[pid  3711] mount("/dev/loop0", "./file0", "reiserfs", MS_SYNCHRONOUS|MS_DIRSYNC|MS_RELATIME|MS_STRICTATIME, "") = 0
[pid  3711] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  3711] chdir("./file0")            = 0
[pid  3711] ioctl(4, LOOP_CLR_FD)       = 0
[pid  3711] close(4)                    = 0
[pid  3711] openat(AT_FDCWD, "cpuset.effective_mems", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4
[pid  3711] write(4, "\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 16) = 16
[pid  3711] mmap(0x20000000, 12288, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED, 4, 0) = 0x20000000
[pid  3711] openat(AT_FDCWD, "cpuset.effective_mems", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 5
[pid  3711] ioctl(5, FS_IOC_GETVERSION, 0) = -1 EFAULT (Bad address)
[pid  3711] exit_group(0)               = ?
[pid  3711] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3711, si_uid=0, si_status=0, si_utime=1, si_stime=8} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./40", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./40", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555556932620 /* 4 entries */, 32768) = 112
umount2("./40/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./40/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./40/binderfs")                 = 0
[   63.614325][ T3711] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
umount2("./40/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./40/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./40/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./40/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./40/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x55555693a660 /* 2 entries */, 32768) = 48
getdents64(4, 0x55555693a660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./40/file0")                     = 0
getdents64(3, 0x555556932620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./40")                           = 0
mkdir("./41", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555569315d0) = 3713
./strace-static-x86_64: Process 3713 attached
[pid  3713] chdir("./41")               = 0
[pid  3713] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  3713] setpgid(0, 0)               = 0
[pid  3713] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  3713] write(3, "1000", 4)         = 4
[pid  3713] close(3)                    = 0
[pid  3713] symlink("/dev/binderfs", "./binderfs") = 0
[pid  3713] memfd_create("syzkaller", 0) = 3
[pid  3713] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f649246b000
[pid  3713] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  3713] munmap(0x7f649246b000, 4194304) = 0
[pid  3713] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  3713] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  3713] close(3)                    = 0
[pid  3713] mkdir("./file0", 0777)      = 0
[   63.721333][ T3713] loop0: detected capacity change from 0 to 8192
[   63.730672][ T3713] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   63.743866][ T3713] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal
[   63.753064][ T3713] REISERFS (device loop0): using ordered data mode
[   63.759626][ T3713] reiserfs: using flush barriers
[   63.765155][ T3713] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   63.781704][ T3713] REISERFS (device loop0): checking transaction log (loop0)
[   63.807131][ T3713] REISERFS (device loop0): Using r5 hash to sort names
[pid  3713] mount("/dev/loop0", "./file0", "reiserfs", MS_SYNCHRONOUS|MS_DIRSYNC|MS_RELATIME|MS_STRICTATIME, "") = 0
[pid  3713] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  3713] chdir("./file0")            = 0
[pid  3713] ioctl(4, LOOP_CLR_FD)       = 0
[pid  3713] close(4)                    = 0
[pid  3713] openat(AT_FDCWD, "cpuset.effective_mems", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4
[pid  3713] write(4, "\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 16) = 16
[pid  3713] mmap(0x20000000, 12288, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED, 4, 0) = 0x20000000
[pid  3713] openat(AT_FDCWD, "cpuset.effective_mems", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 5
[pid  3713] ioctl(5, FS_IOC_GETVERSION, 0) = -1 EFAULT (Bad address)
[pid  3713] exit_group(0)               = ?
[pid  3713] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3713, si_uid=0, si_status=0, si_utime=0, si_stime=10} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./41", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./41", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555556932620 /* 4 entries */, 32768) = 112
umount2("./41/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./41/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./41/binderfs")                 = 0
[   63.814254][ T3713] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
umount2("./41/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./41/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./41/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./41/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./41/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x55555693a660 /* 2 entries */, 32768) = 48
getdents64(4, 0x55555693a660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./41/file0")                     = 0
getdents64(3, 0x555556932620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./41")                           = 0
mkdir("./42", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3715 attached
, child_tidptr=0x5555569315d0) = 3715
[pid  3715] chdir("./42")               = 0
[pid  3715] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  3715] setpgid(0, 0)               = 0
[pid  3715] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  3715] write(3, "1000", 4)         = 4
[pid  3715] close(3)                    = 0
[pid  3715] symlink("/dev/binderfs", "./binderfs") = 0
[pid  3715] memfd_create("syzkaller", 0) = 3
[pid  3715] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f649246b000
[pid  3715] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  3715] munmap(0x7f649246b000, 4194304) = 0
[pid  3715] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  3715] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  3715] close(3)                    = 0
[pid  3715] mkdir("./file0", 0777)      = 0
[   63.915089][ T3715] loop0: detected capacity change from 0 to 8192
[   63.923992][ T3715] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   63.937467][ T3715] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal
[   63.946666][ T3715] REISERFS (device loop0): using ordered data mode
[   63.953264][ T3715] reiserfs: using flush barriers
[pid  3715] mount("/dev/loop0", "./file0", "reiserfs", MS_SYNCHRONOUS|MS_DIRSYNC|MS_RELATIME|MS_STRICTATIME, "") = 0
[pid  3715] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  3715] chdir("./file0")            = 0
[pid  3715] ioctl(4, LOOP_CLR_FD)       = 0
[pid  3715] close(4)                    = 0
[pid  3715] openat(AT_FDCWD, "cpuset.effective_mems", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4
[   63.958780][ T3715] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   63.975556][ T3715] REISERFS (device loop0): checking transaction log (loop0)
[   63.999245][ T3715] REISERFS (device loop0): Using r5 hash to sort names
[   64.006543][ T3715] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[pid  3715] write(4, "\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 16) = 16
[pid  3715] mmap(0x20000000, 12288, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED, 4, 0) = 0x20000000
[pid  3715] openat(AT_FDCWD, "cpuset.effective_mems", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 5
[pid  3715] ioctl(5, FS_IOC_GETVERSION, 0) = -1 EFAULT (Bad address)
[pid  3715] exit_group(0)               = ?
[pid  3715] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3715, si_uid=0, si_status=0, si_utime=0, si_stime=11} ---
umount2("./42", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./42", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555556932620 /* 4 entries */, 32768) = 112
umount2("./42/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./42/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./42/binderfs")                 = 0
umount2("./42/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./42/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./42/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./42/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./42/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x55555693a660 /* 2 entries */, 32768) = 48
getdents64(4, 0x55555693a660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./42/file0")                     = 0
getdents64(3, 0x555556932620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./42")                           = 0
mkdir("./43", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555569315d0) = 3717
./strace-static-x86_64: Process 3717 attached
[pid  3717] chdir("./43")               = 0
[pid  3717] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  3717] setpgid(0, 0)               = 0
[pid  3717] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  3717] write(3, "1000", 4)         = 4
[pid  3717] close(3)                    = 0
[pid  3717] symlink("/dev/binderfs", "./binderfs") = 0
[pid  3717] memfd_create("syzkaller", 0) = 3
[pid  3717] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f649246b000
[pid  3717] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  3717] munmap(0x7f649246b000, 4194304) = 0
[pid  3717] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  3717] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  3717] close(3)                    = 0
[pid  3717] mkdir("./file0", 0777)      = 0
[   64.107790][ T3717] loop0: detected capacity change from 0 to 8192
[   64.116700][ T3717] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   64.129980][ T3717] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal
[   64.139177][ T3717] REISERFS (device loop0): using ordered data mode
[   64.145690][ T3717] reiserfs: using flush barriers
[   64.151515][ T3717] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   64.168378][ T3717] REISERFS (device loop0): checking transaction log (loop0)
[   64.195108][ T3717] REISERFS (device loop0): Using r5 hash to sort names
[pid  3717] mount("/dev/loop0", "./file0", "reiserfs", MS_SYNCHRONOUS|MS_DIRSYNC|MS_RELATIME|MS_STRICTATIME, "") = 0
[pid  3717] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  3717] chdir("./file0")            = 0
[pid  3717] ioctl(4, LOOP_CLR_FD)       = 0
[pid  3717] close(4)                    = 0
[pid  3717] openat(AT_FDCWD, "cpuset.effective_mems", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4
[pid  3717] write(4, "\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 16) = 16
[pid  3717] mmap(0x20000000, 12288, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED, 4, 0) = 0x20000000
[pid  3717] openat(AT_FDCWD, "cpuset.effective_mems", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 5
[pid  3717] ioctl(5, FS_IOC_GETVERSION, 0) = -1 EFAULT (Bad address)
[pid  3717] exit_group(0)               = ?
[pid  3717] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3717, si_uid=0, si_status=0, si_utime=0, si_stime=8} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./43", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./43", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555556932620 /* 4 entries */, 32768) = 112
umount2("./43/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./43/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./43/binderfs")                 = 0
[   64.202170][ T3717] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
umount2("./43/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./43/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./43/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./43/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./43/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x55555693a660 /* 2 entries */, 32768) = 48
getdents64(4, 0x55555693a660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./43/file0")                     = 0
getdents64(3, 0x555556932620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./43")                           = 0
mkdir("./44", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555569315d0) = 3719
./strace-static-x86_64: Process 3719 attached
[pid  3719] chdir("./44")               = 0
[pid  3719] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  3719] setpgid(0, 0)               = 0
[pid  3719] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  3719] write(3, "1000", 4)         = 4
[pid  3719] close(3)                    = 0
[pid  3719] symlink("/dev/binderfs", "./binderfs") = 0
[pid  3719] memfd_create("syzkaller", 0) = 3
[pid  3719] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f649246b000
[pid  3719] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  3719] munmap(0x7f649246b000, 4194304) = 0
[pid  3719] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  3719] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  3719] close(3)                    = 0
[pid  3719] mkdir("./file0", 0777)      = 0
[   64.310294][ T3719] loop0: detected capacity change from 0 to 8192
[   64.319713][ T3719] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   64.333031][ T3719] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal
[   64.342569][ T3719] REISERFS (device loop0): using ordered data mode
[   64.349370][ T3719] reiserfs: using flush barriers
[   64.354996][ T3719] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   64.371541][ T3719] REISERFS (device loop0): checking transaction log (loop0)
[   64.395761][ T3719] REISERFS (device loop0): Using r5 hash to sort names
[pid  3719] mount("/dev/loop0", "./file0", "reiserfs", MS_SYNCHRONOUS|MS_DIRSYNC|MS_RELATIME|MS_STRICTATIME, "") = 0
[pid  3719] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  3719] chdir("./file0")            = 0
[pid  3719] ioctl(4, LOOP_CLR_FD)       = 0
[pid  3719] close(4)                    = 0
[pid  3719] openat(AT_FDCWD, "cpuset.effective_mems", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4
[pid  3719] write(4, "\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 16) = 16
[pid  3719] mmap(0x20000000, 12288, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED, 4, 0) = 0x20000000
[pid  3719] openat(AT_FDCWD, "cpuset.effective_mems", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 5
[pid  3719] ioctl(5, FS_IOC_GETVERSION, 0) = -1 EFAULT (Bad address)
[pid  3719] exit_group(0)               = ?
[pid  3719] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3719, si_uid=0, si_status=0, si_utime=1, si_stime=10} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./44", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./44", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555556932620 /* 4 entries */, 32768) = 112
umount2("./44/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./44/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./44/binderfs")                 = 0
[   64.402758][ T3719] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
umount2("./44/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./44/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./44/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./44/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./44/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x55555693a660 /* 2 entries */, 32768) = 48
getdents64(4, 0x55555693a660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./44/file0")                     = 0
getdents64(3, 0x555556932620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./44")                           = 0
mkdir("./45", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555569315d0) = 3721
./strace-static-x86_64: Process 3721 attached
[pid  3721] chdir("./45")               = 0
[pid  3721] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  3721] setpgid(0, 0)               = 0
[pid  3721] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  3721] write(3, "1000", 4)         = 4
[pid  3721] close(3)                    = 0
[pid  3721] symlink("/dev/binderfs", "./binderfs") = 0
[pid  3721] memfd_create("syzkaller", 0) = 3
[pid  3721] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f649246b000
[pid  3721] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  3721] munmap(0x7f649246b000, 4194304) = 0
[pid  3721] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  3721] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  3721] close(3)                    = 0
[pid  3721] mkdir("./file0", 0777)      = 0
[   64.507045][ T3721] loop0: detected capacity change from 0 to 8192
[   64.516450][ T3721] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   64.529810][ T3721] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal
[   64.539122][ T3721] REISERFS (device loop0): using ordered data mode
[   64.545928][ T3721] reiserfs: using flush barriers
[   64.551980][ T3721] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   64.568375][ T3721] REISERFS (device loop0): checking transaction log (loop0)
[   64.594666][ T3721] REISERFS (device loop0): Using r5 hash to sort names
[pid  3721] mount("/dev/loop0", "./file0", "reiserfs", MS_SYNCHRONOUS|MS_DIRSYNC|MS_RELATIME|MS_STRICTATIME, "") = 0
[pid  3721] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  3721] chdir("./file0")            = 0
[pid  3721] ioctl(4, LOOP_CLR_FD)       = 0
[pid  3721] close(4)                    = 0
[pid  3721] openat(AT_FDCWD, "cpuset.effective_mems", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4
[pid  3721] write(4, "\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 16) = 16
[pid  3721] mmap(0x20000000, 12288, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED, 4, 0) = 0x20000000
[pid  3721] openat(AT_FDCWD, "cpuset.effective_mems", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 5
[pid  3721] ioctl(5, FS_IOC_GETVERSION, 0) = -1 EFAULT (Bad address)
[pid  3721] exit_group(0)               = ?
[pid  3721] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3721, si_uid=0, si_status=0, si_utime=0, si_stime=11} ---
umount2("./45", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./45", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555556932620 /* 4 entries */, 32768) = 112
umount2("./45/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./45/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./45/binderfs")                 = 0
[   64.601740][ T3721] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
umount2("./45/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./45/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./45/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./45/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./45/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x55555693a660 /* 2 entries */, 32768) = 48
getdents64(4, 0x55555693a660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./45/file0")                     = 0
getdents64(3, 0x555556932620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./45")                           = 0
mkdir("./46", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555569315d0) = 3723
./strace-static-x86_64: Process 3723 attached
[pid  3723] chdir("./46")               = 0
[pid  3723] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  3723] setpgid(0, 0)               = 0
[pid  3723] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  3723] write(3, "1000", 4)         = 4
[pid  3723] close(3)                    = 0
[pid  3723] symlink("/dev/binderfs", "./binderfs") = 0
[pid  3723] memfd_create("syzkaller", 0) = 3
[pid  3723] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f649246b000
[pid  3723] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  3723] munmap(0x7f649246b000, 4194304) = 0
[pid  3723] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  3723] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  3723] close(3)                    = 0
[pid  3723] mkdir("./file0", 0777)      = 0
[   64.691612][ T3723] loop0: detected capacity change from 0 to 8192
[   64.700414][ T3723] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   64.713936][ T3723] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal
[   64.723569][ T3723] REISERFS (device loop0): using ordered data mode
[   64.730407][ T3723] reiserfs: using flush barriers
[   64.736008][ T3723] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   64.752567][ T3723] REISERFS (device loop0): checking transaction log (loop0)
[   64.776233][ T3723] REISERFS (device loop0): Using r5 hash to sort names
[pid  3723] mount("/dev/loop0", "./file0", "reiserfs", MS_SYNCHRONOUS|MS_DIRSYNC|MS_RELATIME|MS_STRICTATIME, "") = 0
[pid  3723] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  3723] chdir("./file0")            = 0
[pid  3723] ioctl(4, LOOP_CLR_FD)       = 0
[pid  3723] close(4)                    = 0
[pid  3723] openat(AT_FDCWD, "cpuset.effective_mems", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4
[pid  3723] write(4, "\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 16) = 16
[pid  3723] mmap(0x20000000, 12288, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED, 4, 0) = 0x20000000
[pid  3723] openat(AT_FDCWD, "cpuset.effective_mems", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 5
[pid  3723] ioctl(5, FS_IOC_GETVERSION, 0) = -1 EFAULT (Bad address)
[pid  3723] exit_group(0)               = ?
[pid  3723] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3723, si_uid=0, si_status=0, si_utime=0, si_stime=10} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./46", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./46", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555556932620 /* 4 entries */, 32768) = 112
umount2("./46/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./46/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./46/binderfs")                 = 0
[   64.783441][ T3723] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
umount2("./46/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./46/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./46/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./46/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./46/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x55555693a660 /* 2 entries */, 32768) = 48
getdents64(4, 0x55555693a660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./46/file0")                     = 0
getdents64(3, 0x555556932620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./46")                           = 0
mkdir("./47", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555569315d0) = 3725
./strace-static-x86_64: Process 3725 attached
[pid  3725] chdir("./47")               = 0
[pid  3725] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  3725] setpgid(0, 0)               = 0
[pid  3725] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  3725] write(3, "1000", 4)         = 4
[pid  3725] close(3)                    = 0
[pid  3725] symlink("/dev/binderfs", "./binderfs") = 0
[pid  3725] memfd_create("syzkaller", 0) = 3
[pid  3725] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f649246b000
[pid  3725] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  3725] munmap(0x7f649246b000, 4194304) = 0
[pid  3725] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  3725] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  3725] close(3)                    = 0
[pid  3725] mkdir("./file0", 0777)      = 0
[   64.887662][ T3725] loop0: detected capacity change from 0 to 8192
[   64.896572][ T3725] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   64.909862][ T3725] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal
[   64.919159][ T3725] REISERFS (device loop0): using ordered data mode
[   64.925695][ T3725] reiserfs: using flush barriers
[   64.931558][ T3725] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   64.948074][ T3725] REISERFS (device loop0): checking transaction log (loop0)
[   64.973754][ T3725] REISERFS (device loop0): Using r5 hash to sort names
[pid  3725] mount("/dev/loop0", "./file0", "reiserfs", MS_SYNCHRONOUS|MS_DIRSYNC|MS_RELATIME|MS_STRICTATIME, "") = 0
[pid  3725] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  3725] chdir("./file0")            = 0
[pid  3725] ioctl(4, LOOP_CLR_FD)       = 0
[pid  3725] close(4)                    = 0
[pid  3725] openat(AT_FDCWD, "cpuset.effective_mems", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4
[pid  3725] write(4, "\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 16) = 16
[pid  3725] mmap(0x20000000, 12288, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED, 4, 0) = 0x20000000
[pid  3725] openat(AT_FDCWD, "cpuset.effective_mems", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 5
[pid  3725] ioctl(5, FS_IOC_GETVERSION, 0) = -1 EFAULT (Bad address)
[pid  3725] exit_group(0)               = ?
[pid  3725] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3725, si_uid=0, si_status=0, si_utime=0, si_stime=8} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./47", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./47", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555556932620 /* 4 entries */, 32768) = 112
umount2("./47/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./47/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./47/binderfs")                 = 0
[   64.980906][ T3725] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
umount2("./47/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./47/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./47/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./47/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./47/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x55555693a660 /* 2 entries */, 32768) = 48
getdents64(4, 0x55555693a660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./47/file0")                     = 0
getdents64(3, 0x555556932620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./47")                           = 0
mkdir("./48", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555569315d0) = 3727
./strace-static-x86_64: Process 3727 attached
[pid  3727] chdir("./48")               = 0
[pid  3727] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  3727] setpgid(0, 0)               = 0
[pid  3727] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  3727] write(3, "1000", 4)         = 4
[pid  3727] close(3)                    = 0
[pid  3727] symlink("/dev/binderfs", "./binderfs") = 0
[pid  3727] memfd_create("syzkaller", 0) = 3
[pid  3727] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f649246b000
[pid  3727] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  3727] munmap(0x7f649246b000, 4194304) = 0
[pid  3727] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  3727] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  3727] close(3)                    = 0
[pid  3727] mkdir("./file0", 0777)      = 0
[   65.083303][ T3727] loop0: detected capacity change from 0 to 8192
[   65.092401][ T3727] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   65.105640][ T3727] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal
[   65.114910][ T3727] REISERFS (device loop0): using ordered data mode
[   65.121450][ T3727] reiserfs: using flush barriers
[   65.126927][ T3727] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   65.143398][ T3727] REISERFS (device loop0): checking transaction log (loop0)
[   65.170338][ T3727] REISERFS (device loop0): Using r5 hash to sort names
[pid  3727] mount("/dev/loop0", "./file0", "reiserfs", MS_SYNCHRONOUS|MS_DIRSYNC|MS_RELATIME|MS_STRICTATIME, "") = 0
[pid  3727] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  3727] chdir("./file0")            = 0
[pid  3727] ioctl(4, LOOP_CLR_FD)       = 0
[pid  3727] close(4)                    = 0
[pid  3727] openat(AT_FDCWD, "cpuset.effective_mems", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4
[pid  3727] write(4, "\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 16) = 16
[pid  3727] mmap(0x20000000, 12288, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED, 4, 0) = 0x20000000
[pid  3727] openat(AT_FDCWD, "cpuset.effective_mems", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 5
[pid  3727] ioctl(5, FS_IOC_GETVERSION, 0) = -1 EFAULT (Bad address)
[pid  3727] exit_group(0)               = ?
[pid  3727] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3727, si_uid=0, si_status=0, si_utime=1, si_stime=9} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./48", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[   65.177530][ T3727] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
openat(AT_FDCWD, "./48", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555556932620 /* 4 entries */, 32768) = 112
umount2("./48/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./48/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./48/binderfs")                 = 0
umount2("./48/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./48/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./48/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./48/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./48/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x55555693a660 /* 2 entries */, 32768) = 48
getdents64(4, 0x55555693a660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./48/file0")                     = 0
getdents64(3, 0x555556932620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./48")                           = 0
mkdir("./49", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555569315d0) = 3729
./strace-static-x86_64: Process 3729 attached
[pid  3729] chdir("./49")               = 0
[pid  3729] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  3729] setpgid(0, 0)               = 0
[pid  3729] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  3729] write(3, "1000", 4)         = 4
[pid  3729] close(3)                    = 0
[pid  3729] symlink("/dev/binderfs", "./binderfs") = 0
[pid  3729] memfd_create("syzkaller", 0) = 3
[pid  3729] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f649246b000
[pid  3729] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  3729] munmap(0x7f649246b000, 4194304) = 0
[pid  3729] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  3729] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  3729] close(3)                    = 0
[pid  3729] mkdir("./file0", 0777)      = 0
[   65.299972][ T3729] loop0: detected capacity change from 0 to 8192
[   65.309261][ T3729] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   65.322409][ T3729] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal
[   65.331673][ T3729] REISERFS (device loop0): using ordered data mode
[   65.338265][ T3729] reiserfs: using flush barriers
[   65.343867][ T3729] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   65.360219][ T3729] REISERFS (device loop0): checking transaction log (loop0)
[   65.384461][ T3729] REISERFS (device loop0): Using r5 hash to sort names
[pid  3729] mount("/dev/loop0", "./file0", "reiserfs", MS_SYNCHRONOUS|MS_DIRSYNC|MS_RELATIME|MS_STRICTATIME, "") = 0
[pid  3729] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  3729] chdir("./file0")            = 0
[pid  3729] ioctl(4, LOOP_CLR_FD)       = 0
[pid  3729] close(4)                    = 0
[pid  3729] openat(AT_FDCWD, "cpuset.effective_mems", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4
[pid  3729] write(4, "\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 16) = 16
[pid  3729] mmap(0x20000000, 12288, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED, 4, 0) = 0x20000000
[pid  3729] openat(AT_FDCWD, "cpuset.effective_mems", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 5
[pid  3729] ioctl(5, FS_IOC_GETVERSION, 0) = -1 EFAULT (Bad address)
[pid  3729] exit_group(0)               = ?
[pid  3729] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3729, si_uid=0, si_status=0, si_utime=0, si_stime=9} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./49", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./49", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555556932620 /* 4 entries */, 32768) = 112
umount2("./49/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./49/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./49/binderfs")                 = 0
[   65.391813][ T3729] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
umount2("./49/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./49/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./49/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./49/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./49/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x55555693a660 /* 2 entries */, 32768) = 48
getdents64(4, 0x55555693a660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./49/file0")                     = 0
getdents64(3, 0x555556932620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./49")                           = 0
mkdir("./50", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555569315d0) = 3731
./strace-static-x86_64: Process 3731 attached
[pid  3731] chdir("./50")               = 0
[pid  3731] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  3731] setpgid(0, 0)               = 0
[pid  3731] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  3731] write(3, "1000", 4)         = 4
[pid  3731] close(3)                    = 0
[pid  3731] symlink("/dev/binderfs", "./binderfs") = 0
[pid  3731] memfd_create("syzkaller", 0) = 3
[pid  3731] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f649246b000
[pid  3731] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  3731] munmap(0x7f649246b000, 4194304) = 0
[pid  3731] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  3731] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  3731] close(3)                    = 0
[pid  3731] mkdir("./file0", 0777)      = 0
[   65.498913][ T3731] loop0: detected capacity change from 0 to 8192
[   65.507821][ T3731] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   65.520921][ T3731] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal
[   65.530150][ T3731] REISERFS (device loop0): using ordered data mode
[   65.536668][ T3731] reiserfs: using flush barriers
[pid  3731] mount("/dev/loop0", "./file0", "reiserfs", MS_SYNCHRONOUS|MS_DIRSYNC|MS_RELATIME|MS_STRICTATIME, "") = 0
[pid  3731] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  3731] chdir("./file0")            = 0
[pid  3731] ioctl(4, LOOP_CLR_FD)       = 0
[pid  3731] close(4)                    = 0
[pid  3731] openat(AT_FDCWD, "cpuset.effective_mems", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4
[pid  3731] write(4, "\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 16) = 16
[pid  3731] mmap(0x20000000, 12288, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED, 4, 0) = 0x20000000
[pid  3731] openat(AT_FDCWD, "cpuset.effective_mems", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 5
[pid  3731] ioctl(5, FS_IOC_GETVERSION, 0) = -1 EFAULT (Bad address)
[pid  3731] exit_group(0)               = ?
[pid  3731] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3731, si_uid=0, si_status=0, si_utime=0, si_stime=9} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./50", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./50", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555556932620 /* 4 entries */, 32768) = 112
umount2("./50/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./50/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./50/binderfs")                 = 0
[   65.542252][ T3731] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   65.558537][ T3731] REISERFS (device loop0): checking transaction log (loop0)
[   65.582309][ T3731] REISERFS (device loop0): Using r5 hash to sort names
[   65.589610][ T3731] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
umount2("./50/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./50/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./50/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./50/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./50/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x55555693a660 /* 2 entries */, 32768) = 48
getdents64(4, 0x55555693a660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./50/file0")                     = 0
getdents64(3, 0x555556932620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./50")                           = 0
mkdir("./51", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555569315d0) = 3733
./strace-static-x86_64: Process 3733 attached
[pid  3733] chdir("./51")               = 0
[pid  3733] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  3733] setpgid(0, 0)               = 0
[pid  3733] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  3733] write(3, "1000", 4)         = 4
[pid  3733] close(3)                    = 0
[pid  3733] symlink("/dev/binderfs", "./binderfs") = 0
[pid  3733] memfd_create("syzkaller", 0) = 3
[pid  3733] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f649246b000
[pid  3733] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  3733] munmap(0x7f649246b000, 4194304) = 0
[pid  3733] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  3733] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  3733] close(3)                    = 0
[pid  3733] mkdir("./file0", 0777)      = 0
[   65.682795][ T3733] loop0: detected capacity change from 0 to 8192
[   65.691799][ T3733] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   65.705143][ T3733] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal
[   65.714375][ T3733] REISERFS (device loop0): using ordered data mode
[   65.720929][ T3733] reiserfs: using flush barriers
[   65.726748][ T3733] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   65.743156][ T3733] REISERFS (device loop0): checking transaction log (loop0)
[   65.770129][ T3733] REISERFS (device loop0): Using r5 hash to sort names
[pid  3733] mount("/dev/loop0", "./file0", "reiserfs", MS_SYNCHRONOUS|MS_DIRSYNC|MS_RELATIME|MS_STRICTATIME, "") = 0
[pid  3733] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  3733] chdir("./file0")            = 0
[pid  3733] ioctl(4, LOOP_CLR_FD)       = 0
[pid  3733] close(4)                    = 0
[pid  3733] openat(AT_FDCWD, "cpuset.effective_mems", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4
[pid  3733] write(4, "\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 16) = 16
[pid  3733] mmap(0x20000000, 12288, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED, 4, 0) = 0x20000000
[pid  3733] openat(AT_FDCWD, "cpuset.effective_mems", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 5
[pid  3733] ioctl(5, FS_IOC_GETVERSION, 0) = -1 EFAULT (Bad address)
[pid  3733] exit_group(0)               = ?
[pid  3733] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3733, si_uid=0, si_status=0, si_utime=0, si_stime=11} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./51", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./51", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555556932620 /* 4 entries */, 32768) = 112
umount2("./51/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./51/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./51/binderfs")                 = 0
[   65.777482][ T3733] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
umount2("./51/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./51/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./51/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./51/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./51/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x55555693a660 /* 2 entries */, 32768) = 48
getdents64(4, 0x55555693a660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./51/file0")                     = 0
getdents64(3, 0x555556932620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./51")                           = 0
mkdir("./52", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555569315d0) = 3735
./strace-static-x86_64: Process 3735 attached
[pid  3735] chdir("./52")               = 0
[pid  3735] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  3735] setpgid(0, 0)               = 0
[pid  3735] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  3735] write(3, "1000", 4)         = 4
[pid  3735] close(3)                    = 0
[pid  3735] symlink("/dev/binderfs", "./binderfs") = 0
[pid  3735] memfd_create("syzkaller", 0) = 3
[pid  3735] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f649246b000
[pid  3735] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  3735] munmap(0x7f649246b000, 4194304) = 0
[pid  3735] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  3735] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  3735] close(3)                    = 0
[pid  3735] mkdir("./file0", 0777)      = 0
[   65.877029][ T3735] loop0: detected capacity change from 0 to 8192
[   65.886804][ T3735] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   65.899858][ T3735] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal
[   65.909183][ T3735] REISERFS (device loop0): using ordered data mode
[   65.915692][ T3735] reiserfs: using flush barriers
[   65.921366][ T3735] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   65.937702][ T3735] REISERFS (device loop0): checking transaction log (loop0)
[   65.961760][ T3735] REISERFS (device loop0): Using r5 hash to sort names
[pid  3735] mount("/dev/loop0", "./file0", "reiserfs", MS_SYNCHRONOUS|MS_DIRSYNC|MS_RELATIME|MS_STRICTATIME, "") = 0
[pid  3735] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  3735] chdir("./file0")            = 0
[pid  3735] ioctl(4, LOOP_CLR_FD)       = 0
[pid  3735] close(4)                    = 0
[pid  3735] openat(AT_FDCWD, "cpuset.effective_mems", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4
[pid  3735] write(4, "\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 16) = 16
[pid  3735] mmap(0x20000000, 12288, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED, 4, 0) = 0x20000000
[pid  3735] openat(AT_FDCWD, "cpuset.effective_mems", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 5
[pid  3735] ioctl(5, FS_IOC_GETVERSION, 0) = -1 EFAULT (Bad address)
[pid  3735] exit_group(0)               = ?
[pid  3735] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3735, si_uid=0, si_status=0, si_utime=0, si_stime=10} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./52", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./52", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555556932620 /* 4 entries */, 32768) = 112
umount2("./52/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./52/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./52/binderfs")                 = 0
[   65.969027][ T3735] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
umount2("./52/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./52/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./52/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./52/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./52/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x55555693a660 /* 2 entries */, 32768) = 48
getdents64(4, 0x55555693a660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./52/file0")                     = 0
getdents64(3, 0x555556932620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./52")                           = 0
mkdir("./53", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555569315d0) = 3737
./strace-static-x86_64: Process 3737 attached
[pid  3737] chdir("./53")               = 0
[pid  3737] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  3737] setpgid(0, 0)               = 0
[pid  3737] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  3737] write(3, "1000", 4)         = 4
[pid  3737] close(3)                    = 0
[pid  3737] symlink("/dev/binderfs", "./binderfs") = 0
[pid  3737] memfd_create("syzkaller", 0) = 3
[pid  3737] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f649246b000
[pid  3737] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  3737] munmap(0x7f649246b000, 4194304) = 0
[pid  3737] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  3737] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  3737] close(3)                    = 0
[pid  3737] mkdir("./file0", 0777)      = 0
[   66.068327][ T3737] loop0: detected capacity change from 0 to 8192
[   66.078176][ T3737] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   66.091418][ T3737] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal
[   66.100874][ T3737] REISERFS (device loop0): using ordered data mode
[   66.107448][ T3737] reiserfs: using flush barriers
[   66.112901][ T3737] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   66.129293][ T3737] REISERFS (device loop0): checking transaction log (loop0)
[   66.153183][ T3737] REISERFS (device loop0): Using r5 hash to sort names
[pid  3737] mount("/dev/loop0", "./file0", "reiserfs", MS_SYNCHRONOUS|MS_DIRSYNC|MS_RELATIME|MS_STRICTATIME, "") = 0
[pid  3737] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  3737] chdir("./file0")            = 0
[pid  3737] ioctl(4, LOOP_CLR_FD)       = 0
[pid  3737] close(4)                    = 0
[pid  3737] openat(AT_FDCWD, "cpuset.effective_mems", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4
[pid  3737] write(4, "\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 16) = 16
[pid  3737] mmap(0x20000000, 12288, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED, 4, 0) = 0x20000000
[pid  3737] openat(AT_FDCWD, "cpuset.effective_mems", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 5
[pid  3737] ioctl(5, FS_IOC_GETVERSION, 0) = -1 EFAULT (Bad address)
[pid  3737] exit_group(0)               = ?
[pid  3737] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3737, si_uid=0, si_status=0, si_utime=0, si_stime=11} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./53", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./53", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555556932620 /* 4 entries */, 32768) = 112
umount2("./53/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./53/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./53/binderfs")                 = 0
[   66.160357][ T3737] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
umount2("./53/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./53/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./53/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./53/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./53/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x55555693a660 /* 2 entries */, 32768) = 48
getdents64(4, 0x55555693a660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./53/file0")                     = 0
getdents64(3, 0x555556932620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./53")                           = 0
mkdir("./54", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555569315d0) = 3739
./strace-static-x86_64: Process 3739 attached
[pid  3739] chdir("./54")               = 0
[pid  3739] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  3739] setpgid(0, 0)               = 0
[pid  3739] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  3739] write(3, "1000", 4)         = 4
[pid  3739] close(3)                    = 0
[pid  3739] symlink("/dev/binderfs", "./binderfs") = 0
[pid  3739] memfd_create("syzkaller", 0) = 3
[pid  3739] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f649246b000
[pid  3739] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  3739] munmap(0x7f649246b000, 4194304) = 0
[pid  3739] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  3739] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  3739] close(3)                    = 0
[pid  3739] mkdir("./file0", 0777)      = 0
[   66.260673][ T3739] loop0: detected capacity change from 0 to 8192
[   66.268981][ T3739] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   66.282108][ T3739] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal
[   66.291398][ T3739] REISERFS (device loop0): using ordered data mode
[   66.297932][ T3739] reiserfs: using flush barriers
[   66.303545][ T3739] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   66.319863][ T3739] REISERFS (device loop0): checking transaction log (loop0)
[   66.346573][ T3739] REISERFS (device loop0): Using r5 hash to sort names
[pid  3739] mount("/dev/loop0", "./file0", "reiserfs", MS_SYNCHRONOUS|MS_DIRSYNC|MS_RELATIME|MS_STRICTATIME, "") = 0
[pid  3739] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  3739] chdir("./file0")            = 0
[pid  3739] ioctl(4, LOOP_CLR_FD)       = 0
[pid  3739] close(4)                    = 0
[pid  3739] openat(AT_FDCWD, "cpuset.effective_mems", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4
[pid  3739] write(4, "\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 16) = 16
[pid  3739] mmap(0x20000000, 12288, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED, 4, 0) = 0x20000000
[pid  3739] openat(AT_FDCWD, "cpuset.effective_mems", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 5
[pid  3739] ioctl(5, FS_IOC_GETVERSION, 0) = -1 EFAULT (Bad address)
[pid  3739] exit_group(0)               = ?
[pid  3739] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3739, si_uid=0, si_status=0, si_utime=1, si_stime=8} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./54", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./54", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555556932620 /* 4 entries */, 32768) = 112
umount2("./54/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./54/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./54/binderfs")                 = 0
[   66.353662][ T3739] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
umount2("./54/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./54/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./54/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./54/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./54/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x55555693a660 /* 2 entries */, 32768) = 48
getdents64(4, 0x55555693a660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./54/file0")                     = 0
getdents64(3, 0x555556932620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./54")                           = 0
mkdir("./55", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555569315d0) = 3741
./strace-static-x86_64: Process 3741 attached
[pid  3741] chdir("./55")               = 0
[pid  3741] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  3741] setpgid(0, 0)               = 0
[pid  3741] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  3741] write(3, "1000", 4)         = 4
[pid  3741] close(3)                    = 0
[pid  3741] symlink("/dev/binderfs", "./binderfs") = 0
[pid  3741] memfd_create("syzkaller", 0) = 3
[pid  3741] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f649246b000
[pid  3741] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  3741] munmap(0x7f649246b000, 4194304) = 0
[pid  3741] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  3741] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  3741] close(3)                    = 0
[pid  3741] mkdir("./file0", 0777)      = 0
[   66.465281][ T3741] loop0: detected capacity change from 0 to 8192
[   66.474494][ T3741] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   66.487776][ T3741] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal
[   66.496971][ T3741] REISERFS (device loop0): using ordered data mode
[   66.503504][ T3741] reiserfs: using flush barriers
[   66.508976][ T3741] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   66.525446][ T3741] REISERFS (device loop0): checking transaction log (loop0)
[   66.552381][ T3741] REISERFS (device loop0): Using r5 hash to sort names
[pid  3741] mount("/dev/loop0", "./file0", "reiserfs", MS_SYNCHRONOUS|MS_DIRSYNC|MS_RELATIME|MS_STRICTATIME, "") = 0
[pid  3741] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  3741] chdir("./file0")            = 0
[pid  3741] ioctl(4, LOOP_CLR_FD)       = 0
[pid  3741] close(4)                    = 0
[pid  3741] openat(AT_FDCWD, "cpuset.effective_mems", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4
[pid  3741] write(4, "\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 16) = 16
[pid  3741] mmap(0x20000000, 12288, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED, 4, 0) = 0x20000000
[pid  3741] openat(AT_FDCWD, "cpuset.effective_mems", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 5
[pid  3741] ioctl(5, FS_IOC_GETVERSION, 0) = -1 EFAULT (Bad address)
[pid  3741] exit_group(0)               = ?
[pid  3741] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3741, si_uid=0, si_status=0, si_utime=0, si_stime=12} ---
umount2("./55", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./55", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555556932620 /* 4 entries */, 32768) = 112
umount2("./55/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./55/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./55/binderfs")                 = 0
[   66.559446][ T3741] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
umount2("./55/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./55/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./55/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./55/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./55/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x55555693a660 /* 2 entries */, 32768) = 48
getdents64(4, 0x55555693a660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./55/file0")                     = 0
getdents64(3, 0x555556932620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./55")                           = 0
mkdir("./56", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555569315d0) = 3743
./strace-static-x86_64: Process 3743 attached
[pid  3743] chdir("./56")               = 0
[pid  3743] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  3743] setpgid(0, 0)               = 0
[pid  3743] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  3743] write(3, "1000", 4)         = 4
[pid  3743] close(3)                    = 0
[pid  3743] symlink("/dev/binderfs", "./binderfs") = 0
[pid  3743] memfd_create("syzkaller", 0) = 3
[pid  3743] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f649246b000
[pid  3743] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  3743] munmap(0x7f649246b000, 4194304) = 0
[pid  3743] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  3743] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  3743] close(3)                    = 0
[pid  3743] mkdir("./file0", 0777)      = 0
[   66.669219][ T3743] loop0: detected capacity change from 0 to 8192
[   66.678497][ T3743] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   66.691575][ T3743] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal
[   66.700840][ T3743] REISERFS (device loop0): using ordered data mode
[   66.708011][ T3743] reiserfs: using flush barriers
[   66.713546][ T3743] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   66.729993][ T3743] REISERFS (device loop0): checking transaction log (loop0)
[   66.753846][ T3743] REISERFS (device loop0): Using r5 hash to sort names
[pid  3743] mount("/dev/loop0", "./file0", "reiserfs", MS_SYNCHRONOUS|MS_DIRSYNC|MS_RELATIME|MS_STRICTATIME, "") = 0
[pid  3743] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  3743] chdir("./file0")            = 0
[pid  3743] ioctl(4, LOOP_CLR_FD)       = 0
[pid  3743] close(4)                    = 0
[pid  3743] openat(AT_FDCWD, "cpuset.effective_mems", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4
[pid  3743] write(4, "\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 16) = 16
[pid  3743] mmap(0x20000000, 12288, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED, 4, 0) = 0x20000000
[pid  3743] openat(AT_FDCWD, "cpuset.effective_mems", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 5
[pid  3743] ioctl(5, FS_IOC_GETVERSION, 0) = -1 EFAULT (Bad address)
[pid  3743] exit_group(0)               = ?
[pid  3743] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3743, si_uid=0, si_status=0, si_utime=0, si_stime=8} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./56", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./56", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555556932620 /* 4 entries */, 32768) = 112
umount2("./56/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./56/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./56/binderfs")                 = 0
[   66.761045][ T3743] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
umount2("./56/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./56/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./56/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./56/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./56/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x55555693a660 /* 2 entries */, 32768) = 48
getdents64(4, 0x55555693a660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./56/file0")                     = 0
getdents64(3, 0x555556932620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./56")                           = 0
mkdir("./57", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555569315d0) = 3745
./strace-static-x86_64: Process 3745 attached
[pid  3745] chdir("./57")               = 0
[pid  3745] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  3745] setpgid(0, 0)               = 0
[pid  3745] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  3745] write(3, "1000", 4)         = 4
[pid  3745] close(3)                    = 0
[pid  3745] symlink("/dev/binderfs", "./binderfs") = 0
[pid  3745] memfd_create("syzkaller", 0) = 3
[pid  3745] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f649246b000
[pid  3745] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  3745] munmap(0x7f649246b000, 4194304) = 0
[pid  3745] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  3745] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  3745] close(3)                    = 0
[pid  3745] mkdir("./file0", 0777)      = 0
[   66.867039][ T3745] loop0: detected capacity change from 0 to 8192
[   66.876761][ T3745] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   66.889962][ T3745] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal
[   66.899216][ T3745] REISERFS (device loop0): using ordered data mode
[   66.905762][ T3745] reiserfs: using flush barriers
[pid  3745] mount("/dev/loop0", "./file0", "reiserfs", MS_SYNCHRONOUS|MS_DIRSYNC|MS_RELATIME|MS_STRICTATIME, "") = 0
[   66.911360][ T3745] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   66.927706][ T3745] REISERFS (device loop0): checking transaction log (loop0)
[   66.951444][ T3745] REISERFS (device loop0): Using r5 hash to sort names
[pid  3745] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  3745] chdir("./file0")            = 0
[pid  3745] ioctl(4, LOOP_CLR_FD)       = 0
[pid  3745] close(4)                    = 0
[pid  3745] openat(AT_FDCWD, "cpuset.effective_mems", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4
[pid  3745] write(4, "\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 16) = 16
[pid  3745] mmap(0x20000000, 12288, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED, 4, 0) = 0x20000000
[pid  3745] openat(AT_FDCWD, "cpuset.effective_mems", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 5
[pid  3745] ioctl(5, FS_IOC_GETVERSION, 0) = -1 EFAULT (Bad address)
[pid  3745] exit_group(0)               = ?
[pid  3745] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3745, si_uid=0, si_status=0, si_utime=0, si_stime=10} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./57", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./57", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555556932620 /* 4 entries */, 32768) = 112
umount2("./57/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./57/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./57/binderfs")                 = 0
[   66.958780][ T3745] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
umount2("./57/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./57/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./57/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./57/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./57/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x55555693a660 /* 2 entries */, 32768) = 48
getdents64(4, 0x55555693a660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./57/file0")                     = 0
getdents64(3, 0x555556932620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./57")                           = 0
mkdir("./58", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555569315d0) = 3747
./strace-static-x86_64: Process 3747 attached
[pid  3747] chdir("./58")               = 0
[pid  3747] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  3747] setpgid(0, 0)               = 0
[pid  3747] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  3747] write(3, "1000", 4)         = 4
[pid  3747] close(3)                    = 0
[pid  3747] symlink("/dev/binderfs", "./binderfs") = 0
[pid  3747] memfd_create("syzkaller", 0) = 3
[pid  3747] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f649246b000
[pid  3747] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  3747] munmap(0x7f649246b000, 4194304) = 0
[pid  3747] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  3747] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  3747] close(3)                    = 0
[pid  3747] mkdir("./file0", 0777)      = 0
[   67.057938][ T3747] loop0: detected capacity change from 0 to 8192
[   67.067033][ T3747] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   67.080327][ T3747] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal
[   67.089585][ T3747] REISERFS (device loop0): using ordered data mode
[   67.096108][ T3747] reiserfs: using flush barriers
[   67.102071][ T3747] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   67.118350][ T3747] REISERFS (device loop0): checking transaction log (loop0)
[   67.145423][ T3747] REISERFS (device loop0): Using r5 hash to sort names
[pid  3747] mount("/dev/loop0", "./file0", "reiserfs", MS_SYNCHRONOUS|MS_DIRSYNC|MS_RELATIME|MS_STRICTATIME, "") = 0
[pid  3747] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  3747] chdir("./file0")            = 0
[pid  3747] ioctl(4, LOOP_CLR_FD)       = 0
[pid  3747] close(4)                    = 0
[pid  3747] openat(AT_FDCWD, "cpuset.effective_mems", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4
[pid  3747] write(4, "\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 16) = 16
[pid  3747] mmap(0x20000000, 12288, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED, 4, 0) = 0x20000000
[pid  3747] openat(AT_FDCWD, "cpuset.effective_mems", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 5
[pid  3747] ioctl(5, FS_IOC_GETVERSION, 0) = -1 EFAULT (Bad address)
[pid  3747] exit_group(0)               = ?
[pid  3747] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3747, si_uid=0, si_status=0, si_utime=0, si_stime=10} ---
umount2("./58", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./58", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555556932620 /* 4 entries */, 32768) = 112
umount2("./58/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./58/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./58/binderfs")                 = 0
[   67.152529][ T3747] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
umount2("./58/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./58/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./58/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./58/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./58/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x55555693a660 /* 2 entries */, 32768) = 48
getdents64(4, 0x55555693a660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./58/file0")                     = 0
getdents64(3, 0x555556932620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./58")                           = 0
mkdir("./59", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555569315d0) = 3749
./strace-static-x86_64: Process 3749 attached
[pid  3749] chdir("./59")               = 0
[pid  3749] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  3749] setpgid(0, 0)               = 0
[pid  3749] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  3749] write(3, "1000", 4)         = 4
[pid  3749] close(3)                    = 0
[pid  3749] symlink("/dev/binderfs", "./binderfs") = 0
[pid  3749] memfd_create("syzkaller", 0) = 3
[pid  3749] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f649246b000
[pid  3749] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  3749] munmap(0x7f649246b000, 4194304) = 0
[pid  3749] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  3749] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  3749] close(3)                    = 0
[pid  3749] mkdir("./file0", 0777)      = 0
[   67.249657][ T3749] loop0: detected capacity change from 0 to 8192
[   67.259249][ T3749] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   67.272461][ T3749] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal
[   67.281688][ T3749] REISERFS (device loop0): using ordered data mode
[   67.288309][ T3749] reiserfs: using flush barriers
[   67.293810][ T3749] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   67.310163][ T3749] REISERFS (device loop0): checking transaction log (loop0)
[   67.335997][ T3749] REISERFS (device loop0): Using r5 hash to sort names
[pid  3749] mount("/dev/loop0", "./file0", "reiserfs", MS_SYNCHRONOUS|MS_DIRSYNC|MS_RELATIME|MS_STRICTATIME, "") = 0
[pid  3749] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  3749] chdir("./file0")            = 0
[pid  3749] ioctl(4, LOOP_CLR_FD)       = 0
[pid  3749] close(4)                    = 0
[pid  3749] openat(AT_FDCWD, "cpuset.effective_mems", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4
[pid  3749] write(4, "\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 16) = 16
[pid  3749] mmap(0x20000000, 12288, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED, 4, 0) = 0x20000000
[pid  3749] openat(AT_FDCWD, "cpuset.effective_mems", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 5
[pid  3749] ioctl(5, FS_IOC_GETVERSION, 0) = -1 EFAULT (Bad address)
[pid  3749] exit_group(0)               = ?
[pid  3749] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3749, si_uid=0, si_status=0, si_utime=1, si_stime=9} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./59", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./59", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555556932620 /* 4 entries */, 32768) = 112
umount2("./59/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./59/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./59/binderfs")                 = 0
[   67.343368][ T3749] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
umount2("./59/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./59/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./59/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./59/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./59/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x55555693a660 /* 2 entries */, 32768) = 48
getdents64(4, 0x55555693a660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./59/file0")                     = 0
getdents64(3, 0x555556932620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./59")                           = 0
mkdir("./60", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555569315d0) = 3751
./strace-static-x86_64: Process 3751 attached
[pid  3751] chdir("./60")               = 0
[pid  3751] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  3751] setpgid(0, 0)               = 0
[pid  3751] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  3751] write(3, "1000", 4)         = 4
[pid  3751] close(3)                    = 0
[pid  3751] symlink("/dev/binderfs", "./binderfs") = 0
[pid  3751] memfd_create("syzkaller", 0) = 3
[pid  3751] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f649246b000
[pid  3751] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  3751] munmap(0x7f649246b000, 4194304) = 0
[pid  3751] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  3751] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  3751] close(3)                    = 0
[pid  3751] mkdir("./file0", 0777)      = 0
[   67.453368][ T3751] loop0: detected capacity change from 0 to 8192
[   67.462557][ T3751] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   67.475577][ T3751] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal
[   67.484800][ T3751] REISERFS (device loop0): using ordered data mode
[   67.491374][ T3751] reiserfs: using flush barriers
[   67.496998][ T3751] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   67.513329][ T3751] REISERFS (device loop0): checking transaction log (loop0)
[   67.539710][ T3751] REISERFS (device loop0): Using r5 hash to sort names
[pid  3751] mount("/dev/loop0", "./file0", "reiserfs", MS_SYNCHRONOUS|MS_DIRSYNC|MS_RELATIME|MS_STRICTATIME, "") = 0
[pid  3751] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  3751] chdir("./file0")            = 0
[pid  3751] ioctl(4, LOOP_CLR_FD)       = 0
[pid  3751] close(4)                    = 0
[pid  3751] openat(AT_FDCWD, "cpuset.effective_mems", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4
[pid  3751] write(4, "\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 16) = 16
[pid  3751] mmap(0x20000000, 12288, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED, 4, 0) = 0x20000000
[pid  3751] openat(AT_FDCWD, "cpuset.effective_mems", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 5
[pid  3751] ioctl(5, FS_IOC_GETVERSION, 0) = -1 EFAULT (Bad address)
[pid  3751] exit_group(0)               = ?
[pid  3751] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3751, si_uid=0, si_status=0, si_utime=0, si_stime=9} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./60", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./60", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555556932620 /* 4 entries */, 32768) = 112
umount2("./60/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./60/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./60/binderfs")                 = 0
[   67.546846][ T3751] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
umount2("./60/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./60/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./60/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./60/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./60/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x55555693a660 /* 2 entries */, 32768) = 48
getdents64(4, 0x55555693a660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./60/file0")                     = 0
getdents64(3, 0x555556932620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./60")                           = 0
mkdir("./61", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555569315d0) = 3753
./strace-static-x86_64: Process 3753 attached
[pid  3753] chdir("./61")               = 0
[pid  3753] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  3753] setpgid(0, 0)               = 0
[pid  3753] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  3753] write(3, "1000", 4)         = 4
[pid  3753] close(3)                    = 0
[pid  3753] symlink("/dev/binderfs", "./binderfs") = 0
[pid  3753] memfd_create("syzkaller", 0) = 3
[pid  3753] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f649246b000
[pid  3753] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  3753] munmap(0x7f649246b000, 4194304) = 0
[pid  3753] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  3753] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  3753] close(3)                    = 0
[pid  3753] mkdir("./file0", 0777)      = 0
[   67.648816][ T3753] loop0: detected capacity change from 0 to 8192
[   67.657971][ T3753] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   67.671049][ T3753] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal
[   67.680366][ T3753] REISERFS (device loop0): using ordered data mode
[   67.686899][ T3753] reiserfs: using flush barriers
[   67.692743][ T3753] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   67.709147][ T3753] REISERFS (device loop0): checking transaction log (loop0)
[   67.735878][ T3753] REISERFS (device loop0): Using r5 hash to sort names
[pid  3753] mount("/dev/loop0", "./file0", "reiserfs", MS_SYNCHRONOUS|MS_DIRSYNC|MS_RELATIME|MS_STRICTATIME, "") = 0
[pid  3753] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  3753] chdir("./file0")            = 0
[pid  3753] ioctl(4, LOOP_CLR_FD)       = 0
[pid  3753] close(4)                    = 0
[pid  3753] openat(AT_FDCWD, "cpuset.effective_mems", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4
[pid  3753] write(4, "\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 16) = 16
[pid  3753] mmap(0x20000000, 12288, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED, 4, 0) = 0x20000000
[pid  3753] openat(AT_FDCWD, "cpuset.effective_mems", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 5
[pid  3753] ioctl(5, FS_IOC_GETVERSION, 0) = -1 EFAULT (Bad address)
[pid  3753] exit_group(0)               = ?
[pid  3753] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3753, si_uid=0, si_status=0, si_utime=0, si_stime=9} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./61", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./61", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555556932620 /* 4 entries */, 32768) = 112
umount2("./61/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./61/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./61/binderfs")                 = 0
[   67.742965][ T3753] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
umount2("./61/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./61/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./61/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./61/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./61/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x55555693a660 /* 2 entries */, 32768) = 48
getdents64(4, 0x55555693a660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./61/file0")                     = 0
getdents64(3, 0x555556932620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./61")                           = 0
mkdir("./62", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555569315d0) = 3755
./strace-static-x86_64: Process 3755 attached
[pid  3755] chdir("./62")               = 0
[pid  3755] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  3755] setpgid(0, 0)               = 0
[pid  3755] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  3755] write(3, "1000", 4)         = 4
[pid  3755] close(3)                    = 0
[pid  3755] symlink("/dev/binderfs", "./binderfs") = 0
[pid  3755] memfd_create("syzkaller", 0) = 3
[pid  3755] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f649246b000
[pid  3755] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  3755] munmap(0x7f649246b000, 4194304) = 0
[pid  3755] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  3755] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  3755] close(3)                    = 0
[pid  3755] mkdir("./file0", 0777)      = 0
[   67.845871][ T3755] loop0: detected capacity change from 0 to 8192
[   67.855272][ T3755] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   67.868457][ T3755] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal
[   67.877979][ T3755] REISERFS (device loop0): using ordered data mode
[   67.884501][ T3755] reiserfs: using flush barriers
[   67.890241][ T3755] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   67.906641][ T3755] REISERFS (device loop0): checking transaction log (loop0)
[   67.934427][ T3755] REISERFS (device loop0): Using r5 hash to sort names
[pid  3755] mount("/dev/loop0", "./file0", "reiserfs", MS_SYNCHRONOUS|MS_DIRSYNC|MS_RELATIME|MS_STRICTATIME, "") = 0
[pid  3755] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  3755] chdir("./file0")            = 0
[pid  3755] ioctl(4, LOOP_CLR_FD)       = 0
[pid  3755] close(4)                    = 0
[pid  3755] openat(AT_FDCWD, "cpuset.effective_mems", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4
[pid  3755] write(4, "\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 16) = 16
[pid  3755] mmap(0x20000000, 12288, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED, 4, 0) = 0x20000000
[pid  3755] openat(AT_FDCWD, "cpuset.effective_mems", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 5
[pid  3755] ioctl(5, FS_IOC_GETVERSION, 0) = -1 EFAULT (Bad address)
[pid  3755] exit_group(0)               = ?
[pid  3755] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3755, si_uid=0, si_status=0, si_utime=0, si_stime=10} ---
umount2("./62", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./62", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555556932620 /* 4 entries */, 32768) = 112
umount2("./62/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./62/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./62/binderfs")                 = 0
[   67.941764][ T3755] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
umount2("./62/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./62/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./62/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./62/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./62/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x55555693a660 /* 2 entries */, 32768) = 48
getdents64(4, 0x55555693a660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./62/file0")                     = 0
getdents64(3, 0x555556932620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./62")                           = 0
mkdir("./63", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555569315d0) = 3757
./strace-static-x86_64: Process 3757 attached
[pid  3757] chdir("./63")               = 0
[pid  3757] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  3757] setpgid(0, 0)               = 0
[pid  3757] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  3757] write(3, "1000", 4)         = 4
[pid  3757] close(3)                    = 0
[pid  3757] symlink("/dev/binderfs", "./binderfs") = 0
[pid  3757] memfd_create("syzkaller", 0) = 3
[pid  3757] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f649246b000
[pid  3757] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  3757] munmap(0x7f649246b000, 4194304) = 0
[pid  3757] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  3757] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  3757] close(3)                    = 0
[pid  3757] mkdir("./file0", 0777)      = 0
[   68.038176][ T3757] loop0: detected capacity change from 0 to 8192
[   68.047132][ T3757] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   68.060282][ T3757] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal
[   68.069544][ T3757] REISERFS (device loop0): using ordered data mode
[   68.076068][ T3757] reiserfs: using flush barriers
[   68.081864][ T3757] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   68.098198][ T3757] REISERFS (device loop0): checking transaction log (loop0)
[   68.123811][ T3757] REISERFS (device loop0): Using r5 hash to sort names
[pid  3757] mount("/dev/loop0", "./file0", "reiserfs", MS_SYNCHRONOUS|MS_DIRSYNC|MS_RELATIME|MS_STRICTATIME, "") = 0
[pid  3757] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  3757] chdir("./file0")            = 0
[pid  3757] ioctl(4, LOOP_CLR_FD)       = 0
[pid  3757] close(4)                    = 0
[pid  3757] openat(AT_FDCWD, "cpuset.effective_mems", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4
[pid  3757] write(4, "\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 16) = 16
[pid  3757] mmap(0x20000000, 12288, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED, 4, 0) = 0x20000000
[pid  3757] openat(AT_FDCWD, "cpuset.effective_mems", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 5
[pid  3757] ioctl(5, FS_IOC_GETVERSION, 0) = -1 EFAULT (Bad address)
[pid  3757] exit_group(0)               = ?
[pid  3757] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3757, si_uid=0, si_status=0, si_utime=0, si_stime=10} ---
umount2("./63", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./63", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555556932620 /* 4 entries */, 32768) = 112
umount2("./63/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./63/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./63/binderfs")                 = 0
[   68.130983][ T3757] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
umount2("./63/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./63/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./63/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./63/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./63/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x55555693a660 /* 2 entries */, 32768) = 48
getdents64(4, 0x55555693a660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./63/file0")                     = 0
getdents64(3, 0x555556932620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./63")                           = 0
mkdir("./64", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555569315d0) = 3759
./strace-static-x86_64: Process 3759 attached
[pid  3759] chdir("./64")               = 0
[pid  3759] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  3759] setpgid(0, 0)               = 0
[pid  3759] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  3759] write(3, "1000", 4)         = 4
[pid  3759] close(3)                    = 0
[pid  3759] symlink("/dev/binderfs", "./binderfs") = 0
[pid  3759] memfd_create("syzkaller", 0) = 3
[pid  3759] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f649246b000
[pid  3759] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  3759] munmap(0x7f649246b000, 4194304) = 0
[pid  3759] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  3759] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  3759] close(3)                    = 0
[pid  3759] mkdir("./file0", 0777)      = 0
[   68.229452][ T3759] loop0: detected capacity change from 0 to 8192
[   68.239127][ T3759] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   68.252270][ T3759] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal
[   68.261474][ T3759] REISERFS (device loop0): using ordered data mode
[   68.268002][ T3759] reiserfs: using flush barriers
[pid  3759] mount("/dev/loop0", "./file0", "reiserfs", MS_SYNCHRONOUS|MS_DIRSYNC|MS_RELATIME|MS_STRICTATIME, "") = 0
[pid  3759] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  3759] chdir("./file0")            = 0
[pid  3759] ioctl(4, LOOP_CLR_FD)       = 0
[pid  3759] close(4)                    = 0
[pid  3759] openat(AT_FDCWD, "cpuset.effective_mems", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4
[pid  3759] write(4, "\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 16) = 16
[pid  3759] mmap(0x20000000, 12288, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED, 4, 0) = 0x20000000
[pid  3759] openat(AT_FDCWD, "cpuset.effective_mems", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 5
[pid  3759] ioctl(5, FS_IOC_GETVERSION, 0) = -1 EFAULT (Bad address)
[pid  3759] exit_group(0)               = ?
[pid  3759] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3759, si_uid=0, si_status=0, si_utime=0, si_stime=9} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./64", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./64", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555556932620 /* 4 entries */, 32768) = 112
umount2("./64/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./64/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./64/binderfs")                 = 0
[   68.273424][ T3759] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   68.289789][ T3759] REISERFS (device loop0): checking transaction log (loop0)
[   68.313537][ T3759] REISERFS (device loop0): Using r5 hash to sort names
[   68.320702][ T3759] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
umount2("./64/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./64/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./64/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./64/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./64/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x55555693a660 /* 2 entries */, 32768) = 48
getdents64(4, 0x55555693a660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./64/file0")                     = 0
getdents64(3, 0x555556932620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./64")                           = 0
mkdir("./65", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3761 attached
, child_tidptr=0x5555569315d0) = 3761
[pid  3761] chdir("./65")               = 0
[pid  3761] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  3761] setpgid(0, 0)               = 0
[pid  3761] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  3761] write(3, "1000", 4)         = 4
[pid  3761] close(3)                    = 0
[pid  3761] symlink("/dev/binderfs", "./binderfs") = 0
[pid  3761] memfd_create("syzkaller", 0) = 3
[pid  3761] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f649246b000
[pid  3761] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  3761] munmap(0x7f649246b000, 4194304) = 0
[pid  3761] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  3761] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  3761] close(3)                    = 0
[pid  3761] mkdir("./file0", 0777)      = 0
[   68.425569][ T3761] loop0: detected capacity change from 0 to 8192
[   68.434781][ T3761] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   68.448125][ T3761] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal
[   68.457426][ T3761] REISERFS (device loop0): using ordered data mode
[   68.463949][ T3761] reiserfs: using flush barriers
[   68.469733][ T3761] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   68.486247][ T3761] REISERFS (device loop0): checking transaction log (loop0)
[   68.513010][ T3761] REISERFS (device loop0): Using r5 hash to sort names
[pid  3761] mount("/dev/loop0", "./file0", "reiserfs", MS_SYNCHRONOUS|MS_DIRSYNC|MS_RELATIME|MS_STRICTATIME, "") = 0
[pid  3761] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  3761] chdir("./file0")            = 0
[pid  3761] ioctl(4, LOOP_CLR_FD)       = 0
[pid  3761] close(4)                    = 0
[pid  3761] openat(AT_FDCWD, "cpuset.effective_mems", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4
[pid  3761] write(4, "\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 16) = 16
[pid  3761] mmap(0x20000000, 12288, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED, 4, 0) = 0x20000000
[pid  3761] openat(AT_FDCWD, "cpuset.effective_mems", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 5
[pid  3761] ioctl(5, FS_IOC_GETVERSION, 0) = -1 EFAULT (Bad address)
[pid  3761] exit_group(0)               = ?
[pid  3761] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3761, si_uid=0, si_status=0, si_utime=0, si_stime=11} ---
umount2("./65", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./65", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555556932620 /* 4 entries */, 32768) = 112
umount2("./65/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./65/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./65/binderfs")                 = 0
[   68.520089][ T3761] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
umount2("./65/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./65/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./65/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./65/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./65/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x55555693a660 /* 2 entries */, 32768) = 48
getdents64(4, 0x55555693a660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./65/file0")                     = 0
getdents64(3, 0x555556932620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./65")                           = 0
mkdir("./66", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3763 attached
, child_tidptr=0x5555569315d0) = 3763
[pid  3763] chdir("./66")               = 0
[pid  3763] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  3763] setpgid(0, 0)               = 0
[pid  3763] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  3763] write(3, "1000", 4)         = 4
[pid  3763] close(3)                    = 0
[pid  3763] symlink("/dev/binderfs", "./binderfs") = 0
[pid  3763] memfd_create("syzkaller", 0) = 3
[pid  3763] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f649246b000
[pid  3763] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  3763] munmap(0x7f649246b000, 4194304) = 0
[pid  3763] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  3763] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  3763] close(3)                    = 0
[pid  3763] mkdir("./file0", 0777)      = 0
[   68.631785][ T3763] loop0: detected capacity change from 0 to 8192
[   68.641120][ T3763] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   68.654218][ T3763] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal
[   68.663535][ T3763] REISERFS (device loop0): using ordered data mode
[   68.670077][ T3763] reiserfs: using flush barriers
[   68.675582][ T3763] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   68.692029][ T3763] REISERFS (device loop0): checking transaction log (loop0)
[   68.719040][ T3763] REISERFS (device loop0): Using r5 hash to sort names
[pid  3763] mount("/dev/loop0", "./file0", "reiserfs", MS_SYNCHRONOUS|MS_DIRSYNC|MS_RELATIME|MS_STRICTATIME, "") = 0
[pid  3763] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  3763] chdir("./file0")            = 0
[pid  3763] ioctl(4, LOOP_CLR_FD)       = 0
[pid  3763] close(4)                    = 0
[pid  3763] openat(AT_FDCWD, "cpuset.effective_mems", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4
[pid  3763] write(4, "\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 16) = 16
[pid  3763] mmap(0x20000000, 12288, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED, 4, 0) = 0x20000000
[pid  3763] openat(AT_FDCWD, "cpuset.effective_mems", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 5
[pid  3763] ioctl(5, FS_IOC_GETVERSION, 0) = -1 EFAULT (Bad address)
[pid  3763] exit_group(0)               = ?
[pid  3763] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3763, si_uid=0, si_status=0, si_utime=1, si_stime=9} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./66", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./66", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555556932620 /* 4 entries */, 32768) = 112
umount2("./66/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./66/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./66/binderfs")                 = 0
[   68.726108][ T3763] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
umount2("./66/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./66/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./66/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./66/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./66/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x55555693a660 /* 2 entries */, 32768) = 48
getdents64(4, 0x55555693a660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./66/file0")                     = 0
getdents64(3, 0x555556932620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./66")                           = 0
mkdir("./67", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3765 attached
, child_tidptr=0x5555569315d0) = 3765
[pid  3765] chdir("./67")               = 0
[pid  3765] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  3765] setpgid(0, 0)               = 0
[pid  3765] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  3765] write(3, "1000", 4)         = 4
[pid  3765] close(3)                    = 0
[pid  3765] symlink("/dev/binderfs", "./binderfs") = 0
[pid  3765] memfd_create("syzkaller", 0) = 3
[pid  3765] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f649246b000
[pid  3765] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  3765] munmap(0x7f649246b000, 4194304) = 0
[pid  3765] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  3765] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  3765] close(3)                    = 0
[pid  3765] mkdir("./file0", 0777)      = 0
[   68.831207][ T3765] loop0: detected capacity change from 0 to 8192
[   68.839849][ T3765] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   68.852940][ T3765] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal
[   68.862153][ T3765] REISERFS (device loop0): using ordered data mode
[   68.868693][ T3765] reiserfs: using flush barriers
[   68.874196][ T3765] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   68.890645][ T3765] REISERFS (device loop0): checking transaction log (loop0)
[   68.916980][ T3765] REISERFS (device loop0): Using r5 hash to sort names
[pid  3765] mount("/dev/loop0", "./file0", "reiserfs", MS_SYNCHRONOUS|MS_DIRSYNC|MS_RELATIME|MS_STRICTATIME, "") = 0
[pid  3765] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  3765] chdir("./file0")            = 0
[pid  3765] ioctl(4, LOOP_CLR_FD)       = 0
[pid  3765] close(4)                    = 0
[pid  3765] openat(AT_FDCWD, "cpuset.effective_mems", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4
[pid  3765] write(4, "\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 16) = 16
[pid  3765] mmap(0x20000000, 12288, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED, 4, 0) = 0x20000000
[pid  3765] openat(AT_FDCWD, "cpuset.effective_mems", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 5
[pid  3765] ioctl(5, FS_IOC_GETVERSION, 0) = -1 EFAULT (Bad address)
[pid  3765] exit_group(0)               = ?
[pid  3765] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3765, si_uid=0, si_status=0, si_utime=0, si_stime=11} ---
umount2("./67", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./67", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555556932620 /* 4 entries */, 32768) = 112
umount2("./67/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./67/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./67/binderfs")                 = 0
[   68.924256][ T3765] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
umount2("./67/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./67/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./67/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./67/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./67/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x55555693a660 /* 2 entries */, 32768) = 48
getdents64(4, 0x55555693a660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./67/file0")                     = 0
getdents64(3, 0x555556932620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./67")                           = 0
mkdir("./68", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555569315d0) = 3767
./strace-static-x86_64: Process 3767 attached
[pid  3767] chdir("./68")               = 0
[pid  3767] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  3767] setpgid(0, 0)               = 0
[pid  3767] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  3767] write(3, "1000", 4)         = 4
[pid  3767] close(3)                    = 0
[pid  3767] symlink("/dev/binderfs", "./binderfs") = 0
[pid  3767] memfd_create("syzkaller", 0) = 3
[pid  3767] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f649246b000
[pid  3767] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  3767] munmap(0x7f649246b000, 4194304) = 0
[pid  3767] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  3767] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  3767] close(3)                    = 0
[pid  3767] mkdir("./file0", 0777)      = 0
[   69.030638][ T3767] loop0: detected capacity change from 0 to 8192
[   69.040196][ T3767] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   69.053349][ T3767] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal
[   69.062884][ T3767] REISERFS (device loop0): using ordered data mode
[   69.069565][ T3767] reiserfs: using flush barriers
[   69.075231][ T3767] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   69.091858][ T3767] REISERFS (device loop0): checking transaction log (loop0)
[   69.116005][ T3767] REISERFS (device loop0): Using r5 hash to sort names
[pid  3767] mount("/dev/loop0", "./file0", "reiserfs", MS_SYNCHRONOUS|MS_DIRSYNC|MS_RELATIME|MS_STRICTATIME, "") = 0
[pid  3767] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  3767] chdir("./file0")            = 0
[pid  3767] ioctl(4, LOOP_CLR_FD)       = 0
[pid  3767] close(4)                    = 0
[pid  3767] openat(AT_FDCWD, "cpuset.effective_mems", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4
[pid  3767] write(4, "\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 16) = 16
[pid  3767] mmap(0x20000000, 12288, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED, 4, 0) = 0x20000000
[pid  3767] openat(AT_FDCWD, "cpuset.effective_mems", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 5
[pid  3767] ioctl(5, FS_IOC_GETVERSION, 0) = -1 EFAULT (Bad address)
[pid  3767] exit_group(0)               = ?
[pid  3767] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3767, si_uid=0, si_status=0, si_utime=0, si_stime=11} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./68", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./68", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555556932620 /* 4 entries */, 32768) = 112
umount2("./68/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./68/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./68/binderfs")                 = 0
[   69.123106][ T3767] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
umount2("./68/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./68/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./68/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./68/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./68/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x55555693a660 /* 2 entries */, 32768) = 48
getdents64(4, 0x55555693a660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./68/file0")                     = 0
getdents64(3, 0x555556932620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./68")                           = 0
mkdir("./69", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555569315d0) = 3769
./strace-static-x86_64: Process 3769 attached
[pid  3769] chdir("./69")               = 0
[pid  3769] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  3769] setpgid(0, 0)               = 0
[pid  3769] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  3769] write(3, "1000", 4)         = 4
[pid  3769] close(3)                    = 0
[pid  3769] symlink("/dev/binderfs", "./binderfs") = 0
[pid  3769] memfd_create("syzkaller", 0) = 3
[pid  3769] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f649246b000
[pid  3769] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  3769] munmap(0x7f649246b000, 4194304) = 0
[pid  3769] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  3769] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  3769] close(3)                    = 0
[pid  3769] mkdir("./file0", 0777)      = 0
[   69.230154][ T3769] loop0: detected capacity change from 0 to 8192
[   69.239478][ T3769] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   69.252543][ T3769] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal
[   69.261923][ T3769] REISERFS (device loop0): using ordered data mode
[   69.268664][ T3769] reiserfs: using flush barriers
[   69.274418][ T3769] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   69.290789][ T3769] REISERFS (device loop0): checking transaction log (loop0)
[   69.317709][ T3769] REISERFS (device loop0): Using r5 hash to sort names
[pid  3769] mount("/dev/loop0", "./file0", "reiserfs", MS_SYNCHRONOUS|MS_DIRSYNC|MS_RELATIME|MS_STRICTATIME, "") = 0
[pid  3769] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  3769] chdir("./file0")            = 0
[pid  3769] ioctl(4, LOOP_CLR_FD)       = 0
[pid  3769] close(4)                    = 0
[pid  3769] openat(AT_FDCWD, "cpuset.effective_mems", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4
[pid  3769] write(4, "\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 16) = 16
[pid  3769] mmap(0x20000000, 12288, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED, 4, 0) = 0x20000000
[pid  3769] openat(AT_FDCWD, "cpuset.effective_mems", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 5
[pid  3769] ioctl(5, FS_IOC_GETVERSION, 0) = -1 EFAULT (Bad address)
[pid  3769] exit_group(0)               = ?
[pid  3769] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3769, si_uid=0, si_status=0, si_utime=0, si_stime=10} ---
umount2("./69", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./69", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555556932620 /* 4 entries */, 32768) = 112
umount2("./69/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./69/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./69/binderfs")                 = 0
[   69.324953][ T3769] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
umount2("./69/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./69/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./69/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./69/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./69/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x55555693a660 /* 2 entries */, 32768) = 48
getdents64(4, 0x55555693a660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./69/file0")                     = 0
getdents64(3, 0x555556932620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./69")                           = 0
mkdir("./70", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555569315d0) = 3771
./strace-static-x86_64: Process 3771 attached
[pid  3771] chdir("./70")               = 0
[pid  3771] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  3771] setpgid(0, 0)               = 0
[pid  3771] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  3771] write(3, "1000", 4)         = 4
[pid  3771] close(3)                    = 0
[pid  3771] symlink("/dev/binderfs", "./binderfs") = 0
[pid  3771] memfd_create("syzkaller", 0) = 3
[pid  3771] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f649246b000
[pid  3771] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  3771] munmap(0x7f649246b000, 4194304) = 0
[pid  3771] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  3771] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  3771] close(3)                    = 0
[pid  3771] mkdir("./file0", 0777)      = 0
[   69.438163][ T3771] loop0: detected capacity change from 0 to 8192
[   69.447772][ T3771] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   69.461321][ T3771] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal
[   69.470629][ T3771] REISERFS (device loop0): using ordered data mode
[   69.477128][ T3771] reiserfs: using flush barriers
[   69.482774][ T3771] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   69.499088][ T3771] REISERFS (device loop0): checking transaction log (loop0)
[   69.523267][ T3771] REISERFS (device loop0): Using r5 hash to sort names
[pid  3771] mount("/dev/loop0", "./file0", "reiserfs", MS_SYNCHRONOUS|MS_DIRSYNC|MS_RELATIME|MS_STRICTATIME, "") = 0
[pid  3771] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  3771] chdir("./file0")            = 0
[pid  3771] ioctl(4, LOOP_CLR_FD)       = 0
[pid  3771] close(4)                    = 0
[pid  3771] openat(AT_FDCWD, "cpuset.effective_mems", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4
[pid  3771] write(4, "\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 16) = 16
[pid  3771] mmap(0x20000000, 12288, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED, 4, 0) = 0x20000000
[pid  3771] openat(AT_FDCWD, "cpuset.effective_mems", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 5
[pid  3771] ioctl(5, FS_IOC_GETVERSION, 0) = -1 EFAULT (Bad address)
[pid  3771] exit_group(0)               = ?
[pid  3771] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3771, si_uid=0, si_status=0, si_utime=0, si_stime=10} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./70", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./70", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555556932620 /* 4 entries */, 32768) = 112
umount2("./70/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./70/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./70/binderfs")                 = 0
[   69.530448][ T3771] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
umount2("./70/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./70/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./70/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./70/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./70/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x55555693a660 /* 2 entries */, 32768) = 48
getdents64(4, 0x55555693a660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./70/file0")                     = 0
getdents64(3, 0x555556932620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./70")                           = 0
mkdir("./71", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 3773 attached
, child_tidptr=0x5555569315d0) = 3773
[pid  3773] chdir("./71")               = 0
[pid  3773] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  3773] setpgid(0, 0)               = 0
[pid  3773] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  3773] write(3, "1000", 4)         = 4
[pid  3773] close(3)                    = 0
[pid  3773] symlink("/dev/binderfs", "./binderfs") = 0
[pid  3773] memfd_create("syzkaller", 0) = 3
[pid  3773] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f649246b000
[pid  3773] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  3773] munmap(0x7f649246b000, 4194304) = 0
[pid  3773] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  3773] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  3773] close(3)                    = 0
[pid  3773] mkdir("./file0", 0777)      = 0
[   69.634517][ T3773] loop0: detected capacity change from 0 to 8192
[   69.643478][ T3773] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   69.657362][ T3773] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal
[   69.666507][ T3773] REISERFS (device loop0): using ordered data mode
[   69.673024][ T3773] reiserfs: using flush barriers
[pid  3773] mount("/dev/loop0", "./file0", "reiserfs", MS_SYNCHRONOUS|MS_DIRSYNC|MS_RELATIME|MS_STRICTATIME, "") = 0
[pid  3773] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  3773] chdir("./file0")            = 0
[pid  3773] ioctl(4, LOOP_CLR_FD)       = 0
[pid  3773] close(4)                    = 0
[pid  3773] openat(AT_FDCWD, "cpuset.effective_mems", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4
[   69.678474][ T3773] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   69.694735][ T3773] REISERFS (device loop0): checking transaction log (loop0)
[   69.719171][ T3773] REISERFS (device loop0): Using r5 hash to sort names
[   69.726148][ T3773] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[pid  3773] write(4, "\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 16) = 16
[pid  3773] mmap(0x20000000, 12288, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED, 4, 0) = 0x20000000
[pid  3773] openat(AT_FDCWD, "cpuset.effective_mems", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 5
[pid  3773] ioctl(5, FS_IOC_GETVERSION, 0) = -1 EFAULT (Bad address)
[pid  3773] exit_group(0)               = ?
[pid  3773] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3773, si_uid=0, si_status=0, si_utime=0, si_stime=10} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./71", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./71", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555556932620 /* 4 entries */, 32768) = 112
umount2("./71/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./71/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./71/binderfs")                 = 0
umount2("./71/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./71/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./71/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./71/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./71/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x55555693a660 /* 2 entries */, 32768) = 48
getdents64(4, 0x55555693a660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./71/file0")                     = 0
getdents64(3, 0x555556932620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./71")                           = 0
mkdir("./72", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555569315d0) = 3775
./strace-static-x86_64: Process 3775 attached
[pid  3775] chdir("./72")               = 0
[pid  3775] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  3775] setpgid(0, 0)               = 0
[pid  3775] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  3775] write(3, "1000", 4)         = 4
[pid  3775] close(3)                    = 0
[pid  3775] symlink("/dev/binderfs", "./binderfs") = 0
[pid  3775] memfd_create("syzkaller", 0) = 3
[pid  3775] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f649246b000
[pid  3775] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  3775] munmap(0x7f649246b000, 4194304) = 0
[pid  3775] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  3775] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  3775] close(3)                    = 0
[pid  3775] mkdir("./file0", 0777)      = 0
[   69.831099][ T3775] loop0: detected capacity change from 0 to 8192
[   69.840594][ T3775] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   69.853601][ T3775] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal
[   69.862941][ T3775] REISERFS (device loop0): using ordered data mode
[   69.869728][ T3775] reiserfs: using flush barriers
[pid  3775] mount("/dev/loop0", "./file0", "reiserfs", MS_SYNCHRONOUS|MS_DIRSYNC|MS_RELATIME|MS_STRICTATIME, "") = 0
[pid  3775] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[   69.875370][ T3775] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   69.891636][ T3775] REISERFS (device loop0): checking transaction log (loop0)
[   69.915566][ T3775] REISERFS (device loop0): Using r5 hash to sort names
[   69.922663][ T3775] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[pid  3775] chdir("./file0")            = 0
[pid  3775] ioctl(4, LOOP_CLR_FD)       = 0
[pid  3775] close(4)                    = 0
[pid  3775] openat(AT_FDCWD, "cpuset.effective_mems", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4
[pid  3775] write(4, "\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 16) = 16
[pid  3775] mmap(0x20000000, 12288, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED, 4, 0) = 0x20000000
[pid  3775] openat(AT_FDCWD, "cpuset.effective_mems", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 5
[pid  3775] ioctl(5, FS_IOC_GETVERSION, 0) = -1 EFAULT (Bad address)
[pid  3775] exit_group(0)               = ?
[pid  3775] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3775, si_uid=0, si_status=0, si_utime=0, si_stime=10} ---
umount2("./72", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./72", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555556932620 /* 4 entries */, 32768) = 112
umount2("./72/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./72/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./72/binderfs")                 = 0
umount2("./72/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./72/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./72/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./72/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./72/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x55555693a660 /* 2 entries */, 32768) = 48
getdents64(4, 0x55555693a660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./72/file0")                     = 0
getdents64(3, 0x555556932620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./72")                           = 0
mkdir("./73", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555569315d0) = 3777
./strace-static-x86_64: Process 3777 attached
[pid  3777] chdir("./73")               = 0
[pid  3777] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  3777] setpgid(0, 0)               = 0
[pid  3777] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  3777] write(3, "1000", 4)         = 4
[pid  3777] close(3)                    = 0
[pid  3777] symlink("/dev/binderfs", "./binderfs") = 0
[pid  3777] memfd_create("syzkaller", 0) = 3
[pid  3777] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f649246b000
[pid  3777] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  3777] munmap(0x7f649246b000, 4194304) = 0
[pid  3777] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  3777] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  3777] close(3)                    = 0
[pid  3777] mkdir("./file0", 0777)      = 0
[   70.031189][ T3777] loop0: detected capacity change from 0 to 8192
[   70.039749][ T3777] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   70.052778][ T3777] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal
[   70.062005][ T3777] REISERFS (device loop0): using ordered data mode
[   70.068542][ T3777] reiserfs: using flush barriers
[   70.074092][ T3777] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   70.090405][ T3777] REISERFS (device loop0): checking transaction log (loop0)
[   70.117313][ T3777] REISERFS (device loop0): Using r5 hash to sort names
[pid  3777] mount("/dev/loop0", "./file0", "reiserfs", MS_SYNCHRONOUS|MS_DIRSYNC|MS_RELATIME|MS_STRICTATIME, "") = 0
[pid  3777] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  3777] chdir("./file0")            = 0
[pid  3777] ioctl(4, LOOP_CLR_FD)       = 0
[pid  3777] close(4)                    = 0
[pid  3777] openat(AT_FDCWD, "cpuset.effective_mems", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4
[   70.124304][ T3777] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[pid  3777] write(4, "\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 16) = 16
[pid  3777] mmap(0x20000000, 12288, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|0x7ffff0, MAP_SHARED|MAP_FIXED, 4, 0) = 0x20000000
[pid  3777] openat(AT_FDCWD, "cpuset.effective_mems", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 5
[pid  3777] ioctl(5, FS_IOC_GETVERSION, 0) = -1 EFAULT (Bad address)
[pid  3777] exit_group(0)               = ?
[pid  3777] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3777, si_uid=0, si_status=0, si_utime=0, si_stime=9} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./73", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./73", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555556932620 /* 4 entries */, 32768) = 112
umount2("./73/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./73/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./73/binderfs")                 = 0
umount2("./73/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./73/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./73/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./73/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./73/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x55555693a660 /* 2 entries */, 32768) = 48
getdents64(4, 0x55555693a660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./73/file0")                     = 0
getdents64(3, 0x555556932620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./73")                           = 0
mkdir("./74", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555569315d0) = 3779
./strace-static-x86_64: Process 3779 attached
[pid  3779] chdir("./74")               = 0
[pid  3779] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  3779] setpgid(0, 0)               = 0
[pid  3779] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  3779] write(3, "1000", 4)         = 4
[pid  3779] close(3)                    = 0
[pid  3779] symlink("/dev/binderfs", "./binderfs") = 0
[pid  3779] memfd_create("syzkaller", 0) = 3
[pid  3779] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f649246b000
[pid  3779] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  3779] munmap(0x7f649246b000, 4194304) = 0
[pid  3779] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  3779] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  3779] close(3)                    = 0
[pid  3779] mkdir("./file0", 0777)      = 0