ci2-upstream-fs/strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ci2-upstream-fs/syz-executor2710638845

<...>
[   87.912544][   T36] cfg80211: failed to load regulatory.db
Warning: Permanently added '10.128.1.7' (ED25519) to the list of known hosts.
execve("ci2-upstream-fs/syz-executor2710638845", ["ci2-upstream-fs/syz-executor2710638845"], 0x7ffe577f4880 /* 10 vars */) = 0
brk(NULL)                               = 0x55555fc89000
brk(0x55555fc89d80)                     = 0x55555fc89d80
arch_prctl(ARCH_SET_FS, 0x55555fc89400) = 0
set_tid_address(0x55555fc896d0)         = 5606
set_robust_list(0x55555fc896e0, 24)     = 0
rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053) = 0
prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0
readlinkat(AT_FDCWD, "/proc/self/exe", "/root/ci2-upstream-fs/syz-executor2710638845", 4096) = 44
getrandom("\xb9\xa2\x2a\x88\x8b\xd5\x94\xcd", 8, GRND_NONBLOCK) = 8
brk(NULL)                               = 0x55555fc89d80
brk(0x55555fcaad80)                     = 0x55555fcaad80
brk(0x55555fcab000)                     = 0x55555fcab000
mprotect(0x7f74c56b2000, 20480, PROT_READ) = 0
mmap(0x1ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffffffff000
mmap(0x200000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200000000000
mmap(0x200001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200001000000
getrandom("\x1c\x06\x2f\x78\x0b\x28\x72\x14", 8, GRND_NONBLOCK) = 8
mkdir("./syzkaller.A1b5Xb", 0700)       = 0
chmod("./syzkaller.A1b5Xb", 0777)       = 0
chdir("./syzkaller.A1b5Xb")             = 0
mkdir("./0", 0777)                      = 0
openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
rt_sigprocmask(SIG_BLOCK, ~[], [], 8)   = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5607 attached
, child_tidptr=0x55555fc896d0) = 5607
[pid  5606] rt_sigprocmask(SIG_SETMASK, [] <unfinished ...>
[pid  5607] set_robust_list(0x55555fc896e0, 24) = 0
[pid  5606] <... rt_sigprocmask resumed>, NULL, 8) = 0
[pid  5607] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid  5607] chdir("./0")                = 0
[pid  5607] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5607] setpgid(0, 0)               = 0
[pid  5607] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5607] write(3, "1000", 4)         = 4
[pid  5607] close(3)                    = 0
[pid  5607] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5607] write(1, "executing program\n", 18) = 18
[pid  5607] open_tree(AT_FDCWD, NULL, OPEN_TREE_CLONE|OPEN_TREE_CLOEXEC|AT_SYMLINK_NOFOLLOW|AT_EMPTY_PATH|AT_RECURSIVE) = -1 EFAULT (Bad address)
[pid  5607] openat(AT_FDCWD, NULL, O_RDWR) = -1 EFAULT (Bad address)
executing program
[pid  5607] memfd_create("syzkaller", 0) = 3
[pid  5607] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f74bd1f3000
[pid  5607] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216
[pid  5607] munmap(0x7f74bd1f3000, 138412032) = 0
[pid  5607] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5607] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5607] close(3)                    = 0
[pid  5607] close(4)                    = 0
[pid  5607] mkdir("./file1", 0777)      = 0
[   89.546336][ T5607] loop0: detected capacity change from 0 to 32768
[pid  5607] mount("/dev/loop0", "./file1", "jfs", MS_NODEV|MS_POSIXACL|MS_STRICTATIME, "iocharset=koi8-u,nointegrity,iocharset=iso8859-14,errors=continue,discard,errors=remount-ro,integrit"...) = 0
[pid  5607] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3
[pid  5607] chdir("./file1")            = 0
[pid  5607] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4
[pid  5607] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5607] close(4)                    = 0
[pid  5607] write(-1, "", 0)            = -1 EBADF (Bad file descriptor)
[pid  5607] mkdirat(AT_FDCWD, NULL, 0777) = -1 EFAULT (Bad address)
[pid  5607] exit_group(0)               = ?
[pid  5607] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5607, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=19 /* 0.19 s */} ---
restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0
umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x55555fc8a790 /* 4 entries */, 32768) = 112
umount2("./0/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0
umount2("./0/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./0/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./0/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./0/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x55555fc927d0 /* 2 entries */, 32768) = 48
getdents64(4, 0x55555fc927d0 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./0/file1")                      = 0
umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./0/binderfs")                  = 0
getdents64(3, 0x55555fc8a790 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./0")                            = 0
mkdir("./1", 0777)                      = 0
openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
rt_sigprocmask(SIG_BLOCK, ~[], [], 8)   = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x55555fc896d0) = 5608
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
ci2-upstream-fs/strace-static-x86_64: Process 5608 attached
[pid  5608] set_robust_list(0x55555fc896e0, 24) = 0
[pid  5608] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid  5608] chdir("./1")                = 0
[pid  5608] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5608] setpgid(0, 0)               = 0
[pid  5608] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5608] write(3, "1000", 4)         = 4
[pid  5608] close(3)                    = 0
[pid  5608] symlink("/dev/binderfs", "./binderfs") = 0
executing program
[pid  5608] write(1, "executing program\n", 18) = 18
[pid  5608] open_tree(AT_FDCWD, NULL, OPEN_TREE_CLONE|OPEN_TREE_CLOEXEC|AT_SYMLINK_NOFOLLOW|AT_EMPTY_PATH|AT_RECURSIVE) = -1 EFAULT (Bad address)
[pid  5608] openat(AT_FDCWD, NULL, O_RDWR) = -1 EFAULT (Bad address)
[pid  5608] memfd_create("syzkaller", 0) = 3
[pid  5608] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f74bd1f3000
[pid  5608] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216
[pid  5608] munmap(0x7f74bd1f3000, 138412032) = 0
[pid  5608] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5608] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5608] close(3)                    = 0
[pid  5608] close(4)                    = 0
[pid  5608] mkdir("./file1", 0777)      = 0
[pid  5608] mount("/dev/loop0", "./file1", "jfs", MS_NODEV|MS_POSIXACL|MS_STRICTATIME, "iocharset=koi8-u,nointegrity,iocharset=iso8859-14,errors=continue,discard,errors=remount-ro,integrit"...) = 0
[pid  5608] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3
[pid  5608] chdir("./file1")            = 0
[pid  5608] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4
[pid  5608] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5608] close(4)                    = 0
[pid  5608] write(-1, "", 0)            = -1 EBADF (Bad file descriptor)
[pid  5608] mkdirat(AT_FDCWD, NULL, 0777) = -1 EFAULT (Bad address)
[pid  5608] exit_group(0)               = ?
[pid  5608] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5608, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=17 /* 0.17 s */} ---
[   90.078177][ T5608] loop0: detected capacity change from 0 to 32768
restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0
umount2("./1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x55555fc8a790 /* 4 entries */, 32768) = 112
umount2("./1/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0
umount2("./1/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./1/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./1/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./1/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x55555fc927d0 /* 2 entries */, 32768) = 48
getdents64(4, 0x55555fc927d0 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./1/file1")                      = 0
umount2("./1/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./1/binderfs")                  = 0
getdents64(3, 0x55555fc8a790 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./1")                            = 0
mkdir("./2", 0777)                      = 0
openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
rt_sigprocmask(SIG_BLOCK, ~[], [], 8)   = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5610 attached
 <unfinished ...>
[pid  5610] set_robust_list(0x55555fc896e0, 24 <unfinished ...>
[pid  5606] <... clone resumed>, child_tidptr=0x55555fc896d0) = 5610
[pid  5610] <... set_robust_list resumed>) = 0
[pid  5606] rt_sigprocmask(SIG_SETMASK, [] <unfinished ...>
[pid  5610] rt_sigprocmask(SIG_SETMASK, [] <unfinished ...>
[pid  5606] <... rt_sigprocmask resumed>, NULL, 8) = 0
[pid  5610] <... rt_sigprocmask resumed>, NULL, 8) = 0
[pid  5610] chdir("./2")                = 0
[pid  5610] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5610] setpgid(0, 0)               = 0
[pid  5610] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5610] write(3, "1000", 4)         = 4
[pid  5610] close(3)                    = 0
[pid  5610] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5610] write(1, "executing program\n", 18) = 18
executing program
[pid  5610] open_tree(AT_FDCWD, NULL, OPEN_TREE_CLONE|OPEN_TREE_CLOEXEC|AT_SYMLINK_NOFOLLOW|AT_EMPTY_PATH|AT_RECURSIVE) = -1 EFAULT (Bad address)
[pid  5610] openat(AT_FDCWD, NULL, O_RDWR) = -1 EFAULT (Bad address)
[pid  5610] memfd_create("syzkaller", 0) = 3
[pid  5610] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f74bd1f3000
[pid  5610] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216
[pid  5610] munmap(0x7f74bd1f3000, 138412032) = 0
[pid  5610] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5610] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5610] close(3)                    = 0
[pid  5610] close(4)                    = 0
[pid  5610] mkdir("./file1", 0777)      = 0
[pid  5610] mount("/dev/loop0", "./file1", "jfs", MS_NODEV|MS_POSIXACL|MS_STRICTATIME, "iocharset=koi8-u,nointegrity,iocharset=iso8859-14,errors=continue,discard,errors=remount-ro,integrit"...) = 0
[pid  5610] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3
[pid  5610] chdir("./file1")            = 0
[pid  5610] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4
[pid  5610] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5610] close(4)                    = 0
[pid  5610] write(-1, "", 0)            = -1 EBADF (Bad file descriptor)
[pid  5610] mkdirat(AT_FDCWD, NULL, 0777) = -1 EFAULT (Bad address)
[pid  5610] exit_group(0)               = ?
[pid  5610] +++ exited with 0 +++
[   90.534245][ T5610] loop0: detected capacity change from 0 to 32768
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5610, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=17 /* 0.17 s */} ---
restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0
umount2("./2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x55555fc8a790 /* 4 entries */, 32768) = 112
umount2("./2/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0
umount2("./2/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./2/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./2/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./2/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x55555fc927d0 /* 2 entries */, 32768) = 48
getdents64(4, 0x55555fc927d0 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./2/file1")                      = 0
umount2("./2/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./2/binderfs")                  = 0
getdents64(3, 0x55555fc8a790 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./2")                            = 0
mkdir("./3", 0777)                      = 0
openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
rt_sigprocmask(SIG_BLOCK, ~[], [], 8)   = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5611 attached
 <unfinished ...>
[pid  5611] set_robust_list(0x55555fc896e0, 24 <unfinished ...>
[pid  5606] <... clone resumed>, child_tidptr=0x55555fc896d0) = 5611
[pid  5611] <... set_robust_list resumed>) = 0
[pid  5611] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid  5606] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid  5611] chdir("./3")                = 0
[pid  5611] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5611] setpgid(0, 0)               = 0
[pid  5611] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5611] write(3, "1000", 4)         = 4
[pid  5611] close(3)                    = 0
[pid  5611] symlink("/dev/binderfs", "./binderfs") = 0
executing program
[pid  5611] write(1, "executing program\n", 18) = 18
[pid  5611] open_tree(AT_FDCWD, NULL, OPEN_TREE_CLONE|OPEN_TREE_CLOEXEC|AT_SYMLINK_NOFOLLOW|AT_EMPTY_PATH|AT_RECURSIVE) = -1 EFAULT (Bad address)
[pid  5611] openat(AT_FDCWD, NULL, O_RDWR) = -1 EFAULT (Bad address)
[pid  5611] memfd_create("syzkaller", 0) = 3
[pid  5611] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f74bd1f3000
[pid  5611] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216
[pid  5611] munmap(0x7f74bd1f3000, 138412032) = 0
[pid  5611] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5611] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5611] close(3)                    = 0
[pid  5611] close(4)                    = 0
[pid  5611] mkdir("./file1", 0777)      = 0
[pid  5611] mount("/dev/loop0", "./file1", "jfs", MS_NODEV|MS_POSIXACL|MS_STRICTATIME, "iocharset=koi8-u,nointegrity,iocharset=iso8859-14,errors=continue,discard,errors=remount-ro,integrit"...) = 0
[pid  5611] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3
[pid  5611] chdir("./file1")            = 0
[pid  5611] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4
[pid  5611] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5611] close(4)                    = 0
[pid  5611] write(-1, "", 0)            = -1 EBADF (Bad file descriptor)
[pid  5611] mkdirat(AT_FDCWD, NULL, 0777) = -1 EFAULT (Bad address)
[pid  5611] exit_group(0)               = ?
[pid  5611] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5611, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} ---
restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0
umount2("./3", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
[   90.958441][ T5611] loop0: detected capacity change from 0 to 32768
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x55555fc8a790 /* 4 entries */, 32768) = 112
umount2("./3/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0
umount2("./3/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./3/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./3/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./3/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x55555fc927d0 /* 2 entries */, 32768) = 48
getdents64(4, 0x55555fc927d0 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./3/file1")                      = 0
umount2("./3/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./3/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./3/binderfs")                  = 0
getdents64(3, 0x55555fc8a790 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./3")                            = 0
mkdir("./4", 0777)                      = 0
openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
rt_sigprocmask(SIG_BLOCK, ~[], [], 8)   = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5613 attached
, child_tidptr=0x55555fc896d0) = 5613
[pid  5606] rt_sigprocmask(SIG_SETMASK, [] <unfinished ...>
[pid  5613] set_robust_list(0x55555fc896e0, 24 <unfinished ...>
[pid  5606] <... rt_sigprocmask resumed>, NULL, 8) = 0
[pid  5613] <... set_robust_list resumed>) = 0
[pid  5613] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid  5613] chdir("./4")                = 0
[pid  5613] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5613] setpgid(0, 0)               = 0
[pid  5613] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5613] write(3, "1000", 4)         = 4
[pid  5613] close(3)                    = 0
[pid  5613] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5613] write(1, "executing program\n", 18) = 18
[pid  5613] open_tree(AT_FDCWD, NULL, OPEN_TREE_CLONE|OPEN_TREE_CLOEXEC|AT_SYMLINK_NOFOLLOW|AT_EMPTY_PATH|AT_RECURSIVE) = -1 EFAULT (Bad address)
[pid  5613] openat(AT_FDCWD, NULL, O_RDWR) = -1 EFAULT (Bad address)
[pid  5613] memfd_create("syzkaller", 0) = 3
[pid  5613] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f74bd1f3000
executing program
[pid  5613] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216
[pid  5613] munmap(0x7f74bd1f3000, 138412032) = 0
[pid  5613] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5613] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5613] close(3)                    = 0
[pid  5613] close(4)                    = 0
[pid  5613] mkdir("./file1", 0777)      = 0
[pid  5613] mount("/dev/loop0", "./file1", "jfs", MS_NODEV|MS_POSIXACL|MS_STRICTATIME, "iocharset=koi8-u,nointegrity,iocharset=iso8859-14,errors=continue,discard,errors=remount-ro,integrit"...) = 0
[pid  5613] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3
[pid  5613] chdir("./file1")            = 0
[pid  5613] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4
[pid  5613] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5613] close(4)                    = 0
[pid  5613] write(-1, "", 0)            = -1 EBADF (Bad file descriptor)
[pid  5613] mkdirat(AT_FDCWD, NULL, 0777) = -1 EFAULT (Bad address)
[pid  5613] exit_group(0)               = ?
[pid  5613] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5613, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=12 /* 0.12 s */} ---
umount2("./4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x55555fc8a790 /* 4 entries */, 32768) = 112
[   91.383150][ T5613] loop0: detected capacity change from 0 to 32768
umount2("./4/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0
umount2("./4/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./4/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./4/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./4/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x55555fc927d0 /* 2 entries */, 32768) = 48
getdents64(4, 0x55555fc927d0 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./4/file1")                      = 0
umount2("./4/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./4/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./4/binderfs")                  = 0
getdents64(3, 0x55555fc8a790 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./4")                            = 0
mkdir("./5", 0777)                      = 0
openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
rt_sigprocmask(SIG_BLOCK, ~[], [], 8)   = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5614 attached
, child_tidptr=0x55555fc896d0) = 5614
[pid  5606] rt_sigprocmask(SIG_SETMASK, [] <unfinished ...>
[pid  5614] set_robust_list(0x55555fc896e0, 24 <unfinished ...>
[pid  5606] <... rt_sigprocmask resumed>, NULL, 8) = 0
[pid  5614] <... set_robust_list resumed>) = 0
[pid  5614] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid  5614] chdir("./5")                = 0
[pid  5614] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5614] setpgid(0, 0)               = 0
[pid  5614] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5614] write(3, "1000", 4)         = 4
[pid  5614] close(3)                    = 0
[pid  5614] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5614] write(1, "executing program\n", 18) = 18
[pid  5614] open_tree(AT_FDCWD, NULL, OPEN_TREE_CLONE|OPEN_TREE_CLOEXEC|AT_SYMLINK_NOFOLLOW|AT_EMPTY_PATH|AT_RECURSIVE) = -1 EFAULT (Bad address)
executing program
[pid  5614] openat(AT_FDCWD, NULL, O_RDWR) = -1 EFAULT (Bad address)
[pid  5614] memfd_create("syzkaller", 0) = 3
[pid  5614] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f74bd1f3000
[pid  5614] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216
[pid  5614] munmap(0x7f74bd1f3000, 138412032) = 0
[pid  5614] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5614] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5614] close(3)                    = 0
[pid  5614] close(4)                    = 0
[pid  5614] mkdir("./file1", 0777)      = 0
[   91.758216][ T5614] loop0: detected capacity change from 0 to 32768
[pid  5614] mount("/dev/loop0", "./file1", "jfs", MS_NODEV|MS_POSIXACL|MS_STRICTATIME, "iocharset=koi8-u,nointegrity,iocharset=iso8859-14,errors=continue,discard,errors=remount-ro,integrit"...) = 0
[pid  5614] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3
[pid  5614] chdir("./file1")            = 0
[pid  5614] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4
[pid  5614] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5614] close(4)                    = 0
[pid  5614] write(-1, "", 0)            = -1 EBADF (Bad file descriptor)
[pid  5614] mkdirat(AT_FDCWD, NULL, 0777) = -1 EFAULT (Bad address)
[pid  5614] exit_group(0)               = ?
[pid  5614] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5614, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=17 /* 0.17 s */} ---
restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0
umount2("./5", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x55555fc8a790 /* 4 entries */, 32768) = 112
umount2("./5/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0
umount2("./5/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./5/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./5/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./5/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x55555fc927d0 /* 2 entries */, 32768) = 48
getdents64(4, 0x55555fc927d0 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./5/file1")                      = 0
umount2("./5/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./5/binderfs")                  = 0
getdents64(3, 0x55555fc8a790 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./5")                            = 0
mkdir("./6", 0777)                      = 0
openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
rt_sigprocmask(SIG_BLOCK, ~[], [], 8)   = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5615 attached
, child_tidptr=0x55555fc896d0) = 5615
[pid  5606] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid  5615] set_robust_list(0x55555fc896e0, 24) = 0
[pid  5615] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid  5615] chdir("./6")                = 0
[pid  5615] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5615] setpgid(0, 0)               = 0
[pid  5615] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5615] write(3, "1000", 4)         = 4
[pid  5615] close(3)                    = 0
[pid  5615] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5615] write(1, "executing program\n", 18) = 18
executing program
[pid  5615] open_tree(AT_FDCWD, NULL, OPEN_TREE_CLONE|OPEN_TREE_CLOEXEC|AT_SYMLINK_NOFOLLOW|AT_EMPTY_PATH|AT_RECURSIVE) = -1 EFAULT (Bad address)
[pid  5615] openat(AT_FDCWD, NULL, O_RDWR) = -1 EFAULT (Bad address)
[pid  5615] memfd_create("syzkaller", 0) = 3
[pid  5615] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f74bd1f3000
[pid  5615] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216
[pid  5615] munmap(0x7f74bd1f3000, 138412032) = 0
[pid  5615] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5615] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5615] close(3)                    = 0
[pid  5615] close(4)                    = 0
[pid  5615] mkdir("./file1", 0777)      = 0
[pid  5615] mount("/dev/loop0", "./file1", "jfs", MS_NODEV|MS_POSIXACL|MS_STRICTATIME, "iocharset=koi8-u,nointegrity,iocharset=iso8859-14,errors=continue,discard,errors=remount-ro,integrit"...) = 0
[pid  5615] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3
[pid  5615] chdir("./file1")            = 0
[pid  5615] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4
[pid  5615] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5615] close(4)                    = 0
[pid  5615] write(-1, "", 0)            = -1 EBADF (Bad file descriptor)
[pid  5615] mkdirat(AT_FDCWD, NULL, 0777) = -1 EFAULT (Bad address)
[pid  5615] exit_group(0)               = ?
[pid  5615] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5615, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=16 /* 0.16 s */} ---
umount2("./6", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x55555fc8a790 /* 4 entries */, 32768) = 112
[   92.253064][ T5615] loop0: detected capacity change from 0 to 32768
umount2("./6/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0
umount2("./6/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./6/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./6/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./6/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x55555fc927d0 /* 2 entries */, 32768) = 48
getdents64(4, 0x55555fc927d0 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./6/file1")                      = 0
umount2("./6/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./6/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./6/binderfs")                  = 0
getdents64(3, 0x55555fc8a790 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./6")                            = 0
mkdir("./7", 0777)                      = 0
openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3
ioctl(3, LOOP_CLR_FD)                   = 0
close(3)                                = 0
rt_sigprocmask(SIG_BLOCK, ~[], [], 8)   = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5616 attached
, child_tidptr=0x55555fc896d0) = 5616
[pid  5606] rt_sigprocmask(SIG_SETMASK, [] <unfinished ...>
[pid  5616] set_robust_list(0x55555fc896e0, 24 <unfinished ...>
[pid  5606] <... rt_sigprocmask resumed>, NULL, 8) = 0
[pid  5616] <... set_robust_list resumed>) = 0
[pid  5616] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid  5616] chdir("./7")                = 0
[pid  5616] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5616] setpgid(0, 0)               = 0
[pid  5616] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5616] write(3, "1000", 4)         = 4
[pid  5616] close(3)                    = 0
[pid  5616] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5616] write(1, "executing program\n", 18) = 18
[pid  5616] open_tree(AT_FDCWD, NULL, OPEN_TREE_CLONE|OPEN_TREE_CLOEXEC|AT_SYMLINK_NOFOLLOW|AT_EMPTY_PATH|AT_RECURSIVE) = -1 EFAULT (Bad address)
[pid  5616] openat(AT_FDCWD, NULL, O_RDWR) = -1 EFAULT (Bad address)
executing program
[pid  5616] memfd_create("syzkaller", 0) = 3
[pid  5616] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f74bd1f3000
[pid  5616] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216
[pid  5616] munmap(0x7f74bd1f3000, 138412032) = 0
[pid  5616] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5616] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5616] close(3)                    = 0
[pid  5616] close(4)                    = 0
[pid  5616] mkdir("./file1", 0777)      = 0
[pid  5616] mount("/dev/loop0", "./file1", "jfs", MS_NODEV|MS_POSIXACL|MS_STRICTATIME, "iocharset=koi8-u,nointegrity,iocharset=iso8859-14,errors=continue,discard,errors=remount-ro,integrit"...) = 0
[pid  5616] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3
[pid  5616] chdir("./file1")            = 0
[pid  5616] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4
[pid  5616] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5616] close(4)                    = 0
[pid  5616] write(-1, "", 0)            = -1 EBADF (Bad file descriptor)
[pid  5616] mkdirat(AT_FDCWD, NULL, 0777) = -1 EFAULT (Bad address)
[pid  5616] exit_group(0)               = ?
[pid  5616] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5616, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=16 /* 0.16 s */} ---
restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0
umount2("./7", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x55555fc8a790 /* 4 entries */, 32768) = 112
[   92.641908][ T5616] loop0: detected capacity change from 0 to 32768
umount2("./7/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0
umount2("./7/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./7/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./7/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./7/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x55555fc927d0 /* 2 entries */, 32768) = 48
getdents64(4, 0x55555fc927d0 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./7/file1")                      = 0
umount2("./7/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./7/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./7/binderfs")                  = 0
getdents64(3, 0x55555fc8a790 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./7")                            = 0
mkdir("./8", 0777)                      = 0
openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
rt_sigprocmask(SIG_BLOCK, ~[], [], 8)   = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5617 attached
, child_tidptr=0x55555fc896d0) = 5617
[pid  5617] set_robust_list(0x55555fc896e0, 24 <unfinished ...>
[pid  5606] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid  5617] <... set_robust_list resumed>) = 0
[pid  5617] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid  5617] chdir("./8")                = 0
[pid  5617] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5617] setpgid(0, 0)               = 0
[pid  5617] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5617] write(3, "1000", 4)         = 4
[pid  5617] close(3)                    = 0
[pid  5617] symlink("/dev/binderfs", "./binderfs") = 0
executing program
[pid  5617] write(1, "executing program\n", 18) = 18
[pid  5617] open_tree(AT_FDCWD, NULL, OPEN_TREE_CLONE|OPEN_TREE_CLOEXEC|AT_SYMLINK_NOFOLLOW|AT_EMPTY_PATH|AT_RECURSIVE) = -1 EFAULT (Bad address)
[pid  5617] openat(AT_FDCWD, NULL, O_RDWR) = -1 EFAULT (Bad address)
[pid  5617] memfd_create("syzkaller", 0) = 3
[pid  5617] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f74bd1f3000
[pid  5617] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216
[pid  5617] munmap(0x7f74bd1f3000, 138412032) = 0
[pid  5617] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5617] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5617] close(3)                    = 0
[pid  5617] close(4)                    = 0
[pid  5617] mkdir("./file1", 0777)      = 0
[pid  5617] mount("/dev/loop0", "./file1", "jfs", MS_NODEV|MS_POSIXACL|MS_STRICTATIME, "iocharset=koi8-u,nointegrity,iocharset=iso8859-14,errors=continue,discard,errors=remount-ro,integrit"...) = 0
[pid  5617] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3
[pid  5617] chdir("./file1")            = 0
[pid  5617] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4
[pid  5617] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5617] close(4)                    = 0
[pid  5617] write(-1, "", 0)            = -1 EBADF (Bad file descriptor)
[pid  5617] mkdirat(AT_FDCWD, NULL, 0777) = -1 EFAULT (Bad address)
[pid  5617] exit_group(0)               = ?
[pid  5617] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5617, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=12 /* 0.12 s */} ---
restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0
umount2("./8", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[   93.064257][ T5617] loop0: detected capacity change from 0 to 32768
openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x55555fc8a790 /* 4 entries */, 32768) = 112
umount2("./8/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0
umount2("./8/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./8/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./8/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./8/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x55555fc927d0 /* 2 entries */, 32768) = 48
getdents64(4, 0x55555fc927d0 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./8/file1")                      = 0
umount2("./8/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./8/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./8/binderfs")                  = 0
getdents64(3, 0x55555fc8a790 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./8")                            = 0
mkdir("./9", 0777)                      = 0
openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
rt_sigprocmask(SIG_BLOCK, ~[], [], 8)   = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5618 attached
, child_tidptr=0x55555fc896d0) = 5618
[pid  5606] rt_sigprocmask(SIG_SETMASK, [] <unfinished ...>
[pid  5618] set_robust_list(0x55555fc896e0, 24 <unfinished ...>
[pid  5606] <... rt_sigprocmask resumed>, NULL, 8) = 0
[pid  5618] <... set_robust_list resumed>) = 0
[pid  5618] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid  5618] chdir("./9")                = 0
[pid  5618] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5618] setpgid(0, 0)               = 0
[pid  5618] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5618] write(3, "1000", 4)         = 4
[pid  5618] close(3)                    = 0
[pid  5618] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5618] write(1, "executing program\n", 18) = 18
executing program
[pid  5618] open_tree(AT_FDCWD, NULL, OPEN_TREE_CLONE|OPEN_TREE_CLOEXEC|AT_SYMLINK_NOFOLLOW|AT_EMPTY_PATH|AT_RECURSIVE) = -1 EFAULT (Bad address)
[pid  5618] openat(AT_FDCWD, NULL, O_RDWR) = -1 EFAULT (Bad address)
[pid  5618] memfd_create("syzkaller", 0) = 3
[pid  5618] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f74bd1f3000
[pid  5618] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216
[pid  5618] munmap(0x7f74bd1f3000, 138412032) = 0
[pid  5618] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5618] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5618] close(3)                    = 0
[pid  5618] close(4)                    = 0
[pid  5618] mkdir("./file1", 0777)      = 0
[pid  5618] mount("/dev/loop0", "./file1", "jfs", MS_NODEV|MS_POSIXACL|MS_STRICTATIME, "iocharset=koi8-u,nointegrity,iocharset=iso8859-14,errors=continue,discard,errors=remount-ro,integrit"...) = 0
[pid  5618] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3
[pid  5618] chdir("./file1")            = 0
[pid  5618] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4
[pid  5618] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5618] close(4)                    = 0
[pid  5618] write(-1, "", 0)            = -1 EBADF (Bad file descriptor)
[pid  5618] mkdirat(AT_FDCWD, NULL, 0777) = -1 EFAULT (Bad address)
[pid  5618] exit_group(0)               = ?
[   93.501571][ T5618] loop0: detected capacity change from 0 to 32768
[pid  5618] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5618, si_uid=0, si_status=0, si_utime=0, si_stime=16 /* 0.16 s */} ---
restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0
umount2("./9", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x55555fc8a790 /* 4 entries */, 32768) = 112
umount2("./9/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0
umount2("./9/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./9/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./9/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./9/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x55555fc927d0 /* 2 entries */, 32768) = 48
getdents64(4, 0x55555fc927d0 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./9/file1")                      = 0
umount2("./9/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./9/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./9/binderfs")                  = 0
getdents64(3, 0x55555fc8a790 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./9")                            = 0
mkdir("./10", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
rt_sigprocmask(SIG_BLOCK, ~[], [], 8)   = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5619 attached
, child_tidptr=0x55555fc896d0) = 5619
[pid  5606] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid  5619] set_robust_list(0x55555fc896e0, 24) = 0
[pid  5619] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid  5619] chdir("./10")               = 0
[pid  5619] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5619] setpgid(0, 0)               = 0
[pid  5619] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5619] write(3, "1000", 4)         = 4
[pid  5619] close(3)                    = 0
[pid  5619] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5619] write(1, "executing program\n", 18) = 18
[pid  5619] open_tree(AT_FDCWD, NULL, OPEN_TREE_CLONE|OPEN_TREE_CLOEXEC|AT_SYMLINK_NOFOLLOW|AT_EMPTY_PATH|AT_RECURSIVE) = -1 EFAULT (Bad address)
executing program
[pid  5619] openat(AT_FDCWD, NULL, O_RDWR) = -1 EFAULT (Bad address)
[pid  5619] memfd_create("syzkaller", 0) = 3
[pid  5619] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f74bd1f3000
[pid  5619] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216
[pid  5619] munmap(0x7f74bd1f3000, 138412032) = 0
[pid  5619] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5619] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5619] close(3)                    = 0
[pid  5619] close(4)                    = 0
[pid  5619] mkdir("./file1", 0777)      = 0
[pid  5619] mount("/dev/loop0", "./file1", "jfs", MS_NODEV|MS_POSIXACL|MS_STRICTATIME, "iocharset=koi8-u,nointegrity,iocharset=iso8859-14,errors=continue,discard,errors=remount-ro,integrit"...) = 0
[pid  5619] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3
[pid  5619] chdir("./file1")            = 0
[pid  5619] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4
[pid  5619] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5619] close(4)                    = 0
[pid  5619] write(-1, "", 0)            = -1 EBADF (Bad file descriptor)
[pid  5619] mkdirat(AT_FDCWD, NULL, 0777) = -1 EFAULT (Bad address)
[pid  5619] exit_group(0)               = ?
[pid  5619] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5619, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=13 /* 0.13 s */} ---
restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0
umount2("./10", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x55555fc8a790 /* 4 entries */, 32768) = 112
umount2("./10/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0
umount2("./10/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./10/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./10/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./10/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x55555fc927d0 /* 2 entries */, 32768) = 48
getdents64(4, 0x55555fc927d0 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./10/file1")                     = 0
umount2("./10/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./10/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./10/binderfs")                 = 0
getdents64(3, 0x55555fc8a790 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./10")                           = 0
mkdir("./11", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
rt_sigprocmask(SIG_BLOCK, ~[], [], 8)   = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5620 attached
, child_tidptr=0x55555fc896d0) = 5620
[pid  5620] set_robust_list(0x55555fc896e0, 24 <unfinished ...>
[pid  5606] rt_sigprocmask(SIG_SETMASK, [] <unfinished ...>
[pid  5620] <... set_robust_list resumed>) = 0
[pid  5620] rt_sigprocmask(SIG_SETMASK, [] <unfinished ...>
[pid  5606] <... rt_sigprocmask resumed>, NULL, 8) = 0
[pid  5620] <... rt_sigprocmask resumed>, NULL, 8) = 0
[pid  5620] chdir("./11")               = 0
[pid  5620] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5620] setpgid(0, 0)               = 0
[pid  5620] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5620] write(3, "1000", 4)         = 4
[pid  5620] close(3)                    = 0
[pid  5620] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5620] write(1, "executing program\n", 18) = 18
[pid  5620] open_tree(AT_FDCWD, NULL, OPEN_TREE_CLONE|OPEN_TREE_CLOEXEC|AT_SYMLINK_NOFOLLOW|AT_EMPTY_PATH|AT_RECURSIVE) = -1 EFAULT (Bad address)
executing program
[pid  5620] openat(AT_FDCWD, NULL, O_RDWR) = -1 EFAULT (Bad address)
[pid  5620] memfd_create("syzkaller", 0) = 3
[pid  5620] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f74bd1f3000
[pid  5620] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216
[pid  5620] munmap(0x7f74bd1f3000, 138412032) = 0
[pid  5620] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5620] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5620] close(3)                    = 0
[pid  5620] close(4)                    = 0
[pid  5620] mkdir("./file1", 0777)      = 0
[pid  5620] mount("/dev/loop0", "./file1", "jfs", MS_NODEV|MS_POSIXACL|MS_STRICTATIME, "iocharset=koi8-u,nointegrity,iocharset=iso8859-14,errors=continue,discard,errors=remount-ro,integrit"...) = 0
[pid  5620] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3
[pid  5620] chdir("./file1")            = 0
[pid  5620] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4
[pid  5620] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5620] close(4)                    = 0
[pid  5620] write(-1, "", 0)            = -1 EBADF (Bad file descriptor)
[pid  5620] mkdirat(AT_FDCWD, NULL, 0777) = -1 EFAULT (Bad address)
[pid  5620] exit_group(0)               = ?
[pid  5620] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5620, si_uid=0, si_status=0, si_utime=0, si_stime=18 /* 0.18 s */} ---
restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0
umount2("./11", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x55555fc8a790 /* 4 entries */, 32768) = 112
umount2("./11/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0
umount2("./11/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./11/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
umount2("./11/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./11/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(4, 0x55555fc927d0 /* 2 entries */, 32768) = 48
getdents64(4, 0x55555fc927d0 /* 0 entries */, 32768) = 0
close(4)                                = 0
rmdir("./11/file1")                     = 0
umount2("./11/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
newfstatat(AT_FDCWD, "./11/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
unlink("./11/binderfs")                 = 0
getdents64(3, 0x55555fc8a790 /* 0 entries */, 32768) = 0
close(3)                                = 0
rmdir("./11")                           = 0
mkdir("./12", 0777)                     = 0
openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3
ioctl(3, LOOP_CLR_FD)                   = -1 ENXIO (No such device or address)
close(3)                                = 0
rt_sigprocmask(SIG_BLOCK, ~[], [], 8)   = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5621 attached
, child_tidptr=0x55555fc896d0) = 5621
[pid  5606] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid  5621] set_robust_list(0x55555fc896e0, 24) = 0
[pid  5621] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
[pid  5621] chdir("./12")               = 0
[pid  5621] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5621] setpgid(0, 0)               = 0
[pid  5621] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5621] write(3, "1000", 4)         = 4
[pid  5621] close(3)                    = 0
[pid  5621] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5621] write(1, "executing program\n", 18) = 18
executing program
[pid  5621] open_tree(AT_FDCWD, NULL, OPEN_TREE_CLONE|OPEN_TREE_CLOEXEC|AT_SYMLINK_NOFOLLOW|AT_EMPTY_PATH|AT_RECURSIVE) = -1 EFAULT (Bad address)
[pid  5621] openat(AT_FDCWD, NULL, O_RDWR) = -1 EFAULT (Bad address)
[pid  5621] memfd_create("syzkaller", 0) = 3
[pid  5621] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f74bd1f3000
[pid  5621] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216
[pid  5621] munmap(0x7f74bd1f3000, 138412032) = 0
[pid  5621] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5621] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5621] close(3)                    = 0
[pid  5621] close(4)                    = 0
[pid  5621] mkdir("./file1", 0777)      = 0
[pid  5621] mount("/dev/loop0", "./file1", "jfs", MS_NODEV|MS_POSIXACL|MS_STRICTATIME, "iocharset=koi8-u,nointegrity,iocharset=iso8859-14,errors=continue,discard,errors=remount-ro,integrit"...) = 0
[pid  5621] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3
[pid  5621] chdir("./file1")            = 0
[pid  5621] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4
[pid  5621] ioctl(4, LOOP_CLR_FD)       = 0
[pid  5621] close(4)                    = 0
[pid  5621] write(-1, "", 0)            = -1 EBADF (Bad file descriptor)
[pid  5621] mkdirat(AT_FDCWD, NULL, 0777) = -1 EFAULT (Bad address)
[pid  5621] exit_group(0)               = ?
[pid  5621] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5621, si_uid=0, si_status=0, si_utime=0, si_stime=15 /* 0.15 s */} ---
[   94.809735][ T5621] set_capacity_and_notify: 2 callbacks suppressed
[   94.809749][ T5621] loop0: detected capacity change from 0 to 32768
restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0
umount2("./12", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0
getdents64(3, 0x55555fc8a790 /* 4 entries */, 32768) = 112
[   94.927218][ 
** replaying previous printk message **
[   94.927218][ T4793] ==================================================================
[   94.927236][ T4793] BUG: KASAN: use-after-free in copy_folio_from_iter_atomic+0xbbf/0x1a30
[   94.927269][ T4793] Read of size 4096 at addr ffff88803dc32000 by task kworker/u8:18/4793
[   94.927285][ T4793] 
[   94.927311][ T4793] CPU: 1 UID: 0 PID: 4793 Comm: kworker/u8:18 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[   94.927331][ T4793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   94.927341][ T4793] Workqueue: loop0 loop_rootcg_workfn
[   94.927376][ T4793] Call Trace:
[   94.927383][ T4793]  <TASK>
[   94.927391][ T4793]  dump_stack_lvl+0xe8/0x150
[   94.927417][ T4793]  print_address_description+0x55/0x1e0
[   94.927442][ T4793]  ? copy_folio_from_iter_atomic+0xbbf/0x1a30
[   94.927459][ T4793]  print_report+0x58/0x70
[   94.927488][ T4793]  kasan_report+0x117/0x150
[   94.927509][ T4793]  ? copy_folio_from_iter_atomic+0xbbf/0x1a30
[   94.927530][ T4793]  kasan_check_range+0x264/0x2c0
[   94.927548][ T4793]  ? copy_folio_from_iter_atomic+0xbbf/0x1a30
[   94.927565][ T4793]  __asan_memcpy+0x29/0x70
[   94.927588][ T4793]  copy_folio_from_iter_atomic+0xbbf/0x1a30
[   94.927615][ T4793]  ? __pfx_copy_folio_from_iter_atomic+0x10/0x10
[   94.927633][ T4793]  ? ktime_get_coarse_real_ts64_mg+0x59/0x1e0
[   94.927660][ T4793]  ? shmem_write_begin+0x1ce/0x320
[   94.927685][ T4793]  generic_perform_write+0x5a8/0x8b0
[   94.927713][ T4793]  ? __pfx_generic_perform_write+0x10/0x10
[   94.927734][ T4793]  ? generic_write_checks_count+0x426/0x530
[   94.927754][ T4793]  ? file_update_time_flags+0x2db/0x450
[   94.927779][ T4793]  shmem_file_write_iter+0xfb/0x120
[   94.927798][ T4793]  lo_rw_aio+0xc78/0xf30
[   94.927830][ T4793]  ? reacquire_held_locks+0x117/0x1a0
[   94.927848][ T4793]  ? __pfx_lo_rw_aio+0x10/0x10
[   94.927870][ T4793]  ? rt_spin_unlock+0x159/0x200
[   94.927890][ T4793]  ? kthread_associate_blkcg+0x359/0x600
[   94.927949][ T4793]  ? rt_spin_unlock+0x165/0x200
[   94.927967][ T4793]  loop_process_work+0x638/0x11d0
[   94.927997][ T4793]  ? __pfx_loop_process_work+0x10/0x10
[   94.928018][ T4793]  ? look_up_lock_class+0x57/0x110
[   94.928040][ T4793]  ? register_lock_class+0x31/0x2e0
[   94.928059][ T4793]  ? __lock_acquire+0x747/0x2de0
[   94.928079][ T4793]  ? do_raw_spin_lock+0x12b/0x2f0
[   94.928096][ T4793]  ? lock_acquire+0x115/0x350
[   94.928120][ T4793]  ? rcu_is_watching+0x16/0xb0
[   94.928133][ T4793]  ? process_scheduled_works+0x97a/0x1630
[   94.928151][ T4793]  process_scheduled_works+0xc3d/0x1630
[   94.928177][ T4793]  ? __pfx_process_scheduled_works+0x10/0x10
[   94.928196][ T4793]  ? assign_work+0x3cf/0x5d0
[   94.928214][ T4793]  worker_thread+0xa47/0xfb0
[   94.928239][ T4793]  ? __kthread_parkme+0x71/0x1f0
[   94.928259][ T4793]  kthread+0x38b/0x470
[   94.928272][ T4793]  ? __pfx_worker_thread+0x10/0x10
[   94.928289][ T4793]  ? __pfx_kthread+0x10/0x10
[   94.928302][ T4793]  ret_from_fork+0x514/0xb70
[   94.928316][ T4793]  ? __pfx_ret_from_fork+0x10/0x10
[   94.928330][ T4793]  ? __switch_to+0xc89/0x1420
[   94.928349][ T4793]  ? __pfx_kthread+0x10/0x10
[   94.928362][ T4793]  ret_from_fork_asm+0x1a/0x30
[   94.928380][ T4793]  </TASK>
[   94.928385][ T4793] 
[   94.928388][ T4793] The buggy address belongs to the physical page:
[   94.928402][ T4793] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x3dc32
[   94.928415][ T4793] flags: 0x80000000000000(node=0|zone=1)
[   94.928436][ T4793] raw: 0080000000000000 ffffea0000d54b08 ffffea0000f70cc8 0000000000000000
[   94.928446][ T4793] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000
[   94.928456][ T4793] page dumped because: kasan: bad access detected
[   94.928466][ T4793] page_owner tracks the page as freed
[   94.928471][ T4793] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xdc0(GFP_KERNEL|__GFP_ZERO), pid 5621, tgid 5621 (syz-executor271), ts 94831939385
[   94.928496][ T4793]  post_alloc_hook+0x1f9/0x250
[   94.928513][ T4793]  get_page_from_freelist+0x2591/0x2600
[   94.928525][ T4793]  __alloc_frozen_pages_noprof+0x230/0x5c0
[   94.928537][ T4793]  alloc_pages_mpol+0xd4/0x280
[   94.928549][ T4793]  alloc_pages_noprof+0xd2/0x2f0
[   94.928561][ T4793]  lmLogInit+0x357/0x1a20
[   94.928573][ T4793]  lmLogOpen+0x4e3/0xf90
[   94.928584][ T4793]  jfs_mount_rw+0xf3/0x670
[   94.928595][ T4793]  jfs_fill_super+0x769/0xda0
[   94.928610][ T4793]  get_tree_bdev_flags+0x430/0x4f0
[   94.928625][ T4793]  vfs_get_tree+0x92/0x2a0
[   94.928640][ T4793]  do_new_mount+0x325/0xb00
[   94.928652][ T4793]  __se_sys_mount+0x31d/0x420
[   94.928665][ T4793]  do_syscall_64+0x166/0x520
[   94.928681][ T4793]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   94.928693][ T4793] page last free pid 5606 tgid 5606 ts 94927153584 stack trace:
[   94.928702][ T4793]  __free_frozen_pages+0xf8e/0x1070
[   94.928718][ T4793]  lmLogShutdown+0x44e/0x850
[   94.928730][ T4793]  lmLogClose+0x28c/0x530
[   94.928741][ T4793]  jfs_umount+0x2da/0x3b0
[   94.928752][ T4793]  jfs_put_super+0x8c/0x190
[   94.928766][ T4793]  generic_shutdown_super+0x13d/0x2d0
[   94.928779][ T4793]  kill_block_super+0x44/0xa0
[   94.928794][ T4793]  deactivate_locked_super+0xbe/0x110
[   94.928807][ T4793]  cleanup_mnt+0x204/0x2a0
[   94.928827][ T4793]  task_work_run+0x1d9/0x270
[   94.928840][ T4793]  ptrace_notify+0x27c/0x2b0
[   94.928860][ T4793]  ptrace_report_syscall_exit+0x2d/0x50
[   94.928871][ T4793]  do_syscall_64+0x4a0/0x520
[   94.928887][ T4793]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   94.928900][ T4793] 
[   94.928903][ T4793] Memory state around the buggy address:
[   94.928911][ T4793]  ffff88803dc31f00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[   94.928921][ T4793]  ffff88803dc31f80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[   94.928931][ T4793] >ffff88803dc32000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[   94.928938][ T4793]                    ^
[   94.928946][ T4793]  ffff88803dc32080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[   94.928956][ T4793]  ffff88803dc32100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[   94.928963][ T4793] ==================================================================
[   94.930120][ T4793] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[   95.533096][ T4793] CPU: 1 UID: 0 PID: 4793 Comm: kworker/u8:18 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[   95.543142][ T4793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   95.553277][ T4793] Workqueue: loop0 loop_rootcg_workfn
[   95.559183][ T4793] Call Trace:
[   95.562540][ T4793]  <TASK>
[   95.565916][ T4793]  vpanic+0x56d/0xa60
[   95.569897][ T4793]  ? __pfx_vpanic+0x10/0x10
[   95.574392][ T4793]  panic+0xc5/0xd0
[   95.578095][ T4793]  ? __pfx_panic+0x10/0x10
[   95.582580][ T4793]  ? preempt_schedule_thunk+0x16/0x40
[   95.587964][ T4793]  ? copy_folio_from_iter_atomic+0xbbf/0x1a30
[   95.594040][ T4793]  ? preempt_schedule_thunk+0x16/0x40
[   95.599425][ T4793]  ? copy_folio_from_iter_atomic+0xbbf/0x1a30
[   95.605489][ T4793]  check_panic_on_warn+0x89/0xb0
[   95.610423][ T4793]  ? copy_folio_from_iter_atomic+0xbbf/0x1a30
[   95.616493][ T4793]  end_report+0x73/0x170
[   95.620746][ T4793]  ? copy_folio_from_iter_atomic+0xbbf/0x1a30
[   95.627230][ T4793]  kasan_report+0x128/0x150
[   95.631821][ T4793]  ? copy_folio_from_iter_atomic+0xbbf/0x1a30
[   95.637872][ T4793]  kasan_check_range+0x264/0x2c0
[   95.642794][ T4793]  ? copy_folio_from_iter_atomic+0xbbf/0x1a30
[   95.649029][ T4793]  __asan_memcpy+0x29/0x70
[   95.653533][ T4793]  copy_folio_from_iter_atomic+0xbbf/0x1a30
[   95.659507][ T4793]  ? __pfx_copy_folio_from_iter_atomic+0x10/0x10
[   95.665872][ T4793]  ? ktime_get_coarse_real_ts64_mg+0x59/0x1e0
[   95.672068][ T4793]  ? shmem_write_begin+0x1ce/0x320
[   95.677298][ T4793]  generic_perform_write+0x5a8/0x8b0
[   95.682850][ T4793]  ? __pfx_generic_perform_write+0x10/0x10
[   95.689097][ T4793]  ? generic_write_checks_count+0x426/0x530
[   95.695310][ T4793]  ? file_update_time_flags+0x2db/0x450
[   95.700887][ T4793]  shmem_file_write_iter+0xfb/0x120
[   95.706672][ T4793]  lo_rw_aio+0xc78/0xf30
[   95.710934][ T4793]  ? reacquire_held_locks+0x117/0x1a0
[   95.717353][ T4793]  ? __pfx_lo_rw_aio+0x10/0x10
[   95.722211][ T4793]  ? rt_spin_unlock+0x159/0x200
[   95.727406][ T4793]  ? kthread_associate_blkcg+0x359/0x600
[   95.733032][ T4793]  ? rt_spin_unlock+0x165/0x200
[   95.737878][ T4793]  loop_process_work+0x638/0x11d0
[   95.742898][ T4793]  ? __pfx_loop_process_work+0x10/0x10
[   95.748355][ T4793]  ? look_up_lock_class+0x57/0x110
[   95.753455][ T4793]  ? register_lock_class+0x31/0x2e0
[   95.758730][ T4793]  ? __lock_acquire+0x747/0x2de0
[   95.763776][ T4793]  ? do_raw_spin_lock+0x12b/0x2f0
[   95.768811][ T4793]  ? lock_acquire+0x115/0x350
[   95.773497][ T4793]  ? rcu_is_watching+0x16/0xb0
[   95.778245][ T4793]  ? process_scheduled_works+0x97a/0x1630
[   95.783954][ T4793]  process_scheduled_works+0xc3d/0x1630
[   95.789502][ T4793]  ? __pfx_process_scheduled_works+0x10/0x10
[   95.795483][ T4793]  ? assign_work+0x3cf/0x5d0
[   95.800069][ T4793]  worker_thread+0xa47/0xfb0
[   95.804649][ T4793]  ? __kthread_parkme+0x71/0x1f0
[   95.809581][ T4793]  kthread+0x38b/0x470
[   95.813636][ T4793]  ? __pfx_worker_thread+0x10/0x10
[   95.818732][ T4793]  ? __pfx_kthread+0x10/0x10
[   95.823305][ T4793]  ret_from_fork+0x514/0xb70
[   95.827882][ T4793]  ? __pfx_ret_from_fork+0x10/0x10
[   95.832972][ T4793]  ? __switch_to+0xc89/0x1420
[   95.837640][ T4793]  ? __pfx_kthread+0x10/0x10
[   95.842214][ T4793]  ret_from_fork_asm+0x1a/0x30
[   95.847060][ T4793]  </TASK>
[   95.850218][ T4793] Kernel Offset: disabled
[   95.854703][ T4793] Rebooting in 86400 seconds..