./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3137029560

<...>
[  101.867780][  T928] cfg80211: failed to load regulatory.db
Warning: Permanently added '10.128.1.38' (ED25519) to the list of known hosts.
execve("./syz-executor3137029560", ["./syz-executor3137029560"], 0x7ffec0e924b0 /* 10 vars */) = 0
brk(NULL)                               = 0x55556d070000
brk(0x55556d070d00)                     = 0x55556d070d00
arch_prctl(ARCH_SET_FS, 0x55556d070380) = 0
set_tid_address(0x55556d070650)         = 5073
set_robust_list(0x55556d070660, 24)     = 0
rseq(0x55556d070ca0, 0x20, 0, 0x53053053) = 0
prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0
readlink("/proc/self/exe", "/root/syz-executor3137029560", 4096) = 28
getrandom("\xbc\x8d\x82\x3f\x78\xd2\xc6\x84", 8, GRND_NONBLOCK) = 8
brk(NULL)                               = 0x55556d070d00
brk(0x55556d091d00)                     = 0x55556d091d00
brk(0x55556d092000)                     = 0x55556d092000
mprotect(0x7fc2ff3f3000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5074 attached
, child_tidptr=0x55556d070650) = 5074
[pid  5074] set_robust_list(0x55556d070660, 24) = 0
[pid  5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...>
[pid  5074] mkdir("./syzkaller.mNZa4s", 0700./strace-static-x86_64: Process 5075 attached
 <unfinished ...>
[pid  5073] <... clone resumed>, child_tidptr=0x55556d070650) = 5075
[pid  5074] <... mkdir resumed>)        = 0
[pid  5075] set_robust_list(0x55556d070660, 24 <unfinished ...>
[pid  5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...>
[pid  5075] <... set_robust_list resumed>) = 0
[pid  5074] chmod("./syzkaller.mNZa4s", 0777 <unfinished ...>
[pid  5075] mkdir("./syzkaller.ZQkLOB", 0700) = 0
./strace-static-x86_64: Process 5076 attached
[pid  5074] <... chmod resumed>)        = 0
[pid  5073] <... clone resumed>, child_tidptr=0x55556d070650) = 5076
[pid  5076] set_robust_list(0x55556d070660, 24 <unfinished ...>
[pid  5075] chmod("./syzkaller.ZQkLOB", 0777 <unfinished ...>
[pid  5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...>
[pid  5076] <... set_robust_list resumed>) = 0
[pid  5075] <... chmod resumed>)        = 0
[pid  5074] chdir("./syzkaller.mNZa4s" <unfinished ...>
[pid  5076] mkdir("./syzkaller.v4mkSf", 0700 <unfinished ...>
[pid  5074] <... chdir resumed>)        = 0
[pid  5075] chdir("./syzkaller.ZQkLOB"./strace-static-x86_64: Process 5077 attached
 <unfinished ...>
[pid  5076] <... mkdir resumed>)        = 0
[pid  5075] <... chdir resumed>)        = 0
[pid  5074] mkdir("./0", 0777 <unfinished ...>
[pid  5073] <... clone resumed>, child_tidptr=0x55556d070650) = 5077
[pid  5077] set_robust_list(0x55556d070660, 24 <unfinished ...>
[pid  5076] chmod("./syzkaller.v4mkSf", 0777 <unfinished ...>
[pid  5075] mkdir("./0", 0777 <unfinished ...>
[pid  5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...>
[pid  5077] <... set_robust_list resumed>) = 0
[pid  5076] <... chmod resumed>)        = 0
[pid  5074] <... mkdir resumed>)        = 0
[pid  5077] mkdir("./syzkaller.7mihxQ", 0700 <unfinished ...>
[pid  5075] <... mkdir resumed>)        = 0
[pid  5075] openat(AT_FDCWD, "/dev/loop1", O_RDWR./strace-static-x86_64: Process 5078 attached
 <unfinished ...>
[pid  5077] <... mkdir resumed>)        = 0
[pid  5076] chdir("./syzkaller.v4mkSf" <unfinished ...>
[pid  5074] openat(AT_FDCWD, "/dev/loop0", O_RDWR <unfinished ...>
[pid  5076] <... chdir resumed>)        = 0
[pid  5077] chmod("./syzkaller.7mihxQ", 0777 <unfinished ...>
[pid  5073] <... clone resumed>, child_tidptr=0x55556d070650) = 5078
[pid  5078] set_robust_list(0x55556d070660, 24 <unfinished ...>
[pid  5077] <... chmod resumed>)        = 0
[pid  5076] mkdir("./0", 0777 <unfinished ...>
[pid  5074] <... openat resumed>)       = 3
[pid  5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...>
[pid  5078] <... set_robust_list resumed>) = 0
[pid  5078] mkdir("./syzkaller.U2bkz2", 0700 <unfinished ...>
[pid  5077] chdir("./syzkaller.7mihxQ" <unfinished ...>
[pid  5076] <... mkdir resumed>)        = 0
[pid  5075] <... openat resumed>)       = 3
[pid  5074] ioctl(3, LOOP_CLR_FD./strace-static-x86_64: Process 5079 attached
 <unfinished ...>
[pid  5073] <... clone resumed>, child_tidptr=0x55556d070650) = 5079
[pid  5079] set_robust_list(0x55556d070660, 24 <unfinished ...>
[pid  5077] <... chdir resumed>)        = 0
[pid  5074] <... ioctl resumed>)        = -1 ENXIO (No such device or address)
[pid  5079] <... set_robust_list resumed>) = 0
[pid  5078] <... mkdir resumed>)        = 0
[pid  5077] mkdir("./0", 0777 <unfinished ...>
[pid  5076] openat(AT_FDCWD, "/dev/loop2", O_RDWR <unfinished ...>
[pid  5075] ioctl(3, LOOP_CLR_FD <unfinished ...>
[pid  5079] mkdir("./syzkaller.zal23c", 0700 <unfinished ...>
[pid  5078] chmod("./syzkaller.U2bkz2", 0777 <unfinished ...>
[pid  5077] <... mkdir resumed>)        = 0
[pid  5074] close(3 <unfinished ...>
[pid  5077] openat(AT_FDCWD, "/dev/loop3", O_RDWR <unfinished ...>
[pid  5079] <... mkdir resumed>)        = 0
[pid  5078] <... chmod resumed>)        = 0
[pid  5076] <... openat resumed>)       = 3
[pid  5075] <... ioctl resumed>)        = -1 ENXIO (No such device or address)
[pid  5074] <... close resumed>)        = 0
[pid  5079] chmod("./syzkaller.zal23c", 0777 <unfinished ...>
[pid  5077] <... openat resumed>)       = 3
[pid  5076] ioctl(3, LOOP_CLR_FD <unfinished ...>
[pid  5079] <... chmod resumed>)        = 0
[pid  5076] <... ioctl resumed>)        = -1 ENXIO (No such device or address)
[pid  5079] chdir("./syzkaller.zal23c" <unfinished ...>
[pid  5076] close(3 <unfinished ...>
[pid  5079] <... chdir resumed>)        = 0
[pid  5076] <... close resumed>)        = 0
[pid  5079] mkdir("./0", 0777 <unfinished ...>
[pid  5078] chdir("./syzkaller.U2bkz2" <unfinished ...>
[pid  5077] ioctl(3, LOOP_CLR_FD <unfinished ...>
[pid  5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...>
[pid  5075] close(3 <unfinished ...>
[pid  5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...>
[pid  5078] <... chdir resumed>)        = 0
[pid  5075] <... close resumed>)        = 0
[pid  5079] <... mkdir resumed>)        = 0
[pid  5078] mkdir("./0", 0777 <unfinished ...>
[pid  5077] <... ioctl resumed>)        = -1 ENXIO (No such device or address)
[pid  5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5081 attached
./strace-static-x86_64: Process 5080 attached
 <unfinished ...>
[pid  5079] openat(AT_FDCWD, "/dev/loop5", O_RDWR <unfinished ...>
[pid  5077] close(3 <unfinished ...>
[pid  5081] set_robust_list(0x55556d070660, 24 <unfinished ...>
[pid  5080] set_robust_list(0x55556d070660, 24 <unfinished ...>
[pid  5079] <... openat resumed>)       = 3
[pid  5078] <... mkdir resumed>)        = 0
[pid  5077] <... close resumed>)        = 0
[pid  5081] <... set_robust_list resumed>) = 0
[pid  5080] <... set_robust_list resumed>) = 0
[pid  5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...>
[pid  5076] <... clone resumed>, child_tidptr=0x55556d070650) = 5080
[pid  5074] <... clone resumed>, child_tidptr=0x55556d070650) = 5081
[pid  5081] chdir("./0" <unfinished ...>
[pid  5080] chdir("./0")                = 0
[pid  5079] ioctl(3, LOOP_CLR_FD <unfinished ...>
[pid  5081] <... chdir resumed>)        = 0
[pid  5080] prctl(PR_SET_PDEATHSIG, SIGKILL <unfinished ...>
[pid  5079] <... ioctl resumed>)        = -1 ENXIO (No such device or address)
[pid  5081] prctl(PR_SET_PDEATHSIG, SIGKILL <unfinished ...>
[pid  5080] <... prctl resumed>)        = 0
[pid  5081] <... prctl resumed>)        = 0
[pid  5080] setpgid(0, 0 <unfinished ...>
[pid  5081] setpgid(0, 0 <unfinished ...>
[pid  5080] <... setpgid resumed>)      = 0
./strace-static-x86_64: Process 5083 attached
[pid  5081] <... setpgid resumed>)      = 0
[pid  5080] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC <unfinished ...>
[pid  5079] close(3 <unfinished ...>
[pid  5078] openat(AT_FDCWD, "/dev/loop4", O_RDWR <unfinished ...>
[pid  5079] <... close resumed>)        = 0
[pid  5079] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...>
[pid  5075] <... clone resumed>, child_tidptr=0x55556d070650) = 5083
[pid  5077] <... clone resumed>, child_tidptr=0x55556d070650) = 5082
./strace-static-x86_64: Process 5082 attached
[pid  5082] set_robust_list(0x55556d070660, 24) = 0
[pid  5082] chdir("./0")                = 0
[pid  5082] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5082] setpgid(0, 0)               = 0
[pid  5082] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC <unfinished ...>
[pid  5081] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC <unfinished ...>
[pid  5082] <... openat resumed>)       = 3
./strace-static-x86_64: Process 5084 attached
[pid  5082] write(3, "1000", 4 <unfinished ...>
[pid  5083] set_robust_list(0x55556d070660, 24 <unfinished ...>
[pid  5081] <... openat resumed>)       = 3
[pid  5080] <... openat resumed>)       = 3
[pid  5078] <... openat resumed>)       = 3
[pid  5084] set_robust_list(0x55556d070660, 24 <unfinished ...>
[pid  5082] <... write resumed>)        = 4
[pid  5083] <... set_robust_list resumed>) = 0
[pid  5081] write(3, "1000", 4 <unfinished ...>
[pid  5080] write(3, "1000", 4 <unfinished ...>
[pid  5079] <... clone resumed>, child_tidptr=0x55556d070650) = 5084
[pid  5078] ioctl(3, LOOP_CLR_FD <unfinished ...>
[pid  5083] chdir("./0" <unfinished ...>
[pid  5081] <... write resumed>)        = 4
[pid  5080] <... write resumed>)        = 4
[pid  5084] <... set_robust_list resumed>) = 0
[pid  5082] close(3 <unfinished ...>
[pid  5083] <... chdir resumed>)        = 0
[pid  5080] close(3 <unfinished ...>
[pid  5078] <... ioctl resumed>)        = -1 ENXIO (No such device or address)
[pid  5084] chdir("./0" <unfinished ...>
[pid  5082] <... close resumed>)        = 0
[pid  5081] close(3 <unfinished ...>
[pid  5080] <... close resumed>)        = 0
[pid  5078] close(3 <unfinished ...>
[pid  5084] <... chdir resumed>)        = 0
[pid  5082] symlink("/dev/binderfs", "./binderfs" <unfinished ...>
[pid  5083] prctl(PR_SET_PDEATHSIG, SIGKILL <unfinished ...>
[pid  5081] <... close resumed>)        = 0
[pid  5080] symlink("/dev/binderfs", "./binderfs" <unfinished ...>
[pid  5078] <... close resumed>)        = 0
[pid  5084] prctl(PR_SET_PDEATHSIG, SIGKILL <unfinished ...>
[pid  5082] <... symlink resumed>)      = 0
[pid  5083] <... prctl resumed>)        = 0
[pid  5081] symlink("/dev/binderfs", "./binderfs" <unfinished ...>
[pid  5080] <... symlink resumed>)      = 0
[pid  5084] <... prctl resumed>)        = 0
[pid  5083] setpgid(0, 0 <unfinished ...>
[pid  5084] setpgid(0, 0 <unfinished ...>
[pid  5083] <... setpgid resumed>)      = 0
[pid  5083] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC <unfinished ...>
[pid  5081] <... symlink resumed>)      = 0
[pid  5078] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...>
[pid  5084] <... setpgid resumed>)      = 0
[pid  5082] memfd_create("syzkaller", 0 <unfinished ...>
[pid  5084] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC <unfinished ...>
[pid  5083] <... openat resumed>)       = 3
[pid  5080] memfd_create("syzkaller", 0 <unfinished ...>
[pid  5081] memfd_create("syzkaller", 0 <unfinished ...>
[pid  5084] <... openat resumed>)       = 3
[pid  5082] <... memfd_create resumed>) = 3
[pid  5083] write(3, "1000", 4 <unfinished ...>
[pid  5080] <... memfd_create resumed>) = 3
[pid  5082] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 <unfinished ...>
[pid  5083] <... write resumed>)        = 4
[pid  5080] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 <unfinished ...>
[pid  5084] write(3, "1000", 4 <unfinished ...>
[pid  5082] <... mmap resumed>)         = 0x7fc2f6e00000
[pid  5084] <... write resumed>)        = 4
[pid  5083] close(3 <unfinished ...>
[pid  5080] <... mmap resumed>)         = 0x7fc2f6e00000
[pid  5084] close(3 <unfinished ...>
[pid  5083] <... close resumed>)        = 0
[pid  5081] <... memfd_create resumed>) = 3
./strace-static-x86_64: Process 5085 attached
[pid  5078] <... clone resumed>, child_tidptr=0x55556d070650) = 5085
[pid  5081] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 <unfinished ...>
[pid  5085] set_robust_list(0x55556d070660, 24 <unfinished ...>
[pid  5081] <... mmap resumed>)         = 0x7fc2f6e00000
[pid  5084] <... close resumed>)        = 0
[pid  5083] symlink("/dev/binderfs", "./binderfs" <unfinished ...>
[pid  5084] symlink("/dev/binderfs", "./binderfs" <unfinished ...>
[pid  5083] <... symlink resumed>)      = 0
[pid  5085] <... set_robust_list resumed>) = 0
[pid  5085] chdir("./0" <unfinished ...>
[pid  5084] <... symlink resumed>)      = 0
[pid  5085] <... chdir resumed>)        = 0
[pid  5084] memfd_create("syzkaller", 0 <unfinished ...>
[pid  5083] memfd_create("syzkaller", 0 <unfinished ...>
[pid  5085] prctl(PR_SET_PDEATHSIG, SIGKILL <unfinished ...>
[pid  5084] <... memfd_create resumed>) = 3
[pid  5083] <... memfd_create resumed>) = 3
[pid  5085] <... prctl resumed>)        = 0
[pid  5085] setpgid(0, 0 <unfinished ...>
[pid  5084] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 <unfinished ...>
[pid  5083] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 <unfinished ...>
[pid  5085] <... setpgid resumed>)      = 0
[pid  5084] <... mmap resumed>)         = 0x7fc2f6e00000
[pid  5083] <... mmap resumed>)         = 0x7fc2f6e00000
[pid  5085] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5085] write(3, "1000", 4)         = 4
[pid  5085] close(3)                    = 0
[pid  5085] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5085] memfd_create("syzkaller", 0) = 3
[pid  5085] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fc2f6e00000
[pid  5081] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 <unfinished ...>
[pid  5083] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 <unfinished ...>
[pid  5082] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 <unfinished ...>
[pid  5080] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 <unfinished ...>
[pid  5084] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 <unfinished ...>
[pid  5085] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 <unfinished ...>
[pid  5081] <... write resumed>)        = 16777216
[pid  5081] munmap(0x7fc2f6e00000, 138412032 <unfinished ...>
[pid  5083] <... write resumed>)        = 16777216
[pid  5083] munmap(0x7fc2f6e00000, 138412032 <unfinished ...>
[pid  5084] <... write resumed>)        = 16777216
[pid  5082] <... write resumed>)        = 16777216
[pid  5081] <... munmap resumed>)       = 0
[pid  5084] munmap(0x7fc2f6e00000, 138412032 <unfinished ...>
[pid  5082] munmap(0x7fc2f6e00000, 138412032 <unfinished ...>
[pid  5081] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5081] ioctl(4, LOOP_SET_FD, 3 <unfinished ...>
[pid  5083] <... munmap resumed>)       = 0
[pid  5080] <... write resumed>)        = 16777216
[pid  5081] <... ioctl resumed>)        = 0
[pid  5083] openat(AT_FDCWD, "/dev/loop1", O_RDWR <unfinished ...>
[pid  5080] munmap(0x7fc2f6e00000, 138412032 <unfinished ...>
[pid  5081] close(3 <unfinished ...>
[pid  5083] <... openat resumed>)       = 4
[pid  5081] <... close resumed>)        = 0
[pid  5082] <... munmap resumed>)       = 0
[pid  5083] ioctl(4, LOOP_SET_FD, 3 <unfinished ...>
[pid  5081] close(4)                    = 0
[pid  5084] <... munmap resumed>)       = 0
[pid  5084] openat(AT_FDCWD, "/dev/loop5", O_RDWR <unfinished ...>
[pid  5081] mkdir("./file0", 0777 <unfinished ...>
[pid  5084] <... openat resumed>)       = 4
[  108.837200][ T5081] loop0: detected capacity change from 0 to 32768
[pid  5084] ioctl(4, LOOP_SET_FD, 3 <unfinished ...>
[pid  5085] <... write resumed>)        = 16777216
[pid  5081] <... mkdir resumed>)        = 0
[pid  5085] munmap(0x7fc2f6e00000, 138412032 <unfinished ...>
[pid  5081] mount("/dev/loop0", "./file0", "jfs", MS_NOATIME|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME|MS_LAZYTIME, "integrity,discard=0x0000000000000000,noquota,nointegrity,iocharset=cp860,errors=remount-ro,iocharset"... <unfinished ...>
[pid  5084] <... ioctl resumed>)        = 0
[pid  5084] close(3)                    = 0
[pid  5084] close(4 <unfinished ...>
[pid  5082] openat(AT_FDCWD, "/dev/loop3", O_RDWR <unfinished ...>
[pid  5084] <... close resumed>)        = 0
[pid  5082] <... openat resumed>)       = 4
[  108.887345][ T5083] loop1: detected capacity change from 0 to 32768
[  108.888678][ T5084] loop5: detected capacity change from 0 to 32768
[pid  5084] mkdir("./file0", 0777)      = 0
[pid  5082] ioctl(4, LOOP_SET_FD, 3 <unfinished ...>
[pid  5084] mount("/dev/loop5", "./file0", "jfs", MS_NOATIME|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME|MS_LAZYTIME, "integrity,discard=0x0000000000000000,noquota,nointegrity,iocharset=cp860,errors=remount-ro,iocharset"... <unfinished ...>
[pid  5081] <... mount resumed>)        = 0
[pid  5081] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY <unfinished ...>
[pid  5082] <... ioctl resumed>)        = 0
[pid  5083] <... ioctl resumed>)        = 0
[pid  5082] close(3 <unfinished ...>
[pid  5083] close(3 <unfinished ...>
[pid  5081] <... openat resumed>)       = 3
[pid  5083] <... close resumed>)        = 0
[pid  5081] chdir("./file0" <unfinished ...>
[pid  5082] <... close resumed>)        = 0
[pid  5082] close(4 <unfinished ...>
[pid  5083] close(4 <unfinished ...>
[pid  5081] <... chdir resumed>)        = 0
[pid  5082] <... close resumed>)        = 0
[pid  5083] <... close resumed>)        = 0
[pid  5081] openat(AT_FDCWD, "/dev/loop0", O_RDWR <unfinished ...>
[pid  5082] mkdir("./file0", 0777 <unfinished ...>
[pid  5083] mkdir("./file0", 0777 <unfinished ...>
[pid  5081] <... openat resumed>)       = -1 EBUSY (Device or resource busy)
[pid  5083] <... mkdir resumed>)        = 0
[pid  5081] exit_group(0 <unfinished ...>
[pid  5082] <... mkdir resumed>)        = 0
[pid  5081] <... exit_group resumed>)   = ?
[pid  5081] +++ exited with 0 +++
[pid  5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5081, si_uid=0, si_status=0, si_utime=0, si_stime=42 /* 0.42 s */} ---
[pid  5084] <... mount resumed>)        = 0
[pid  5085] <... munmap resumed>)       = 0
[pid  5084] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY <unfinished ...>
[pid  5082] mount("/dev/loop3", "./file0", "jfs", MS_NOATIME|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME|MS_LAZYTIME, "integrity,discard=0x0000000000000000,noquota,nointegrity,iocharset=cp860,errors=remount-ro,iocharset"... <unfinished ...>
[pid  5083] mount("/dev/loop1", "./file0", "jfs", MS_NOATIME|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME|MS_LAZYTIME, "integrity,discard=0x0000000000000000,noquota,nointegrity,iocharset=cp860,errors=remount-ro,iocharset"... <unfinished ...>
[pid  5080] <... munmap resumed>)       = 0
[pid  5084] <... openat resumed>)       = 3
[pid  5080] openat(AT_FDCWD, "/dev/loop2", O_RDWR <unfinished ...>
[pid  5084] chdir("./file0" <unfinished ...>
[  108.941938][ T5082] loop3: detected capacity change from 0 to 32768
[pid  5074] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5084] <... chdir resumed>)        = 0
[pid  5083] <... mount resumed>)        = 0
[pid  5074] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid  5084] openat(AT_FDCWD, "/dev/loop5", O_RDWR <unfinished ...>
[pid  5080] <... openat resumed>)       = 4
[pid  5083] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY <unfinished ...>
[pid  5074] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY <unfinished ...>
[pid  5084] <... openat resumed>)       = -1 EBUSY (Device or resource busy)
[pid  5083] <... openat resumed>)       = 3
[pid  5080] ioctl(4, LOOP_SET_FD, 3 <unfinished ...>
[pid  5074] <... openat resumed>)       = 3
[pid  5083] chdir("./file0" <unfinished ...>
[pid  5074] newfstatat(3, "",  <unfinished ...>
[pid  5085] openat(AT_FDCWD, "/dev/loop4", O_RDWR <unfinished ...>
[pid  5084] exit_group(0 <unfinished ...>
[pid  5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5085] <... openat resumed>)       = 4
[pid  5084] <... exit_group resumed>)   = ?
[pid  5085] ioctl(4, LOOP_SET_FD, 3 <unfinished ...>
[pid  5084] +++ exited with 0 +++
[pid  5074] getdents64(3,  <unfinished ...>
[pid  5083] <... chdir resumed>)        = 0
[pid  5079] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5084, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=50 /* 0.50 s */} ---
[pid  5074] <... getdents64 resumed>0x55556d0716f0 /* 4 entries */, 32768) = 112
[pid  5082] <... mount resumed>)        = 0
[pid  5083] openat(AT_FDCWD, "/dev/loop1", O_RDWR <unfinished ...>
[pid  5082] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5083] <... openat resumed>)       = -1 EBUSY (Device or resource busy)
[pid  5080] <... ioctl resumed>)        = 0
[pid  5074] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5082] chdir("./file0" <unfinished ...>
[pid  5083] exit_group(0 <unfinished ...>
[pid  5080] close(3 <unfinished ...>
[pid  5079] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5082] <... chdir resumed>)        = 0
[pid  5083] <... exit_group resumed>)   = ?
[pid  5080] <... close resumed>)        = 0
[pid  5079] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid  5074] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid  5080] close(4 <unfinished ...>
[pid  5079] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
[pid  5074] newfstatat(AT_FDCWD, "./0/binderfs",  <unfinished ...>
[pid  5079] newfstatat(3, "",  <unfinished ...>
[pid  5074] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5079] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5082] openat(AT_FDCWD, "/dev/loop3", O_RDWR <unfinished ...>
[pid  5080] <... close resumed>)        = 0
[pid  5079] getdents64(3,  <unfinished ...>
[pid  5074] unlink("./0/binderfs" <unfinished ...>
[pid  5082] <... openat resumed>)       = -1 EBUSY (Device or resource busy)
[pid  5083] +++ exited with 0 +++
[pid  5080] mkdir("./file0", 0777 <unfinished ...>
[pid  5079] <... getdents64 resumed>0x55556d0716f0 /* 4 entries */, 32768) = 112
[pid  5074] <... unlink resumed>)       = 0
[pid  5080] <... mkdir resumed>)        = 0
[pid  5079] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5082] exit_group(0 <unfinished ...>
[pid  5080] mount("/dev/loop2", "./file0", "jfs", MS_NOATIME|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME|MS_LAZYTIME, "integrity,discard=0x0000000000000000,noquota,nointegrity,iocharset=cp860,errors=remount-ro,iocharset"... <unfinished ...>
[pid  5079] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid  5074] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5079] newfstatat(AT_FDCWD, "./0/binderfs",  <unfinished ...>
[pid  5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5083, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=40 /* 0.40 s */} ---
[pid  5079] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5075] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5079] unlink("./0/binderfs" <unfinished ...>
[pid  5075] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid  5082] <... exit_group resumed>)   = ?
[pid  5079] <... unlink resumed>)       = 0
[pid  5075] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY <unfinished ...>
[pid  5079] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5075] <... openat resumed>)       = 3
[pid  5075] newfstatat(3, "",  <unfinished ...>
[pid  5085] <... ioctl resumed>)        = 0
[pid  5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5085] close(3 <unfinished ...>
[pid  5075] getdents64(3,  <unfinished ...>
[pid  5085] <... close resumed>)        = 0
[pid  5075] <... getdents64 resumed>0x55556d0716f0 /* 4 entries */, 32768) = 112
[pid  5085] close(4 <unfinished ...>
[pid  5075] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5085] <... close resumed>)        = 0
[pid  5075] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid  5085] mkdir("./file0", 0777 <unfinished ...>
[pid  5075] newfstatat(AT_FDCWD, "./0/binderfs",  <unfinished ...>
[pid  5085] <... mkdir resumed>)        = 0
[pid  5075] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5080] <... mount resumed>)        = 0
[pid  5080] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY <unfinished ...>
[pid  5075] unlink("./0/binderfs" <unfinished ...>
[pid  5080] <... openat resumed>)       = 3
[pid  5075] <... unlink resumed>)       = 0
[pid  5082] +++ exited with 0 +++
[pid  5080] chdir("./file0" <unfinished ...>
[pid  5075] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5080] <... chdir resumed>)        = 0
[pid  5080] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy)
[  109.000271][ T5080] loop2: detected capacity change from 0 to 32768
[  109.009080][ T5085] loop4: detected capacity change from 0 to 32768
[pid  5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5082, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=37 /* 0.37 s */} ---
[pid  5085] mount("/dev/loop4", "./file0", "jfs", MS_NOATIME|MS_NODIRATIME|MS_POSIXACL|MS_STRICTATIME|MS_LAZYTIME, "integrity,discard=0x0000000000000000,noquota,nointegrity,iocharset=cp860,errors=remount-ro,iocharset"... <unfinished ...>
[pid  5080] exit_group(0)               = ?
[  109.063649][ T5074] general protection fault, probably for non-canonical address 0xdffffc0000000006: 0000 [#1] PREEMPT SMP KASAN NOPTI
[  109.075985][ T5074] KASAN: null-ptr-deref in range [0x0000000000000030-0x0000000000000037]
[  109.084422][ T5074] CPU: 1 PID: 5074 Comm: syz-executor313 Not tainted 6.8.0-syzkaller-08951-gfe46a7dd189e #0
[  109.094552][ T5074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/29/2024
[  109.104635][ T5074] RIP: 0010:write_special_inodes+0xa9/0x170
[  109.110604][ T5074] Code: 2e e8 6b 04 ce 07 48 8d 7b 28 48 89 f8 48 c1 e8 03 80 3c 28 00 0f 85 b1 00 00 00 4c 8b 6b 28 49 8d 7d 30 48 89 f8 48 c1 e8 03 <80> 3c 28 00 0f 85 8e 00 00 00 49 8b 7d 30 2e e8 33 04 ce 07 48 8d
[  109.130251][ T5074] RSP: 0018:ffffc90004387b98 EFLAGS: 00010216
[  109.136343][ T5074] RAX: 0000000000000006 RBX: ffff888020b44e00 RCX: ffffffff81bf2e0e
[  109.144332][ T5074] RDX: 0000000000000000 RSI: ffffffff81bf2dc1 RDI: 0000000000000030
[  109.152318][ T5074] RBP: dffffc0000000000 R08: 0000000000000005 R09: 0000000000000000
[  109.160305][ T5074] R10: 0000000000000000 R11: 0000000000000001 R12: ffffffff81bfef80
[  109.168294][ T5074] R13: 0000000000000000 R14: ffff88802f7af800 R15: ffff88802f7af9d0
[  109.176287][ T5074] FS:  000055556d070380(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000
[  109.185241][ T5074] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  109.191845][ T5074] CR2: 00007ffd00f18090 CR3: 000000007a24c000 CR4: 0000000000350ef0
[  109.199856][ T5074] Call Trace:
[  109.203152][ T5074]  <TASK>
[  109.206098][ T5074]  ? show_regs+0x8c/0xa0
[  109.210371][ T5074]  ? die_addr+0x4f/0xd0
[  109.214553][ T5074]  ? exc_general_protection+0x155/0x230
[  109.220154][ T5074]  ? asm_exc_general_protection+0x26/0x30
[  109.225920][ T5074]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  109.231500][ T5074]  ? filemap_fdatawrite_wbc+0xce/0x1c0
[  109.237005][ T5074]  ? filemap_fdatawrite_wbc+0x81/0x1c0
[  109.242515][ T5074]  ? write_special_inodes+0xa9/0x170
[  109.247834][ T5074]  ? write_special_inodes+0x85/0x170
[  109.253152][ T5074]  jfs_flush_journal+0x3b6/0x940
[  109.258129][ T5074]  ? __pfx_jfs_flush_journal+0x10/0x10
[  109.263628][ T5074]  ? srso_return_thunk+0x5/0x5f
[  109.268524][ T5074]  ? hook_sb_delete+0xaf/0xba0
[  109.273319][ T5074]  ? __pfx_dquot_disable+0x10/0x10
[  109.278480][ T5074]  ? __pfx_hook_sb_delete+0x10/0x10
[  109.283712][ T5074]  jfs_umount+0x17a/0x440
[  109.288080][ T5074]  jfs_put_super+0x88/0x1d0
[  109.292629][ T5074]  ? __pfx_jfs_put_super+0x10/0x10
[  109.297787][ T5074]  generic_shutdown_super+0x15c/0x3d0
[  109.303195][ T5074]  kill_block_super+0x3b/0x90
[  109.307905][ T5074]  deactivate_locked_super+0xc1/0x1a0
[  109.313316][ T5074]  deactivate_super+0xde/0x100
[  109.318118][ T5074]  cleanup_mnt+0x222/0x450
[  109.322568][ T5074]  task_work_run+0x151/0x250
[  109.327195][ T5074]  ? __pfx_task_work_run+0x10/0x10
[  109.332351][ T5074]  ptrace_notify+0x10e/0x130
[  109.336987][ T5074]  syscall_exit_to_user_mode_prepare+0x126/0x240
[  109.343363][ T5074]  syscall_exit_to_user_mode+0x11/0x2a0
[  109.348964][ T5074]  do_syscall_64+0xe2/0x260
[  109.353522][ T5074]  entry_SYSCALL_64_after_hwframe+0x6d/0x75
[  109.359462][ T5074] RIP: 0033:0x7fc2ff37a437
[  109.363895][ T5074] Code: 07 00 48 83 c4 08 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8
[  109.383529][ T5074] RSP: 002b:00007ffd00f16e38 EFLAGS: 00000202 ORIG_RAX: 00000000000000a6
[  109.391968][ T5074] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fc2ff37a437
[  109.399962][ T5074] RDX: 0000000000000000 RSI: 000000000000000a RDI: 00007ffd00f16ef0
[pid  5077] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5080] +++ exited with 0 +++
[pid  5079] <... umount2 resumed>)      = 0
[pid  5077] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[  109.407955][ T5074] RBP: 00007ffd00f16ef0 R08: 0000000000000000 R09: 0000000000000000
[  109.416054][ T5074] R10: 00000000ffffffff R11: 0000000000000202 R12: 00007ffd00f17f50
[  109.424045][ T5074] R13: 000055556d0716c0 R14: 0000000000000001 R15: 431bde82d7b634db
[  109.432049][ T5074]  </TASK>
[  109.435079][ T5074] Modules linked in:
[  109.454796][ T5074] ---[ end trace 0000000000000000 ]---
[  109.460322][ T5074] RIP: 0010:write_special_inodes+0xa9/0x170
[  109.467176][ T5074] Code: 2e e8 6b 04 ce 07 48 8d 7b 28 48 89 f8 48 c1 e8 03 80 3c 28 00 0f 85 b1 00 00 00 4c 8b 6b 28 49 8d 7d 30 48 89 f8 48 c1 e8 03 <80> 3c 28 00 0f 85 8e 00 00 00 49 8b 7d 30 2e e8 33 04 ce 07 48 8d
[pid  5085] <... mount resumed>)        = 0
[pid  5079] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5077] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY <unfinished ...>
[pid  5075] <... umount2 resumed>)      = 0
[pid  5085] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY <unfinished ...>
[pid  5079] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid  5077] <... openat resumed>)       = 3
[pid  5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5080, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=43 /* 0.43 s */} ---
[pid  5085] <... openat resumed>)       = 3
[pid  5079] newfstatat(AT_FDCWD, "./0/file0",  <unfinished ...>
[pid  5085] chdir("./file0")            = 0
[pid  5085] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy)
[pid  5085] exit_group(0)               = ?
[pid  5085] +++ exited with 0 +++
[pid  5078] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5085, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=47 /* 0.47 s */} ---
[pid  5079] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5078] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5079] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5078] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid  5077] newfstatat(3, "",  <unfinished ...>
[pid  5076] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5078] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
[pid  5078] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5078] getdents64(3, 0x55556d0716f0 /* 4 entries */, 32768) = 112
[pid  5078] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5076] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid  5079] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid  5078] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid  5079] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY <unfinished ...>
[pid  5078] newfstatat(AT_FDCWD, "./0/binderfs",  <unfinished ...>
[pid  5077] getdents64(3,  <unfinished ...>
[pid  5076] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY <unfinished ...>
[pid  5075] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5079] <... openat resumed>)       = 4
[pid  5078] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5079] newfstatat(4, "",  <unfinished ...>
[pid  5078] unlink("./0/binderfs" <unfinished ...>
[pid  5077] <... getdents64 resumed>0x55556d0716f0 /* 4 entries */, 32768) = 112
[pid  5076] <... openat resumed>)       = 3
[pid  5075] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid  5078] <... unlink resumed>)       = 0
[pid  5078] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5079] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5077] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5076] newfstatat(3, "",  <unfinished ...>
[pid  5075] newfstatat(AT_FDCWD, "./0/file0",  <unfinished ...>
[pid  5079] getdents64(4,  <unfinished ...>
[pid  5077] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid  5077] newfstatat(AT_FDCWD, "./0/binderfs",  <unfinished ...>
[pid  5076] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5079] <... getdents64 resumed>0x55556d079730 /* 2 entries */, 32768) = 48
[pid  5077] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5076] getdents64(3,  <unfinished ...>
[pid  5075] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5077] unlink("./0/binderfs" <unfinished ...>
[pid  5076] <... getdents64 resumed>0x55556d0716f0 /* 4 entries */, 32768) = 112
[pid  5075] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
[pid  5076] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5079] getdents64(4,  <unfinished ...>
[pid  5077] <... unlink resumed>)       = 0
[pid  5076] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid  5075] newfstatat(4, "",  <unfinished ...>
[pid  5079] <... getdents64 resumed>0x55556d079730 /* 0 entries */, 32768) = 0
[pid  5077] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5076] newfstatat(AT_FDCWD, "./0/binderfs",  <unfinished ...>
[pid  5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5079] close(4 <unfinished ...>
[pid  5076] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5075] getdents64(4,  <unfinished ...>
[pid  5079] <... close resumed>)        = 0
[pid  5076] unlink("./0/binderfs" <unfinished ...>
[pid  5075] <... getdents64 resumed>0x55556d079730 /* 2 entries */, 32768) = 48
[pid  5075] getdents64(4,  <unfinished ...>
[pid  5076] <... unlink resumed>)       = 0
[pid  5075] <... getdents64 resumed>0x55556d079730 /* 0 entries */, 32768) = 0
[pid  5075] close(4 <unfinished ...>
[pid  5076] umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5079] rmdir("./0/file0")          = 0
[pid  5075] <... close resumed>)        = 0
[pid  5079] getdents64(3,  <unfinished ...>
[  109.527922][ T5074] RSP: 0018:ffffc90004387b98 EFLAGS: 00010216
[  109.550131][ T5074] RAX: 0000000000000006 RBX: ffff888020b44e00 RCX: ffffffff81bf2e0e
[  109.568643][ T5074] RDX: 0000000000000000 RSI: ffffffff81bf2dc1 RDI: 0000000000000030
[  109.587716][ T5077] general protection fault, probably for non-canonical address 0xdffffc0000000006: 0000 [#2] PREEMPT SMP KASAN NOPTI
[  109.588686][ T5074] RBP: dffffc0000000000 R08: 0000000000000005 R09: 0000000000000000
[  109.599979][ T5077] KASAN: null-ptr-deref in range [0x0000000000000030-0x0000000000000037]
[  109.600009][ T5077] CPU: 0 PID: 5077 Comm: syz-executor313 Tainted: G      D            6.8.0-syzkaller-08951-gfe46a7dd189e #0
[  109.600056][ T5077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/29/2024
[  109.600078][ T5077] RIP: 0010:write_special_inodes+0xa9/0x170
[  109.600134][ T5077] Code: 2e e8 6b 04 ce 07 48 8d 7b 28 48 89 f8 48 c1 e8 03 80 3c 28 00 0f 85 b1 00 00 00 4c 8b 6b 28 49 8d 7d 30 48 89 f8 48 c1 e8 03 <80> 3c 28 00 0f 85 8e 00 00 00 49 8b 7d 30 2e e8 33 04 ce 07 48 8d
[  109.600173][ T5077] RSP: 0018:ffffc90004477bb8 EFLAGS: 00010216
[  109.600205][ T5077] RAX: 0000000000000006 RBX: ffff888020b44800 RCX: ffffffff81bf2e0e
[  109.600233][ T5077] RDX: 0000000000000000 RSI: ffffffff81bf2dc1 RDI: 0000000000000030
[pid  5075] rmdir("./0/file0" <unfinished ...>
[pid  5079] <... getdents64 resumed>0x55556d0716f0 /* 0 entries */, 32768) = 0
[pid  5079] close(3)                    = 0
[pid  5079] rmdir("./0")                = 0
[pid  5079] mkdir("./1", 0777)          = 0
[pid  5079] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3
[  109.600259][ T5077] RBP: dffffc0000000000 R08: 0000000000000005 R09: 0000000000000000
[  109.600286][ T5077] R10: 0000000000000000 R11: 0000000000000000 R12: ffffffff81bfefc0
[  109.600313][ T5077] R13: 0000000000000000 R14: ffff88802f7af800 R15: ffff88802d173000
[  109.600343][ T5077] FS:  000055556d070380(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000
[  109.600382][ T5077] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  109.600411][ T5077] CR2: 00007ffd105aa9e8 CR3: 000000001f16a000 CR4: 0000000000350ef0
[  109.600439][ T5077] Call Trace:
[  109.600451][ T5077]  <TASK>
[  109.600464][ T5077]  ? show_regs+0x8c/0xa0
[  109.600502][ T5077]  ? die_addr+0x4f/0xd0
[  109.600545][ T5077]  ? exc_general_protection+0x155/0x230
[  109.600600][ T5077]  ? asm_exc_general_protection+0x26/0x30
[  109.609735][ T5074] R10: 0000000000000000 R11: 0000000000000001 R12: ffffffff81bfef80
[  109.616952][ T5077]  ? __pfx_filemap_flush+0x10/0x10
[  109.628499][ T5074] R13: 0000000000000000 R14: ffff88802f7af800 R15: ffff88802f7af9d0
[  109.638522][ T5077]  ? filemap_fdatawrite_wbc+0xce/0x1c0
[  109.638590][ T5077]  ? filemap_fdatawrite_wbc+0x81/0x1c0
[  109.638654][ T5077]  ? write_special_inodes+0xa9/0x170
[  109.638703][ T5077]  ? write_special_inodes+0x85/0x170
[  109.638752][ T5077]  lmLogSync+0x4a0/0x820
[  109.638804][ T5077]  ? __pfx_lmLogSync+0x10/0x10
[  109.658108][ T5074] FS:  000055556d070380(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000
[  109.664280][ T5077]  ? __pfx_dquot_writeback_dquots+0x10/0x10
[  109.670338][ T5074] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  109.678293][ T5077]  jfs_syncpt+0x89/0xa0
[  109.701404][ T5074] CR2: 000055fd1d402f98 CR3: 000000007a24c000 CR4: 0000000000350ef0
[  109.702386][ T5077]  jfs_sync_fs+0x83/0xb0
[  109.710742][ T5074] Kernel panic - not syncing: Fatal exception
[  109.719546][ T5074] Kernel Offset: disabled
[  109.859353][ T5074] Rebooting in 86400 seconds..