./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3912646477

<...>
Warning: Permanently added '10.128.1.14' (ED25519) to the list of known hosts.
execve("./syz-executor3912646477", ["./syz-executor3912646477"], 0x7ffe62255250 /* 10 vars */) = 0
brk(NULL)                               = 0x5555698ed000
brk(0x5555698edd00)                     = 0x5555698edd00
arch_prctl(ARCH_SET_FS, 0x5555698ed380) = 0
set_tid_address(0x5555698ed650)         = 5074
set_robust_list(0x5555698ed660, 24)     = 0
rseq(0x5555698edca0, 0x20, 0, 0x53053053) = 0
prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0
readlink("/proc/self/exe", "/root/syz-executor3912646477", 4096) = 28
getrandom("\xf4\xc0\xe1\x14\xfe\xc6\xa4\xc6", 8, GRND_NONBLOCK) = 8
brk(NULL)                               = 0x5555698edd00
brk(0x55556990ed00)                     = 0x55556990ed00
brk(0x55556990f000)                     = 0x55556990f000
mprotect(0x7f619ea68000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5075 attached
 <unfinished ...>
[pid  5075] set_robust_list(0x5555698ed660, 24 <unfinished ...>
[pid  5074] <... clone resumed>, child_tidptr=0x5555698ed650) = 5075
[pid  5075] <... set_robust_list resumed>) = 0
[pid  5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...>
[pid  5075] getrandom("\x74\xab\xfb\x7f\x9a\xdd\x53\xb6", 8, GRND_NONBLOCK) = 8
./strace-static-x86_64: Process 5076 attached
[pid  5074] <... clone resumed>, child_tidptr=0x5555698ed650) = 5076
[pid  5075] mkdir("./syzkaller.yIy8Gp", 0700 <unfinished ...>
[pid  5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...>
[pid  5076] set_robust_list(0x5555698ed660, 24 <unfinished ...>
[pid  5075] <... mkdir resumed>)        = 0
[pid  5076] <... set_robust_list resumed>) = 0
[pid  5076] mkdir("./syzkaller.8vw5hY", 0700./strace-static-x86_64: Process 5077 attached
 <unfinished ...>
[pid  5075] chmod("./syzkaller.yIy8Gp", 0777 <unfinished ...>
[pid  5074] <... clone resumed>, child_tidptr=0x5555698ed650) = 5077
[pid  5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...>
[pid  5077] set_robust_list(0x5555698ed660, 24 <unfinished ...>
[pid  5076] <... mkdir resumed>)        = 0
[pid  5077] <... set_robust_list resumed>) = 0
[pid  5076] chmod("./syzkaller.8vw5hY", 0777 <unfinished ...>
[pid  5075] <... chmod resumed>)        = 0
[pid  5077] mkdir("./syzkaller.9l6qrf", 0700 <unfinished ...>
[pid  5076] <... chmod resumed>)        = 0
[pid  5075] chdir("./syzkaller.yIy8Gp"./strace-static-x86_64: Process 5078 attached
 <unfinished ...>
[pid  5076] chdir("./syzkaller.8vw5hY" <unfinished ...>
[pid  5075] <... chdir resumed>)        = 0
[pid  5074] <... clone resumed>, child_tidptr=0x5555698ed650) = 5078
[pid  5078] set_robust_list(0x5555698ed660, 24 <unfinished ...>
[pid  5077] <... mkdir resumed>)        = 0
[pid  5076] <... chdir resumed>)        = 0
[pid  5075] mkdir("./0", 0777 <unfinished ...>
[pid  5078] <... set_robust_list resumed>) = 0
[pid  5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...>
[pid  5078] mkdir("./syzkaller.DIdlZW", 0700 <unfinished ...>
[pid  5077] chmod("./syzkaller.9l6qrf", 0777 <unfinished ...>
[pid  5076] mkdir("./0", 0777 <unfinished ...>
[pid  5075] <... mkdir resumed>)        = 0
[pid  5078] <... mkdir resumed>)        = 0
[pid  5077] <... chmod resumed>)        = 0
./strace-static-x86_64: Process 5079 attached
[pid  5076] <... mkdir resumed>)        = 0
[pid  5075] openat(AT_FDCWD, "/dev/loop0", O_RDWR <unfinished ...>
[pid  5074] <... clone resumed>, child_tidptr=0x5555698ed650) = 5079
[pid  5079] set_robust_list(0x5555698ed660, 24 <unfinished ...>
[pid  5078] chmod("./syzkaller.DIdlZW", 0777 <unfinished ...>
[pid  5077] chdir("./syzkaller.9l6qrf" <unfinished ...>
[pid  5076] openat(AT_FDCWD, "/dev/loop1", O_RDWR <unfinished ...>
[pid  5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...>
[pid  5077] <... chdir resumed>)        = 0
[pid  5079] <... set_robust_list resumed>) = 0
[pid  5078] <... chmod resumed>)        = 0
[pid  5077] mkdir("./0", 0777 <unfinished ...>
[pid  5076] <... openat resumed>)       = 3
[pid  5075] <... openat resumed>)       = 3
[pid  5077] <... mkdir resumed>)        = 0
./strace-static-x86_64: Process 5080 attached
[pid  5079] mkdir("./syzkaller.iyg2WE", 0700 <unfinished ...>
[pid  5078] chdir("./syzkaller.DIdlZW" <unfinished ...>
[pid  5076] ioctl(3, LOOP_CLR_FD <unfinished ...>
[pid  5075] ioctl(3, LOOP_CLR_FD <unfinished ...>
[pid  5078] <... chdir resumed>)        = 0
[pid  5077] openat(AT_FDCWD, "/dev/loop2", O_RDWR <unfinished ...>
[pid  5074] <... clone resumed>, child_tidptr=0x5555698ed650) = 5080
[pid  5078] mkdir("./0", 0777 <unfinished ...>
[pid  5077] <... openat resumed>)       = 3
[pid  5075] <... ioctl resumed>)        = -1 ENXIO (No such device or address)
[pid  5080] set_robust_list(0x5555698ed660, 24 <unfinished ...>
[pid  5079] <... mkdir resumed>)        = 0
[pid  5076] <... ioctl resumed>)        = -1 ENXIO (No such device or address)
[pid  5080] <... set_robust_list resumed>) = 0
[pid  5076] close(3 <unfinished ...>
[pid  5075] close(3 <unfinished ...>
[pid  5079] chmod("./syzkaller.iyg2WE", 0777 <unfinished ...>
[pid  5080] mkdir("./syzkaller.pcktWq", 0700 <unfinished ...>
[pid  5078] <... mkdir resumed>)        = 0
[pid  5077] ioctl(3, LOOP_CLR_FD <unfinished ...>
[pid  5076] <... close resumed>)        = 0
[pid  5075] <... close resumed>)        = 0
[pid  5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...>
[pid  5079] <... chmod resumed>)        = 0
[pid  5078] openat(AT_FDCWD, "/dev/loop3", O_RDWR <unfinished ...>
[pid  5080] <... mkdir resumed>)        = 0
[pid  5077] <... ioctl resumed>)        = -1 ENXIO (No such device or address)
[pid  5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5082 attached
./strace-static-x86_64: Process 5081 attached
 <unfinished ...>
[pid  5080] chmod("./syzkaller.pcktWq", 0777 <unfinished ...>
[pid  5079] chdir("./syzkaller.iyg2WE" <unfinished ...>
[pid  5078] <... openat resumed>)       = 3
[pid  5077] close(3 <unfinished ...>
[pid  5076] <... clone resumed>, child_tidptr=0x5555698ed650) = 5081
[pid  5082] set_robust_list(0x5555698ed660, 24 <unfinished ...>
[pid  5077] <... close resumed>)        = 0
[pid  5082] <... set_robust_list resumed>) = 0
[pid  5078] ioctl(3, LOOP_CLR_FD <unfinished ...>
[pid  5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...>
[pid  5075] <... clone resumed>, child_tidptr=0x5555698ed650) = 5082
[pid  5082] chdir("./0" <unfinished ...>
[pid  5078] <... ioctl resumed>)        = -1 ENXIO (No such device or address)
[pid  5082] <... chdir resumed>)        = 0
./strace-static-x86_64: Process 5083 attached
[pid  5081] set_robust_list(0x5555698ed660, 24 <unfinished ...>
[pid  5080] <... chmod resumed>)        = 0
[pid  5079] <... chdir resumed>)        = 0
[pid  5078] close(3 <unfinished ...>
[pid  5081] <... set_robust_list resumed>) = 0
[pid  5083] set_robust_list(0x5555698ed660, 24 <unfinished ...>
[pid  5082] prctl(PR_SET_PDEATHSIG, SIGKILL <unfinished ...>
[pid  5081] chdir("./0" <unfinished ...>
[pid  5079] mkdir("./0", 0777 <unfinished ...>
[pid  5078] <... close resumed>)        = 0
[pid  5081] <... chdir resumed>)        = 0
[pid  5083] <... set_robust_list resumed>) = 0
[pid  5082] <... prctl resumed>)        = 0
[pid  5081] prctl(PR_SET_PDEATHSIG, SIGKILL <unfinished ...>
[pid  5080] chdir("./syzkaller.pcktWq" <unfinished ...>
[pid  5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...>
[pid  5077] <... clone resumed>, child_tidptr=0x5555698ed650) = 5083
[pid  5082] setpgid(0, 0 <unfinished ...>
[pid  5081] <... prctl resumed>)        = 0
[pid  5079] <... mkdir resumed>)        = 0
[pid  5083] chdir("./0" <unfinished ...>
[pid  5081] setpgid(0, 0 <unfinished ...>
[pid  5080] <... chdir resumed>)        = 0
[pid  5079] openat(AT_FDCWD, "/dev/loop4", O_RDWR <unfinished ...>
[pid  5081] <... setpgid resumed>)      = 0
[pid  5083] <... chdir resumed>)        = 0
[pid  5082] <... setpgid resumed>)      = 0
[pid  5081] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC <unfinished ...>
[pid  5080] mkdir("./0", 0777 <unfinished ...>
[pid  5083] prctl(PR_SET_PDEATHSIG, SIGKILL <unfinished ...>
[pid  5082] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC <unfinished ...>
[pid  5083] <... prctl resumed>)        = 0
[pid  5082] <... openat resumed>)       = 3
[pid  5081] <... openat resumed>)       = 3
[pid  5080] <... mkdir resumed>)        = 0
[pid  5081] write(3, "1000", 4 <unfinished ...>
[pid  5080] openat(AT_FDCWD, "/dev/loop5", O_RDWR <unfinished ...>
[pid  5081] <... write resumed>)        = 4
[pid  5081] close(3./strace-static-x86_64: Process 5084 attached
 <unfinished ...>
[pid  5083] setpgid(0, 0 <unfinished ...>
[pid  5082] write(3, "1000", 4 <unfinished ...>
[pid  5081] <... close resumed>)        = 0
[pid  5080] <... openat resumed>)       = 3
[pid  5079] <... openat resumed>)       = 3
[pid  5084] set_robust_list(0x5555698ed660, 24 <unfinished ...>
[pid  5083] <... setpgid resumed>)      = 0
[pid  5082] <... write resumed>)        = 4
[pid  5081] symlink("/dev/binderfs", "./binderfs" <unfinished ...>
[pid  5080] ioctl(3, LOOP_CLR_FD <unfinished ...>
[pid  5079] ioctl(3, LOOP_CLR_FD <unfinished ...>
[pid  5078] <... clone resumed>, child_tidptr=0x5555698ed650) = 5084
[pid  5084] <... set_robust_list resumed>) = 0
[pid  5083] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC <unfinished ...>
[pid  5082] close(3 <unfinished ...>
[pid  5079] <... ioctl resumed>)        = -1 ENXIO (No such device or address)
[pid  5084] chdir("./0" <unfinished ...>
[pid  5083] <... openat resumed>)       = 3
[pid  5082] <... close resumed>)        = 0
[pid  5080] <... ioctl resumed>)        = -1 ENXIO (No such device or address)
[pid  5079] close(3 <unfinished ...>
[pid  5082] symlink("/dev/binderfs", "./binderfs" <unfinished ...>
[pid  5081] <... symlink resumed>)      = 0
[pid  5084] <... chdir resumed>)        = 0
[pid  5080] close(3 <unfinished ...>
[pid  5079] <... close resumed>)        = 0
[pid  5084] prctl(PR_SET_PDEATHSIG, SIGKILL <unfinished ...>
[pid  5083] write(3, "1000", 4 <unfinished ...>
[pid  5082] <... symlink resumed>)      = 0
[pid  5080] <... close resumed>)        = 0
[pid  5079] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...>
[pid  5080] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...>
[pid  5083] <... write resumed>)        = 4
[pid  5083] close(3)                    = 0
[pid  5083] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5082] memfd_create("syzkaller", 0) = 3
./strace-static-x86_64: Process 5085 attached
./strace-static-x86_64: Process 5086 attached
[pid  5084] <... prctl resumed>)        = 0
[pid  5083] memfd_create("syzkaller", 0 <unfinished ...>
[pid  5082] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 <unfinished ...>
[pid  5081] memfd_create("syzkaller", 0 <unfinished ...>
[pid  5085] set_robust_list(0x5555698ed660, 24 <unfinished ...>
[pid  5084] setpgid(0, 0 <unfinished ...>
[pid  5082] <... mmap resumed>)         = 0x7f6196400000
[pid  5081] <... memfd_create resumed>) = 3
[pid  5080] <... clone resumed>, child_tidptr=0x5555698ed650) = 5085
[pid  5079] <... clone resumed>, child_tidptr=0x5555698ed650) = 5086
[pid  5085] <... set_robust_list resumed>) = 0
[pid  5086] set_robust_list(0x5555698ed660, 24 <unfinished ...>
[pid  5084] <... setpgid resumed>)      = 0
[pid  5081] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 <unfinished ...>
[pid  5085] chdir("./0" <unfinished ...>
[pid  5086] <... set_robust_list resumed>) = 0
[pid  5084] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC <unfinished ...>
[pid  5083] <... memfd_create resumed>) = 3
[pid  5081] <... mmap resumed>)         = 0x7f6196400000
[pid  5083] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 <unfinished ...>
[pid  5085] <... chdir resumed>)        = 0
[pid  5083] <... mmap resumed>)         = 0x7f6196400000
[pid  5085] prctl(PR_SET_PDEATHSIG, SIGKILL <unfinished ...>
[pid  5086] chdir("./0" <unfinished ...>
[pid  5084] <... openat resumed>)       = 3
[pid  5085] <... prctl resumed>)        = 0
[pid  5086] <... chdir resumed>)        = 0
[pid  5086] prctl(PR_SET_PDEATHSIG, SIGKILL <unfinished ...>
[pid  5084] write(3, "1000", 4 <unfinished ...>
[pid  5086] <... prctl resumed>)        = 0
[pid  5084] <... write resumed>)        = 4
[pid  5085] setpgid(0, 0 <unfinished ...>
[pid  5086] setpgid(0, 0 <unfinished ...>
[pid  5084] close(3 <unfinished ...>
[pid  5086] <... setpgid resumed>)      = 0
[pid  5084] <... close resumed>)        = 0
[pid  5085] <... setpgid resumed>)      = 0
[pid  5086] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC <unfinished ...>
[pid  5084] symlink("/dev/binderfs", "./binderfs" <unfinished ...>
[pid  5085] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5085] write(3, "1000", 4 <unfinished ...>
[pid  5084] <... symlink resumed>)      = 0
[pid  5085] <... write resumed>)        = 4
[pid  5085] close(3 <unfinished ...>
[pid  5086] <... openat resumed>)       = 3
[pid  5084] memfd_create("syzkaller", 0 <unfinished ...>
[pid  5085] <... close resumed>)        = 0
[pid  5085] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5085] memfd_create("syzkaller", 0 <unfinished ...>
[pid  5086] write(3, "1000", 4 <unfinished ...>
[pid  5084] <... memfd_create resumed>) = 3
[pid  5086] <... write resumed>)        = 4
[pid  5084] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 <unfinished ...>
[pid  5086] close(3 <unfinished ...>
[pid  5085] <... memfd_create resumed>) = 3
[pid  5086] <... close resumed>)        = 0
[pid  5084] <... mmap resumed>)         = 0x7f6196400000
[pid  5085] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 <unfinished ...>
[pid  5086] symlink("/dev/binderfs", "./binderfs" <unfinished ...>
[pid  5085] <... mmap resumed>)         = 0x7f6196400000
[pid  5086] <... symlink resumed>)      = 0
[pid  5086] memfd_create("syzkaller", 0) = 3
[pid  5086] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f6196400000
[pid  5081] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 <unfinished ...>
[pid  5082] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 <unfinished ...>
[pid  5085] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 <unfinished ...>
[pid  5083] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 <unfinished ...>
[pid  5086] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 <unfinished ...>
[pid  5084] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 <unfinished ...>
[pid  5081] <... write resumed>)        = 16777216
[pid  5081] munmap(0x7f6196400000, 138412032 <unfinished ...>
[pid  5085] <... write resumed>)        = 16777216
[pid  5081] <... munmap resumed>)       = 0
[pid  5085] munmap(0x7f6196400000, 138412032 <unfinished ...>
[pid  5081] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4
[pid  5081] ioctl(4, LOOP_SET_FD, 3 <unfinished ...>
[pid  5086] <... write resumed>)        = 16777216
[pid  5086] munmap(0x7f6196400000, 138412032 <unfinished ...>
[pid  5081] <... ioctl resumed>)        = 0
[pid  5081] close(3)                    = 0
[pid  5081] close(4)                    = 0
[pid  5085] <... munmap resumed>)       = 0
[  111.900564][ T5081] loop1: detected capacity change from 0 to 32768
[pid  5081] mkdir("./file0", 0777 <unfinished ...>
[pid  5086] <... munmap resumed>)       = 0
[pid  5081] <... mkdir resumed>)        = 0
[pid  5085] openat(AT_FDCWD, "/dev/loop5", O_RDWR <unfinished ...>
[pid  5086] openat(AT_FDCWD, "/dev/loop4", O_RDWR <unfinished ...>
[pid  5081] mount("/dev/loop1", "./file0", "jfs", MS_NOATIME|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME|MS_LAZYTIME, "integrity,discard=0x0000000000000000,noquota,nointegrity,iocharset=cp860,errors=remount-ro,iocharset"... <unfinished ...>
[pid  5086] <... openat resumed>)       = 4
[pid  5085] <... openat resumed>)       = 4
[pid  5086] ioctl(4, LOOP_SET_FD, 3 <unfinished ...>
[pid  5085] ioctl(4, LOOP_SET_FD, 3 <unfinished ...>
[pid  5086] <... ioctl resumed>)        = 0
[pid  5086] close(3)                    = 0
[pid  5085] <... ioctl resumed>)        = 0
[pid  5086] close(4 <unfinished ...>
[pid  5083] <... write resumed>)        = 16777216
[pid  5085] close(3 <unfinished ...>
[pid  5086] <... close resumed>)        = 0
[pid  5085] <... close resumed>)        = 0
[pid  5086] mkdir("./file0", 0777 <unfinished ...>
[pid  5085] close(4 <unfinished ...>
[pid  5086] <... mkdir resumed>)        = 0
[pid  5083] munmap(0x7f6196400000, 138412032 <unfinished ...>
[pid  5082] <... write resumed>)        = 16777216
[pid  5085] <... close resumed>)        = 0
[pid  5085] mkdir("./file0", 0777)      = 0
[pid  5086] mount("/dev/loop4", "./file0", "jfs", MS_NOATIME|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME|MS_LAZYTIME, "integrity,discard=0x0000000000000000,noquota,nointegrity,iocharset=cp860,errors=remount-ro,iocharset"... <unfinished ...>
[  111.977536][ T5086] loop4: detected capacity change from 0 to 32768
[  111.992094][ T5085] loop5: detected capacity change from 0 to 32768
[pid  5082] munmap(0x7f6196400000, 138412032 <unfinished ...>
[pid  5085] mount("/dev/loop5", "./file0", "jfs", MS_NOATIME|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME|MS_LAZYTIME, "integrity,discard=0x0000000000000000,noquota,nointegrity,iocharset=cp860,errors=remount-ro,iocharset"... <unfinished ...>
[pid  5081] <... mount resumed>)        = 0
[pid  5081] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5081] chdir("./file0")            = 0
[pid  5081] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy)
[pid  5081] exit_group(0)               = ?
[pid  5081] +++ exited with 0 +++
[pid  5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5081, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=44 /* 0.44 s */} ---
[pid  5076] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5076] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
[pid  5076] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5076] getdents64(3, 0x5555698ee6f0 /* 4 entries */, 32768) = 112
[pid  5076] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5086] <... mount resumed>)        = 0
[pid  5076] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid  5086] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY <unfinished ...>
[pid  5076] newfstatat(AT_FDCWD, "./0/binderfs",  <unfinished ...>
[pid  5086] <... openat resumed>)       = 3
[pid  5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5086] chdir("./file0")            = 0
[pid  5076] unlink("./0/binderfs" <unfinished ...>
[pid  5085] <... mount resumed>)        = 0
[pid  5086] openat(AT_FDCWD, "/dev/loop4", O_RDWR <unfinished ...>
[pid  5076] <... unlink resumed>)       = 0
[pid  5086] <... openat resumed>)       = -1 EBUSY (Device or resource busy)
[pid  5076] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5085] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY <unfinished ...>
[pid  5086] exit_group(0 <unfinished ...>
[pid  5085] <... openat resumed>)       = 3
[pid  5086] <... exit_group resumed>)   = ?
[pid  5085] chdir("./file0")            = 0
[pid  5083] <... munmap resumed>)       = 0
[pid  5085] openat(AT_FDCWD, "/dev/loop5", O_RDWR <unfinished ...>
[pid  5086] +++ exited with 0 +++
[pid  5083] openat(AT_FDCWD, "/dev/loop2", O_RDWR <unfinished ...>
[pid  5082] <... munmap resumed>)       = 0
[pid  5083] <... openat resumed>)       = 4
[pid  5079] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5086, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=42 /* 0.42 s */} ---
[pid  5083] ioctl(4, LOOP_SET_FD, 3 <unfinished ...>
[pid  5085] <... openat resumed>)       = -1 EBUSY (Device or resource busy)
[pid  5084] <... write resumed>)        = 16777216
[pid  5082] openat(AT_FDCWD, "/dev/loop0", O_RDWR <unfinished ...>
[pid  5079] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5079] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
[pid  5079] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5082] <... openat resumed>)       = 4
[pid  5079] getdents64(3,  <unfinished ...>
[pid  5085] exit_group(0 <unfinished ...>
[pid  5084] munmap(0x7f6196400000, 138412032 <unfinished ...>
[pid  5083] <... ioctl resumed>)        = 0
[pid  5085] <... exit_group resumed>)   = ?
[pid  5082] ioctl(4, LOOP_SET_FD, 3 <unfinished ...>
[pid  5079] <... getdents64 resumed>0x5555698ee6f0 /* 4 entries */, 32768) = 112
[pid  5079] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5079] newfstatat(AT_FDCWD, "./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5085] +++ exited with 0 +++
[pid  5079] unlink("./0/binderfs" <unfinished ...>
[pid  5080] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5085, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=38 /* 0.38 s */} ---
[pid  5080] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5083] close(3 <unfinished ...>
[pid  5080] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid  5079] <... unlink resumed>)       = 0
[pid  5080] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
[pid  5080] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5080] getdents64(3, 0x5555698ee6f0 /* 4 entries */, 32768) = 112
[pid  5080] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5083] <... close resumed>)        = 0
[pid  5080] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid  5079] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5083] close(4 <unfinished ...>
[pid  5080] newfstatat(AT_FDCWD, "./0/binderfs",  <unfinished ...>
[pid  5083] <... close resumed>)        = 0
[pid  5080] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5083] mkdir("./file0", 0777 <unfinished ...>
[pid  5082] <... ioctl resumed>)        = 0
[pid  5080] unlink("./0/binderfs" <unfinished ...>
[pid  5083] <... mkdir resumed>)        = 0
[pid  5082] close(3 <unfinished ...>
[pid  5080] <... unlink resumed>)       = 0
[pid  5083] mount("/dev/loop2", "./file0", "jfs", MS_NOATIME|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME|MS_LAZYTIME, "integrity,discard=0x0000000000000000,noquota,nointegrity,iocharset=cp860,errors=remount-ro,iocharset"... <unfinished ...>
[pid  5082] <... close resumed>)        = 0
[pid  5080] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5082] close(4)                    = 0
[  112.131338][ T5083] loop2: detected capacity change from 0 to 32768
[  112.149610][ T5082] loop0: detected capacity change from 0 to 32768
[  112.179494][ T5080] general protection fault, probably for non-canonical address 0xdffffc0000000006: 0000 [#1] PREEMPT SMP KASAN NOPTI
[  112.191837][ T5080] KASAN: null-ptr-deref in range [0x0000000000000030-0x0000000000000037]
[  112.200362][ T5080] CPU: 0 PID: 5080 Comm: syz-executor391 Not tainted 6.8.0-syzkaller-08951-gfe46a7dd189e #0
[  112.210551][ T5080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/29/2024
[  112.220631][ T5080] RIP: 0010:write_special_inodes+0xa9/0x170
[  112.226602][ T5080] Code: 2e e8 6b 04 ce 07 48 8d 7b 28 48 89 f8 48 c1 e8 03 80 3c 28 00 0f 85 b1 00 00 00 4c 8b 6b 28 49 8d 7d 30 48 89 f8 48 c1 e8 03 <80> 3c 28 00 0f 85 8e 00 00 00 49 8b 7d 30 2e e8 33 04 ce 07 48 8d
[  112.246262][ T5080] RSP: 0018:ffffc900044a7bb8 EFLAGS: 00010216
[  112.252360][ T5080] RAX: 0000000000000006 RBX: ffff888021dcee00 RCX: ffffffff81bf2e0e
[  112.260352][ T5080] RDX: 0000000000000000 RSI: ffffffff81bf2dc1 RDI: 0000000000000030
[  112.268350][ T5080] RBP: dffffc0000000000 R08: 0000000000000005 R09: 0000000000000000
[  112.276377][ T5080] R10: 0000000000000000 R11: 0000000000000001 R12: ffffffff81bfefc0
[  112.284366][ T5080] R13: 0000000000000000 R14: ffff8880225b7800 R15: ffff88802a013380
[  112.292442][ T5080] FS:  00005555698ed380(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000
[  112.301416][ T5080] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  112.308035][ T5080] CR2: 00005555698f66f8 CR3: 0000000011944000 CR4: 0000000000350ef0
[  112.316032][ T5080] Call Trace:
[  112.319330][ T5080]  <TASK>
[  112.322279][ T5080]  ? show_regs+0x8c/0xa0
[  112.326560][ T5080]  ? die_addr+0x4f/0xd0
[  112.330753][ T5080]  ? exc_general_protection+0x155/0x230
[  112.336379][ T5080]  ? asm_exc_general_protection+0x26/0x30
[  112.342162][ T5080]  ? __pfx_filemap_flush+0x10/0x10
[  112.347328][ T5080]  ? filemap_fdatawrite_wbc+0xce/0x1c0
[  112.352845][ T5080]  ? filemap_fdatawrite_wbc+0x81/0x1c0
[  112.358391][ T5080]  ? write_special_inodes+0xa9/0x170
[  112.363731][ T5080]  ? write_special_inodes+0x85/0x170
[  112.369063][ T5080]  lmLogSync+0x4a0/0x820
[  112.373354][ T5080]  ? __pfx_lmLogSync+0x10/0x10
[  112.378176][ T5080]  ? __pfx_dquot_writeback_dquots+0x10/0x10
[  112.384143][ T5080]  jfs_syncpt+0x89/0xa0
[  112.388356][ T5080]  jfs_sync_fs+0x83/0xb0
[  112.392652][ T5080]  ? __pfx_jfs_sync_fs+0x10/0x10
[  112.397647][ T5080]  sync_filesystem+0x110/0x290
[  112.402451][ T5080]  generic_shutdown_super+0x7e/0x3d0
[  112.407787][ T5080]  kill_block_super+0x3b/0x90
[  112.412596][ T5080]  deactivate_locked_super+0xc1/0x1a0
[  112.418459][ T5080]  deactivate_super+0xde/0x100
[  112.423275][ T5080]  cleanup_mnt+0x222/0x450
[  112.427737][ T5080]  task_work_run+0x151/0x250
[  112.432370][ T5080]  ? __pfx_task_work_run+0x10/0x10
[  112.437530][ T5080]  ptrace_notify+0x10e/0x130
[  112.442180][ T5080]  syscall_exit_to_user_mode_prepare+0x126/0x240
[  112.448560][ T5080]  syscall_exit_to_user_mode+0x11/0x2a0
[  112.454161][ T5080]  do_syscall_64+0xe2/0x260
[  112.458727][ T5080]  entry_SYSCALL_64_after_hwframe+0x6d/0x75
[  112.464676][ T5080] RIP: 0033:0x7f619e9ef437
[  112.469110][ T5080] Code: 07 00 48 83 c4 08 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8
[  112.488753][ T5080] RSP: 002b:00007ffdc682bf98 EFLAGS: 00000202 ORIG_RAX: 00000000000000a6
[  112.497201][ T5080] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f619e9ef437
[  112.505215][ T5080] RDX: 0000000000000000 RSI: 000000000000000a RDI: 00007ffdc682c050
[  112.513221][ T5080] RBP: 00007ffdc682c050 R08: 0000000000000000 R09: 0000000000000000
[  112.521233][ T5080] R10: 00000000ffffffff R11: 0000000000000202 R12: 00007ffdc682d0b0
[pid  5084] <... munmap resumed>)       = 0
[pid  5083] <... mount resumed>)        = 0
[pid  5082] mkdir("./file0", 0777 <unfinished ...>
[pid  5084] openat(AT_FDCWD, "/dev/loop3", O_RDWR <unfinished ...>
[pid  5083] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY <unfinished ...>
[pid  5082] <... mkdir resumed>)        = 0
[  112.529238][ T5080] R13: 00005555698ee6c0 R14: 0000000000000001 R15: 431bde82d7b634db
[  112.537253][ T5080]  </TASK>
[  112.540284][ T5080] Modules linked in:
[  112.558093][ T5080] ---[ end trace 0000000000000000 ]---
[  112.564394][ T5080] RIP: 0010:write_special_inodes+0xa9/0x170
[pid  5084] <... openat resumed>)       = 4
[pid  5083] <... openat resumed>)       = 3
[pid  5082] mount("/dev/loop0", "./file0", "jfs", MS_NOATIME|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME|MS_LAZYTIME, "integrity,discard=0x0000000000000000,noquota,nointegrity,iocharset=cp860,errors=remount-ro,iocharset"... <unfinished ...>
[pid  5084] ioctl(4, LOOP_SET_FD, 3 <unfinished ...>
[pid  5083] chdir("./file0" <unfinished ...>
[pid  5084] <... ioctl resumed>)        = 0
[pid  5083] <... chdir resumed>)        = 0
[pid  5084] close(3 <unfinished ...>
[pid  5083] openat(AT_FDCWD, "/dev/loop2", O_RDWR <unfinished ...>
[pid  5084] <... close resumed>)        = 0
[pid  5083] <... openat resumed>)       = -1 EBUSY (Device or resource busy)
[pid  5084] close(4 <unfinished ...>
[pid  5083] exit_group(0 <unfinished ...>
[pid  5084] <... close resumed>)        = 0
[pid  5083] <... exit_group resumed>)   = ?
[  112.577201][ T5080] Code: 2e e8 6b 04 ce 07 48 8d 7b 28 48 89 f8 48 c1 e8 03 80 3c 28 00 0f 85 b1 00 00 00 4c 8b 6b 28 49 8d 7d 30 48 89 f8 48 c1 e8 03 <80> 3c 28 00 0f 85 8e 00 00 00 49 8b 7d 30 2e e8 33 04 ce 07 48 8d
[  112.607479][ T5084] loop3: detected capacity change from 0 to 32768
[  112.612843][ T5080] RSP: 0018:ffffc900044a7bb8 EFLAGS: 00010216
[pid  5084] mkdir("./file0", 0777 <unfinished ...>
[pid  5083] +++ exited with 0 +++
[pid  5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5083, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=40 /* 0.40 s */} ---
[pid  5084] <... mkdir resumed>)        = 0
[pid  5077] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5077] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
[pid  5077] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5077] getdents64(3, 0x5555698ee6f0 /* 4 entries */, 32768) = 112
[pid  5077] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5077] newfstatat(AT_FDCWD, "./0/binderfs",  <unfinished ...>
[pid  5084] mount("/dev/loop3", "./file0", "jfs", MS_NOATIME|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME|MS_LAZYTIME, "integrity,discard=0x0000000000000000,noquota,nointegrity,iocharset=cp860,errors=remount-ro,iocharset"... <unfinished ...>
[pid  5077] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5077] unlink("./0/binderfs")      = 0
[  112.625483][ T5080] RAX: 0000000000000006 RBX: ffff888021dcee00 RCX: ffffffff81bf2e0e
[  112.635167][ T5080] RDX: 0000000000000000 RSI: ffffffff81bf2dc1 RDI: 0000000000000030
[  112.651956][ T5080] RBP: dffffc0000000000 R08: 0000000000000005 R09: 0000000000000000
[  112.714308][ T5080] R10: 0000000000000000 R11: 0000000000000001 R12: ffffffff81bfefc0
[  112.732302][ T5080] R13: 0000000000000000 R14: ffff8880225b7800 R15: ffff88802a013380
[  112.741694][ T5080] FS:  00005555698ed380(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000
[  112.750930][ T5080] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  112.758174][ T5080] CR2: 000055a96dad5544 CR3: 0000000011944000 CR4: 0000000000350ef0
[  112.766231][ T5080] Kernel panic - not syncing: Fatal exception
[  112.772526][ T5080] Kernel Offset: disabled
[  112.776856][ T5080] Rebooting in 86400 seconds..