./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3058515691

<...>
Warning: Permanently added '10.128.1.182' (ECDSA) to the list of known hosts.
execve("./syz-executor3058515691", ["./syz-executor3058515691"], 0x7fff854476f0 /* 10 vars */) = 0
brk(NULL)                               = 0x5555558e4000
brk(0x5555558e4c40)                     = 0x5555558e4c40
arch_prctl(ARCH_SET_FS, 0x5555558e4300) = 0
uname({sysname="Linux", nodename="syzkaller", ...}) = 0
readlink("/proc/self/exe", "/root/syz-executor3058515691", 4096) = 28
brk(0x555555905c40)                     = 0x555555905c40
brk(0x555555906000)                     = 0x555555906000
mprotect(0x7f84db531000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
getpid()                                = 5083
mkdir("./syzkaller.his9px", 0700)       = 0
chmod("./syzkaller.his9px", 0777)       = 0
chdir("./syzkaller.his9px")             = 0
mkdir("./0", 0777)                      = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558e45d0) = 5084
./strace-static-x86_64: Process 5084 attached
[pid  5084] chdir("./0")                = 0
[pid  5084] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5084] setpgid(0, 0)               = 0
[pid  5084] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5084] write(3, "1000", 4)         = 4
[pid  5084] close(3)                    = 0
[pid  5084] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5084] memfd_create("syzkaller", 0) = 3
[pid  5084] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f84d3074000
[pid  5084] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  5084] munmap(0x7f84d3074000, 4194304) = 0
[pid  5084] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5084] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5084] close(3)                    = 0
[pid  5084] mkdir("./file0", 0777)      = 0
syzkaller login: [   40.958123][ T5084] memfd_create() without MFD_EXEC nor MFD_NOEXEC_SEAL, pid=5084 'syz-executor305'
[   40.992837][ T5084] loop0: detected capacity change from 0 to 8192
[   41.002903][ T5084] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   41.015961][ T5084] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[   41.025659][ T5084] REISERFS (device loop0): using ordered data mode
[   41.032205][ T5084] reiserfs: using flush barriers
[   41.037819][ T5084] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   41.054246][ T5084] REISERFS (device loop0): checking transaction log (loop0)
[pid  5084] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC, "") = 0
[pid  5084] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5084] chdir("./file0")            = 0
[pid  5084] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5084] close(4)                    = 0
[pid  5084] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4
[pid  5084] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 5
[pid  5084] ftruncate(5, 33587199)      = 0
[   41.086961][ T5084] REISERFS (device loop0): Using r5 hash to sort names
[   41.094154][ T5084] REISERFS (device loop0): using 3.5.x disk format
[   41.101584][ T5084] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[pid  5084] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<<MAP_HUGE_SHIFT, 4, 0) = 0x20000000
[pid  5084] open(".", O_RDONLY)         = 6
[pid  5084] ioctl(6, FS_IOC_GETVERSION, 0) = -1 EFAULT (Bad address)
[pid  5084] exit_group(0)               = ?
[pid  5084] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5084, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} ---
umount2("./0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x5555558e5620 /* 4 entries */, 32768) = 112
umount2("./0/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./0/binderfs")                  = 0
umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./0/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./0/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x5555558ed660 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555558ed660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./0/file0")                      = 0
getdents64(3, 0x5555558e5620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./0")                            = 0
mkdir("./1", 0777)                      = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5087 attached
, child_tidptr=0x5555558e45d0) = 5087
[pid  5087] chdir("./1")                = 0
[pid  5087] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5087] setpgid(0, 0)               = 0
[pid  5087] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5087] write(3, "1000", 4)         = 4
[pid  5087] close(3)                    = 0
[pid  5087] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5087] memfd_create("syzkaller", 0) = 3
[pid  5087] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f84d3074000
[pid  5087] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  5087] munmap(0x7f84d3074000, 4194304) = 0
[pid  5087] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5087] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5087] close(3)                    = 0
[pid  5087] mkdir("./file0", 0777)      = 0
[   41.244691][ T5087] loop0: detected capacity change from 0 to 8192
[   41.253940][ T5087] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   41.266934][ T5087] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[   41.276122][ T5087] REISERFS (device loop0): using ordered data mode
[   41.282660][ T5087] reiserfs: using flush barriers
[   41.288467][ T5087] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   41.304767][ T5087] REISERFS (device loop0): checking transaction log (loop0)
[   41.332613][ T5087] REISERFS (device loop0): Using r5 hash to sort names
[pid  5087] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC, "") = 0
[pid  5087] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5087] chdir("./file0")            = 0
[pid  5087] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5087] close(4)                    = 0
[pid  5087] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4
[pid  5087] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 5
[pid  5087] ftruncate(5, 33587199)      = 0
[pid  5087] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<<MAP_HUGE_SHIFT, 4, 0) = 0x20000000
[pid  5087] open(".", O_RDONLY)         = 6
[pid  5087] ioctl(6, FS_IOC_GETVERSION, 0) = -1 EFAULT (Bad address)
[pid  5087] exit_group(0)               = ?
[   41.339471][ T5087] REISERFS (device loop0): using 3.5.x disk format
[   41.346196][ T5087] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[pid  5087] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5087, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./1", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x5555558e5620 /* 4 entries */, 32768) = 112
umount2("./1/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./1/binderfs")                  = 0
umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./1/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./1/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x5555558ed660 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555558ed660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./1/file0")                      = 0
getdents64(3, 0x5555558e5620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./1")                            = 0
mkdir("./2", 0777)                      = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5089 attached
 <unfinished ...>
[pid  5089] chdir("./2")                = 0
[pid  5089] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5089] setpgid(0, 0)               = 0
[pid  5089] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC <unfinished ...>
[pid  5083] <... clone resumed>, child_tidptr=0x5555558e45d0) = 5089
[pid  5089] <... openat resumed>)       = 3
[pid  5089] write(3, "1000", 4)         = 4
[pid  5089] close(3)                    = 0
[pid  5089] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5089] memfd_create("syzkaller", 0) = 3
[pid  5089] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f84d3074000
[pid  5089] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  5089] munmap(0x7f84d3074000, 4194304) = 0
[pid  5089] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5089] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5089] close(3)                    = 0
[pid  5089] mkdir("./file0", 0777)      = 0
[   41.485933][ T5089] loop0: detected capacity change from 0 to 8192
[   41.495377][ T5089] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   41.508380][ T5089] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[   41.517612][ T5089] REISERFS (device loop0): using ordered data mode
[   41.524166][ T5089] reiserfs: using flush barriers
[   41.529760][ T5089] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   41.546218][ T5089] REISERFS (device loop0): checking transaction log (loop0)
[pid  5089] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC, "") = 0
[pid  5089] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5089] chdir("./file0")            = 0
[pid  5089] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5089] close(4)                    = 0
[pid  5089] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4
[pid  5089] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 5
[pid  5089] ftruncate(5, 33587199)      = 0
[   41.576289][ T5089] REISERFS (device loop0): Using r5 hash to sort names
[   41.583237][ T5089] REISERFS (device loop0): using 3.5.x disk format
[   41.589914][ T5089] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[pid  5089] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<<MAP_HUGE_SHIFT, 4, 0) = 0x20000000
[pid  5089] open(".", O_RDONLY)         = 6
[pid  5089] ioctl(6, FS_IOC_GETVERSION, 0) = -1 EFAULT (Bad address)
[pid  5089] exit_group(0)               = ?
[pid  5089] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5089, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./2", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x5555558e5620 /* 4 entries */, 32768) = 112
umount2("./2/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./2/binderfs")                  = 0
umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./2/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./2/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./2/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x5555558ed660 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555558ed660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./2/file0")                      = 0
getdents64(3, 0x5555558e5620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./2")                            = 0
mkdir("./3", 0777)                      = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558e45d0) = 5091
./strace-static-x86_64: Process 5091 attached
[pid  5091] chdir("./3")                = 0
[pid  5091] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5091] setpgid(0, 0)               = 0
[pid  5091] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5091] write(3, "1000", 4)         = 4
[pid  5091] close(3)                    = 0
[pid  5091] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5091] memfd_create("syzkaller", 0) = 3
[pid  5091] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f84d3074000
[pid  5091] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  5091] munmap(0x7f84d3074000, 4194304) = 0
[pid  5091] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5091] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5091] close(3)                    = 0
[pid  5091] mkdir("./file0", 0777)      = 0
[   41.724665][ T5091] loop0: detected capacity change from 0 to 8192
[   41.733278][ T5091] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   41.746414][ T5091] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[   41.755646][ T5091] REISERFS (device loop0): using ordered data mode
[   41.762337][ T5091] reiserfs: using flush barriers
[   41.767917][ T5091] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   41.784245][ T5091] REISERFS (device loop0): checking transaction log (loop0)
[   41.814664][ T5091] REISERFS (device loop0): Using r5 hash to sort names
[pid  5091] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC, "") = 0
[pid  5091] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5091] chdir("./file0")            = 0
[pid  5091] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5091] close(4)                    = 0
[pid  5091] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4
[pid  5091] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 5
[pid  5091] ftruncate(5, 33587199)      = 0
[pid  5091] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<<MAP_HUGE_SHIFT, 4, 0) = 0x20000000
[pid  5091] open(".", O_RDONLY)         = 6
[pid  5091] ioctl(6, FS_IOC_GETVERSION, 0) = -1 EFAULT (Bad address)
[pid  5091] exit_group(0)               = ?
[pid  5091] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5091, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} ---
umount2("./3", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[   41.821605][ T5091] REISERFS (device loop0): using 3.5.x disk format
[   41.828372][ T5091] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x5555558e5620 /* 4 entries */, 32768) = 112
umount2("./3/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./3/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./3/binderfs")                  = 0
umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./3/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./3/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./3/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x5555558ed660 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555558ed660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./3/file0")                      = 0
getdents64(3, 0x5555558e5620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./3")                            = 0
mkdir("./4", 0777)                      = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5093 attached
 <unfinished ...>
[pid  5093] chdir("./4")                = 0
[pid  5093] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5093] setpgid(0, 0)               = 0
[pid  5093] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5093] write(3, "1000", 4)         = 4
[pid  5093] close(3)                    = 0
[pid  5093] symlink("/dev/binderfs", "./binderfs" <unfinished ...>
[pid  5083] <... clone resumed>, child_tidptr=0x5555558e45d0) = 5093
[pid  5093] <... symlink resumed>)      = 0
[pid  5093] memfd_create("syzkaller", 0) = 3
[pid  5093] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f84d3074000
[pid  5093] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  5093] munmap(0x7f84d3074000, 4194304) = 0
[pid  5093] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5093] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5093] close(3)                    = 0
[pid  5093] mkdir("./file0", 0777)      = 0
[   41.955929][ T5093] loop0: detected capacity change from 0 to 8192
[   41.965020][ T5093] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   41.978034][ T5093] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[   41.987242][ T5093] REISERFS (device loop0): using ordered data mode
[   41.993792][ T5093] reiserfs: using flush barriers
[   41.999201][ T5093] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   42.015858][ T5093] REISERFS (device loop0): checking transaction log (loop0)
[   42.046147][ T5093] REISERFS (device loop0): Using r5 hash to sort names
[pid  5093] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC, "") = 0
[pid  5093] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5093] chdir("./file0")            = 0
[pid  5093] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5093] close(4)                    = 0
[pid  5093] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4
[pid  5093] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 5
[pid  5093] ftruncate(5, 33587199)      = 0
[pid  5093] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<<MAP_HUGE_SHIFT, 4, 0) = 0x20000000
[pid  5093] open(".", O_RDONLY)         = 6
[pid  5093] ioctl(6, FS_IOC_GETVERSION, 0) = -1 EFAULT (Bad address)
[pid  5093] exit_group(0)               = ?
[   42.053045][ T5093] REISERFS (device loop0): using 3.5.x disk format
[   42.059640][ T5093] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[pid  5093] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5093, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} ---
umount2("./4", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x5555558e5620 /* 4 entries */, 32768) = 112
umount2("./4/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./4/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./4/binderfs")                  = 0
umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./4/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./4/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./4/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x5555558ed660 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555558ed660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./4/file0")                      = 0
getdents64(3, 0x5555558e5620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./4")                            = 0
mkdir("./5", 0777)                      = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558e45d0) = 5095
./strace-static-x86_64: Process 5095 attached
[pid  5095] chdir("./5")                = 0
[pid  5095] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5095] setpgid(0, 0)               = 0
[pid  5095] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5095] write(3, "1000", 4)         = 4
[pid  5095] close(3)                    = 0
[pid  5095] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5095] memfd_create("syzkaller", 0) = 3
[pid  5095] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f84d3074000
[pid  5095] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  5095] munmap(0x7f84d3074000, 4194304) = 0
[pid  5095] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5095] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5095] close(3)                    = 0
[pid  5095] mkdir("./file0", 0777)      = 0
[   42.194987][ T5095] loop0: detected capacity change from 0 to 8192
[   42.204418][ T5095] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   42.217430][ T5095] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[   42.226627][ T5095] REISERFS (device loop0): using ordered data mode
[   42.233170][ T5095] reiserfs: using flush barriers
[   42.238732][ T5095] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   42.255090][ T5095] REISERFS (device loop0): checking transaction log (loop0)
[pid  5095] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC, "") = 0
[pid  5095] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5095] chdir("./file0")            = 0
[pid  5095] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5095] close(4)                    = 0
[pid  5095] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4
[pid  5095] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 5
[pid  5095] ftruncate(5, 33587199)      = 0
[   42.288603][ T5095] REISERFS (device loop0): Using r5 hash to sort names
[   42.295553][ T5095] REISERFS (device loop0): using 3.5.x disk format
[   42.302255][ T5095] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[pid  5095] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<<MAP_HUGE_SHIFT, 4, 0) = 0x20000000
[pid  5095] open(".", O_RDONLY)         = 6
[pid  5095] ioctl(6, FS_IOC_GETVERSION, 0) = -1 EFAULT (Bad address)
[pid  5095] exit_group(0)               = ?
[pid  5095] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5095, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./5", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x5555558e5620 /* 4 entries */, 32768) = 112
umount2("./5/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./5/binderfs")                  = 0
umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./5/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./5/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./5/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x5555558ed660 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555558ed660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./5/file0")                      = 0
getdents64(3, 0x5555558e5620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./5")                            = 0
mkdir("./6", 0777)                      = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558e45d0) = 5097
./strace-static-x86_64: Process 5097 attached
[pid  5097] chdir("./6")                = 0
[pid  5097] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5097] setpgid(0, 0)               = 0
[pid  5097] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5097] write(3, "1000", 4)         = 4
[pid  5097] close(3)                    = 0
[pid  5097] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5097] memfd_create("syzkaller", 0) = 3
[pid  5097] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f84d3074000
[pid  5097] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  5097] munmap(0x7f84d3074000, 4194304) = 0
[pid  5097] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5097] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5097] close(3)                    = 0
[pid  5097] mkdir("./file0", 0777)      = 0
[   42.429660][ T5097] loop0: detected capacity change from 0 to 8192
[   42.438200][ T5097] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   42.451298][ T5097] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[   42.460452][ T5097] REISERFS (device loop0): using ordered data mode
[   42.466982][ T5097] reiserfs: using flush barriers
[   42.472412][ T5097] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   42.488632][ T5097] REISERFS (device loop0): checking transaction log (loop0)
[   42.518917][ T5097] REISERFS (device loop0): Using r5 hash to sort names
[pid  5097] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC, "") = 0
[pid  5097] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5097] chdir("./file0")            = 0
[pid  5097] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5097] close(4)                    = 0
[pid  5097] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4
[pid  5097] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 5
[pid  5097] ftruncate(5, 33587199)      = 0
[pid  5097] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<<MAP_HUGE_SHIFT, 4, 0) = 0x20000000
[pid  5097] open(".", O_RDONLY)         = 6
[pid  5097] ioctl(6, FS_IOC_GETVERSION, 0) = -1 EFAULT (Bad address)
[pid  5097] exit_group(0)               = ?
[pid  5097] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5097, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} ---
umount2("./6", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x5555558e5620 /* 4 entries */, 32768) = 112
umount2("./6/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./6/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./6/binderfs")                  = 0
[   42.525797][ T5097] REISERFS (device loop0): using 3.5.x disk format
[   42.532541][ T5097] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./6/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./6/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./6/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x5555558ed660 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555558ed660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./6/file0")                      = 0
getdents64(3, 0x5555558e5620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./6")                            = 0
mkdir("./7", 0777)                      = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5099 attached
, child_tidptr=0x5555558e45d0) = 5099
[pid  5099] chdir("./7")                = 0
[pid  5099] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5099] setpgid(0, 0)               = 0
[pid  5099] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5099] write(3, "1000", 4)         = 4
[pid  5099] close(3)                    = 0
[pid  5099] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5099] memfd_create("syzkaller", 0) = 3
[pid  5099] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f84d3074000
[pid  5099] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  5099] munmap(0x7f84d3074000, 4194304) = 0
[pid  5099] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5099] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5099] close(3)                    = 0
[pid  5099] mkdir("./file0", 0777)      = 0
[   42.665670][ T5099] loop0: detected capacity change from 0 to 8192
[   42.674799][ T5099] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   42.687808][ T5099] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[   42.697079][ T5099] REISERFS (device loop0): using ordered data mode
[   42.703628][ T5099] reiserfs: using flush barriers
[   42.709044][ T5099] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   42.725369][ T5099] REISERFS (device loop0): checking transaction log (loop0)
[   42.755233][ T5099] REISERFS (device loop0): Using r5 hash to sort names
[pid  5099] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC, "") = 0
[pid  5099] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5099] chdir("./file0")            = 0
[pid  5099] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5099] close(4)                    = 0
[pid  5099] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4
[pid  5099] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 5
[pid  5099] ftruncate(5, 33587199)      = 0
[pid  5099] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<<MAP_HUGE_SHIFT, 4, 0) = 0x20000000
[pid  5099] open(".", O_RDONLY)         = 6
[pid  5099] ioctl(6, FS_IOC_GETVERSION, 0) = -1 EFAULT (Bad address)
[pid  5099] exit_group(0)               = ?
[pid  5099] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5099, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./7", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x5555558e5620 /* 4 entries */, 32768) = 112
umount2("./7/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./7/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./7/binderfs")                  = 0
[   42.762136][ T5099] REISERFS (device loop0): using 3.5.x disk format
[   42.768852][ T5099] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./7/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./7/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./7/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x5555558ed660 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555558ed660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./7/file0")                      = 0
getdents64(3, 0x5555558e5620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./7")                            = 0
mkdir("./8", 0777)                      = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558e45d0) = 5101
./strace-static-x86_64: Process 5101 attached
[pid  5101] chdir("./8")                = 0
[pid  5101] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5101] setpgid(0, 0)               = 0
[pid  5101] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5101] write(3, "1000", 4)         = 4
[pid  5101] close(3)                    = 0
[pid  5101] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5101] memfd_create("syzkaller", 0) = 3
[pid  5101] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f84d3074000
[pid  5101] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  5101] munmap(0x7f84d3074000, 4194304) = 0
[pid  5101] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5101] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5101] close(3)                    = 0
[pid  5101] mkdir("./file0", 0777)      = 0
[   42.891819][ T5101] loop0: detected capacity change from 0 to 8192
[   42.900885][ T5101] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   42.913866][ T5101] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[   42.923124][ T5101] REISERFS (device loop0): using ordered data mode
[   42.929612][ T5101] reiserfs: using flush barriers
[   42.935104][ T5101] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   42.951534][ T5101] REISERFS (device loop0): checking transaction log (loop0)
[   42.979750][ T5101] REISERFS (device loop0): Using r5 hash to sort names
[pid  5101] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC, "") = 0
[pid  5101] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5101] chdir("./file0")            = 0
[pid  5101] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5101] close(4)                    = 0
[pid  5101] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4
[pid  5101] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 5
[pid  5101] ftruncate(5, 33587199)      = 0
[pid  5101] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<<MAP_HUGE_SHIFT, 4, 0) = 0x20000000
[pid  5101] open(".", O_RDONLY)         = 6
[pid  5101] ioctl(6, FS_IOC_GETVERSION, 0) = -1 EFAULT (Bad address)
[pid  5101] exit_group(0)               = ?
[pid  5101] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5101, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./8", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x5555558e5620 /* 4 entries */, 32768) = 112
umount2("./8/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./8/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./8/binderfs")                  = 0
[   42.986614][ T5101] REISERFS (device loop0): using 3.5.x disk format
[   42.993322][ T5101] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./8/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./8/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./8/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x5555558ed660 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555558ed660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./8/file0")                      = 0
getdents64(3, 0x5555558e5620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./8")                            = 0
mkdir("./9", 0777)                      = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5103 attached
, child_tidptr=0x5555558e45d0) = 5103
[pid  5103] chdir("./9")                = 0
[pid  5103] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5103] setpgid(0, 0)               = 0
[pid  5103] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5103] write(3, "1000", 4)         = 4
[pid  5103] close(3)                    = 0
[pid  5103] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5103] memfd_create("syzkaller", 0) = 3
[pid  5103] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f84d3074000
[pid  5103] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  5103] munmap(0x7f84d3074000, 4194304) = 0
[pid  5103] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5103] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5103] close(3)                    = 0
[pid  5103] mkdir("./file0", 0777)      = 0
[   43.122467][ T5103] loop0: detected capacity change from 0 to 8192
[   43.130914][ T5103] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   43.143948][ T5103] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[   43.153129][ T5103] REISERFS (device loop0): using ordered data mode
[   43.159633][ T5103] reiserfs: using flush barriers
[   43.165147][ T5103] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   43.181499][ T5103] REISERFS (device loop0): checking transaction log (loop0)
[   43.208818][ T5103] REISERFS (device loop0): Using r5 hash to sort names
[   43.215685][ T5103] REISERFS (device loop0): using 3.5.x disk format
[pid  5103] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC, "") = 0
[pid  5103] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5103] chdir("./file0")            = 0
[pid  5103] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5103] close(4)                    = 0
[pid  5103] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4
[pid  5103] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 5
[pid  5103] ftruncate(5, 33587199)      = 0
[pid  5103] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<<MAP_HUGE_SHIFT, 4, 0) = 0x20000000
[pid  5103] open(".", O_RDONLY)         = 6
[pid  5103] ioctl(6, FS_IOC_GETVERSION, 0) = -1 EFAULT (Bad address)
[pid  5103] exit_group(0)               = ?
[pid  5103] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5103, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./9", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[   43.222356][ T5103] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x5555558e5620 /* 4 entries */, 32768) = 112
umount2("./9/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./9/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./9/binderfs")                  = 0
umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./9/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./9/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./9/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x5555558ed660 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555558ed660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./9/file0")                      = 0
getdents64(3, 0x5555558e5620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./9")                            = 0
mkdir("./10", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558e45d0) = 5105
./strace-static-x86_64: Process 5105 attached
[pid  5105] chdir("./10")               = 0
[pid  5105] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5105] setpgid(0, 0)               = 0
[pid  5105] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5105] write(3, "1000", 4)         = 4
[pid  5105] close(3)                    = 0
[pid  5105] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5105] memfd_create("syzkaller", 0) = 3
[pid  5105] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f84d3074000
[pid  5105] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  5105] munmap(0x7f84d3074000, 4194304) = 0
[pid  5105] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5105] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5105] close(3)                    = 0
[pid  5105] mkdir("./file0", 0777)      = 0
[   43.358392][ T5105] loop0: detected capacity change from 0 to 8192
[   43.367415][ T5105] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   43.380881][ T5105] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[   43.390097][ T5105] REISERFS (device loop0): using ordered data mode
[   43.396847][ T5105] reiserfs: using flush barriers
[   43.402517][ T5105] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   43.418920][ T5105] REISERFS (device loop0): checking transaction log (loop0)
[pid  5105] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC, "") = 0
[pid  5105] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5105] chdir("./file0")            = 0
[pid  5105] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5105] close(4)                    = 0
[pid  5105] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4
[pid  5105] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 5
[pid  5105] ftruncate(5, 33587199)      = 0
[   43.449163][ T5105] REISERFS (device loop0): Using r5 hash to sort names
[   43.456120][ T5105] REISERFS (device loop0): using 3.5.x disk format
[   43.462858][ T5105] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[pid  5105] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<<MAP_HUGE_SHIFT, 4, 0) = 0x20000000
[pid  5105] open(".", O_RDONLY)         = 6
[pid  5105] ioctl(6, FS_IOC_GETVERSION, 0) = -1 EFAULT (Bad address)
[pid  5105] exit_group(0)               = ?
[pid  5105] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5105, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} ---
umount2("./10", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x5555558e5620 /* 4 entries */, 32768) = 112
umount2("./10/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./10/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./10/binderfs")                 = 0
umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./10/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./10/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./10/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x5555558ed660 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555558ed660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./10/file0")                     = 0
getdents64(3, 0x5555558e5620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./10")                           = 0
mkdir("./11", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558e45d0) = 5107
./strace-static-x86_64: Process 5107 attached
[pid  5107] chdir("./11")               = 0
[pid  5107] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5107] setpgid(0, 0)               = 0
[pid  5107] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5107] write(3, "1000", 4)         = 4
[pid  5107] close(3)                    = 0
[pid  5107] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5107] memfd_create("syzkaller", 0) = 3
[pid  5107] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f84d3074000
[pid  5107] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  5107] munmap(0x7f84d3074000, 4194304) = 0
[pid  5107] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5107] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5107] close(3)                    = 0
[pid  5107] mkdir("./file0", 0777)      = 0
[   43.589719][ T5107] loop0: detected capacity change from 0 to 8192
[   43.599000][ T5107] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   43.612206][ T5107] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[   43.621507][ T5107] REISERFS (device loop0): using ordered data mode
[   43.628012][ T5107] reiserfs: using flush barriers
[   43.633787][ T5107] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   43.650096][ T5107] REISERFS (device loop0): checking transaction log (loop0)
[   43.678951][ T5107] REISERFS (device loop0): Using r5 hash to sort names
[pid  5107] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC, "") = 0
[pid  5107] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5107] chdir("./file0")            = 0
[pid  5107] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5107] close(4)                    = 0
[pid  5107] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4
[pid  5107] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 5
[pid  5107] ftruncate(5, 33587199)      = 0
[pid  5107] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<<MAP_HUGE_SHIFT, 4, 0) = 0x20000000
[pid  5107] open(".", O_RDONLY)         = 6
[pid  5107] ioctl(6, FS_IOC_GETVERSION, 0) = -1 EFAULT (Bad address)
[pid  5107] exit_group(0)               = ?
[pid  5107] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5107, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} ---
umount2("./11", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x5555558e5620 /* 4 entries */, 32768) = 112
umount2("./11/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./11/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./11/binderfs")                 = 0
[   43.685842][ T5107] REISERFS (device loop0): using 3.5.x disk format
[   43.692533][ T5107] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./11/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./11/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./11/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x5555558ed660 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555558ed660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./11/file0")                     = 0
getdents64(3, 0x5555558e5620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./11")                           = 0
mkdir("./12", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558e45d0) = 5109
./strace-static-x86_64: Process 5109 attached
[pid  5109] chdir("./12")               = 0
[pid  5109] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5109] setpgid(0, 0)               = 0
[pid  5109] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5109] write(3, "1000", 4)         = 4
[pid  5109] close(3)                    = 0
[pid  5109] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5109] memfd_create("syzkaller", 0) = 3
[pid  5109] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f84d3074000
[pid  5109] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  5109] munmap(0x7f84d3074000, 4194304) = 0
[pid  5109] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5109] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5109] close(3)                    = 0
[pid  5109] mkdir("./file0", 0777)      = 0
[   43.822838][ T5109] loop0: detected capacity change from 0 to 8192
[   43.831629][ T5109] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   43.844590][ T5109] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[   43.853769][ T5109] REISERFS (device loop0): using ordered data mode
[   43.860352][ T5109] reiserfs: using flush barriers
[   43.866034][ T5109] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   43.882477][ T5109] REISERFS (device loop0): checking transaction log (loop0)
[   43.909995][ T5109] REISERFS (device loop0): Using r5 hash to sort names
[   43.916886][ T5109] REISERFS (device loop0): using 3.5.x disk format
[pid  5109] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC, "") = 0
[pid  5109] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5109] chdir("./file0")            = 0
[pid  5109] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5109] close(4)                    = 0
[pid  5109] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4
[pid  5109] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 5
[pid  5109] ftruncate(5, 33587199)      = 0
[pid  5109] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<<MAP_HUGE_SHIFT, 4, 0) = 0x20000000
[pid  5109] open(".", O_RDONLY)         = 6
[pid  5109] ioctl(6, FS_IOC_GETVERSION, 0) = -1 EFAULT (Bad address)
[pid  5109] exit_group(0)               = ?
[pid  5109] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5109, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} ---
umount2("./12", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x5555558e5620 /* 4 entries */, 32768) = 112
umount2("./12/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./12/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./12/binderfs")                 = 0
[   43.923613][ T5109] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./12/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./12/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./12/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x5555558ed660 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555558ed660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./12/file0")                     = 0
getdents64(3, 0x5555558e5620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./12")                           = 0
mkdir("./13", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558e45d0) = 5111
./strace-static-x86_64: Process 5111 attached
[pid  5111] chdir("./13")               = 0
[pid  5111] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5111] setpgid(0, 0)               = 0
[pid  5111] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5111] write(3, "1000", 4)         = 4
[pid  5111] close(3)                    = 0
[pid  5111] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5111] memfd_create("syzkaller", 0) = 3
[pid  5111] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f84d3074000
[pid  5111] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  5111] munmap(0x7f84d3074000, 4194304) = 0
[pid  5111] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5111] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5111] close(3)                    = 0
[pid  5111] mkdir("./file0", 0777)      = 0
[   44.053725][ T5111] loop0: detected capacity change from 0 to 8192
[   44.062539][ T5111] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   44.075650][ T5111] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[   44.084951][ T5111] REISERFS (device loop0): using ordered data mode
[   44.091492][ T5111] reiserfs: using flush barriers
[   44.097029][ T5111] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   44.113743][ T5111] REISERFS (device loop0): checking transaction log (loop0)
[   44.143928][ T5111] REISERFS (device loop0): Using r5 hash to sort names
[pid  5111] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC, "") = 0
[pid  5111] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5111] chdir("./file0")            = 0
[pid  5111] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5111] close(4)                    = 0
[pid  5111] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4
[pid  5111] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 5
[pid  5111] ftruncate(5, 33587199)      = 0
[pid  5111] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<<MAP_HUGE_SHIFT, 4, 0) = 0x20000000
[pid  5111] open(".", O_RDONLY)         = 6
[pid  5111] ioctl(6, FS_IOC_GETVERSION, 0) = -1 EFAULT (Bad address)
[pid  5111] exit_group(0)               = ?
[pid  5111] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5111, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./13", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./13", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x5555558e5620 /* 4 entries */, 32768) = 112
umount2("./13/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./13/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
[   44.150842][ T5111] REISERFS (device loop0): using 3.5.x disk format
[   44.157469][ T5111] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
unlink("./13/binderfs")                 = 0
umount2("./13/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./13/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./13/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./13/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./13/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x5555558ed660 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555558ed660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./13/file0")                     = 0
getdents64(3, 0x5555558e5620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./13")                           = 0
mkdir("./14", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558e45d0) = 5113
./strace-static-x86_64: Process 5113 attached
[pid  5113] chdir("./14")               = 0
[pid  5113] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5113] setpgid(0, 0)               = 0
[pid  5113] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5113] write(3, "1000", 4)         = 4
[pid  5113] close(3)                    = 0
[pid  5113] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5113] memfd_create("syzkaller", 0) = 3
[pid  5113] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f84d3074000
[pid  5113] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  5113] munmap(0x7f84d3074000, 4194304) = 0
[pid  5113] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5113] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5113] close(3)                    = 0
[pid  5113] mkdir("./file0", 0777)      = 0
[   44.287080][ T5113] loop0: detected capacity change from 0 to 8192
[   44.296630][ T5113] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   44.309731][ T5113] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[   44.318890][ T5113] REISERFS (device loop0): using ordered data mode
[   44.325425][ T5113] reiserfs: using flush barriers
[   44.330908][ T5113] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   44.347201][ T5113] REISERFS (device loop0): checking transaction log (loop0)
[pid  5113] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC, "") = 0
[pid  5113] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5113] chdir("./file0")            = 0
[pid  5113] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5113] close(4)                    = 0
[pid  5113] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4
[pid  5113] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 5
[pid  5113] ftruncate(5, 33587199)      = 0
[   44.378380][ T5113] REISERFS (device loop0): Using r5 hash to sort names
[   44.385299][ T5113] REISERFS (device loop0): using 3.5.x disk format
[   44.392038][ T5113] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[pid  5113] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<<MAP_HUGE_SHIFT, 4, 0) = 0x20000000
[pid  5113] open(".", O_RDONLY)         = 6
[pid  5113] ioctl(6, FS_IOC_GETVERSION, 0) = -1 EFAULT (Bad address)
[pid  5113] exit_group(0)               = ?
[pid  5113] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5113, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./14", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./14", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x5555558e5620 /* 4 entries */, 32768) = 112
umount2("./14/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./14/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./14/binderfs")                 = 0
umount2("./14/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./14/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./14/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./14/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./14/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x5555558ed660 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555558ed660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./14/file0")                     = 0
getdents64(3, 0x5555558e5620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./14")                           = 0
mkdir("./15", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558e45d0) = 5115
./strace-static-x86_64: Process 5115 attached
[pid  5115] chdir("./15")               = 0
[pid  5115] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5115] setpgid(0, 0)               = 0
[pid  5115] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5115] write(3, "1000", 4)         = 4
[pid  5115] close(3)                    = 0
[pid  5115] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5115] memfd_create("syzkaller", 0) = 3
[pid  5115] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f84d3074000
[pid  5115] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  5115] munmap(0x7f84d3074000, 4194304) = 0
[pid  5115] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5115] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5115] close(3)                    = 0
[pid  5115] mkdir("./file0", 0777)      = 0
[   44.527024][ T5115] loop0: detected capacity change from 0 to 8192
[   44.536343][ T5115] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   44.549679][ T5115] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[   44.558901][ T5115] REISERFS (device loop0): using ordered data mode
[   44.565548][ T5115] reiserfs: using flush barriers
[   44.571315][ T5115] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   44.587683][ T5115] REISERFS (device loop0): checking transaction log (loop0)
[pid  5115] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC, "") = 0
[pid  5115] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5115] chdir("./file0")            = 0
[pid  5115] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5115] close(4)                    = 0
[pid  5115] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4
[pid  5115] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 5
[pid  5115] ftruncate(5, 33587199)      = 0
[   44.618047][ T5115] REISERFS (device loop0): Using r5 hash to sort names
[   44.624974][ T5115] REISERFS (device loop0): using 3.5.x disk format
[   44.631730][ T5115] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[pid  5115] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<<MAP_HUGE_SHIFT, 4, 0) = 0x20000000
[pid  5115] open(".", O_RDONLY)         = 6
[pid  5115] ioctl(6, FS_IOC_GETVERSION, 0) = -1 EFAULT (Bad address)
[pid  5115] exit_group(0)               = ?
[pid  5115] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5115, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./15", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./15", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x5555558e5620 /* 4 entries */, 32768) = 112
umount2("./15/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./15/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./15/binderfs")                 = 0
umount2("./15/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./15/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./15/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./15/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./15/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x5555558ed660 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555558ed660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./15/file0")                     = 0
getdents64(3, 0x5555558e5620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./15")                           = 0
mkdir("./16", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558e45d0) = 5117
./strace-static-x86_64: Process 5117 attached
[pid  5117] chdir("./16")               = 0
[pid  5117] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5117] setpgid(0, 0)               = 0
[pid  5117] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5117] write(3, "1000", 4)         = 4
[pid  5117] close(3)                    = 0
[pid  5117] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5117] memfd_create("syzkaller", 0) = 3
[pid  5117] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f84d3074000
[pid  5117] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  5117] munmap(0x7f84d3074000, 4194304) = 0
[pid  5117] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5117] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5117] close(3)                    = 0
[pid  5117] mkdir("./file0", 0777)      = 0
[   44.763757][ T5117] loop0: detected capacity change from 0 to 8192
[   44.772922][ T5117] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   44.785939][ T5117] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[   44.795288][ T5117] REISERFS (device loop0): using ordered data mode
[   44.801984][ T5117] reiserfs: using flush barriers
[   44.807739][ T5117] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   44.823979][ T5117] REISERFS (device loop0): checking transaction log (loop0)
[   44.852725][ T5117] REISERFS (device loop0): Using r5 hash to sort names
[pid  5117] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC, "") = 0
[pid  5117] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5117] chdir("./file0")            = 0
[pid  5117] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5117] close(4)                    = 0
[pid  5117] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4
[pid  5117] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 5
[pid  5117] ftruncate(5, 33587199)      = 0
[pid  5117] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<<MAP_HUGE_SHIFT, 4, 0) = 0x20000000
[pid  5117] open(".", O_RDONLY)         = 6
[pid  5117] ioctl(6, FS_IOC_GETVERSION, 0) = -1 EFAULT (Bad address)
[pid  5117] exit_group(0)               = ?
[pid  5117] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5117, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} ---
umount2("./16", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./16", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x5555558e5620 /* 4 entries */, 32768) = 112
umount2("./16/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./16/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./16/binderfs")                 = 0
[   44.859569][ T5117] REISERFS (device loop0): using 3.5.x disk format
[   44.866299][ T5117] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
umount2("./16/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./16/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./16/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./16/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./16/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x5555558ed660 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555558ed660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./16/file0")                     = 0
getdents64(3, 0x5555558e5620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./16")                           = 0
mkdir("./17", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558e45d0) = 5119
./strace-static-x86_64: Process 5119 attached
[pid  5119] chdir("./17")               = 0
[pid  5119] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5119] setpgid(0, 0)               = 0
[pid  5119] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5119] write(3, "1000", 4)         = 4
[pid  5119] close(3)                    = 0
[pid  5119] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5119] memfd_create("syzkaller", 0) = 3
[pid  5119] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f84d3074000
[pid  5119] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  5119] munmap(0x7f84d3074000, 4194304) = 0
[pid  5119] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5119] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5119] close(3)                    = 0
[pid  5119] mkdir("./file0", 0777)      = 0
[   44.993478][ T5119] loop0: detected capacity change from 0 to 8192
[   45.003007][ T5119] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   45.015991][ T5119] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[   45.025214][ T5119] REISERFS (device loop0): using ordered data mode
[   45.031779][ T5119] reiserfs: using flush barriers
[   45.037549][ T5119] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   45.053870][ T5119] REISERFS (device loop0): checking transaction log (loop0)
[pid  5119] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC, "") = 0
[pid  5119] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5119] chdir("./file0")            = 0
[pid  5119] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5119] close(4)                    = 0
[pid  5119] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4
[pid  5119] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 5
[pid  5119] ftruncate(5, 33587199)      = 0
[   45.085312][ T5119] REISERFS (device loop0): Using r5 hash to sort names
[   45.092220][ T5119] REISERFS (device loop0): using 3.5.x disk format
[   45.098821][ T5119] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[pid  5119] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<<MAP_HUGE_SHIFT, 4, 0) = 0x20000000
[pid  5119] open(".", O_RDONLY)         = 6
[pid  5119] ioctl(6, FS_IOC_GETVERSION, 0) = -1 EFAULT (Bad address)
[pid  5119] exit_group(0)               = ?
[pid  5119] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5119, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./17", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./17", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x5555558e5620 /* 4 entries */, 32768) = 112
umount2("./17/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./17/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./17/binderfs")                 = 0
umount2("./17/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./17/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./17/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./17/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./17/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x5555558ed660 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555558ed660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./17/file0")                     = 0
getdents64(3, 0x5555558e5620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./17")                           = 0
mkdir("./18", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558e45d0) = 5121
./strace-static-x86_64: Process 5121 attached
[pid  5121] chdir("./18")               = 0
[pid  5121] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5121] setpgid(0, 0)               = 0
[pid  5121] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5121] write(3, "1000", 4)         = 4
[pid  5121] close(3)                    = 0
[pid  5121] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5121] memfd_create("syzkaller", 0) = 3
[pid  5121] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f84d3074000
[pid  5121] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  5121] munmap(0x7f84d3074000, 4194304) = 0
[pid  5121] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5121] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5121] close(3)                    = 0
[pid  5121] mkdir("./file0", 0777)      = 0
[   45.272022][ T5121] loop0: detected capacity change from 0 to 8192
[   45.282082][ T5121] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   45.295091][ T5121] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[   45.304279][ T5121] REISERFS (device loop0): using ordered data mode
[   45.310794][ T5121] reiserfs: using flush barriers
[   45.316217][ T5121] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   45.332578][ T5121] REISERFS (device loop0): checking transaction log (loop0)
[pid  5121] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC, "") = 0
[pid  5121] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5121] chdir("./file0")            = 0
[pid  5121] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5121] close(4)                    = 0
[pid  5121] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4
[pid  5121] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 5
[pid  5121] ftruncate(5, 33587199)      = 0
[   45.363146][ T5121] REISERFS (device loop0): Using r5 hash to sort names
[   45.370129][ T5121] REISERFS (device loop0): using 3.5.x disk format
[   45.377216][ T5121] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[pid  5121] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<<MAP_HUGE_SHIFT, 4, 0) = 0x20000000
[pid  5121] open(".", O_RDONLY)         = 6
[pid  5121] ioctl(6, FS_IOC_GETVERSION, 0) = -1 EFAULT (Bad address)
[pid  5121] exit_group(0)               = ?
[pid  5121] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5121, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./18", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./18", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x5555558e5620 /* 4 entries */, 32768) = 112
umount2("./18/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./18/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./18/binderfs")                 = 0
umount2("./18/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./18/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./18/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./18/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./18/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x5555558ed660 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555558ed660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./18/file0")                     = 0
getdents64(3, 0x5555558e5620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./18")                           = 0
mkdir("./19", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558e45d0) = 5123
./strace-static-x86_64: Process 5123 attached
[pid  5123] chdir("./19")               = 0
[pid  5123] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5123] setpgid(0, 0)               = 0
[pid  5123] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5123] write(3, "1000", 4)         = 4
[pid  5123] close(3)                    = 0
[pid  5123] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5123] memfd_create("syzkaller", 0) = 3
[pid  5123] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f84d3074000
[pid  5123] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  5123] munmap(0x7f84d3074000, 4194304) = 0
[pid  5123] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5123] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5123] close(3)                    = 0
[pid  5123] mkdir("./file0", 0777)      = 0
[   45.514409][ T5123] loop0: detected capacity change from 0 to 8192
[   45.533868][ T5123] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   45.546978][ T5123] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[   45.556335][ T5123] REISERFS (device loop0): using ordered data mode
[   45.562857][ T5123] reiserfs: using flush barriers
[   45.568351][ T5123] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   45.585024][ T5123] REISERFS (device loop0): checking transaction log (loop0)
[pid  5123] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC, "") = 0
[pid  5123] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5123] chdir("./file0")            = 0
[pid  5123] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5123] close(4)                    = 0
[pid  5123] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4
[pid  5123] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 5
[pid  5123] ftruncate(5, 33587199)      = 0
[pid  5123] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<<MAP_HUGE_SHIFT, 4, 0) = 0x20000000
[   45.613362][ T5123] REISERFS (device loop0): Using r5 hash to sort names
[   45.620221][ T5123] REISERFS (device loop0): using 3.5.x disk format
[   45.627084][ T5123] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[pid  5123] open(".", O_RDONLY)         = 6
[pid  5123] ioctl(6, FS_IOC_GETVERSION, 0) = -1 EFAULT (Bad address)
[pid  5123] exit_group(0)               = ?
[pid  5123] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5123, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./19", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./19", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x5555558e5620 /* 4 entries */, 32768) = 112
umount2("./19/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./19/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./19/binderfs")                 = 0
umount2("./19/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./19/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./19/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./19/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./19/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x5555558ed660 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555558ed660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./19/file0")                     = 0
getdents64(3, 0x5555558e5620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./19")                           = 0
mkdir("./20", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5125 attached
, child_tidptr=0x5555558e45d0) = 5125
[pid  5125] chdir("./20")               = 0
[pid  5125] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5125] setpgid(0, 0)               = 0
[pid  5125] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5125] write(3, "1000", 4)         = 4
[pid  5125] close(3)                    = 0
[pid  5125] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5125] memfd_create("syzkaller", 0) = 3
[pid  5125] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f84d3074000
[pid  5125] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  5125] munmap(0x7f84d3074000, 4194304) = 0
[pid  5125] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5125] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5125] close(3)                    = 0
[pid  5125] mkdir("./file0", 0777)      = 0
[   45.758218][ T5125] loop0: detected capacity change from 0 to 8192
[   45.767027][ T5125] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   45.780155][ T5125] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[   45.789459][ T5125] REISERFS (device loop0): using ordered data mode
[   45.796114][ T5125] reiserfs: using flush barriers
[   45.801850][ T5125] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   45.818128][ T5125] REISERFS (device loop0): checking transaction log (loop0)
[   45.847130][ T5125] REISERFS (device loop0): Using r5 hash to sort names
[pid  5125] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC, "") = 0
[pid  5125] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5125] chdir("./file0")            = 0
[pid  5125] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5125] close(4)                    = 0
[pid  5125] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4
[pid  5125] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 5
[pid  5125] ftruncate(5, 33587199)      = 0
[pid  5125] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<<MAP_HUGE_SHIFT, 4, 0) = 0x20000000
[pid  5125] open(".", O_RDONLY)         = 6
[pid  5125] ioctl(6, FS_IOC_GETVERSION, 0) = -1 EFAULT (Bad address)
[pid  5125] exit_group(0)               = ?
[pid  5125] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5125, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} ---
umount2("./20", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./20", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x5555558e5620 /* 4 entries */, 32768) = 112
umount2("./20/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./20/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
[   45.854094][ T5125] REISERFS (device loop0): using 3.5.x disk format
[   45.860784][ T5125] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
unlink("./20/binderfs")                 = 0
umount2("./20/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./20/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./20/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./20/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./20/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x5555558ed660 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555558ed660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./20/file0")                     = 0
getdents64(3, 0x5555558e5620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./20")                           = 0
mkdir("./21", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558e45d0) = 5127
./strace-static-x86_64: Process 5127 attached
[pid  5127] chdir("./21")               = 0
[pid  5127] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5127] setpgid(0, 0)               = 0
[pid  5127] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5127] write(3, "1000", 4)         = 4
[pid  5127] close(3)                    = 0
[pid  5127] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5127] memfd_create("syzkaller", 0) = 3
[pid  5127] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f84d3074000
[pid  5127] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  5127] munmap(0x7f84d3074000, 4194304) = 0
[pid  5127] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5127] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5127] close(3)                    = 0
[pid  5127] mkdir("./file0", 0777)      = 0
[   45.989119][ T5127] loop0: detected capacity change from 0 to 8192
[   45.998487][ T5127] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   46.011511][ T5127] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[   46.020971][ T5127] REISERFS (device loop0): using ordered data mode
[   46.027576][ T5127] reiserfs: using flush barriers
[   46.033311][ T5127] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   46.049735][ T5127] REISERFS (device loop0): checking transaction log (loop0)
[pid  5127] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC, "") = 0
[pid  5127] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5127] chdir("./file0")            = 0
[pid  5127] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5127] close(4)                    = 0
[pid  5127] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4
[pid  5127] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 5
[pid  5127] ftruncate(5, 33587199)      = 0
[   46.080055][ T5127] REISERFS (device loop0): Using r5 hash to sort names
[   46.086996][ T5127] REISERFS (device loop0): using 3.5.x disk format
[   46.093706][ T5127] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[pid  5127] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<<MAP_HUGE_SHIFT, 4, 0) = 0x20000000
[pid  5127] open(".", O_RDONLY)         = 6
[pid  5127] ioctl(6, FS_IOC_GETVERSION, 0) = -1 EFAULT (Bad address)
[pid  5127] exit_group(0)               = ?
[pid  5127] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5127, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} ---
umount2("./21", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./21", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x5555558e5620 /* 4 entries */, 32768) = 112
umount2("./21/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./21/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./21/binderfs")                 = 0
umount2("./21/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./21/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./21/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./21/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./21/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x5555558ed660 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555558ed660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./21/file0")                     = 0
getdents64(3, 0x5555558e5620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./21")                           = 0
mkdir("./22", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558e45d0) = 5129
./strace-static-x86_64: Process 5129 attached
[pid  5129] chdir("./22")               = 0
[pid  5129] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5129] setpgid(0, 0)               = 0
[pid  5129] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5129] write(3, "1000", 4)         = 4
[pid  5129] close(3)                    = 0
[pid  5129] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5129] memfd_create("syzkaller", 0) = 3
[pid  5129] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f84d3074000
[pid  5129] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  5129] munmap(0x7f84d3074000, 4194304) = 0
[pid  5129] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5129] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5129] close(3)                    = 0
[pid  5129] mkdir("./file0", 0777)      = 0
[   46.224629][ T5129] loop0: detected capacity change from 0 to 8192
[   46.234292][ T5129] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   46.247263][ T5129] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[   46.256456][ T5129] REISERFS (device loop0): using ordered data mode
[   46.262977][ T5129] reiserfs: using flush barriers
[   46.268513][ T5129] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   46.284799][ T5129] REISERFS (device loop0): checking transaction log (loop0)
[   46.313119][ T5129] REISERFS (device loop0): Using r5 hash to sort names
[pid  5129] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC, "") = 0
[pid  5129] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5129] chdir("./file0")            = 0
[pid  5129] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5129] close(4)                    = 0
[pid  5129] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4
[pid  5129] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 5
[pid  5129] ftruncate(5, 33587199)      = 0
[pid  5129] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<<MAP_HUGE_SHIFT, 4, 0) = 0x20000000
[pid  5129] open(".", O_RDONLY)         = 6
[pid  5129] ioctl(6, FS_IOC_GETVERSION, 0) = -1 EFAULT (Bad address)
[pid  5129] exit_group(0)               = ?
[pid  5129] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5129, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./22", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./22", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x5555558e5620 /* 4 entries */, 32768) = 112
umount2("./22/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./22/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
[   46.319978][ T5129] REISERFS (device loop0): using 3.5.x disk format
[   46.326857][ T5129] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
unlink("./22/binderfs")                 = 0
umount2("./22/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./22/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./22/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./22/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./22/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x5555558ed660 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555558ed660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./22/file0")                     = 0
getdents64(3, 0x5555558e5620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./22")                           = 0
mkdir("./23", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558e45d0) = 5131
./strace-static-x86_64: Process 5131 attached
[pid  5131] chdir("./23")               = 0
[pid  5131] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5131] setpgid(0, 0)               = 0
[pid  5131] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5131] write(3, "1000", 4)         = 4
[pid  5131] close(3)                    = 0
[pid  5131] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5131] memfd_create("syzkaller", 0) = 3
[pid  5131] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f84d3074000
[pid  5131] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  5131] munmap(0x7f84d3074000, 4194304) = 0
[pid  5131] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5131] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5131] close(3)                    = 0
[pid  5131] mkdir("./file0", 0777)      = 0
[   46.453430][ T5131] loop0: detected capacity change from 0 to 8192
[   46.462280][ T5131] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   46.475297][ T5131] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[   46.484494][ T5131] REISERFS (device loop0): using ordered data mode
[   46.491002][ T5131] reiserfs: using flush barriers
[   46.496379][ T5131] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   46.512690][ T5131] REISERFS (device loop0): checking transaction log (loop0)
[   46.542862][ T5131] REISERFS (device loop0): Using r5 hash to sort names
[pid  5131] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC, "") = 0
[pid  5131] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5131] chdir("./file0")            = 0
[pid  5131] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5131] close(4)                    = 0
[pid  5131] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4
[pid  5131] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 5
[pid  5131] ftruncate(5, 33587199)      = 0
[pid  5131] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<<MAP_HUGE_SHIFT, 4, 0) = 0x20000000
[pid  5131] open(".", O_RDONLY)         = 6
[pid  5131] ioctl(6, FS_IOC_GETVERSION, 0) = -1 EFAULT (Bad address)
[pid  5131] exit_group(0)               = ?
[pid  5131] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5131, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} ---
[   46.549722][ T5131] REISERFS (device loop0): using 3.5.x disk format
[   46.556412][ T5131] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./23", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./23", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x5555558e5620 /* 4 entries */, 32768) = 112
umount2("./23/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./23/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./23/binderfs")                 = 0
umount2("./23/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./23/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./23/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./23/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./23/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x5555558ed660 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555558ed660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./23/file0")                     = 0
getdents64(3, 0x5555558e5620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./23")                           = 0
mkdir("./24", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558e45d0) = 5133
./strace-static-x86_64: Process 5133 attached
[pid  5133] chdir("./24")               = 0
[pid  5133] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5133] setpgid(0, 0)               = 0
[pid  5133] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5133] write(3, "1000", 4)         = 4
[pid  5133] close(3)                    = 0
[pid  5133] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5133] memfd_create("syzkaller", 0) = 3
[pid  5133] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f84d3074000
[pid  5133] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  5133] munmap(0x7f84d3074000, 4194304) = 0
[pid  5133] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5133] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5133] close(3)                    = 0
[pid  5133] mkdir("./file0", 0777)      = 0
[   46.691136][ T5133] loop0: detected capacity change from 0 to 8192
[   46.699829][ T5133] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   46.712909][ T5133] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[   46.722292][ T5133] REISERFS (device loop0): using ordered data mode
[   46.728772][ T5133] reiserfs: using flush barriers
[   46.734330][ T5133] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   46.750849][ T5133] REISERFS (device loop0): checking transaction log (loop0)
[   46.779413][ T5133] REISERFS (device loop0): Using r5 hash to sort names
[pid  5133] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC, "") = 0
[pid  5133] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5133] chdir("./file0")            = 0
[pid  5133] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5133] close(4)                    = 0
[pid  5133] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4
[pid  5133] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 5
[pid  5133] ftruncate(5, 33587199)      = 0
[pid  5133] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<<MAP_HUGE_SHIFT, 4, 0) = 0x20000000
[pid  5133] open(".", O_RDONLY)         = 6
[pid  5133] ioctl(6, FS_IOC_GETVERSION, 0) = -1 EFAULT (Bad address)
[pid  5133] exit_group(0)               = ?
[pid  5133] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5133, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./24", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./24", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x5555558e5620 /* 4 entries */, 32768) = 112
umount2("./24/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./24/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./24/binderfs")                 = 0
[   46.786365][ T5133] REISERFS (device loop0): using 3.5.x disk format
[   46.793053][ T5133] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
umount2("./24/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./24/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./24/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./24/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./24/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x5555558ed660 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555558ed660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./24/file0")                     = 0
getdents64(3, 0x5555558e5620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./24")                           = 0
mkdir("./25", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558e45d0) = 5135
./strace-static-x86_64: Process 5135 attached
[pid  5135] chdir("./25")               = 0
[pid  5135] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5135] setpgid(0, 0)               = 0
[pid  5135] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5135] write(3, "1000", 4)         = 4
[pid  5135] close(3)                    = 0
[pid  5135] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5135] memfd_create("syzkaller", 0) = 3
[pid  5135] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f84d3074000
[pid  5135] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  5135] munmap(0x7f84d3074000, 4194304) = 0
[pid  5135] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5135] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5135] close(3)                    = 0
[pid  5135] mkdir("./file0", 0777)      = 0
[   46.930796][ T5135] loop0: detected capacity change from 0 to 8192
[   46.939602][ T5135] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   46.952911][ T5135] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[   46.962283][ T5135] REISERFS (device loop0): using ordered data mode
[   46.968880][ T5135] reiserfs: using flush barriers
[   46.974437][ T5135] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   46.990845][ T5135] REISERFS (device loop0): checking transaction log (loop0)
[   47.020924][ T5135] REISERFS (device loop0): Using r5 hash to sort names
[pid  5135] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC, "") = 0
[pid  5135] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5135] chdir("./file0")            = 0
[pid  5135] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5135] close(4)                    = 0
[pid  5135] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4
[pid  5135] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 5
[pid  5135] ftruncate(5, 33587199)      = 0
[pid  5135] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<<MAP_HUGE_SHIFT, 4, 0) = 0x20000000
[pid  5135] open(".", O_RDONLY)         = 6
[pid  5135] ioctl(6, FS_IOC_GETVERSION, 0) = -1 EFAULT (Bad address)
[pid  5135] exit_group(0)               = ?
[pid  5135] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5135, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./25", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./25", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x5555558e5620 /* 4 entries */, 32768) = 112
umount2("./25/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[   47.027776][ T5135] REISERFS (device loop0): using 3.5.x disk format
[   47.034460][ T5135] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
lstat("./25/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./25/binderfs")                 = 0
umount2("./25/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./25/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./25/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./25/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./25/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x5555558ed660 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555558ed660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./25/file0")                     = 0
getdents64(3, 0x5555558e5620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./25")                           = 0
mkdir("./26", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5137 attached
, child_tidptr=0x5555558e45d0) = 5137
[pid  5137] chdir("./26")               = 0
[pid  5137] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5137] setpgid(0, 0)               = 0
[pid  5137] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5137] write(3, "1000", 4)         = 4
[pid  5137] close(3)                    = 0
[pid  5137] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5137] memfd_create("syzkaller", 0) = 3
[pid  5137] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f84d3074000
[pid  5137] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  5137] munmap(0x7f84d3074000, 4194304) = 0
[pid  5137] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5137] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5137] close(3)                    = 0
[pid  5137] mkdir("./file0", 0777)      = 0
[   47.166202][ T5137] loop0: detected capacity change from 0 to 8192
[   47.174768][ T5137] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   47.187980][ T5137] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[   47.197174][ T5137] REISERFS (device loop0): using ordered data mode
[   47.203700][ T5137] reiserfs: using flush barriers
[   47.209100][ T5137] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   47.225583][ T5137] REISERFS (device loop0): checking transaction log (loop0)
[   47.255221][ T5137] REISERFS (device loop0): Using r5 hash to sort names
[pid  5137] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC, "") = 0
[pid  5137] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5137] chdir("./file0")            = 0
[pid  5137] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5137] close(4)                    = 0
[pid  5137] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4
[pid  5137] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 5
[pid  5137] ftruncate(5, 33587199)      = 0
[pid  5137] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<<MAP_HUGE_SHIFT, 4, 0) = 0x20000000
[pid  5137] open(".", O_RDONLY)         = 6
[pid  5137] ioctl(6, FS_IOC_GETVERSION, 0) = -1 EFAULT (Bad address)
[pid  5137] exit_group(0)               = ?
[pid  5137] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5137, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./26", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./26", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x5555558e5620 /* 4 entries */, 32768) = 112
umount2("./26/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./26/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./26/binderfs")                 = 0
[   47.262078][ T5137] REISERFS (device loop0): using 3.5.x disk format
[   47.268667][ T5137] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
umount2("./26/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./26/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./26/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./26/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./26/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x5555558ed660 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555558ed660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./26/file0")                     = 0
getdents64(3, 0x5555558e5620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./26")                           = 0
mkdir("./27", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558e45d0) = 5139
./strace-static-x86_64: Process 5139 attached
[pid  5139] chdir("./27")               = 0
[pid  5139] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5139] setpgid(0, 0)               = 0
[pid  5139] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5139] write(3, "1000", 4)         = 4
[pid  5139] close(3)                    = 0
[pid  5139] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5139] memfd_create("syzkaller", 0) = 3
[pid  5139] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f84d3074000
[pid  5139] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  5139] munmap(0x7f84d3074000, 4194304) = 0
[pid  5139] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5139] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5139] close(3)                    = 0
[pid  5139] mkdir("./file0", 0777)      = 0
[   47.401767][ T5139] loop0: detected capacity change from 0 to 8192
[   47.410186][ T5139] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   47.423349][ T5139] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[   47.432561][ T5139] REISERFS (device loop0): using ordered data mode
[   47.439054][ T5139] reiserfs: using flush barriers
[   47.444620][ T5139] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   47.460960][ T5139] REISERFS (device loop0): checking transaction log (loop0)
[   47.490751][ T5139] REISERFS (device loop0): Using r5 hash to sort names
[pid  5139] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC, "") = 0
[pid  5139] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5139] chdir("./file0")            = 0
[pid  5139] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5139] close(4)                    = 0
[pid  5139] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4
[pid  5139] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 5
[pid  5139] ftruncate(5, 33587199)      = 0
[pid  5139] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<<MAP_HUGE_SHIFT, 4, 0) = 0x20000000
[pid  5139] open(".", O_RDONLY)         = 6
[pid  5139] ioctl(6, FS_IOC_GETVERSION, 0) = -1 EFAULT (Bad address)
[pid  5139] exit_group(0)               = ?
[pid  5139] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5139, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./27", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./27", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x5555558e5620 /* 4 entries */, 32768) = 112
umount2("./27/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./27/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
[   47.497602][ T5139] REISERFS (device loop0): using 3.5.x disk format
[   47.504412][ T5139] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
unlink("./27/binderfs")                 = 0
umount2("./27/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./27/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./27/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./27/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./27/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x5555558ed660 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555558ed660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./27/file0")                     = 0
getdents64(3, 0x5555558e5620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./27")                           = 0
mkdir("./28", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558e45d0) = 5141
./strace-static-x86_64: Process 5141 attached
[pid  5141] chdir("./28")               = 0
[pid  5141] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5141] setpgid(0, 0)               = 0
[pid  5141] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5141] write(3, "1000", 4)         = 4
[pid  5141] close(3)                    = 0
[pid  5141] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5141] memfd_create("syzkaller", 0) = 3
[pid  5141] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f84d3074000
[pid  5141] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  5141] munmap(0x7f84d3074000, 4194304) = 0
[pid  5141] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5141] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5141] close(3)                    = 0
[pid  5141] mkdir("./file0", 0777)      = 0
[   47.633739][ T5141] loop0: detected capacity change from 0 to 8192
[   47.642685][ T5141] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   47.655631][ T5141] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[   47.664875][ T5141] REISERFS (device loop0): using ordered data mode
[   47.671388][ T5141] reiserfs: using flush barriers
[   47.676833][ T5141] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   47.693136][ T5141] REISERFS (device loop0): checking transaction log (loop0)
[   47.723162][ T5141] REISERFS (device loop0): Using r5 hash to sort names
[pid  5141] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC, "") = 0
[pid  5141] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5141] chdir("./file0")            = 0
[pid  5141] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5141] close(4)                    = 0
[pid  5141] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4
[pid  5141] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 5
[pid  5141] ftruncate(5, 33587199)      = 0
[pid  5141] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<<MAP_HUGE_SHIFT, 4, 0) = 0x20000000
[pid  5141] open(".", O_RDONLY)         = 6
[pid  5141] ioctl(6, FS_IOC_GETVERSION, 0) = -1 EFAULT (Bad address)
[pid  5141] exit_group(0)               = ?
[pid  5141] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5141, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./28", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./28", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x5555558e5620 /* 4 entries */, 32768) = 112
[   47.730137][ T5141] REISERFS (device loop0): using 3.5.x disk format
[   47.736983][ T5141] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
umount2("./28/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./28/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./28/binderfs")                 = 0
umount2("./28/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./28/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./28/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./28/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./28/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x5555558ed660 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555558ed660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./28/file0")                     = 0
getdents64(3, 0x5555558e5620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./28")                           = 0
mkdir("./29", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558e45d0) = 5143
./strace-static-x86_64: Process 5143 attached
[pid  5143] chdir("./29")               = 0
[pid  5143] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5143] setpgid(0, 0)               = 0
[pid  5143] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5143] write(3, "1000", 4)         = 4
[pid  5143] close(3)                    = 0
[pid  5143] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5143] memfd_create("syzkaller", 0) = 3
[pid  5143] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f84d3074000
[pid  5143] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  5143] munmap(0x7f84d3074000, 4194304) = 0
[pid  5143] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5143] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5143] close(3)                    = 0
[pid  5143] mkdir("./file0", 0777)      = 0
[   47.864820][ T5143] loop0: detected capacity change from 0 to 8192
[   47.873173][ T5143] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   47.886320][ T5143] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[   47.895525][ T5143] REISERFS (device loop0): using ordered data mode
[   47.902098][ T5143] reiserfs: using flush barriers
[   47.907529][ T5143] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   47.923800][ T5143] REISERFS (device loop0): checking transaction log (loop0)
[   47.953342][ T5143] REISERFS (device loop0): Using r5 hash to sort names
[pid  5143] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC, "") = 0
[pid  5143] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5143] chdir("./file0")            = 0
[pid  5143] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5143] close(4)                    = 0
[pid  5143] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4
[pid  5143] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 5
[pid  5143] ftruncate(5, 33587199)      = 0
[pid  5143] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<<MAP_HUGE_SHIFT, 4, 0) = 0x20000000
[pid  5143] open(".", O_RDONLY)         = 6
[pid  5143] ioctl(6, FS_IOC_GETVERSION, 0) = -1 EFAULT (Bad address)
[pid  5143] exit_group(0)               = ?
[pid  5143] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5143, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./29", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./29", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x5555558e5620 /* 4 entries */, 32768) = 112
umount2("./29/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./29/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./29/binderfs")                 = 0
[   47.960183][ T5143] REISERFS (device loop0): using 3.5.x disk format
[   47.966872][ T5143] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
umount2("./29/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./29/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./29/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./29/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./29/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x5555558ed660 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555558ed660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./29/file0")                     = 0
getdents64(3, 0x5555558e5620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./29")                           = 0
mkdir("./30", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5145 attached
, child_tidptr=0x5555558e45d0) = 5145
[pid  5145] chdir("./30")               = 0
[pid  5145] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5145] setpgid(0, 0)               = 0
[pid  5145] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5145] write(3, "1000", 4)         = 4
[pid  5145] close(3)                    = 0
[pid  5145] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5145] memfd_create("syzkaller", 0) = 3
[pid  5145] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f84d3074000
[pid  5145] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  5145] munmap(0x7f84d3074000, 4194304) = 0
[pid  5145] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5145] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5145] close(3)                    = 0
[pid  5145] mkdir("./file0", 0777)      = 0
[   48.097138][ T5145] loop0: detected capacity change from 0 to 8192
[   48.105779][ T5145] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   48.118797][ T5145] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[   48.128610][ T5145] REISERFS (device loop0): using ordered data mode
[   48.135125][ T5145] reiserfs: using flush barriers
[   48.140511][ T5145] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   48.156862][ T5145] REISERFS (device loop0): checking transaction log (loop0)
[   48.187013][ T5145] REISERFS (device loop0): Using r5 hash to sort names
[pid  5145] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC, "") = 0
[pid  5145] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5145] chdir("./file0")            = 0
[pid  5145] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5145] close(4)                    = 0
[pid  5145] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4
[pid  5145] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 5
[pid  5145] ftruncate(5, 33587199)      = 0
[pid  5145] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<<MAP_HUGE_SHIFT, 4, 0) = 0x20000000
[pid  5145] open(".", O_RDONLY)         = 6
[pid  5145] ioctl(6, FS_IOC_GETVERSION, 0) = -1 EFAULT (Bad address)
[pid  5145] exit_group(0)               = ?
[pid  5145] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5145, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./30", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./30", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x5555558e5620 /* 4 entries */, 32768) = 112
umount2("./30/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./30/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./30/binderfs")                 = 0
[   48.193964][ T5145] REISERFS (device loop0): using 3.5.x disk format
[   48.201241][ T5145] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
umount2("./30/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./30/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./30/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./30/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./30/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x5555558ed660 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555558ed660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./30/file0")                     = 0
getdents64(3, 0x5555558e5620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./30")                           = 0
mkdir("./31", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558e45d0) = 5147
./strace-static-x86_64: Process 5147 attached
[pid  5147] chdir("./31")               = 0
[pid  5147] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5147] setpgid(0, 0)               = 0
[pid  5147] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5147] write(3, "1000", 4)         = 4
[pid  5147] close(3)                    = 0
[pid  5147] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5147] memfd_create("syzkaller", 0) = 3
[pid  5147] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f84d3074000
[pid  5147] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  5147] munmap(0x7f84d3074000, 4194304) = 0
[pid  5147] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5147] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5147] close(3)                    = 0
[pid  5147] mkdir("./file0", 0777)      = 0
[   48.331906][ T5147] loop0: detected capacity change from 0 to 8192
[   48.341131][ T5147] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   48.354142][ T5147] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[   48.363358][ T5147] REISERFS (device loop0): using ordered data mode
[   48.369848][ T5147] reiserfs: using flush barriers
[   48.375486][ T5147] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   48.391831][ T5147] REISERFS (device loop0): checking transaction log (loop0)
[   48.420410][ T5147] REISERFS (device loop0): Using r5 hash to sort names
[pid  5147] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC, "") = 0
[pid  5147] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5147] chdir("./file0")            = 0
[pid  5147] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5147] close(4)                    = 0
[pid  5147] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4
[pid  5147] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 5
[pid  5147] ftruncate(5, 33587199)      = 0
[pid  5147] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<<MAP_HUGE_SHIFT, 4, 0) = 0x20000000
[pid  5147] open(".", O_RDONLY)         = 6
[pid  5147] ioctl(6, FS_IOC_GETVERSION, 0) = -1 EFAULT (Bad address)
[pid  5147] exit_group(0)               = ?
[pid  5147] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5147, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./31", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./31", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x5555558e5620 /* 4 entries */, 32768) = 112
umount2("./31/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./31/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./31/binderfs")                 = 0
[   48.427282][ T5147] REISERFS (device loop0): using 3.5.x disk format
[   48.434083][ T5147] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
umount2("./31/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./31/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./31/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./31/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./31/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x5555558ed660 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555558ed660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./31/file0")                     = 0
getdents64(3, 0x5555558e5620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./31")                           = 0
mkdir("./32", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558e45d0) = 5149
./strace-static-x86_64: Process 5149 attached
[pid  5149] chdir("./32")               = 0
[pid  5149] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5149] setpgid(0, 0)               = 0
[pid  5149] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5149] write(3, "1000", 4)         = 4
[pid  5149] close(3)                    = 0
[pid  5149] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5149] memfd_create("syzkaller", 0) = 3
[pid  5149] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f84d3074000
[pid  5149] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  5149] munmap(0x7f84d3074000, 4194304) = 0
[pid  5149] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5149] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5149] close(3)                    = 0
[pid  5149] mkdir("./file0", 0777)      = 0
[   48.564524][ T5149] loop0: detected capacity change from 0 to 8192
[   48.573457][ T5149] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   48.586490][ T5149] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[   48.595679][ T5149] REISERFS (device loop0): using ordered data mode
[   48.602210][ T5149] reiserfs: using flush barriers
[   48.607701][ T5149] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   48.623998][ T5149] REISERFS (device loop0): checking transaction log (loop0)
[   48.652880][ T5149] REISERFS (device loop0): Using r5 hash to sort names
[pid  5149] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC, "") = 0
[pid  5149] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5149] chdir("./file0")            = 0
[pid  5149] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5149] close(4)                    = 0
[pid  5149] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4
[pid  5149] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 5
[pid  5149] ftruncate(5, 33587199)      = 0
[pid  5149] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<<MAP_HUGE_SHIFT, 4, 0) = 0x20000000
[pid  5149] open(".", O_RDONLY)         = 6
[pid  5149] ioctl(6, FS_IOC_GETVERSION, 0) = -1 EFAULT (Bad address)
[pid  5149] exit_group(0)               = ?
[pid  5149] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5149, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} ---
umount2("./32", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./32", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x5555558e5620 /* 4 entries */, 32768) = 112
umount2("./32/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./32/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./32/binderfs")                 = 0
[   48.659719][ T5149] REISERFS (device loop0): using 3.5.x disk format
[   48.666406][ T5149] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
umount2("./32/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./32/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./32/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./32/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./32/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x5555558ed660 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555558ed660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./32/file0")                     = 0
getdents64(3, 0x5555558e5620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./32")                           = 0
mkdir("./33", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558e45d0) = 5151
./strace-static-x86_64: Process 5151 attached
[pid  5151] chdir("./33")               = 0
[pid  5151] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5151] setpgid(0, 0)               = 0
[pid  5151] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5151] write(3, "1000", 4)         = 4
[pid  5151] close(3)                    = 0
[pid  5151] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5151] memfd_create("syzkaller", 0) = 3
[pid  5151] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f84d3074000
[pid  5151] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  5151] munmap(0x7f84d3074000, 4194304) = 0
[pid  5151] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5151] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5151] close(3)                    = 0
[pid  5151] mkdir("./file0", 0777)      = 0
[   48.792081][ T5151] loop0: detected capacity change from 0 to 8192
[   48.801381][ T5151] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   48.814622][ T5151] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[   48.823827][ T5151] REISERFS (device loop0): using ordered data mode
[   48.830318][ T5151] reiserfs: using flush barriers
[   48.835908][ T5151] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   48.852204][ T5151] REISERFS (device loop0): checking transaction log (loop0)
[   48.880123][ T5151] REISERFS (device loop0): Using r5 hash to sort names
[pid  5151] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC, "") = 0
[pid  5151] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5151] chdir("./file0")            = 0
[pid  5151] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5151] close(4)                    = 0
[pid  5151] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4
[pid  5151] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 5
[pid  5151] ftruncate(5, 33587199)      = 0
[pid  5151] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<<MAP_HUGE_SHIFT, 4, 0) = 0x20000000
[   48.887034][ T5151] REISERFS (device loop0): using 3.5.x disk format
[   48.893746][ T5151] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[   48.944569][ T5151] 
[   48.946909][ T5151] ======================================================
[   48.953900][ T5151] WARNING: possible circular locking dependency detected
[   48.960894][ T5151] 6.3.0-rc4-syzkaller-00025-g3a93e40326c8 #0 Not tainted
[   48.967893][ T5151] ------------------------------------------------------
[   48.974972][ T5151] syz-executor305/5151 is trying to acquire lock:
[   48.981359][ T5151] ffff8881453f0090 (&sbi->lock){+.+.}-{3:3}, at: reiserfs_write_lock+0x79/0x100
[   48.990404][ T5151] 
[   48.990404][ T5151] but task is already holding lock:
[   48.997742][ T5151] ffff88801fb42558 (sb_pagefaults){.+.+}-{0:0}, at: do_page_mkwrite+0x19b/0x680
[   49.006762][ T5151] 
[   49.006762][ T5151] which lock already depends on the new lock.
[   49.006762][ T5151] 
[   49.017256][ T5151] 
[   49.017256][ T5151] the existing dependency chain (in reverse order) is:
[   49.026334][ T5151] 
[   49.026334][ T5151] -> #2 (sb_pagefaults){.+.+}-{0:0}:
[   49.033783][ T5151]        filemap_page_mkwrite+0x16e/0x780
[   49.039496][ T5151]        do_page_mkwrite+0x19b/0x680
[   49.044763][ T5151]        do_wp_page+0x356/0x3610
[   49.049682][ T5151]        __handle_mm_fault+0x19a1/0x3e60
[   49.055295][ T5151]        handle_mm_fault+0x2ba/0x9c0
[   49.060562][ T5151]        do_user_addr_fault+0x475/0x1230
[   49.066179][ T5151]        exc_page_fault+0x98/0x170
[   49.071272][ T5151]        asm_exc_page_fault+0x26/0x30
[   49.076628][ T5151] 
[   49.076628][ T5151] -> #1 (&mm->mmap_lock){++++}-{3:3}:
[   49.084159][ T5151]        __might_fault+0x10c/0x180
[   49.089250][ T5151]        reiserfs_ioctl+0x1d2/0x330
[   49.094427][ T5151]        __x64_sys_ioctl+0x197/0x210
[   49.099694][ T5151]        do_syscall_64+0x39/0xb0
[   49.104612][ T5151]        entry_SYSCALL_64_after_hwframe+0x63/0xcd
[   49.111011][ T5151] 
[   49.111011][ T5151] -> #0 (&sbi->lock){+.+.}-{3:3}:
[   49.118196][ T5151]        __lock_acquire+0x2ec7/0x5d40
[   49.123551][ T5151]        lock_acquire+0x1af/0x520
[   49.128558][ T5151]        __mutex_lock+0x12f/0x1350
[   49.133650][ T5151]        reiserfs_write_lock+0x79/0x100
[   49.139182][ T5151]        reiserfs_dirty_inode+0xd2/0x260
[   49.144798][ T5151]        __mark_inode_dirty+0x1e0/0xd60
[   49.150350][ T5151]        generic_update_time+0x21b/0x2b0
[   49.155967][ T5151]        file_update_time+0x224/0x270
[   49.161323][ T5151]        filemap_page_mkwrite+0x280/0x780
[   49.167030][ T5151]        do_page_mkwrite+0x19b/0x680
[   49.172297][ T5151]        do_wp_page+0x356/0x3610
[   49.177303][ T5151]        __handle_mm_fault+0x19a1/0x3e60
[   49.182917][ T5151]        handle_mm_fault+0x2ba/0x9c0
[   49.188183][ T5151]        do_user_addr_fault+0x475/0x1230
[   49.193800][ T5151]        exc_page_fault+0x98/0x170
[   49.198892][ T5151]        asm_exc_page_fault+0x26/0x30
[   49.204247][ T5151] 
[   49.204247][ T5151] other info that might help us debug this:
[   49.204247][ T5151] 
[   49.214450][ T5151] Chain exists of:
[   49.214450][ T5151]   &sbi->lock --> &mm->mmap_lock --> sb_pagefaults
[   49.214450][ T5151] 
[   49.226767][ T5151]  Possible unsafe locking scenario:
[   49.226767][ T5151] 
[   49.234195][ T5151]        CPU0                    CPU1
[   49.239537][ T5151]        ----                    ----
[   49.244883][ T5151]   lock(sb_pagefaults);
[   49.249106][ T5151]                                lock(&mm->mmap_lock);
[   49.255953][ T5151]                                lock(sb_pagefaults);
[   49.262693][ T5151]   lock(&sbi->lock);
[   49.266655][ T5151] 
[   49.266655][ T5151]  *** DEADLOCK ***
[   49.266655][ T5151] 
[   49.274778][ T5151] 2 locks held by syz-executor305/5151:
[   49.280300][ T5151]  #0: ffff88801d732698 (&mm->mmap_lock){++++}-{3:3}, at: do_user_addr_fault+0x276/0x1230
[   49.290201][ T5151]  #1: ffff88801fb42558 (sb_pagefaults){.+.+}-{0:0}, at: do_page_mkwrite+0x19b/0x680
[   49.299658][ T5151] 
[   49.299658][ T5151] stack backtrace:
[   49.305521][ T5151] CPU: 0 PID: 5151 Comm: syz-executor305 Not tainted 6.3.0-rc4-syzkaller-00025-g3a93e40326c8 #0
[   49.315913][ T5151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/17/2023
[   49.325957][ T5151] Call Trace:
[   49.329218][ T5151]  <TASK>
[   49.332131][ T5151]  dump_stack_lvl+0xd9/0x150
[   49.336709][ T5151]  check_noncircular+0x25f/0x2e0
[   49.341627][ T5151]  ? print_circular_bug+0x5c0/0x5c0
[   49.346810][ T5151]  ? __lock_acquire+0x18bc/0x5d40
[   49.351815][ T5151]  __lock_acquire+0x2ec7/0x5d40
[   49.356650][ T5151]  ? lockdep_hardirqs_on_prepare+0x410/0x410
[   49.362613][ T5151]  ? mark_lock.part.0+0xee/0x1970
[   49.367618][ T5151]  ? find_held_lock+0x2d/0x110
[   49.372369][ T5151]  ? print_usage_bug.part.0+0x660/0x660
[   49.377896][ T5151]  lock_acquire+0x1af/0x520
[   49.382379][ T5151]  ? reiserfs_write_lock+0x79/0x100
[   49.387563][ T5151]  ? lock_release+0x670/0x670
[   49.392224][ T5151]  __mutex_lock+0x12f/0x1350
[   49.396797][ T5151]  ? reiserfs_write_lock+0x79/0x100
[   49.401976][ T5151]  ? reiserfs_write_lock+0x79/0x100
[   49.407175][ T5151]  ? mutex_lock_io_nested+0x11a0/0x11a0
[   49.412709][ T5151]  ? find_held_lock+0x2d/0x110
[   49.417464][ T5151]  ? current_time+0x79/0x2c0
[   49.422040][ T5151]  reiserfs_write_lock+0x79/0x100
[   49.427049][ T5151]  reiserfs_dirty_inode+0xd2/0x260
[   49.432157][ T5151]  ? reiserfs_unfreeze+0xa0/0xa0
[   49.437076][ T5151]  ? lockdep_hardirqs_on+0x7d/0x100
[   49.442261][ T5151]  ? ktime_get_coarse_real_ts64+0x1bb/0x200
[   49.448134][ T5151]  ? ktime_get_coarse_real_ts64+0x15e/0x200
[   49.454009][ T5151]  ? reiserfs_unfreeze+0xa0/0xa0
[   49.458925][ T5151]  __mark_inode_dirty+0x1e0/0xd60
[   49.463937][ T5151]  generic_update_time+0x21b/0x2b0
[   49.469035][ T5151]  file_update_time+0x224/0x270
[   49.473870][ T5151]  ? new_inode+0x280/0x280
[   49.478271][ T5151]  filemap_page_mkwrite+0x280/0x780
[   49.483459][ T5151]  do_page_mkwrite+0x19b/0x680
[   49.488221][ T5151]  do_wp_page+0x356/0x3610
[   49.492620][ T5151]  ? lock_release+0x670/0x670
[   49.497281][ T5151]  ? finish_mkwrite_fault+0x3d0/0x3d0
[   49.502633][ T5151]  ? do_raw_spin_lock+0x124/0x2b0
[   49.507638][ T5151]  ? spin_bug+0x1c0/0x1c0
[   49.511951][ T5151]  __handle_mm_fault+0x19a1/0x3e60
[   49.517044][ T5151]  ? vm_iomap_memory+0x190/0x190
[   49.521968][ T5151]  handle_mm_fault+0x2ba/0x9c0
[   49.526731][ T5151]  do_user_addr_fault+0x475/0x1230
[   49.531827][ T5151]  ? rcu_is_watching+0x12/0xb0
[   49.536573][ T5151]  exc_page_fault+0x98/0x170
[   49.541148][ T5151]  asm_exc_page_fault+0x26/0x30
[   49.546068][ T5151] RIP: 0033:0x7f84db47f50f
[   49.550462][ T5151] Code: 02 4c 8b 0d 53 5c 0b 00 50 ba 00 00 60 00 be 00 00 00 20 bf 09 00 00 00 6a 00 31 c0 e8 da 24 04 00 31 c9 31 d2 be 40 00 00 20 <66> c7 04 25 40 00 00 20 2e 00 bf 02 00 00 00 31 c0 e8 bb 24 04 00
[   49.570063][ T5151] RSP: 002b:00007ffe76419210 EFLAGS: 00010246
[   49.576112][ T5151] RAX: 0000000020000000 RBX: 000000000000ba91 RCX: 0000000000000000
[   49.584064][ T5151] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000020000000
[pid  5151] open(".", O_RDONLY)         = 6
[pid  5151] ioctl(6, FS_IOC_GETVERSION, 0) = -1 EFAULT (Bad address)
[pid  5151] exit_group(0)               = ?
[pid  5151] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5151, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./33", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./33", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x5555558e5620 /* 4 entries */, 32768) = 112
umount2("./33/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./33/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./33/binderfs")                 = 0
umount2("./33/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./33/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./33/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./33/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./33/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
[   49.592018][ T5151] RBP: 0000000000000000 R08: 0000000000000004 R09: 0000000000000000
[   49.599967][ T5151] R10: 0000000004002011 R11: 0000000000000246 R12: 00007ffe7641923c
[   49.607920][ T5151] R13: 00007ffe76419270 R14: 00007ffe76419250 R15: 0000000000000021
[   49.615877][ T5151]  </TASK>
getdents64(4, 0x5555558ed660 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555558ed660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./33/file0")                     = 0
getdents64(3, 0x5555558e5620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./33")                           = 0
mkdir("./34", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558e45d0) = 5153
./strace-static-x86_64: Process 5153 attached
[pid  5153] chdir("./34")               = 0
[pid  5153] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5153] setpgid(0, 0)               = 0
[pid  5153] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5153] write(3, "1000", 4)         = 4
[pid  5153] close(3)                    = 0
[pid  5153] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5153] memfd_create("syzkaller", 0) = 3
[pid  5153] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f84d3074000
[pid  5153] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  5153] munmap(0x7f84d3074000, 4194304) = 0
[pid  5153] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5153] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5153] close(3)                    = 0
[pid  5153] mkdir("./file0", 0777)      = 0
[   49.683195][ T5153] loop0: detected capacity change from 0 to 8192
[   49.691262][ T5153] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   49.704363][ T5153] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[   49.713601][ T5153] REISERFS (device loop0): using ordered data mode
[   49.720094][ T5153] reiserfs: using flush barriers
[pid  5153] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC, "") = 0
[   49.725604][ T5153] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   49.741904][ T5153] REISERFS (device loop0): checking transaction log (loop0)
[   49.762286][ T5153] REISERFS (device loop0): Using r5 hash to sort names
[   49.769121][ T5153] REISERFS (device loop0): using 3.5.x disk format
[pid  5153] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5153] chdir("./file0")            = 0
[pid  5153] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5153] close(4)                    = 0
[pid  5153] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4
[pid  5153] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 5
[pid  5153] ftruncate(5, 33587199)      = 0
[pid  5153] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<<MAP_HUGE_SHIFT, 4, 0) = 0x20000000
[pid  5153] open(".", O_RDONLY)         = 6
[pid  5153] ioctl(6, FS_IOC_GETVERSION, 0) = -1 EFAULT (Bad address)
[pid  5153] exit_group(0)               = ?
[pid  5153] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5153, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./34", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./34", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x5555558e5620 /* 4 entries */, 32768) = 112
umount2("./34/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./34/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./34/binderfs")                 = 0
[   49.775791][ T5153] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
umount2("./34/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./34/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./34/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./34/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./34/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x5555558ed660 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555558ed660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./34/file0")                     = 0
getdents64(3, 0x5555558e5620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./34")                           = 0
mkdir("./35", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5155 attached
, child_tidptr=0x5555558e45d0) = 5155
[pid  5155] chdir("./35")               = 0
[pid  5155] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5155] setpgid(0, 0)               = 0
[pid  5155] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5155] write(3, "1000", 4)         = 4
[pid  5155] close(3)                    = 0
[pid  5155] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5155] memfd_create("syzkaller", 0) = 3
[pid  5155] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f84d3074000
[pid  5155] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  5155] munmap(0x7f84d3074000, 4194304) = 0
[pid  5155] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5155] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5155] close(3)                    = 0
[pid  5155] mkdir("./file0", 0777)      = 0
[   49.868775][ T5155] loop0: detected capacity change from 0 to 8192
[   49.876658][ T5155] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   49.889937][ T5155] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[   49.899215][ T5155] REISERFS (device loop0): using ordered data mode
[   49.905756][ T5155] reiserfs: using flush barriers
[   49.911050][ T5155] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   49.927275][ T5155] REISERFS (device loop0): checking transaction log (loop0)
[   49.949115][ T5155] REISERFS (device loop0): Using r5 hash to sort names
[   49.955966][ T5155] REISERFS (device loop0): using 3.5.x disk format
[pid  5155] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC, "") = 0
[pid  5155] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5155] chdir("./file0")            = 0
[pid  5155] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5155] close(4)                    = 0
[pid  5155] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4
[pid  5155] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 5
[pid  5155] ftruncate(5, 33587199)      = 0
[pid  5155] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<<MAP_HUGE_SHIFT, 4, 0) = 0x20000000
[pid  5155] open(".", O_RDONLY)         = 6
[pid  5155] ioctl(6, FS_IOC_GETVERSION, 0) = -1 EFAULT (Bad address)
[pid  5155] exit_group(0)               = ?
[pid  5155] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5155, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./35", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./35", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x5555558e5620 /* 4 entries */, 32768) = 112
umount2("./35/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./35/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./35/binderfs")                 = 0
[   49.962622][ T5155] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
umount2("./35/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./35/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./35/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./35/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./35/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x5555558ed660 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555558ed660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./35/file0")                     = 0
getdents64(3, 0x5555558e5620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./35")                           = 0
mkdir("./36", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558e45d0) = 5157
./strace-static-x86_64: Process 5157 attached
[pid  5157] chdir("./36")               = 0
[pid  5157] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5157] setpgid(0, 0)               = 0
[pid  5157] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5157] write(3, "1000", 4)         = 4
[pid  5157] close(3)                    = 0
[pid  5157] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5157] memfd_create("syzkaller", 0) = 3
[pid  5157] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f84d3074000
[pid  5157] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  5157] munmap(0x7f84d3074000, 4194304) = 0
[pid  5157] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5157] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5157] close(3)                    = 0
[pid  5157] mkdir("./file0", 0777)      = 0
[   50.054374][ T5157] loop0: detected capacity change from 0 to 8192
[   50.062592][ T5157] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   50.075562][ T5157] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[   50.084732][ T5157] REISERFS (device loop0): using ordered data mode
[   50.091259][ T5157] reiserfs: using flush barriers
[   50.096522][ T5157] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   50.112735][ T5157] REISERFS (device loop0): checking transaction log (loop0)
[   50.134894][ T5157] REISERFS (device loop0): Using r5 hash to sort names
[   50.141765][ T5157] REISERFS (device loop0): using 3.5.x disk format
[pid  5157] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC, "") = 0
[pid  5157] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5157] chdir("./file0")            = 0
[pid  5157] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5157] close(4)                    = 0
[pid  5157] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4
[pid  5157] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 5
[pid  5157] ftruncate(5, 33587199)      = 0
[pid  5157] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<<MAP_HUGE_SHIFT, 4, 0) = 0x20000000
[pid  5157] open(".", O_RDONLY)         = 6
[pid  5157] ioctl(6, FS_IOC_GETVERSION, 0) = -1 EFAULT (Bad address)
[pid  5157] exit_group(0)               = ?
[pid  5157] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5157, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./36", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./36", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x5555558e5620 /* 4 entries */, 32768) = 112
umount2("./36/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./36/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./36/binderfs")                 = 0
[   50.148384][ T5157] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
umount2("./36/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./36/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./36/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./36/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./36/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x5555558ed660 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555558ed660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./36/file0")                     = 0
getdents64(3, 0x5555558e5620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./36")                           = 0
mkdir("./37", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5159 attached
, child_tidptr=0x5555558e45d0) = 5159
[pid  5159] chdir("./37")               = 0
[pid  5159] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5159] setpgid(0, 0)               = 0
[pid  5159] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5159] write(3, "1000", 4)         = 4
[pid  5159] close(3)                    = 0
[pid  5159] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5159] memfd_create("syzkaller", 0) = 3
[pid  5159] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f84d3074000
[pid  5159] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  5159] munmap(0x7f84d3074000, 4194304) = 0
[pid  5159] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5159] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5159] close(3)                    = 0
[pid  5159] mkdir("./file0", 0777)      = 0
[   50.245018][ T5159] loop0: detected capacity change from 0 to 8192
[   50.253245][ T5159] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   50.266446][ T5159] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[   50.275670][ T5159] REISERFS (device loop0): using ordered data mode
[   50.282193][ T5159] reiserfs: using flush barriers
[   50.287460][ T5159] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   50.303731][ T5159] REISERFS (device loop0): checking transaction log (loop0)
[   50.328642][ T5159] REISERFS (device loop0): Using r5 hash to sort names
[   50.335566][ T5159] REISERFS (device loop0): using 3.5.x disk format
[pid  5159] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC, "") = 0
[pid  5159] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5159] chdir("./file0")            = 0
[pid  5159] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5159] close(4)                    = 0
[pid  5159] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4
[pid  5159] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 5
[pid  5159] ftruncate(5, 33587199)      = 0
[pid  5159] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<<MAP_HUGE_SHIFT, 4, 0) = 0x20000000
[pid  5159] open(".", O_RDONLY)         = 6
[pid  5159] ioctl(6, FS_IOC_GETVERSION, 0) = -1 EFAULT (Bad address)
[pid  5159] exit_group(0)               = ?
[pid  5159] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5159, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./37", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./37", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x5555558e5620 /* 4 entries */, 32768) = 112
umount2("./37/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./37/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./37/binderfs")                 = 0
[   50.343139][ T5159] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
umount2("./37/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./37/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./37/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./37/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./37/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x5555558ed660 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555558ed660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./37/file0")                     = 0
getdents64(3, 0x5555558e5620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./37")                           = 0
mkdir("./38", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558e45d0) = 5161
./strace-static-x86_64: Process 5161 attached
[pid  5161] chdir("./38")               = 0
[pid  5161] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5161] setpgid(0, 0)               = 0
[pid  5161] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5161] write(3, "1000", 4)         = 4
[pid  5161] close(3)                    = 0
[pid  5161] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5161] memfd_create("syzkaller", 0) = 3
[pid  5161] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f84d3074000
[pid  5161] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  5161] munmap(0x7f84d3074000, 4194304) = 0
[pid  5161] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5161] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5161] close(3)                    = 0
[pid  5161] mkdir("./file0", 0777)      = 0
[   50.432610][ T5161] loop0: detected capacity change from 0 to 8192
[   50.441016][ T5161] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   50.454287][ T5161] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[   50.463441][ T5161] REISERFS (device loop0): using ordered data mode
[   50.469928][ T5161] reiserfs: using flush barriers
[pid  5161] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC, "") = 0
[   50.475246][ T5161] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   50.491383][ T5161] REISERFS (device loop0): checking transaction log (loop0)
[   50.511706][ T5161] REISERFS (device loop0): Using r5 hash to sort names
[   50.518542][ T5161] REISERFS (device loop0): using 3.5.x disk format
[pid  5161] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5161] chdir("./file0")            = 0
[pid  5161] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5161] close(4)                    = 0
[pid  5161] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4
[pid  5161] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 5
[pid  5161] ftruncate(5, 33587199)      = 0
[pid  5161] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<<MAP_HUGE_SHIFT, 4, 0) = 0x20000000
[pid  5161] open(".", O_RDONLY)         = 6
[pid  5161] ioctl(6, FS_IOC_GETVERSION, 0) = -1 EFAULT (Bad address)
[pid  5161] exit_group(0)               = ?
[pid  5161] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5161, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./38", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./38", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x5555558e5620 /* 4 entries */, 32768) = 112
umount2("./38/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./38/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./38/binderfs")                 = 0
[   50.525180][ T5161] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
umount2("./38/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./38/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./38/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./38/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./38/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x5555558ed660 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555558ed660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./38/file0")                     = 0
getdents64(3, 0x5555558e5620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./38")                           = 0
mkdir("./39", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5163 attached
 <unfinished ...>
[pid  5163] chdir("./39" <unfinished ...>
[pid  5083] <... clone resumed>, child_tidptr=0x5555558e45d0) = 5163
[pid  5163] <... chdir resumed>)        = 0
[pid  5163] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5163] setpgid(0, 0)               = 0
[pid  5163] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5163] write(3, "1000", 4)         = 4
[pid  5163] close(3)                    = 0
[pid  5163] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5163] memfd_create("syzkaller", 0) = 3
[pid  5163] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f84d3074000
[pid  5163] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  5163] munmap(0x7f84d3074000, 4194304) = 0
[pid  5163] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5163] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5163] close(3)                    = 0
[pid  5163] mkdir("./file0", 0777)      = 0
[   50.625416][ T5163] loop0: detected capacity change from 0 to 8192
[   50.633720][ T5163] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   50.646827][ T5163] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[   50.656028][ T5163] REISERFS (device loop0): using ordered data mode
[   50.662567][ T5163] reiserfs: using flush barriers
[pid  5163] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC, "") = 0
[   50.667913][ T5163] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   50.684131][ T5163] REISERFS (device loop0): checking transaction log (loop0)
[   50.704463][ T5163] REISERFS (device loop0): Using r5 hash to sort names
[   50.711312][ T5163] REISERFS (device loop0): using 3.5.x disk format
[pid  5163] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5163] chdir("./file0")            = 0
[pid  5163] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5163] close(4)                    = 0
[pid  5163] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4
[pid  5163] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 5
[pid  5163] ftruncate(5, 33587199)      = 0
[pid  5163] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<<MAP_HUGE_SHIFT, 4, 0) = 0x20000000
[pid  5163] open(".", O_RDONLY)         = 6
[pid  5163] ioctl(6, FS_IOC_GETVERSION, 0) = -1 EFAULT (Bad address)
[pid  5163] exit_group(0)               = ?
[pid  5163] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5163, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./39", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./39", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x5555558e5620 /* 4 entries */, 32768) = 112
umount2("./39/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./39/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./39/binderfs")                 = 0
[   50.717876][ T5163] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
umount2("./39/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./39/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./39/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./39/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./39/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x5555558ed660 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555558ed660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./39/file0")                     = 0
getdents64(3, 0x5555558e5620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./39")                           = 0
mkdir("./40", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5165 attached
, child_tidptr=0x5555558e45d0) = 5165
[pid  5165] chdir("./40")               = 0
[pid  5165] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5165] setpgid(0, 0)               = 0
[pid  5165] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5165] write(3, "1000", 4)         = 4
[pid  5165] close(3)                    = 0
[pid  5165] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5165] memfd_create("syzkaller", 0) = 3
[pid  5165] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f84d3074000
[pid  5165] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  5165] munmap(0x7f84d3074000, 4194304) = 0
[pid  5165] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5165] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5165] close(3)                    = 0
[pid  5165] mkdir("./file0", 0777)      = 0
[   50.810802][ T5165] loop0: detected capacity change from 0 to 8192
[   50.818782][ T5165] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   50.831947][ T5165] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[   50.841439][ T5165] REISERFS (device loop0): using ordered data mode
[   50.848012][ T5165] reiserfs: using flush barriers
[   50.853414][ T5165] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   50.869852][ T5165] REISERFS (device loop0): checking transaction log (loop0)
[   50.891302][ T5165] REISERFS (device loop0): Using r5 hash to sort names
[   50.898151][ T5165] REISERFS (device loop0): using 3.5.x disk format
[pid  5165] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC, "") = 0
[pid  5165] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5165] chdir("./file0")            = 0
[pid  5165] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5165] close(4)                    = 0
[pid  5165] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4
[pid  5165] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 5
[pid  5165] ftruncate(5, 33587199)      = 0
[pid  5165] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<<MAP_HUGE_SHIFT, 4, 0) = 0x20000000
[pid  5165] open(".", O_RDONLY)         = 6
[pid  5165] ioctl(6, FS_IOC_GETVERSION, 0) = -1 EFAULT (Bad address)
[pid  5165] exit_group(0)               = ?
[pid  5165] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5165, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./40", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./40", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x5555558e5620 /* 4 entries */, 32768) = 112
umount2("./40/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./40/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./40/binderfs")                 = 0
[   50.904882][ T5165] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
umount2("./40/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./40/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./40/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./40/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./40/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x5555558ed660 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555558ed660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./40/file0")                     = 0
getdents64(3, 0x5555558e5620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./40")                           = 0
mkdir("./41", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5167 attached
, child_tidptr=0x5555558e45d0) = 5167
[pid  5167] chdir("./41")               = 0
[pid  5167] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5167] setpgid(0, 0)               = 0
[pid  5167] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5167] write(3, "1000", 4)         = 4
[pid  5167] close(3)                    = 0
[pid  5167] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5167] memfd_create("syzkaller", 0) = 3
[pid  5167] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f84d3074000
[pid  5167] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  5167] munmap(0x7f84d3074000, 4194304) = 0
[pid  5167] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5167] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5167] close(3)                    = 0
[pid  5167] mkdir("./file0", 0777)      = 0
[   51.004217][ T5167] loop0: detected capacity change from 0 to 8192
[   51.012571][ T5167] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   51.025773][ T5167] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[   51.034961][ T5167] REISERFS (device loop0): using ordered data mode
[   51.041472][ T5167] reiserfs: using flush barriers
[   51.046747][ T5167] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   51.062994][ T5167] REISERFS (device loop0): checking transaction log (loop0)
[   51.083537][ T5167] REISERFS (device loop0): Using r5 hash to sort names
[   51.090376][ T5167] REISERFS (device loop0): using 3.5.x disk format
[pid  5167] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC, "") = 0
[pid  5167] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5167] chdir("./file0")            = 0
[pid  5167] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5167] close(4)                    = 0
[pid  5167] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4
[pid  5167] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 5
[pid  5167] ftruncate(5, 33587199)      = 0
[pid  5167] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<<MAP_HUGE_SHIFT, 4, 0) = 0x20000000
[pid  5167] open(".", O_RDONLY)         = 6
[pid  5167] ioctl(6, FS_IOC_GETVERSION, 0) = -1 EFAULT (Bad address)
[pid  5167] exit_group(0)               = ?
[pid  5167] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5167, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./41", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./41", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x5555558e5620 /* 4 entries */, 32768) = 112
umount2("./41/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./41/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./41/binderfs")                 = 0
[   51.097012][ T5167] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
umount2("./41/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./41/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./41/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./41/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./41/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x5555558ed660 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555558ed660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./41/file0")                     = 0
getdents64(3, 0x5555558e5620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./41")                           = 0
mkdir("./42", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5169 attached
, child_tidptr=0x5555558e45d0) = 5169
[pid  5169] chdir("./42")               = 0
[pid  5169] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5169] setpgid(0, 0)               = 0
[pid  5169] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5169] write(3, "1000", 4)         = 4
[pid  5169] close(3)                    = 0
[pid  5169] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5169] memfd_create("syzkaller", 0) = 3
[pid  5169] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f84d3074000
[pid  5169] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  5169] munmap(0x7f84d3074000, 4194304) = 0
[pid  5169] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5169] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5169] close(3)                    = 0
[pid  5169] mkdir("./file0", 0777)      = 0
[   51.192432][ T5169] loop0: detected capacity change from 0 to 8192
[   51.200129][ T5169] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   51.213234][ T5169] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[   51.222603][ T5169] REISERFS (device loop0): using ordered data mode
[   51.229113][ T5169] reiserfs: using flush barriers
[   51.234467][ T5169] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   51.250719][ T5169] REISERFS (device loop0): checking transaction log (loop0)
[   51.272667][ T5169] REISERFS (device loop0): Using r5 hash to sort names
[   51.279503][ T5169] REISERFS (device loop0): using 3.5.x disk format
[pid  5169] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC, "") = 0
[pid  5169] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5169] chdir("./file0")            = 0
[pid  5169] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5169] close(4)                    = 0
[pid  5169] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4
[pid  5169] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 5
[pid  5169] ftruncate(5, 33587199)      = 0
[pid  5169] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<<MAP_HUGE_SHIFT, 4, 0) = 0x20000000
[pid  5169] open(".", O_RDONLY)         = 6
[pid  5169] ioctl(6, FS_IOC_GETVERSION, 0) = -1 EFAULT (Bad address)
[pid  5169] exit_group(0)               = ?
[pid  5169] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5169, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./42", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./42", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x5555558e5620 /* 4 entries */, 32768) = 112
umount2("./42/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./42/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./42/binderfs")                 = 0
[   51.286136][ T5169] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
umount2("./42/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./42/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./42/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./42/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./42/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x5555558ed660 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555558ed660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./42/file0")                     = 0
getdents64(3, 0x5555558e5620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./42")                           = 0
mkdir("./43", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558e45d0) = 5171
./strace-static-x86_64: Process 5171 attached
[pid  5171] chdir("./43")               = 0
[pid  5171] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5171] setpgid(0, 0)               = 0
[pid  5171] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5171] write(3, "1000", 4)         = 4
[pid  5171] close(3)                    = 0
[pid  5171] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5171] memfd_create("syzkaller", 0) = 3
[pid  5171] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f84d3074000
[pid  5171] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  5171] munmap(0x7f84d3074000, 4194304) = 0
[pid  5171] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5171] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5171] close(3)                    = 0
[pid  5171] mkdir("./file0", 0777)      = 0
[   51.381005][ T5171] loop0: detected capacity change from 0 to 8192
[   51.388993][ T5171] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   51.402142][ T5171] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[   51.411339][ T5171] REISERFS (device loop0): using ordered data mode
[   51.417827][ T5171] reiserfs: using flush barriers
[   51.423252][ T5171] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   51.439486][ T5171] REISERFS (device loop0): checking transaction log (loop0)
[   51.460545][ T5171] REISERFS (device loop0): Using r5 hash to sort names
[   51.467391][ T5171] REISERFS (device loop0): using 3.5.x disk format
[pid  5171] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC, "") = 0
[pid  5171] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5171] chdir("./file0")            = 0
[pid  5171] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5171] close(4)                    = 0
[pid  5171] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4
[pid  5171] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 5
[pid  5171] ftruncate(5, 33587199)      = 0
[pid  5171] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<<MAP_HUGE_SHIFT, 4, 0) = 0x20000000
[pid  5171] open(".", O_RDONLY)         = 6
[pid  5171] ioctl(6, FS_IOC_GETVERSION, 0) = -1 EFAULT (Bad address)
[pid  5171] exit_group(0)               = ?
[pid  5171] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5171, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} ---
umount2("./43", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./43", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x5555558e5620 /* 4 entries */, 32768) = 112
umount2("./43/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./43/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./43/binderfs")                 = 0
[   51.474019][ T5171] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
umount2("./43/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./43/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./43/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./43/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./43/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x5555558ed660 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555558ed660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./43/file0")                     = 0
getdents64(3, 0x5555558e5620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./43")                           = 0
mkdir("./44", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558e45d0) = 5173
./strace-static-x86_64: Process 5173 attached
[pid  5173] chdir("./44")               = 0
[pid  5173] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5173] setpgid(0, 0)               = 0
[pid  5173] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5173] write(3, "1000", 4)         = 4
[pid  5173] close(3)                    = 0
[pid  5173] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5173] memfd_create("syzkaller", 0) = 3
[pid  5173] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f84d3074000
[pid  5173] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  5173] munmap(0x7f84d3074000, 4194304) = 0
[pid  5173] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5173] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5173] close(3)                    = 0
[pid  5173] mkdir("./file0", 0777)      = 0
[   51.567438][ T5173] loop0: detected capacity change from 0 to 8192
[   51.575167][ T5173] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   51.588184][ T5173] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[   51.597359][ T5173] REISERFS (device loop0): using ordered data mode
[   51.603877][ T5173] reiserfs: using flush barriers
[pid  5173] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC, "") = 0
[pid  5173] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5173] chdir("./file0")            = 0
[pid  5173] ioctl(4, LOOP_CLR_FD)       = 0
[   51.609212][ T5173] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   51.625471][ T5173] REISERFS (device loop0): checking transaction log (loop0)
[   51.646014][ T5173] REISERFS (device loop0): Using r5 hash to sort names
[   51.652868][ T5173] REISERFS (device loop0): using 3.5.x disk format
[pid  5173] close(4)                    = 0
[pid  5173] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4
[pid  5173] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 5
[pid  5173] ftruncate(5, 33587199)      = 0
[pid  5173] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<<MAP_HUGE_SHIFT, 4, 0) = 0x20000000
[pid  5173] open(".", O_RDONLY)         = 6
[pid  5173] ioctl(6, FS_IOC_GETVERSION, 0) = -1 EFAULT (Bad address)
[pid  5173] exit_group(0)               = ?
[pid  5173] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5173, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} ---
umount2("./44", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./44", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x5555558e5620 /* 4 entries */, 32768) = 112
umount2("./44/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./44/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./44/binderfs")                 = 0
[   51.659462][ T5173] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
umount2("./44/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./44/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./44/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./44/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./44/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x5555558ed660 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555558ed660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./44/file0")                     = 0
getdents64(3, 0x5555558e5620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./44")                           = 0
mkdir("./45", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558e45d0) = 5175
./strace-static-x86_64: Process 5175 attached
[pid  5175] chdir("./45")               = 0
[pid  5175] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5175] setpgid(0, 0)               = 0
[pid  5175] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5175] write(3, "1000", 4)         = 4
[pid  5175] close(3)                    = 0
[pid  5175] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5175] memfd_create("syzkaller", 0) = 3
[pid  5175] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f84d3074000
[pid  5175] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  5175] munmap(0x7f84d3074000, 4194304) = 0
[pid  5175] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5175] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5175] close(3)                    = 0
[pid  5175] mkdir("./file0", 0777)      = 0
[   51.752954][ T5175] loop0: detected capacity change from 0 to 8192
[   51.760841][ T5175] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   51.773886][ T5175] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[   51.783054][ T5175] REISERFS (device loop0): using ordered data mode
[   51.789545][ T5175] reiserfs: using flush barriers
[   51.795037][ T5175] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   51.811182][ T5175] REISERFS (device loop0): checking transaction log (loop0)
[   51.832109][ T5175] REISERFS (device loop0): Using r5 hash to sort names
[   51.838963][ T5175] REISERFS (device loop0): using 3.5.x disk format
[pid  5175] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC, "") = 0
[pid  5175] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5175] chdir("./file0")            = 0
[pid  5175] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5175] close(4)                    = 0
[pid  5175] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4
[pid  5175] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 5
[pid  5175] ftruncate(5, 33587199)      = 0
[pid  5175] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<<MAP_HUGE_SHIFT, 4, 0) = 0x20000000
[pid  5175] open(".", O_RDONLY)         = 6
[pid  5175] ioctl(6, FS_IOC_GETVERSION, 0) = -1 EFAULT (Bad address)
[pid  5175] exit_group(0)               = ?
[pid  5175] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5175, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./45", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./45", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x5555558e5620 /* 4 entries */, 32768) = 112
umount2("./45/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./45/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./45/binderfs")                 = 0
[   51.845598][ T5175] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
umount2("./45/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./45/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./45/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./45/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./45/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x5555558ed660 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555558ed660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./45/file0")                     = 0
getdents64(3, 0x5555558e5620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./45")                           = 0
mkdir("./46", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558e45d0) = 5177
./strace-static-x86_64: Process 5177 attached
[pid  5177] chdir("./46")               = 0
[pid  5177] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5177] setpgid(0, 0)               = 0
[pid  5177] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5177] write(3, "1000", 4)         = 4
[pid  5177] close(3)                    = 0
[pid  5177] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5177] memfd_create("syzkaller", 0) = 3
[pid  5177] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f84d3074000
[pid  5177] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  5177] munmap(0x7f84d3074000, 4194304) = 0
[pid  5177] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5177] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5177] close(3)                    = 0
[pid  5177] mkdir("./file0", 0777)      = 0
[   51.939171][ T5177] loop0: detected capacity change from 0 to 8192
[   51.947431][ T5177] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   51.960594][ T5177] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[   51.969754][ T5177] REISERFS (device loop0): using ordered data mode
[   51.976312][ T5177] reiserfs: using flush barriers
[   51.981609][ T5177] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   51.998084][ T5177] REISERFS (device loop0): checking transaction log (loop0)
[   52.019584][ T5177] REISERFS (device loop0): Using r5 hash to sort names
[   52.026445][ T5177] REISERFS (device loop0): using 3.5.x disk format
[pid  5177] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC, "") = 0
[pid  5177] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5177] chdir("./file0")            = 0
[pid  5177] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5177] close(4)                    = 0
[pid  5177] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4
[pid  5177] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 5
[pid  5177] ftruncate(5, 33587199)      = 0
[pid  5177] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<<MAP_HUGE_SHIFT, 4, 0) = 0x20000000
[pid  5177] open(".", O_RDONLY)         = 6
[pid  5177] ioctl(6, FS_IOC_GETVERSION, 0) = -1 EFAULT (Bad address)
[pid  5177] exit_group(0)               = ?
[pid  5177] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5177, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./46", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./46", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x5555558e5620 /* 4 entries */, 32768) = 112
umount2("./46/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./46/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./46/binderfs")                 = 0
[   52.033083][ T5177] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
umount2("./46/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./46/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./46/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./46/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./46/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x5555558ed660 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555558ed660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./46/file0")                     = 0
getdents64(3, 0x5555558e5620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./46")                           = 0
mkdir("./47", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558e45d0) = 5179
./strace-static-x86_64: Process 5179 attached
[pid  5179] chdir("./47")               = 0
[pid  5179] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5179] setpgid(0, 0)               = 0
[pid  5179] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5179] write(3, "1000", 4)         = 4
[pid  5179] close(3)                    = 0
[pid  5179] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5179] memfd_create("syzkaller", 0) = 3
[pid  5179] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f84d3074000
[pid  5179] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  5179] munmap(0x7f84d3074000, 4194304) = 0
[pid  5179] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5179] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5179] close(3)                    = 0
[pid  5179] mkdir("./file0", 0777)      = 0
[   52.116359][ T5179] loop0: detected capacity change from 0 to 8192
[   52.124699][ T5179] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   52.137897][ T5179] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[   52.147219][ T5179] REISERFS (device loop0): using ordered data mode
[   52.153760][ T5179] reiserfs: using flush barriers
[pid  5179] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC, "") = 0
[   52.159028][ T5179] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   52.175244][ T5179] REISERFS (device loop0): checking transaction log (loop0)
[   52.195489][ T5179] REISERFS (device loop0): Using r5 hash to sort names
[   52.202364][ T5179] REISERFS (device loop0): using 3.5.x disk format
[pid  5179] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5179] chdir("./file0")            = 0
[pid  5179] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5179] close(4)                    = 0
[pid  5179] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4
[pid  5179] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 5
[pid  5179] ftruncate(5, 33587199)      = 0
[pid  5179] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<<MAP_HUGE_SHIFT, 4, 0) = 0x20000000
[pid  5179] open(".", O_RDONLY)         = 6
[pid  5179] ioctl(6, FS_IOC_GETVERSION, 0) = -1 EFAULT (Bad address)
[pid  5179] exit_group(0)               = ?
[pid  5179] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5179, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./47", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./47", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x5555558e5620 /* 4 entries */, 32768) = 112
umount2("./47/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./47/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./47/binderfs")                 = 0
[   52.208925][ T5179] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
umount2("./47/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./47/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./47/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./47/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./47/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x5555558ed660 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555558ed660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./47/file0")                     = 0
getdents64(3, 0x5555558e5620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./47")                           = 0
mkdir("./48", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5181 attached
, child_tidptr=0x5555558e45d0) = 5181
[pid  5181] chdir("./48")               = 0
[pid  5181] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5181] setpgid(0, 0)               = 0
[pid  5181] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5181] write(3, "1000", 4)         = 4
[pid  5181] close(3)                    = 0
[pid  5181] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5181] memfd_create("syzkaller", 0) = 3
[pid  5181] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f84d3074000
[pid  5181] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  5181] munmap(0x7f84d3074000, 4194304) = 0
[pid  5181] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5181] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5181] close(3)                    = 0
[pid  5181] mkdir("./file0", 0777)      = 0
[   52.298047][ T5181] loop0: detected capacity change from 0 to 8192
[   52.306213][ T5181] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   52.319419][ T5181] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[   52.328698][ T5181] REISERFS (device loop0): using ordered data mode
[   52.335294][ T5181] reiserfs: using flush barriers
[   52.340575][ T5181] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   52.357229][ T5181] REISERFS (device loop0): checking transaction log (loop0)
[   52.378606][ T5181] REISERFS (device loop0): Using r5 hash to sort names
[   52.385457][ T5181] REISERFS (device loop0): using 3.5.x disk format
[pid  5181] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC, "") = 0
[pid  5181] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5181] chdir("./file0")            = 0
[pid  5181] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5181] close(4)                    = 0
[pid  5181] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4
[pid  5181] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 5
[pid  5181] ftruncate(5, 33587199)      = 0
[pid  5181] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<<MAP_HUGE_SHIFT, 4, 0) = 0x20000000
[pid  5181] open(".", O_RDONLY)         = 6
[pid  5181] ioctl(6, FS_IOC_GETVERSION, 0) = -1 EFAULT (Bad address)
[pid  5181] exit_group(0)               = ?
[pid  5181] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5181, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./48", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./48", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x5555558e5620 /* 4 entries */, 32768) = 112
umount2("./48/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./48/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./48/binderfs")                 = 0
[   52.392094][ T5181] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
umount2("./48/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./48/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./48/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./48/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./48/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x5555558ed660 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555558ed660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./48/file0")                     = 0
getdents64(3, 0x5555558e5620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./48")                           = 0
mkdir("./49", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5183 attached
, child_tidptr=0x5555558e45d0) = 5183
[pid  5183] chdir("./49")               = 0
[pid  5183] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5183] setpgid(0, 0)               = 0
[pid  5183] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5183] write(3, "1000", 4)         = 4
[pid  5183] close(3)                    = 0
[pid  5183] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5183] memfd_create("syzkaller", 0) = 3
[pid  5183] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f84d3074000
[pid  5183] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  5183] munmap(0x7f84d3074000, 4194304) = 0
[pid  5183] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5183] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5183] close(3)                    = 0
[pid  5183] mkdir("./file0", 0777)      = 0
[   52.482735][ T5183] loop0: detected capacity change from 0 to 8192
[   52.490777][ T5183] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   52.503827][ T5183] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[   52.513001][ T5183] REISERFS (device loop0): using ordered data mode
[   52.519495][ T5183] reiserfs: using flush barriers
[   52.524848][ T5183] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   52.540986][ T5183] REISERFS (device loop0): checking transaction log (loop0)
[   52.562171][ T5183] REISERFS (device loop0): Using r5 hash to sort names
[   52.569012][ T5183] REISERFS (device loop0): using 3.5.x disk format
[pid  5183] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC, "") = 0
[pid  5183] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5183] chdir("./file0")            = 0
[pid  5183] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5183] close(4)                    = 0
[pid  5183] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4
[pid  5183] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 5
[pid  5183] ftruncate(5, 33587199)      = 0
[pid  5183] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<<MAP_HUGE_SHIFT, 4, 0) = 0x20000000
[pid  5183] open(".", O_RDONLY)         = 6
[pid  5183] ioctl(6, FS_IOC_GETVERSION, 0) = -1 EFAULT (Bad address)
[pid  5183] exit_group(0)               = ?
[pid  5183] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5183, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./49", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./49", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x5555558e5620 /* 4 entries */, 32768) = 112
umount2("./49/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./49/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./49/binderfs")                 = 0
[   52.575635][ T5183] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
umount2("./49/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./49/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./49/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./49/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./49/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x5555558ed660 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555558ed660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./49/file0")                     = 0
getdents64(3, 0x5555558e5620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./49")                           = 0
mkdir("./50", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558e45d0) = 5185
./strace-static-x86_64: Process 5185 attached
[pid  5185] chdir("./50")               = 0
[pid  5185] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5185] setpgid(0, 0)               = 0
[pid  5185] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5185] write(3, "1000", 4)         = 4
[pid  5185] close(3)                    = 0
[pid  5185] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5185] memfd_create("syzkaller", 0) = 3
[pid  5185] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f84d3074000
[pid  5185] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  5185] munmap(0x7f84d3074000, 4194304) = 0
[pid  5185] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5185] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5185] close(3)                    = 0
[pid  5185] mkdir("./file0", 0777)      = 0
[   52.670518][ T5185] loop0: detected capacity change from 0 to 8192
[   52.678686][ T5185] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   52.691721][ T5185] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[   52.700969][ T5185] REISERFS (device loop0): using ordered data mode
[   52.707463][ T5185] reiserfs: using flush barriers
[   52.712876][ T5185] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   52.729086][ T5185] REISERFS (device loop0): checking transaction log (loop0)
[   52.750285][ T5185] REISERFS (device loop0): Using r5 hash to sort names
[   52.757155][ T5185] REISERFS (device loop0): using 3.5.x disk format
[pid  5185] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC, "") = 0
[pid  5185] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5185] chdir("./file0")            = 0
[pid  5185] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5185] close(4)                    = 0
[pid  5185] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4
[pid  5185] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 5
[pid  5185] ftruncate(5, 33587199)      = 0
[pid  5185] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<<MAP_HUGE_SHIFT, 4, 0) = 0x20000000
[pid  5185] open(".", O_RDONLY)         = 6
[pid  5185] ioctl(6, FS_IOC_GETVERSION, 0) = -1 EFAULT (Bad address)
[pid  5185] exit_group(0)               = ?
[pid  5185] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5185, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./50", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./50", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x5555558e5620 /* 4 entries */, 32768) = 112
umount2("./50/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./50/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./50/binderfs")                 = 0
[   52.764330][ T5185] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
umount2("./50/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./50/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./50/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./50/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./50/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x5555558ed660 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555558ed660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./50/file0")                     = 0
getdents64(3, 0x5555558e5620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./50")                           = 0
mkdir("./51", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5187 attached
, child_tidptr=0x5555558e45d0) = 5187
[pid  5187] chdir("./51")               = 0
[pid  5187] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5187] setpgid(0, 0)               = 0
[pid  5187] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5187] write(3, "1000", 4)         = 4
[pid  5187] close(3)                    = 0
[pid  5187] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5187] memfd_create("syzkaller", 0) = 3
[pid  5187] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f84d3074000
[pid  5187] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  5187] munmap(0x7f84d3074000, 4194304) = 0
[pid  5187] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5187] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5187] close(3)                    = 0
[pid  5187] mkdir("./file0", 0777)      = 0
[   52.854493][ T5187] loop0: detected capacity change from 0 to 8192
[   52.862976][ T5187] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   52.876022][ T5187] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[   52.885223][ T5187] REISERFS (device loop0): using ordered data mode
[   52.891722][ T5187] reiserfs: using flush barriers
[   52.896995][ T5187] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   52.913249][ T5187] REISERFS (device loop0): checking transaction log (loop0)
[   52.935585][ T5187] REISERFS (device loop0): Using r5 hash to sort names
[   52.942457][ T5187] REISERFS (device loop0): using 3.5.x disk format
[pid  5187] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC, "") = 0
[pid  5187] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5187] chdir("./file0")            = 0
[pid  5187] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5187] close(4)                    = 0
[pid  5187] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4
[pid  5187] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 5
[pid  5187] ftruncate(5, 33587199)      = 0
[pid  5187] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<<MAP_HUGE_SHIFT, 4, 0) = 0x20000000
[pid  5187] open(".", O_RDONLY)         = 6
[pid  5187] ioctl(6, FS_IOC_GETVERSION, 0) = -1 EFAULT (Bad address)
[pid  5187] exit_group(0)               = ?
[pid  5187] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5187, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./51", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./51", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x5555558e5620 /* 4 entries */, 32768) = 112
umount2("./51/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./51/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./51/binderfs")                 = 0
[   52.949020][ T5187] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
umount2("./51/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./51/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./51/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./51/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./51/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x5555558ed660 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555558ed660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./51/file0")                     = 0
getdents64(3, 0x5555558e5620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./51")                           = 0
mkdir("./52", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5189 attached
, child_tidptr=0x5555558e45d0) = 5189
[pid  5189] chdir("./52")               = 0
[pid  5189] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5189] setpgid(0, 0)               = 0
[pid  5189] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5189] write(3, "1000", 4)         = 4
[pid  5189] close(3)                    = 0
[pid  5189] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5189] memfd_create("syzkaller", 0) = 3
[pid  5189] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f84d3074000
[pid  5189] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  5189] munmap(0x7f84d3074000, 4194304) = 0
[pid  5189] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5189] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5189] close(3)                    = 0
[pid  5189] mkdir("./file0", 0777)      = 0
[   53.036670][ T5189] loop0: detected capacity change from 0 to 8192
[   53.044607][ T5189] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   53.057605][ T5189] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[   53.066786][ T5189] REISERFS (device loop0): using ordered data mode
[   53.073294][ T5189] reiserfs: using flush barriers
[pid  5189] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC, "") = 0
[   53.078592][ T5189] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   53.094910][ T5189] REISERFS (device loop0): checking transaction log (loop0)
[   53.115527][ T5189] REISERFS (device loop0): Using r5 hash to sort names
[   53.122394][ T5189] REISERFS (device loop0): using 3.5.x disk format
[pid  5189] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5189] chdir("./file0")            = 0
[pid  5189] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5189] close(4)                    = 0
[pid  5189] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4
[pid  5189] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 5
[pid  5189] ftruncate(5, 33587199)      = 0
[pid  5189] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<<MAP_HUGE_SHIFT, 4, 0) = 0x20000000
[pid  5189] open(".", O_RDONLY)         = 6
[pid  5189] ioctl(6, FS_IOC_GETVERSION, 0) = -1 EFAULT (Bad address)
[pid  5189] exit_group(0)               = ?
[pid  5189] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5189, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} ---
umount2("./52", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./52", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x5555558e5620 /* 4 entries */, 32768) = 112
umount2("./52/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./52/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./52/binderfs")                 = 0
[   53.129053][ T5189] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
umount2("./52/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./52/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./52/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./52/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./52/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x5555558ed660 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555558ed660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./52/file0")                     = 0
getdents64(3, 0x5555558e5620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./52")                           = 0
mkdir("./53", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558e45d0) = 5191
./strace-static-x86_64: Process 5191 attached
[pid  5191] chdir("./53")               = 0
[pid  5191] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5191] setpgid(0, 0)               = 0
[pid  5191] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5191] write(3, "1000", 4)         = 4
[pid  5191] close(3)                    = 0
[pid  5191] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5191] memfd_create("syzkaller", 0) = 3
[pid  5191] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f84d3074000
[pid  5191] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  5191] munmap(0x7f84d3074000, 4194304) = 0
[pid  5191] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5191] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5191] close(3)                    = 0
[pid  5191] mkdir("./file0", 0777)      = 0
[   53.218884][ T5191] loop0: detected capacity change from 0 to 8192
[   53.227286][ T5191] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   53.240289][ T5191] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[   53.249476][ T5191] REISERFS (device loop0): using ordered data mode
[   53.256011][ T5191] reiserfs: using flush barriers
[   53.261441][ T5191] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   53.277666][ T5191] REISERFS (device loop0): checking transaction log (loop0)
[   53.298851][ T5191] REISERFS (device loop0): Using r5 hash to sort names
[   53.305709][ T5191] REISERFS (device loop0): using 3.5.x disk format
[pid  5191] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC, "") = 0
[pid  5191] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5191] chdir("./file0")            = 0
[pid  5191] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5191] close(4)                    = 0
[pid  5191] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4
[pid  5191] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 5
[pid  5191] ftruncate(5, 33587199)      = 0
[pid  5191] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<<MAP_HUGE_SHIFT, 4, 0) = 0x20000000
[pid  5191] open(".", O_RDONLY)         = 6
[pid  5191] ioctl(6, FS_IOC_GETVERSION, 0) = -1 EFAULT (Bad address)
[pid  5191] exit_group(0)               = ?
[pid  5191] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5191, si_uid=0, si_status=0, si_utime=0, si_stime=14 /* 0.14 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./53", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./53", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x5555558e5620 /* 4 entries */, 32768) = 112
umount2("./53/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./53/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./53/binderfs")                 = 0
[   53.312335][ T5191] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
umount2("./53/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./53/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./53/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./53/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./53/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x5555558ed660 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555558ed660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./53/file0")                     = 0
getdents64(3, 0x5555558e5620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./53")                           = 0
mkdir("./54", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558e45d0) = 5193
./strace-static-x86_64: Process 5193 attached
[pid  5193] chdir("./54")               = 0
[pid  5193] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5193] setpgid(0, 0)               = 0
[pid  5193] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5193] write(3, "1000", 4)         = 4
[pid  5193] close(3)                    = 0
[pid  5193] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5193] memfd_create("syzkaller", 0) = 3
[pid  5193] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f84d3074000
[pid  5193] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  5193] munmap(0x7f84d3074000, 4194304) = 0
[pid  5193] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5193] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5193] close(3)                    = 0
[pid  5193] mkdir("./file0", 0777)      = 0
[   53.406042][ T5193] loop0: detected capacity change from 0 to 8192
[   53.414241][ T5193] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   53.427196][ T5193] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[   53.436340][ T5193] REISERFS (device loop0): using ordered data mode
[   53.442835][ T5193] reiserfs: using flush barriers
[   53.448169][ T5193] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   53.464405][ T5193] REISERFS (device loop0): checking transaction log (loop0)
[   53.486595][ T5193] REISERFS (device loop0): Using r5 hash to sort names
[   53.493497][ T5193] REISERFS (device loop0): using 3.5.x disk format
[pid  5193] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC, "") = 0
[pid  5193] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5193] chdir("./file0")            = 0
[pid  5193] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5193] close(4)                    = 0
[pid  5193] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4
[pid  5193] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 5
[pid  5193] ftruncate(5, 33587199)      = 0
[pid  5193] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<<MAP_HUGE_SHIFT, 4, 0) = 0x20000000
[pid  5193] open(".", O_RDONLY)         = 6
[pid  5193] ioctl(6, FS_IOC_GETVERSION, 0) = -1 EFAULT (Bad address)
[pid  5193] exit_group(0)               = ?
[pid  5193] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5193, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./54", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./54", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x5555558e5620 /* 4 entries */, 32768) = 112
umount2("./54/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./54/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./54/binderfs")                 = 0
[   53.500077][ T5193] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
umount2("./54/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./54/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./54/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./54/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./54/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x5555558ed660 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555558ed660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./54/file0")                     = 0
getdents64(3, 0x5555558e5620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./54")                           = 0
mkdir("./55", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5195 attached
, child_tidptr=0x5555558e45d0) = 5195
[pid  5195] chdir("./55")               = 0
[pid  5195] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5195] setpgid(0, 0)               = 0
[pid  5195] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5195] write(3, "1000", 4)         = 4
[pid  5195] close(3)                    = 0
[pid  5195] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5195] memfd_create("syzkaller", 0) = 3
[pid  5195] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f84d3074000
[pid  5195] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  5195] munmap(0x7f84d3074000, 4194304) = 0
[pid  5195] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5195] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5195] close(3)                    = 0
[pid  5195] mkdir("./file0", 0777)      = 0
[   53.596507][ T5195] loop0: detected capacity change from 0 to 8192
[   53.604660][ T5195] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   53.617646][ T5195] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[   53.626782][ T5195] REISERFS (device loop0): using ordered data mode
[   53.633283][ T5195] reiserfs: using flush barriers
[   53.638663][ T5195] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   53.654882][ T5195] REISERFS (device loop0): checking transaction log (loop0)
[   53.675385][ T5195] REISERFS (device loop0): Using r5 hash to sort names
[   53.682601][ T5195] REISERFS (device loop0): using 3.5.x disk format
[pid  5195] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC, "") = 0
[pid  5195] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5195] chdir("./file0")            = 0
[pid  5195] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5195] close(4)                    = 0
[pid  5195] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4
[pid  5195] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 5
[pid  5195] ftruncate(5, 33587199)      = 0
[pid  5195] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<<MAP_HUGE_SHIFT, 4, 0) = 0x20000000
[pid  5195] open(".", O_RDONLY)         = 6
[pid  5195] ioctl(6, FS_IOC_GETVERSION, 0) = -1 EFAULT (Bad address)
[pid  5195] exit_group(0)               = ?
[pid  5195] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5195, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./55", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./55", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x5555558e5620 /* 4 entries */, 32768) = 112
umount2("./55/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./55/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./55/binderfs")                 = 0
[   53.689160][ T5195] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
umount2("./55/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./55/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./55/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./55/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./55/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x5555558ed660 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555558ed660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./55/file0")                     = 0
getdents64(3, 0x5555558e5620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./55")                           = 0
mkdir("./56", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5197 attached
, child_tidptr=0x5555558e45d0) = 5197
[pid  5197] chdir("./56")               = 0
[pid  5197] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5197] setpgid(0, 0)               = 0
[pid  5197] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5197] write(3, "1000", 4)         = 4
[pid  5197] close(3)                    = 0
[pid  5197] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5197] memfd_create("syzkaller", 0) = 3
[pid  5197] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f84d3074000
[pid  5197] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  5197] munmap(0x7f84d3074000, 4194304) = 0
[pid  5197] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5197] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5197] close(3)                    = 0
[pid  5197] mkdir("./file0", 0777)      = 0
[   53.781735][ T5197] loop0: detected capacity change from 0 to 8192
[   53.789606][ T5197] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   53.802744][ T5197] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[   53.812058][ T5197] REISERFS (device loop0): using ordered data mode
[   53.818549][ T5197] reiserfs: using flush barriers
[   53.824125][ T5197] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   53.840288][ T5197] REISERFS (device loop0): checking transaction log (loop0)
[   53.860680][ T5197] REISERFS (device loop0): Using r5 hash to sort names
[   53.867516][ T5197] REISERFS (device loop0): using 3.5.x disk format
[pid  5197] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC, "") = 0
[pid  5197] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5197] chdir("./file0")            = 0
[pid  5197] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5197] close(4)                    = 0
[pid  5197] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4
[pid  5197] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 5
[pid  5197] ftruncate(5, 33587199)      = 0
[pid  5197] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<<MAP_HUGE_SHIFT, 4, 0) = 0x20000000
[pid  5197] open(".", O_RDONLY)         = 6
[pid  5197] ioctl(6, FS_IOC_GETVERSION, 0) = -1 EFAULT (Bad address)
[pid  5197] exit_group(0)               = ?
[pid  5197] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5197, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./56", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./56", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x5555558e5620 /* 4 entries */, 32768) = 112
umount2("./56/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./56/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./56/binderfs")                 = 0
[   53.874136][ T5197] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
umount2("./56/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./56/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./56/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./56/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./56/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x5555558ed660 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555558ed660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./56/file0")                     = 0
getdents64(3, 0x5555558e5620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./56")                           = 0
mkdir("./57", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5199 attached
, child_tidptr=0x5555558e45d0) = 5199
[pid  5199] chdir("./57")               = 0
[pid  5199] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5199] setpgid(0, 0)               = 0
[pid  5199] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5199] write(3, "1000", 4)         = 4
[pid  5199] close(3)                    = 0
[pid  5199] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5199] memfd_create("syzkaller", 0) = 3
[pid  5199] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f84d3074000
[pid  5199] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  5199] munmap(0x7f84d3074000, 4194304) = 0
[pid  5199] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5199] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5199] close(3)                    = 0
[pid  5199] mkdir("./file0", 0777)      = 0
[   53.967254][ T5199] loop0: detected capacity change from 0 to 8192
[   53.975330][ T5199] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   53.988325][ T5199] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[   53.997493][ T5199] REISERFS (device loop0): using ordered data mode
[   54.003993][ T5199] reiserfs: using flush barriers
[   54.009337][ T5199] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   54.025582][ T5199] REISERFS (device loop0): checking transaction log (loop0)
[   54.047050][ T5199] REISERFS (device loop0): Using r5 hash to sort names
[   54.053909][ T5199] REISERFS (device loop0): using 3.5.x disk format
[pid  5199] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC, "") = 0
[pid  5199] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5199] chdir("./file0")            = 0
[pid  5199] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5199] close(4)                    = 0
[pid  5199] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4
[pid  5199] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 5
[pid  5199] ftruncate(5, 33587199)      = 0
[pid  5199] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<<MAP_HUGE_SHIFT, 4, 0) = 0x20000000
[pid  5199] open(".", O_RDONLY)         = 6
[pid  5199] ioctl(6, FS_IOC_GETVERSION, 0) = -1 EFAULT (Bad address)
[pid  5199] exit_group(0)               = ?
[pid  5199] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5199, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./57", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./57", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x5555558e5620 /* 4 entries */, 32768) = 112
umount2("./57/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./57/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./57/binderfs")                 = 0
[   54.060553][ T5199] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
umount2("./57/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./57/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./57/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./57/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./57/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x5555558ed660 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555558ed660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./57/file0")                     = 0
getdents64(3, 0x5555558e5620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./57")                           = 0
mkdir("./58", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558e45d0) = 5201
./strace-static-x86_64: Process 5201 attached
[pid  5201] chdir("./58")               = 0
[pid  5201] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5201] setpgid(0, 0)               = 0
[pid  5201] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5201] write(3, "1000", 4)         = 4
[pid  5201] close(3)                    = 0
[pid  5201] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5201] memfd_create("syzkaller", 0) = 3
[pid  5201] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f84d3074000
[pid  5201] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  5201] munmap(0x7f84d3074000, 4194304) = 0
[pid  5201] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5201] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5201] close(3)                    = 0
[pid  5201] mkdir("./file0", 0777)      = 0
[   54.145973][ T5201] loop0: detected capacity change from 0 to 8192
[   54.153725][ T5201] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   54.166748][ T5201] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[   54.175958][ T5201] REISERFS (device loop0): using ordered data mode
[   54.182469][ T5201] reiserfs: using flush barriers
[   54.187743][ T5201] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   54.204221][ T5201] REISERFS (device loop0): checking transaction log (loop0)
[   54.225791][ T5201] REISERFS (device loop0): Using r5 hash to sort names
[   54.232658][ T5201] REISERFS (device loop0): using 3.5.x disk format
[pid  5201] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC, "") = 0
[pid  5201] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5201] chdir("./file0")            = 0
[pid  5201] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5201] close(4)                    = 0
[pid  5201] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4
[pid  5201] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 5
[pid  5201] ftruncate(5, 33587199)      = 0
[pid  5201] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<<MAP_HUGE_SHIFT, 4, 0) = 0x20000000
[pid  5201] open(".", O_RDONLY)         = 6
[pid  5201] ioctl(6, FS_IOC_GETVERSION, 0) = -1 EFAULT (Bad address)
[pid  5201] exit_group(0)               = ?
[pid  5201] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5201, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} ---
umount2("./58", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./58", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x5555558e5620 /* 4 entries */, 32768) = 112
umount2("./58/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./58/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./58/binderfs")                 = 0
[   54.239232][ T5201] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
umount2("./58/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./58/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./58/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./58/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./58/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x5555558ed660 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555558ed660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./58/file0")                     = 0
getdents64(3, 0x5555558e5620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./58")                           = 0
mkdir("./59", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558e45d0) = 5203
./strace-static-x86_64: Process 5203 attached
[pid  5203] chdir("./59")               = 0
[pid  5203] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5203] setpgid(0, 0)               = 0
[pid  5203] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5203] write(3, "1000", 4)         = 4
[pid  5203] close(3)                    = 0
[pid  5203] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5203] memfd_create("syzkaller", 0) = 3
[pid  5203] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f84d3074000
[pid  5203] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  5203] munmap(0x7f84d3074000, 4194304) = 0
[pid  5203] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5203] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5203] close(3)                    = 0
[pid  5203] mkdir("./file0", 0777)      = 0
[   54.327918][ T5203] loop0: detected capacity change from 0 to 8192
[   54.336105][ T5203] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   54.349108][ T5203] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[   54.358333][ T5203] REISERFS (device loop0): using ordered data mode
[   54.364875][ T5203] reiserfs: using flush barriers
[   54.370233][ T5203] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   54.386573][ T5203] REISERFS (device loop0): checking transaction log (loop0)
[   54.407926][ T5203] REISERFS (device loop0): Using r5 hash to sort names
[   54.414826][ T5203] REISERFS (device loop0): using 3.5.x disk format
[pid  5203] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC, "") = 0
[pid  5203] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5203] chdir("./file0")            = 0
[pid  5203] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5203] close(4)                    = 0
[pid  5203] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4
[pid  5203] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 5
[pid  5203] ftruncate(5, 33587199)      = 0
[pid  5203] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<<MAP_HUGE_SHIFT, 4, 0) = 0x20000000
[pid  5203] open(".", O_RDONLY)         = 6
[pid  5203] ioctl(6, FS_IOC_GETVERSION, 0) = -1 EFAULT (Bad address)
[pid  5203] exit_group(0)               = ?
[pid  5203] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5203, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./59", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./59", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x5555558e5620 /* 4 entries */, 32768) = 112
umount2("./59/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./59/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./59/binderfs")                 = 0
[   54.421535][ T5203] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
umount2("./59/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./59/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./59/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./59/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./59/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x5555558ed660 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555558ed660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./59/file0")                     = 0
getdents64(3, 0x5555558e5620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./59")                           = 0
mkdir("./60", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558e45d0) = 5205
./strace-static-x86_64: Process 5205 attached
[pid  5205] chdir("./60")               = 0
[pid  5205] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5205] setpgid(0, 0)               = 0
[pid  5205] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5205] write(3, "1000", 4)         = 4
[pid  5205] close(3)                    = 0
[pid  5205] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5205] memfd_create("syzkaller", 0) = 3
[pid  5205] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f84d3074000
[pid  5205] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  5205] munmap(0x7f84d3074000, 4194304) = 0
[pid  5205] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5205] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5205] close(3)                    = 0
[pid  5205] mkdir("./file0", 0777)      = 0
[   54.517375][ T5205] loop0: detected capacity change from 0 to 8192
[   54.525422][ T5205] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   54.538376][ T5205] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[   54.547542][ T5205] REISERFS (device loop0): using ordered data mode
[   54.554045][ T5205] reiserfs: using flush barriers
[   54.559345][ T5205] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   54.575682][ T5205] REISERFS (device loop0): checking transaction log (loop0)
[   54.597496][ T5205] REISERFS (device loop0): Using r5 hash to sort names
[   54.604368][ T5205] REISERFS (device loop0): using 3.5.x disk format
[pid  5205] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC, "") = 0
[pid  5205] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5205] chdir("./file0")            = 0
[pid  5205] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5205] close(4)                    = 0
[pid  5205] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4
[pid  5205] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 5
[pid  5205] ftruncate(5, 33587199)      = 0
[pid  5205] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<<MAP_HUGE_SHIFT, 4, 0) = 0x20000000
[pid  5205] open(".", O_RDONLY)         = 6
[pid  5205] ioctl(6, FS_IOC_GETVERSION, 0) = -1 EFAULT (Bad address)
[pid  5205] exit_group(0)               = ?
[pid  5205] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5205, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./60", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./60", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x5555558e5620 /* 4 entries */, 32768) = 112
umount2("./60/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./60/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./60/binderfs")                 = 0
[   54.611114][ T5205] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
umount2("./60/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./60/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./60/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./60/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./60/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x5555558ed660 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555558ed660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./60/file0")                     = 0
getdents64(3, 0x5555558e5620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./60")                           = 0
mkdir("./61", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558e45d0) = 5207
./strace-static-x86_64: Process 5207 attached
[pid  5207] chdir("./61")               = 0
[pid  5207] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5207] setpgid(0, 0)               = 0
[pid  5207] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5207] write(3, "1000", 4)         = 4
[pid  5207] close(3)                    = 0
[pid  5207] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5207] memfd_create("syzkaller", 0) = 3
[pid  5207] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f84d3074000
[pid  5207] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  5207] munmap(0x7f84d3074000, 4194304) = 0
[pid  5207] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5207] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5207] close(3)                    = 0
[pid  5207] mkdir("./file0", 0777)      = 0
[   54.700744][ T5207] loop0: detected capacity change from 0 to 8192
[   54.708690][ T5207] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   54.721842][ T5207] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[   54.731048][ T5207] REISERFS (device loop0): using ordered data mode
[   54.737542][ T5207] reiserfs: using flush barriers
[   54.742940][ T5207] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   54.759103][ T5207] REISERFS (device loop0): checking transaction log (loop0)
[   54.780288][ T5207] REISERFS (device loop0): Using r5 hash to sort names
[   54.787160][ T5207] REISERFS (device loop0): using 3.5.x disk format
[pid  5207] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC, "") = 0
[pid  5207] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5207] chdir("./file0")            = 0
[pid  5207] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5207] close(4)                    = 0
[pid  5207] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4
[pid  5207] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 5
[pid  5207] ftruncate(5, 33587199)      = 0
[pid  5207] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<<MAP_HUGE_SHIFT, 4, 0) = 0x20000000
[pid  5207] open(".", O_RDONLY)         = 6
[pid  5207] ioctl(6, FS_IOC_GETVERSION, 0) = -1 EFAULT (Bad address)
[pid  5207] exit_group(0)               = ?
[pid  5207] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5207, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./61", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./61", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x5555558e5620 /* 4 entries */, 32768) = 112
umount2("./61/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./61/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./61/binderfs")                 = 0
[   54.793832][ T5207] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
umount2("./61/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./61/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./61/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./61/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./61/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x5555558ed660 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555558ed660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./61/file0")                     = 0
getdents64(3, 0x5555558e5620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./61")                           = 0
mkdir("./62", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558e45d0) = 5209
./strace-static-x86_64: Process 5209 attached
[pid  5209] chdir("./62")               = 0
[pid  5209] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5209] setpgid(0, 0)               = 0
[pid  5209] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5209] write(3, "1000", 4)         = 4
[pid  5209] close(3)                    = 0
[pid  5209] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5209] memfd_create("syzkaller", 0) = 3
[pid  5209] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f84d3074000
[pid  5209] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  5209] munmap(0x7f84d3074000, 4194304) = 0
[pid  5209] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5209] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5209] close(3)                    = 0
[pid  5209] mkdir("./file0", 0777)      = 0
[   54.884405][ T5209] loop0: detected capacity change from 0 to 8192
[   54.892410][ T5209] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   54.905833][ T5209] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[   54.914991][ T5209] REISERFS (device loop0): using ordered data mode
[   54.921492][ T5209] reiserfs: using flush barriers
[   54.926757][ T5209] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   54.942977][ T5209] REISERFS (device loop0): checking transaction log (loop0)
[   54.963547][ T5209] REISERFS (device loop0): Using r5 hash to sort names
[   54.970385][ T5209] REISERFS (device loop0): using 3.5.x disk format
[pid  5209] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC, "") = 0
[pid  5209] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5209] chdir("./file0")            = 0
[pid  5209] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5209] close(4)                    = 0
[pid  5209] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4
[pid  5209] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 5
[pid  5209] ftruncate(5, 33587199)      = 0
[pid  5209] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<<MAP_HUGE_SHIFT, 4, 0) = 0x20000000
[pid  5209] open(".", O_RDONLY)         = 6
[pid  5209] ioctl(6, FS_IOC_GETVERSION, 0) = -1 EFAULT (Bad address)
[pid  5209] exit_group(0)               = ?
[pid  5209] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5209, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} ---
umount2("./62", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./62", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x5555558e5620 /* 4 entries */, 32768) = 112
umount2("./62/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./62/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./62/binderfs")                 = 0
[   54.977018][ T5209] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
umount2("./62/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./62/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./62/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./62/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./62/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x5555558ed660 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555558ed660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./62/file0")                     = 0
getdents64(3, 0x5555558e5620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./62")                           = 0
mkdir("./63", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5211 attached
, child_tidptr=0x5555558e45d0) = 5211
[pid  5211] chdir("./63")               = 0
[pid  5211] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5211] setpgid(0, 0)               = 0
[pid  5211] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5211] write(3, "1000", 4)         = 4
[pid  5211] close(3)                    = 0
[pid  5211] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5211] memfd_create("syzkaller", 0) = 3
[pid  5211] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f84d3074000
[pid  5211] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  5211] munmap(0x7f84d3074000, 4194304) = 0
[pid  5211] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5211] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5211] close(3)                    = 0
[pid  5211] mkdir("./file0", 0777)      = 0
[   55.066771][ T5211] loop0: detected capacity change from 0 to 8192
[   55.074797][ T5211] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   55.087912][ T5211] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[   55.097290][ T5211] REISERFS (device loop0): using ordered data mode
[   55.103842][ T5211] reiserfs: using flush barriers
[   55.109163][ T5211] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   55.125386][ T5211] REISERFS (device loop0): checking transaction log (loop0)
[   55.146555][ T5211] REISERFS (device loop0): Using r5 hash to sort names
[   55.153407][ T5211] REISERFS (device loop0): using 3.5.x disk format
[pid  5211] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC, "") = 0
[pid  5211] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5211] chdir("./file0")            = 0
[pid  5211] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5211] close(4)                    = 0
[pid  5211] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4
[pid  5211] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 5
[pid  5211] ftruncate(5, 33587199)      = 0
[pid  5211] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<<MAP_HUGE_SHIFT, 4, 0) = 0x20000000
[pid  5211] open(".", O_RDONLY)         = 6
[pid  5211] ioctl(6, FS_IOC_GETVERSION, 0) = -1 EFAULT (Bad address)
[pid  5211] exit_group(0)               = ?
[pid  5211] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5211, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./63", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./63", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x5555558e5620 /* 4 entries */, 32768) = 112
umount2("./63/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./63/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./63/binderfs")                 = 0
[   55.159956][ T5211] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
umount2("./63/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./63/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./63/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./63/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./63/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x5555558ed660 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555558ed660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./63/file0")                     = 0
getdents64(3, 0x5555558e5620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./63")                           = 0
mkdir("./64", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5213 attached
, child_tidptr=0x5555558e45d0) = 5213
[pid  5213] chdir("./64")               = 0
[pid  5213] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5213] setpgid(0, 0)               = 0
[pid  5213] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5213] write(3, "1000", 4)         = 4
[pid  5213] close(3)                    = 0
[pid  5213] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5213] memfd_create("syzkaller", 0) = 3
[pid  5213] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f84d3074000
[pid  5213] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  5213] munmap(0x7f84d3074000, 4194304) = 0
[pid  5213] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5213] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5213] close(3)                    = 0
[pid  5213] mkdir("./file0", 0777)      = 0
[   55.253027][ T5213] loop0: detected capacity change from 0 to 8192
[   55.261475][ T5213] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   55.274463][ T5213] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[   55.283625][ T5213] REISERFS (device loop0): using ordered data mode
[   55.290126][ T5213] reiserfs: using flush barriers
[   55.295443][ T5213] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   55.311711][ T5213] REISERFS (device loop0): checking transaction log (loop0)
[   55.332988][ T5213] REISERFS (device loop0): Using r5 hash to sort names
[   55.339827][ T5213] REISERFS (device loop0): using 3.5.x disk format
[pid  5213] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC, "") = 0
[pid  5213] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5213] chdir("./file0")            = 0
[pid  5213] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5213] close(4)                    = 0
[pid  5213] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4
[pid  5213] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 5
[pid  5213] ftruncate(5, 33587199)      = 0
[pid  5213] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<<MAP_HUGE_SHIFT, 4, 0) = 0x20000000
[pid  5213] open(".", O_RDONLY)         = 6
[pid  5213] ioctl(6, FS_IOC_GETVERSION, 0) = -1 EFAULT (Bad address)
[pid  5213] exit_group(0)               = ?
[pid  5213] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5213, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./64", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./64", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x5555558e5620 /* 4 entries */, 32768) = 112
umount2("./64/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./64/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./64/binderfs")                 = 0
[   55.346453][ T5213] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
umount2("./64/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./64/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./64/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./64/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./64/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x5555558ed660 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555558ed660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./64/file0")                     = 0
getdents64(3, 0x5555558e5620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./64")                           = 0
mkdir("./65", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5215 attached
, child_tidptr=0x5555558e45d0) = 5215
[pid  5215] chdir("./65")               = 0
[pid  5215] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5215] setpgid(0, 0)               = 0
[pid  5215] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5215] write(3, "1000", 4)         = 4
[pid  5215] close(3)                    = 0
[pid  5215] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5215] memfd_create("syzkaller", 0) = 3
[pid  5215] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f84d3074000
[pid  5215] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  5215] munmap(0x7f84d3074000, 4194304) = 0
[pid  5215] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5215] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5215] close(3)                    = 0
[pid  5215] mkdir("./file0", 0777)      = 0
[   55.439150][ T5215] loop0: detected capacity change from 0 to 8192
[   55.446989][ T5215] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   55.459988][ T5215] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[   55.469148][ T5215] REISERFS (device loop0): using ordered data mode
[   55.475666][ T5215] reiserfs: using flush barriers
[pid  5215] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC, "") = 0
[pid  5215] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5215] chdir("./file0")            = 0
[pid  5215] ioctl(4, LOOP_CLR_FD)       = 0
[   55.480996][ T5215] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   55.497138][ T5215] REISERFS (device loop0): checking transaction log (loop0)
[   55.517735][ T5215] REISERFS (device loop0): Using r5 hash to sort names
[   55.524586][ T5215] REISERFS (device loop0): using 3.5.x disk format
[pid  5215] close(4)                    = 0
[pid  5215] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4
[pid  5215] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 5
[pid  5215] ftruncate(5, 33587199)      = 0
[pid  5215] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<<MAP_HUGE_SHIFT, 4, 0) = 0x20000000
[pid  5215] open(".", O_RDONLY)         = 6
[pid  5215] ioctl(6, FS_IOC_GETVERSION, 0) = -1 EFAULT (Bad address)
[pid  5215] exit_group(0)               = ?
[pid  5215] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5215, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./65", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./65", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x5555558e5620 /* 4 entries */, 32768) = 112
umount2("./65/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./65/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./65/binderfs")                 = 0
[   55.531200][ T5215] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
umount2("./65/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./65/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./65/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./65/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./65/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x5555558ed660 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555558ed660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./65/file0")                     = 0
getdents64(3, 0x5555558e5620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./65")                           = 0
mkdir("./66", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558e45d0) = 5217
./strace-static-x86_64: Process 5217 attached
[pid  5217] chdir("./66")               = 0
[pid  5217] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5217] setpgid(0, 0)               = 0
[pid  5217] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5217] write(3, "1000", 4)         = 4
[pid  5217] close(3)                    = 0
[pid  5217] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5217] memfd_create("syzkaller", 0) = 3
[pid  5217] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f84d3074000
[pid  5217] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  5217] munmap(0x7f84d3074000, 4194304) = 0
[pid  5217] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5217] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5217] close(3)                    = 0
[pid  5217] mkdir("./file0", 0777)      = 0
[   55.622094][ T5217] loop0: detected capacity change from 0 to 8192
[   55.630074][ T5217] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   55.643287][ T5217] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[   55.652486][ T5217] REISERFS (device loop0): using ordered data mode
[   55.659132][ T5217] reiserfs: using flush barriers
[pid  5217] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC, "") = 0
[   55.664584][ T5217] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   55.680744][ T5217] REISERFS (device loop0): checking transaction log (loop0)
[   55.700958][ T5217] REISERFS (device loop0): Using r5 hash to sort names
[   55.707792][ T5217] REISERFS (device loop0): using 3.5.x disk format
[pid  5217] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5217] chdir("./file0")            = 0
[pid  5217] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5217] close(4)                    = 0
[pid  5217] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4
[pid  5217] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 5
[pid  5217] ftruncate(5, 33587199)      = 0
[pid  5217] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<<MAP_HUGE_SHIFT, 4, 0) = 0x20000000
[pid  5217] open(".", O_RDONLY)         = 6
[pid  5217] ioctl(6, FS_IOC_GETVERSION, 0) = -1 EFAULT (Bad address)
[pid  5217] exit_group(0)               = ?
[pid  5217] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5217, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./66", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./66", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x5555558e5620 /* 4 entries */, 32768) = 112
umount2("./66/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./66/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./66/binderfs")                 = 0
[   55.714427][ T5217] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
umount2("./66/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./66/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./66/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./66/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./66/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x5555558ed660 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555558ed660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./66/file0")                     = 0
getdents64(3, 0x5555558e5620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./66")                           = 0
mkdir("./67", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5219 attached
, child_tidptr=0x5555558e45d0) = 5219
[pid  5219] chdir("./67")               = 0
[pid  5219] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5219] setpgid(0, 0)               = 0
[pid  5219] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5219] write(3, "1000", 4)         = 4
[pid  5219] close(3)                    = 0
[pid  5219] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5219] memfd_create("syzkaller", 0) = 3
[pid  5219] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f84d3074000
[pid  5219] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  5219] munmap(0x7f84d3074000, 4194304) = 0
[pid  5219] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5219] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5219] close(3)                    = 0
[pid  5219] mkdir("./file0", 0777)      = 0
[   55.809418][ T5219] loop0: detected capacity change from 0 to 8192
[   55.818044][ T5219] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   55.831061][ T5219] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[   55.840209][ T5219] REISERFS (device loop0): using ordered data mode
[   55.846798][ T5219] reiserfs: using flush barriers
[   55.852219][ T5219] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   55.868450][ T5219] REISERFS (device loop0): checking transaction log (loop0)
[   55.891623][ T5219] REISERFS (device loop0): Using r5 hash to sort names
[   55.898541][ T5219] REISERFS (device loop0): using 3.5.x disk format
[pid  5219] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC, "") = 0
[pid  5219] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5219] chdir("./file0")            = 0
[pid  5219] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5219] close(4)                    = 0
[pid  5219] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4
[pid  5219] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 5
[pid  5219] ftruncate(5, 33587199)      = 0
[pid  5219] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<<MAP_HUGE_SHIFT, 4, 0) = 0x20000000
[pid  5219] open(".", O_RDONLY)         = 6
[pid  5219] ioctl(6, FS_IOC_GETVERSION, 0) = -1 EFAULT (Bad address)
[pid  5219] exit_group(0)               = ?
[pid  5219] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5219, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./67", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./67", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x5555558e5620 /* 4 entries */, 32768) = 112
umount2("./67/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./67/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
[   55.905382][ T5219] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
unlink("./67/binderfs")                 = 0
umount2("./67/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./67/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./67/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./67/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./67/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x5555558ed660 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555558ed660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./67/file0")                     = 0
getdents64(3, 0x5555558e5620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./67")                           = 0
mkdir("./68", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558e45d0) = 5221
./strace-static-x86_64: Process 5221 attached
[pid  5221] chdir("./68")               = 0
[pid  5221] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5221] setpgid(0, 0)               = 0
[pid  5221] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5221] write(3, "1000", 4)         = 4
[pid  5221] close(3)                    = 0
[pid  5221] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5221] memfd_create("syzkaller", 0) = 3
[pid  5221] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f84d3074000
[pid  5221] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  5221] munmap(0x7f84d3074000, 4194304) = 0
[pid  5221] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5221] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5221] close(3)                    = 0
[pid  5221] mkdir("./file0", 0777)      = 0
[   56.002778][ T5221] loop0: detected capacity change from 0 to 8192
[   56.011649][ T5221] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   56.024638][ T5221] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[   56.033911][ T5221] REISERFS (device loop0): using ordered data mode
[   56.040399][ T5221] reiserfs: using flush barriers
[   56.045759][ T5221] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   56.061894][ T5221] REISERFS (device loop0): checking transaction log (loop0)
[   56.083538][ T5221] REISERFS (device loop0): Using r5 hash to sort names
[   56.090376][ T5221] REISERFS (device loop0): using 3.5.x disk format
[pid  5221] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC, "") = 0
[pid  5221] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5221] chdir("./file0")            = 0
[pid  5221] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5221] close(4)                    = 0
[pid  5221] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4
[pid  5221] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 5
[pid  5221] ftruncate(5, 33587199)      = 0
[pid  5221] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<<MAP_HUGE_SHIFT, 4, 0) = 0x20000000
[pid  5221] open(".", O_RDONLY)         = 6
[pid  5221] ioctl(6, FS_IOC_GETVERSION, 0) = -1 EFAULT (Bad address)
[pid  5221] exit_group(0)               = ?
[pid  5221] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5221, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./68", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./68", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x5555558e5620 /* 4 entries */, 32768) = 112
umount2("./68/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./68/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./68/binderfs")                 = 0
[   56.097011][ T5221] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
umount2("./68/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./68/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./68/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./68/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./68/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x5555558ed660 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555558ed660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./68/file0")                     = 0
getdents64(3, 0x5555558e5620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./68")                           = 0
mkdir("./69", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558e45d0) = 5223
./strace-static-x86_64: Process 5223 attached
[pid  5223] chdir("./69")               = 0
[pid  5223] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5223] setpgid(0, 0)               = 0
[pid  5223] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5223] write(3, "1000", 4)         = 4
[pid  5223] close(3)                    = 0
[pid  5223] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5223] memfd_create("syzkaller", 0) = 3
[pid  5223] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f84d3074000
[pid  5223] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  5223] munmap(0x7f84d3074000, 4194304) = 0
[pid  5223] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5223] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5223] close(3)                    = 0
[pid  5223] mkdir("./file0", 0777)      = 0
[   56.193965][ T5223] loop0: detected capacity change from 0 to 8192
[   56.202402][ T5223] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   56.215380][ T5223] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[   56.224729][ T5223] REISERFS (device loop0): using ordered data mode
[   56.231230][ T5223] reiserfs: using flush barriers
[   56.236516][ T5223] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   56.252785][ T5223] REISERFS (device loop0): checking transaction log (loop0)
[   56.273808][ T5223] REISERFS (device loop0): Using r5 hash to sort names
[   56.280691][ T5223] REISERFS (device loop0): using 3.5.x disk format
[pid  5223] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC, "") = 0
[pid  5223] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5223] chdir("./file0")            = 0
[pid  5223] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5223] close(4)                    = 0
[pid  5223] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4
[pid  5223] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 5
[pid  5223] ftruncate(5, 33587199)      = 0
[pid  5223] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<<MAP_HUGE_SHIFT, 4, 0) = 0x20000000
[pid  5223] open(".", O_RDONLY)         = 6
[pid  5223] ioctl(6, FS_IOC_GETVERSION, 0) = -1 EFAULT (Bad address)
[pid  5223] exit_group(0)               = ?
[pid  5223] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5223, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./69", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./69", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x5555558e5620 /* 4 entries */, 32768) = 112
umount2("./69/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./69/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./69/binderfs")                 = 0
[   56.287251][ T5223] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
umount2("./69/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./69/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./69/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./69/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./69/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x5555558ed660 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555558ed660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./69/file0")                     = 0
getdents64(3, 0x5555558e5620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./69")                           = 0
mkdir("./70", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5225 attached
, child_tidptr=0x5555558e45d0) = 5225
[pid  5225] chdir("./70")               = 0
[pid  5225] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5225] setpgid(0, 0)               = 0
[pid  5225] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5225] write(3, "1000", 4)         = 4
[pid  5225] close(3)                    = 0
[pid  5225] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5225] memfd_create("syzkaller", 0) = 3
[pid  5225] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f84d3074000
[pid  5225] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  5225] munmap(0x7f84d3074000, 4194304) = 0
[pid  5225] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5225] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5225] close(3)                    = 0
[pid  5225] mkdir("./file0", 0777)      = 0
[   56.379289][ T5225] loop0: detected capacity change from 0 to 8192
[   56.387740][ T5225] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   56.400766][ T5225] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[   56.409910][ T5225] REISERFS (device loop0): using ordered data mode
[   56.416443][ T5225] reiserfs: using flush barriers
[   56.421854][ T5225] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   56.438170][ T5225] REISERFS (device loop0): checking transaction log (loop0)
[   56.459759][ T5225] REISERFS (device loop0): Using r5 hash to sort names
[   56.466646][ T5225] REISERFS (device loop0): using 3.5.x disk format
[pid  5225] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC, "") = 0
[pid  5225] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5225] chdir("./file0")            = 0
[pid  5225] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5225] close(4)                    = 0
[pid  5225] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4
[pid  5225] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 5
[pid  5225] ftruncate(5, 33587199)      = 0
[pid  5225] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<<MAP_HUGE_SHIFT, 4, 0) = 0x20000000
[pid  5225] open(".", O_RDONLY)         = 6
[pid  5225] ioctl(6, FS_IOC_GETVERSION, 0) = -1 EFAULT (Bad address)
[pid  5225] exit_group(0)               = ?
[pid  5225] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5225, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./70", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./70", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x5555558e5620 /* 4 entries */, 32768) = 112
umount2("./70/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./70/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./70/binderfs")                 = 0
[   56.473296][ T5225] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
umount2("./70/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./70/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./70/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./70/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./70/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x5555558ed660 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555558ed660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./70/file0")                     = 0
getdents64(3, 0x5555558e5620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./70")                           = 0
mkdir("./71", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5227 attached
, child_tidptr=0x5555558e45d0) = 5227
[pid  5227] chdir("./71")               = 0
[pid  5227] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5227] setpgid(0, 0)               = 0
[pid  5227] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5227] write(3, "1000", 4)         = 4
[pid  5227] close(3)                    = 0
[pid  5227] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5227] memfd_create("syzkaller", 0) = 3
[pid  5227] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f84d3074000
[pid  5227] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  5227] munmap(0x7f84d3074000, 4194304) = 0
[pid  5227] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5227] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5227] close(3)                    = 0
[pid  5227] mkdir("./file0", 0777)      = 0
[   56.568798][ T5227] loop0: detected capacity change from 0 to 8192
[   56.577345][ T5227] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   56.590457][ T5227] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[   56.599641][ T5227] REISERFS (device loop0): using ordered data mode
[   56.606154][ T5227] reiserfs: using flush barriers
[   56.611506][ T5227] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   56.627653][ T5227] REISERFS (device loop0): checking transaction log (loop0)
[   56.649563][ T5227] REISERFS (device loop0): Using r5 hash to sort names
[   56.656420][ T5227] REISERFS (device loop0): using 3.5.x disk format
[pid  5227] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC, "") = 0
[pid  5227] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5227] chdir("./file0")            = 0
[pid  5227] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5227] close(4)                    = 0
[pid  5227] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4
[pid  5227] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 5
[pid  5227] ftruncate(5, 33587199)      = 0
[pid  5227] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<<MAP_HUGE_SHIFT, 4, 0) = 0x20000000
[pid  5227] open(".", O_RDONLY)         = 6
[pid  5227] ioctl(6, FS_IOC_GETVERSION, 0) = -1 EFAULT (Bad address)
[pid  5227] exit_group(0)               = ?
[pid  5227] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5227, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} ---
umount2("./71", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./71", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x5555558e5620 /* 4 entries */, 32768) = 112
umount2("./71/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./71/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./71/binderfs")                 = 0
[   56.663098][ T5227] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
umount2("./71/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./71/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./71/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./71/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./71/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x5555558ed660 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555558ed660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./71/file0")                     = 0
getdents64(3, 0x5555558e5620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./71")                           = 0
mkdir("./72", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5229 attached
, child_tidptr=0x5555558e45d0) = 5229
[pid  5229] chdir("./72")               = 0
[pid  5229] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5229] setpgid(0, 0)               = 0
[pid  5229] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5229] write(3, "1000", 4)         = 4
[pid  5229] close(3)                    = 0
[pid  5229] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5229] memfd_create("syzkaller", 0) = 3
[pid  5229] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f84d3074000
[pid  5229] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  5229] munmap(0x7f84d3074000, 4194304) = 0
[pid  5229] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5229] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5229] close(3)                    = 0
[pid  5229] mkdir("./file0", 0777)      = 0
[   56.757191][ T5229] loop0: detected capacity change from 0 to 8192
[   56.765574][ T5229] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   56.778557][ T5229] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[   56.787855][ T5229] REISERFS (device loop0): using ordered data mode
[   56.794402][ T5229] reiserfs: using flush barriers
[   56.799762][ T5229] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   56.815975][ T5229] REISERFS (device loop0): checking transaction log (loop0)
[   56.836982][ T5229] REISERFS (device loop0): Using r5 hash to sort names
[   56.843833][ T5229] REISERFS (device loop0): using 3.5.x disk format
[pid  5229] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC, "") = 0
[pid  5229] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5229] chdir("./file0")            = 0
[pid  5229] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5229] close(4)                    = 0
[pid  5229] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4
[pid  5229] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 5
[pid  5229] ftruncate(5, 33587199)      = 0
[pid  5229] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<<MAP_HUGE_SHIFT, 4, 0) = 0x20000000
[pid  5229] open(".", O_RDONLY)         = 6
[pid  5229] ioctl(6, FS_IOC_GETVERSION, 0) = -1 EFAULT (Bad address)
[pid  5229] exit_group(0)               = ?
[pid  5229] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5229, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./72", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./72", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x5555558e5620 /* 4 entries */, 32768) = 112
umount2("./72/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./72/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./72/binderfs")                 = 0
[   56.850388][ T5229] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
umount2("./72/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./72/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./72/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./72/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./72/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x5555558ed660 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555558ed660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./72/file0")                     = 0
getdents64(3, 0x5555558e5620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./72")                           = 0
mkdir("./73", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5231 attached
, child_tidptr=0x5555558e45d0) = 5231
[pid  5231] chdir("./73")               = 0
[pid  5231] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5231] setpgid(0, 0)               = 0
[pid  5231] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5231] write(3, "1000", 4)         = 4
[pid  5231] close(3)                    = 0
[pid  5231] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5231] memfd_create("syzkaller", 0) = 3
[pid  5231] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f84d3074000
[pid  5231] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  5231] munmap(0x7f84d3074000, 4194304) = 0
[pid  5231] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5231] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5231] close(3)                    = 0
[pid  5231] mkdir("./file0", 0777)      = 0
[   56.947556][ T5231] loop0: detected capacity change from 0 to 8192
[   56.955792][ T5231] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   56.968792][ T5231] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[   56.977945][ T5231] REISERFS (device loop0): using ordered data mode
[   56.984466][ T5231] reiserfs: using flush barriers
[   56.989826][ T5231] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   57.006129][ T5231] REISERFS (device loop0): checking transaction log (loop0)
[   57.027355][ T5231] REISERFS (device loop0): Using r5 hash to sort names
[   57.034297][ T5231] REISERFS (device loop0): using 3.5.x disk format
[pid  5231] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC, "") = 0
[pid  5231] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5231] chdir("./file0")            = 0
[pid  5231] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5231] close(4)                    = 0
[pid  5231] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4
[pid  5231] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 5
[pid  5231] ftruncate(5, 33587199)      = 0
[pid  5231] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<<MAP_HUGE_SHIFT, 4, 0) = 0x20000000
[pid  5231] open(".", O_RDONLY)         = 6
[pid  5231] ioctl(6, FS_IOC_GETVERSION, 0) = -1 EFAULT (Bad address)
[pid  5231] exit_group(0)               = ?
[pid  5231] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5231, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./73", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./73", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x5555558e5620 /* 4 entries */, 32768) = 112
umount2("./73/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./73/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./73/binderfs")                 = 0
[   57.040922][ T5231] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
umount2("./73/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./73/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./73/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./73/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./73/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x5555558ed660 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555558ed660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./73/file0")                     = 0
getdents64(3, 0x5555558e5620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./73")                           = 0
mkdir("./74", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558e45d0) = 5233
./strace-static-x86_64: Process 5233 attached
[pid  5233] chdir("./74")               = 0
[pid  5233] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5233] setpgid(0, 0)               = 0
[pid  5233] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5233] write(3, "1000", 4)         = 4
[pid  5233] close(3)                    = 0
[pid  5233] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5233] memfd_create("syzkaller", 0) = 3
[pid  5233] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f84d3074000
[pid  5233] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  5233] munmap(0x7f84d3074000, 4194304) = 0
[pid  5233] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5233] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5233] close(3)                    = 0
[pid  5233] mkdir("./file0", 0777)      = 0
[   57.131076][ T5233] loop0: detected capacity change from 0 to 8192
[   57.139010][ T5233] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   57.152030][ T5233] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[   57.161226][ T5233] REISERFS (device loop0): using ordered data mode
[   57.167718][ T5233] reiserfs: using flush barriers
[pid  5233] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC, "") = 0
[   57.173105][ T5233] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   57.189415][ T5233] REISERFS (device loop0): checking transaction log (loop0)
[   57.209965][ T5233] REISERFS (device loop0): Using r5 hash to sort names
[   57.216851][ T5233] REISERFS (device loop0): using 3.5.x disk format
[pid  5233] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5233] chdir("./file0")            = 0
[pid  5233] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5233] close(4)                    = 0
[pid  5233] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4
[pid  5233] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 5
[pid  5233] ftruncate(5, 33587199)      = 0
[pid  5233] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<<MAP_HUGE_SHIFT, 4, 0) = 0x20000000
[pid  5233] open(".", O_RDONLY)         = 6
[pid  5233] ioctl(6, FS_IOC_GETVERSION, 0) = -1 EFAULT (Bad address)
[pid  5233] exit_group(0)               = ?
[pid  5233] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5233, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./74", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./74", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x5555558e5620 /* 4 entries */, 32768) = 112
umount2("./74/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./74/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./74/binderfs")                 = 0
[   57.223596][ T5233] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
umount2("./74/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./74/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./74/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./74/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./74/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x5555558ed660 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555558ed660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./74/file0")                     = 0
getdents64(3, 0x5555558e5620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./74")                           = 0
mkdir("./75", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5235 attached
, child_tidptr=0x5555558e45d0) = 5235
[pid  5235] chdir("./75")               = 0
[pid  5235] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5235] setpgid(0, 0)               = 0
[pid  5235] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5235] write(3, "1000", 4)         = 4
[pid  5235] close(3)                    = 0
[pid  5235] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5235] memfd_create("syzkaller", 0) = 3
[pid  5235] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f84d3074000
[pid  5235] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  5235] munmap(0x7f84d3074000, 4194304) = 0
[pid  5235] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5235] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5235] close(3)                    = 0
[pid  5235] mkdir("./file0", 0777)      = 0
[   57.314268][ T5235] loop0: detected capacity change from 0 to 8192
[   57.322332][ T5235] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   57.335303][ T5235] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[   57.344472][ T5235] REISERFS (device loop0): using ordered data mode
[   57.351050][ T5235] reiserfs: using flush barriers
[   57.356547][ T5235] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   57.372770][ T5235] REISERFS (device loop0): checking transaction log (loop0)
[   57.393992][ T5235] REISERFS (device loop0): Using r5 hash to sort names
[   57.400862][ T5235] REISERFS (device loop0): using 3.5.x disk format
[pid  5235] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC, "") = 0
[pid  5235] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5235] chdir("./file0")            = 0
[pid  5235] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5235] close(4)                    = 0
[pid  5235] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4
[pid  5235] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 5
[pid  5235] ftruncate(5, 33587199)      = 0
[pid  5235] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<<MAP_HUGE_SHIFT, 4, 0) = 0x20000000
[pid  5235] open(".", O_RDONLY)         = 6
[pid  5235] ioctl(6, FS_IOC_GETVERSION, 0) = -1 EFAULT (Bad address)
[pid  5235] exit_group(0)               = ?
[pid  5235] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5235, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./75", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./75", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x5555558e5620 /* 4 entries */, 32768) = 112
umount2("./75/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./75/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./75/binderfs")                 = 0
[   57.407436][ T5235] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
umount2("./75/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./75/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./75/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./75/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./75/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x5555558ed660 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555558ed660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./75/file0")                     = 0
getdents64(3, 0x5555558e5620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./75")                           = 0
mkdir("./76", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558e45d0) = 5237
./strace-static-x86_64: Process 5237 attached
[pid  5237] chdir("./76")               = 0
[pid  5237] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5237] setpgid(0, 0)               = 0
[pid  5237] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5237] write(3, "1000", 4)         = 4
[pid  5237] close(3)                    = 0
[pid  5237] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5237] memfd_create("syzkaller", 0) = 3
[pid  5237] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f84d3074000
[pid  5237] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  5237] munmap(0x7f84d3074000, 4194304) = 0
[pid  5237] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5237] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5237] close(3)                    = 0
[pid  5237] mkdir("./file0", 0777)      = 0
[   57.500991][ T5237] loop0: detected capacity change from 0 to 8192
[   57.508788][ T5237] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   57.521912][ T5237] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[   57.531182][ T5237] REISERFS (device loop0): using ordered data mode
[   57.537689][ T5237] reiserfs: using flush barriers
[   57.543081][ T5237] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   57.559301][ T5237] REISERFS (device loop0): checking transaction log (loop0)
[   57.580751][ T5237] REISERFS (device loop0): Using r5 hash to sort names
[   57.587586][ T5237] REISERFS (device loop0): using 3.5.x disk format
[pid  5237] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC, "") = 0
[pid  5237] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5237] chdir("./file0")            = 0
[pid  5237] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5237] close(4)                    = 0
[pid  5237] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4
[pid  5237] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 5
[pid  5237] ftruncate(5, 33587199)      = 0
[pid  5237] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<<MAP_HUGE_SHIFT, 4, 0) = 0x20000000
[pid  5237] open(".", O_RDONLY)         = 6
[pid  5237] ioctl(6, FS_IOC_GETVERSION, 0) = -1 EFAULT (Bad address)
[pid  5237] exit_group(0)               = ?
[pid  5237] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5237, si_uid=0, si_status=0, si_utime=0, si_stime=10 /* 0.10 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./76", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./76", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x5555558e5620 /* 4 entries */, 32768) = 112
umount2("./76/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./76/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./76/binderfs")                 = 0
[   57.594215][ T5237] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
umount2("./76/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./76/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./76/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./76/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./76/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x5555558ed660 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555558ed660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./76/file0")                     = 0
getdents64(3, 0x5555558e5620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./76")                           = 0
mkdir("./77", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5239 attached
, child_tidptr=0x5555558e45d0) = 5239
[pid  5239] chdir("./77")               = 0
[pid  5239] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5239] setpgid(0, 0)               = 0
[pid  5239] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5239] write(3, "1000", 4)         = 4
[pid  5239] close(3)                    = 0
[pid  5239] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5239] memfd_create("syzkaller", 0) = 3
[pid  5239] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f84d3074000
[pid  5239] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  5239] munmap(0x7f84d3074000, 4194304) = 0
[pid  5239] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5239] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5239] close(3)                    = 0
[pid  5239] mkdir("./file0", 0777)      = 0
[   57.687641][ T5239] loop0: detected capacity change from 0 to 8192
[   57.695452][ T5239] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   57.708435][ T5239] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[   57.717616][ T5239] REISERFS (device loop0): using ordered data mode
[   57.724115][ T5239] reiserfs: using flush barriers
[pid  5239] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC, "") = 0
[   57.729410][ T5239] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   57.745636][ T5239] REISERFS (device loop0): checking transaction log (loop0)
[   57.766544][ T5239] REISERFS (device loop0): Using r5 hash to sort names
[   57.773395][ T5239] REISERFS (device loop0): using 3.5.x disk format
[pid  5239] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5239] chdir("./file0")            = 0
[pid  5239] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5239] close(4)                    = 0
[pid  5239] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4
[pid  5239] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 5
[pid  5239] ftruncate(5, 33587199)      = 0
[pid  5239] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<<MAP_HUGE_SHIFT, 4, 0) = 0x20000000
[pid  5239] open(".", O_RDONLY)         = 6
[pid  5239] ioctl(6, FS_IOC_GETVERSION, 0) = -1 EFAULT (Bad address)
[pid  5239] exit_group(0)               = ?
[pid  5239] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5239, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} ---
umount2("./77", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./77", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x5555558e5620 /* 4 entries */, 32768) = 112
umount2("./77/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./77/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./77/binderfs")                 = 0
[   57.780001][ T5239] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
umount2("./77/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./77/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./77/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./77/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./77/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x5555558ed660 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555558ed660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./77/file0")                     = 0
getdents64(3, 0x5555558e5620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./77")                           = 0
mkdir("./78", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5241 attached
, child_tidptr=0x5555558e45d0) = 5241
[pid  5241] chdir("./78")               = 0
[pid  5241] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5241] setpgid(0, 0)               = 0
[pid  5241] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5241] write(3, "1000", 4)         = 4
[pid  5241] close(3)                    = 0
[pid  5241] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5241] memfd_create("syzkaller", 0) = 3
[pid  5241] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f84d3074000
[pid  5241] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  5241] munmap(0x7f84d3074000, 4194304) = 0
[pid  5241] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5241] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5241] close(3)                    = 0
[pid  5241] mkdir("./file0", 0777)      = 0
[   57.875777][ T5241] loop0: detected capacity change from 0 to 8192
[   57.883589][ T5241] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   57.896707][ T5241] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[   57.905878][ T5241] REISERFS (device loop0): using ordered data mode
[   57.912395][ T5241] reiserfs: using flush barriers
[   57.917843][ T5241] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   57.934101][ T5241] REISERFS (device loop0): checking transaction log (loop0)
[   57.955209][ T5241] REISERFS (device loop0): Using r5 hash to sort names
[   57.962073][ T5241] REISERFS (device loop0): using 3.5.x disk format
[pid  5241] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC, "") = 0
[pid  5241] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5241] chdir("./file0")            = 0
[pid  5241] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5241] close(4)                    = 0
[pid  5241] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4
[pid  5241] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 5
[pid  5241] ftruncate(5, 33587199)      = 0
[pid  5241] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<<MAP_HUGE_SHIFT, 4, 0) = 0x20000000
[pid  5241] open(".", O_RDONLY)         = 6
[pid  5241] ioctl(6, FS_IOC_GETVERSION, 0) = -1 EFAULT (Bad address)
[pid  5241] exit_group(0)               = ?
[pid  5241] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5241, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./78", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./78", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x5555558e5620 /* 4 entries */, 32768) = 112
umount2("./78/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./78/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./78/binderfs")                 = 0
[   57.968628][ T5241] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
umount2("./78/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./78/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./78/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./78/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./78/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x5555558ed660 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555558ed660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./78/file0")                     = 0
getdents64(3, 0x5555558e5620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./78")                           = 0
mkdir("./79", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5243 attached
, child_tidptr=0x5555558e45d0) = 5243
[pid  5243] chdir("./79")               = 0
[pid  5243] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5243] setpgid(0, 0)               = 0
[pid  5243] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5243] write(3, "1000", 4)         = 4
[pid  5243] close(3)                    = 0
[pid  5243] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5243] memfd_create("syzkaller", 0) = 3
[pid  5243] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f84d3074000
[pid  5243] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  5243] munmap(0x7f84d3074000, 4194304) = 0
[pid  5243] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5243] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5243] close(3)                    = 0
[pid  5243] mkdir("./file0", 0777)      = 0
[   58.064272][ T5243] loop0: detected capacity change from 0 to 8192
[   58.072903][ T5243] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   58.085867][ T5243] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[   58.095038][ T5243] REISERFS (device loop0): using ordered data mode
[   58.101537][ T5243] reiserfs: using flush barriers
[   58.106800][ T5243] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   58.123021][ T5243] REISERFS (device loop0): checking transaction log (loop0)
[   58.143542][ T5243] REISERFS (device loop0): Using r5 hash to sort names
[   58.150380][ T5243] REISERFS (device loop0): using 3.5.x disk format
[pid  5243] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC, "") = 0
[pid  5243] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5243] chdir("./file0")            = 0
[pid  5243] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5243] close(4)                    = 0
[pid  5243] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4
[pid  5243] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 5
[pid  5243] ftruncate(5, 33587199)      = 0
[pid  5243] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<<MAP_HUGE_SHIFT, 4, 0) = 0x20000000
[pid  5243] open(".", O_RDONLY)         = 6
[pid  5243] ioctl(6, FS_IOC_GETVERSION, 0) = -1 EFAULT (Bad address)
[pid  5243] exit_group(0)               = ?
[pid  5243] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5243, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./79", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./79", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x5555558e5620 /* 4 entries */, 32768) = 112
umount2("./79/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./79/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./79/binderfs")                 = 0
[   58.157012][ T5243] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
umount2("./79/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./79/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./79/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./79/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./79/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x5555558ed660 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555558ed660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./79/file0")                     = 0
getdents64(3, 0x5555558e5620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./79")                           = 0
mkdir("./80", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558e45d0) = 5245
./strace-static-x86_64: Process 5245 attached
[pid  5245] chdir("./80")               = 0
[pid  5245] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5245] setpgid(0, 0)               = 0
[pid  5245] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5245] write(3, "1000", 4)         = 4
[pid  5245] close(3)                    = 0
[pid  5245] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5245] memfd_create("syzkaller", 0) = 3
[pid  5245] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f84d3074000
[pid  5245] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  5245] munmap(0x7f84d3074000, 4194304) = 0
[pid  5245] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5245] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5245] close(3)                    = 0
[pid  5245] mkdir("./file0", 0777)      = 0
[   58.246485][ T5245] loop0: detected capacity change from 0 to 8192
[   58.254757][ T5245] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   58.267738][ T5245] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[   58.276929][ T5245] REISERFS (device loop0): using ordered data mode
[   58.283452][ T5245] reiserfs: using flush barriers
[   58.288847][ T5245] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   58.305082][ T5245] REISERFS (device loop0): checking transaction log (loop0)
[   58.326995][ T5245] REISERFS (device loop0): Using r5 hash to sort names
[   58.333972][ T5245] REISERFS (device loop0): using 3.5.x disk format
[pid  5245] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC, "") = 0
[pid  5245] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5245] chdir("./file0")            = 0
[pid  5245] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5245] close(4)                    = 0
[pid  5245] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4
[pid  5245] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 5
[pid  5245] ftruncate(5, 33587199)      = 0
[pid  5245] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<<MAP_HUGE_SHIFT, 4, 0) = 0x20000000
[pid  5245] open(".", O_RDONLY)         = 6
[pid  5245] ioctl(6, FS_IOC_GETVERSION, 0) = -1 EFAULT (Bad address)
[pid  5245] exit_group(0)               = ?
[pid  5245] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5245, si_uid=0, si_status=0, si_utime=0, si_stime=12 /* 0.12 s */} ---
umount2("./80", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./80", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x5555558e5620 /* 4 entries */, 32768) = 112
umount2("./80/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./80/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./80/binderfs")                 = 0
[   58.340628][ T5245] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
umount2("./80/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./80/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./80/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./80/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./80/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x5555558ed660 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555558ed660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./80/file0")                     = 0
getdents64(3, 0x5555558e5620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./80")                           = 0
mkdir("./81", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5247 attached
, child_tidptr=0x5555558e45d0) = 5247
[pid  5247] chdir("./81")               = 0
[pid  5247] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5247] setpgid(0, 0)               = 0
[pid  5247] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5247] write(3, "1000", 4)         = 4
[pid  5247] close(3)                    = 0
[pid  5247] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5247] memfd_create("syzkaller", 0) = 3
[pid  5247] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f84d3074000
[pid  5247] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  5247] munmap(0x7f84d3074000, 4194304) = 0
[pid  5247] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5247] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5247] close(3)                    = 0
[pid  5247] mkdir("./file0", 0777)      = 0
[   58.433511][ T5247] loop0: detected capacity change from 0 to 8192
[   58.441793][ T5247] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   58.454765][ T5247] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[   58.464037][ T5247] REISERFS (device loop0): using ordered data mode
[   58.470547][ T5247] reiserfs: using flush barriers
[   58.475973][ T5247] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   58.492308][ T5247] REISERFS (device loop0): checking transaction log (loop0)
[   58.513734][ T5247] REISERFS (device loop0): Using r5 hash to sort names
[   58.520611][ T5247] REISERFS (device loop0): using 3.5.x disk format
[pid  5247] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC, "") = 0
[pid  5247] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5247] chdir("./file0")            = 0
[pid  5247] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5247] close(4)                    = 0
[pid  5247] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4
[pid  5247] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 5
[pid  5247] ftruncate(5, 33587199)      = 0
[pid  5247] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<<MAP_HUGE_SHIFT, 4, 0) = 0x20000000
[pid  5247] open(".", O_RDONLY)         = 6
[pid  5247] ioctl(6, FS_IOC_GETVERSION, 0) = -1 EFAULT (Bad address)
[pid  5247] exit_group(0)               = ?
[pid  5247] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5247, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./81", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./81", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x5555558e5620 /* 4 entries */, 32768) = 112
umount2("./81/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./81/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./81/binderfs")                 = 0
[   58.527220][ T5247] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
umount2("./81/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./81/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./81/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./81/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./81/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x5555558ed660 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555558ed660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./81/file0")                     = 0
getdents64(3, 0x5555558e5620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./81")                           = 0
mkdir("./82", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5249 attached
, child_tidptr=0x5555558e45d0) = 5249
[pid  5249] chdir("./82")               = 0
[pid  5249] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5249] setpgid(0, 0)               = 0
[pid  5249] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5249] write(3, "1000", 4)         = 4
[pid  5249] close(3)                    = 0
[pid  5249] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5249] memfd_create("syzkaller", 0) = 3
[pid  5249] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f84d3074000
[pid  5249] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  5249] munmap(0x7f84d3074000, 4194304) = 0
[pid  5249] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5249] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5249] close(3)                    = 0
[pid  5249] mkdir("./file0", 0777)      = 0
[   58.617542][ T5249] loop0: detected capacity change from 0 to 8192
[   58.625809][ T5249] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   58.639015][ T5249] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[   58.648170][ T5249] REISERFS (device loop0): using ordered data mode
[   58.654673][ T5249] reiserfs: using flush barriers
[pid  5249] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC, "") = 0
[   58.660007][ T5249] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   58.676266][ T5249] REISERFS (device loop0): checking transaction log (loop0)
[   58.696263][ T5249] REISERFS (device loop0): Using r5 hash to sort names
[   58.703119][ T5249] REISERFS (device loop0): using 3.5.x disk format
[pid  5249] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5249] chdir("./file0")            = 0
[pid  5249] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5249] close(4)                    = 0
[pid  5249] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4
[pid  5249] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 5
[pid  5249] ftruncate(5, 33587199)      = 0
[pid  5249] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<<MAP_HUGE_SHIFT, 4, 0) = 0x20000000
[pid  5249] open(".", O_RDONLY)         = 6
[pid  5249] ioctl(6, FS_IOC_GETVERSION, 0) = -1 EFAULT (Bad address)
[pid  5249] exit_group(0)               = ?
[pid  5249] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5249, si_uid=0, si_status=0, si_utime=0, si_stime=11 /* 0.11 s */} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
umount2("./82", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./82", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x5555558e5620 /* 4 entries */, 32768) = 112
umount2("./82/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./82/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./82/binderfs")                 = 0
[   58.709777][ T5249] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
umount2("./82/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./82/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./82/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./82/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./82/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x5555558ed660 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555558ed660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./82/file0")                     = 0
getdents64(3, 0x5555558e5620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./82")                           = 0
mkdir("./83", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558e45d0) = 5251
./strace-static-x86_64: Process 5251 attached
[pid  5251] chdir("./83")               = 0
[pid  5251] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5251] setpgid(0, 0)               = 0
[pid  5251] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5251] write(3, "1000", 4)         = 4
[pid  5251] close(3)                    = 0
[pid  5251] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5251] memfd_create("syzkaller", 0) = 3
[pid  5251] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f84d3074000
[pid  5251] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  5251] munmap(0x7f84d3074000, 4194304) = 0
[pid  5251] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5251] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5251] close(3)                    = 0
[pid  5251] mkdir("./file0", 0777)      = 0
[   58.796116][ T5251] loop0: detected capacity change from 0 to 8192
[   58.804197][ T5251] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   58.817323][ T5251] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[   58.826514][ T5251] REISERFS (device loop0): using ordered data mode
[   58.833034][ T5251] reiserfs: using flush barriers
[   58.838470][ T5251] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   58.854617][ T5251] REISERFS (device loop0): checking transaction log (loop0)
[   58.875703][ T5251] REISERFS (device loop0): Using r5 hash to sort names
[   58.882556][ T5251] REISERFS (device loop0): using 3.5.x disk format
[pid  5251] mount("/dev/loop0", "./file0", "reiserfs", MS_DIRSYNC, "") = 0
[pid  5251] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5251] chdir("./file0")            = 0
[pid  5251] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5251] close(4)                    = 0
[pid  5251] open("./bus", O_RDWR|O_CREAT|O_NOCTTY|O_TRUNC|O_SYNC|O_LARGEFILE|O_NOATIME|0x3c, 000) = 4
[pid  5251] open("./bus", O_RDWR|O_CREAT|O_SYNC|O_DIRECT|O_NOATIME|FASYNC, 000) = 5
[pid  5251] ftruncate(5, 33587199)      = 0
[pid  5251] mmap(0x20000000, 6291456, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM|PROT_GROWSUP|0x7ffff0, MAP_SHARED|MAP_FIXED|MAP_LOCKED|1<<MAP_HUGE_SHIFT, 4, 0) = 0x20000000
[pid  5251] open(".", O_RDONLY)         = 6
[pid  5251] ioctl(6, FS_IOC_GETVERSION, 0) = -1 EFAULT (Bad address)
[pid  5251] exit_group(0)               = ?
[pid  5251] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5251, si_uid=0, si_status=0, si_utime=0, si_stime=13 /* 0.13 s */} ---
umount2("./83", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./83", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x5555558e5620 /* 4 entries */, 32768) = 112
umount2("./83/binderfs", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./83/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}) = 0
unlink("./83/binderfs")                 = 0
[   58.889112][ T5251] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
umount2("./83/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = 0
umount2("./83/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
lstat("./83/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
umount2("./83/file0", MNT_DETACH|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./83/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x5555558ed660 /* 2 entries */, 32768) = 48
getdents64(4, 0x5555558ed660 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./83/file0")                     = 0
getdents64(3, 0x5555558e5620 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./83")                           = 0
mkdir("./84", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDWR)  = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555558e45d0) = 5253
./strace-static-x86_64: Process 5253 attached
[pid  5253] chdir("./84")               = 0
[pid  5253] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5253] setpgid(0, 0)               = 0
[pid  5253] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5253] write(3, "1000", 4)         = 4
[pid  5253] close(3)                    = 0
[pid  5253] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5253] memfd_create("syzkaller", 0) = 3
[pid  5253] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f84d3074000
[pid  5253] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 4194304) = 4194304
[pid  5253] munmap(0x7f84d3074000, 4194304) = 0
[pid  5253] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5253] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5253] close(3)                    = 0
[pid  5253] mkdir("./file0", 0777)      = 0