./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3465862811

<...>
Warning: Permanently added '10.128.1.166' (ED25519) to the list of known hosts.
execve("./syz-executor3465862811", ["./syz-executor3465862811"], 0x7ffc27e252d0 /* 10 vars */) = 0
brk(NULL)                               = 0x55556d09f000
brk(0x55556d09fd00)                     = 0x55556d09fd00
arch_prctl(ARCH_SET_FS, 0x55556d09f380) = 0
set_tid_address(0x55556d09f650)         = 5073
set_robust_list(0x55556d09f660, 24)     = 0
rseq(0x55556d09fca0, 0x20, 0, 0x53053053) = 0
prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0
readlink("/proc/self/exe", "/root/syz-executor3465862811", 4096) = 28
getrandom("\xfd\xbe\x61\x93\xb9\x0f\x0a\x20", 8, GRND_NONBLOCK) = 8
brk(NULL)                               = 0x55556d09fd00
brk(0x55556d0c0d00)                     = 0x55556d0c0d00
brk(0x55556d0c1000)                     = 0x55556d0c1000
mprotect(0x7ff305ddd000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5074 attached
 <unfinished ...>
[pid  5074] set_robust_list(0x55556d09f660, 24 <unfinished ...>
[pid  5073] <... clone resumed>, child_tidptr=0x55556d09f650) = 5074
[pid  5074] <... set_robust_list resumed>) = 0
[pid  5074] mkdir("./syzkaller.HdAwwj", 0700 <unfinished ...>
[pid  5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...>
[pid  5074] <... mkdir resumed>)        = 0
[pid  5074] chmod("./syzkaller.HdAwwj", 0777) = 0
[pid  5074] chdir("./syzkaller.HdAwwj") = 0
[pid  5074] mkdir("./0", 0777./strace-static-x86_64: Process 5075 attached
 <unfinished ...>
[pid  5073] <... clone resumed>, child_tidptr=0x55556d09f650) = 5075
[pid  5074] <... mkdir resumed>)        = 0
[pid  5075] set_robust_list(0x55556d09f660, 24 <unfinished ...>
[pid  5074] openat(AT_FDCWD, "/dev/loop0", O_RDWR <unfinished ...>
[pid  5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...>
[pid  5075] <... set_robust_list resumed>) = 0
[pid  5075] mkdir("./syzkaller.B2pNBY", 0700 <unfinished ...>
[pid  5074] <... openat resumed>)       = 3
./strace-static-x86_64: Process 5076 attached
[pid  5073] <... clone resumed>, child_tidptr=0x55556d09f650) = 5076
[pid  5075] <... mkdir resumed>)        = 0
[pid  5074] ioctl(3, LOOP_CLR_FD <unfinished ...>
[pid  5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...>
[pid  5076] set_robust_list(0x55556d09f660, 24 <unfinished ...>
[pid  5075] chmod("./syzkaller.B2pNBY", 0777 <unfinished ...>
[pid  5074] <... ioctl resumed>)        = -1 ENXIO (No such device or address)
[pid  5076] <... set_robust_list resumed>) = 0
[pid  5074] close(3 <unfinished ...>
[pid  5075] <... chmod resumed>)        = 0
[pid  5076] mkdir("./syzkaller.CAiYYw", 0700./strace-static-x86_64: Process 5077 attached
 <unfinished ...>
[pid  5075] chdir("./syzkaller.B2pNBY" <unfinished ...>
[pid  5074] <... close resumed>)        = 0
[pid  5074] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...>
[pid  5073] <... clone resumed>, child_tidptr=0x55556d09f650) = 5077
[pid  5077] set_robust_list(0x55556d09f660, 24 <unfinished ...>
[pid  5076] <... mkdir resumed>)        = 0
[pid  5075] <... chdir resumed>)        = 0
[pid  5077] <... set_robust_list resumed>) = 0
[pid  5076] chmod("./syzkaller.CAiYYw", 0777./strace-static-x86_64: Process 5078 attached
 <unfinished ...>
[pid  5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...>
[pid  5077] mkdir("./syzkaller.hdZkdJ", 0700 <unfinished ...>
[pid  5076] <... chmod resumed>)        = 0
[pid  5075] mkdir("./0", 0777 <unfinished ...>
[pid  5078] set_robust_list(0x55556d09f660, 24 <unfinished ...>
[pid  5077] <... mkdir resumed>)        = 0
[pid  5076] chdir("./syzkaller.CAiYYw" <unfinished ...>
[pid  5075] <... mkdir resumed>)        = 0
[pid  5074] <... clone resumed>, child_tidptr=0x55556d09f650) = 5078
[pid  5075] openat(AT_FDCWD, "/dev/loop1", O_RDWR <unfinished ...>
[pid  5078] <... set_robust_list resumed>) = 0
[pid  5076] <... chdir resumed>)        = 0
[pid  5078] chdir("./0" <unfinished ...>
[pid  5076] mkdir("./0", 0777 <unfinished ...>
[pid  5075] <... openat resumed>)       = 3
[pid  5076] <... mkdir resumed>)        = 0
./strace-static-x86_64: Process 5079 attached
[pid  5078] <... chdir resumed>)        = 0
[pid  5075] ioctl(3, LOOP_CLR_FD <unfinished ...>
[pid  5078] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5077] chmod("./syzkaller.hdZkdJ", 0777 <unfinished ...>
[pid  5073] <... clone resumed>, child_tidptr=0x55556d09f650) = 5079
[pid  5079] set_robust_list(0x55556d09f660, 24 <unfinished ...>
[pid  5078] setpgid(0, 0 <unfinished ...>
[pid  5077] <... chmod resumed>)        = 0
[pid  5076] openat(AT_FDCWD, "/dev/loop2", O_RDWR <unfinished ...>
[pid  5075] <... ioctl resumed>)        = -1 ENXIO (No such device or address)
[pid  5073] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...>
[pid  5079] <... set_robust_list resumed>) = 0
[pid  5078] <... setpgid resumed>)      = 0
[pid  5078] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC <unfinished ...>
[pid  5077] chdir("./syzkaller.hdZkdJ"./strace-static-x86_64: Process 5080 attached
 <unfinished ...>
[pid  5079] mkdir("./syzkaller.Zd8t1S", 0700 <unfinished ...>
[pid  5078] <... openat resumed>)       = 3
[pid  5076] <... openat resumed>)       = 3
[pid  5075] close(3 <unfinished ...>
[pid  5073] <... clone resumed>, child_tidptr=0x55556d09f650) = 5080
[pid  5080] set_robust_list(0x55556d09f660, 24 <unfinished ...>
[pid  5079] <... mkdir resumed>)        = 0
[pid  5078] write(3, "1000", 4 <unfinished ...>
[pid  5077] <... chdir resumed>)        = 0
[pid  5076] ioctl(3, LOOP_CLR_FD <unfinished ...>
[pid  5075] <... close resumed>)        = 0
[pid  5080] <... set_robust_list resumed>) = 0
[pid  5078] <... write resumed>)        = 4
[pid  5080] mkdir("./syzkaller.6t9ZUF", 0700 <unfinished ...>
[pid  5078] close(3)                    = 0
[pid  5077] mkdir("./0", 0777 <unfinished ...>
[pid  5078] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5076] <... ioctl resumed>)        = -1 ENXIO (No such device or address)
[pid  5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...>
[pid  5076] close(3 <unfinished ...>
[pid  5080] <... mkdir resumed>)        = 0
[pid  5079] chmod("./syzkaller.Zd8t1S", 0777 <unfinished ...>
[pid  5077] <... mkdir resumed>)        = 0
[pid  5076] <... close resumed>)        = 0
[pid  5078] memfd_create("syzkaller", 0./strace-static-x86_64: Process 5081 attached
 <unfinished ...>
[pid  5080] chmod("./syzkaller.6t9ZUF", 0777 <unfinished ...>
[pid  5079] <... chmod resumed>)        = 0
[pid  5077] openat(AT_FDCWD, "/dev/loop3", O_RDWR <unfinished ...>
[pid  5076] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...>
[pid  5078] <... memfd_create resumed>) = 3
[pid  5081] set_robust_list(0x55556d09f660, 24 <unfinished ...>
[pid  5080] <... chmod resumed>)        = 0
[pid  5079] chdir("./syzkaller.Zd8t1S" <unfinished ...>
[pid  5078] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff2fd800000
[pid  5081] <... set_robust_list resumed>) = 0
[pid  5079] <... chdir resumed>)        = 0
[pid  5077] <... openat resumed>)       = 3
[pid  5075] <... clone resumed>, child_tidptr=0x55556d09f650) = 5081
./strace-static-x86_64: Process 5082 attached
[pid  5081] chdir("./0" <unfinished ...>
[pid  5080] chdir("./syzkaller.6t9ZUF" <unfinished ...>
[pid  5079] mkdir("./0", 0777 <unfinished ...>
[pid  5080] <... chdir resumed>)        = 0
[pid  5076] <... clone resumed>, child_tidptr=0x55556d09f650) = 5082
[pid  5082] set_robust_list(0x55556d09f660, 24 <unfinished ...>
[pid  5081] <... chdir resumed>)        = 0
[pid  5080] mkdir("./0", 0777 <unfinished ...>
[pid  5082] <... set_robust_list resumed>) = 0
[pid  5081] prctl(PR_SET_PDEATHSIG, SIGKILL <unfinished ...>
[pid  5080] <... mkdir resumed>)        = 0
[pid  5079] <... mkdir resumed>)        = 0
[pid  5077] ioctl(3, LOOP_CLR_FD <unfinished ...>
[pid  5081] <... prctl resumed>)        = 0
[pid  5081] setpgid(0, 0)               = 0
[pid  5081] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC <unfinished ...>
[pid  5079] openat(AT_FDCWD, "/dev/loop4", O_RDWR <unfinished ...>
[pid  5077] <... ioctl resumed>)        = -1 ENXIO (No such device or address)
[pid  5079] <... openat resumed>)       = 3
[pid  5077] close(3 <unfinished ...>
[pid  5081] <... openat resumed>)       = 3
[pid  5077] <... close resumed>)        = 0
[pid  5082] chdir("./0" <unfinished ...>
[pid  5077] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...>
[pid  5082] <... chdir resumed>)        = 0
[pid  5082] prctl(PR_SET_PDEATHSIG, SIGKILL <unfinished ...>
[pid  5081] write(3, "1000", 4 <unfinished ...>
[pid  5080] openat(AT_FDCWD, "/dev/loop5", O_RDWR <unfinished ...>
[pid  5079] ioctl(3, LOOP_CLR_FD <unfinished ...>
[pid  5082] <... prctl resumed>)        = 0
[pid  5081] <... write resumed>)        = 4
[pid  5080] <... openat resumed>)       = 3
[pid  5079] <... ioctl resumed>)        = -1 ENXIO (No such device or address)
[pid  5081] close(3 <unfinished ...>
[pid  5079] close(3 <unfinished ...>
[pid  5081] <... close resumed>)        = 0
[pid  5081] symlink("/dev/binderfs", "./binderfs" <unfinished ...>
[pid  5079] <... close resumed>)        = 0
[pid  5082] setpgid(0, 0 <unfinished ...>
[pid  5081] <... symlink resumed>)      = 0
[pid  5080] ioctl(3, LOOP_CLR_FD)       = -1 ENXIO (No such device or address)
[pid  5079] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...>
[pid  5077] <... clone resumed>, child_tidptr=0x55556d09f650) = 5083
./strace-static-x86_64: Process 5083 attached
[pid  5082] <... setpgid resumed>)      = 0
[pid  5083] set_robust_list(0x55556d09f660, 24 <unfinished ...>
[pid  5082] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC <unfinished ...>
[pid  5081] memfd_create("syzkaller", 0) = 3
[pid  5080] close(3 <unfinished ...>
[pid  5082] <... openat resumed>)       = 3
[pid  5083] <... set_robust_list resumed>) = 0
[pid  5081] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 <unfinished ...>
[pid  5080] <... close resumed>)        = 0
[pid  5083] chdir("./0" <unfinished ...>
[pid  5081] <... mmap resumed>)         = 0x7ff2fd800000
[pid  5080] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...>
[pid  5083] <... chdir resumed>)        = 0
[pid  5082] write(3, "1000", 4 <unfinished ...>
[pid  5083] prctl(PR_SET_PDEATHSIG, SIGKILL <unfinished ...>
[pid  5082] <... write resumed>)        = 4
[pid  5079] <... clone resumed>, child_tidptr=0x55556d09f650) = 5084
[pid  5082] close(3 <unfinished ...>
[pid  5083] <... prctl resumed>)        = 0
[pid  5082] <... close resumed>)        = 0
[pid  5083] setpgid(0, 0 <unfinished ...>
[pid  5080] <... clone resumed>, child_tidptr=0x55556d09f650) = 5085
[pid  5082] symlink("/dev/binderfs", "./binderfs"./strace-static-x86_64: Process 5085 attached
 <unfinished ...>
[pid  5085] set_robust_list(0x55556d09f660, 24) = 0
[pid  5082] <... symlink resumed>)      = 0
[pid  5085] chdir("./0")                = 0
./strace-static-x86_64: Process 5084 attached
[pid  5085] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5084] set_robust_list(0x55556d09f660, 24 <unfinished ...>
[pid  5085] setpgid(0, 0 <unfinished ...>
[pid  5084] <... set_robust_list resumed>) = 0
[pid  5083] <... setpgid resumed>)      = 0
[pid  5085] <... setpgid resumed>)      = 0
[pid  5085] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC <unfinished ...>
[pid  5084] chdir("./0" <unfinished ...>
[pid  5083] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC <unfinished ...>
[pid  5085] <... openat resumed>)       = 3
[pid  5084] <... chdir resumed>)        = 0
[pid  5082] memfd_create("syzkaller", 0 <unfinished ...>
[pid  5083] <... openat resumed>)       = 3
[pid  5085] write(3, "1000", 4 <unfinished ...>
[pid  5084] prctl(PR_SET_PDEATHSIG, SIGKILL <unfinished ...>
[pid  5083] write(3, "1000", 4 <unfinished ...>
[pid  5085] <... write resumed>)        = 4
[pid  5084] <... prctl resumed>)        = 0
[pid  5082] <... memfd_create resumed>) = 3
[pid  5085] close(3)                    = 0
[pid  5084] setpgid(0, 0 <unfinished ...>
[pid  5083] <... write resumed>)        = 4
[pid  5082] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff2fd800000
[pid  5083] close(3)                    = 0
[pid  5083] symlink("/dev/binderfs", "./binderfs" <unfinished ...>
[pid  5085] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5083] <... symlink resumed>)      = 0
[pid  5084] <... setpgid resumed>)      = 0
[pid  5084] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC <unfinished ...>
[pid  5085] memfd_create("syzkaller", 0 <unfinished ...>
[pid  5084] <... openat resumed>)       = 3
[pid  5083] memfd_create("syzkaller", 0 <unfinished ...>
[pid  5085] <... memfd_create resumed>) = 3
[pid  5084] write(3, "1000", 4 <unfinished ...>
[pid  5085] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 <unfinished ...>
[pid  5083] <... memfd_create resumed>) = 3
[pid  5084] <... write resumed>)        = 4
[pid  5085] <... mmap resumed>)         = 0x7ff2fd800000
[pid  5084] close(3 <unfinished ...>
[pid  5083] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 <unfinished ...>
[pid  5084] <... close resumed>)        = 0
[pid  5083] <... mmap resumed>)         = 0x7ff2fd800000
[pid  5084] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5084] memfd_create("syzkaller", 0) = 3
[pid  5084] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff2fd800000
[pid  5078] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 <unfinished ...>
[pid  5081] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 <unfinished ...>
[pid  5082] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 <unfinished ...>
[pid  5084] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 <unfinished ...>
[pid  5083] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 <unfinished ...>
[pid  5085] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 <unfinished ...>
[pid  5078] <... write resumed>)        = 16777216
[pid  5078] munmap(0x7ff2fd800000, 138412032 <unfinished ...>
[pid  5081] <... write resumed>)        = 16777216
[pid  5081] munmap(0x7ff2fd800000, 138412032 <unfinished ...>
[pid  5078] <... munmap resumed>)       = 0
[pid  5082] <... write resumed>)        = 16777216
[pid  5078] openat(AT_FDCWD, "/dev/loop0", O_RDWR <unfinished ...>
[pid  5083] <... write resumed>)        = 16777216
[pid  5082] munmap(0x7ff2fd800000, 138412032 <unfinished ...>
[pid  5083] munmap(0x7ff2fd800000, 138412032 <unfinished ...>
[pid  5078] <... openat resumed>)       = 4
[pid  5084] <... write resumed>)        = 16777216
[pid  5078] ioctl(4, LOOP_SET_FD, 3 <unfinished ...>
[pid  5084] munmap(0x7ff2fd800000, 138412032 <unfinished ...>
[pid  5081] <... munmap resumed>)       = 0
[pid  5085] <... write resumed>)        = 16777216
[pid  5085] munmap(0x7ff2fd800000, 138412032 <unfinished ...>
[pid  5081] openat(AT_FDCWD, "/dev/loop1", O_RDWR <unfinished ...>
[pid  5078] <... ioctl resumed>)        = 0
[pid  5081] <... openat resumed>)       = 4
[pid  5078] close(3)                    = 0
[pid  5078] close(4 <unfinished ...>
[pid  5081] ioctl(4, LOOP_SET_FD, 3 <unfinished ...>
[pid  5078] <... close resumed>)        = 0
[  109.594343][ T5078] loop0: detected capacity change from 0 to 32768
[pid  5078] mkdir("./bus", 0777 <unfinished ...>
[pid  5084] <... munmap resumed>)       = 0
[pid  5083] <... munmap resumed>)       = 0
[pid  5082] <... munmap resumed>)       = 0
[pid  5084] openat(AT_FDCWD, "/dev/loop4", O_RDWR <unfinished ...>
[pid  5083] openat(AT_FDCWD, "/dev/loop3", O_RDWR <unfinished ...>
[pid  5084] <... openat resumed>)       = 4
[pid  5083] <... openat resumed>)       = 4
[pid  5082] openat(AT_FDCWD, "/dev/loop2", O_RDWR <unfinished ...>
[pid  5078] <... mkdir resumed>)        = 0
[pid  5083] ioctl(4, LOOP_SET_FD, 3 <unfinished ...>
[pid  5082] <... openat resumed>)       = 4
[pid  5078] mount("/dev/loop0", "./bus", "jfs", MS_I_VERSION, "noquota,iocharset=iso8859-13,errors=continue,integrity,integrity,nodiscard,nointegrity" <unfinished ...>
[pid  5081] <... ioctl resumed>)        = 0
[pid  5084] ioctl(4, LOOP_SET_FD, 3 <unfinished ...>
[pid  5083] <... ioctl resumed>)        = 0
[pid  5082] ioctl(4, LOOP_SET_FD, 3 <unfinished ...>
[pid  5081] close(3)                    = 0
[pid  5081] close(4)                    = 0
[pid  5081] mkdir("./bus", 0777)        = 0
[pid  5081] mount("/dev/loop1", "./bus", "jfs", MS_I_VERSION, "noquota,iocharset=iso8859-13,errors=continue,integrity,integrity,nodiscard,nointegrity" <unfinished ...>
[pid  5083] close(3)                    = 0
[pid  5083] close(4)                    = 0
[pid  5083] mkdir("./bus", 0777 <unfinished ...>
[pid  5084] <... ioctl resumed>)        = 0
[pid  5084] close(3)                    = 0
[  109.640925][ T5081] loop1: detected capacity change from 0 to 32768
[  109.660837][ T5083] loop3: detected capacity change from 0 to 32768
[  109.678426][ T5084] loop4: detected capacity change from 0 to 32768
[pid  5084] close(4 <unfinished ...>
[pid  5083] <... mkdir resumed>)        = 0
[pid  5082] <... ioctl resumed>)        = 0
[pid  5085] <... munmap resumed>)       = 0
[pid  5084] <... close resumed>)        = 0
[pid  5083] mount("/dev/loop3", "./bus", "jfs", MS_I_VERSION, "noquota,iocharset=iso8859-13,errors=continue,integrity,integrity,nodiscard,nointegrity" <unfinished ...>
[pid  5082] close(3 <unfinished ...>
[pid  5081] <... mount resumed>)        = 0
[pid  5084] mkdir("./bus", 0777 <unfinished ...>
[pid  5078] <... mount resumed>)        = 0
[pid  5084] <... mkdir resumed>)        = 0
[pid  5084] mount("/dev/loop4", "./bus", "jfs", MS_I_VERSION, "noquota,iocharset=iso8859-13,errors=continue,integrity,integrity,nodiscard,nointegrity" <unfinished ...>
[pid  5082] <... close resumed>)        = 0
[pid  5081] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY <unfinished ...>
[pid  5082] close(4 <unfinished ...>
[pid  5081] <... openat resumed>)       = 3
[pid  5078] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY <unfinished ...>
[pid  5082] <... close resumed>)        = 0
[pid  5081] chdir("./bus" <unfinished ...>
[pid  5078] <... openat resumed>)       = 3
[pid  5082] mkdir("./bus", 0777 <unfinished ...>
[pid  5081] <... chdir resumed>)        = 0
[pid  5078] chdir("./bus" <unfinished ...>
[pid  5085] openat(AT_FDCWD, "/dev/loop5", O_RDWR <unfinished ...>
[pid  5081] openat(AT_FDCWD, "/dev/loop1", O_RDWR <unfinished ...>
[pid  5078] <... chdir resumed>)        = 0
[pid  5085] <... openat resumed>)       = 4
[pid  5082] <... mkdir resumed>)        = 0
[pid  5081] <... openat resumed>)       = -1 EBUSY (Device or resource busy)
[pid  5078] openat(AT_FDCWD, "/dev/loop0", O_RDWR <unfinished ...>
[pid  5085] ioctl(4, LOOP_SET_FD, 3 <unfinished ...>
[pid  5083] <... mount resumed>)        = 0
[pid  5082] mount("/dev/loop2", "./bus", "jfs", MS_I_VERSION, "noquota,iocharset=iso8859-13,errors=continue,integrity,integrity,nodiscard,nointegrity" <unfinished ...>
[  109.704006][ T5082] loop2: detected capacity change from 0 to 32768
[pid  5081] exit_group(0 <unfinished ...>
[pid  5078] <... openat resumed>)       = -1 EBUSY (Device or resource busy)
[pid  5084] <... mount resumed>)        = 0
[pid  5083] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY <unfinished ...>
[pid  5081] <... exit_group resumed>)   = ?
[pid  5084] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY) = 3
[pid  5083] <... openat resumed>)       = 3
[pid  5081] +++ exited with 0 +++
[pid  5084] chdir("./bus" <unfinished ...>
[pid  5083] chdir("./bus" <unfinished ...>
[pid  5084] <... chdir resumed>)        = 0
[pid  5083] <... chdir resumed>)        = 0
[pid  5084] openat(AT_FDCWD, "/dev/loop4", O_RDWR <unfinished ...>
[pid  5083] openat(AT_FDCWD, "/dev/loop3", O_RDWR <unfinished ...>
[pid  5078] exit_group(0 <unfinished ...>
[pid  5075] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5081, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=45 /* 0.45 s */} ---
[pid  5083] <... openat resumed>)       = -1 EBUSY (Device or resource busy)
[pid  5078] <... exit_group resumed>)   = ?
[pid  5075] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5084] <... openat resumed>)       = -1 EBUSY (Device or resource busy)
[pid  5083] exit_group(0 <unfinished ...>
[pid  5075] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid  5083] <... exit_group resumed>)   = ?
[pid  5075] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY <unfinished ...>
[pid  5084] exit_group(0 <unfinished ...>
[pid  5083] +++ exited with 0 +++
[pid  5078] +++ exited with 0 +++
[pid  5082] <... mount resumed>)        = 0
[pid  5075] <... openat resumed>)       = 3
[pid  5074] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5078, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=47 /* 0.47 s */} ---
[pid  5084] <... exit_group resumed>)   = ?
[pid  5082] openat(AT_FDCWD, "./bus", O_RDONLY|O_DIRECTORY <unfinished ...>
[pid  5075] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5074] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5082] <... openat resumed>)       = 3
[pid  5082] chdir("./bus" <unfinished ...>
[pid  5075] getdents64(3,  <unfinished ...>
[pid  5074] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid  5082] <... chdir resumed>)        = 0
[pid  5075] <... getdents64 resumed>0x55556d0a06f0 /* 4 entries */, 32768) = 104
[pid  5074] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY <unfinished ...>
[pid  5082] openat(AT_FDCWD, "/dev/loop2", O_RDWR <unfinished ...>
[pid  5075] umount2("./0/bus", MNT_DETACH|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5082] <... openat resumed>)       = -1 EBUSY (Device or resource busy)
[pid  5074] <... openat resumed>)       = 3
[pid  5085] <... ioctl resumed>)        = 0
[pid  5084] +++ exited with 0 +++
[pid  5082] exit_group(0 <unfinished ...>
[pid  5074] newfstatat(3, "",  <unfinished ...>
[pid  5082] <... exit_group resumed>)   = ?
[pid  5077] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5083, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=43 /* 0.43 s */} ---
[pid  5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5079] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5084, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=38 /* 0.38 s */} ---
[pid  5074] getdents64(3,  <unfinished ...>
[pid  5079] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5074] <... getdents64 resumed>0x55556d0a06f0 /* 4 entries */, 32768) = 104
[pid  5079] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[  109.755015][ T5085] loop5: detected capacity change from 0 to 32768
[pid  5074] umount2("./0/bus", MNT_DETACH|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5077] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5085] close(3 <unfinished ...>
[pid  5082] +++ exited with 0 +++
[pid  5079] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY <unfinished ...>
[pid  5075] <... umount2 resumed>)      = 0
[pid  5085] <... close resumed>)        = 0
[pid  5079] <... openat resumed>)       = 3
[pid  5077] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid  5085] close(4 <unfinished ...>
[pid  5079] newfstatat(3, "",  <unfinished ...>
[pid  5075] umount2("./0/bus", MNT_DETACH|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5085] <... close resumed>)        = 0
[pid  5079] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5077] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY <unfinished ...>
[pid  5076] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5082, si_uid=0, si_status=0, si_utime=0, si_stime=44 /* 0.44 s */} ---
[pid  5075] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid  5085] mkdir("./bus", 0777 <unfinished ...>
[pid  5079] getdents64(3,  <unfinished ...>
[pid  5077] <... openat resumed>)       = 3
[pid  5076] restart_syscall(<... resuming interrupted clone ...> <unfinished ...>
[pid  5085] <... mkdir resumed>)        = 0
[pid  5079] <... getdents64 resumed>0x55556d0a06f0 /* 4 entries */, 32768) = 104
[pid  5076] <... restart_syscall resumed>) = 0
[pid  5075] newfstatat(AT_FDCWD, "./0/bus",  <unfinished ...>
[pid  5079] umount2("./0/bus", MNT_DETACH|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5077] newfstatat(3, "",  <unfinished ...>
[pid  5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5074] <... umount2 resumed>)      = 0
[pid  5075] umount2("./0/bus", MNT_DETACH|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5076] umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5075] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid  5076] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid  5075] openat(AT_FDCWD, "./0/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY <unfinished ...>
[pid  5076] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
[pid  5075] <... openat resumed>)       = 4
[pid  5076] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5085] mount("/dev/loop5", "./bus", "jfs", MS_I_VERSION, "noquota,iocharset=iso8859-13,errors=continue,integrity,integrity,nodiscard,nointegrity" <unfinished ...>
[pid  5077] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5075] newfstatat(4, "",  <unfinished ...>
[pid  5074] umount2("./0/bus", MNT_DETACH|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5075] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5074] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid  5077] getdents64(3,  <unfinished ...>
[pid  5074] newfstatat(AT_FDCWD, "./0/bus",  <unfinished ...>
[pid  5077] <... getdents64 resumed>0x55556d0a06f0 /* 4 entries */, 32768) = 104
[pid  5076] getdents64(3,  <unfinished ...>
[pid  5075] getdents64(4,  <unfinished ...>
[pid  5074] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5077] umount2("./0/bus", MNT_DETACH|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5076] <... getdents64 resumed>0x55556d0a06f0 /* 4 entries */, 32768) = 104
[pid  5075] <... getdents64 resumed>0x55556d0a8730 /* 2 entries */, 32768) = 48
[pid  5074] umount2("./0/bus", MNT_DETACH|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5076] umount2("./0/bus", MNT_DETACH|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5075] getdents64(4,  <unfinished ...>
[pid  5074] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid  5075] <... getdents64 resumed>0x55556d0a8730 /* 0 entries */, 32768) = 0
[pid  5075] close(4 <unfinished ...>
[pid  5074] openat(AT_FDCWD, "./0/bus", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY <unfinished ...>
[pid  5075] <... close resumed>)        = 0
[pid  5075] rmdir("./0/bus")            = 0
[pid  5075] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5075] newfstatat(AT_FDCWD, "./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5075] unlink("./0/binderfs")      = 0
[pid  5075] getdents64(3, 0x55556d0a06f0 /* 0 entries */, 32768) = 0
[pid  5075] close(3)                    = 0
[pid  5075] rmdir("./0")                = 0
[pid  5075] mkdir("./1", 0777)          = 0
[pid  5075] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3
[pid  5075] ioctl(3, LOOP_CLR_FD)       = 0
[pid  5075] close(3)                    = 0
[pid  5075] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5088 attached
[  109.860415][ T5077] general protection fault, probably for non-canonical address 0xdffffc0000000006: 0000 [#1] PREEMPT SMP KASAN NOPTI
[  109.872738][ T5077] KASAN: null-ptr-deref in range [0x0000000000000030-0x0000000000000037]
[  109.881179][ T5077] CPU: 0 PID: 5077 Comm: syz-executor346 Not tainted 6.8.0-syzkaller-08951-gfe46a7dd189e #0
[  109.891287][ T5077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/29/2024
[  109.901372][ T5077] RIP: 0010:write_special_inodes+0xa9/0x170
[  109.907351][ T5077] Code: 2e e8 6b 04 ce 07 48 8d 7b 28 48 89 f8 48 c1 e8 03 80 3c 28 00 0f 85 b1 00 00 00 4c 8b 6b 28 49 8d 7d 30 48 89 f8 48 c1 e8 03 <80> 3c 28 00 0f 85 8e 00 00 00 49 8b 7d 30 2e e8 33 04 ce 07 48 8d
[  109.927003][ T5077] RSP: 0018:ffffc90004417bb8 EFLAGS: 00010216
[  109.933112][ T5077] RAX: 0000000000000006 RBX: ffff8880228bb200 RCX: ffffffff81bf2e0e
[  109.941117][ T5077] RDX: 0000000000000000 RSI: ffffffff81bf2dc1 RDI: 0000000000000030
[  109.949135][ T5077] RBP: dffffc0000000000 R08: 0000000000000005 R09: 0000000000000000
[  109.957302][ T5077] R10: 0000000000000000 R11: 0000000000000001 R12: ffffffff81bfefc0
[  109.965302][ T5077] R13: 0000000000000000 R14: ffff888012262800 R15: ffff8880162dd700
[  109.973304][ T5077] FS:  000055556d09f380(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000
[  109.982262][ T5077] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  109.988875][ T5077] CR2: 00007fff50fd5aec CR3: 0000000078406000 CR4: 0000000000350ef0
[  109.996872][ T5077] Call Trace:
[  110.000164][ T5077]  <TASK>
[  110.003120][ T5077]  ? show_regs+0x8c/0xa0
[  110.007427][ T5077]  ? die_addr+0x4f/0xd0
[  110.011634][ T5077]  ? exc_general_protection+0x155/0x230
[  110.017575][ T5077]  ? asm_exc_general_protection+0x26/0x30
[  110.023487][ T5077]  ? __pfx_filemap_flush+0x10/0x10
[  110.028660][ T5077]  ? filemap_fdatawrite_wbc+0xce/0x1c0
[  110.034171][ T5077]  ? filemap_fdatawrite_wbc+0x81/0x1c0
[  110.039680][ T5077]  ? write_special_inodes+0xa9/0x170
[  110.045000][ T5077]  ? write_special_inodes+0x85/0x170
[  110.050319][ T5077]  lmLogSync+0x4a0/0x820
[  110.054604][ T5077]  ? __pfx_lmLogSync+0x10/0x10
[  110.059412][ T5077]  ? __pfx_dquot_writeback_dquots+0x10/0x10
[  110.065361][ T5077]  jfs_syncpt+0x89/0xa0
[  110.069558][ T5077]  jfs_sync_fs+0x83/0xb0
[  110.073847][ T5077]  ? __pfx_jfs_sync_fs+0x10/0x10
[  110.078830][ T5077]  sync_filesystem+0x110/0x290
[  110.083628][ T5077]  generic_shutdown_super+0x7e/0x3d0
[  110.088954][ T5077]  kill_block_super+0x3b/0x90
[  110.093671][ T5077]  deactivate_locked_super+0xc1/0x1a0
[  110.099090][ T5077]  deactivate_super+0xde/0x100
[  110.103895][ T5077]  cleanup_mnt+0x222/0x450
[  110.108348][ T5077]  task_work_run+0x151/0x250
[  110.112972][ T5077]  ? __pfx_task_work_run+0x10/0x10
[  110.118126][ T5077]  ptrace_notify+0x10e/0x130
[  110.122765][ T5077]  syscall_exit_to_user_mode_prepare+0x126/0x240
[  110.129137][ T5077]  syscall_exit_to_user_mode+0x11/0x2a0
[  110.134734][ T5077]  do_syscall_64+0xe2/0x260
[  110.139291][ T5077]  entry_SYSCALL_64_after_hwframe+0x6d/0x75
[  110.145232][ T5077] RIP: 0033:0x7ff305d645f7
[  110.149668][ T5077] Code: 07 00 48 83 c4 08 5b 5d c3 66 2e 0f 1f 84 00 00 00 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8
[  110.169309][ T5077] RSP: 002b:00007fff50fd6bc8 EFLAGS: 00000202 ORIG_RAX: 00000000000000a6
[  110.177755][ T5077] RAX: 0000000000000000 RBX: 000000000001a60b RCX: 00007ff305d645f7
[  110.185746][ T5077] RDX: 0000000000000000 RSI: 000000000000000a RDI: 00007fff50fd6c80
[  110.193733][ T5077] RBP: 00007fff50fd6c80 R08: 0000000000000000 R09: 0000000000000000
[  110.201724][ T5077] R10: 00000000ffffffff R11: 0000000000000202 R12: 00007fff50fd7cf0
 <unfinished ...>
[pid  5088] set_robust_list(0x55556d09f660, 24) = 0
[pid  5088] chdir("./1" <unfinished ...>
[pid  5075] <... clone resumed>, child_tidptr=0x55556d09f650) = 5088
[pid  5088] <... chdir resumed>)        = 0
[pid  5088] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5088] setpgid(0, 0)               = 0
[pid  5088] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5088] write(3, "1000", 4)         = 4
[pid  5088] close(3)                    = 0
[pid  5088] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5088] memfd_create("syzkaller", 0) = 3
[pid  5088] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff2fd800000
[  110.209715][ T5077] R13: 000055556d0a06c0 R14: 431bde82d7b634db R15: 00007fff50fd7d10
[  110.217731][ T5077]  </TASK>
[  110.220769][ T5077] Modules linked in:
[  110.227833][ T5077] ---[ end trace 0000000000000000 ]---
[  110.233389][ T5077] RIP: 0010:write_special_inodes+0xa9/0x170
[  110.241260][ T5077] Code: 2e e8 6b 04 ce 07 48 8d 7b 28 48 89 f8 48 c1 e8 03 80 3c 28 00 0f 85 b1 00 00 00 4c 8b 6b 28 49 8d 7d 30 48 89 f8 48 c1 e8 03 <80> 3c 28 00 0f 85 8e 00 00 00 49 8b 7d 30 2e e8 33 04 ce 07 48 8d
[pid  5074] <... openat resumed>)       = 4
[pid  5074] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5074] getdents64(4, 0x55556d0a8730 /* 2 entries */, 32768) = 48
[pid  5074] getdents64(4, 0x55556d0a8730 /* 0 entries */, 32768) = 0
[pid  5074] close(4)                    = 0
[pid  5074] rmdir("./0/bus")            = 0
[pid  5074] umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5074] newfstatat(AT_FDCWD, "./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5074] unlink("./0/binderfs")      = 0
[pid  5074] getdents64(3, 0x55556d0a06f0 /* 0 entries */, 32768) = 0
[pid  5074] close(3)                    = 0
[pid  5074] rmdir("./0")                = 0
[pid  5074] mkdir("./1", 0777)          = 0
[pid  5074] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3
[  110.262327][ T5077] RSP: 0018:ffffc90004417bb8 EFLAGS: 00010216
[  110.268609][ T5077] RAX: 0000000000000006 RBX: ffff8880228bb200 RCX: ffffffff81bf2e0e
[  110.276700][ T5077] RDX: 0000000000000000 RSI: ffffffff81bf2dc1 RDI: 0000000000000030
[  110.284709][ T5077] RBP: dffffc0000000000 R08: 0000000000000005 R09: 0000000000000000
[  110.294512][ T5077] R10: 0000000000000000 R11: 0000000000000001 R12: ffffffff81bfefc0
[  110.306741][ T5077] R13: 0000000000000000 R14: ffff888012262800 R15: ffff8880162dd700
[  110.314762][ T5077] FS:  000055556d09f380(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000
[  110.329349][ T5077] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  110.340908][ T5077] CR2: 00005623ca3f1cf8 CR3: 0000000078406000 CR4: 0000000000350ef0
[  110.349519][ T5077] Kernel panic - not syncing: Fatal exception
[  110.355844][ T5077] Kernel Offset: disabled
[  110.360172][ T5077] Rebooting in 86400 seconds..