./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2877469606

<...>
Warning: Permanently added '10.128.0.143' (ED25519) to the list of known hosts.
execve("./syz-executor2877469606", ["./syz-executor2877469606"], 0x7ffd636c9360 /* 10 vars */) = 0
brk(NULL)                               = 0x555573f6c000
brk(0x555573f6cd00)                     = 0x555573f6cd00
arch_prctl(ARCH_SET_FS, 0x555573f6c380) = 0
set_tid_address(0x555573f6c650)         = 5844
set_robust_list(0x555573f6c660, 24)     = 0
rseq(0x555573f6cca0, 0x20, 0, 0x53053053) = 0
prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0
readlink("/proc/self/exe", "/root/syz-executor2877469606", 4096) = 28
getrandom("\x3c\x32\x4c\x26\x08\xc7\xff\xa5", 8, GRND_NONBLOCK) = 8
brk(NULL)                               = 0x555573f6cd00
brk(0x555573f8dd00)                     = 0x555573f8dd00
brk(0x555573f8e000)                     = 0x555573f8e000
mprotect(0x7fcedc030000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5845 attached
 <unfinished ...>
[pid  5845] set_robust_list(0x555573f6c660, 24 <unfinished ...>
[pid  5844] <... clone resumed>, child_tidptr=0x555573f6c650) = 5845
[pid  5845] <... set_robust_list resumed>) = 0
[pid  5844] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...>
[pid  5845] mkdir("./syzkaller.2HIMeM", 0700./strace-static-x86_64: Process 5846 attached
 <unfinished ...>
[pid  5844] <... clone resumed>, child_tidptr=0x555573f6c650) = 5846
[pid  5844] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...>
[pid  5846] set_robust_list(0x555573f6c660, 24 <unfinished ...>
[pid  5845] <... mkdir resumed>)        = 0
[pid  5846] <... set_robust_list resumed>) = 0
[pid  5845] chmod("./syzkaller.2HIMeM", 0777./strace-static-x86_64: Process 5847 attached
 <unfinished ...>
[pid  5846] mkdir("./syzkaller.95i3j7", 0700 <unfinished ...>
[pid  5844] <... clone resumed>, child_tidptr=0x555573f6c650) = 5847
[pid  5847] set_robust_list(0x555573f6c660, 24 <unfinished ...>
[pid  5845] <... chmod resumed>)        = 0
[pid  5844] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5848 attached
 <unfinished ...>
[pid  5847] <... set_robust_list resumed>) = 0
[pid  5846] <... mkdir resumed>)        = 0
[pid  5845] chdir("./syzkaller.2HIMeM") = 0
[pid  5844] <... clone resumed>, child_tidptr=0x555573f6c650) = 5848
[pid  5848] set_robust_list(0x555573f6c660, 24 <unfinished ...>
[pid  5847] mkdir("./syzkaller.7Q9ckS", 0700 <unfinished ...>
[pid  5846] chmod("./syzkaller.95i3j7", 0777 <unfinished ...>
[pid  5845] mkdir("./0", 0777 <unfinished ...>
[pid  5844] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...>
[pid  5848] <... set_robust_list resumed>) = 0
[pid  5847] <... mkdir resumed>)        = 0
[pid  5846] <... chmod resumed>)        = 0
[pid  5845] <... mkdir resumed>)        = 0
./strace-static-x86_64: Process 5849 attached
[pid  5848] mkdir("./syzkaller.TrKXrn", 0700 <unfinished ...>
[pid  5845] openat(AT_FDCWD, "/dev/loop0", O_RDWR <unfinished ...>
[pid  5844] <... clone resumed>, child_tidptr=0x555573f6c650) = 5849
[pid  5849] set_robust_list(0x555573f6c660, 24 <unfinished ...>
[pid  5848] <... mkdir resumed>)        = 0
[pid  5847] chmod("./syzkaller.7Q9ckS", 0777 <unfinished ...>
[pid  5846] chdir("./syzkaller.95i3j7" <unfinished ...>
[pid  5849] <... set_robust_list resumed>) = 0
[pid  5848] chmod("./syzkaller.TrKXrn", 0777 <unfinished ...>
[pid  5846] <... chdir resumed>)        = 0
[pid  5845] <... openat resumed>)       = 3
[pid  5847] <... chmod resumed>)        = 0
[pid  5848] <... chmod resumed>)        = 0
[pid  5845] ioctl(3, LOOP_CLR_FD <unfinished ...>
[pid  5849] mkdir("./syzkaller.BMa381", 0700 <unfinished ...>
[pid  5846] mkdir("./0", 0777 <unfinished ...>
[pid  5847] chdir("./syzkaller.7Q9ckS" <unfinished ...>
[pid  5848] chdir("./syzkaller.TrKXrn" <unfinished ...>
[pid  5847] <... chdir resumed>)        = 0
[pid  5845] <... ioctl resumed>)        = -1 ENXIO (No such device or address)
[pid  5848] <... chdir resumed>)        = 0
[pid  5848] mkdir("./0", 0777 <unfinished ...>
[pid  5847] mkdir("./0", 0777 <unfinished ...>
[pid  5846] <... mkdir resumed>)        = 0
[pid  5845] close(3 <unfinished ...>
[pid  5849] <... mkdir resumed>)        = 0
[pid  5845] <... close resumed>)        = 0
[pid  5849] chmod("./syzkaller.BMa381", 0777 <unfinished ...>
[pid  5848] <... mkdir resumed>)        = 0
[pid  5847] <... mkdir resumed>)        = 0
[pid  5846] openat(AT_FDCWD, "/dev/loop1", O_RDWR <unfinished ...>
[pid  5845] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...>
[pid  5849] <... chmod resumed>)        = 0
[pid  5847] openat(AT_FDCWD, "/dev/loop2", O_RDWR <unfinished ...>
[pid  5846] <... openat resumed>)       = 3
[pid  5845] <... clone resumed>, child_tidptr=0x555573f6c650) = 5850
./strace-static-x86_64: Process 5850 attached
[pid  5849] chdir("./syzkaller.BMa381" <unfinished ...>
[pid  5848] openat(AT_FDCWD, "/dev/loop3", O_RDWR <unfinished ...>
[pid  5847] <... openat resumed>)       = 3
[pid  5846] ioctl(3, LOOP_CLR_FD <unfinished ...>
[pid  5850] set_robust_list(0x555573f6c660, 24) = 0
[pid  5849] <... chdir resumed>)        = 0
[pid  5848] <... openat resumed>)       = 3
[pid  5847] ioctl(3, LOOP_CLR_FD <unfinished ...>
[pid  5846] <... ioctl resumed>)        = -1 ENXIO (No such device or address)
[pid  5850] chdir("./0" <unfinished ...>
[pid  5849] mkdir("./0", 0777 <unfinished ...>
[pid  5846] close(3 <unfinished ...>
[pid  5850] <... chdir resumed>)        = 0
[pid  5849] <... mkdir resumed>)        = 0
[pid  5848] ioctl(3, LOOP_CLR_FD <unfinished ...>
[pid  5847] <... ioctl resumed>)        = -1 ENXIO (No such device or address)
[pid  5846] <... close resumed>)        = 0
[pid  5850] prctl(PR_SET_PDEATHSIG, SIGKILL <unfinished ...>
[pid  5846] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...>
[pid  5850] <... prctl resumed>)        = 0
[pid  5850] setpgid(0, 0 <unfinished ...>
[pid  5848] <... ioctl resumed>)        = -1 ENXIO (No such device or address)
[pid  5847] close(3 <unfinished ...>
[pid  5850] <... setpgid resumed>)      = 0
[pid  5848] close(3 <unfinished ...>
[pid  5847] <... close resumed>)        = 0
[pid  5850] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC <unfinished ...>
[pid  5848] <... close resumed>)        = 0
[pid  5847] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...>
[pid  5850] <... openat resumed>)       = 3
[pid  5849] openat(AT_FDCWD, "/dev/loop4", O_RDWR <unfinished ...>
[pid  5848] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5852 attached
./strace-static-x86_64: Process 5853 attached
 <unfinished ...>
[pid  5852] set_robust_list(0x555573f6c660, 24 <unfinished ...>
[pid  5849] <... openat resumed>)       = 3
./strace-static-x86_64: Process 5854 attached
[pid  5852] <... set_robust_list resumed>) = 0
[pid  5850] write(3, "1000", 4 <unfinished ...>
[pid  5846] <... clone resumed>, child_tidptr=0x555573f6c650) = 5853
[pid  5850] <... write resumed>)        = 4
[pid  5852] chdir("./0" <unfinished ...>
[pid  5849] ioctl(3, LOOP_CLR_FD <unfinished ...>
[pid  5854] set_robust_list(0x555573f6c660, 24 <unfinished ...>
[pid  5853] set_robust_list(0x555573f6c660, 24 <unfinished ...>
[pid  5850] close(3 <unfinished ...>
[pid  5849] <... ioctl resumed>)        = -1 ENXIO (No such device or address)
[pid  5854] <... set_robust_list resumed>) = 0
[pid  5853] <... set_robust_list resumed>) = 0
[pid  5852] <... chdir resumed>)        = 0
[pid  5850] <... close resumed>)        = 0
[pid  5849] close(3 <unfinished ...>
[pid  5848] <... clone resumed>, child_tidptr=0x555573f6c650) = 5854
[pid  5847] <... clone resumed>, child_tidptr=0x555573f6c650) = 5852
[pid  5853] chdir("./0" <unfinished ...>
[pid  5852] prctl(PR_SET_PDEATHSIG, SIGKILL <unfinished ...>
[pid  5850] symlink("/dev/binderfs", "./binderfs" <unfinished ...>
[pid  5849] <... close resumed>)        = 0
[pid  5850] <... symlink resumed>)      = 0
[pid  5849] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...>
[pid  5854] chdir("./0" <unfinished ...>
[pid  5853] <... chdir resumed>)        = 0
[pid  5852] <... prctl resumed>)        = 0
[pid  5854] <... chdir resumed>)        = 0
[pid  5853] prctl(PR_SET_PDEATHSIG, SIGKILL <unfinished ...>
[pid  5852] setpgid(0, 0 <unfinished ...>
[pid  5854] prctl(PR_SET_PDEATHSIG, SIGKILL <unfinished ...>
[pid  5853] <... prctl resumed>)        = 0
[pid  5852] <... setpgid resumed>)      = 0
[pid  5854] <... prctl resumed>)        = 0
./strace-static-x86_64: Process 5855 attached
[pid  5854] setpgid(0, 0 <unfinished ...>
[pid  5853] setpgid(0, 0 <unfinished ...>
[pid  5852] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC <unfinished ...>
executing program
[pid  5854] <... setpgid resumed>)      = 0
[pid  5852] <... openat resumed>)       = 3
[pid  5850] write(1, "executing program\n", 18) = 18
[pid  5849] <... clone resumed>, child_tidptr=0x555573f6c650) = 5855
[pid  5854] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC <unfinished ...>
[pid  5853] <... setpgid resumed>)      = 0
[pid  5852] write(3, "1000", 4 <unfinished ...>
[pid  5854] <... openat resumed>)       = 3
[pid  5853] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC <unfinished ...>
[pid  5852] <... write resumed>)        = 4
[pid  5850] memfd_create("syzkaller", 0 <unfinished ...>
[pid  5853] <... openat resumed>)       = 3
[pid  5852] close(3 <unfinished ...>
[pid  5855] set_robust_list(0x555573f6c660, 24 <unfinished ...>
[pid  5852] <... close resumed>)        = 0
[pid  5855] <... set_robust_list resumed>) = 0
[pid  5854] write(3, "1000", 4 <unfinished ...>
[pid  5852] symlink("/dev/binderfs", "./binderfs" <unfinished ...>
[pid  5850] <... memfd_create resumed>) = 3
[pid  5855] chdir("./0" <unfinished ...>
[pid  5854] <... write resumed>)        = 4
[pid  5853] write(3, "1000", 4 <unfinished ...>
[pid  5852] <... symlink resumed>)      = 0
[pid  5850] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fced3a00000
executing program
[pid  5855] <... chdir resumed>)        = 0
[pid  5854] close(3 <unfinished ...>
[pid  5853] <... write resumed>)        = 4
[pid  5852] write(1, "executing program\n", 18 <unfinished ...>
[pid  5855] prctl(PR_SET_PDEATHSIG, SIGKILL <unfinished ...>
[pid  5854] <... close resumed>)        = 0
[pid  5853] close(3 <unfinished ...>
[pid  5852] <... write resumed>)        = 18
[pid  5855] <... prctl resumed>)        = 0
[pid  5854] symlink("/dev/binderfs", "./binderfs" <unfinished ...>
[pid  5853] <... close resumed>)        = 0
[pid  5853] symlink("/dev/binderfs", "./binderfs" <unfinished ...>
[pid  5855] setpgid(0, 0 <unfinished ...>
[pid  5853] <... symlink resumed>)      = 0
[pid  5852] memfd_create("syzkaller", 0 <unfinished ...>
[pid  5855] <... setpgid resumed>)      = 0
[pid  5854] <... symlink resumed>)      = 0
[pid  5855] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC <unfinished ...>
executing program
executing program
[pid  5854] write(1, "executing program\n", 18 <unfinished ...>
[pid  5853] write(1, "executing program\n", 18 <unfinished ...>
[pid  5852] <... memfd_create resumed>) = 3
[pid  5854] <... write resumed>)        = 18
[pid  5853] <... write resumed>)        = 18
[pid  5854] memfd_create("syzkaller", 0 <unfinished ...>
[pid  5853] memfd_create("syzkaller", 0 <unfinished ...>
[pid  5855] <... openat resumed>)       = 3
[pid  5854] <... memfd_create resumed>) = 3
[pid  5852] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 <unfinished ...>
[pid  5855] write(3, "1000", 4 <unfinished ...>
[pid  5854] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 <unfinished ...>
[pid  5852] <... mmap resumed>)         = 0x7fced3a00000
[pid  5855] <... write resumed>)        = 4
[pid  5853] <... memfd_create resumed>) = 3
[pid  5854] <... mmap resumed>)         = 0x7fced3a00000
[pid  5855] close(3)                    = 0
[pid  5853] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 <unfinished ...>
[pid  5855] symlink("/dev/binderfs", "./binderfs" <unfinished ...>
[pid  5853] <... mmap resumed>)         = 0x7fced3a00000
[pid  5855] <... symlink resumed>)      = 0
[pid  5855] write(1, "executing program\n", 18) = 18
[pid  5855] memfd_create("syzkaller", 0) = 3
executing program
[pid  5855] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fced3a00000
[pid  5850] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 <unfinished ...>
[pid  5852] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 <unfinished ...>
[pid  5853] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 <unfinished ...>
[pid  5854] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 <unfinished ...>
[pid  5855] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 <unfinished ...>
[pid  5850] <... write resumed>)        = 16777216
[pid  5850] munmap(0x7fced3a00000, 138412032) = 0
[pid  5850] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5850] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5852] <... write resumed>)        = 16777216
[pid  5850] close(3)                    = 0
[pid  5850] close(4 <unfinished ...>
[pid  5855] <... write resumed>)        = 16777216
[pid  5852] munmap(0x7fced3a00000, 138412032 <unfinished ...>
[pid  5850] <... close resumed>)        = 0
[pid  5853] <... write resumed>)        = 16777216
[pid  5850] mkdir("./bus", 0777 <unfinished ...>
[pid  5855] munmap(0x7fced3a00000, 138412032 <unfinished ...>
[pid  5853] munmap(0x7fced3a00000, 138412032 <unfinished ...>
[pid  5850] <... mkdir resumed>)        = 0
[   77.207289][ T5850] loop0: detected capacity change from 0 to 32768
[pid  5852] <... munmap resumed>)       = 0
[pid  5850] mount("/dev/loop0", "./bus", "jfs", MS_MANDLOCK|MS_DIRSYNC|MS_NODIRATIME|MS_POSIXACL|MS_LAZYTIME, "" <unfinished ...>
[pid  5852] openat(AT_FDCWD, "/dev/loop2", O_RDWR <unfinished ...>
[pid  5855] <... munmap resumed>)       = 0
[pid  5852] <... openat resumed>)       = 4
[pid  5852] ioctl(4, LOOP_SET_FD, 3 <unfinished ...>
[pid  5855] openat(AT_FDCWD, "/dev/loop4", O_RDWR <unfinished ...>
[pid  5853] <... munmap resumed>)       = 0
[pid  5853] openat(AT_FDCWD, "/dev/loop1", O_RDWR <unfinished ...>
[pid  5855] <... openat resumed>)       = 4
[pid  5853] <... openat resumed>)       = 4
[   77.272880][ T5850] =======================================================
[   77.272880][ T5850] WARNING: The mand mount option has been deprecated and
[   77.272880][ T5850]          and is ignored by this kernel. Remove the mand
[   77.272880][ T5850]          option from the mount to silence this warning.
[   77.272880][ T5850] =======================================================
[   77.283365][ T5852] loop2: detected capacity change from 0 to 32768
[pid  5855] ioctl(4, LOOP_SET_FD, 3 <unfinished ...>
[pid  5853] ioctl(4, LOOP_SET_FD, 3 <unfinished ...>
[pid  5855] <... ioctl resumed>)        = 0
[pid  5855] close(3)                    = 0
[pid  5855] close(4)                    = 0
[pid  5855] mkdir("./bus", 0777)        = 0
[pid  5854] <... write resumed>)        = 16777216
[pid  5854] munmap(0x7fced3a00000, 138412032 <unfinished ...>
[pid  5855] mount("/dev/loop4", "./bus", "jfs", MS_MANDLOCK|MS_DIRSYNC|MS_NODIRATIME|MS_POSIXACL|MS_LAZYTIME, "" <unfinished ...>
[pid  5854] <... munmap resumed>)       = 0
[pid  5853] <... ioctl resumed>)        = 0
[pid  5853] close(3)                    = 0
[pid  5855] <... mount resumed>)        = 0
[pid  5855] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY <unfinished ...>
[pid  5853] close(4 <unfinished ...>
[pid  5855] <... openat resumed>)       = 3
[pid  5853] <... close resumed>)        = 0
[pid  5853] mkdir("./bus", 0777 <unfinished ...>
[pid  5855] chdir("./bus")              = 0
[pid  5855] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy)
[pid  5855] openat(AT_FDCWD, "freezer.self_freezing", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 <unfinished ...>
[pid  5853] <... mkdir resumed>)        = 0
[pid  5855] <... openat resumed>)       = 4
[pid  5853] mount("/dev/loop1", "./bus", "jfs", MS_MANDLOCK|MS_DIRSYNC|MS_NODIRATIME|MS_POSIXACL|MS_LAZYTIME, "" <unfinished ...>
[pid  5855] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 4, 0) = 0x20000000
[pid  5854] openat(AT_FDCWD, "/dev/loop3", O_RDWR <unfinished ...>
[pid  5853] <... mount resumed>)        = 0
[pid  5852] <... ioctl resumed>)        = 0
[pid  5850] <... mount resumed>)        = 0
[pid  5853] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY <unfinished ...>
[pid  5850] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY <unfinished ...>
[pid  5854] <... openat resumed>)       = 4
[pid  5850] <... openat resumed>)       = 3
[pid  5850] chdir("./bus" <unfinished ...>
[pid  5853] <... openat resumed>)       = 3
[   77.317714][ T5855] loop4: detected capacity change from 0 to 32768
[   77.325869][ T5853] loop1: detected capacity change from 0 to 32768
[pid  5854] ioctl(4, LOOP_SET_FD, 3 <unfinished ...>
[pid  5853] chdir("./bus" <unfinished ...>
[pid  5850] <... chdir resumed>)        = 0
[pid  5853] <... chdir resumed>)        = 0
[pid  5850] openat(AT_FDCWD, "/dev/loop0", O_RDWR <unfinished ...>
[pid  5853] openat(AT_FDCWD, "/dev/loop1", O_RDWR <unfinished ...>
[pid  5855] ftruncate(4, 49530 <unfinished ...>
[pid  5850] <... openat resumed>)       = -1 EBUSY (Device or resource busy)
[pid  5855] <... ftruncate resumed>)    = 0
[pid  5853] <... openat resumed>)       = -1 EBUSY (Device or resource busy)
[pid  5850] openat(AT_FDCWD, "freezer.self_freezing", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 <unfinished ...>
[pid  5853] openat(AT_FDCWD, "freezer.self_freezing", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 <unfinished ...>
[pid  5855] memfd_create("syzkaller", 0 <unfinished ...>
[pid  5853] <... openat resumed>)       = 4
[pid  5852] close(3)                    = 0
[pid  5852] close(4 <unfinished ...>
[pid  5850] <... openat resumed>)       = 4
[pid  5852] <... close resumed>)        = 0
[pid  5852] mkdir("./bus", 0777)        = 0
[pid  5850] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 4, 0 <unfinished ...>
[pid  5852] mount("/dev/loop2", "./bus", "jfs", MS_MANDLOCK|MS_DIRSYNC|MS_NODIRATIME|MS_POSIXACL|MS_LAZYTIME, "" <unfinished ...>
[pid  5855] <... memfd_create resumed>) = 5
[pid  5855] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fced3a00000
[pid  5853] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 4, 0 <unfinished ...>
[pid  5850] <... mmap resumed>)         = 0x20000000
[pid  5854] <... ioctl resumed>)        = 0
[pid  5854] close(3)                    = 0
[pid  5854] close(4)                    = 0
[pid  5853] <... mmap resumed>)         = 0x20000000
[pid  5854] mkdir("./bus", 0777)        = 0
[pid  5853] ftruncate(4, 49530 <unfinished ...>
[pid  5850] ftruncate(4, 49530 <unfinished ...>
[pid  5854] mount("/dev/loop3", "./bus", "jfs", MS_MANDLOCK|MS_DIRSYNC|MS_NODIRATIME|MS_POSIXACL|MS_LAZYTIME, "" <unfinished ...>
[pid  5850] <... ftruncate resumed>)    = 0
[pid  5853] <... ftruncate resumed>)    = 0
[pid  5850] memfd_create("syzkaller", 0 <unfinished ...>
[pid  5853] memfd_create("syzkaller", 0 <unfinished ...>
[pid  5850] <... memfd_create resumed>) = 5
[pid  5850] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fced3a00000
[pid  5853] <... memfd_create resumed>) = 5
[pid  5853] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fced3a00000
[pid  5854] <... mount resumed>)        = 0
[pid  5854] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3
[pid  5854] chdir("./bus" <unfinished ...>
[pid  5852] <... mount resumed>)        = 0
[pid  5852] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3
[pid  5852] chdir("./bus")              = 0
[pid  5852] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy)
[pid  5854] <... chdir resumed>)        = 0
[pid  5854] openat(AT_FDCWD, "/dev/loop3", O_RDWR <unfinished ...>
[pid  5852] openat(AT_FDCWD, "freezer.self_freezing", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000 <unfinished ...>
[pid  5854] <... openat resumed>)       = -1 EBUSY (Device or resource busy)
[pid  5852] <... openat resumed>)       = 4
[pid  5854] openat(AT_FDCWD, "freezer.self_freezing", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_APPEND|FASYNC|0x18, 000) = 4
[   77.372105][ T5854] loop3: detected capacity change from 0 to 32768
[pid  5852] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 4, 0) = 0x20000000
[pid  5854] mmap(0x20000000, 11755520, PROT_WRITE, MAP_SHARED|MAP_FIXED|MAP_POPULATE|MAP_STACK, 4, 0) = 0x20000000
[pid  5854] ftruncate(4, 49530)         = 0
[pid  5852] ftruncate(4, 49530 <unfinished ...>
[pid  5854] memfd_create("syzkaller", 0 <unfinished ...>
[pid  5852] <... ftruncate resumed>)    = 0
[pid  5852] memfd_create("syzkaller", 0 <unfinished ...>
[pid  5854] <... memfd_create resumed>) = 5
[pid  5854] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fced3a00000
[pid  5852] <... memfd_create resumed>) = 5
[pid  5852] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fced3a00000
[pid  5850] write(5, "\x02\x02\x02\x02\x02\x02\x02\x02\x74\x68\x69\x73\x20\x69\x73\x20\x61\x6e\x20\x6f\x63\x66\x73\x32\x20\x76\x6f\x6c\x75\x6d\x65\x00\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02"..., 16777216 <unfinished ...>
[pid  5855] write(5, "\x02\x02\x02\x02\x02\x02\x02\x02\x74\x68\x69\x73\x20\x69\x73\x20\x61\x6e\x20\x6f\x63\x66\x73\x32\x20\x76\x6f\x6c\x75\x6d\x65\x00\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02"..., 16777216 <unfinished ...>
[pid  5853] write(5, "\x02\x02\x02\x02\x02\x02\x02\x02\x74\x68\x69\x73\x20\x69\x73\x20\x61\x6e\x20\x6f\x63\x66\x73\x32\x20\x76\x6f\x6c\x75\x6d\x65\x00\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02"..., 16777216 <unfinished ...>
[pid  5854] write(5, "\x02\x02\x02\x02\x02\x02\x02\x02\x74\x68\x69\x73\x20\x69\x73\x20\x61\x6e\x20\x6f\x63\x66\x73\x32\x20\x76\x6f\x6c\x75\x6d\x65\x00\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02"..., 16777216 <unfinished ...>
[pid  5852] write(5, "\x02\x02\x02\x02\x02\x02\x02\x02\x74\x68\x69\x73\x20\x69\x73\x20\x61\x6e\x20\x6f\x63\x66\x73\x32\x20\x76\x6f\x6c\x75\x6d\x65\x00\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02\x02"..., 16777216 <unfinished ...>
[pid  5850] <... write resumed>)        = 16777216
[pid  5850] munmap(0x7fced3a00000, 138412032) = 0
[pid  5850] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy)
[pid  5850] close(5 <unfinished ...>
[pid  5855] <... write resumed>)        = 16777216
[pid  5855] munmap(0x7fced3a00000, 138412032 <unfinished ...>
[pid  5853] <... write resumed>)        = 16777216
[pid  5852] <... write resumed>)        = 16777216
[pid  5852] munmap(0x7fced3a00000, 138412032 <unfinished ...>
[pid  5855] <... munmap resumed>)       = 0
[pid  5854] <... write resumed>)        = 16777216
[pid  5853] munmap(0x7fced3a00000, 138412032 <unfinished ...>
[pid  5852] <... munmap resumed>)       = 0
[pid  5855] openat(AT_FDCWD, "/dev/loop4", O_RDWR <unfinished ...>
[pid  5854] munmap(0x7fced3a00000, 138412032 <unfinished ...>
[pid  5855] <... openat resumed>)       = -1 EBUSY (Device or resource busy)
[pid  5855] close(5 <unfinished ...>
[pid  5852] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy)
[pid  5852] close(5 <unfinished ...>
[pid  5853] <... munmap resumed>)       = 0
[pid  5853] openat(AT_FDCWD, "/dev/loop1", O_RDWR <unfinished ...>
[pid  5854] <... munmap resumed>)       = 0
[pid  5853] <... openat resumed>)       = -1 EBUSY (Device or resource busy)
[pid  5854] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy)
[pid  5854] close(5 <unfinished ...>
[pid  5853] close(5 <unfinished ...>
[pid  5850] <... close resumed>)        = 0
[pid  5850] exit_group(0)               = ?
[pid  5850] +++ exited with 0 +++
[pid  5845] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5850, si_uid=0, si_status=0, si_utime=17 /* 0.17 s */, si_stime=59 /* 0.59 s */} ---
[pid  5845] restart_syscall(<... resuming interrupted clone ...>) = 0
[pid  5845] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5845] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
[pid  5845] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5845] getdents64(3, 0x555573f6d6f0 /* 4 entries */, 32768) = 104
[pid  5845] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5845] newfstatat(AT_FDCWD, "./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5845] unlink("./0/binderfs")      = 0
[   78.440392][   T12] ERROR: (device loop0): dbAlloc: the hint is outside the map
[   78.440392][   T12] 
[   78.465854][   T12] ERROR: (device loop0): remounting filesystem as read-only
[pid  5845] umount2("./0/bus", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5852] <... close resumed>)        = 0
[pid  5855] <... close resumed>)        = 0
[pid  5852] exit_group(0)               = ?
[pid  5855] exit_group(0)               = ?
[pid  5853] <... close resumed>)        = 0
[pid  5852] +++ exited with 0 +++
[pid  5854] <... close resumed>)        = 0
[pid  5847] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5852, si_uid=0, si_status=0, si_utime=17 /* 0.17 s */, si_stime=59 /* 0.59 s */} ---
[pid  5855] +++ exited with 0 +++
[pid  5853] exit_group(0 <unfinished ...>
[pid  5847] restart_syscall(<... resuming interrupted clone ...>) = 0
[pid  5847] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5854] exit_group(0 <unfinished ...>
[pid  5847] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid  5853] <... exit_group resumed>)   = ?
[pid  5849] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5855, si_uid=0, si_status=0, si_utime=19 /* 0.19 s */, si_stime=56 /* 0.56 s */} ---
[pid  5847] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY <unfinished ...>
[pid  5854] <... exit_group resumed>)   = ?
[pid  5847] <... openat resumed>)       = 3
[pid  5847] newfstatat(3, "",  <unfinished ...>
[pid  5854] +++ exited with 0 +++
[pid  5847] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5849] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5847] getdents64(3,  <unfinished ...>
[pid  5849] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY <unfinished ...>
[pid  5847] <... getdents64 resumed>0x555573f6d6f0 /* 4 entries */, 32768) = 104
[pid  5849] <... openat resumed>)       = 3
[pid  5847] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5849] newfstatat(3, "",  <unfinished ...>
[pid  5848] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5854, si_uid=0, si_status=0, si_utime=14 /* 0.14 s */, si_stime=61 /* 0.61 s */} ---
[pid  5847] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid  5849] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5848] restart_syscall(<... resuming interrupted clone ...> <unfinished ...>
[pid  5847] newfstatat(AT_FDCWD, "./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5847] unlink("./0/binderfs" <unfinished ...>
[pid  5853] +++ exited with 0 +++
[pid  5849] getdents64(3,  <unfinished ...>
[pid  5847] <... unlink resumed>)       = 0
[   78.492446][   T12] kworker/u8:1: attempt to access beyond end of device
[   78.492446][   T12] loop0: rw=1, sector=2621792, nr_sectors = 16 limit=32768
[   78.519952][   T12] ERROR: (device loop0): dbAlloc: the hint is outside the map
[   78.519952][   T12] 
[pid  5847] umount2("./0/bus", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5849] <... getdents64 resumed>0x555573f6d6f0 /* 4 entries */, 32768) = 104
[pid  5848] <... restart_syscall resumed>) = 0
[pid  5846] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5853, si_uid=0, si_status=0, si_utime=13 /* 0.13 s */, si_stime=53 /* 0.53 s */} ---
[pid  5849] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5849] newfstatat(AT_FDCWD, "./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5849] unlink("./0/binderfs")      = 0
[pid  5849] umount2("./0/bus", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5846] restart_syscall(<... resuming interrupted clone ...>) = 0
[pid  5846] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5846] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
[pid  5846] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5846] getdents64(3, 0x555573f6d6f0 /* 4 entries */, 32768) = 104
[pid  5846] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5846] newfstatat(AT_FDCWD, "./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5846] unlink("./0/binderfs")      = 0
[   78.539756][  T111] blkno = 5002c, nblocks = 1
[   78.543186][   T12] ERROR: (device loop0): dbAlloc: the hint is outside the map
[   78.543186][   T12] 
[   78.545972][  T111] ERROR: (device loop0): dbUpdatePMap: blocks are outside the map
[   78.545972][  T111] 
[   78.564318][   T62] ERROR: (device loop2): dbAlloc: the hint is outside the map
[   78.564318][   T62] 
[   78.568866][   T12] kworker/u8:1: attempt to access beyond end of device
[   78.568866][   T12] loop0: rw=2049, sector=2621808, nr_sectors = 8 limit=32768
[   78.575552][  T111] blkno = 5002d, nblocks = 1
[pid  5846] umount2("./0/bus", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5848] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5848] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
[pid  5848] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5848] getdents64(3, 0x555573f6d6f0 /* 4 entries */, 32768) = 104
[pid  5848] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5848] newfstatat(AT_FDCWD, "./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5848] unlink("./0/binderfs")      = 0
[   78.589698][ T3478] ERROR: (device loop4): dbAlloc: the hint is outside the map
[   78.589698][ T3478] 
[   78.594169][   T62] ERROR: (device loop2): remounting filesystem as read-only
[   78.605626][ T2977] ERROR: (device loop1): dbAlloc: the hint is outside the map
[   78.605626][ T2977] 
[   78.614755][  T111] ERROR: (device loop0): dbUpdatePMap: blocks are outside the map
[   78.614755][  T111] 
[   78.621307][ T3478] ERROR: (device loop4): remounting filesystem as read-only
[   78.637162][   T62] kworker/u8:4: attempt to access beyond end of device
[   78.637162][   T62] loop2: rw=1, sector=2621792, nr_sectors = 16 limit=32768
[   78.637341][   T62] ERROR: (device loop2): dbAlloc: the hint is outside the map
[   78.637341][   T62] 
[   78.639248][   T62] ERROR: (device loop2): dbAlloc: the hint is outside the map
[   78.639248][   T62] 
[   78.651500][   T12] ERROR: (device loop0): dbAlloc: the hint is outside the map
[   78.651500][   T12] 
[   78.651626][   T12] kworker/u8:1: attempt to access beyond end of device
[   78.651626][   T12] loop0: rw=2049, sector=2621816, nr_sectors = 8 limit=32768
[   78.671353][  T111] blkno = 5002c, nblocks = 1
[   78.681429][ T2977] ERROR: (device loop1): remounting filesystem as read-only
[   78.695180][ T1028] ERROR: (device loop3): dbAlloc: the hint is outside the map
[   78.695180][ T1028] 
[   78.699578][ T3478] kworker/u8:9: attempt to access beyond end of device
[   78.699578][ T3478] loop4: rw=1, sector=2621792, nr_sectors = 16 limit=32768
[   78.730722][ T2977] kworker/u8:8: attempt to access beyond end of device
[   78.730722][ T2977] loop1: rw=1, sector=2621792, nr_sectors = 16 limit=32768
[   78.730769][   T62] kworker/u8:4: attempt to access beyond end of device
[   78.730769][   T62] loop2: rw=2049, sector=2621808, nr_sectors = 8 limit=32768
[   78.744887][   T12] Buffer I/O error on dev loop0, logical block 327727, lost async page write
[   78.768034][ T2977] ERROR: (device loop1): dbAlloc: the hint is outside the map
[   78.768034][ T2977] 
[   78.768528][ T1028] ERROR: (device loop3): remounting filesystem as read-only
[   78.780713][   T53] ERROR: (device loop1): dbAlloc: the hint is outside the map
[   78.780713][   T53] 
[   78.785832][  T111] ERROR: (device loop2): dbUpdatePMap: blocks are outside the map
[   78.785832][  T111] 
[   78.795152][  T112] blkno = 5002c, nblocks = 1
[   78.809631][  T112] ERROR: (device loop1): dbUpdatePMap: blocks are outside the map
[   78.809631][  T112] 
[   78.810591][ T1028] kworker/u8:5: attempt to access beyond end of device
[   78.810591][ T1028] loop3: rw=1, sector=2621792, nr_sectors = 16 limit=32768
[   78.819918][ T3478] ERROR: (device loop4): dbAlloc: the hint is outside the map
[   78.819918][ T3478] 
[   78.834737][   T62] ERROR: (device loop2): dbAlloc: the hint is outside the map
[   78.834737][   T62] 
[   78.843669][   T53] kworker/u8:3: attempt to access beyond end of device
[   78.843669][   T53] loop1: rw=2049, sector=2621808, nr_sectors = 8 limit=32768
[   78.853801][  T111] blkno = 5002d, nblocks = 1
[   78.867483][  T112] blkno = 5002d, nblocks = 1
[   78.872422][  T111] ERROR: (device loop2): dbUpdatePMap: blocks are outside the map
[   78.872422][  T111] 
[   78.876661][  T112] ERROR: (device loop1): dbUpdatePMap: blocks are outside the map
[   78.876661][  T112] 
[   78.886878][ T1028] ERROR: (device loop3): dbAlloc: the hint is outside the map
[   78.886878][ T1028] 
[   78.897904][ T3478] ERROR: (device loop4): dbAlloc: the hint is outside the map
[   78.897904][ T3478] 
[   78.907515][   T62] kworker/u8:4: attempt to access beyond end of device
[   78.907515][   T62] loop2: rw=2049, sector=2621816, nr_sectors = 8 limit=32768
[   78.917046][   T53] ERROR: (device loop1): dbAlloc: the hint is outside the map
[   78.917046][   T53] 
[   78.940818][  T112] blkno = 5002e, nblocks = 1
[   78.941340][  T111] blkno = 5002c, nblocks = 1
[   78.946309][  T112] ERROR: (device loop0): dbUpdatePMap: blocks are outside the map
[   78.946309][  T112] 
[   78.951021][  T111] ERROR: (device loop4): dbUpdatePMap: blocks are outside the map
[   78.951021][  T111] 
[   78.960686][ T3478] ERROR: (device loop4): dbAlloc: the hint is outside the map
[   78.960686][ T3478] 
[   78.971521][ T1028] ERROR: (device loop3): dbAlloc: the hint is outside the map
[   78.971521][ T1028] 
[   78.981317][   T53] Buffer I/O error on dev loop1, logical block 327727, lost async page write
[   78.990195][   T62] Buffer I/O error on dev loop2, logical block 327727, lost async page write
[   78.999246][  T112] blkno = 5002f, nblocks = 1
[   79.007835][  T111] blkno = 5002d, nblocks = 1
[   79.012661][ T3478] Buffer I/O error on dev loop4, logical block 327727, lost async page write
[   79.017080][ T1028] ERROR: (device loop3): dbAlloc: the hint is outside the map
[   79.017080][ T1028] 
[   79.017242][ T1028] Buffer I/O error on dev loop3, logical block 327727, lost async page write
[pid  5848] umount2("./0/bus", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5845] <... umount2 resumed>)      = 0
[   79.026121][  T112] ERROR: (device loop0): dbUpdatePMap: blocks are outside the map
[   79.026121][  T112] 
[   79.036911][  T111] ERROR: (device loop4): dbUpdatePMap: blocks are outside the map
[   79.036911][  T111] 
[   79.049104][  T112] blkno = 5002c, nblocks = 1
[   79.070168][  T111] blkno = 5002e, nblocks = 1
[   79.074915][  T111] ERROR: (device loop2): dbUpdatePMap: blocks are outside the map
[   79.074915][  T111] 
[   79.077156][  T112] ERROR: (device loop3): dbUpdatePMap: blocks are outside the map
[   79.077156][  T112] 
[pid  5845] umount2("./0/bus", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[   79.085203][  T111] blkno = 5002f, nblocks = 1
[   79.096364][  T112] blkno = 5002d, nblocks = 1
[   79.100098][  T111] ERROR: (device loop2): dbUpdatePMap: blocks are outside the map
[   79.100098][  T111] 
[   79.106029][  T112] ERROR: (device loop3): dbUpdatePMap: blocks are outside the map
[   79.106029][  T112] 
[   79.121927][  T111] ==================================================================
[   79.132484][  T111] BUG: KASAN: slab-use-after-free in jfs_lazycommit+0x7e0/0xb80
[   79.140114][  T111] Read of size 4 at addr ffff88807b90c094 by task jfsCommit/111
[   79.147735][  T111] 
[   79.150062][  T111] CPU: 1 UID: 0 PID: 111 Comm: jfsCommit Not tainted 6.12.0-syzkaller-07749-g28eb75e178d3 #0
[   79.160201][  T111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024
[   79.170252][  T111] Call Trace:
[   79.173520][  T111]  <TASK>
[   79.176438][  T111]  dump_stack_lvl+0x241/0x360
[   79.181110][  T111]  ? __pfx_dump_stack_lvl+0x10/0x10
[   79.186307][  T111]  ? __pfx__printk+0x10/0x10
[   79.190885][  T111]  ? _printk+0xd5/0x120
[   79.195034][  T111]  ? __virt_addr_valid+0x183/0x530
[   79.200136][  T111]  ? __virt_addr_valid+0x183/0x530
[   79.205239][  T111]  print_report+0x169/0x550
[   79.209741][  T111]  ? __virt_addr_valid+0x183/0x530
[   79.214840][  T111]  ? __virt_addr_valid+0x183/0x530
[   79.219943][  T111]  ? __virt_addr_valid+0x45f/0x530
[   79.225045][  T111]  ? __phys_addr+0xba/0x170
[   79.229539][  T111]  ? jfs_lazycommit+0x7e0/0xb80
[   79.234380][  T111]  kasan_report+0x143/0x180
[   79.238874][  T111]  ? _raw_spin_lock_irqsave+0xe1/0x120
[   79.244343][  T111]  ? jfs_lazycommit+0x7e0/0xb80
[   79.249194][  T111]  jfs_lazycommit+0x7e0/0xb80
[   79.253875][  T111]  ? _raw_spin_unlock_irqrestore+0x8f/0x140
[   79.259759][  T111]  ? lockdep_hardirqs_on+0x99/0x150
[   79.264947][  T111]  ? __pfx_jfs_lazycommit+0x10/0x10
[   79.270160][  T111]  ? __pfx_default_wake_function+0x10/0x10
[   79.275980][  T111]  ? __kthread_parkme+0x169/0x1d0
[   79.281009][  T111]  ? __pfx_jfs_lazycommit+0x10/0x10
[   79.286224][  T111]  kthread+0x2f0/0x390
[   79.290284][  T111]  ? __pfx_jfs_lazycommit+0x10/0x10
[   79.295564][  T111]  ? __pfx_kthread+0x10/0x10
[   79.300149][  T111]  ret_from_fork+0x4b/0x80
[   79.304557][  T111]  ? __pfx_kthread+0x10/0x10
[   79.309224][  T111]  ret_from_fork_asm+0x1a/0x30
[   79.313985][  T111]  </TASK>
[   79.316991][  T111] 
[   79.319300][  T111] Allocated by task 5852:
[   79.323634][  T111]  kasan_save_track+0x3f/0x80
[   79.328306][  T111]  __kasan_kmalloc+0x98/0xb0
[   79.332892][  T111]  __kmalloc_cache_noprof+0x19c/0x2c0
[   79.338265][  T111]  jfs_fill_super+0xc2/0xd90
[   79.342844][  T111]  get_tree_bdev_flags+0x48c/0x5c0
[   79.347953][  T111]  vfs_get_tree+0x90/0x2b0
[   79.352365][  T111]  do_new_mount+0x2be/0xb40
[   79.356879][  T111]  __se_sys_mount+0x2d6/0x3c0
[   79.361552][  T111]  do_syscall_64+0xf3/0x230
[   79.366063][  T111]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   79.371954][  T111] 
[   79.374354][  T111] Freed by task 5847:
[   79.378327][  T111]  kasan_save_track+0x3f/0x80
[   79.382998][  T111]  kasan_save_free_info+0x40/0x50
[   79.388033][  T111]  __kasan_slab_free+0x59/0x70
[   79.392801][  T111]  kfree+0x1a0/0x440
[   79.396705][  T111]  generic_shutdown_super+0x139/0x2d0
[   79.402067][  T111]  kill_block_super+0x44/0x90
[   79.406738][  T111]  deactivate_locked_super+0xc4/0x130
[   79.412099][  T111]  cleanup_mnt+0x41f/0x4b0
[   79.416504][  T111]  task_work_run+0x24f/0x310
[   79.421098][  T111]  ptrace_notify+0x2d2/0x380
[   79.425700][  T111]  syscall_exit_work+0xc6/0x190
[   79.430545][  T111]  syscall_exit_to_user_mode+0x24a/0x340
[   79.436183][  T111]  do_syscall_64+0x100/0x230
[   79.440772][  T111]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   79.446689][  T111] 
[   79.449002][  T111] The buggy address belongs to the object at ffff88807b90c000
[   79.449002][  T111]  which belongs to the cache kmalloc-256 of size 256
[   79.463041][  T111] The buggy address is located 148 bytes inside of
[   79.463041][  T111]  freed 256-byte region [ffff88807b90c000, ffff88807b90c100)
[   79.476831][  T111] 
[   79.479145][  T111] The buggy address belongs to the physical page:
[   79.485566][  T111] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7b90c
[   79.494323][  T111] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[   79.502828][  T111] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[   79.510364][  T111] page_type: f5(slab)
[   79.514338][  T111] raw: 00fff00000000040 ffff88801ac41b40 dead000000000100 dead000000000122
[   79.522913][  T111] raw: 0000000000000000 0000000000100010 00000001f5000000 0000000000000000
[   79.531489][  T111] head: 00fff00000000040 ffff88801ac41b40 dead000000000100 dead000000000122
[   79.540149][  T111] head: 0000000000000000 0000000000100010 00000001f5000000 0000000000000000
[   79.548810][  T111] head: 00fff00000000001 ffffea0001ee4301 ffffffffffffffff 0000000000000000
[   79.557467][  T111] head: 0000000000000002 0000000000000000 00000000ffffffff 0000000000000000
[   79.566134][  T111] page dumped because: kasan: bad access detected
[   79.572539][  T111] page_owner tracks the page as allocated
[   79.578234][  T111] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5225, tgid 5225 (udevadm), ts 30770120349, free_ts 30758828196
[   79.598443][  T111]  post_alloc_hook+0x1f3/0x230
[   79.603197][  T111]  get_page_from_freelist+0x363e/0x3790
[   79.608755][  T111]  __alloc_pages_noprof+0x292/0x710
[   79.613943][  T111]  alloc_pages_mpol_noprof+0x3e8/0x680
[   79.619416][  T111]  alloc_slab_page+0x6a/0x140
[   79.624087][  T111]  allocate_slab+0x5a/0x2f0
[   79.628589][  T111]  ___slab_alloc+0xcd1/0x14b0
[   79.633258][  T111]  __slab_alloc+0x58/0xa0
[   79.637576][  T111]  __kmalloc_cache_noprof+0x1d5/0x2c0
[   79.642948][  T111]  smk_fetch+0x92/0x140
[   79.647097][  T111]  smack_d_instantiate+0x749/0xa50
[   79.652198][  T111]  security_d_instantiate+0x107/0x1f0
[   79.657571][  T111]  d_splice_alias+0x6f/0x330
[   79.662170][  T111]  __lookup_slow+0x28c/0x3f0
[   79.666779][  T111]  lookup_slow+0x53/0x70
[   79.671023][  T111]  walk_component+0x2e1/0x410
[   79.675706][  T111] page last free pid 5220 tgid 5220 stack trace:
[   79.682019][  T111]  free_unref_page+0xded/0x1130
[   79.686862][  T111]  __slab_free+0x31b/0x3d0
[   79.691358][  T111]  qlist_free_all+0x9a/0x140
[   79.695942][  T111]  kasan_quarantine_reduce+0x14f/0x170
[   79.701397][  T111]  __kasan_slab_alloc+0x23/0x80
[   79.706265][  T111]  __kmalloc_noprof+0x1a6/0x400
[   79.711105][  T111]  tomoyo_realpath_from_path+0xcf/0x5e0
[   79.716641][  T111]  tomoyo_check_open_permission+0x258/0x4f0
[   79.722529][  T111]  security_file_open+0xac/0x250
[   79.727458][  T111]  do_dentry_open+0x328/0x1b70
[   79.732227][  T111]  vfs_open+0x3e/0x330
[   79.736295][  T111]  path_openat+0x2c84/0x3590
[   79.740878][  T111]  do_filp_open+0x27f/0x4e0
[   79.745378][  T111]  do_sys_openat2+0x13e/0x1d0
[   79.750044][  T111]  __x64_sys_openat+0x247/0x2a0
[   79.754905][  T111]  do_syscall_64+0xf3/0x230
[   79.759402][  T111] 
[   79.761734][  T111] Memory state around the buggy address:
[   79.767386][  T111]  ffff88807b90bf80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   79.775436][  T111]  ffff88807b90c000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   79.783485][  T111] >ffff88807b90c080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   79.791527][  T111]                          ^
[   79.796112][  T111]  ffff88807b90c100: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   79.804158][  T111]  ffff88807b90c180: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[   79.812202][  T111] ==================================================================
[   79.820254][  T111] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[   79.827486][  T111] CPU: 1 UID: 0 PID: 111 Comm: jfsCommit Not tainted 6.12.0-syzkaller-07749-g28eb75e178d3 #0
[   79.837625][  T111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024
[   79.847684][  T111] Call Trace:
[   79.850970][  T111]  <TASK>
[   79.854093][  T111]  dump_stack_lvl+0x241/0x360
[   79.858774][  T111]  ? __pfx_dump_stack_lvl+0x10/0x10
[   79.863967][  T111]  ? __pfx__printk+0x10/0x10
[   79.868544][  T111]  ? rcu_is_watching+0x15/0xb0
[   79.873300][  T111]  ? lock_release+0xbf/0xa30
[   79.877878][  T111]  ? vscnprintf+0x5d/0x90
[   79.882212][  T111]  panic+0x349/0x880
[   79.886115][  T111]  ? check_panic_on_warn+0x21/0xb0
[   79.891220][  T111]  ? __pfx_panic+0x10/0x10
[   79.895630][  T111]  ? do_raw_spin_unlock+0x13c/0x8b0
[   79.901003][  T111]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[   79.906904][  T111]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   79.913243][  T111]  ? print_report+0x502/0x550
[   79.917912][  T111]  check_panic_on_warn+0x86/0xb0
[   79.922843][  T111]  ? jfs_lazycommit+0x7e0/0xb80
[   79.927695][  T111]  end_report+0x77/0x160
[   79.931935][  T111]  kasan_report+0x154/0x180
[   79.936434][  T111]  ? _raw_spin_lock_irqsave+0xe1/0x120
[   79.941883][  T111]  ? jfs_lazycommit+0x7e0/0xb80
[   79.946732][  T111]  jfs_lazycommit+0x7e0/0xb80
[   79.951428][  T111]  ? _raw_spin_unlock_irqrestore+0x8f/0x140
[   79.957312][  T111]  ? lockdep_hardirqs_on+0x99/0x150
[   79.962517][  T111]  ? __pfx_jfs_lazycommit+0x10/0x10
[   79.967718][  T111]  ? __pfx_default_wake_function+0x10/0x10
[   79.973522][  T111]  ? __kthread_parkme+0x169/0x1d0
[   79.978553][  T111]  ? __pfx_jfs_lazycommit+0x10/0x10
[   79.983773][  T111]  kthread+0x2f0/0x390
[   79.987853][  T111]  ? __pfx_jfs_lazycommit+0x10/0x10
[   79.993053][  T111]  ? __pfx_kthread+0x10/0x10
[   79.997639][  T111]  ret_from_fork+0x4b/0x80
[   80.002067][  T111]  ? __pfx_kthread+0x10/0x10
[   80.006659][  T111]  ret_from_fork_asm+0x1a/0x30
[   80.011514][  T111]  </TASK>
[   81.155309][  T111] Shutting down cpus with NMI
[   81.160465][  T111] Kernel Offset: disabled
[   81.164799][  T111] Rebooting in 86400 seconds..