./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor575387908

<...>
Warning: Permanently added '10.128.1.29' (ECDSA) to the list of known hosts.
execve("./syz-executor575387908", ["./syz-executor575387908"], 0x7ffc7237b0b0 /* 10 vars */) = 0
brk(NULL)                               = 0x555555c2b000
brk(0x555555c2bc40)                     = 0x555555c2bc40
arch_prctl(ARCH_SET_FS, 0x555555c2b300) = 0
uname({sysname="Linux", nodename="syzkaller", ...}) = 0
readlink("/proc/self/exe", "/root/syz-executor575387908", 4096) = 27
brk(0x555555c4cc40)                     = 0x555555c4cc40
brk(0x555555c4d000)                     = 0x555555c4d000
mprotect(0x7fb78f2b9000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
getpid()                                = 5083
mkdir("./syzkaller.QIJdhx", 0700)       = 0
chmod("./syzkaller.QIJdhx", 0777)       = 0
chdir("./syzkaller.QIJdhx")             = 0
mkdir("./0", 0777)                      = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555c2b5d0) = 5084
./strace-static-x86_64: Process 5084 attached
[pid  5084] chdir("./0")                = 0
[pid  5084] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5084] setpgid(0, 0)               = 0
[pid  5084] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5084] write(3, "1000", 4)         = 4
[pid  5084] close(3)                    = 0
[pid  5084] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5084] memfd_create("syzkaller", 0) = 3
[pid  5084] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb786de0000
[pid  5084] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152
[pid  5084] munmap(0x7fb786de0000, 2097152) = 0
[pid  5084] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[   83.010019][ T5084] memfd_create() without MFD_EXEC nor MFD_NOEXEC_SEAL, pid=5084 'syz-executor575'
[pid  5084] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5084] close(3)                    = 0
[pid  5084] mkdir("./file0", 0777)      = 0
[   83.066917][ T5084] loop0: detected capacity change from 0 to 4096
[   83.084759][ T5084] ntfs: (device loop0): check_mft_mirror(): $MFT and $MFTMirr (record 0) do not match.  Run ntfsfix or chkdsk.
[   83.096567][ T5084] ntfs: (device loop0): load_system_files(): $MFTMirr does not match $MFT.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[pid  5084] mount("/dev/loop0", "./file0", "ntfs", MS_SYNCHRONOUS|MS_REC, "") = 0
[pid  5084] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5084] chdir("./file0")            = 0
[pid  5084] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5084] close(4)                    = 0
[pid  5084] exit_group(0)               = ?
[pid  5084] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5084, si_uid=0, si_status=0, si_utime=0, si_stime=9 /* 0.09 s */} ---
umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x555555c2c620 /* 4 entries */, 32768) = 112
umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./0/binderfs")                  = 0
[   83.120858][ T5084] ntfs: volume version 3.1.
umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./0/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x555555c34660 /* 2 entries */, 32768) = 48
getdents64(4, 0x555555c34660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./0/file0")                      = 0
getdents64(3, 0x555555c2c620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./0")                            = 0
mkdir("./1", 0777)                      = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555555c2b5d0) = 5086
./strace-static-x86_64: Process 5086 attached
[pid  5086] chdir("./1")                = 0
[pid  5086] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5086] setpgid(0, 0)               = 0
[pid  5086] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5086] write(3, "1000", 4)         = 4
[pid  5086] close(3)                    = 0
[pid  5086] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5086] memfd_create("syzkaller", 0) = 3
[pid  5086] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fb786de0000
[pid  5086] write(3, "\xeb\x52\x90\x4e\x54\x46\x53\x20\x20\x20\x20\x00\x08\x02\x00\x00\x00\x00\x00\x00\x00\xf8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x80\x00\xff\x03\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\xff\x00\x00\x00\x00\x00\x00\x00\xf5\x00\x00\x00\x01\x00\x00\x00\xf7\x9a\x81\x47\x2b\x73\xcf\x43\x00\x00\x00\x00\x0e\x1f\xbe\x71\x7c\xac\x22\xc0\x74\x0b\x56\xb4\x0e\xbb\x07\x00"..., 2097152) = 2097152
[pid  5086] munmap(0x7fb786de0000, 2097152) = 0
[pid  5086] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5086] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5086] close(3)                    = 0
[pid  5086] mkdir("./file0", 0777)      = 0
[   83.262606][ T5086] loop0: detected capacity change from 0 to 4096
[   83.278008][ T5086] ntfs: (device loop0): check_mft_mirror(): $MFT and $MFTMirr (record 0) do not match.  Run ntfsfix or chkdsk.
[   83.289985][ T5086] ntfs: (device loop0): load_system_files(): $MFTMirr does not match $MFT.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[pid  5086] mount("/dev/loop0", "./file0", "ntfs", MS_SYNCHRONOUS|MS_REC, "") = 0
[pid  5086] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5086] chdir("./file0")            = 0
[pid  5086] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5086] close(4)                    = 0
[pid  5086] exit_group(0)               = ?
[pid  5086] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5086, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=7 /* 0.07 s */} ---
umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
[   83.313758][ T5086] ntfs: volume version 3.1.
[   83.320412][ T5086] ntfs: (device loop0): ntfs_lookup_inode_by_name(): Directory index record with vcn 0xffffffffffffffff is corrupt.  Corrupt inode 0x5.  Run chkdsk.
[   83.335609][ T5086] ntfs: (device loop0): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys.
[   83.346978][ T5086] ntfs: (device loop0): load_system_files(): Failed to determine if Windows is hibernated.  Will not be able to remount read-write.  Run chkdsk.
getdents64(3, 0x555555c2c620 /* 4 entries */, 32768) = 112
umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./1/binderfs")                  = 0
[   83.402348][ T5083] ------------[ cut here ]------------
[   83.408245][ T5083] kernel BUG at fs/inode.c:612!
[   83.413129][ T5083] invalid opcode: 0000 [#1] PREEMPT SMP KASAN
[   83.419209][ T5083] CPU: 1 PID: 5083 Comm: syz-executor575 Not tainted 6.2.0-next-20230303-syzkaller #0
[   83.428762][ T5083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023
[   83.438820][ T5083] RIP: 0010:clear_inode+0x13e/0x190
[   83.444064][ T5083] Code: 02 00 75 65 48 8b 83 d8 01 00 00 48 39 c5 75 31 e8 57 59 97 ff 48 c7 83 d8 00 00 00 60 00 00 00 5b 5d 41 5c c3 e8 42 59 97 ff <0f> 0b e8 3b 59 97 ff 0f 0b e8 34 59 97 ff 0f 0b e8 2d 59 97 ff 0f
[   83.463679][ T5083] RSP: 0018:ffffc90003b5fbd0 EFLAGS: 00010093
[   83.469766][ T5083] RAX: 0000000000000000 RBX: ffff888073d92420 RCX: 0000000000000000
[   83.477739][ T5083] RDX: ffff88802546ba80 RSI: ffffffff81ed5eae RDI: 0000000000000007
[   83.487031][ T5083] RBP: 0000000000000001 R08: 0000000000000007 R09: 0000000000000000
[   83.495007][ T5083] R10: 0000000000000001 R11: 0000000000000000 R12: ffff888073d92650
[   83.502991][ T5083] R13: ffff888073d92448 R14: ffffffff8a823280 R15: ffff888073d92150
[   83.510981][ T5083] FS:  0000555555c2b300(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000
[   83.519932][ T5083] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   83.526550][ T5083] CR2: 00007ffd8a14abf8 CR3: 000000001ce83000 CR4: 00000000003506e0
[   83.534537][ T5083] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   83.542528][ T5083] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   83.550521][ T5083] Call Trace:
[   83.553811][ T5083]  <TASK>
[   83.556751][ T5083]  ntfs_evict_big_inode+0x41/0x520
[   83.561899][ T5083]  ? __ntfs_write_inode+0xc40/0xc40
[   83.567312][ T5083]  evict+0x2ed/0x6b0
[   83.571246][ T5083]  iput+0x52b/0x8e0
[   83.575094][ T5083]  ntfs_put_super+0x979/0x1700
[   83.579899][ T5083]  ? ntfs_fill_super+0x9400/0x9400
[   83.585064][ T5083]  generic_shutdown_super+0x158/0x480
[   83.590470][ T5083]  kill_block_super+0x9b/0xf0
[   83.595178][ T5083]  deactivate_locked_super+0x98/0x160
[   83.600602][ T5083]  deactivate_super+0xb1/0xd0
[   83.606382][ T5083]  cleanup_mnt+0x2ae/0x3d0
[   83.610861][ T5083]  task_work_run+0x16f/0x270
[   83.615629][ T5083]  ? task_work_cancel+0x30/0x30
[   83.620536][ T5083]  ? __x64_sys_umount+0x118/0x190
[   83.625610][ T5083]  ptrace_notify+0x118/0x140
[   83.630233][ T5083]  syscall_exit_to_user_mode_prepare+0x129/0x290
[   83.636620][ T5083]  syscall_exit_to_user_mode+0xd/0x50
[   83.642071][ T5083]  do_syscall_64+0x46/0xb0
[   83.646619][ T5083]  entry_SYSCALL_64_after_hwframe+0x63/0xcd
[   83.652543][ T5083] RIP: 0033:0x7fb78f22ec57
[   83.656979][ T5083] Code: 08 00 48 83 c4 08 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 a6 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[   83.677052][ T5083] RSP: 002b:00007ffd8a14b338 EFLAGS: 00000202 ORIG_RAX: 00000000000000a6
[   83.685570][ T5083] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fb78f22ec57
[   83.693562][ T5083] RDX: 00007ffd8a14b3f9 RSI: 000000000000000a RDI: 00007ffd8a14b3f0
[   83.701563][ T5083] RBP: 00007ffd8a14b3f0 R08: 00000000ffffffff R09: 00007ffd8a14b1d0
[   83.709636][ T5083] R10: 0000555555c2c653 R11: 0000000000000202 R12: 00007ffd8a14c450
[   83.717630][ T5083] R13: 0000555555c2c5f0 R14: 00007ffd8a14b360 R15: 0000000000000002
[   83.725623][ T5083]  </TASK>
[   83.728653][ T5083] Modules linked in:
[   83.732564][ T5083] ---[ end trace 0000000000000000 ]---
[   83.738025][ T5083] RIP: 0010:clear_inode+0x13e/0x190
[   83.743278][ T5083] Code: 02 00 75 65 48 8b 83 d8 01 00 00 48 39 c5 75 31 e8 57 59 97 ff 48 c7 83 d8 00 00 00 60 00 00 00 5b 5d 41 5c c3 e8 42 59 97 ff <0f> 0b e8 3b 59 97 ff 0f 0b e8 34 59 97 ff 0f 0b e8 2d 59 97 ff 0f
[   83.763619][ T5083] RSP: 0018:ffffc90003b5fbd0 EFLAGS: 00010093
[   83.769700][ T5083] RAX: 0000000000000000 RBX: ffff888073d92420 RCX: 0000000000000000
[   83.777697][ T5083] RDX: ffff88802546ba80 RSI: ffffffff81ed5eae RDI: 0000000000000007
[   83.785683][ T5083] RBP: 0000000000000001 R08: 0000000000000007 R09: 0000000000000000
[   83.793676][ T5083] R10: 0000000000000001 R11: 0000000000000000 R12: ffff888073d92650
[   83.801662][ T5083] R13: ffff888073d92448 R14: ffffffff8a823280 R15: ffff888073d92150
[   83.809647][ T5083] FS:  0000555555c2b300(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000
[   83.818594][ T5083] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   83.825191][ T5083] CR2: 00007ffd8a14abf8 CR3: 000000001ce83000 CR4: 00000000003506e0
[   83.833181][ T5083] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   83.841166][ T5083] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   83.849176][ T5083] Kernel panic - not syncing: Fatal exception
[   83.855561][ T5083] Kernel Offset: disabled
[   83.859905][ T5083] Rebooting in 86400 seconds..