./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor2865434

<...>
Warning: Permanently added '10.128.0.61' (ED25519) to the list of known hosts.
execve("./syz-executor2865434", ["./syz-executor2865434"], 0x7ffe5a747c30 /* 10 vars */) = 0
brk(NULL)                               = 0x555571745000
brk(0x555571745d00)                     = 0x555571745d00
arch_prctl(ARCH_SET_FS, 0x555571745380) = 0
set_tid_address(0x555571745650)         = 5847
set_robust_list(0x555571745660, 24)     = 0
rseq(0x555571745ca0, 0x20, 0, 0x53053053) = 0
prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0
readlink("/proc/self/exe", "/root/syz-executor2865434", 4096) = 25
getrandom("\x74\x07\xdb\x97\x09\xde\xca\x85", 8, GRND_NONBLOCK) = 8
brk(NULL)                               = 0x555571745d00
brk(0x555571766d00)                     = 0x555571766d00
brk(0x555571767000)                     = 0x555571767000
mprotect(0x7f7f0fe96000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5848 attached
, child_tidptr=0x555571745650) = 5848
[pid  5847] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...>
[pid  5848] set_robust_list(0x555571745660, 24) = 0
./strace-static-x86_64: Process 5849 attached
[pid  5847] <... clone resumed>, child_tidptr=0x555571745650) = 5849
[pid  5847] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...>
[pid  5849] set_robust_list(0x555571745660, 24 <unfinished ...>
[pid  5848] mkdir("./syzkaller.2xZ0gM", 0700 <unfinished ...>
[pid  5849] <... set_robust_list resumed>) = 0
./strace-static-x86_64: Process 5850 attached
[pid  5848] <... mkdir resumed>)        = 0
[pid  5848] chmod("./syzkaller.2xZ0gM", 0777 <unfinished ...>
[pid  5847] <... clone resumed>, child_tidptr=0x555571745650) = 5850
[pid  5850] set_robust_list(0x555571745660, 24 <unfinished ...>
[pid  5849] mkdir("./syzkaller.75qPLL", 0700 <unfinished ...>
[pid  5850] <... set_robust_list resumed>) = 0
[pid  5848] <... chmod resumed>)        = 0
[pid  5848] chdir("./syzkaller.2xZ0gM" <unfinished ...>
[pid  5847] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...>
[pid  5850] mkdir("./syzkaller.Fj56eA", 0700 <unfinished ...>
[pid  5849] <... mkdir resumed>)        = 0
[pid  5848] <... chdir resumed>)        = 0
[pid  5850] <... mkdir resumed>)        = 0
./strace-static-x86_64: Process 5851 attached
[pid  5847] <... clone resumed>, child_tidptr=0x555571745650) = 5851
[pid  5849] chmod("./syzkaller.75qPLL", 0777 <unfinished ...>
[pid  5848] mkdir("./0", 0777 <unfinished ...>
[pid  5851] set_robust_list(0x555571745660, 24 <unfinished ...>
[pid  5849] <... chmod resumed>)        = 0
[pid  5847] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...>
[pid  5851] <... set_robust_list resumed>) = 0
[pid  5850] chmod("./syzkaller.Fj56eA", 0777 <unfinished ...>
[pid  5849] chdir("./syzkaller.75qPLL" <unfinished ...>
[pid  5848] <... mkdir resumed>)        = 0
./strace-static-x86_64: Process 5852 attached
[pid  5850] <... chmod resumed>)        = 0
[pid  5849] <... chdir resumed>)        = 0
[pid  5848] openat(AT_FDCWD, "/dev/loop0", O_RDWR <unfinished ...>
[pid  5850] chdir("./syzkaller.Fj56eA") = 0
[pid  5852] set_robust_list(0x555571745660, 24 <unfinished ...>
[pid  5850] mkdir("./0", 0777 <unfinished ...>
[pid  5849] mkdir("./0", 0777 <unfinished ...>
[pid  5848] <... openat resumed>)       = 3
[pid  5852] <... set_robust_list resumed>) = 0
[pid  5852] mkdir("./syzkaller.Ymna4g", 0700 <unfinished ...>
[pid  5851] mkdir("./syzkaller.SpwQpI", 0700 <unfinished ...>
[pid  5847] <... clone resumed>, child_tidptr=0x555571745650) = 5852
[pid  5850] <... mkdir resumed>)        = 0
[pid  5849] <... mkdir resumed>)        = 0
[pid  5847] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...>
[pid  5848] ioctl(3, LOOP_CLR_FD <unfinished ...>
[pid  5851] <... mkdir resumed>)        = 0
[pid  5849] openat(AT_FDCWD, "/dev/loop1", O_RDWR <unfinished ...>
[pid  5848] <... ioctl resumed>)        = -1 ENXIO (No such device or address)
[pid  5852] <... mkdir resumed>)        = 0
./strace-static-x86_64: Process 5853 attached
[pid  5850] openat(AT_FDCWD, "/dev/loop2", O_RDWR <unfinished ...>
[pid  5852] chmod("./syzkaller.Ymna4g", 0777 <unfinished ...>
[pid  5847] <... clone resumed>, child_tidptr=0x555571745650) = 5853
[pid  5853] set_robust_list(0x555571745660, 24 <unfinished ...>
[pid  5852] <... chmod resumed>)        = 0
[pid  5851] chmod("./syzkaller.SpwQpI", 0777 <unfinished ...>
[pid  5850] <... openat resumed>)       = 3
[pid  5849] <... openat resumed>)       = 3
[pid  5848] close(3 <unfinished ...>
[pid  5852] chdir("./syzkaller.Ymna4g" <unfinished ...>
[pid  5853] <... set_robust_list resumed>) = 0
[pid  5851] <... chmod resumed>)        = 0
[pid  5850] ioctl(3, LOOP_CLR_FD <unfinished ...>
[pid  5849] ioctl(3, LOOP_CLR_FD <unfinished ...>
[pid  5848] <... close resumed>)        = 0
[pid  5849] <... ioctl resumed>)        = -1 ENXIO (No such device or address)
[pid  5853] mkdir("./syzkaller.KDhqFQ", 0700 <unfinished ...>
[pid  5849] close(3)                    = 0
[pid  5849] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...>
[pid  5848] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5855 attached
./strace-static-x86_64: Process 5854 attached
 <unfinished ...>
[pid  5852] <... chdir resumed>)        = 0
[pid  5851] chdir("./syzkaller.SpwQpI" <unfinished ...>
[pid  5850] <... ioctl resumed>)        = -1 ENXIO (No such device or address)
[pid  5855] set_robust_list(0x555571745660, 24 <unfinished ...>
[pid  5854] set_robust_list(0x555571745660, 24 <unfinished ...>
[pid  5853] <... mkdir resumed>)        = 0
[pid  5851] <... chdir resumed>)        = 0
[pid  5850] close(3 <unfinished ...>
[pid  5849] <... clone resumed>, child_tidptr=0x555571745650) = 5854
[pid  5852] mkdir("./0", 0777 <unfinished ...>
[pid  5850] <... close resumed>)        = 0
[pid  5855] <... set_robust_list resumed>) = 0
[pid  5854] <... set_robust_list resumed>) = 0
[pid  5851] mkdir("./0", 0777 <unfinished ...>
[pid  5850] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...>
[pid  5855] chdir("./0" <unfinished ...>
[pid  5854] chdir("./0" <unfinished ...>
[pid  5852] <... mkdir resumed>)        = 0
[pid  5855] <... chdir resumed>)        = 0
[pid  5854] <... chdir resumed>)        = 0
[pid  5848] <... clone resumed>, child_tidptr=0x555571745650) = 5855
[pid  5855] prctl(PR_SET_PDEATHSIG, SIGKILL <unfinished ...>
[pid  5854] prctl(PR_SET_PDEATHSIG, SIGKILL./strace-static-x86_64: Process 5856 attached
 <unfinished ...>
[pid  5855] <... prctl resumed>)        = 0
[pid  5854] <... prctl resumed>)        = 0
[pid  5856] set_robust_list(0x555571745660, 24 <unfinished ...>
[pid  5855] setpgid(0, 0 <unfinished ...>
[pid  5854] setpgid(0, 0 <unfinished ...>
[pid  5853] chmod("./syzkaller.KDhqFQ", 0777 <unfinished ...>
[pid  5852] openat(AT_FDCWD, "/dev/loop4", O_RDWR <unfinished ...>
[pid  5851] <... mkdir resumed>)        = 0
[pid  5850] <... clone resumed>, child_tidptr=0x555571745650) = 5856
[pid  5856] <... set_robust_list resumed>) = 0
[pid  5855] <... setpgid resumed>)      = 0
[pid  5855] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC <unfinished ...>
[pid  5854] <... setpgid resumed>)      = 0
[pid  5853] <... chmod resumed>)        = 0
[pid  5852] <... openat resumed>)       = 3
[pid  5856] chdir("./0" <unfinished ...>
[pid  5851] openat(AT_FDCWD, "/dev/loop3", O_RDWR <unfinished ...>
[pid  5855] <... openat resumed>)       = 3
[pid  5854] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5856] <... chdir resumed>)        = 0
[pid  5855] write(3, "1000", 4 <unfinished ...>
[pid  5853] chdir("./syzkaller.KDhqFQ" <unfinished ...>
[pid  5852] ioctl(3, LOOP_CLR_FD <unfinished ...>
[pid  5851] <... openat resumed>)       = 3
[pid  5856] prctl(PR_SET_PDEATHSIG, SIGKILL <unfinished ...>
[pid  5855] <... write resumed>)        = 4
[pid  5854] write(3, "1000", 4 <unfinished ...>
[pid  5853] <... chdir resumed>)        = 0
[pid  5852] <... ioctl resumed>)        = -1 ENXIO (No such device or address)
[pid  5856] <... prctl resumed>)        = 0
[pid  5855] close(3 <unfinished ...>
[pid  5851] ioctl(3, LOOP_CLR_FD <unfinished ...>
[pid  5856] setpgid(0, 0 <unfinished ...>
[pid  5855] <... close resumed>)        = 0
[pid  5854] <... write resumed>)        = 4
[pid  5853] mkdir("./0", 0777 <unfinished ...>
[pid  5852] close(3 <unfinished ...>
[pid  5851] <... ioctl resumed>)        = -1 ENXIO (No such device or address)
[pid  5856] <... setpgid resumed>)      = 0
[pid  5855] symlink("/dev/binderfs", "./binderfs" <unfinished ...>
[pid  5854] close(3 <unfinished ...>
[pid  5851] close(3 <unfinished ...>
[pid  5856] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC <unfinished ...>
[pid  5855] <... symlink resumed>)      = 0
[pid  5854] <... close resumed>)        = 0
[pid  5853] <... mkdir resumed>)        = 0
[pid  5852] <... close resumed>)        = 0
[pid  5851] <... close resumed>)        = 0
[pid  5851] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...>
[pid  5854] symlink("/dev/binderfs", "./binderfs"./strace-static-x86_64: Process 5857 attached
) = 0
[pid  5852] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5858 attached
executing program
 <unfinished ...>
[pid  5857] set_robust_list(0x555571745660, 24 <unfinished ...>
[pid  5856] <... openat resumed>)       = 3
[pid  5855] write(1, "executing program\n", 18 <unfinished ...>
[pid  5853] openat(AT_FDCWD, "/dev/loop5", O_RDWR <unfinished ...>
[pid  5858] set_robust_list(0x555571745660, 24 <unfinished ...>
[pid  5857] <... set_robust_list resumed>) = 0
[pid  5856] write(3, "1000", 4 <unfinished ...>
[pid  5855] <... write resumed>)        = 18
[pid  5853] <... openat resumed>)       = 3
executing program
[pid  5858] <... set_robust_list resumed>) = 0
[pid  5857] chdir("./0" <unfinished ...>
[pid  5856] <... write resumed>)        = 4
[pid  5855] memfd_create("syzkaller", 0 <unfinished ...>
[pid  5854] write(1, "executing program\n", 18 <unfinished ...>
[pid  5853] ioctl(3, LOOP_CLR_FD <unfinished ...>
[pid  5852] <... clone resumed>, child_tidptr=0x555571745650) = 5858
[pid  5851] <... clone resumed>, child_tidptr=0x555571745650) = 5857
[pid  5854] <... write resumed>)        = 18
[pid  5853] <... ioctl resumed>)        = -1 ENXIO (No such device or address)
[pid  5856] close(3 <unfinished ...>
[pid  5858] chdir("./0" <unfinished ...>
[pid  5857] <... chdir resumed>)        = 0
[pid  5854] memfd_create("syzkaller", 0 <unfinished ...>
[pid  5858] <... chdir resumed>)        = 0
[pid  5857] prctl(PR_SET_PDEATHSIG, SIGKILL <unfinished ...>
[pid  5856] <... close resumed>)        = 0
[pid  5855] <... memfd_create resumed>) = 3
[pid  5854] <... memfd_create resumed>) = 3
[pid  5853] close(3 <unfinished ...>
[pid  5855] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 <unfinished ...>
[pid  5854] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 <unfinished ...>
[pid  5853] <... close resumed>)        = 0
[pid  5855] <... mmap resumed>)         = 0x7f7f07800000
[pid  5854] <... mmap resumed>)         = 0x7f7f07800000
[pid  5853] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5860 attached
 <unfinished ...>
[pid  5857] <... prctl resumed>)        = 0
[pid  5856] symlink("/dev/binderfs", "./binderfs" <unfinished ...>
[pid  5858] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5857] setpgid(0, 0 <unfinished ...>
[pid  5856] <... symlink resumed>)      = 0
[pid  5858] setpgid(0, 0 <unfinished ...>
[pid  5857] <... setpgid resumed>)      = 0
[pid  5858] <... setpgid resumed>)      = 0
[pid  5860] set_robust_list(0x555571745660, 24 <unfinished ...>
[pid  5858] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC <unfinished ...>
[pid  5857] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC <unfinished ...>
[pid  5856] write(1, "executing program\n", 18 <unfinished ...>
[pid  5860] <... set_robust_list resumed>) = 0
[pid  5858] <... openat resumed>)       = 3
[pid  5860] chdir("./0")                = 0
[pid  5860] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5860] setpgid(0, 0)               = 0
[pid  5860] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXECexecuting program
) = 3
[pid  5856] <... write resumed>)        = 18
[pid  5853] <... clone resumed>, child_tidptr=0x555571745650) = 5860
[pid  5857] <... openat resumed>)       = 3
[pid  5860] write(3, "1000", 4)         = 4
[pid  5860] close(3 <unfinished ...>
[pid  5856] memfd_create("syzkaller", 0 <unfinished ...>
[pid  5860] <... close resumed>)        = 0
[pid  5860] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5858] write(3, "1000", 4 <unfinished ...>
[pid  5857] write(3, "1000", 4 <unfinished ...>
[pid  5856] <... memfd_create resumed>) = 3
[pid  5856] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 <unfinished ...>
[pid  5857] <... write resumed>)        = 4
executing program
[pid  5860] write(1, "executing program\n", 18 <unfinished ...>
[pid  5858] <... write resumed>)        = 4
[pid  5857] close(3 <unfinished ...>
[pid  5856] <... mmap resumed>)         = 0x7f7f07800000
[pid  5857] <... close resumed>)        = 0
[pid  5857] symlink("/dev/binderfs", "./binderfs" <unfinished ...>
[pid  5858] close(3)                    = 0
[pid  5857] <... symlink resumed>)      = 0
[pid  5860] <... write resumed>)        = 18
[pid  5860] memfd_create("syzkaller", 0executing program
) = 3
[pid  5858] symlink("/dev/binderfs", "./binderfs" <unfinished ...>
[pid  5857] write(1, "executing program\n", 18 <unfinished ...>
[pid  5860] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7f07800000
[pid  5857] <... write resumed>)        = 18
[pid  5858] <... symlink resumed>)      = 0
[pid  5858] write(1, "executing program\n", 18 <unfinished ...>
[pid  5857] memfd_create("syzkaller", 0executing program
 <unfinished ...>
[pid  5858] <... write resumed>)        = 18
[pid  5857] <... memfd_create resumed>) = 3
[pid  5857] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 <unfinished ...>
[pid  5858] memfd_create("syzkaller", 0 <unfinished ...>
[pid  5857] <... mmap resumed>)         = 0x7f7f07800000
[pid  5858] <... memfd_create resumed>) = 3
[pid  5858] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7f07800000
[pid  5856] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 <unfinished ...>
[pid  5857] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 <unfinished ...>
[pid  5855] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 <unfinished ...>
[pid  5854] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 <unfinished ...>
[pid  5860] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 <unfinished ...>
[pid  5858] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 <unfinished ...>
[pid  5856] <... write resumed>)        = 16777216
[pid  5857] <... write resumed>)        = 16777216
[pid  5856] munmap(0x7f7f07800000, 138412032 <unfinished ...>
[pid  5857] munmap(0x7f7f07800000, 138412032 <unfinished ...>
[pid  5855] <... write resumed>)        = 16777216
[pid  5855] munmap(0x7f7f07800000, 138412032 <unfinished ...>
[pid  5854] <... write resumed>)        = 16777216
[pid  5854] munmap(0x7f7f07800000, 138412032 <unfinished ...>
[pid  5860] <... write resumed>)        = 16777216
[pid  5856] <... munmap resumed>)       = 0
[pid  5860] munmap(0x7f7f07800000, 138412032 <unfinished ...>
[pid  5856] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4
[pid  5856] ioctl(4, LOOP_SET_FD, 3 <unfinished ...>
[pid  5858] <... write resumed>)        = 16777216
[pid  5855] <... munmap resumed>)       = 0
[pid  5857] <... munmap resumed>)       = 0
[pid  5857] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4
[pid  5857] ioctl(4, LOOP_SET_FD, 3 <unfinished ...>
[pid  5860] <... munmap resumed>)       = 0
[pid  5858] munmap(0x7f7f07800000, 138412032 <unfinished ...>
[pid  5856] <... ioctl resumed>)        = 0
[pid  5855] openat(AT_FDCWD, "/dev/loop0", O_RDWR <unfinished ...>
[pid  5857] <... ioctl resumed>)        = 0
[pid  5860] openat(AT_FDCWD, "/dev/loop5", O_RDWR <unfinished ...>
[pid  5856] close(3 <unfinished ...>
[pid  5855] <... openat resumed>)       = 4
[pid  5854] <... munmap resumed>)       = 0
[pid  5860] <... openat resumed>)       = 4
[pid  5857] close(3 <unfinished ...>
[pid  5856] <... close resumed>)        = 0
[pid  5855] ioctl(4, LOOP_SET_FD, 3 <unfinished ...>
[pid  5854] openat(AT_FDCWD, "/dev/loop1", O_RDWR <unfinished ...>
[pid  5860] ioctl(4, LOOP_SET_FD, 3 <unfinished ...>
[pid  5857] <... close resumed>)        = 0
[pid  5856] close(4 <unfinished ...>
[  197.199612][ T5856] loop2: detected capacity change from 0 to 32768
[  197.217401][ T5857] loop3: detected capacity change from 0 to 32768
[  197.239844][ T5855] loop0: detected capacity change from 0 to 32768
[pid  5857] close(4 <unfinished ...>
[pid  5856] <... close resumed>)        = 0
[pid  5857] <... close resumed>)        = 0
[pid  5860] <... ioctl resumed>)        = 0
[pid  5858] <... munmap resumed>)       = 0
[pid  5857] mkdir("./file0", 0777 <unfinished ...>
[pid  5856] mkdir("./file0", 0777 <unfinished ...>
[pid  5855] <... ioctl resumed>)        = 0
[pid  5854] <... openat resumed>)       = 4
[pid  5860] close(3 <unfinished ...>
[pid  5858] openat(AT_FDCWD, "/dev/loop4", O_RDWR <unfinished ...>
[pid  5857] <... mkdir resumed>)        = 0
[pid  5856] <... mkdir resumed>)        = 0
[pid  5855] close(3 <unfinished ...>
[  197.248243][ T5860] loop5: detected capacity change from 0 to 32768
[pid  5854] ioctl(4, LOOP_SET_FD, 3 <unfinished ...>
[pid  5860] <... close resumed>)        = 0
[pid  5858] <... openat resumed>)       = 4
[pid  5857] mount("/dev/loop3", "./file0", "jfs", MS_LAZYTIME, "" <unfinished ...>
[pid  5856] mount("/dev/loop2", "./file0", "jfs", MS_LAZYTIME, "" <unfinished ...>
[pid  5855] <... close resumed>)        = 0
[pid  5860] close(4 <unfinished ...>
[pid  5858] ioctl(4, LOOP_SET_FD, 3 <unfinished ...>
[pid  5855] close(4 <unfinished ...>
[pid  5860] <... close resumed>)        = 0
[pid  5854] <... ioctl resumed>)        = 0
[pid  5854] close(3)                    = 0
[pid  5860] mkdir("./file0", 0777 <unfinished ...>
[pid  5854] close(4)                    = 0
[pid  5854] mkdir("./file0", 0777 <unfinished ...>
[pid  5860] <... mkdir resumed>)        = 0
[pid  5854] <... mkdir resumed>)        = 0
[pid  5860] mount("/dev/loop5", "./file0", "jfs", MS_LAZYTIME, "" <unfinished ...>
[pid  5854] mount("/dev/loop1", "./file0", "jfs", MS_LAZYTIME, "" <unfinished ...>
[pid  5858] <... ioctl resumed>)        = 0
[pid  5857] <... mount resumed>)        = 0
[pid  5856] <... mount resumed>)        = 0
[pid  5855] <... close resumed>)        = 0
[pid  5855] mkdir("./file0", 0777)      = 0
[pid  5858] close(3)                    = 0
[pid  5858] close(4)                    = 0
[pid  5857] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY <unfinished ...>
[pid  5856] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY <unfinished ...>
[pid  5858] mkdir("./file0", 0777 <unfinished ...>
[pid  5857] <... openat resumed>)       = 3
[pid  5857] chdir("./file0" <unfinished ...>
[pid  5856] <... openat resumed>)       = 3
[pid  5857] <... chdir resumed>)        = 0
[pid  5856] chdir("./file0" <unfinished ...>
[pid  5857] openat(AT_FDCWD, "/dev/loop3", O_RDWR <unfinished ...>
[pid  5856] <... chdir resumed>)        = 0
[pid  5857] <... openat resumed>)       = -1 EBUSY (Device or resource busy)
[pid  5856] openat(AT_FDCWD, "/dev/loop2", O_RDWR <unfinished ...>
[pid  5858] <... mkdir resumed>)        = 0
[pid  5857] symlink("./file0/file0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" <unfinished ...>
[pid  5855] mount("/dev/loop0", "./file0", "jfs", MS_LAZYTIME, "" <unfinished ...>
[pid  5858] mount("/dev/loop4", "./file0", "jfs", MS_LAZYTIME, "" <unfinished ...>
[pid  5856] <... openat resumed>)       = -1 EBUSY (Device or resource busy)
[pid  5856] symlink("./file0/file0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" <unfinished ...>
[pid  5854] <... mount resumed>)        = 0
[pid  5856] <... symlink resumed>)      = 0
[pid  5854] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5854] chdir("./file0")            = 0
[  197.272037][ T5854] loop1: detected capacity change from 0 to 32768
[  197.284438][ T5858] loop4: detected capacity change from 0 to 32768
[pid  5854] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy)
[pid  5860] <... mount resumed>)        = 0
[pid  5856] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL <unfinished ...>
[pid  5854] symlink("./file0/file0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" <unfinished ...>
[pid  5860] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY <unfinished ...>
[pid  5857] <... symlink resumed>)      = 0
[pid  5856] <... mount resumed>)        = 0
[pid  5854] <... symlink resumed>)      = 0
[pid  5858] <... mount resumed>)        = 0
[pid  5860] <... openat resumed>)       = 3
[pid  5858] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY <unfinished ...>
[pid  5857] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL <unfinished ...>
[pid  5856] exit_group(0 <unfinished ...>
[pid  5855] <... mount resumed>)        = 0
[pid  5854] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL <unfinished ...>
[pid  5860] chdir("./file0" <unfinished ...>
[pid  5855] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5860] <... chdir resumed>)        = 0
[pid  5860] openat(AT_FDCWD, "/dev/loop5", O_RDWR <unfinished ...>
[pid  5857] <... mount resumed>)        = 0
[pid  5854] <... mount resumed>)        = 0
[pid  5860] <... openat resumed>)       = -1 EBUSY (Device or resource busy)
[pid  5857] exit_group(0 <unfinished ...>
[pid  5860] symlink("./file0/file0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" <unfinished ...>
[pid  5857] <... exit_group resumed>)   = ?
[pid  5858] <... openat resumed>)       = 3
[pid  5857] +++ exited with 0 +++
[pid  5856] <... exit_group resumed>)   = ?
[pid  5855] chdir("./file0" <unfinished ...>
[pid  5854] exit_group(0 <unfinished ...>
[pid  5858] chdir("./file0" <unfinished ...>
[pid  5856] +++ exited with 0 +++
[pid  5855] <... chdir resumed>)        = 0
[pid  5854] <... exit_group resumed>)   = ?
[pid  5851] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5857, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=31 /* 0.31 s */} ---
[pid  5850] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5856, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=25 /* 0.25 s */} ---
[pid  5850] restart_syscall(<... resuming interrupted clone ...>) = 0
[pid  5860] <... symlink resumed>)      = 0
[pid  5858] <... chdir resumed>)        = 0
[pid  5855] openat(AT_FDCWD, "/dev/loop0", O_RDWR <unfinished ...>
[pid  5854] +++ exited with 0 +++
[pid  5850] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5860] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL <unfinished ...>
[pid  5850] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[  197.338927][  T114] blkno = 5002c, nblocks = 1
[  197.348918][  T114] ERROR: (device loop2): dbUpdatePMap: blocks are outside the map
[  197.348918][  T114] 
[  197.362435][  T113] blkno = 5002c, nblocks = 1
[  197.368582][  T113] ERROR: (device loop3): dbUpdatePMap: blocks are outside the map
[  197.368582][  T113] 
[pid  5850] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY <unfinished ...>
[pid  5849] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5854, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=28 /* 0.28 s */} ---
[pid  5850] <... openat resumed>)       = 3
[pid  5849] restart_syscall(<... resuming interrupted clone ...> <unfinished ...>
[pid  5850] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5858] openat(AT_FDCWD, "/dev/loop4", O_RDWR <unfinished ...>
[pid  5855] <... openat resumed>)       = -1 EBUSY (Device or resource busy)
[pid  5850] getdents64(3, 0x5555717466f0 /* 4 entries */, 32768) = 112
[pid  5849] <... restart_syscall resumed>) = 0
[pid  5858] <... openat resumed>)       = -1 EBUSY (Device or resource busy)
[pid  5855] symlink("./file0/file0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" <unfinished ...>
[pid  5851] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5850] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5850] newfstatat(AT_FDCWD, "./0/binderfs",  <unfinished ...>
[pid  5849] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5850] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5849] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid  5850] unlink("./0/binderfs")      = 0
[pid  5849] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY <unfinished ...>
[pid  5850] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5849] <... openat resumed>)       = 3
[pid  5849] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5849] getdents64(3,  <unfinished ...>
[pid  5851] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid  5849] <... getdents64 resumed>0x5555717466f0 /* 4 entries */, 32768) = 112
[pid  5849] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5858] symlink("./file0/file0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" <unfinished ...>
[pid  5855] <... symlink resumed>)      = 0
[pid  5851] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY <unfinished ...>
[pid  5849] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid  5849] newfstatat(AT_FDCWD, "./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5849] unlink("./0/binderfs")      = 0
[pid  5849] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5855] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL <unfinished ...>
[pid  5851] <... openat resumed>)       = 3
[pid  5851] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5858] <... symlink resumed>)      = 0
[pid  5851] getdents64(3,  <unfinished ...>
[pid  5858] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL <unfinished ...>
[pid  5851] <... getdents64 resumed>0x5555717466f0 /* 4 entries */, 32768) = 112
[pid  5851] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5855] <... mount resumed>)        = 0
[pid  5851] newfstatat(AT_FDCWD, "./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5855] exit_group(0 <unfinished ...>
[pid  5851] unlink("./0/binderfs" <unfinished ...>
[pid  5855] <... exit_group resumed>)   = ?
[  197.385813][  T114] ERROR: (device loop2): remounting filesystem as read-only
[  197.395458][  T113] ERROR: (device loop3): remounting filesystem as read-only
[  197.403892][  T113] blkno = 5002c, nblocks = 1
[  197.410128][  T113] ERROR: (device loop1): dbUpdatePMap: blocks are outside the map
[  197.410128][  T113] 
[  197.425556][  T114] blkno = 5002c, nblocks = 1
[  197.430801][  T114] ERROR: (device loop5): dbUpdatePMap: blocks are outside the map
[pid  5855] +++ exited with 0 +++
[pid  5851] <... unlink resumed>)       = 0
[pid  5848] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5855, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=29 /* 0.29 s */} ---
[pid  5848] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5848] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY <unfinished ...>
[pid  5851] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5848] <... openat resumed>)       = 3
[pid  5848] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5848] getdents64(3, 0x5555717466f0 /* 4 entries */, 32768) = 112
[pid  5848] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5848] newfstatat(AT_FDCWD, "./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5848] unlink("./0/binderfs")      = 0
[  197.430801][  T114] 
[  197.445310][  T113] ERROR: (device loop1): remounting filesystem as read-only
[  197.453069][  T114] ERROR: (device loop5): remounting filesystem as read-only
[  197.462185][ T5851] JFS: metapage_get_blocks failed
[  197.468808][  T114] blkno = 5002c, nblocks = 1
[  197.474826][ T5860] JFS: metapage_get_blocks failed
[pid  5848] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5860] <... mount resumed>)        = -1 EINVAL (Invalid argument)
[pid  5860] exit_group(0)               = ?
[pid  5860] +++ exited with 0 +++
[pid  5853] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5860, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=30 /* 0.30 s */} ---
[pid  5853] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5853] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
[pid  5853] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5853] getdents64(3, 0x5555717466f0 /* 4 entries */, 32768) = 112
[pid  5853] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5853] newfstatat(AT_FDCWD, "./0/binderfs",  <unfinished ...>
[pid  5858] <... mount resumed>)        = -1 EINVAL (Invalid argument)
[pid  5853] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5858] exit_group(0 <unfinished ...>
[pid  5853] unlink("./0/binderfs" <unfinished ...>
[pid  5858] <... exit_group resumed>)   = ?
[pid  5853] <... unlink resumed>)       = 0
[pid  5858] +++ exited with 0 +++
[pid  5853] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5852] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5858, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=24 /* 0.24 s */} ---
[pid  5852] restart_syscall(<... resuming interrupted clone ...>) = 0
[pid  5852] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5852] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
[pid  5852] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5852] getdents64(3, 0x5555717466f0 /* 4 entries */, 32768) = 112
[pid  5852] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5852] newfstatat(AT_FDCWD, "./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5852] unlink("./0/binderfs")      = 0
[  197.493069][  T113] blkno = 5002c, nblocks = 1
[  197.497760][  T113] ERROR: (device loop4): dbUpdatePMap: blocks are outside the map
[  197.497760][  T113] 
[  197.508951][  T114] ERROR: (device loop0): dbUpdatePMap: blocks are outside the map
[  197.508951][  T114] 
[  197.520899][  T114] ERROR: (device loop0): remounting filesystem as read-only
[  197.528988][  T113] ERROR: (device loop4): remounting filesystem as read-only
[pid  5852] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5853] <... umount2 resumed>)      = 0
[pid  5853] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5853] newfstatat(AT_FDCWD, "./0/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5853] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5853] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
[pid  5853] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5853] getdents64(4, 0x55557174e730 /* 2 entries */, 32768) = 48
[pid  5853] getdents64(4, 0x55557174e730 /* 0 entries */, 32768) = 0
[pid  5853] close(4)                    = 0
[pid  5853] rmdir("./0/file0")          = 0
[pid  5853] getdents64(3, 0x5555717466f0 /* 0 entries */, 32768) = 0
[pid  5853] close(3)                    = 0
[pid  5853] rmdir("./0")                = 0
[pid  5853] mkdir("./1", 0777)          = 0
[pid  5853] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3
[pid  5853] ioctl(3, LOOP_CLR_FD)       = 0
[pid  5853] close(3)                    = 0
[pid  5853] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5864 attached
, child_tidptr=0x555571745650) = 5864
[pid  5864] set_robust_list(0x555571745660, 24) = 0
[pid  5864] chdir("./1")                = 0
[  197.674912][ T5849] JFS: metapage_get_blocks failed
[  197.682210][ T5850] JFS: metapage_get_blocks failed
[pid  5864] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5864] setpgid(0, 0)               = 0
[pid  5864] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5864] write(3, "1000", 4)         = 4
[pid  5864] close(3)                    = 0
[pid  5864] symlink("/dev/binderfs", "./binderfs") = 0
executing program
[  197.723568][ T5848] JFS: metapage_get_blocks failed
[pid  5864] write(1, "executing program\n", 18) = 18
[pid  5864] memfd_create("syzkaller", 0) = 3
[pid  5851] <... umount2 resumed>)      = 0
[pid  5864] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7f07800000
[pid  5851] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5851] newfstatat(AT_FDCWD, "./0/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5851] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5851] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
[pid  5851] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5851] getdents64(4, 0x55557174e730 /* 2 entries */, 32768) = 48
[pid  5851] getdents64(4, 0x55557174e730 /* 0 entries */, 32768) = 0
[pid  5851] close(4)                    = 0
[pid  5851] rmdir("./0/file0")          = 0
[pid  5851] getdents64(3, 0x5555717466f0 /* 0 entries */, 32768) = 0
[pid  5851] close(3)                    = 0
[pid  5851] rmdir("./0")                = 0
[pid  5851] mkdir("./1", 0777)          = 0
[pid  5851] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3
[pid  5864] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 <unfinished ...>
[pid  5851] ioctl(3, LOOP_CLR_FD)       = 0
[pid  5851] close(3 <unfinished ...>
[pid  5850] <... umount2 resumed>)      = 0
[pid  5849] <... umount2 resumed>)      = 0
[pid  5850] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5849] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5850] newfstatat(AT_FDCWD, "./0/file0",  <unfinished ...>
[pid  5849] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid  5850] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5849] newfstatat(AT_FDCWD, "./0/file0",  <unfinished ...>
[pid  5850] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5849] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5850] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid  5849] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5850] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY <unfinished ...>
[pid  5849] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid  5850] <... openat resumed>)       = 4
[pid  5849] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY <unfinished ...>
[pid  5850] newfstatat(4, "",  <unfinished ...>
[pid  5849] <... openat resumed>)       = 4
[pid  5850] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5849] newfstatat(4, "",  <unfinished ...>
[pid  5850] getdents64(4,  <unfinished ...>
[pid  5849] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5850] <... getdents64 resumed>0x55557174e730 /* 2 entries */, 32768) = 48
[pid  5849] getdents64(4,  <unfinished ...>
[pid  5850] getdents64(4,  <unfinished ...>
[pid  5849] <... getdents64 resumed>0x55557174e730 /* 2 entries */, 32768) = 48
[pid  5850] <... getdents64 resumed>0x55557174e730 /* 0 entries */, 32768) = 0
[pid  5849] getdents64(4, 0x55557174e730 /* 0 entries */, 32768) = 0
[pid  5849] close(4)                    = 0
[pid  5850] close(4 <unfinished ...>
[pid  5849] rmdir("./0/file0" <unfinished ...>
[pid  5850] <... close resumed>)        = 0
[pid  5849] <... rmdir resumed>)        = 0
[pid  5850] rmdir("./0/file0")          = 0
[pid  5849] getdents64(3, 0x5555717466f0 /* 0 entries */, 32768) = 0
[pid  5850] getdents64(3,  <unfinished ...>
[pid  5849] close(3 <unfinished ...>
[pid  5850] <... getdents64 resumed>0x5555717466f0 /* 0 entries */, 32768) = 0
[pid  5849] <... close resumed>)        = 0
[pid  5850] close(3)                    = 0
[pid  5850] rmdir("./0" <unfinished ...>
[pid  5849] rmdir("./0" <unfinished ...>
[pid  5850] <... rmdir resumed>)        = 0
[pid  5849] <... rmdir resumed>)        = 0
[pid  5849] mkdir("./1", 0777)          = 0
[pid  5850] mkdir("./1", 0777)          = 0
[pid  5849] openat(AT_FDCWD, "/dev/loop1", O_RDWR <unfinished ...>
[pid  5848] <... umount2 resumed>)      = 0
[pid  5850] openat(AT_FDCWD, "/dev/loop2", O_RDWR <unfinished ...>
[pid  5849] <... openat resumed>)       = 3
[pid  5850] <... openat resumed>)       = 3
[pid  5848] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5850] ioctl(3, LOOP_CLR_FD <unfinished ...>
[pid  5849] ioctl(3, LOOP_CLR_FD <unfinished ...>
[pid  5850] <... ioctl resumed>)        = 0
[pid  5849] <... ioctl resumed>)        = 0
[pid  5848] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid  5850] close(3 <unfinished ...>
[pid  5849] close(3 <unfinished ...>
[pid  5848] newfstatat(AT_FDCWD, "./0/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5848] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5848] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
[pid  5848] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5848] getdents64(4, 0x55557174e730 /* 2 entries */, 32768) = 48
[pid  5848] getdents64(4, 0x55557174e730 /* 0 entries */, 32768) = 0
[pid  5848] close(4)                    = 0
[pid  5848] rmdir("./0/file0")          = 0
[pid  5848] getdents64(3, 0x5555717466f0 /* 0 entries */, 32768) = 0
[pid  5848] close(3)                    = 0
[pid  5848] rmdir("./0")                = 0
[pid  5851] <... close resumed>)        = 0
[pid  5848] mkdir("./1", 0777 <unfinished ...>
[pid  5851] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...>
[pid  5848] <... mkdir resumed>)        = 0
./strace-static-x86_64: Process 5865 attached
[pid  5851] <... clone resumed>, child_tidptr=0x555571745650) = 5865
[pid  5848] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3
[pid  5848] ioctl(3, LOOP_CLR_FD)       = 0
[pid  5848] close(3 <unfinished ...>
[pid  5865] set_robust_list(0x555571745660, 24) = 0
[pid  5865] chdir("./1")                = 0
[pid  5865] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5865] setpgid(0, 0)               = 0
[pid  5865] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5865] write(3, "1000", 4)         = 4
[pid  5865] close(3)                    = 0
[pid  5865] symlink("/dev/binderfs", "./binderfs") = 0
executing program
[pid  5865] write(1, "executing program\n", 18) = 18
[pid  5865] memfd_create("syzkaller", 0) = 3
[pid  5865] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7f07800000
[pid  5864] <... write resumed>)        = 16777216
[pid  5864] munmap(0x7f7f07800000, 138412032) = 0
[pid  5864] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4
[pid  5864] ioctl(4, LOOP_SET_FD, 3 <unfinished ...>
[pid  5850] <... close resumed>)        = 0
[pid  5864] <... ioctl resumed>)        = 0
[pid  5850] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5866 attached
 <unfinished ...>
[pid  5866] set_robust_list(0x555571745660, 24 <unfinished ...>
[pid  5864] close(3 <unfinished ...>
[pid  5850] <... clone resumed>, child_tidptr=0x555571745650) = 5866
[pid  5849] <... close resumed>)        = 0
[pid  5848] <... close resumed>)        = 0
[pid  5866] <... set_robust_list resumed>) = 0
[pid  5864] <... close resumed>)        = 0
[pid  5849] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...>
[pid  5866] chdir("./1" <unfinished ...>
[pid  5848] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5867 attached
 <unfinished ...>
[pid  5866] <... chdir resumed>)        = 0
[pid  5864] close(4./strace-static-x86_64: Process 5868 attached
 <unfinished ...>
[pid  5867] set_robust_list(0x555571745660, 24 <unfinished ...>
[pid  5866] prctl(PR_SET_PDEATHSIG, SIGKILL <unfinished ...>
[pid  5864] <... close resumed>)        = 0
[pid  5866] <... prctl resumed>)        = 0
[pid  5866] setpgid(0, 0 <unfinished ...>
[pid  5864] mkdir("./file0", 0777 <unfinished ...>
[pid  5867] <... set_robust_list resumed>) = 0
[pid  5866] <... setpgid resumed>)      = 0
[pid  5864] <... mkdir resumed>)        = 0
[pid  5849] <... clone resumed>, child_tidptr=0x555571745650) = 5867
[pid  5848] <... clone resumed>, child_tidptr=0x555571745650) = 5868
[pid  5868] set_robust_list(0x555571745660, 24 <unfinished ...>
[pid  5866] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC <unfinished ...>
[pid  5868] <... set_robust_list resumed>) = 0
[pid  5867] chdir("./1" <unfinished ...>
[pid  5868] chdir("./1" <unfinished ...>
[pid  5867] <... chdir resumed>)        = 0
[pid  5868] <... chdir resumed>)        = 0
[pid  5867] prctl(PR_SET_PDEATHSIG, SIGKILL <unfinished ...>
[pid  5866] <... openat resumed>)       = 3
[pid  5864] mount("/dev/loop5", "./file0", "jfs", MS_LAZYTIME, "" <unfinished ...>
[pid  5868] prctl(PR_SET_PDEATHSIG, SIGKILL <unfinished ...>
[pid  5867] <... prctl resumed>)        = 0
[pid  5868] <... prctl resumed>)        = 0
[pid  5868] setpgid(0, 0 <unfinished ...>
[pid  5867] setpgid(0, 0 <unfinished ...>
[pid  5868] <... setpgid resumed>)      = 0
[pid  5866] write(3, "1000", 4 <unfinished ...>
[pid  5868] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC <unfinished ...>
[pid  5867] <... setpgid resumed>)      = 0
[pid  5866] <... write resumed>)        = 4
[pid  5866] close(3 <unfinished ...>
[pid  5867] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC <unfinished ...>
[pid  5866] <... close resumed>)        = 0
[pid  5868] <... openat resumed>)       = 3
[pid  5867] <... openat resumed>)       = 3
[pid  5866] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5866] write(1, "executing program\n", 18executing program
) = 18
[pid  5866] memfd_create("syzkaller", 0 <unfinished ...>
[pid  5864] <... mount resumed>)        = 0
[pid  5864] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5864] chdir("./file0")            = 0
[pid  5864] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy)
[pid  5864] symlink("./file0/file0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" <unfinished ...>
[pid  5868] write(3, "1000", 4 <unfinished ...>
[pid  5867] write(3, "1000", 4 <unfinished ...>
[  198.354639][ T5864] loop5: detected capacity change from 0 to 32768
[pid  5868] <... write resumed>)        = 4
[pid  5867] <... write resumed>)        = 4
[pid  5866] <... memfd_create resumed>) = 3
[pid  5864] <... symlink resumed>)      = 0
[pid  5868] close(3 <unfinished ...>
[pid  5867] close(3 <unfinished ...>
[pid  5866] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 <unfinished ...>
[pid  5868] <... close resumed>)        = 0
[pid  5867] <... close resumed>)        = 0
[pid  5866] <... mmap resumed>)         = 0x7f7f07800000
[pid  5864] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL <unfinished ...>
[pid  5868] symlink("/dev/binderfs", "./binderfs" <unfinished ...>
[pid  5867] symlink("/dev/binderfs", "./binderfs" <unfinished ...>
[pid  5865] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216executing program
executing program
 <unfinished ...>
[pid  5868] <... symlink resumed>)      = 0
[pid  5867] <... symlink resumed>)      = 0
[pid  5864] <... mount resumed>)        = 0
[pid  5868] write(1, "executing program\n", 18 <unfinished ...>
[pid  5867] write(1, "executing program\n", 18 <unfinished ...>
[pid  5868] <... write resumed>)        = 18
[pid  5867] <... write resumed>)        = 18
[pid  5868] memfd_create("syzkaller", 0 <unfinished ...>
[pid  5867] memfd_create("syzkaller", 0 <unfinished ...>
[pid  5868] <... memfd_create resumed>) = 3
[pid  5867] <... memfd_create resumed>) = 3
[pid  5864] exit_group(0 <unfinished ...>
[pid  5868] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 <unfinished ...>
[pid  5867] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 <unfinished ...>
[pid  5864] <... exit_group resumed>)   = ?
[pid  5868] <... mmap resumed>)         = 0x7f7f07800000
[pid  5867] <... mmap resumed>)         = 0x7f7f07800000
[pid  5864] +++ exited with 0 +++
[pid  5853] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5864, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=27 /* 0.27 s */} ---
[pid  5853] restart_syscall(<... resuming interrupted clone ...>) = 0
[  198.420018][  T114] blkno = 5002c, nblocks = 1
[  198.434578][  T114] ERROR: (device loop5): dbUpdatePMap: blocks are outside the map
[  198.434578][  T114] 
[pid  5853] umount2("./1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5853] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
[pid  5853] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5853] getdents64(3, 0x5555717466f0 /* 4 entries */, 32768) = 112
[pid  5853] umount2("./1/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5853] newfstatat(AT_FDCWD, "./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5853] unlink("./1/binderfs")      = 0
[  198.465368][  T114] ERROR: (device loop5): remounting filesystem as read-only
[  198.503824][ T5853] JFS: metapage_get_blocks failed
[pid  5853] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5866] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 <unfinished ...>
[pid  5867] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 <unfinished ...>
[pid  5868] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 <unfinished ...>
[pid  5853] <... umount2 resumed>)      = 0
[pid  5853] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5853] newfstatat(AT_FDCWD, "./1/file0",  <unfinished ...>
[pid  5865] <... write resumed>)        = 16777216
[pid  5853] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5853] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5853] openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY <unfinished ...>
[pid  5865] munmap(0x7f7f07800000, 138412032 <unfinished ...>
[pid  5853] <... openat resumed>)       = 4
[pid  5853] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5853] getdents64(4, 0x55557174e730 /* 2 entries */, 32768) = 48
[pid  5853] getdents64(4, 0x55557174e730 /* 0 entries */, 32768) = 0
[pid  5853] close(4)                    = 0
[pid  5853] rmdir("./1/file0")          = 0
[pid  5853] getdents64(3, 0x5555717466f0 /* 0 entries */, 32768) = 0
[pid  5853] close(3)                    = 0
[pid  5853] rmdir("./1")                = 0
[pid  5853] mkdir("./2", 0777 <unfinished ...>
[pid  5865] <... munmap resumed>)       = 0
[pid  5865] openat(AT_FDCWD, "/dev/loop3", O_RDWR <unfinished ...>
[pid  5853] <... mkdir resumed>)        = 0
[pid  5853] openat(AT_FDCWD, "/dev/loop5", O_RDWR <unfinished ...>
[pid  5865] <... openat resumed>)       = 4
[pid  5865] ioctl(4, LOOP_SET_FD, 3 <unfinished ...>
[pid  5853] <... openat resumed>)       = 3
[pid  5865] <... ioctl resumed>)        = 0
[pid  5853] ioctl(3, LOOP_CLR_FD <unfinished ...>
[pid  5866] <... write resumed>)        = 16777216
[pid  5865] close(3 <unfinished ...>
[pid  5853] <... ioctl resumed>)        = 0
[pid  5853] close(3 <unfinished ...>
[pid  5865] <... close resumed>)        = 0
[pid  5865] close(4 <unfinished ...>
[pid  5866] munmap(0x7f7f07800000, 138412032 <unfinished ...>
[pid  5865] <... close resumed>)        = 0
[  198.934141][ T5865] loop3: detected capacity change from 0 to 32768
[pid  5865] mkdir("./file0", 0777 <unfinished ...>
[pid  5866] <... munmap resumed>)       = 0
[pid  5865] <... mkdir resumed>)        = 0
[pid  5865] mount("/dev/loop3", "./file0", "jfs", MS_LAZYTIME, "" <unfinished ...>
[pid  5866] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4
[pid  5865] <... mount resumed>)        = 0
[pid  5866] ioctl(4, LOOP_SET_FD, 3 <unfinished ...>
[pid  5865] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY <unfinished ...>
[pid  5867] <... write resumed>)        = 16777216
[pid  5867] munmap(0x7f7f07800000, 138412032 <unfinished ...>
[pid  5866] <... ioctl resumed>)        = 0
[pid  5865] <... openat resumed>)       = 3
[pid  5866] close(3 <unfinished ...>
[pid  5865] chdir("./file0" <unfinished ...>
[pid  5866] <... close resumed>)        = 0
[pid  5866] close(4 <unfinished ...>
[pid  5865] <... chdir resumed>)        = 0
[pid  5865] openat(AT_FDCWD, "/dev/loop3", O_RDWR <unfinished ...>
[pid  5866] <... close resumed>)        = 0
[pid  5865] <... openat resumed>)       = -1 EBUSY (Device or resource busy)
[pid  5865] symlink("./file0/file0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" <unfinished ...>
[pid  5866] mkdir("./file0", 0777)      = 0
[pid  5866] mount("/dev/loop2", "./file0", "jfs", MS_LAZYTIME, "" <unfinished ...>
[pid  5865] <... symlink resumed>)      = 0
[  199.075507][ T5866] loop2: detected capacity change from 0 to 32768
[pid  5865] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL) = 0
[pid  5865] exit_group(0 <unfinished ...>
[pid  5867] <... munmap resumed>)       = 0
[pid  5865] <... exit_group resumed>)   = ?
[pid  5867] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4
[  199.116005][  T113] blkno = 5002c, nblocks = 1
[  199.131321][  T113] ERROR: (device loop3): dbUpdatePMap: blocks are outside the map
[  199.131321][  T113] 
[  199.155473][ T5867] loop1: detected capacity change from 0 to 32768
[pid  5867] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5865] +++ exited with 0 +++
[pid  5867] close(3 <unfinished ...>
[pid  5851] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5865, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=25 /* 0.25 s */} ---
[pid  5867] <... close resumed>)        = 0
[pid  5867] close(4 <unfinished ...>
[pid  5866] <... mount resumed>)        = 0
[pid  5866] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY <unfinished ...>
[pid  5867] <... close resumed>)        = 0
[pid  5866] <... openat resumed>)       = 3
[pid  5851] umount2("./1", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5866] chdir("./file0" <unfinished ...>
[pid  5867] mkdir("./file0", 0777 <unfinished ...>
[pid  5866] <... chdir resumed>)        = 0
[pid  5851] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid  5866] openat(AT_FDCWD, "/dev/loop2", O_RDWR <unfinished ...>
[pid  5867] <... mkdir resumed>)        = 0
[pid  5866] <... openat resumed>)       = -1 EBUSY (Device or resource busy)
[pid  5851] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY <unfinished ...>
[pid  5866] symlink("./file0/file0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" <unfinished ...>
[pid  5851] <... openat resumed>)       = 3
[pid  5867] mount("/dev/loop1", "./file0", "jfs", MS_LAZYTIME, "" <unfinished ...>
[pid  5851] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5851] getdents64(3, 0x5555717466f0 /* 4 entries */, 32768) = 112
[pid  5851] umount2("./1/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5867] <... mount resumed>)        = 0
[pid  5867] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5867] chdir("./file0")            = 0
[pid  5867] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy)
[pid  5868] <... write resumed>)        = 16777216
[pid  5867] symlink("./file0/file0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" <unfinished ...>
[pid  5851] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid  5851] newfstatat(AT_FDCWD, "./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
[  199.173415][  T113] ERROR: (device loop3): remounting filesystem as read-only
[pid  5867] <... symlink resumed>)      = 0
[pid  5866] <... symlink resumed>)      = 0
[pid  5867] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL <unfinished ...>
[pid  5866] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL <unfinished ...>
[pid  5851] unlink("./1/binderfs" <unfinished ...>
[pid  5868] munmap(0x7f7f07800000, 138412032 <unfinished ...>
[pid  5851] <... unlink resumed>)       = 0
[pid  5851] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5867] <... mount resumed>)        = 0
[pid  5867] exit_group(0)               = ?
[pid  5867] +++ exited with 0 +++
[pid  5849] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5867, si_uid=0, si_status=0, si_utime=0, si_stime=36 /* 0.36 s */} ---
[pid  5849] restart_syscall(<... resuming interrupted clone ...>) = 0
[  199.214010][  T114] blkno = 5002c, nblocks = 1
[  199.218694][  T114] ERROR: (device loop2): dbUpdatePMap: blocks are outside the map
[  199.218694][  T114] 
[  199.232755][  T113] blkno = 5002c, nblocks = 1
[  199.250020][  T113] ERROR: (device loop1): dbUpdatePMap: blocks are outside the map
[  199.250020][  T113] 
[pid  5868] <... munmap resumed>)       = 0
[pid  5849] umount2("./1", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5853] <... close resumed>)        = 0
[pid  5868] openat(AT_FDCWD, "/dev/loop0", O_RDWR <unfinished ...>
[pid  5849] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid  5853] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...>
[pid  5849] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
./strace-static-x86_64: Process 5869 attached
[pid  5869] set_robust_list(0x555571745660, 24) = 0
[pid  5869] chdir("./2")                = 0
[pid  5849] newfstatat(3, "",  <unfinished ...>
[pid  5869] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5869] setpgid(0, 0)               = 0
[pid  5869] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC <unfinished ...>
[pid  5849] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5849] getdents64(3, 0x5555717466f0 /* 4 entries */, 32768) = 112
[pid  5849] umount2("./1/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5849] newfstatat(AT_FDCWD, "./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5868] <... openat resumed>)       = 4
[pid  5849] unlink("./1/binderfs" <unfinished ...>
[pid  5868] ioctl(4, LOOP_SET_FD, 3 <unfinished ...>
[pid  5853] <... clone resumed>, child_tidptr=0x555571745650) = 5869
[pid  5849] <... unlink resumed>)       = 0
[pid  5849] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5869] <... openat resumed>)       = 3
[pid  5869] write(3, "1000", 4 <unfinished ...>
[pid  5868] <... ioctl resumed>)        = 0
[pid  5866] <... mount resumed>)        = -1 EINVAL (Invalid argument)
[pid  5869] <... write resumed>)        = 4
[pid  5868] close(3 <unfinished ...>
[pid  5866] exit_group(0 <unfinished ...>
[pid  5869] close(3 <unfinished ...>
[pid  5868] <... close resumed>)        = 0
[pid  5866] <... exit_group resumed>)   = ?
[pid  5869] <... close resumed>)        = 0
[pid  5868] close(4 <unfinished ...>
[pid  5866] +++ exited with 0 +++
[pid  5850] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5866, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=30 /* 0.30 s */} ---
[pid  5850] restart_syscall(<... resuming interrupted clone ...> <unfinished ...>
[pid  5869] symlink("/dev/binderfs", "./binderfs" <unfinished ...>
[pid  5868] <... close resumed>)        = 0
[pid  5850] <... restart_syscall resumed>) = 0
executing program
[pid  5869] <... symlink resumed>)      = 0
[pid  5868] mkdir("./file0", 0777 <unfinished ...>
[pid  5869] write(1, "executing program\n", 18 <unfinished ...>
[pid  5850] umount2("./1", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5869] <... write resumed>)        = 18
[pid  5850] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid  5868] <... mkdir resumed>)        = 0
[pid  5850] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY <unfinished ...>
[pid  5869] memfd_create("syzkaller", 0 <unfinished ...>
[pid  5850] <... openat resumed>)       = 3
[pid  5869] <... memfd_create resumed>) = 3
[pid  5850] newfstatat(3, "",  <unfinished ...>
[pid  5869] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 <unfinished ...>
[pid  5850] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5869] <... mmap resumed>)         = 0x7f7f07800000
[pid  5850] getdents64(3,  <unfinished ...>
[pid  5868] mount("/dev/loop0", "./file0", "jfs", MS_LAZYTIME, "" <unfinished ...>
[pid  5850] <... getdents64 resumed>0x5555717466f0 /* 4 entries */, 32768) = 112
[pid  5850] umount2("./1/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5850] newfstatat(AT_FDCWD, "./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5850] unlink("./1/binderfs")      = 0
[pid  5850] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5868] <... mount resumed>)        = 0
[pid  5868] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[  199.260245][ T5851] JFS: metapage_get_blocks failed
[  199.269459][  T114] ERROR: (device loop2): remounting filesystem as read-only
[  199.277004][  T113] ERROR: (device loop1): remounting filesystem as read-only
[  199.286777][ T5868] loop0: detected capacity change from 0 to 32768
[  199.303771][ T5849] JFS: metapage_get_blocks failed
[pid  5868] chdir("./file0")            = 0
[pid  5868] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy)
[pid  5868] symlink("./file0/file0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0
[pid  5868] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL) = 0
[pid  5868] exit_group(0)               = ?
[pid  5868] +++ exited with 0 +++
[pid  5848] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5868, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=29 /* 0.29 s */} ---
[pid  5848] restart_syscall(<... resuming interrupted clone ...>) = 0
[pid  5848] umount2("./1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5848] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
[pid  5848] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5848] getdents64(3, 0x5555717466f0 /* 4 entries */, 32768) = 112
[pid  5848] umount2("./1/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5848] newfstatat(AT_FDCWD, "./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5848] unlink("./1/binderfs")      = 0
[pid  5848] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[  199.365822][  T114] blkno = 5002c, nblocks = 1
[  199.370966][  T114] ERROR: (device loop0): dbUpdatePMap: blocks are outside the map
[  199.370966][  T114] 
[  199.388299][  T114] ERROR: (device loop0): remounting filesystem as read-only
[  199.402189][ T5848] JFS: metapage_get_blocks failed
[pid  5869] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 <unfinished ...>
[pid  5851] <... umount2 resumed>)      = 0
[pid  5851] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5851] newfstatat(AT_FDCWD, "./1/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5851] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5851] openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
[pid  5869] <... write resumed>)        = 16777216
[pid  5869] munmap(0x7f7f07800000, 138412032 <unfinished ...>
[pid  5849] <... umount2 resumed>)      = 0
[pid  5851] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5851] getdents64(4, 0x55557174e730 /* 2 entries */, 32768) = 48
[pid  5851] getdents64(4, 0x55557174e730 /* 0 entries */, 32768) = 0
[pid  5869] <... munmap resumed>)       = 0
[pid  5851] close(4 <unfinished ...>
[pid  5849] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5869] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4
[pid  5869] ioctl(4, LOOP_SET_FD, 3 <unfinished ...>
[pid  5851] <... close resumed>)        = 0
[pid  5849] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid  5869] <... ioctl resumed>)        = 0
[pid  5851] rmdir("./1/file0" <unfinished ...>
[pid  5849] newfstatat(AT_FDCWD, "./1/file0",  <unfinished ...>
[pid  5869] close(3)                    = 0
[pid  5849] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5869] close(4)                    = 0
[pid  5851] <... rmdir resumed>)        = 0
[pid  5849] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5869] mkdir("./file0", 0777 <unfinished ...>
[pid  5851] getdents64(3,  <unfinished ...>
[pid  5849] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid  5851] <... getdents64 resumed>0x5555717466f0 /* 0 entries */, 32768) = 0
[pid  5869] <... mkdir resumed>)        = 0
[pid  5851] close(3 <unfinished ...>
[pid  5849] openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY <unfinished ...>
[pid  5851] <... close resumed>)        = 0
[pid  5849] <... openat resumed>)       = 4
[pid  5851] rmdir("./1" <unfinished ...>
[pid  5869] mount("/dev/loop5", "./file0", "jfs", MS_LAZYTIME, "" <unfinished ...>
[pid  5851] <... rmdir resumed>)        = 0
[pid  5849] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5849] getdents64(4, 0x55557174e730 /* 2 entries */, 32768) = 48
[pid  5851] mkdir("./2", 0777)          = 0
[pid  5849] getdents64(4, 0x55557174e730 /* 0 entries */, 32768) = 0
[pid  5849] close(4)                    = 0
[pid  5849] rmdir("./1/file0")          = 0
[pid  5851] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3
[pid  5851] ioctl(3, LOOP_CLR_FD)       = 0
[pid  5851] close(3 <unfinished ...>
[pid  5869] <... mount resumed>)        = 0
[pid  5869] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY <unfinished ...>
[pid  5849] getdents64(3,  <unfinished ...>
[pid  5869] <... openat resumed>)       = 3
[pid  5849] <... getdents64 resumed>0x5555717466f0 /* 0 entries */, 32768) = 0
[pid  5869] chdir("./file0")            = 0
[pid  5849] close(3)                    = 0
[pid  5849] rmdir("./1" <unfinished ...>
[pid  5869] openat(AT_FDCWD, "/dev/loop5", O_RDWR <unfinished ...>
[pid  5849] <... rmdir resumed>)        = 0
[pid  5869] <... openat resumed>)       = -1 EBUSY (Device or resource busy)
[pid  5849] mkdir("./2", 0777)          = 0
[pid  5849] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3
[pid  5849] ioctl(3, LOOP_CLR_FD)       = 0
[  199.594956][ T5869] loop5: detected capacity change from 0 to 32768
[pid  5849] close(3 <unfinished ...>
[pid  5869] symlink("./file0/file0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0
[pid  5869] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL) = 0
[pid  5848] <... umount2 resumed>)      = 0
[pid  5869] exit_group(0)               = ?
[pid  5848] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5869] +++ exited with 0 +++
[pid  5848] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid  5853] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5869, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=22 /* 0.22 s */} ---
[pid  5848] newfstatat(AT_FDCWD, "./1/file0",  <unfinished ...>
[pid  5853] restart_syscall(<... resuming interrupted clone ...> <unfinished ...>
[pid  5848] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5848] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5848] openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY <unfinished ...>
[pid  5853] <... restart_syscall resumed>) = 0
[pid  5848] <... openat resumed>)       = 4
[pid  5848] newfstatat(4, "",  <unfinished ...>
[pid  5853] umount2("./2", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5848] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5853] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid  5848] getdents64(4,  <unfinished ...>
[pid  5853] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY <unfinished ...>
[pid  5848] <... getdents64 resumed>0x55557174e730 /* 2 entries */, 32768) = 48
[pid  5848] getdents64(4,  <unfinished ...>
[pid  5853] <... openat resumed>)       = 3
[pid  5853] newfstatat(3, "",  <unfinished ...>
[pid  5848] <... getdents64 resumed>0x55557174e730 /* 0 entries */, 32768) = 0
[pid  5853] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5848] close(4)                    = 0
[pid  5853] getdents64(3,  <unfinished ...>
[pid  5848] rmdir("./1/file0" <unfinished ...>
[pid  5853] <... getdents64 resumed>0x5555717466f0 /* 4 entries */, 32768) = 112
[pid  5848] <... rmdir resumed>)        = 0
[pid  5853] umount2("./2/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5848] getdents64(3,  <unfinished ...>
[pid  5853] newfstatat(AT_FDCWD, "./2/binderfs",  <unfinished ...>
[pid  5848] <... getdents64 resumed>0x5555717466f0 /* 0 entries */, 32768) = 0
[pid  5853] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5848] close(3)                    = 0
[pid  5853] unlink("./2/binderfs")      = 0
[  199.683201][  T114] blkno = 5002c, nblocks = 1
[  199.687870][  T114] ERROR: (device loop5): dbUpdatePMap: blocks are outside the map
[  199.687870][  T114] 
[pid  5848] rmdir("./1" <unfinished ...>
[pid  5853] umount2("./2/file0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5848] <... rmdir resumed>)        = 0
[pid  5848] mkdir("./2", 0777)          = 0
[pid  5848] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3
[pid  5848] ioctl(3, LOOP_CLR_FD)       = 0
[  199.734862][  T114] ERROR: (device loop5): remounting filesystem as read-only
[  199.766292][ T5853] JFS: metapage_get_blocks failed
[pid  5848] close(3 <unfinished ...>
[pid  5851] <... close resumed>)        = 0
[pid  5851] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555571745650) = 5870
./strace-static-x86_64: Process 5870 attached
[pid  5870] set_robust_list(0x555571745660, 24 <unfinished ...>
[pid  5849] <... close resumed>)        = 0
[pid  5870] <... set_robust_list resumed>) = 0
[pid  5870] chdir("./2" <unfinished ...>
[pid  5849] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5871 attached
 <unfinished ...>
[pid  5870] <... chdir resumed>)        = 0
[pid  5870] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5871] set_robust_list(0x555571745660, 24) = 0
[pid  5870] setpgid(0, 0 <unfinished ...>
[pid  5871] chdir("./2" <unfinished ...>
[pid  5849] <... clone resumed>, child_tidptr=0x555571745650) = 5871
[pid  5870] <... setpgid resumed>)      = 0
[pid  5871] <... chdir resumed>)        = 0
[pid  5871] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5870] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC <unfinished ...>
[pid  5871] setpgid(0, 0 <unfinished ...>
[pid  5870] <... openat resumed>)       = 3
[pid  5870] write(3, "1000", 4 <unfinished ...>
[pid  5871] <... setpgid resumed>)      = 0
[pid  5870] <... write resumed>)        = 4
[pid  5871] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC <unfinished ...>
[pid  5870] close(3)                    = 0
[pid  5848] <... close resumed>)        = 0
[pid  5870] symlink("/dev/binderfs", "./binderfs" <unfinished ...>
[pid  5871] <... openat resumed>)       = 3
[pid  5870] <... symlink resumed>)      = 0
[pid  5848] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...>
[pid  5871] write(3, "1000", 4executing program
 <unfinished ...>
[pid  5870] write(1, "executing program\n", 18 <unfinished ...>
[pid  5871] <... write resumed>)        = 4
[pid  5870] <... write resumed>)        = 18
./strace-static-x86_64: Process 5872 attached
[pid  5871] close(3)                    = 0
[pid  5872] set_robust_list(0x555571745660, 24 <unfinished ...>
[pid  5870] memfd_create("syzkaller", 0 <unfinished ...>
[pid  5848] <... clone resumed>, child_tidptr=0x555571745650) = 5872
[pid  5872] <... set_robust_list resumed>) = 0
[pid  5871] symlink("/dev/binderfs", "./binderfs" <unfinished ...>
[pid  5870] <... memfd_create resumed>) = 3
[pid  5872] chdir("./2" <unfinished ...>
[pid  5871] <... symlink resumed>)      = 0
[pid  5870] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 <unfinished ...>
[pid  5872] <... chdir resumed>)        = 0
[pid  5870] <... mmap resumed>)         = 0x7f7f07800000
executing program
[pid  5872] prctl(PR_SET_PDEATHSIG, SIGKILL <unfinished ...>
[pid  5871] write(1, "executing program\n", 18) = 18
[pid  5871] memfd_create("syzkaller", 0) = 3
[pid  5872] <... prctl resumed>)        = 0
[pid  5872] setpgid(0, 0 <unfinished ...>
[pid  5871] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7f07800000
[pid  5872] <... setpgid resumed>)      = 0
[pid  5872] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5872] write(3, "1000", 4)         = 4
[pid  5872] close(3)                    = 0
[pid  5872] symlink("/dev/binderfs", "./binderfs") = 0
executing program
[pid  5872] write(1, "executing program\n", 18) = 18
[pid  5872] memfd_create("syzkaller", 0) = 3
[pid  5872] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7f07800000
[pid  5870] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 <unfinished ...>
[pid  5853] <... umount2 resumed>)      = 0
[pid  5853] umount2("./2/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5853] newfstatat(AT_FDCWD, "./2/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5853] umount2("./2/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5853] openat(AT_FDCWD, "./2/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
[pid  5853] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5853] getdents64(4, 0x55557174e730 /* 2 entries */, 32768) = 48
[pid  5853] getdents64(4, 0x55557174e730 /* 0 entries */, 32768) = 0
[pid  5853] close(4)                    = 0
[pid  5853] rmdir("./2/file0")          = 0
[pid  5853] getdents64(3, 0x5555717466f0 /* 0 entries */, 32768) = 0
[pid  5853] close(3)                    = 0
[pid  5853] rmdir("./2")                = 0
[pid  5853] mkdir("./3", 0777)          = 0
[pid  5853] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3
[pid  5853] ioctl(3, LOOP_CLR_FD)       = 0
[pid  5853] close(3 <unfinished ...>
[pid  5871] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 <unfinished ...>
[pid  5872] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 <unfinished ...>
[pid  5853] <... close resumed>)        = 0
[pid  5853] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5873 attached
, child_tidptr=0x555571745650) = 5873
[pid  5873] set_robust_list(0x555571745660, 24) = 0
[pid  5873] chdir("./3")                = 0
[pid  5873] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5873] setpgid(0, 0)               = 0
[pid  5873] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5873] write(3, "1000", 4)         = 4
[pid  5873] close(3)                    = 0
[pid  5873] symlink("/dev/binderfs", "./binderfs") = 0
executing program
[pid  5873] write(1, "executing program\n", 18) = 18
[pid  5873] memfd_create("syzkaller", 0) = 3
[pid  5873] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7f07800000
[pid  5870] <... write resumed>)        = 16777216
[pid  5870] munmap(0x7f7f07800000, 138412032) = 0
[pid  5870] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4
[pid  5870] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5870] close(3)                    = 0
[pid  5870] close(4)                    = 0
[pid  5870] mkdir("./file0", 0777)      = 0
[pid  5870] mount("/dev/loop3", "./file0", "jfs", MS_LAZYTIME, "") = 0
[pid  5870] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5870] chdir("./file0")            = 0
[pid  5870] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy)
[  200.424795][ T5870] loop3: detected capacity change from 0 to 32768
[pid  5870] symlink("./file0/file0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0
[pid  5870] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL) = 0
[pid  5870] exit_group(0)               = ?
[pid  5870] +++ exited with 0 +++
[pid  5851] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5870, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=25 /* 0.25 s */} ---
[pid  5851] umount2("./2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5851] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
[pid  5851] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5851] getdents64(3, 0x5555717466f0 /* 4 entries */, 32768) = 112
[pid  5851] umount2("./2/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5851] newfstatat(AT_FDCWD, "./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5851] unlink("./2/binderfs")      = 0
[pid  5851] umount2("./2/file0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5871] <... write resumed>)        = 16777216
[pid  5871] munmap(0x7f7f07800000, 138412032) = 0
[pid  5873] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 <unfinished ...>
[  200.515458][  T113] blkno = 5002c, nblocks = 1
[  200.520145][  T113] ERROR: (device loop3): dbUpdatePMap: blocks are outside the map
[  200.520145][  T113] 
[  200.555532][  T113] ERROR: (device loop3): remounting filesystem as read-only
[pid  5871] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4
[pid  5871] ioctl(4, LOOP_SET_FD, 3 <unfinished ...>
[pid  5872] <... write resumed>)        = 16777216
[pid  5871] <... ioctl resumed>)        = 0
[pid  5872] munmap(0x7f7f07800000, 138412032 <unfinished ...>
[pid  5871] close(3 <unfinished ...>
[pid  5872] <... munmap resumed>)       = 0
[pid  5871] <... close resumed>)        = 0
[pid  5872] openat(AT_FDCWD, "/dev/loop0", O_RDWR <unfinished ...>
[pid  5871] close(4 <unfinished ...>
[pid  5872] <... openat resumed>)       = 4
[pid  5871] <... close resumed>)        = 0
[  200.605184][ T5871] loop1: detected capacity change from 0 to 32768
[pid  5871] mkdir("./file0", 0777)      = 0
[pid  5872] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5871] mount("/dev/loop1", "./file0", "jfs", MS_LAZYTIME, "" <unfinished ...>
[pid  5872] close(3 <unfinished ...>
[pid  5871] <... mount resumed>)        = 0
[pid  5872] <... close resumed>)        = 0
[pid  5871] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY <unfinished ...>
[pid  5872] close(4 <unfinished ...>
[pid  5871] <... openat resumed>)       = 3
[pid  5872] <... close resumed>)        = 0
[pid  5872] mkdir("./file0", 0777 <unfinished ...>
[pid  5871] chdir("./file0" <unfinished ...>
[pid  5872] <... mkdir resumed>)        = 0
[pid  5871] <... chdir resumed>)        = 0
[pid  5872] mount("/dev/loop0", "./file0", "jfs", MS_LAZYTIME, "" <unfinished ...>
[pid  5871] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy)
[pid  5871] symlink("./file0/file0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0
[pid  5871] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL) = 0
[  200.656221][ T5872] loop0: detected capacity change from 0 to 32768
[  200.691601][  T114] blkno = 5002c, nblocks = 1
[pid  5872] <... mount resumed>)        = 0
[pid  5871] exit_group(0)               = ?
[pid  5872] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY <unfinished ...>
[pid  5871] +++ exited with 0 +++
[pid  5872] <... openat resumed>)       = 3
[pid  5849] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5871, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=29 /* 0.29 s */} ---
[pid  5872] chdir("./file0" <unfinished ...>
[pid  5849] restart_syscall(<... resuming interrupted clone ...> <unfinished ...>
[pid  5872] <... chdir resumed>)        = 0
[pid  5872] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy)
[pid  5872] symlink("./file0/file0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" <unfinished ...>
[pid  5849] <... restart_syscall resumed>) = 0
[pid  5872] <... symlink resumed>)      = 0
[pid  5849] umount2("./2", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5872] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL <unfinished ...>
[pid  5849] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid  5849] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
[pid  5872] <... mount resumed>)        = 0
[pid  5849] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5872] exit_group(0 <unfinished ...>
[pid  5849] getdents64(3,  <unfinished ...>
[pid  5872] <... exit_group resumed>)   = ?
[pid  5872] +++ exited with 0 +++
[pid  5849] <... getdents64 resumed>0x5555717466f0 /* 4 entries */, 32768) = 112
[pid  5849] umount2("./2/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5848] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5872, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=20 /* 0.20 s */} ---
[pid  5849] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[  200.699984][  T114] ERROR: (device loop1): dbUpdatePMap: blocks are outside the map
[  200.699984][  T114] 
[  200.711120][  T114] ERROR: (device loop1): remounting filesystem as read-only
[  200.732138][  T113] blkno = 5002c, nblocks = 1
[  200.745148][  T113] ERROR: (device loop0): dbUpdatePMap: blocks are outside the map
[  200.745148][  T113] 
[pid  5849] newfstatat(AT_FDCWD, "./2/binderfs",  <unfinished ...>
[pid  5848] umount2("./2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5849] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5848] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY <unfinished ...>
[pid  5849] unlink("./2/binderfs" <unfinished ...>
[pid  5848] <... openat resumed>)       = 3
[pid  5849] <... unlink resumed>)       = 0
[pid  5848] newfstatat(3, "",  <unfinished ...>
[pid  5849] umount2("./2/file0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5848] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5848] getdents64(3, 0x5555717466f0 /* 4 entries */, 32768) = 112
[pid  5848] umount2("./2/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5848] newfstatat(AT_FDCWD, "./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5848] unlink("./2/binderfs")      = 0
[pid  5848] umount2("./2/file0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5849] <... umount2 resumed>)      = 0
[pid  5849] umount2("./2/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5849] newfstatat(AT_FDCWD, "./2/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5849] umount2("./2/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5849] openat(AT_FDCWD, "./2/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
[pid  5849] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5849] getdents64(4, 0x55557174e730 /* 2 entries */, 32768) = 48
[pid  5849] getdents64(4, 0x55557174e730 /* 0 entries */, 32768) = 0
[pid  5849] close(4)                    = 0
[pid  5849] rmdir("./2/file0")          = 0
[pid  5848] <... umount2 resumed>)      = 0
[pid  5849] getdents64(3, 0x5555717466f0 /* 0 entries */, 32768) = 0
[pid  5848] umount2("./2/file0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5849] close(3)                    = 0
[pid  5848] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid  5849] rmdir("./2")                = 0
[pid  5848] newfstatat(AT_FDCWD, "./2/file0",  <unfinished ...>
[pid  5849] mkdir("./3", 0777 <unfinished ...>
[pid  5848] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
[  200.757892][  T113] ERROR: (device loop0): remounting filesystem as read-only
[  200.771713][ T5849] JFS: metapage_get_blocks failed
[  200.789116][ T5848] JFS: metapage_get_blocks failed
[pid  5849] <... mkdir resumed>)        = 0
[pid  5848] umount2("./2/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5848] openat(AT_FDCWD, "./2/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
[pid  5848] newfstatat(4, "",  <unfinished ...>
[pid  5849] openat(AT_FDCWD, "/dev/loop1", O_RDWR <unfinished ...>
[pid  5848] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5848] getdents64(4, 0x55557174e730 /* 2 entries */, 32768) = 48
[pid  5849] <... openat resumed>)       = 3
[pid  5848] getdents64(4,  <unfinished ...>
[pid  5849] ioctl(3, LOOP_CLR_FD <unfinished ...>
[pid  5848] <... getdents64 resumed>0x55557174e730 /* 0 entries */, 32768) = 0
[pid  5849] <... ioctl resumed>)        = 0
[pid  5851] <... umount2 resumed>)      = 0
[  200.813867][ T5851] JFS: metapage_get_blocks failed
[pid  5849] close(3 <unfinished ...>
[pid  5848] close(4 <unfinished ...>
[pid  5851] umount2("./2/file0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5848] <... close resumed>)        = 0
[pid  5848] rmdir("./2/file0")          = 0
[pid  5851] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid  5848] getdents64(3, 0x5555717466f0 /* 0 entries */, 32768) = 0
[pid  5851] newfstatat(AT_FDCWD, "./2/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5848] close(3)                    = 0
[pid  5848] rmdir("./2")                = 0
[pid  5873] <... write resumed>)        = 16777216
[pid  5851] umount2("./2/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5851] openat(AT_FDCWD, "./2/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
[pid  5848] mkdir("./3", 0777 <unfinished ...>
[pid  5851] newfstatat(4, "",  <unfinished ...>
[pid  5848] <... mkdir resumed>)        = 0
[pid  5851] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5851] getdents64(4, 0x55557174e730 /* 2 entries */, 32768) = 48
[pid  5848] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3
[pid  5851] getdents64(4,  <unfinished ...>
[pid  5848] ioctl(3, LOOP_CLR_FD <unfinished ...>
[pid  5851] <... getdents64 resumed>0x55557174e730 /* 0 entries */, 32768) = 0
[pid  5848] <... ioctl resumed>)        = 0
[pid  5851] close(4 <unfinished ...>
[pid  5848] close(3 <unfinished ...>
[pid  5873] munmap(0x7f7f07800000, 138412032 <unfinished ...>
[pid  5851] <... close resumed>)        = 0
[pid  5851] rmdir("./2/file0")          = 0
[pid  5851] getdents64(3, 0x5555717466f0 /* 0 entries */, 32768) = 0
[pid  5851] close(3)                    = 0
[pid  5851] rmdir("./2")                = 0
[pid  5851] mkdir("./3", 0777)          = 0
[pid  5851] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3
[pid  5851] ioctl(3, LOOP_CLR_FD)       = 0
[pid  5851] close(3 <unfinished ...>
[pid  5873] <... munmap resumed>)       = 0
[pid  5873] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4
[pid  5873] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5873] close(3)                    = 0
[pid  5873] close(4)                    = 0
[pid  5873] mkdir("./file0", 0777)      = 0
[  200.946569][ T5873] loop5: detected capacity change from 0 to 32768
[pid  5873] mount("/dev/loop5", "./file0", "jfs", MS_LAZYTIME, "") = 0
[pid  5873] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5873] chdir("./file0")            = 0
[pid  5873] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy)
[pid  5873] symlink("./file0/file0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0
[pid  5873] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL) = 0
[pid  5873] exit_group(0)               = ?
[pid  5873] +++ exited with 0 +++
[pid  5853] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5873, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=33 /* 0.33 s */} ---
[  201.034092][  T114] blkno = 5002c, nblocks = 1
[pid  5853] restart_syscall(<... resuming interrupted clone ...>) = 0
[pid  5849] <... close resumed>)        = 0
[pid  5853] umount2("./3", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5853] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
[pid  5853] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5853] getdents64(3, 0x5555717466f0 /* 4 entries */, 32768) = 112
[pid  5853] umount2("./3/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5849] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...>
[pid  5853] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid  5853] newfstatat(AT_FDCWD, "./3/binderfs", ./strace-static-x86_64: Process 5874 attached
{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5874] set_robust_list(0x555571745660, 24 <unfinished ...>
[pid  5853] unlink("./3/binderfs" <unfinished ...>
[pid  5849] <... clone resumed>, child_tidptr=0x555571745650) = 5874
[pid  5874] <... set_robust_list resumed>) = 0
[pid  5853] <... unlink resumed>)       = 0
[pid  5874] chdir("./3" <unfinished ...>
[pid  5853] umount2("./3/file0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5874] <... chdir resumed>)        = 0
[pid  5874] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5874] setpgid(0, 0)               = 0
[pid  5874] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5874] write(3, "1000", 4)         = 4
[pid  5874] close(3)                    = 0
[pid  5874] symlink("/dev/binderfs", "./binderfs"executing program
) = 0
[pid  5874] write(1, "executing program\n", 18) = 18
[pid  5874] memfd_create("syzkaller", 0) = 3
[pid  5874] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7f07800000
[pid  5851] <... close resumed>)        = 0
[  201.064094][  T114] ERROR: (device loop5): dbUpdatePMap: blocks are outside the map
[  201.064094][  T114] 
[  201.091598][  T114] ERROR: (device loop5): remounting filesystem as read-only
[pid  5851] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555571745650) = 5875
./strace-static-x86_64: Process 5875 attached
[pid  5848] <... close resumed>)        = 0
[pid  5875] set_robust_list(0x555571745660, 24 <unfinished ...>
[pid  5848] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...>
[pid  5875] <... set_robust_list resumed>) = 0
./strace-static-x86_64: Process 5876 attached
[pid  5875] chdir("./3")                = 0
[pid  5875] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5875] setpgid(0, 0)               = 0
[pid  5876] set_robust_list(0x555571745660, 24 <unfinished ...>
[pid  5875] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC <unfinished ...>
[pid  5876] <... set_robust_list resumed>) = 0
[pid  5848] <... clone resumed>, child_tidptr=0x555571745650) = 5876
[pid  5876] chdir("./3")                = 0
[pid  5875] <... openat resumed>)       = 3
[pid  5876] prctl(PR_SET_PDEATHSIG, SIGKILL <unfinished ...>
[pid  5875] write(3, "1000", 4 <unfinished ...>
[pid  5876] <... prctl resumed>)        = 0
[pid  5876] setpgid(0, 0 <unfinished ...>
[pid  5875] <... write resumed>)        = 4
[pid  5876] <... setpgid resumed>)      = 0
[pid  5875] close(3)                    = 0
[pid  5876] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC <unfinished ...>
[pid  5875] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5876] <... openat resumed>)       = 3
[pid  5876] write(3, "1000", 4executing program
 <unfinished ...>
[pid  5875] write(1, "executing program\n", 18 <unfinished ...>
[pid  5876] <... write resumed>)        = 4
[pid  5875] <... write resumed>)        = 18
[pid  5876] close(3 <unfinished ...>
[pid  5875] memfd_create("syzkaller", 0 <unfinished ...>
[pid  5876] <... close resumed>)        = 0
[pid  5876] symlink("/dev/binderfs", "./binderfs") = 0
executing program
[pid  5876] write(1, "executing program\n", 18 <unfinished ...>
[pid  5875] <... memfd_create resumed>) = 3
[pid  5876] <... write resumed>)        = 18
[pid  5876] memfd_create("syzkaller", 0 <unfinished ...>
[pid  5875] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7f07800000
[pid  5876] <... memfd_create resumed>) = 3
[pid  5876] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7f07800000
[pid  5874] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 <unfinished ...>
[pid  5875] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 <unfinished ...>
[pid  5876] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 <unfinished ...>
[pid  5853] <... umount2 resumed>)      = 0
[  201.363634][ T5853] JFS: metapage_get_blocks failed
[pid  5853] umount2("./3/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5853] newfstatat(AT_FDCWD, "./3/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5853] umount2("./3/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5853] openat(AT_FDCWD, "./3/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
[pid  5853] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5853] getdents64(4, 0x55557174e730 /* 2 entries */, 32768) = 48
[pid  5853] getdents64(4, 0x55557174e730 /* 0 entries */, 32768) = 0
[pid  5853] close(4)                    = 0
[pid  5853] rmdir("./3/file0")          = 0
[pid  5853] getdents64(3, 0x5555717466f0 /* 0 entries */, 32768) = 0
[pid  5853] close(3)                    = 0
[pid  5853] rmdir("./3")                = 0
[pid  5853] mkdir("./4", 0777)          = 0
[pid  5853] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3
[pid  5853] ioctl(3, LOOP_CLR_FD)       = 0
[pid  5853] close(3 <unfinished ...>
[pid  5874] <... write resumed>)        = 16777216
[pid  5874] munmap(0x7f7f07800000, 138412032) = 0
[pid  5874] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4
[pid  5874] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5853] <... close resumed>)        = 0
[pid  5874] close(3)                    = 0
[pid  5874] close(4 <unfinished ...>
[pid  5853] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...>
[pid  5874] <... close resumed>)        = 0
./strace-static-x86_64: Process 5877 attached
[pid  5874] mkdir("./file0", 0777 <unfinished ...>
[pid  5853] <... clone resumed>, child_tidptr=0x555571745650) = 5877
[pid  5877] set_robust_list(0x555571745660, 24 <unfinished ...>
[pid  5874] <... mkdir resumed>)        = 0
[pid  5877] <... set_robust_list resumed>) = 0
[pid  5874] mount("/dev/loop1", "./file0", "jfs", MS_LAZYTIME, "" <unfinished ...>
[pid  5877] chdir("./4")                = 0
[pid  5877] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5877] setpgid(0, 0)               = 0
[pid  5877] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5877] write(3, "1000", 4)         = 4
[pid  5877] close(3)                    = 0
[pid  5877] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5874] <... mount resumed>)        = 0
[  201.643453][ T5874] loop1: detected capacity change from 0 to 32768
[pid  5874] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5874] chdir("./file0")            = 0
[pid  5877] write(1, "executing program\n", 18 <unfinished ...>
[pid  5874] openat(AT_FDCWD, "/dev/loop1", O_RDWRexecuting program
 <unfinished ...>
[pid  5877] <... write resumed>)        = 18
[pid  5874] <... openat resumed>)       = -1 EBUSY (Device or resource busy)
[pid  5877] memfd_create("syzkaller", 0 <unfinished ...>
[pid  5875] <... write resumed>)        = 16777216
[pid  5874] symlink("./file0/file0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" <unfinished ...>
[pid  5877] <... memfd_create resumed>) = 3
[pid  5877] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7f07800000
[pid  5875] munmap(0x7f7f07800000, 138412032 <unfinished ...>
[pid  5874] <... symlink resumed>)      = 0
[pid  5874] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL) = 0
[pid  5874] exit_group(0)               = ?
[pid  5874] +++ exited with 0 +++
[pid  5849] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5874, si_uid=0, si_status=0, si_utime=0, si_stime=30 /* 0.30 s */} ---
[pid  5849] restart_syscall(<... resuming interrupted clone ...>) = 0
[pid  5849] umount2("./3", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5849] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
[pid  5849] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5849] getdents64(3, 0x5555717466f0 /* 4 entries */, 32768) = 112
[pid  5849] umount2("./3/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5849] newfstatat(AT_FDCWD, "./3/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5849] unlink("./3/binderfs")      = 0
[  201.716938][  T114] blkno = 5002c, nblocks = 1
[  201.721604][  T114] ERROR: (device loop1): dbUpdatePMap: blocks are outside the map
[  201.721604][  T114] 
[pid  5849] umount2("./3/file0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5876] <... write resumed>)        = 16777216
[pid  5875] <... munmap resumed>)       = 0
[pid  5876] munmap(0x7f7f07800000, 138412032 <unfinished ...>
[pid  5875] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4
[pid  5875] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5875] close(3)                    = 0
[pid  5875] close(4)                    = 0
[pid  5875] mkdir("./file0", 0777)      = 0
[pid  5875] mount("/dev/loop3", "./file0", "jfs", MS_LAZYTIME, "") = 0
[pid  5875] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5875] chdir("./file0")            = 0
[pid  5875] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy)
[  201.763414][  T114] ERROR: (device loop1): remounting filesystem as read-only
[  201.777416][ T5875] loop3: detected capacity change from 0 to 32768
[pid  5875] symlink("./file0/file0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0
[pid  5875] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL <unfinished ...>
[pid  5876] <... munmap resumed>)       = 0
[pid  5876] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5876] ioctl(4, LOOP_SET_FD, 3 <unfinished ...>
[pid  5875] <... mount resumed>)        = 0
[pid  5875] exit_group(0)               = ?
[pid  5875] +++ exited with 0 +++
[pid  5851] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5875, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=30 /* 0.30 s */} ---
[pid  5851] restart_syscall(<... resuming interrupted clone ...> <unfinished ...>
[pid  5876] <... ioctl resumed>)        = 0
[pid  5876] close(3)                    = 0
[pid  5876] close(4)                    = 0
[pid  5876] mkdir("./file0", 0777)      = 0
[pid  5851] <... restart_syscall resumed>) = 0
[pid  5851] umount2("./3", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5851] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
[pid  5851] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5851] getdents64(3, 0x5555717466f0 /* 4 entries */, 32768) = 112
[pid  5851] umount2("./3/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5851] newfstatat(AT_FDCWD, "./3/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5851] unlink("./3/binderfs")      = 0
[pid  5851] umount2("./3/file0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[  201.824006][  T113] blkno = 5002c, nblocks = 1
[  201.828721][  T113] ERROR: (device loop3): dbUpdatePMap: blocks are outside the map
[  201.828721][  T113] 
[  201.838443][ T5876] loop0: detected capacity change from 0 to 32768
[pid  5876] mount("/dev/loop0", "./file0", "jfs", MS_LAZYTIME, "") = 0
[pid  5876] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5876] chdir("./file0")            = 0
[pid  5876] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy)
[pid  5876] symlink("./file0/file0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0
[pid  5876] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL) = 0
[pid  5876] exit_group(0)               = ?
[pid  5876] +++ exited with 0 +++
[pid  5848] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5876, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=28 /* 0.28 s */} ---
[pid  5848] restart_syscall(<... resuming interrupted clone ...>) = 0
[pid  5848] umount2("./3", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5848] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
[pid  5848] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5848] getdents64(3, 0x5555717466f0 /* 4 entries */, 32768) = 112
[pid  5848] umount2("./3/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5848] newfstatat(AT_FDCWD, "./3/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5848] unlink("./3/binderfs")      = 0
[pid  5848] umount2("./3/file0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[  201.864977][  T113] ERROR: (device loop3): remounting filesystem as read-only
[  201.876495][  T114] blkno = 5002c, nblocks = 1
[  201.881241][  T114] ERROR: (device loop0): dbUpdatePMap: blocks are outside the map
[  201.881241][  T114] 
[  201.905839][  T114] ERROR: (device loop0): remounting filesystem as read-only
[pid  5877] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 <unfinished ...>
[pid  5849] <... umount2 resumed>)      = 0
[pid  5849] umount2("./3/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5849] newfstatat(AT_FDCWD, "./3/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
[  202.013988][ T5849] JFS: metapage_get_blocks failed
[pid  5849] umount2("./3/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5849] openat(AT_FDCWD, "./3/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
[pid  5877] <... write resumed>)        = 16777216
[pid  5849] newfstatat(4, "",  <unfinished ...>
[pid  5877] munmap(0x7f7f07800000, 138412032 <unfinished ...>
[pid  5849] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5849] getdents64(4, 0x55557174e730 /* 2 entries */, 32768) = 48
[pid  5849] getdents64(4, 0x55557174e730 /* 0 entries */, 32768) = 0
[pid  5849] close(4 <unfinished ...>
[pid  5877] <... munmap resumed>)       = 0
[pid  5849] <... close resumed>)        = 0
[pid  5877] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4
[pid  5849] rmdir("./3/file0" <unfinished ...>
[pid  5877] ioctl(4, LOOP_SET_FD, 3 <unfinished ...>
[pid  5849] <... rmdir resumed>)        = 0
[pid  5849] getdents64(3, 0x5555717466f0 /* 0 entries */, 32768) = 0
[pid  5849] close(3)                    = 0
[pid  5849] rmdir("./3")                = 0
[pid  5849] mkdir("./4", 0777 <unfinished ...>
[pid  5877] <... ioctl resumed>)        = 0
[pid  5877] close(3)                    = 0
[pid  5877] close(4 <unfinished ...>
[pid  5849] <... mkdir resumed>)        = 0
[pid  5877] <... close resumed>)        = 0
[pid  5877] mkdir("./file0", 0777 <unfinished ...>
[pid  5849] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3
[pid  5849] ioctl(3, LOOP_CLR_FD <unfinished ...>
[pid  5877] <... mkdir resumed>)        = 0
[pid  5849] <... ioctl resumed>)        = 0
[pid  5877] mount("/dev/loop5", "./file0", "jfs", MS_LAZYTIME, "" <unfinished ...>
[pid  5849] close(3 <unfinished ...>
[pid  5877] <... mount resumed>)        = 0
[pid  5877] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5877] chdir("./file0")            = 0
[pid  5877] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy)
[  202.097593][ T5877] loop5: detected capacity change from 0 to 32768
[  202.133924][ T5851] JFS: metapage_get_blocks failed
[pid  5877] symlink("./file0/file0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0
[pid  5877] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL) = 0
[pid  5877] exit_group(0)               = ?
[pid  5877] +++ exited with 0 +++
[pid  5853] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5877, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=26 /* 0.26 s */} ---
[pid  5853] restart_syscall(<... resuming interrupted clone ...>) = 0
[pid  5848] <... umount2 resumed>)      = 0
[pid  5853] umount2("./4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5853] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
[pid  5853] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5853] getdents64(3, 0x5555717466f0 /* 4 entries */, 32768) = 112
[pid  5853] umount2("./4/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5848] umount2("./3/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5853] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid  5848] newfstatat(AT_FDCWD, "./3/file0",  <unfinished ...>
[pid  5853] newfstatat(AT_FDCWD, "./4/binderfs",  <unfinished ...>
[pid  5848] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5853] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5848] umount2("./3/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5853] unlink("./4/binderfs" <unfinished ...>
[pid  5848] openat(AT_FDCWD, "./3/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY <unfinished ...>
[pid  5853] <... unlink resumed>)       = 0
[pid  5848] <... openat resumed>)       = 4
[pid  5848] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5853] umount2("./4/file0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5848] getdents64(4, 0x55557174e730 /* 2 entries */, 32768) = 48
[pid  5848] getdents64(4, 0x55557174e730 /* 0 entries */, 32768) = 0
[pid  5848] close(4)                    = 0
[pid  5848] rmdir("./3/file0")          = 0
[pid  5848] getdents64(3, 0x5555717466f0 /* 0 entries */, 32768) = 0
[pid  5848] close(3)                    = 0
[pid  5848] rmdir("./3")                = 0
[  202.153618][ T5848] JFS: metapage_get_blocks failed
[  202.161879][  T113] blkno = 5002c, nblocks = 1
[  202.178002][  T113] ERROR: (device loop5): dbUpdatePMap: blocks are outside the map
[  202.178002][  T113] 
[pid  5848] mkdir("./4", 0777)          = 0
[pid  5848] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3
[pid  5848] ioctl(3, LOOP_CLR_FD)       = 0
[  202.220179][  T113] ERROR: (device loop5): remounting filesystem as read-only
[pid  5848] close(3 <unfinished ...>
[pid  5849] <... close resumed>)        = 0
[pid  5849] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5878 attached
, child_tidptr=0x555571745650) = 5878
[pid  5878] set_robust_list(0x555571745660, 24) = 0
[pid  5878] chdir("./4" <unfinished ...>
[pid  5848] <... close resumed>)        = 0
[pid  5878] <... chdir resumed>)        = 0
[pid  5878] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5848] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...>
[pid  5878] setpgid(0, 0)               = 0
./strace-static-x86_64: Process 5879 attached
[pid  5848] <... clone resumed>, child_tidptr=0x555571745650) = 5879
[pid  5879] set_robust_list(0x555571745660, 24 <unfinished ...>
[pid  5878] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC <unfinished ...>
[pid  5879] <... set_robust_list resumed>) = 0
[pid  5878] <... openat resumed>)       = 3
[pid  5879] chdir("./4" <unfinished ...>
[pid  5878] write(3, "1000", 4)         = 4
[pid  5879] <... chdir resumed>)        = 0
[pid  5878] close(3 <unfinished ...>
[pid  5879] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5878] <... close resumed>)        = 0
[pid  5878] symlink("/dev/binderfs", "./binderfs" <unfinished ...>
[pid  5879] setpgid(0, 0)               = 0
[pid  5878] <... symlink resumed>)      = 0
[pid  5851] <... umount2 resumed>)      = 0
executing program
[pid  5879] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC <unfinished ...>
[pid  5878] write(1, "executing program\n", 18 <unfinished ...>
[pid  5851] umount2("./3/file0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5878] <... write resumed>)        = 18
[pid  5851] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid  5879] <... openat resumed>)       = 3
[pid  5851] newfstatat(AT_FDCWD, "./3/file0",  <unfinished ...>
[pid  5878] memfd_create("syzkaller", 0 <unfinished ...>
[pid  5851] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5879] write(3, "1000", 4 <unfinished ...>
[pid  5878] <... memfd_create resumed>) = 3
[pid  5851] umount2("./3/file0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5879] <... write resumed>)        = 4
[pid  5878] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 <unfinished ...>
[pid  5879] close(3 <unfinished ...>
[pid  5851] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid  5879] <... close resumed>)        = 0
[pid  5878] <... mmap resumed>)         = 0x7f7f07800000
[pid  5851] openat(AT_FDCWD, "./3/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY <unfinished ...>
[pid  5879] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5879] write(1, "executing program\n", 18 <unfinished ...>
[pid  5851] <... openat resumed>)       = 4
executing program
[pid  5879] <... write resumed>)        = 18
[pid  5851] newfstatat(4, "",  <unfinished ...>
[pid  5879] memfd_create("syzkaller", 0 <unfinished ...>
[pid  5851] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5851] getdents64(4, 0x55557174e730 /* 2 entries */, 32768) = 48
[pid  5879] <... memfd_create resumed>) = 3
[pid  5851] getdents64(4,  <unfinished ...>
[pid  5879] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 <unfinished ...>
[pid  5851] <... getdents64 resumed>0x55557174e730 /* 0 entries */, 32768) = 0
[pid  5879] <... mmap resumed>)         = 0x7f7f07800000
[pid  5851] close(4)                    = 0
[pid  5851] rmdir("./3/file0")          = 0
[pid  5851] getdents64(3, 0x5555717466f0 /* 0 entries */, 32768) = 0
[pid  5851] close(3)                    = 0
[pid  5851] rmdir("./3")                = 0
[pid  5851] mkdir("./4", 0777)          = 0
[pid  5851] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3
[pid  5851] ioctl(3, LOOP_CLR_FD)       = 0
[  202.463509][ T5853] JFS: metapage_get_blocks failed
[pid  5851] close(3 <unfinished ...>
[pid  5878] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 <unfinished ...>
[pid  5879] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 <unfinished ...>
[pid  5851] <... close resumed>)        = 0
[pid  5851] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5880 attached
, child_tidptr=0x555571745650) = 5880
[pid  5880] set_robust_list(0x555571745660, 24) = 0
[pid  5880] chdir("./4")                = 0
[pid  5880] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5880] setpgid(0, 0)               = 0
[pid  5880] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5880] write(3, "1000", 4)         = 4
[pid  5880] close(3)                    = 0
[pid  5880] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5880] write(1, "executing program\n", 18executing program
) = 18
[pid  5880] memfd_create("syzkaller", 0) = 3
[pid  5880] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7f07800000
[pid  5853] <... umount2 resumed>)      = 0
[pid  5853] umount2("./4/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5853] newfstatat(AT_FDCWD, "./4/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5853] umount2("./4/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5853] openat(AT_FDCWD, "./4/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
[pid  5853] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5853] getdents64(4, 0x55557174e730 /* 2 entries */, 32768) = 48
[pid  5853] getdents64(4, 0x55557174e730 /* 0 entries */, 32768) = 0
[pid  5853] close(4)                    = 0
[pid  5853] rmdir("./4/file0")          = 0
[pid  5853] getdents64(3, 0x5555717466f0 /* 0 entries */, 32768) = 0
[pid  5853] close(3)                    = 0
[pid  5853] rmdir("./4")                = 0
[pid  5853] mkdir("./5", 0777)          = 0
[pid  5853] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3
[pid  5853] ioctl(3, LOOP_CLR_FD)       = 0
[pid  5853] close(3 <unfinished ...>
[pid  5878] <... write resumed>)        = 16777216
[pid  5878] munmap(0x7f7f07800000, 138412032) = 0
[pid  5878] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4
[pid  5878] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5880] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 <unfinished ...>
[pid  5878] close(3 <unfinished ...>
[pid  5879] <... write resumed>)        = 16777216
[pid  5878] <... close resumed>)        = 0
[pid  5879] munmap(0x7f7f07800000, 138412032 <unfinished ...>
[pid  5878] close(4)                    = 0
[  202.924445][ T5878] loop1: detected capacity change from 0 to 32768
[pid  5878] mkdir("./file0", 0777 <unfinished ...>
[pid  5879] <... munmap resumed>)       = 0
[pid  5878] <... mkdir resumed>)        = 0
[pid  5878] mount("/dev/loop1", "./file0", "jfs", MS_LAZYTIME, "" <unfinished ...>
[pid  5879] openat(AT_FDCWD, "/dev/loop0", O_RDWR <unfinished ...>
[pid  5878] <... mount resumed>)        = 0
[pid  5879] <... openat resumed>)       = 4
[pid  5878] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY <unfinished ...>
[pid  5879] ioctl(4, LOOP_SET_FD, 3 <unfinished ...>
[pid  5878] <... openat resumed>)       = 3
[pid  5878] chdir("./file0")            = 0
[pid  5878] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy)
[pid  5879] <... ioctl resumed>)        = 0
[pid  5853] <... close resumed>)        = 0
[pid  5879] close(3 <unfinished ...>
[pid  5878] symlink("./file0/file0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" <unfinished ...>
[pid  5879] <... close resumed>)        = 0
[pid  5853] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...>
[pid  5879] close(4 <unfinished ...>
[pid  5878] <... symlink resumed>)      = 0
[pid  5879] <... close resumed>)        = 0
[pid  5878] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL <unfinished ...>
[pid  5879] mkdir("./file0", 0777)      = 0
[pid  5879] mount("/dev/loop0", "./file0", "jfs", MS_LAZYTIME, "" <unfinished ...>
[pid  5853] <... clone resumed>, child_tidptr=0x555571745650) = 5881
./strace-static-x86_64: Process 5881 attached
[pid  5878] <... mount resumed>)        = 0
[pid  5881] set_robust_list(0x555571745660, 24) = 0
[pid  5878] exit_group(0 <unfinished ...>
[pid  5881] chdir("./5" <unfinished ...>
[pid  5878] <... exit_group resumed>)   = ?
[pid  5881] <... chdir resumed>)        = 0
[pid  5878] +++ exited with 0 +++
[  203.002787][ T5879] loop0: detected capacity change from 0 to 32768
[  203.035340][  T114] blkno = 5002c, nblocks = 1
[  203.041738][  T114] ERROR: (device loop1): dbUpdatePMap: blocks are outside the map
[  203.041738][  T114] 
[pid  5881] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5849] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5878, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=28 /* 0.28 s */} ---
[pid  5849] restart_syscall(<... resuming interrupted clone ...>) = 0
[pid  5881] setpgid(0, 0)               = 0
[pid  5849] umount2("./4", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5881] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC <unfinished ...>
[pid  5849] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid  5881] <... openat resumed>)       = 3
[pid  5849] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY <unfinished ...>
[pid  5881] write(3, "1000", 4 <unfinished ...>
[pid  5849] <... openat resumed>)       = 3
[pid  5881] <... write resumed>)        = 4
[pid  5849] newfstatat(3, "",  <unfinished ...>
[pid  5881] close(3 <unfinished ...>
[pid  5849] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5881] <... close resumed>)        = 0
[pid  5881] symlink("/dev/binderfs", "./binderfs" <unfinished ...>
[pid  5849] getdents64(3,  <unfinished ...>
[pid  5881] <... symlink resumed>)      = 0
[pid  5881] write(1, "executing program\n", 18executing program
 <unfinished ...>
[pid  5849] <... getdents64 resumed>0x5555717466f0 /* 4 entries */, 32768) = 112
[pid  5881] <... write resumed>)        = 18
[pid  5849] umount2("./4/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5881] memfd_create("syzkaller", 0 <unfinished ...>
[pid  5879] <... mount resumed>)        = 0
[pid  5849] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid  5881] <... memfd_create resumed>) = 3
[pid  5879] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY <unfinished ...>
[pid  5849] newfstatat(AT_FDCWD, "./4/binderfs",  <unfinished ...>
[pid  5881] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 <unfinished ...>
[pid  5879] <... openat resumed>)       = 3
[pid  5881] <... mmap resumed>)         = 0x7f7f07800000
[pid  5879] chdir("./file0" <unfinished ...>
[pid  5849] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5879] <... chdir resumed>)        = 0
[pid  5879] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy)
[pid  5879] symlink("./file0/file0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0
[  203.069735][  T114] ERROR: (device loop1): remounting filesystem as read-only
[pid  5879] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL <unfinished ...>
[pid  5849] unlink("./4/binderfs" <unfinished ...>
[pid  5879] <... mount resumed>)        = 0
[pid  5849] <... unlink resumed>)       = 0
[pid  5879] exit_group(0 <unfinished ...>
[pid  5849] umount2("./4/file0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5879] <... exit_group resumed>)   = ?
[pid  5879] +++ exited with 0 +++
[pid  5848] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5879, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=31 /* 0.31 s */} ---
[pid  5848] umount2("./4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5848] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
[pid  5848] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5848] getdents64(3, 0x5555717466f0 /* 4 entries */, 32768) = 112
[pid  5848] umount2("./4/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5848] newfstatat(AT_FDCWD, "./4/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5848] unlink("./4/binderfs")      = 0
[  203.135824][  T113] blkno = 5002c, nblocks = 1
[  203.140538][  T113] ERROR: (device loop0): dbUpdatePMap: blocks are outside the map
[  203.140538][  T113] 
[  203.153739][ T5849] JFS: metapage_get_blocks failed
[  203.164675][  T113] ERROR: (device loop0): remounting filesystem as read-only
[pid  5848] umount2("./4/file0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5880] <... write resumed>)        = 16777216
[pid  5880] munmap(0x7f7f07800000, 138412032) = 0
[pid  5880] openat(AT_FDCWD, "/dev/loop3", O_RDWR <unfinished ...>
[pid  5881] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 <unfinished ...>
[pid  5880] <... openat resumed>)       = 4
[pid  5880] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5880] close(3)                    = 0
[pid  5880] close(4)                    = 0
[pid  5880] mkdir("./file0", 0777)      = 0
[pid  5880] mount("/dev/loop3", "./file0", "jfs", MS_LAZYTIME, "") = 0
[pid  5880] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5880] chdir("./file0")            = 0
[pid  5880] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy)
[pid  5880] symlink("./file0/file0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0
[  203.253212][ T5880] loop3: detected capacity change from 0 to 32768
[  203.293171][  T114] blkno = 5002c, nblocks = 1
[pid  5880] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL) = 0
[pid  5880] exit_group(0)               = ?
[pid  5880] +++ exited with 0 +++
[pid  5851] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5880, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=27 /* 0.27 s */} ---
[pid  5851] umount2("./4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5851] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
[pid  5851] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5851] getdents64(3, 0x5555717466f0 /* 4 entries */, 32768) = 112
[pid  5851] umount2("./4/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5851] newfstatat(AT_FDCWD, "./4/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5851] unlink("./4/binderfs")      = 0
[  203.298068][  T114] ERROR: (device loop3): dbUpdatePMap: blocks are outside the map
[  203.298068][  T114] 
[pid  5851] umount2("./4/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0
[pid  5851] umount2("./4/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5851] newfstatat(AT_FDCWD, "./4/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5851] umount2("./4/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5851] openat(AT_FDCWD, "./4/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
[pid  5851] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5851] getdents64(4, 0x55557174e730 /* 2 entries */, 32768) = 48
[pid  5851] getdents64(4, 0x55557174e730 /* 0 entries */, 32768) = 0
[pid  5851] close(4)                    = 0
[  203.333644][  T114] ERROR: (device loop3): remounting filesystem as read-only
[  203.342012][ T5851] JFS: metapage_get_blocks failed
[pid  5851] rmdir("./4/file0")          = 0
[pid  5851] getdents64(3, 0x5555717466f0 /* 0 entries */, 32768) = 0
[pid  5851] close(3)                    = 0
[pid  5851] rmdir("./4" <unfinished ...>
[pid  5849] <... umount2 resumed>)      = 0
[pid  5849] umount2("./4/file0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5851] <... rmdir resumed>)        = 0
[pid  5849] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid  5849] newfstatat(AT_FDCWD, "./4/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5849] umount2("./4/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5849] openat(AT_FDCWD, "./4/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY <unfinished ...>
[pid  5851] mkdir("./5", 0777 <unfinished ...>
[pid  5849] <... openat resumed>)       = 4
[pid  5851] <... mkdir resumed>)        = 0
[pid  5849] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5849] getdents64(4, 0x55557174e730 /* 2 entries */, 32768) = 48
[pid  5849] getdents64(4,  <unfinished ...>
[pid  5851] openat(AT_FDCWD, "/dev/loop3", O_RDWR <unfinished ...>
[pid  5849] <... getdents64 resumed>0x55557174e730 /* 0 entries */, 32768) = 0
[pid  5851] <... openat resumed>)       = 3
[pid  5881] <... write resumed>)        = 16777216
[pid  5849] close(4 <unfinished ...>
[pid  5851] ioctl(3, LOOP_CLR_FD <unfinished ...>
[pid  5881] munmap(0x7f7f07800000, 138412032 <unfinished ...>
[pid  5851] <... ioctl resumed>)        = 0
[pid  5849] <... close resumed>)        = 0
[pid  5851] close(3 <unfinished ...>
[pid  5849] rmdir("./4/file0" <unfinished ...>
[pid  5881] <... munmap resumed>)       = 0
[pid  5849] <... rmdir resumed>)        = 0
[pid  5849] getdents64(3, 0x5555717466f0 /* 0 entries */, 32768) = 0
[pid  5849] close(3)                    = 0
[pid  5849] rmdir("./4")                = 0
[pid  5849] mkdir("./5", 0777)          = 0
[pid  5849] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3
[pid  5849] ioctl(3, LOOP_CLR_FD)       = 0
[  203.433511][ T5848] JFS: metapage_get_blocks failed
[pid  5849] close(3 <unfinished ...>
[pid  5881] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4
[pid  5881] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5881] close(3)                    = 0
[pid  5881] close(4)                    = 0
[pid  5881] mkdir("./file0", 0777)      = 0
[  203.473973][ T5881] loop5: detected capacity change from 0 to 32768
[pid  5881] mount("/dev/loop5", "./file0", "jfs", MS_LAZYTIME, "") = 0
[pid  5881] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5881] chdir("./file0")            = 0
[pid  5881] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy)
[pid  5881] symlink("./file0/file0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0
[  203.570050][  T113] blkno = 5002c, nblocks = 1
[  203.583136][  T113] ERROR: (device loop5): dbUpdatePMap: blocks are outside the map
[  203.583136][  T113] 
[pid  5881] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL) = -1 EINVAL (Invalid argument)
[pid  5881] exit_group(0)               = ?
[pid  5881] +++ exited with 0 +++
[pid  5853] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5881, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=25 /* 0.25 s */} ---
[pid  5853] restart_syscall(<... resuming interrupted clone ...>) = 0
[pid  5853] umount2("./5", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5853] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
[pid  5853] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5853] getdents64(3, 0x5555717466f0 /* 4 entries */, 32768) = 112
[pid  5853] umount2("./5/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5853] newfstatat(AT_FDCWD, "./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5853] unlink("./5/binderfs")      = 0
[pid  5853] umount2("./5/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0
[pid  5853] umount2("./5/file0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5851] <... close resumed>)        = 0
[pid  5849] <... close resumed>)        = 0
[pid  5853] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid  5853] newfstatat(AT_FDCWD, "./5/file0",  <unfinished ...>
[pid  5849] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...>
[pid  5853] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5851] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5882 attached
 <unfinished ...>
[pid  5853] umount2("./5/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
./strace-static-x86_64: Process 5883 attached
[pid  5853] openat(AT_FDCWD, "./5/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY <unfinished ...>
[pid  5849] <... clone resumed>, child_tidptr=0x555571745650) = 5882
[pid  5882] set_robust_list(0x555571745660, 24 <unfinished ...>
[pid  5853] <... openat resumed>)       = 4
[pid  5882] <... set_robust_list resumed>) = 0
[  203.617391][  T113] ERROR: (device loop5): remounting filesystem as read-only
[  203.633834][ T5881] JFS: metapage_get_blocks failed
[pid  5882] chdir("./5" <unfinished ...>
[pid  5883] set_robust_list(0x555571745660, 24 <unfinished ...>
[pid  5853] newfstatat(4, "",  <unfinished ...>
[pid  5883] <... set_robust_list resumed>) = 0
[pid  5882] <... chdir resumed>)        = 0
[pid  5853] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5851] <... clone resumed>, child_tidptr=0x555571745650) = 5883
[pid  5882] prctl(PR_SET_PDEATHSIG, SIGKILL <unfinished ...>
[pid  5853] getdents64(4,  <unfinished ...>
[pid  5883] chdir("./5" <unfinished ...>
[pid  5882] <... prctl resumed>)        = 0
[pid  5882] setpgid(0, 0 <unfinished ...>
[pid  5853] <... getdents64 resumed>0x55557174e730 /* 2 entries */, 32768) = 48
[pid  5883] <... chdir resumed>)        = 0
[pid  5882] <... setpgid resumed>)      = 0
[pid  5883] prctl(PR_SET_PDEATHSIG, SIGKILL <unfinished ...>
[pid  5853] getdents64(4,  <unfinished ...>
[pid  5883] <... prctl resumed>)        = 0
[pid  5853] <... getdents64 resumed>0x55557174e730 /* 0 entries */, 32768) = 0
[pid  5853] close(4 <unfinished ...>
[pid  5882] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC <unfinished ...>
[pid  5853] <... close resumed>)        = 0
[pid  5883] setpgid(0, 0 <unfinished ...>
[pid  5853] rmdir("./5/file0" <unfinished ...>
[pid  5883] <... setpgid resumed>)      = 0
[pid  5853] <... rmdir resumed>)        = 0
[pid  5883] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC <unfinished ...>
[pid  5882] <... openat resumed>)       = 3
[pid  5848] <... umount2 resumed>)      = 0
[pid  5853] getdents64(3,  <unfinished ...>
[pid  5848] umount2("./4/file0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5882] write(3, "1000", 4 <unfinished ...>
[pid  5853] <... getdents64 resumed>0x5555717466f0 /* 0 entries */, 32768) = 0
[pid  5848] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid  5883] <... openat resumed>)       = 3
[pid  5882] <... write resumed>)        = 4
[pid  5853] close(3 <unfinished ...>
[pid  5848] newfstatat(AT_FDCWD, "./4/file0",  <unfinished ...>
[pid  5883] write(3, "1000", 4 <unfinished ...>
[pid  5882] close(3 <unfinished ...>
[pid  5853] <... close resumed>)        = 0
[pid  5848] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5853] rmdir("./5" <unfinished ...>
[pid  5848] umount2("./4/file0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5883] <... write resumed>)        = 4
[pid  5882] <... close resumed>)        = 0
[pid  5853] <... rmdir resumed>)        = 0
[pid  5883] close(3 <unfinished ...>
[pid  5882] symlink("/dev/binderfs", "./binderfs" <unfinished ...>
[pid  5848] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid  5883] <... close resumed>)        = 0
[pid  5882] <... symlink resumed>)      = 0
executing program
[pid  5853] mkdir("./6", 0777 <unfinished ...>
[pid  5848] openat(AT_FDCWD, "./4/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY <unfinished ...>
[pid  5883] symlink("/dev/binderfs", "./binderfs" <unfinished ...>
[pid  5882] write(1, "executing program\n", 18 <unfinished ...>
[pid  5848] <... openat resumed>)       = 4
[pid  5883] <... symlink resumed>)      = 0
[pid  5882] <... write resumed>)        = 18
[pid  5853] <... mkdir resumed>)        = 0
[pid  5848] newfstatat(4, "",  <unfinished ...>
[pid  5883] write(1, "executing program\n", 18 <unfinished ...>
[pid  5853] openat(AT_FDCWD, "/dev/loop5", O_RDWRexecuting program
 <unfinished ...>
[pid  5848] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5883] <... write resumed>)        = 18
[pid  5853] <... openat resumed>)       = 3
[pid  5883] memfd_create("syzkaller", 0 <unfinished ...>
[pid  5882] memfd_create("syzkaller", 0 <unfinished ...>
[pid  5853] ioctl(3, LOOP_CLR_FD <unfinished ...>
[pid  5848] getdents64(4,  <unfinished ...>
[pid  5883] <... memfd_create resumed>) = 3
[pid  5853] <... ioctl resumed>)        = 0
[pid  5883] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 <unfinished ...>
[pid  5882] <... memfd_create resumed>) = 3
[pid  5853] close(3 <unfinished ...>
[pid  5848] <... getdents64 resumed>0x55557174e730 /* 2 entries */, 32768) = 48
[pid  5883] <... mmap resumed>)         = 0x7f7f07800000
[pid  5882] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7f07800000
[pid  5848] getdents64(4, 0x55557174e730 /* 0 entries */, 32768) = 0
[pid  5848] close(4)                    = 0
[pid  5848] rmdir("./4/file0")          = 0
[pid  5848] getdents64(3, 0x5555717466f0 /* 0 entries */, 32768) = 0
[pid  5848] close(3)                    = 0
[pid  5848] rmdir("./4")                = 0
[pid  5848] mkdir("./5", 0777)          = 0
[pid  5848] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3
[pid  5848] ioctl(3, LOOP_CLR_FD)       = 0
[pid  5848] close(3 <unfinished ...>
[pid  5882] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 <unfinished ...>
[pid  5853] <... close resumed>)        = 0
[pid  5853] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5884 attached
 <unfinished ...>
[pid  5848] <... close resumed>)        = 0
[pid  5853] <... clone resumed>, child_tidptr=0x555571745650) = 5884
[pid  5884] set_robust_list(0x555571745660, 24 <unfinished ...>
[pid  5848] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...>
[pid  5884] <... set_robust_list resumed>) = 0
./strace-static-x86_64: Process 5885 attached
[pid  5885] set_robust_list(0x555571745660, 24 <unfinished ...>
[pid  5884] chdir("./6" <unfinished ...>
[pid  5883] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 <unfinished ...>
[pid  5848] <... clone resumed>, child_tidptr=0x555571745650) = 5885
[pid  5885] <... set_robust_list resumed>) = 0
[pid  5884] <... chdir resumed>)        = 0
[pid  5884] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5884] setpgid(0, 0)               = 0
[pid  5885] chdir("./5" <unfinished ...>
[pid  5884] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC <unfinished ...>
[pid  5885] <... chdir resumed>)        = 0
[pid  5884] <... openat resumed>)       = 3
[pid  5885] prctl(PR_SET_PDEATHSIG, SIGKILL <unfinished ...>
[pid  5884] write(3, "1000", 4 <unfinished ...>
[pid  5885] <... prctl resumed>)        = 0
[pid  5884] <... write resumed>)        = 4
[pid  5885] setpgid(0, 0 <unfinished ...>
[pid  5884] close(3 <unfinished ...>
[pid  5885] <... setpgid resumed>)      = 0
[pid  5884] <... close resumed>)        = 0
[pid  5885] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC <unfinished ...>
[pid  5884] symlink("/dev/binderfs", "./binderfs" <unfinished ...>
[pid  5885] <... openat resumed>)       = 3
[pid  5884] <... symlink resumed>)      = 0
executing program
[pid  5885] write(3, "1000", 4 <unfinished ...>
[pid  5884] write(1, "executing program\n", 18 <unfinished ...>
[pid  5885] <... write resumed>)        = 4
[pid  5884] <... write resumed>)        = 18
[pid  5885] close(3)                    = 0
[pid  5885] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5884] memfd_create("syzkaller", 0executing program
 <unfinished ...>
[pid  5885] write(1, "executing program\n", 18 <unfinished ...>
[pid  5884] <... memfd_create resumed>) = 3
[pid  5885] <... write resumed>)        = 18
[pid  5884] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 <unfinished ...>
[pid  5885] memfd_create("syzkaller", 0 <unfinished ...>
[pid  5884] <... mmap resumed>)         = 0x7f7f07800000
[pid  5885] <... memfd_create resumed>) = 3
[pid  5885] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7f07800000
[pid  5882] <... write resumed>)        = 16777216
[pid  5882] munmap(0x7f7f07800000, 138412032 <unfinished ...>
[pid  5885] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 <unfinished ...>
[pid  5884] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 <unfinished ...>
[pid  5882] <... munmap resumed>)       = 0
[pid  5882] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4
[pid  5882] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5882] close(3)                    = 0
[pid  5882] close(4)                    = 0
[pid  5882] mkdir("./file0", 0777)      = 0
[  204.304862][ T5882] loop1: detected capacity change from 0 to 32768
[pid  5882] mount("/dev/loop1", "./file0", "jfs", MS_LAZYTIME, "") = 0
[pid  5882] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5882] chdir("./file0")            = 0
[pid  5882] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy)
[pid  5882] symlink("./file0/file0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" <unfinished ...>
[pid  5883] <... write resumed>)        = 16777216
[pid  5883] munmap(0x7f7f07800000, 138412032 <unfinished ...>
[pid  5882] <... symlink resumed>)      = 0
[pid  5883] <... munmap resumed>)       = 0
[pid  5882] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL <unfinished ...>
[pid  5883] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4
[pid  5883] ioctl(4, LOOP_SET_FD, 3 <unfinished ...>
[pid  5882] <... mount resumed>)        = 0
[pid  5883] <... ioctl resumed>)        = 0
[pid  5882] exit_group(0)               = ?
[pid  5883] close(3)                    = 0
[pid  5883] close(4)                    = 0
[pid  5883] mkdir("./file0", 0777)      = 0
[pid  5883] mount("/dev/loop3", "./file0", "jfs", MS_LAZYTIME, "" <unfinished ...>
[pid  5882] +++ exited with 0 +++
[pid  5849] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5882, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=27 /* 0.27 s */} ---
[pid  5849] umount2("./5", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5849] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
[pid  5849] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5849] getdents64(3, 0x5555717466f0 /* 4 entries */, 32768) = 112
[pid  5849] umount2("./5/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5849] newfstatat(AT_FDCWD, "./5/binderfs",  <unfinished ...>
[pid  5883] <... mount resumed>)        = 0
[pid  5883] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5883] chdir("./file0")            = 0
[  204.444249][  T114] blkno = 5002c, nblocks = 1
[  204.448912][  T114] ERROR: (device loop1): dbUpdatePMap: blocks are outside the map
[  204.448912][  T114] 
[  204.454145][ T5883] loop3: detected capacity change from 0 to 32768
[  204.466763][  T114] ERROR: (device loop1): remounting filesystem as read-only
[pid  5883] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy)
[pid  5849] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5883] symlink("./file0/file0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" <unfinished ...>
[pid  5849] unlink("./5/binderfs")      = 0
[pid  5849] umount2("./5/file0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5883] <... symlink resumed>)      = 0
[pid  5883] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL) = 0
[pid  5883] exit_group(0)               = ?
[pid  5883] +++ exited with 0 +++
[pid  5851] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5883, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=30 /* 0.30 s */} ---
[pid  5851] restart_syscall(<... resuming interrupted clone ...>) = 0
[pid  5851] umount2("./5", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5851] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
[pid  5851] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5851] getdents64(3, 0x5555717466f0 /* 4 entries */, 32768) = 112
[pid  5851] umount2("./5/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5851] newfstatat(AT_FDCWD, "./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5851] unlink("./5/binderfs")      = 0
[  204.522360][ T5849] JFS: metapage_get_blocks failed
[  204.534203][  T114] blkno = 5002c, nblocks = 1
[  204.538848][  T114] ERROR: (device loop3): dbUpdatePMap: blocks are outside the map
[  204.538848][  T114] 
[pid  5851] umount2("./5/file0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5884] <... write resumed>)        = 16777216
[pid  5884] munmap(0x7f7f07800000, 138412032) = 0
[pid  5885] <... write resumed>)        = 16777216
[pid  5885] munmap(0x7f7f07800000, 138412032 <unfinished ...>
[pid  5884] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4
[  204.583044][  T114] ERROR: (device loop3): remounting filesystem as read-only
[pid  5884] ioctl(4, LOOP_SET_FD, 3 <unfinished ...>
[pid  5885] <... munmap resumed>)       = 0
[pid  5885] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5884] <... ioctl resumed>)        = 0
[pid  5885] ioctl(4, LOOP_SET_FD, 3 <unfinished ...>
[pid  5884] close(3)                    = 0
[pid  5884] close(4 <unfinished ...>
[pid  5885] <... ioctl resumed>)        = 0
[pid  5885] close(3)                    = 0
[pid  5885] close(4)                    = 0
[pid  5885] mkdir("./file0", 0777)      = 0
[pid  5885] mount("/dev/loop0", "./file0", "jfs", MS_LAZYTIME, "" <unfinished ...>
[pid  5884] <... close resumed>)        = 0
[pid  5884] mkdir("./file0", 0777)      = 0
[  204.642283][ T5884] loop5: detected capacity change from 0 to 32768
[  204.665394][ T5885] loop0: detected capacity change from 0 to 32768
[pid  5884] mount("/dev/loop5", "./file0", "jfs", MS_LAZYTIME, "") = 0
[pid  5885] <... mount resumed>)        = 0
[pid  5884] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY <unfinished ...>
[pid  5885] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5884] <... openat resumed>)       = 3
[pid  5885] chdir("./file0")            = 0
[pid  5884] chdir("./file0")            = 0
[pid  5885] openat(AT_FDCWD, "/dev/loop0", O_RDWR <unfinished ...>
[pid  5884] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy)
[pid  5885] <... openat resumed>)       = -1 EBUSY (Device or resource busy)
[pid  5884] symlink("./file0/file0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" <unfinished ...>
[pid  5885] symlink("./file0/file0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" <unfinished ...>
[pid  5884] <... symlink resumed>)      = 0
[pid  5885] <... symlink resumed>)      = 0
[pid  5885] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL <unfinished ...>
[pid  5884] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL <unfinished ...>
[pid  5885] <... mount resumed>)        = 0
[pid  5884] <... mount resumed>)        = 0
[pid  5884] exit_group(0 <unfinished ...>
[pid  5885] exit_group(0 <unfinished ...>
[pid  5884] <... exit_group resumed>)   = ?
[pid  5885] <... exit_group resumed>)   = ?
[pid  5884] +++ exited with 0 +++
[pid  5853] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5884, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=31 /* 0.31 s */} ---
[pid  5853] restart_syscall(<... resuming interrupted clone ...> <unfinished ...>
[pid  5885] +++ exited with 0 +++
[pid  5848] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5885, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=25 /* 0.25 s */} ---
[  204.748948][  T113] blkno = 5002c, nblocks = 1
[  204.748952][  T114] blkno = 5002c, nblocks = 1
[  204.748978][  T114] ERROR: (device loop0): dbUpdatePMap: blocks are outside the map
[  204.748978][  T114] 
[  204.753805][  T113] ERROR: (device loop5): dbUpdatePMap: blocks are outside the map
[  204.753805][  T113] 
[  204.754102][  T113] ERROR: (device loop5): remounting filesystem as read-only
[  204.761273][  T114] ERROR: (device loop0): remounting filesystem as read-only
[pid  5848] restart_syscall(<... resuming interrupted clone ...> <unfinished ...>
[pid  5853] <... restart_syscall resumed>) = 0
[pid  5848] <... restart_syscall resumed>) = 0
[pid  5853] umount2("./6", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5848] umount2("./5", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5853] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY <unfinished ...>
[pid  5848] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid  5848] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY <unfinished ...>
[pid  5853] <... openat resumed>)       = 3
[pid  5849] <... umount2 resumed>)      = 0
[pid  5848] <... openat resumed>)       = 3
[pid  5853] newfstatat(3, "",  <unfinished ...>
[pid  5849] umount2("./5/file0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5853] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5849] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid  5848] newfstatat(3, "",  <unfinished ...>
[pid  5853] getdents64(3,  <unfinished ...>
[pid  5849] newfstatat(AT_FDCWD, "./5/file0",  <unfinished ...>
[pid  5848] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5849] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5853] <... getdents64 resumed>0x5555717466f0 /* 4 entries */, 32768) = 112
[pid  5849] umount2("./5/file0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5848] getdents64(3,  <unfinished ...>
[pid  5853] umount2("./6/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5849] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid  5848] <... getdents64 resumed>0x5555717466f0 /* 4 entries */, 32768) = 112
[pid  5853] newfstatat(AT_FDCWD, "./6/binderfs",  <unfinished ...>
[pid  5849] openat(AT_FDCWD, "./5/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY <unfinished ...>
[pid  5848] umount2("./5/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5853] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5849] <... openat resumed>)       = 4
[pid  5848] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid  5849] newfstatat(4, "",  <unfinished ...>
[pid  5853] unlink("./6/binderfs" <unfinished ...>
[pid  5849] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5848] newfstatat(AT_FDCWD, "./5/binderfs",  <unfinished ...>
[pid  5853] <... unlink resumed>)       = 0
[pid  5848] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5853] umount2("./6/file0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5849] getdents64(4, 0x55557174e730 /* 2 entries */, 32768) = 48
[  204.803448][ T5851] JFS: metapage_get_blocks failed
[pid  5848] unlink("./5/binderfs" <unfinished ...>
[pid  5849] getdents64(4,  <unfinished ...>
[pid  5848] <... unlink resumed>)       = 0
[pid  5848] umount2("./5/file0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5849] <... getdents64 resumed>0x55557174e730 /* 0 entries */, 32768) = 0
[pid  5849] close(4)                    = 0
[pid  5849] rmdir("./5/file0")          = 0
[pid  5849] getdents64(3, 0x5555717466f0 /* 0 entries */, 32768) = 0
[pid  5849] close(3)                    = 0
[pid  5849] rmdir("./5")                = 0
[pid  5849] mkdir("./6", 0777)          = 0
[pid  5849] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3
[  204.845319][ T5853] JFS: metapage_get_blocks failed
[  204.851148][ T5848] JFS: metapage_get_blocks failed
[pid  5849] ioctl(3, LOOP_CLR_FD)       = 0
[pid  5849] close(3)                    = 0
[pid  5849] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5886 attached
, child_tidptr=0x555571745650) = 5886
[pid  5886] set_robust_list(0x555571745660, 24) = 0
[pid  5886] chdir("./6")                = 0
[pid  5886] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5886] setpgid(0, 0)               = 0
[pid  5886] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5886] write(3, "1000", 4)         = 4
[pid  5886] close(3)                    = 0
[pid  5886] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5886] write(1, "executing program\n", 18 <unfinished ...>
[pid  5851] <... umount2 resumed>)      = 0
executing program
[pid  5886] <... write resumed>)        = 18
[pid  5886] memfd_create("syzkaller", 0) = 3
[pid  5851] umount2("./5/file0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5886] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7f07800000
[pid  5851] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid  5851] newfstatat(AT_FDCWD, "./5/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5851] umount2("./5/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5851] openat(AT_FDCWD, "./5/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
[pid  5851] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5851] getdents64(4, 0x55557174e730 /* 2 entries */, 32768) = 48
[pid  5851] getdents64(4, 0x55557174e730 /* 0 entries */, 32768) = 0
[pid  5851] close(4)                    = 0
[pid  5851] rmdir("./5/file0")          = 0
[pid  5851] getdents64(3, 0x5555717466f0 /* 0 entries */, 32768) = 0
[pid  5851] close(3)                    = 0
[pid  5851] rmdir("./5")                = 0
[pid  5853] <... umount2 resumed>)      = 0
[pid  5848] <... umount2 resumed>)      = 0
[pid  5851] mkdir("./6", 0777)          = 0
[pid  5853] umount2("./6/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5853] newfstatat(AT_FDCWD, "./6/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5848] umount2("./5/file0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5851] openat(AT_FDCWD, "/dev/loop3", O_RDWR <unfinished ...>
[pid  5848] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid  5853] umount2("./6/file0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5851] <... openat resumed>)       = 3
[pid  5848] newfstatat(AT_FDCWD, "./5/file0",  <unfinished ...>
[pid  5853] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid  5853] openat(AT_FDCWD, "./6/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY <unfinished ...>
[pid  5851] ioctl(3, LOOP_CLR_FD <unfinished ...>
[pid  5848] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5853] <... openat resumed>)       = 4
[pid  5851] <... ioctl resumed>)        = 0
[pid  5848] umount2("./5/file0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5853] newfstatat(4, "",  <unfinished ...>
[pid  5851] close(3 <unfinished ...>
[pid  5848] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid  5853] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5853] getdents64(4,  <unfinished ...>
[pid  5848] openat(AT_FDCWD, "./5/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
[pid  5848] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5848] getdents64(4, 0x55557174e730 /* 2 entries */, 32768) = 48
[pid  5848] getdents64(4, 0x55557174e730 /* 0 entries */, 32768) = 0
[pid  5848] close(4)                    = 0
[pid  5853] <... getdents64 resumed>0x55557174e730 /* 2 entries */, 32768) = 48
[pid  5853] getdents64(4,  <unfinished ...>
[pid  5848] rmdir("./5/file0" <unfinished ...>
[pid  5853] <... getdents64 resumed>0x55557174e730 /* 0 entries */, 32768) = 0
[pid  5848] <... rmdir resumed>)        = 0
[pid  5853] close(4)                    = 0
[pid  5853] rmdir("./6/file0")          = 0
[pid  5848] getdents64(3, 0x5555717466f0 /* 0 entries */, 32768) = 0
[pid  5848] close(3)                    = 0
[pid  5853] getdents64(3,  <unfinished ...>
[pid  5848] rmdir("./5" <unfinished ...>
[pid  5886] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 <unfinished ...>
[pid  5853] <... getdents64 resumed>0x5555717466f0 /* 0 entries */, 32768) = 0
[pid  5848] <... rmdir resumed>)        = 0
[pid  5853] close(3 <unfinished ...>
[pid  5848] mkdir("./6", 0777 <unfinished ...>
[pid  5853] <... close resumed>)        = 0
[pid  5848] <... mkdir resumed>)        = 0
[pid  5853] rmdir("./6" <unfinished ...>
[pid  5848] openat(AT_FDCWD, "/dev/loop0", O_RDWR <unfinished ...>
[pid  5853] <... rmdir resumed>)        = 0
[pid  5848] <... openat resumed>)       = 3
[pid  5848] ioctl(3, LOOP_CLR_FD)       = 0
[pid  5848] close(3 <unfinished ...>
[pid  5853] mkdir("./7", 0777)          = 0
[pid  5853] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3
[pid  5853] ioctl(3, LOOP_CLR_FD)       = 0
[pid  5853] close(3 <unfinished ...>
[pid  5851] <... close resumed>)        = 0
[pid  5851] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5887 attached
, child_tidptr=0x555571745650) = 5887
[pid  5887] set_robust_list(0x555571745660, 24) = 0
[pid  5887] chdir("./6")                = 0
[pid  5887] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5887] setpgid(0, 0)               = 0
[pid  5887] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
executing program
[pid  5887] write(3, "1000", 4)         = 4
[pid  5887] close(3)                    = 0
[pid  5887] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5853] <... close resumed>)        = 0
[pid  5887] write(1, "executing program\n", 18) = 18
[pid  5853] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...>
[pid  5887] memfd_create("syzkaller", 0) = 3
[pid  5853] <... clone resumed>, child_tidptr=0x555571745650) = 5888
[pid  5887] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7f07800000
./strace-static-x86_64: Process 5888 attached
[pid  5848] <... close resumed>)        = 0
[pid  5888] set_robust_list(0x555571745660, 24) = 0
[pid  5888] chdir("./7" <unfinished ...>
[pid  5848] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5889 attached
 <unfinished ...>
[pid  5888] <... chdir resumed>)        = 0
[pid  5889] set_robust_list(0x555571745660, 24) = 0
[pid  5888] prctl(PR_SET_PDEATHSIG, SIGKILL <unfinished ...>
[pid  5889] chdir("./6" <unfinished ...>
[pid  5888] <... prctl resumed>)        = 0
[pid  5848] <... clone resumed>, child_tidptr=0x555571745650) = 5889
[pid  5889] <... chdir resumed>)        = 0
[pid  5888] setpgid(0, 0)               = 0
[pid  5888] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5888] write(3, "1000", 4)         = 4
[pid  5888] close(3 <unfinished ...>
[pid  5889] prctl(PR_SET_PDEATHSIG, SIGKILL <unfinished ...>
[pid  5888] <... close resumed>)        = 0
[pid  5889] <... prctl resumed>)        = 0
[pid  5888] symlink("/dev/binderfs", "./binderfs" <unfinished ...>
[pid  5889] setpgid(0, 0)               = 0
executing program
[pid  5888] <... symlink resumed>)      = 0
[pid  5888] write(1, "executing program\n", 18) = 18
[pid  5889] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC <unfinished ...>
[pid  5888] memfd_create("syzkaller", 0 <unfinished ...>
[pid  5889] <... openat resumed>)       = 3
[pid  5888] <... memfd_create resumed>) = 3
[pid  5889] write(3, "1000", 4 <unfinished ...>
[pid  5888] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 <unfinished ...>
[pid  5889] <... write resumed>)        = 4
[pid  5888] <... mmap resumed>)         = 0x7f7f07800000
[pid  5889] close(3)                    = 0
[pid  5889] symlink("/dev/binderfs", "./binderfs"executing program
) = 0
[pid  5889] write(1, "executing program\n", 18) = 18
[pid  5889] memfd_create("syzkaller", 0) = 3
[pid  5889] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7f07800000
[pid  5887] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 <unfinished ...>
[pid  5886] <... write resumed>)        = 16777216
[pid  5886] munmap(0x7f7f07800000, 138412032) = 0
[pid  5886] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4
[pid  5886] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5888] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 <unfinished ...>
[pid  5886] close(3)                    = 0
[pid  5886] close(4)                    = 0
[pid  5886] mkdir("./file0", 0777)      = 0
[pid  5886] mount("/dev/loop1", "./file0", "jfs", MS_LAZYTIME, "") = 0
[pid  5886] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[  205.665783][ T5886] loop1: detected capacity change from 0 to 32768
[pid  5886] chdir("./file0")            = 0
[pid  5886] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy)
[pid  5886] symlink("./file0/file0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0
[pid  5886] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL <unfinished ...>
[pid  5889] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 <unfinished ...>
[pid  5886] <... mount resumed>)        = 0
[pid  5886] exit_group(0)               = ?
[pid  5886] +++ exited with 0 +++
[pid  5849] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5886, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=28 /* 0.28 s */} ---
[  205.740804][  T113] blkno = 5002c, nblocks = 1
[  205.756558][  T113] ERROR: (device loop1): dbUpdatePMap: blocks are outside the map
[  205.756558][  T113] 
[pid  5849] umount2("./6", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5849] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
[pid  5849] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5849] getdents64(3, 0x5555717466f0 /* 4 entries */, 32768) = 112
[pid  5849] umount2("./6/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5849] newfstatat(AT_FDCWD, "./6/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5849] unlink("./6/binderfs")      = 0
[  205.791918][  T113] ERROR: (device loop1): remounting filesystem as read-only
[  205.818095][ T5849] JFS: metapage_get_blocks failed
[pid  5849] umount2("./6/file0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5887] <... write resumed>)        = 16777216
[pid  5888] <... write resumed>)        = 16777216
[pid  5888] munmap(0x7f7f07800000, 138412032 <unfinished ...>
[pid  5887] munmap(0x7f7f07800000, 138412032 <unfinished ...>
[pid  5888] <... munmap resumed>)       = 0
[pid  5887] <... munmap resumed>)       = 0
[pid  5888] openat(AT_FDCWD, "/dev/loop5", O_RDWR <unfinished ...>
[pid  5887] openat(AT_FDCWD, "/dev/loop3", O_RDWR <unfinished ...>
[pid  5888] <... openat resumed>)       = 4
[pid  5887] <... openat resumed>)       = 4
[pid  5888] ioctl(4, LOOP_SET_FD, 3 <unfinished ...>
[pid  5887] ioctl(4, LOOP_SET_FD, 3 <unfinished ...>
[pid  5888] <... ioctl resumed>)        = 0
[pid  5887] <... ioctl resumed>)        = 0
[pid  5888] close(3 <unfinished ...>
[pid  5887] close(3 <unfinished ...>
[pid  5888] <... close resumed>)        = 0
[pid  5887] <... close resumed>)        = 0
[pid  5888] close(4)                    = 0
[pid  5887] close(4)                    = 0
[pid  5888] mkdir("./file0", 0777 <unfinished ...>
[pid  5887] mkdir("./file0", 0777 <unfinished ...>
[pid  5888] <... mkdir resumed>)        = 0
[pid  5887] <... mkdir resumed>)        = 0
[pid  5888] mount("/dev/loop5", "./file0", "jfs", MS_LAZYTIME, "" <unfinished ...>
[pid  5889] <... write resumed>)        = 16777216
[pid  5887] mount("/dev/loop3", "./file0", "jfs", MS_LAZYTIME, "" <unfinished ...>
[  205.999395][ T5887] loop3: detected capacity change from 0 to 32768
[  206.007325][ T5888] loop5: detected capacity change from 0 to 32768
[pid  5889] munmap(0x7f7f07800000, 138412032 <unfinished ...>
[pid  5887] <... mount resumed>)        = 0
[pid  5887] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5887] chdir("./file0")            = 0
[pid  5887] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy)
[pid  5887] symlink("./file0/file0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" <unfinished ...>
[pid  5888] <... mount resumed>)        = 0
[pid  5888] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5888] chdir("./file0")            = 0
[pid  5887] <... symlink resumed>)      = 0
[pid  5888] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy)
[pid  5888] symlink("./file0/file0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0
[pid  5888] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL) = 0
[pid  5887] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL <unfinished ...>
[pid  5888] exit_group(0)               = ?
[pid  5888] +++ exited with 0 +++
[pid  5853] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5888, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=31 /* 0.31 s */} ---
[pid  5853] restart_syscall(<... resuming interrupted clone ...> <unfinished ...>
[pid  5849] <... umount2 resumed>)      = 0
[pid  5849] umount2("./6/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5849] newfstatat(AT_FDCWD, "./6/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5887] <... mount resumed>)        = 0
[pid  5853] <... restart_syscall resumed>) = 0
[pid  5887] exit_group(0)               = ?
[pid  5853] umount2("./7", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5849] umount2("./6/file0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5853] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY <unfinished ...>
[pid  5849] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid  5889] <... munmap resumed>)       = 0
[pid  5853] <... openat resumed>)       = 3
[pid  5849] openat(AT_FDCWD, "./6/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY <unfinished ...>
[pid  5853] newfstatat(3, "",  <unfinished ...>
[pid  5849] <... openat resumed>)       = 4
[pid  5887] +++ exited with 0 +++
[pid  5853] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5849] newfstatat(4, "",  <unfinished ...>
[pid  5851] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5887, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=29 /* 0.29 s */} ---
[pid  5851] umount2("./6", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5889] openat(AT_FDCWD, "/dev/loop0", O_RDWR <unfinished ...>
[pid  5851] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid  5849] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5851] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY <unfinished ...>
[pid  5889] <... openat resumed>)       = 4
[pid  5853] getdents64(3,  <unfinished ...>
[pid  5851] <... openat resumed>)       = 3
[pid  5849] getdents64(4,  <unfinished ...>
[  206.080236][  T114] blkno = 5002c, nblocks = 1
[  206.093962][  T113] blkno = 5002c, nblocks = 1
[  206.104132][  T114] ERROR: (device loop5): dbUpdatePMap: blocks are outside the map
[  206.104132][  T114] 
[  206.118564][  T113] ERROR: (device loop3): dbUpdatePMap: blocks are outside the map
[  206.118564][  T113] 
[pid  5851] newfstatat(3, "",  <unfinished ...>
[pid  5889] ioctl(4, LOOP_SET_FD, 3 <unfinished ...>
[pid  5853] <... getdents64 resumed>0x5555717466f0 /* 4 entries */, 32768) = 112
[pid  5851] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5853] umount2("./7/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5851] getdents64(3,  <unfinished ...>
[pid  5889] <... ioctl resumed>)        = 0
[pid  5853] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid  5851] <... getdents64 resumed>0x5555717466f0 /* 4 entries */, 32768) = 112
[pid  5849] <... getdents64 resumed>0x55557174e730 /* 2 entries */, 32768) = 48
[pid  5853] newfstatat(AT_FDCWD, "./7/binderfs",  <unfinished ...>
[pid  5851] umount2("./6/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5889] close(3 <unfinished ...>
[pid  5853] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5889] <... close resumed>)        = 0
[pid  5851] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid  5849] getdents64(4,  <unfinished ...>
[pid  5853] unlink("./7/binderfs" <unfinished ...>
[pid  5889] close(4 <unfinished ...>
[pid  5851] newfstatat(AT_FDCWD, "./6/binderfs",  <unfinished ...>
[pid  5849] <... getdents64 resumed>0x55557174e730 /* 0 entries */, 32768) = 0
[pid  5889] <... close resumed>)        = 0
[pid  5853] <... unlink resumed>)       = 0
[pid  5851] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5849] close(4 <unfinished ...>
[pid  5889] mkdir("./file0", 0777 <unfinished ...>
[pid  5853] umount2("./7/file0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5889] <... mkdir resumed>)        = 0
[pid  5851] unlink("./6/binderfs" <unfinished ...>
[pid  5849] <... close resumed>)        = 0
[pid  5889] mount("/dev/loop0", "./file0", "jfs", MS_LAZYTIME, "" <unfinished ...>
[pid  5849] rmdir("./6/file0" <unfinished ...>
[pid  5851] <... unlink resumed>)       = 0
[pid  5851] umount2("./6/file0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5849] <... rmdir resumed>)        = 0
[pid  5849] getdents64(3, 0x5555717466f0 /* 0 entries */, 32768) = 0
[pid  5849] close(3)                    = 0
[pid  5849] rmdir("./6")                = 0
[pid  5849] mkdir("./7", 0777 <unfinished ...>
[pid  5889] <... mount resumed>)        = 0
[pid  5849] <... mkdir resumed>)        = 0
[pid  5889] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5849] openat(AT_FDCWD, "/dev/loop1", O_RDWR <unfinished ...>
[pid  5889] chdir("./file0" <unfinished ...>
[pid  5849] <... openat resumed>)       = 3
[pid  5889] <... chdir resumed>)        = 0
[pid  5889] openat(AT_FDCWD, "/dev/loop0", O_RDWR <unfinished ...>
[pid  5849] ioctl(3, LOOP_CLR_FD <unfinished ...>
[pid  5889] <... openat resumed>)       = -1 EBUSY (Device or resource busy)
[pid  5849] <... ioctl resumed>)        = 0
[pid  5889] symlink("./file0/file0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" <unfinished ...>
[pid  5849] close(3 <unfinished ...>
[pid  5889] <... symlink resumed>)      = 0
[pid  5889] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL) = 0
[  206.120432][ T5889] loop0: detected capacity change from 0 to 32768
[  206.130144][  T114] ERROR: (device loop5): remounting filesystem as read-only
[  206.138715][  T113] ERROR: (device loop3): remounting filesystem as read-only
[  206.157375][ T5853] JFS: metapage_get_blocks failed
[  206.166226][ T5851] JFS: metapage_get_blocks failed
[pid  5889] exit_group(0)               = ?
[pid  5889] +++ exited with 0 +++
[pid  5848] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5889, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=31 /* 0.31 s */} ---
[pid  5848] restart_syscall(<... resuming interrupted clone ...>) = 0
[pid  5848] umount2("./6", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5848] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
[pid  5848] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5848] getdents64(3, 0x5555717466f0 /* 4 entries */, 32768) = 112
[pid  5848] umount2("./6/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5848] newfstatat(AT_FDCWD, "./6/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5848] unlink("./6/binderfs")      = 0
[  206.205011][  T113] blkno = 5002c, nblocks = 1
[  206.209920][  T113] ERROR: (device loop0): dbUpdatePMap: blocks are outside the map
[  206.209920][  T113] 
[pid  5848] umount2("./6/file0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5849] <... close resumed>)        = 0
[pid  5849] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555571745650) = 5890
./strace-static-x86_64: Process 5890 attached
[pid  5890] set_robust_list(0x555571745660, 24) = 0
[  206.253504][  T113] ERROR: (device loop0): remounting filesystem as read-only
[pid  5890] chdir("./7")                = 0
[pid  5890] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5890] setpgid(0, 0)               = 0
[pid  5890] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5890] write(3, "1000", 4)         = 4
[pid  5890] close(3)                    = 0
[pid  5890] symlink("/dev/binderfs", "./binderfs") = 0
executing program
[pid  5890] write(1, "executing program\n", 18) = 18
[pid  5890] memfd_create("syzkaller", 0) = 3
[pid  5890] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7f07800000
[pid  5853] <... umount2 resumed>)      = 0
[pid  5853] umount2("./7/file0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5851] <... umount2 resumed>)      = 0
[pid  5853] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid  5851] umount2("./6/file0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5853] newfstatat(AT_FDCWD, "./7/file0",  <unfinished ...>
[pid  5851] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid  5853] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5853] umount2("./7/file0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5851] newfstatat(AT_FDCWD, "./6/file0",  <unfinished ...>
[pid  5853] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid  5851] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5853] openat(AT_FDCWD, "./7/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
[pid  5853] newfstatat(4, "",  <unfinished ...>
[pid  5851] umount2("./6/file0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5853] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5851] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid  5851] openat(AT_FDCWD, "./6/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY <unfinished ...>
[pid  5853] getdents64(4,  <unfinished ...>
[pid  5851] <... openat resumed>)       = 4
[pid  5853] <... getdents64 resumed>0x55557174e730 /* 2 entries */, 32768) = 48
[pid  5853] getdents64(4,  <unfinished ...>
[pid  5851] newfstatat(4, "",  <unfinished ...>
[pid  5853] <... getdents64 resumed>0x55557174e730 /* 0 entries */, 32768) = 0
[pid  5851] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5853] close(4)                    = 0
[pid  5851] getdents64(4,  <unfinished ...>
[pid  5853] rmdir("./7/file0" <unfinished ...>
[pid  5851] <... getdents64 resumed>0x55557174e730 /* 2 entries */, 32768) = 48
[pid  5853] <... rmdir resumed>)        = 0
[pid  5851] getdents64(4, 0x55557174e730 /* 0 entries */, 32768) = 0
[pid  5853] getdents64(3,  <unfinished ...>
[pid  5851] close(4 <unfinished ...>
[pid  5853] <... getdents64 resumed>0x5555717466f0 /* 0 entries */, 32768) = 0
[pid  5853] close(3 <unfinished ...>
[pid  5851] <... close resumed>)        = 0
[pid  5853] <... close resumed>)        = 0
[pid  5851] rmdir("./6/file0")          = 0
[pid  5851] getdents64(3,  <unfinished ...>
[pid  5853] rmdir("./7" <unfinished ...>
[pid  5851] <... getdents64 resumed>0x5555717466f0 /* 0 entries */, 32768) = 0
[pid  5851] close(3)                    = 0
[pid  5853] <... rmdir resumed>)        = 0
[pid  5851] rmdir("./6" <unfinished ...>
[pid  5853] mkdir("./8", 0777 <unfinished ...>
[pid  5851] <... rmdir resumed>)        = 0
[pid  5853] <... mkdir resumed>)        = 0
[pid  5851] mkdir("./7", 0777 <unfinished ...>
[pid  5853] openat(AT_FDCWD, "/dev/loop5", O_RDWR <unfinished ...>
[pid  5851] <... mkdir resumed>)        = 0
[pid  5853] <... openat resumed>)       = 3
[pid  5853] ioctl(3, LOOP_CLR_FD)       = 0
[pid  5853] close(3 <unfinished ...>
[pid  5851] openat(AT_FDCWD, "/dev/loop3", O_RDWR <unfinished ...>
[pid  5890] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 <unfinished ...>
[pid  5851] <... openat resumed>)       = 3
[pid  5851] ioctl(3, LOOP_CLR_FD)       = 0
[  206.503494][ T5848] JFS: metapage_get_blocks failed
[pid  5851] close(3 <unfinished ...>
[pid  5853] <... close resumed>)        = 0
[pid  5853] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5891 attached
, child_tidptr=0x555571745650) = 5891
[pid  5891] set_robust_list(0x555571745660, 24) = 0
[pid  5891] chdir("./8")                = 0
[pid  5891] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5891] setpgid(0, 0)               = 0
[pid  5891] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5891] write(3, "1000", 4)         = 4
[pid  5891] close(3)                    = 0
[pid  5891] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5891] write(1, "executing program\n", 18executing program
) = 18
[pid  5891] memfd_create("syzkaller", 0) = 3
[pid  5891] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7f07800000
[pid  5851] <... close resumed>)        = 0
[pid  5851] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555571745650) = 5892
./strace-static-x86_64: Process 5892 attached
[pid  5892] set_robust_list(0x555571745660, 24) = 0
[pid  5892] chdir("./7")                = 0
[pid  5892] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5892] setpgid(0, 0)               = 0
[pid  5892] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5892] write(3, "1000", 4)         = 4
[pid  5892] close(3)                    = 0
[pid  5892] symlink("/dev/binderfs", "./binderfs") = 0
executing program
[pid  5892] write(1, "executing program\n", 18) = 18
[pid  5892] memfd_create("syzkaller", 0) = 3
[pid  5892] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7f07800000
[pid  5848] <... umount2 resumed>)      = 0
[pid  5848] umount2("./6/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5848] newfstatat(AT_FDCWD, "./6/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5848] umount2("./6/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5848] openat(AT_FDCWD, "./6/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
[pid  5848] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5848] getdents64(4, 0x55557174e730 /* 2 entries */, 32768) = 48
[pid  5848] getdents64(4, 0x55557174e730 /* 0 entries */, 32768) = 0
[pid  5848] close(4)                    = 0
[pid  5848] rmdir("./6/file0")          = 0
[pid  5848] getdents64(3, 0x5555717466f0 /* 0 entries */, 32768) = 0
[pid  5848] close(3)                    = 0
[pid  5848] rmdir("./6")                = 0
[pid  5848] mkdir("./7", 0777)          = 0
[pid  5848] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3
[pid  5848] ioctl(3, LOOP_CLR_FD)       = 0
[pid  5848] close(3 <unfinished ...>
[pid  5890] <... write resumed>)        = 16777216
[pid  5890] munmap(0x7f7f07800000, 138412032 <unfinished ...>
[pid  5891] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 <unfinished ...>
[pid  5890] <... munmap resumed>)       = 0
[pid  5890] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4
[pid  5890] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5890] close(3)                    = 0
[pid  5890] close(4)                    = 0
[pid  5890] mkdir("./file0", 0777)      = 0
[  206.930496][ T5890] loop1: detected capacity change from 0 to 32768
[pid  5890] mount("/dev/loop1", "./file0", "jfs", MS_LAZYTIME, "" <unfinished ...>
[pid  5892] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 <unfinished ...>
[pid  5890] <... mount resumed>)        = 0
[pid  5890] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5890] chdir("./file0")            = 0
[pid  5890] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy)
[pid  5890] symlink("./file0/file0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0
[pid  5890] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL) = 0
[pid  5890] exit_group(0)               = ?
[pid  5890] +++ exited with 0 +++
[pid  5849] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5890, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=27 /* 0.27 s */} ---
[pid  5849] umount2("./7", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5849] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
[pid  5849] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5849] getdents64(3, 0x5555717466f0 /* 4 entries */, 32768) = 112
[pid  5849] umount2("./7/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5849] newfstatat(AT_FDCWD, "./7/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5849] unlink("./7/binderfs")      = 0
[  207.007542][  T114] blkno = 5002c, nblocks = 1
[  207.012685][  T114] ERROR: (device loop1): dbUpdatePMap: blocks are outside the map
[  207.012685][  T114] 
[  207.043881][  T114] ERROR: (device loop1): remounting filesystem as read-only
[pid  5849] umount2("./7/file0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5848] <... close resumed>)        = 0
[pid  5848] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555571745650) = 5893
./strace-static-x86_64: Process 5893 attached
[pid  5893] set_robust_list(0x555571745660, 24) = 0
[pid  5893] chdir("./7")                = 0
[pid  5893] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5893] setpgid(0, 0)               = 0
[pid  5893] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5893] write(3, "1000", 4)         = 4
[pid  5893] close(3)                    = 0
[pid  5893] symlink("/dev/binderfs", "./binderfs") = 0
executing program
[pid  5893] write(1, "executing program\n", 18) = 18
[pid  5893] memfd_create("syzkaller", 0) = 3
[pid  5893] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7f07800000
[  207.064452][ T5849] JFS: metapage_get_blocks failed
[pid  5892] <... write resumed>)        = 16777216
[pid  5892] munmap(0x7f7f07800000, 138412032) = 0
[pid  5893] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 <unfinished ...>
[pid  5892] openat(AT_FDCWD, "/dev/loop3", O_RDWR <unfinished ...>
[pid  5891] <... write resumed>)        = 16777216
[pid  5892] <... openat resumed>)       = 4
[pid  5891] munmap(0x7f7f07800000, 138412032 <unfinished ...>
[pid  5892] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5892] close(3)                    = 0
[pid  5892] close(4)                    = 0
[pid  5892] mkdir("./file0", 0777 <unfinished ...>
[pid  5891] <... munmap resumed>)       = 0
[pid  5892] <... mkdir resumed>)        = 0
[pid  5892] mount("/dev/loop3", "./file0", "jfs", MS_LAZYTIME, "" <unfinished ...>
[pid  5891] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4
[pid  5891] ioctl(4, LOOP_SET_FD, 3 <unfinished ...>
[pid  5892] <... mount resumed>)        = 0
[pid  5891] <... ioctl resumed>)        = 0
[pid  5892] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY <unfinished ...>
[pid  5849] <... umount2 resumed>)      = 0
[pid  5892] <... openat resumed>)       = 3
[pid  5891] close(3 <unfinished ...>
[pid  5849] umount2("./7/file0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5892] chdir("./file0" <unfinished ...>
[pid  5849] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid  5892] <... chdir resumed>)        = 0
[pid  5891] <... close resumed>)        = 0
[pid  5849] newfstatat(AT_FDCWD, "./7/file0",  <unfinished ...>
[pid  5892] openat(AT_FDCWD, "/dev/loop3", O_RDWR <unfinished ...>
[pid  5891] close(4 <unfinished ...>
[pid  5849] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5892] <... openat resumed>)       = -1 EBUSY (Device or resource busy)
[pid  5891] <... close resumed>)        = 0
[pid  5849] umount2("./7/file0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5891] mkdir("./file0", 0777 <unfinished ...>
[pid  5892] symlink("./file0/file0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" <unfinished ...>
[pid  5849] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid  5849] openat(AT_FDCWD, "./7/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
[pid  5849] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5849] getdents64(4, 0x55557174e730 /* 2 entries */, 32768) = 48
[pid  5849] getdents64(4, 0x55557174e730 /* 0 entries */, 32768) = 0
[pid  5849] close(4)                    = 0
[pid  5849] rmdir("./7/file0")          = 0
[pid  5892] <... symlink resumed>)      = 0
[pid  5891] <... mkdir resumed>)        = 0
[pid  5849] getdents64(3,  <unfinished ...>
[pid  5892] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL <unfinished ...>
[  207.295853][ T5892] loop3: detected capacity change from 0 to 32768
[  207.322109][ T5891] loop5: detected capacity change from 0 to 32768
[pid  5891] mount("/dev/loop5", "./file0", "jfs", MS_LAZYTIME, "" <unfinished ...>
[pid  5849] <... getdents64 resumed>0x5555717466f0 /* 0 entries */, 32768) = 0
[pid  5849] close(3)                    = 0
[pid  5892] <... mount resumed>)        = 0
[pid  5892] exit_group(0)               = ?
[pid  5849] rmdir("./7")                = 0
[pid  5892] +++ exited with 0 +++
[pid  5891] <... mount resumed>)        = 0
[pid  5851] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5892, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=29 /* 0.29 s */} ---
[pid  5851] umount2("./7", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5849] mkdir("./8", 0777 <unfinished ...>
[pid  5891] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5851] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid  5849] <... mkdir resumed>)        = 0
[pid  5891] chdir("./file0" <unfinished ...>
[pid  5851] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY <unfinished ...>
[pid  5891] <... chdir resumed>)        = 0
[pid  5891] openat(AT_FDCWD, "/dev/loop5", O_RDWR <unfinished ...>
[pid  5851] <... openat resumed>)       = 3
[pid  5849] openat(AT_FDCWD, "/dev/loop1", O_RDWR <unfinished ...>
[pid  5891] <... openat resumed>)       = -1 EBUSY (Device or resource busy)
[pid  5851] newfstatat(3, "",  <unfinished ...>
[pid  5849] <... openat resumed>)       = 3
[pid  5891] symlink("./file0/file0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" <unfinished ...>
[pid  5851] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5849] ioctl(3, LOOP_CLR_FD <unfinished ...>
[pid  5851] getdents64(3,  <unfinished ...>
[pid  5849] <... ioctl resumed>)        = 0
[pid  5851] <... getdents64 resumed>0x5555717466f0 /* 4 entries */, 32768) = 112
[pid  5849] close(3 <unfinished ...>
[pid  5891] <... symlink resumed>)      = 0
[pid  5851] umount2("./7/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5891] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL <unfinished ...>
[pid  5851] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid  5851] newfstatat(AT_FDCWD, "./7/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5891] <... mount resumed>)        = 0
[pid  5851] unlink("./7/binderfs")      = 0
[  207.360001][  T114] blkno = 5002c, nblocks = 1
[  207.367934][  T114] ERROR: (device loop3): dbUpdatePMap: blocks are outside the map
[  207.367934][  T114] 
[pid  5851] umount2("./7/file0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5891] exit_group(0)               = ?
[pid  5891] +++ exited with 0 +++
[pid  5853] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5891, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=29 /* 0.29 s */} ---
[pid  5853] restart_syscall(<... resuming interrupted clone ...>) = 0
[pid  5853] umount2("./8", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5853] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
[pid  5853] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5853] getdents64(3, 0x5555717466f0 /* 4 entries */, 32768) = 112
[pid  5853] umount2("./8/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5853] newfstatat(AT_FDCWD, "./8/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5853] unlink("./8/binderfs")      = 0
[  207.407816][  T113] blkno = 5002c, nblocks = 1
[  207.423389][  T113] ERROR: (device loop5): dbUpdatePMap: blocks are outside the map
[  207.423389][  T113] 
[  207.439643][  T114] ERROR: (device loop3): remounting filesystem as read-only
[  207.474398][  T113] ERROR: (device loop5): remounting filesystem as read-only
[pid  5853] umount2("./8/file0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5849] <... close resumed>)        = 0
[pid  5893] <... write resumed>)        = 16777216
[pid  5849] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...>
[pid  5893] munmap(0x7f7f07800000, 138412032./strace-static-x86_64: Process 5894 attached
 <unfinished ...>
[pid  5849] <... clone resumed>, child_tidptr=0x555571745650) = 5894
[pid  5894] set_robust_list(0x555571745660, 24) = 0
[pid  5893] <... munmap resumed>)       = 0
[pid  5894] chdir("./8" <unfinished ...>
[pid  5893] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5894] <... chdir resumed>)        = 0
[pid  5893] ioctl(4, LOOP_SET_FD, 3 <unfinished ...>
[pid  5894] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5894] setpgid(0, 0)               = 0
[pid  5894] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC <unfinished ...>
[pid  5893] <... ioctl resumed>)        = 0
[pid  5893] close(3 <unfinished ...>
[pid  5894] <... openat resumed>)       = 3
[pid  5893] <... close resumed>)        = 0
[pid  5893] close(4 <unfinished ...>
[pid  5894] write(3, "1000", 4 <unfinished ...>
[pid  5893] <... close resumed>)        = 0
[pid  5893] mkdir("./file0", 0777)      = 0
[pid  5893] mount("/dev/loop0", "./file0", "jfs", MS_LAZYTIME, "" <unfinished ...>
[pid  5894] <... write resumed>)        = 4
[pid  5894] close(3)                    = 0
[pid  5894] symlink("/dev/binderfs", "./binderfs") = 0
executing program
[pid  5894] write(1, "executing program\n", 18) = 18
[pid  5894] memfd_create("syzkaller", 0) = 3
[pid  5894] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7f07800000
[pid  5893] <... mount resumed>)        = 0
[pid  5893] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5893] chdir("./file0")            = 0
[pid  5893] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy)
[  207.615441][ T5893] loop0: detected capacity change from 0 to 32768
[pid  5893] symlink("./file0/file0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0
[pid  5893] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL) = 0
[pid  5893] exit_group(0)               = ?
[pid  5893] +++ exited with 0 +++
[pid  5848] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5893, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=27 /* 0.27 s */} ---
[pid  5848] restart_syscall(<... resuming interrupted clone ...>) = 0
[pid  5848] umount2("./7", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5848] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
[pid  5848] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5848] getdents64(3, 0x5555717466f0 /* 4 entries */, 32768) = 112
[pid  5848] umount2("./7/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5848] newfstatat(AT_FDCWD, "./7/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5848] unlink("./7/binderfs")      = 0
[  207.673652][ T5851] JFS: metapage_get_blocks failed
[  207.682379][  T114] blkno = 5002c, nblocks = 1
[  207.687801][  T114] ERROR: (device loop0): dbUpdatePMap: blocks are outside the map
[  207.687801][  T114] 
[  207.704303][  T114] ERROR: (device loop0): remounting filesystem as read-only
[pid  5848] umount2("./7/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0
[pid  5848] umount2("./7/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5848] newfstatat(AT_FDCWD, "./7/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5848] umount2("./7/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5848] openat(AT_FDCWD, "./7/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY <unfinished ...>
[pid  5894] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 <unfinished ...>
[pid  5848] <... openat resumed>)       = 4
[pid  5848] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5848] getdents64(4, 0x55557174e730 /* 2 entries */, 32768) = 48
[pid  5848] getdents64(4, 0x55557174e730 /* 0 entries */, 32768) = 0
[pid  5848] close(4)                    = 0
[pid  5848] rmdir("./7/file0")          = 0
[  207.721058][ T5848] JFS: metapage_get_blocks failed
[  207.733519][ T5853] JFS: metapage_get_blocks failed
[pid  5848] getdents64(3, 0x5555717466f0 /* 0 entries */, 32768) = 0
[pid  5848] close(3)                    = 0
[pid  5848] rmdir("./7")                = 0
[pid  5848] mkdir("./8", 0777)          = 0
[pid  5848] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3
[pid  5848] ioctl(3, LOOP_CLR_FD)       = 0
[pid  5848] close(3 <unfinished ...>
[pid  5851] <... umount2 resumed>)      = 0
[pid  5851] umount2("./7/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5851] newfstatat(AT_FDCWD, "./7/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5851] umount2("./7/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5851] openat(AT_FDCWD, "./7/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
[pid  5851] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5851] getdents64(4, 0x55557174e730 /* 2 entries */, 32768) = 48
[pid  5851] getdents64(4, 0x55557174e730 /* 0 entries */, 32768) = 0
[pid  5851] close(4)                    = 0
[pid  5851] rmdir("./7/file0")          = 0
[pid  5851] getdents64(3, 0x5555717466f0 /* 0 entries */, 32768) = 0
[pid  5851] close(3)                    = 0
[pid  5851] rmdir("./7")                = 0
[pid  5851] mkdir("./8", 0777)          = 0
[pid  5851] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3
[pid  5851] ioctl(3, LOOP_CLR_FD)       = 0
[pid  5894] <... write resumed>)        = 16777216
[pid  5851] close(3 <unfinished ...>
[pid  5894] munmap(0x7f7f07800000, 138412032) = 0
[pid  5853] <... umount2 resumed>)      = 0
[pid  5848] <... close resumed>)        = 0
[pid  5894] openat(AT_FDCWD, "/dev/loop1", O_RDWR <unfinished ...>
[pid  5848] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...>
[pid  5853] umount2("./8/file0", MNT_FORCE|UMOUNT_NOFOLLOW./strace-static-x86_64: Process 5895 attached
 <unfinished ...>
[pid  5894] <... openat resumed>)       = 4
[pid  5894] ioctl(4, LOOP_SET_FD, 3 <unfinished ...>
[pid  5848] <... clone resumed>, child_tidptr=0x555571745650) = 5895
[pid  5853] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid  5853] newfstatat(AT_FDCWD, "./8/file0",  <unfinished ...>
[pid  5895] set_robust_list(0x555571745660, 24 <unfinished ...>
[pid  5853] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5895] <... set_robust_list resumed>) = 0
[pid  5853] umount2("./8/file0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5895] chdir("./8" <unfinished ...>
[pid  5853] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid  5895] <... chdir resumed>)        = 0
[pid  5895] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5853] openat(AT_FDCWD, "./8/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY <unfinished ...>
[pid  5895] setpgid(0, 0 <unfinished ...>
[pid  5853] <... openat resumed>)       = 4
[pid  5895] <... setpgid resumed>)      = 0
[pid  5853] newfstatat(4, "",  <unfinished ...>
[pid  5895] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC <unfinished ...>
[pid  5853] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5853] getdents64(4,  <unfinished ...>
[pid  5894] <... ioctl resumed>)        = 0
[pid  5853] <... getdents64 resumed>0x55557174e730 /* 2 entries */, 32768) = 48
[pid  5894] close(3)                    = 0
[pid  5895] <... openat resumed>)       = 3
[pid  5853] getdents64(4, 0x55557174e730 /* 0 entries */, 32768) = 0
[pid  5853] close(4)                    = 0
[pid  5853] rmdir("./8/file0" <unfinished ...>
[pid  5895] write(3, "1000", 4 <unfinished ...>
[pid  5853] <... rmdir resumed>)        = 0
[pid  5895] <... write resumed>)        = 4
[pid  5895] close(3)                    = 0
[pid  5853] getdents64(3,  <unfinished ...>
[pid  5895] symlink("/dev/binderfs", "./binderfs" <unfinished ...>
[pid  5853] <... getdents64 resumed>0x5555717466f0 /* 0 entries */, 32768) = 0
[pid  5895] <... symlink resumed>)      = 0
[pid  5853] close(3)                    = 0
[pid  5853] rmdir("./8"executing program
 <unfinished ...>
[pid  5895] write(1, "executing program\n", 18 <unfinished ...>
[pid  5894] close(4 <unfinished ...>
[pid  5853] <... rmdir resumed>)        = 0
[pid  5894] <... close resumed>)        = 0
[pid  5894] mkdir("./file0", 0777)      = 0
[pid  5894] mount("/dev/loop1", "./file0", "jfs", MS_LAZYTIME, "" <unfinished ...>
[pid  5895] <... write resumed>)        = 18
[pid  5895] memfd_create("syzkaller", 0 <unfinished ...>
[pid  5853] mkdir("./9", 0777 <unfinished ...>
[pid  5895] <... memfd_create resumed>) = 3
[pid  5853] <... mkdir resumed>)        = 0
[pid  5895] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7f07800000
[pid  5894] <... mount resumed>)        = 0
[pid  5894] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5853] openat(AT_FDCWD, "/dev/loop5", O_RDWR <unfinished ...>
[pid  5894] chdir("./file0")            = 0
[pid  5853] <... openat resumed>)       = 3
[pid  5894] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy)
[pid  5853] ioctl(3, LOOP_CLR_FD <unfinished ...>
[pid  5894] symlink("./file0/file0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" <unfinished ...>
[pid  5853] <... ioctl resumed>)        = 0
[pid  5853] close(3 <unfinished ...>
[pid  5894] <... symlink resumed>)      = 0
[  208.043812][ T5894] loop1: detected capacity change from 0 to 32768
[pid  5894] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL) = 0
[pid  5894] exit_group(0)               = ?
[pid  5894] +++ exited with 0 +++
[pid  5849] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5894, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=27 /* 0.27 s */} ---
[pid  5849] restart_syscall(<... resuming interrupted clone ...>) = 0
[pid  5851] <... close resumed>)        = 0
[pid  5849] umount2("./8", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5851] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...>
[pid  5849] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid  5849] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY./strace-static-x86_64: Process 5896 attached
 <unfinished ...>
[pid  5896] set_robust_list(0x555571745660, 24) = 0
[pid  5851] <... clone resumed>, child_tidptr=0x555571745650) = 5896
[  208.104646][  T113] blkno = 5002c, nblocks = 1
[  208.109292][  T113] ERROR: (device loop1): dbUpdatePMap: blocks are outside the map
[  208.109292][  T113] 
[pid  5896] chdir("./8" <unfinished ...>
[pid  5849] <... openat resumed>)       = 3
[pid  5849] newfstatat(3, "",  <unfinished ...>
[pid  5896] <... chdir resumed>)        = 0
[pid  5896] prctl(PR_SET_PDEATHSIG, SIGKILL <unfinished ...>
[pid  5849] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5896] <... prctl resumed>)        = 0
[pid  5896] setpgid(0, 0 <unfinished ...>
[pid  5849] getdents64(3,  <unfinished ...>
[pid  5896] <... setpgid resumed>)      = 0
[pid  5849] <... getdents64 resumed>0x5555717466f0 /* 4 entries */, 32768) = 112
[pid  5896] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC <unfinished ...>
[pid  5849] umount2("./8/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5896] <... openat resumed>)       = 3
[pid  5849] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid  5896] write(3, "1000", 4 <unfinished ...>
[pid  5849] newfstatat(AT_FDCWD, "./8/binderfs",  <unfinished ...>
[pid  5896] <... write resumed>)        = 4
[pid  5896] close(3 <unfinished ...>
[pid  5849] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5896] <... close resumed>)        = 0
[pid  5896] symlink("/dev/binderfs", "./binderfs" <unfinished ...>
[pid  5849] unlink("./8/binderfs"executing program
 <unfinished ...>
[pid  5896] <... symlink resumed>)      = 0
[pid  5849] <... unlink resumed>)       = 0
[pid  5896] write(1, "executing program\n", 18 <unfinished ...>
[pid  5849] umount2("./8/file0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5896] <... write resumed>)        = 18
[pid  5896] memfd_create("syzkaller", 0) = 3
[  208.147691][  T113] ERROR: (device loop1): remounting filesystem as read-only
[pid  5896] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7f07800000
[  208.192754][ T5849] JFS: metapage_get_blocks failed
[pid  5895] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 <unfinished ...>
[pid  5853] <... close resumed>)        = 0
[pid  5853] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5897 attached
, child_tidptr=0x555571745650) = 5897
[pid  5897] set_robust_list(0x555571745660, 24) = 0
[pid  5897] chdir("./9")                = 0
[pid  5897] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5897] setpgid(0, 0)               = 0
[pid  5897] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5897] write(3, "1000", 4)         = 4
[pid  5897] close(3)                    = 0
[pid  5897] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5897] write(1, "executing program\n", 18executing program
) = 18
[pid  5897] memfd_create("syzkaller", 0) = 3
[pid  5897] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7f07800000
[pid  5896] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 <unfinished ...>
[pid  5895] <... write resumed>)        = 16777216
[pid  5895] munmap(0x7f7f07800000, 138412032 <unfinished ...>
[pid  5849] <... umount2 resumed>)      = 0
[pid  5849] umount2("./8/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5849] newfstatat(AT_FDCWD, "./8/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5849] umount2("./8/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5849] openat(AT_FDCWD, "./8/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
[pid  5849] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5849] getdents64(4, 0x55557174e730 /* 2 entries */, 32768) = 48
[pid  5849] getdents64(4, 0x55557174e730 /* 0 entries */, 32768) = 0
[pid  5849] close(4)                    = 0
[pid  5849] rmdir("./8/file0")          = 0
[pid  5849] getdents64(3, 0x5555717466f0 /* 0 entries */, 32768) = 0
[pid  5849] close(3)                    = 0
[pid  5849] rmdir("./8")                = 0
[pid  5849] mkdir("./9", 0777 <unfinished ...>
[pid  5895] <... munmap resumed>)       = 0
[pid  5849] <... mkdir resumed>)        = 0
[pid  5849] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3
[pid  5895] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5849] ioctl(3, LOOP_CLR_FD)       = 0
[pid  5849] close(3 <unfinished ...>
[pid  5895] ioctl(4, LOOP_SET_FD, 3 <unfinished ...>
[pid  5897] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 <unfinished ...>
[pid  5895] <... ioctl resumed>)        = 0
[pid  5895] close(3)                    = 0
[pid  5895] close(4)                    = 0
[  208.543809][ T5895] loop0: detected capacity change from 0 to 32768
[pid  5895] mkdir("./file0", 0777)      = 0
[pid  5895] mount("/dev/loop0", "./file0", "jfs", MS_LAZYTIME, "") = 0
[pid  5895] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5895] chdir("./file0")            = 0
[pid  5895] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy)
[pid  5895] symlink("./file0/file0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0
[pid  5895] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL) = 0
[pid  5895] exit_group(0)               = ?
[pid  5895] +++ exited with 0 +++
[pid  5848] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5895, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=24 /* 0.24 s */} ---
[pid  5848] restart_syscall(<... resuming interrupted clone ...>) = 0
[pid  5848] umount2("./8", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5848] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
[pid  5848] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5848] getdents64(3, 0x5555717466f0 /* 4 entries */, 32768) = 112
[pid  5848] umount2("./8/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5848] newfstatat(AT_FDCWD, "./8/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5848] unlink("./8/binderfs")      = 0
[  208.635913][  T114] blkno = 5002c, nblocks = 1
[  208.640575][  T114] ERROR: (device loop0): dbUpdatePMap: blocks are outside the map
[  208.640575][  T114] 
[  208.690979][  T114] ERROR: (device loop0): remounting filesystem as read-only
[pid  5848] umount2("./8/file0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5896] <... write resumed>)        = 16777216
[pid  5896] munmap(0x7f7f07800000, 138412032 <unfinished ...>
[pid  5849] <... close resumed>)        = 0
[pid  5849] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5898 attached
 <unfinished ...>
[pid  5897] <... write resumed>)        = 16777216
[pid  5896] <... munmap resumed>)       = 0
[pid  5849] <... clone resumed>, child_tidptr=0x555571745650) = 5898
[pid  5898] set_robust_list(0x555571745660, 24) = 0
[pid  5897] munmap(0x7f7f07800000, 138412032 <unfinished ...>
[pid  5896] openat(AT_FDCWD, "/dev/loop3", O_RDWR <unfinished ...>
[pid  5898] chdir("./9")                = 0
[pid  5896] <... openat resumed>)       = 4
[pid  5896] ioctl(4, LOOP_SET_FD, 3 <unfinished ...>
[pid  5898] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5898] setpgid(0, 0)               = 0
[pid  5898] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5897] <... munmap resumed>)       = 0
[pid  5896] <... ioctl resumed>)        = 0
[pid  5897] openat(AT_FDCWD, "/dev/loop5", O_RDWR <unfinished ...>
[pid  5896] close(3 <unfinished ...>
[pid  5898] write(3, "1000", 4 <unfinished ...>
[pid  5897] <... openat resumed>)       = 4
[pid  5896] <... close resumed>)        = 0
[pid  5898] <... write resumed>)        = 4
[pid  5898] close(3)                    = 0
[pid  5897] ioctl(4, LOOP_SET_FD, 3 <unfinished ...>
[pid  5896] close(4 <unfinished ...>
[pid  5898] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5898] write(1, "executing program\n", 18 <unfinished ...>
[pid  5897] <... ioctl resumed>)        = 0
[pid  5896] <... close resumed>)        = 0
[pid  5897] close(3)                    = 0
[pid  5897] close(4)                    = 0
[pid  5897] mkdir("./file0", 0777executing program
 <unfinished ...>
[pid  5898] <... write resumed>)        = 18
[pid  5897] <... mkdir resumed>)        = 0
[pid  5896] mkdir("./file0", 0777 <unfinished ...>
[pid  5897] mount("/dev/loop5", "./file0", "jfs", MS_LAZYTIME, "" <unfinished ...>
[pid  5896] <... mkdir resumed>)        = 0
[pid  5898] memfd_create("syzkaller", 0 <unfinished ...>
[pid  5896] mount("/dev/loop3", "./file0", "jfs", MS_LAZYTIME, "" <unfinished ...>
[pid  5898] <... memfd_create resumed>) = 3
[pid  5898] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7f07800000
[pid  5897] <... mount resumed>)        = 0
[pid  5897] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5897] chdir("./file0")            = 0
[  208.849783][ T5896] loop3: detected capacity change from 0 to 32768
[  208.867058][ T5897] loop5: detected capacity change from 0 to 32768
[pid  5897] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy)
[pid  5897] symlink("./file0/file0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" <unfinished ...>
[pid  5896] <... mount resumed>)        = 0
[pid  5897] <... symlink resumed>)      = 0
[pid  5896] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY <unfinished ...>
[pid  5897] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL <unfinished ...>
[pid  5896] <... openat resumed>)       = 3
[pid  5896] chdir("./file0")            = 0
[pid  5897] <... mount resumed>)        = 0
[pid  5896] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy)
[pid  5896] symlink("./file0/file0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" <unfinished ...>
[pid  5897] exit_group(0)               = ?
[pid  5897] +++ exited with 0 +++
[pid  5896] <... symlink resumed>)      = 0
[pid  5853] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5897, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=30 /* 0.30 s */} ---
[pid  5853] umount2("./9", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5896] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL) = 0
[pid  5896] exit_group(0)               = ?
[pid  5896] +++ exited with 0 +++
[pid  5851] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5896, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=24 /* 0.24 s */} ---
[pid  5851] restart_syscall(<... resuming interrupted clone ...>) = 0
[pid  5853] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid  5851] umount2("./8", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5851] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
[pid  5851] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5851] getdents64(3, 0x5555717466f0 /* 4 entries */, 32768) = 112
[pid  5851] umount2("./8/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5851] newfstatat(AT_FDCWD, "./8/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5851] unlink("./8/binderfs" <unfinished ...>
[pid  5853] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY <unfinished ...>
[pid  5851] <... unlink resumed>)       = 0
[  208.926017][  T113] blkno = 5002c, nblocks = 1
[  208.930672][  T113] ERROR: (device loop5): dbUpdatePMap: blocks are outside the map
[  208.930672][  T113] 
[  208.933500][ T5848] JFS: metapage_get_blocks failed
[  208.964118][  T114] blkno = 5002c, nblocks = 1
[pid  5853] <... openat resumed>)       = 3
[pid  5851] umount2("./8/file0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5853] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5853] getdents64(3, 0x5555717466f0 /* 4 entries */, 32768) = 112
[pid  5853] umount2("./9/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5853] newfstatat(AT_FDCWD, "./9/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5853] unlink("./9/binderfs")      = 0
[pid  5853] umount2("./9/file0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[  208.968766][  T114] ERROR: (device loop3): dbUpdatePMap: blocks are outside the map
[  208.968766][  T114] 
[  208.984423][  T113] ERROR: (device loop5): remounting filesystem as read-only
[  208.990001][  T114] ERROR: (device loop3): remounting filesystem as read-only
[  209.003587][ T5853] JFS: metapage_get_blocks failed
[pid  5898] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216
[pid  5898] munmap(0x7f7f07800000, 138412032) = 0
[pid  5898] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4
[pid  5898] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5898] close(3)                    = 0
[pid  5898] close(4)                    = 0
[  209.204178][ T5898] loop1: detected capacity change from 0 to 32768
[pid  5898] mkdir("./file0", 0777)      = 0
[pid  5898] mount("/dev/loop1", "./file0", "jfs", MS_LAZYTIME, "" <unfinished ...>
[pid  5848] <... umount2 resumed>)      = 0
[pid  5848] umount2("./8/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5848] newfstatat(AT_FDCWD, "./8/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5848] umount2("./8/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5848] openat(AT_FDCWD, "./8/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
[pid  5848] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5848] getdents64(4, 0x55557174e730 /* 2 entries */, 32768) = 48
[pid  5848] getdents64(4, 0x55557174e730 /* 0 entries */, 32768) = 0
[pid  5848] close(4)                    = 0
[pid  5848] rmdir("./8/file0")          = 0
[pid  5848] getdents64(3, 0x5555717466f0 /* 0 entries */, 32768) = 0
[pid  5848] close(3 <unfinished ...>
[pid  5898] <... mount resumed>)        = 0
[pid  5853] <... umount2 resumed>)      = 0
[pid  5848] <... close resumed>)        = 0
[  209.253471][ T5851] JFS: metapage_get_blocks failed
[pid  5853] umount2("./9/file0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5898] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY <unfinished ...>
[pid  5848] rmdir("./8" <unfinished ...>
[pid  5853] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid  5898] <... openat resumed>)       = 3
[pid  5848] <... rmdir resumed>)        = 0
[pid  5853] newfstatat(AT_FDCWD, "./9/file0",  <unfinished ...>
[pid  5898] chdir("./file0")            = 0
[pid  5853] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5848] mkdir("./9", 0777 <unfinished ...>
[pid  5898] openat(AT_FDCWD, "/dev/loop1", O_RDWR <unfinished ...>
[pid  5853] umount2("./9/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5898] <... openat resumed>)       = -1 EBUSY (Device or resource busy)
[pid  5853] openat(AT_FDCWD, "./9/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY <unfinished ...>
[pid  5848] <... mkdir resumed>)        = 0
[pid  5898] symlink("./file0/file0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" <unfinished ...>
[pid  5853] <... openat resumed>)       = 4
[pid  5848] openat(AT_FDCWD, "/dev/loop0", O_RDWR <unfinished ...>
[pid  5853] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5848] <... openat resumed>)       = 3
[pid  5853] getdents64(4,  <unfinished ...>
[pid  5898] <... symlink resumed>)      = 0
[pid  5853] <... getdents64 resumed>0x55557174e730 /* 2 entries */, 32768) = 48
[pid  5848] ioctl(3, LOOP_CLR_FD <unfinished ...>
[pid  5853] getdents64(4,  <unfinished ...>
[pid  5848] <... ioctl resumed>)        = 0
[pid  5898] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL <unfinished ...>
[pid  5853] <... getdents64 resumed>0x55557174e730 /* 0 entries */, 32768) = 0
[pid  5848] close(3 <unfinished ...>
[pid  5853] close(4)                    = 0
[pid  5853] rmdir("./9/file0")          = 0
[pid  5853] getdents64(3, 0x5555717466f0 /* 0 entries */, 32768) = 0
[pid  5853] close(3)                    = 0
[pid  5853] rmdir("./9" <unfinished ...>
[pid  5898] <... mount resumed>)        = -1 EINVAL (Invalid argument)
[pid  5898] exit_group(0 <unfinished ...>
[pid  5853] <... rmdir resumed>)        = 0
[pid  5898] <... exit_group resumed>)   = ?
[pid  5853] mkdir("./10", 0777 <unfinished ...>
[pid  5898] +++ exited with 0 +++
[pid  5849] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5898, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=21 /* 0.21 s */} ---
[pid  5849] restart_syscall(<... resuming interrupted clone ...> <unfinished ...>
[pid  5853] <... mkdir resumed>)        = 0
[pid  5853] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3
[pid  5853] ioctl(3, LOOP_CLR_FD <unfinished ...>
[pid  5849] <... restart_syscall resumed>) = 0
[pid  5853] <... ioctl resumed>)        = 0
[pid  5853] close(3 <unfinished ...>
[pid  5849] umount2("./9", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5849] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
[pid  5849] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5849] getdents64(3, 0x5555717466f0 /* 4 entries */, 32768) = 112
[pid  5849] umount2("./9/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5849] newfstatat(AT_FDCWD, "./9/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5849] unlink("./9/binderfs")      = 0
[  209.345534][  T113] blkno = 5002c, nblocks = 1
[  209.350191][  T113] ERROR: (device loop1): dbUpdatePMap: blocks are outside the map
[  209.350191][  T113] 
[  209.361523][  T113] ERROR: (device loop1): remounting filesystem as read-only
[pid  5849] umount2("./9/file0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5848] <... close resumed>)        = 0
[pid  5851] <... umount2 resumed>)      = 0
[pid  5851] umount2("./8/file0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5853] <... close resumed>)        = 0
[pid  5851] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid  5848] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...>
[pid  5853] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...>
[pid  5851] newfstatat(AT_FDCWD, "./8/file0", ./strace-static-x86_64: Process 5900 attached
./strace-static-x86_64: Process 5899 attached
{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5900] set_robust_list(0x555571745660, 24 <unfinished ...>
[pid  5899] set_robust_list(0x555571745660, 24) = 0
[pid  5851] umount2("./8/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5851] openat(AT_FDCWD, "./8/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY <unfinished ...>
[pid  5900] <... set_robust_list resumed>) = 0
[pid  5899] chdir("./9" <unfinished ...>
[pid  5853] <... clone resumed>, child_tidptr=0x555571745650) = 5900
[pid  5851] <... openat resumed>)       = 4
[pid  5848] <... clone resumed>, child_tidptr=0x555571745650) = 5899
[pid  5900] chdir("./10" <unfinished ...>
[pid  5899] <... chdir resumed>)        = 0
[pid  5851] newfstatat(4, "",  <unfinished ...>
[pid  5900] <... chdir resumed>)        = 0
[pid  5899] prctl(PR_SET_PDEATHSIG, SIGKILL <unfinished ...>
[pid  5851] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5900] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5899] <... prctl resumed>)        = 0
[pid  5851] getdents64(4,  <unfinished ...>
[pid  5900] setpgid(0, 0 <unfinished ...>
[pid  5899] setpgid(0, 0 <unfinished ...>
[pid  5851] <... getdents64 resumed>0x55557174e730 /* 2 entries */, 32768) = 48
[pid  5900] <... setpgid resumed>)      = 0
[pid  5899] <... setpgid resumed>)      = 0
[pid  5851] getdents64(4,  <unfinished ...>
[pid  5900] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC <unfinished ...>
[pid  5899] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC <unfinished ...>
[pid  5851] <... getdents64 resumed>0x55557174e730 /* 0 entries */, 32768) = 0
[pid  5899] <... openat resumed>)       = 3
[pid  5851] close(4 <unfinished ...>
[pid  5900] <... openat resumed>)       = 3
[pid  5899] write(3, "1000", 4 <unfinished ...>
[pid  5851] <... close resumed>)        = 0
[pid  5899] <... write resumed>)        = 4
[pid  5851] rmdir("./8/file0" <unfinished ...>
[pid  5900] write(3, "1000", 4)         = 4
[pid  5899] close(3 <unfinished ...>
[pid  5851] <... rmdir resumed>)        = 0
[pid  5900] close(3)                    = 0
[pid  5900] symlink("/dev/binderfs", "./binderfs" <unfinished ...>
[pid  5899] <... close resumed>)        = 0
[pid  5851] getdents64(3,  <unfinished ...>
[pid  5900] <... symlink resumed>)      = 0
[pid  5899] symlink("/dev/binderfs", "./binderfs"executing program
 <unfinished ...>
[pid  5851] <... getdents64 resumed>0x5555717466f0 /* 0 entries */, 32768) = 0
[pid  5900] write(1, "executing program\n", 18 <unfinished ...>
[pid  5899] <... symlink resumed>)      = 0
executing program
[pid  5851] close(3 <unfinished ...>
[pid  5900] <... write resumed>)        = 18
[pid  5899] write(1, "executing program\n", 18) = 18
[pid  5851] <... close resumed>)        = 0
[pid  5900] memfd_create("syzkaller", 0 <unfinished ...>
[pid  5899] memfd_create("syzkaller", 0 <unfinished ...>
[pid  5900] <... memfd_create resumed>) = 3
[pid  5900] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 <unfinished ...>
[pid  5851] rmdir("./8" <unfinished ...>
[pid  5900] <... mmap resumed>)         = 0x7f7f07800000
[pid  5851] <... rmdir resumed>)        = 0
[pid  5851] mkdir("./9", 0777 <unfinished ...>
[pid  5899] <... memfd_create resumed>) = 3
[pid  5851] <... mkdir resumed>)        = 0
[pid  5899] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7f07800000
[pid  5851] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3
[pid  5851] ioctl(3, LOOP_CLR_FD)       = 0
[pid  5851] close(3)                    = 0
[pid  5851] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555571745650) = 5901
./strace-static-x86_64: Process 5901 attached
[pid  5899] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 <unfinished ...>
[pid  5901] set_robust_list(0x555571745660, 24) = 0
[pid  5900] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 <unfinished ...>
[pid  5901] chdir("./9")                = 0
[pid  5901] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5901] setpgid(0, 0)               = 0
[pid  5901] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5901] write(3, "1000", 4)         = 4
[pid  5901] close(3)                    = 0
[pid  5901] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5901] write(1, "executing program\n", 18executing program
) = 18
[pid  5901] memfd_create("syzkaller", 0) = 3
[pid  5901] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7f07800000
[pid  5900] <... write resumed>)        = 16777216
[pid  5900] munmap(0x7f7f07800000, 138412032 <unfinished ...>
[pid  5901] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 <unfinished ...>
[pid  5900] <... munmap resumed>)       = 0
[pid  5900] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4
[pid  5900] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5900] close(3)                    = 0
[pid  5900] close(4 <unfinished ...>
[pid  5899] <... write resumed>)        = 16777216
[pid  5899] munmap(0x7f7f07800000, 138412032 <unfinished ...>
[pid  5900] <... close resumed>)        = 0
[pid  5900] mkdir("./file0", 0777)      = 0
[pid  5900] mount("/dev/loop5", "./file0", "jfs", MS_LAZYTIME, "") = 0
[pid  5900] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[  210.016940][ T5900] loop5: detected capacity change from 0 to 32768
[pid  5900] chdir("./file0")            = 0
[pid  5900] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy)
[pid  5900] symlink("./file0/file0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0
[pid  5900] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL) = 0
[pid  5899] <... munmap resumed>)       = 0
[pid  5900] exit_group(0 <unfinished ...>
[pid  5899] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5899] ioctl(4, LOOP_SET_FD, 3 <unfinished ...>
[pid  5900] <... exit_group resumed>)   = ?
[pid  5900] +++ exited with 0 +++
[pid  5853] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5900, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=23 /* 0.23 s */} ---
[pid  5853] umount2("./10", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5853] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
[pid  5853] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5853] getdents64(3, 0x5555717466f0 /* 4 entries */, 32768) = 112
[pid  5853] umount2("./10/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5853] newfstatat(AT_FDCWD, "./10/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5853] unlink("./10/binderfs")     = 0
[  210.074363][  T114] blkno = 5002c, nblocks = 1
[  210.079319][  T114] ERROR: (device loop5): dbUpdatePMap: blocks are outside the map
[  210.079319][  T114] 
[  210.090704][  T114] ERROR: (device loop5): remounting filesystem as read-only
[  210.091296][ T5899] loop0: detected capacity change from 0 to 32768
[pid  5853] umount2("./10/file0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5899] <... ioctl resumed>)        = 0
[pid  5899] close(3)                    = 0
[pid  5899] close(4)                    = 0
[pid  5899] mkdir("./file0", 0777)      = 0
[pid  5899] mount("/dev/loop0", "./file0", "jfs", MS_LAZYTIME, "") = 0
[pid  5899] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5899] chdir("./file0")            = 0
[pid  5899] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy)
[  210.125479][ T5853] JFS: metapage_get_blocks failed
[pid  5899] symlink("./file0/file0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0
[pid  5899] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL) = 0
[pid  5899] exit_group(0)               = ?
[pid  5899] +++ exited with 0 +++
[pid  5848] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5899, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=33 /* 0.33 s */} ---
[pid  5848] umount2("./9", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5848] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
[pid  5848] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5848] getdents64(3, 0x5555717466f0 /* 4 entries */, 32768) = 112
[pid  5848] umount2("./9/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5848] newfstatat(AT_FDCWD, "./9/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5848] unlink("./9/binderfs")      = 0
[pid  5848] umount2("./9/file0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5901] <... write resumed>)        = 16777216
[pid  5901] munmap(0x7f7f07800000, 138412032) = 0
[pid  5901] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4
[  210.169720][  T113] blkno = 5002c, nblocks = 1
[  210.187611][  T113] ERROR: (device loop0): dbUpdatePMap: blocks are outside the map
[  210.187611][  T113] 
[  210.205198][  T113] ERROR: (device loop0): remounting filesystem as read-only
[pid  5901] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5901] close(3)                    = 0
[pid  5901] close(4)                    = 0
[pid  5901] mkdir("./file0", 0777)      = 0
[pid  5901] mount("/dev/loop3", "./file0", "jfs", MS_LAZYTIME, "") = 0
[pid  5901] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5901] chdir("./file0")            = 0
[pid  5901] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy)
[pid  5901] symlink("./file0/file0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0
[  210.247996][ T5901] loop3: detected capacity change from 0 to 32768
[pid  5901] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL) = 0
[pid  5901] exit_group(0)               = ?
[pid  5901] +++ exited with 0 +++
[pid  5851] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5901, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=25 /* 0.25 s */} ---
[pid  5851] restart_syscall(<... resuming interrupted clone ...>) = 0
[pid  5851] umount2("./9", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5851] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
[pid  5851] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5851] getdents64(3, 0x5555717466f0 /* 4 entries */, 32768) = 112
[pid  5851] umount2("./9/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5851] newfstatat(AT_FDCWD, "./9/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5851] unlink("./9/binderfs")      = 0
[pid  5851] umount2("./9/file0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5853] <... umount2 resumed>)      = 0
[  210.319407][  T114] blkno = 5002c, nblocks = 1
[  210.324345][  T114] ERROR: (device loop3): dbUpdatePMap: blocks are outside the map
[  210.324345][  T114] 
[  210.335318][  T114] ERROR: (device loop3): remounting filesystem as read-only
[  210.353267][ T5851] JFS: metapage_get_blocks failed
[pid  5853] umount2("./10/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5853] newfstatat(AT_FDCWD, "./10/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5853] umount2("./10/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5853] openat(AT_FDCWD, "./10/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
[pid  5853] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5853] getdents64(4, 0x55557174e730 /* 2 entries */, 32768) = 48
[pid  5853] getdents64(4, 0x55557174e730 /* 0 entries */, 32768) = 0
[pid  5853] close(4)                    = 0
[  210.473584][ T5848] JFS: metapage_get_blocks failed
[pid  5853] rmdir("./10/file0")         = 0
[pid  5853] getdents64(3, 0x5555717466f0 /* 0 entries */, 32768) = 0
[pid  5853] close(3)                    = 0
[pid  5853] rmdir("./10")               = 0
[pid  5853] mkdir("./11", 0777)         = 0
[pid  5853] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3
[pid  5853] ioctl(3, LOOP_CLR_FD)       = 0
[pid  5853] close(3 <unfinished ...>
[pid  5851] <... umount2 resumed>)      = 0
[pid  5851] umount2("./9/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5851] newfstatat(AT_FDCWD, "./9/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5851] umount2("./9/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5851] openat(AT_FDCWD, "./9/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
[pid  5851] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5851] getdents64(4, 0x55557174e730 /* 2 entries */, 32768) = 48
[pid  5851] getdents64(4, 0x55557174e730 /* 0 entries */, 32768) = 0
[pid  5851] close(4)                    = 0
[pid  5851] rmdir("./9/file0")          = 0
[pid  5851] getdents64(3, 0x5555717466f0 /* 0 entries */, 32768) = 0
[pid  5851] close(3)                    = 0
[pid  5851] rmdir("./9")                = 0
[pid  5851] mkdir("./10", 0777)         = 0
[pid  5853] <... close resumed>)        = 0
[pid  5853] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...>
[pid  5851] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3
./strace-static-x86_64: Process 5902 attached
[pid  5851] ioctl(3, LOOP_CLR_FD)       = 0
[pid  5851] close(3 <unfinished ...>
[pid  5902] set_robust_list(0x555571745660, 24 <unfinished ...>
[pid  5853] <... clone resumed>, child_tidptr=0x555571745650) = 5902
[pid  5902] <... set_robust_list resumed>) = 0
[pid  5902] chdir("./11")               = 0
[pid  5902] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5902] setpgid(0, 0)               = 0
[pid  5902] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5902] write(3, "1000", 4)         = 4
[pid  5902] close(3)                    = 0
[pid  5902] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5902] write(1, "executing program\n", 18executing program
) = 18
[pid  5902] memfd_create("syzkaller", 0) = 3
[pid  5902] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 <unfinished ...>
[pid  5848] <... umount2 resumed>)      = 0
[pid  5902] <... mmap resumed>)         = 0x7f7f07800000
[pid  5848] umount2("./9/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5848] newfstatat(AT_FDCWD, "./9/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5848] umount2("./9/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5848] openat(AT_FDCWD, "./9/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
[pid  5848] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5848] getdents64(4, 0x55557174e730 /* 2 entries */, 32768) = 48
[pid  5848] getdents64(4, 0x55557174e730 /* 0 entries */, 32768) = 0
[pid  5848] close(4)                    = 0
[pid  5848] rmdir("./9/file0")          = 0
[pid  5848] getdents64(3, 0x5555717466f0 /* 0 entries */, 32768) = 0
[pid  5848] close(3)                    = 0
[pid  5848] rmdir("./9")                = 0
[pid  5848] mkdir("./10", 0777)         = 0
[pid  5848] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3
[pid  5848] ioctl(3, LOOP_CLR_FD)       = 0
[pid  5848] close(3 <unfinished ...>
[pid  5851] <... close resumed>)        = 0
[pid  5851] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5903 attached
, child_tidptr=0x555571745650) = 5903
[pid  5903] set_robust_list(0x555571745660, 24) = 0
[pid  5903] chdir("./10")               = 0
[pid  5903] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5903] setpgid(0, 0)               = 0
[pid  5903] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5903] write(3, "1000", 4)         = 4
[pid  5903] close(3)                    = 0
[pid  5903] symlink("/dev/binderfs", "./binderfs"executing program
) = 0
[pid  5903] write(1, "executing program\n", 18) = 18
[pid  5903] memfd_create("syzkaller", 0) = 3
[pid  5903] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7f07800000
[pid  5902] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 <unfinished ...>
[pid  5848] <... close resumed>)        = 0
[pid  5848] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555571745650) = 5904
./strace-static-x86_64: Process 5904 attached
[pid  5904] set_robust_list(0x555571745660, 24) = 0
[pid  5904] chdir("./10")               = 0
[pid  5904] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5904] setpgid(0, 0)               = 0
executing program
[pid  5904] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5904] write(3, "1000", 4)         = 4
[pid  5904] close(3)                    = 0
[pid  5904] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5904] write(1, "executing program\n", 18) = 18
[pid  5904] memfd_create("syzkaller", 0) = 3
[pid  5904] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7f07800000
[pid  5903] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 <unfinished ...>
[pid  5904] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 <unfinished ...>
[pid  5902] <... write resumed>)        = 16777216
[pid  5902] munmap(0x7f7f07800000, 138412032) = 0
[pid  5902] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4
[pid  5902] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5902] close(3)                    = 0
[pid  5902] close(4)                    = 0
[pid  5902] mkdir("./file0", 0777)      = 0
[pid  5902] mount("/dev/loop5", "./file0", "jfs", MS_LAZYTIME, "") = 0
[pid  5902] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5902] chdir("./file0")            = 0
[pid  5902] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy)
[pid  5902] symlink("./file0/file0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0
[  211.232759][ T5902] loop5: detected capacity change from 0 to 32768
[pid  5902] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL) = 0
[pid  5902] exit_group(0)               = ?
[pid  5902] +++ exited with 0 +++
[pid  5853] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5902, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=28 /* 0.28 s */} ---
[pid  5853] restart_syscall(<... resuming interrupted clone ...>) = 0
[pid  5853] umount2("./11", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5853] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
[pid  5853] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5853] getdents64(3, 0x5555717466f0 /* 4 entries */, 32768) = 112
[pid  5853] umount2("./11/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5853] newfstatat(AT_FDCWD, "./11/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5853] unlink("./11/binderfs")     = 0
[  211.273073][  T114] blkno = 5002c, nblocks = 1
[  211.277899][  T114] ERROR: (device loop5): dbUpdatePMap: blocks are outside the map
[  211.277899][  T114] 
[  211.299113][  T114] ERROR: (device loop5): remounting filesystem as read-only
[pid  5853] umount2("./11/file0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5904] <... write resumed>)        = 16777216
[pid  5904] munmap(0x7f7f07800000, 138412032 <unfinished ...>
[pid  5903] <... write resumed>)        = 16777216
[pid  5904] <... munmap resumed>)       = 0
[pid  5904] openat(AT_FDCWD, "/dev/loop0", O_RDWR <unfinished ...>
[pid  5903] munmap(0x7f7f07800000, 138412032 <unfinished ...>
[pid  5904] <... openat resumed>)       = 4
[  211.334279][ T5853] JFS: metapage_get_blocks failed
[pid  5904] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5903] <... munmap resumed>)       = 0
[pid  5903] openat(AT_FDCWD, "/dev/loop3", O_RDWR <unfinished ...>
[pid  5904] close(3 <unfinished ...>
[pid  5903] <... openat resumed>)       = 4
[pid  5904] <... close resumed>)        = 0
[pid  5903] ioctl(4, LOOP_SET_FD, 3 <unfinished ...>
[pid  5904] close(4)                    = 0
[pid  5904] mkdir("./file0", 0777 <unfinished ...>
[pid  5903] <... ioctl resumed>)        = 0
[pid  5904] <... mkdir resumed>)        = 0
[pid  5903] close(3 <unfinished ...>
[pid  5904] mount("/dev/loop0", "./file0", "jfs", MS_LAZYTIME, "") = 0
[pid  5903] <... close resumed>)        = 0
[pid  5904] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY <unfinished ...>
[pid  5903] close(4 <unfinished ...>
[pid  5904] <... openat resumed>)       = 3
[pid  5903] <... close resumed>)        = 0
[pid  5904] chdir("./file0" <unfinished ...>
[  211.371557][ T5904] loop0: detected capacity change from 0 to 32768
[  211.401477][ T5903] loop3: detected capacity change from 0 to 32768
[pid  5903] mkdir("./file0", 0777 <unfinished ...>
[pid  5904] <... chdir resumed>)        = 0
[pid  5903] <... mkdir resumed>)        = 0
[pid  5903] mount("/dev/loop3", "./file0", "jfs", MS_LAZYTIME, "" <unfinished ...>
[pid  5904] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy)
[pid  5904] symlink("./file0/file0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0
[pid  5904] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL <unfinished ...>
[pid  5903] <... mount resumed>)        = 0
[pid  5904] <... mount resumed>)        = 0
[pid  5903] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5904] exit_group(0 <unfinished ...>
[pid  5903] chdir("./file0")            = 0
[pid  5903] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy)
[pid  5903] symlink("./file0/file0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" <unfinished ...>
[pid  5904] <... exit_group resumed>)   = ?
[pid  5903] <... symlink resumed>)      = 0
[pid  5903] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL <unfinished ...>
[pid  5904] +++ exited with 0 +++
[pid  5903] <... mount resumed>)        = 0
[pid  5903] exit_group(0 <unfinished ...>
[pid  5848] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5904, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=27 /* 0.27 s */} ---
[pid  5903] <... exit_group resumed>)   = ?
[pid  5903] +++ exited with 0 +++
[pid  5851] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5903, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=28 /* 0.28 s */} ---
[  211.462137][  T113] blkno = 5002c, nblocks = 1
[  211.467171][  T113] ERROR: (device loop0): dbUpdatePMap: blocks are outside the map
[  211.467171][  T113] 
[  211.479547][  T113] ERROR: (device loop0): remounting filesystem as read-only
[  211.499142][  T114] blkno = 5002c, nblocks = 1
[pid  5851] restart_syscall(<... resuming interrupted clone ...> <unfinished ...>
[pid  5848] umount2("./10", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5851] <... restart_syscall resumed>) = 0
[pid  5851] umount2("./10", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5851] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
[pid  5851] newfstatat(3, "",  <unfinished ...>
[pid  5848] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid  5851] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5848] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY <unfinished ...>
[pid  5851] getdents64(3,  <unfinished ...>
[pid  5848] <... openat resumed>)       = 3
[pid  5851] <... getdents64 resumed>0x5555717466f0 /* 4 entries */, 32768) = 112
[pid  5848] newfstatat(3, "",  <unfinished ...>
[pid  5851] umount2("./10/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5848] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5851] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid  5848] getdents64(3,  <unfinished ...>
[pid  5851] newfstatat(AT_FDCWD, "./10/binderfs",  <unfinished ...>
[pid  5848] <... getdents64 resumed>0x5555717466f0 /* 4 entries */, 32768) = 112
[pid  5851] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5848] umount2("./10/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5851] unlink("./10/binderfs" <unfinished ...>
[pid  5848] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid  5848] newfstatat(AT_FDCWD, "./10/binderfs",  <unfinished ...>
[pid  5851] <... unlink resumed>)       = 0
[pid  5848] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5851] umount2("./10/file0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5848] unlink("./10/binderfs")     = 0
[  211.504772][  T114] ERROR: (device loop3): dbUpdatePMap: blocks are outside the map
[  211.504772][  T114] 
[  211.516135][  T114] ERROR: (device loop3): remounting filesystem as read-only
[  211.545439][ T5851] JFS: metapage_get_blocks failed
[  211.557212][ T5848] JFS: metapage_get_blocks failed
[pid  5848] umount2("./10/file0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5853] <... umount2 resumed>)      = 0
[pid  5853] umount2("./11/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5853] newfstatat(AT_FDCWD, "./11/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5853] umount2("./11/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5853] openat(AT_FDCWD, "./11/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
[pid  5853] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5853] getdents64(4, 0x55557174e730 /* 2 entries */, 32768) = 48
[pid  5853] getdents64(4, 0x55557174e730 /* 0 entries */, 32768) = 0
[pid  5853] close(4)                    = 0
[pid  5853] rmdir("./11/file0")         = 0
[pid  5853] getdents64(3, 0x5555717466f0 /* 0 entries */, 32768) = 0
[pid  5853] close(3)                    = 0
[pid  5853] rmdir("./11")               = 0
[pid  5853] mkdir("./12", 0777)         = 0
[pid  5853] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3
[pid  5853] ioctl(3, LOOP_CLR_FD)       = 0
[pid  5853] close(3)                    = 0
[pid  5853] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5905 attached
, child_tidptr=0x555571745650) = 5905
[pid  5905] set_robust_list(0x555571745660, 24) = 0
[pid  5905] chdir("./12")               = 0
[pid  5905] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5905] setpgid(0, 0)               = 0
[pid  5905] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5905] write(3, "1000", 4)         = 4
[pid  5905] close(3)                    = 0
[pid  5905] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5905] write(1, "executing program\n", 18executing program
) = 18
[pid  5905] memfd_create("syzkaller", 0) = 3
[pid  5905] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7f07800000
[pid  5848] <... umount2 resumed>)      = 0
[pid  5851] <... umount2 resumed>)      = 0
[pid  5848] umount2("./10/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5848] newfstatat(AT_FDCWD, "./10/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5851] umount2("./10/file0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5848] umount2("./10/file0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5851] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid  5848] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid  5851] newfstatat(AT_FDCWD, "./10/file0",  <unfinished ...>
[pid  5848] openat(AT_FDCWD, "./10/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY <unfinished ...>
[pid  5851] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5848] <... openat resumed>)       = 4
[pid  5851] umount2("./10/file0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5848] newfstatat(4, "",  <unfinished ...>
[pid  5851] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid  5848] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5848] getdents64(4, 0x55557174e730 /* 2 entries */, 32768) = 48
[pid  5851] openat(AT_FDCWD, "./10/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
[pid  5851] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5851] getdents64(4, 0x55557174e730 /* 2 entries */, 32768) = 48
[pid  5851] getdents64(4, 0x55557174e730 /* 0 entries */, 32768) = 0
[pid  5851] close(4)                    = 0
[pid  5851] rmdir("./10/file0")         = 0
[pid  5851] getdents64(3, 0x5555717466f0 /* 0 entries */, 32768) = 0
[pid  5851] close(3)                    = 0
[pid  5851] rmdir("./10")               = 0
[pid  5851] mkdir("./11", 0777)         = 0
[pid  5848] getdents64(4,  <unfinished ...>
[pid  5851] openat(AT_FDCWD, "/dev/loop3", O_RDWR <unfinished ...>
[pid  5848] <... getdents64 resumed>0x55557174e730 /* 0 entries */, 32768) = 0
[pid  5851] <... openat resumed>)       = 3
[pid  5851] ioctl(3, LOOP_CLR_FD <unfinished ...>
[pid  5848] close(4)                    = 0
[pid  5905] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 <unfinished ...>
[pid  5851] <... ioctl resumed>)        = 0
[pid  5848] rmdir("./10/file0")         = 0
[pid  5851] close(3 <unfinished ...>
[pid  5848] getdents64(3, 0x5555717466f0 /* 0 entries */, 32768) = 0
[pid  5848] close(3)                    = 0
[pid  5848] rmdir("./10")               = 0
[pid  5848] mkdir("./11", 0777)         = 0
[pid  5848] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 3
[pid  5848] ioctl(3, LOOP_CLR_FD)       = 0
[pid  5848] close(3)                    = 0
[pid  5848] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...>
[pid  5851] <... close resumed>)        = 0
./strace-static-x86_64: Process 5906 attached
[pid  5851] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD <unfinished ...>
[pid  5906] set_robust_list(0x555571745660, 24 <unfinished ...>
[pid  5848] <... clone resumed>, child_tidptr=0x555571745650) = 5906
[pid  5906] <... set_robust_list resumed>) = 0
[pid  5906] chdir("./11")               = 0
[pid  5906] prctl(PR_SET_PDEATHSIG, SIGKILL./strace-static-x86_64: Process 5907 attached
) = 0
[pid  5907] set_robust_list(0x555571745660, 24 <unfinished ...>
[pid  5906] setpgid(0, 0 <unfinished ...>
[pid  5851] <... clone resumed>, child_tidptr=0x555571745650) = 5907
[pid  5907] <... set_robust_list resumed>) = 0
[pid  5906] <... setpgid resumed>)      = 0
[pid  5907] chdir("./11" <unfinished ...>
[pid  5906] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC <unfinished ...>
[pid  5907] <... chdir resumed>)        = 0
[pid  5907] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5906] <... openat resumed>)       = 3
[pid  5907] setpgid(0, 0)               = 0
[pid  5906] write(3, "1000", 4 <unfinished ...>
[pid  5907] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC <unfinished ...>
[pid  5906] <... write resumed>)        = 4
[pid  5905] <... write resumed>)        = 16777216
[pid  5906] close(3)                    = 0
[pid  5905] munmap(0x7f7f07800000, 138412032 <unfinished ...>
[pid  5907] <... openat resumed>)       = 3
[pid  5906] symlink("/dev/binderfs", "./binderfs" <unfinished ...>
[pid  5907] write(3, "1000", 4 <unfinished ...>
[pid  5906] <... symlink resumed>)      = 0
[pid  5907] <... write resumed>)        = 4
[pid  5907] close(3)                    = 0
[pid  5907] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5906] write(1, "executing program\n", 18executing program
) = 18
[pid  5906] memfd_create("syzkaller", 0executing program
 <unfinished ...>
[pid  5907] write(1, "executing program\n", 18 <unfinished ...>
[pid  5905] <... munmap resumed>)       = 0
[pid  5907] <... write resumed>)        = 18
[pid  5906] <... memfd_create resumed>) = 3
[pid  5905] openat(AT_FDCWD, "/dev/loop5", O_RDWR <unfinished ...>
[pid  5907] memfd_create("syzkaller", 0 <unfinished ...>
[pid  5906] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 <unfinished ...>
[pid  5905] <... openat resumed>)       = 4
[pid  5907] <... memfd_create resumed>) = 3
[pid  5906] <... mmap resumed>)         = 0x7f7f07800000
[pid  5907] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 <unfinished ...>
[pid  5905] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5907] <... mmap resumed>)         = 0x7f7f07800000
[pid  5905] close(3)                    = 0
[pid  5905] close(4)                    = 0
[pid  5905] mkdir("./file0", 0777)      = 0
[pid  5905] mount("/dev/loop5", "./file0", "jfs", MS_LAZYTIME, "") = 0
[  212.165562][ T5905] loop5: detected capacity change from 0 to 32768
[pid  5905] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5905] chdir("./file0")            = 0
[pid  5905] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy)
[pid  5905] symlink("./file0/file0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0
[pid  5905] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL <unfinished ...>
[  212.243131][  T114] blkno = 5002c, nblocks = 1
[  212.258225][  T114] ERROR: (device loop5): dbUpdatePMap: blocks are outside the map
[  212.258225][  T114] 
[pid  5906] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 <unfinished ...>
[pid  5905] <... mount resumed>)        = -1 EINVAL (Invalid argument)
[pid  5905] exit_group(0)               = ?
[pid  5905] +++ exited with 0 +++
[pid  5853] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5905, si_uid=0, si_status=0, si_utime=0, si_stime=27 /* 0.27 s */} ---
[pid  5853] restart_syscall(<... resuming interrupted clone ...>) = 0
[pid  5853] umount2("./12", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5853] openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
[pid  5853] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5853] getdents64(3, 0x5555717466f0 /* 4 entries */, 32768) = 112
[pid  5853] umount2("./12/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5853] newfstatat(AT_FDCWD, "./12/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5853] unlink("./12/binderfs")     = 0
[  212.283465][  T114] ERROR: (device loop5): remounting filesystem as read-only
[  212.303807][ T5905] JFS: metapage_get_blocks failed
[pid  5853] umount2("./12/file0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5907] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 <unfinished ...>
[pid  5853] <... umount2 resumed>)      = 0
[pid  5853] umount2("./12/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5853] newfstatat(AT_FDCWD, "./12/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5853] umount2("./12/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5853] openat(AT_FDCWD, "./12/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
[pid  5853] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5853] getdents64(4, 0x55557174e730 /* 2 entries */, 32768) = 48
[pid  5853] getdents64(4, 0x55557174e730 /* 0 entries */, 32768) = 0
[pid  5853] close(4)                    = 0
[pid  5853] rmdir("./12/file0")         = 0
[pid  5853] getdents64(3, 0x5555717466f0 /* 0 entries */, 32768) = 0
[pid  5853] close(3)                    = 0
[pid  5853] rmdir("./12")               = 0
[pid  5853] mkdir("./13", 0777)         = 0
[pid  5853] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3
[pid  5853] ioctl(3, LOOP_CLR_FD)       = 0
[pid  5853] close(3 <unfinished ...>
[pid  5906] <... write resumed>)        = 16777216
[pid  5906] munmap(0x7f7f07800000, 138412032) = 0
[pid  5906] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4
[pid  5906] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5906] close(3)                    = 0
[pid  5906] close(4)                    = 0
[pid  5906] mkdir("./file0", 0777)      = 0
[pid  5853] <... close resumed>)        = 0
[pid  5906] mount("/dev/loop0", "./file0", "jfs", MS_LAZYTIME, "" <unfinished ...>
[pid  5853] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5908 attached
 <unfinished ...>
[pid  5908] set_robust_list(0x555571745660, 24) = 0
[pid  5908] chdir("./13")               = 0
[pid  5908] prctl(PR_SET_PDEATHSIG, SIGKILL <unfinished ...>
[pid  5853] <... clone resumed>, child_tidptr=0x555571745650) = 5908
[pid  5908] <... prctl resumed>)        = 0
[pid  5907] <... write resumed>)        = 16777216
[pid  5906] <... mount resumed>)        = 0
[pid  5908] setpgid(0, 0 <unfinished ...>
[pid  5907] munmap(0x7f7f07800000, 138412032 <unfinished ...>
[  212.581844][ T5906] loop0: detected capacity change from 0 to 32768
[pid  5906] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY <unfinished ...>
[pid  5908] <... setpgid resumed>)      = 0
[pid  5906] <... openat resumed>)       = 3
[pid  5908] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC <unfinished ...>
[pid  5906] chdir("./file0" <unfinished ...>
[pid  5908] <... openat resumed>)       = 3
[pid  5906] <... chdir resumed>)        = 0
[pid  5908] write(3, "1000", 4 <unfinished ...>
[pid  5906] openat(AT_FDCWD, "/dev/loop0", O_RDWR <unfinished ...>
[pid  5908] <... write resumed>)        = 4
[pid  5906] <... openat resumed>)       = -1 EBUSY (Device or resource busy)
[pid  5908] close(3)                    = 0
[pid  5906] symlink("./file0/file0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" <unfinished ...>
[pid  5908] symlink("/dev/binderfs", "./binderfs") = 0
executing program
[pid  5906] <... symlink resumed>)      = 0
[pid  5908] write(1, "executing program\n", 18) = 18
[pid  5908] memfd_create("syzkaller", 0 <unfinished ...>
[pid  5906] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL <unfinished ...>
[pid  5908] <... memfd_create resumed>) = 3
[pid  5908] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7f07800000
[pid  5907] <... munmap resumed>)       = 0
[pid  5907] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4
[pid  5907] ioctl(4, LOOP_SET_FD, 3 <unfinished ...>
[pid  5906] <... mount resumed>)        = -1 EINVAL (Invalid argument)
[pid  5907] <... ioctl resumed>)        = 0
[pid  5907] close(3 <unfinished ...>
[pid  5906] exit_group(0 <unfinished ...>
[pid  5907] <... close resumed>)        = 0
[pid  5907] close(4)                    = 0
[pid  5907] mkdir("./file0", 0777)      = 0
[pid  5906] <... exit_group resumed>)   = ?
[pid  5907] mount("/dev/loop3", "./file0", "jfs", MS_LAZYTIME, "" <unfinished ...>
[pid  5906] +++ exited with 0 +++
[pid  5848] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5906, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=33 /* 0.33 s */} ---
[pid  5848] restart_syscall(<... resuming interrupted clone ...>) = 0
[pid  5907] <... mount resumed>)        = 0
[pid  5848] umount2("./11", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5907] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5907] chdir("./file0")            = 0
[pid  5907] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = -1 EBUSY (Device or resource busy)
[pid  5907] symlink("./file0/file0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" <unfinished ...>
[pid  5848] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid  5907] <... symlink resumed>)      = 0
[pid  5848] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY <unfinished ...>
[pid  5907] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL <unfinished ...>
[pid  5848] <... openat resumed>)       = 3
[pid  5848] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5848] getdents64(3, 0x5555717466f0 /* 4 entries */, 32768) = 112
[  212.664475][  T114] blkno = 5002c, nblocks = 1
[  212.669195][  T114] ERROR: (device loop0): dbUpdatePMap: blocks are outside the map
[  212.669195][  T114] 
[  212.685622][  T114] ERROR: (device loop0): remounting filesystem as read-only
[  212.694135][ T5907] loop3: detected capacity change from 0 to 32768
[pid  5848] umount2("./11/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5907] <... mount resumed>)        = 0
[pid  5907] exit_group(0 <unfinished ...>
[pid  5848] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid  5907] <... exit_group resumed>)   = ?
[pid  5907] +++ exited with 0 +++
[pid  5848] newfstatat(AT_FDCWD, "./11/binderfs",  <unfinished ...>
[pid  5851] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5907, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=27 /* 0.27 s */} ---
[pid  5848] <... newfstatat resumed>{st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5848] unlink("./11/binderfs")     = 0
[pid  5848] umount2("./11/file0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5851] umount2("./11", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5851] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
[pid  5851] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5851] getdents64(3, 0x5555717466f0 /* 4 entries */, 32768) = 112
[pid  5851] umount2("./11/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5851] newfstatat(AT_FDCWD, "./11/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5851] unlink("./11/binderfs")     = 0
[pid  5851] umount2("./11/file0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[  212.734422][  T113] blkno = 5002c, nblocks = 1
[  212.739090][  T113] ERROR: (device loop3): dbUpdatePMap: blocks are outside the map
[  212.739090][  T113] 
[  212.764660][  T113] ERROR: (device loop3): remounting filesystem as read-only
[pid  5908] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216
[pid  5908] munmap(0x7f7f07800000, 138412032) = 0
[pid  5908] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4
[pid  5908] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5908] close(3)                    = 0
[pid  5908] close(4)                    = 0
[pid  5908] mkdir("./file0", 0777)      = 0
[pid  5908] mount("/dev/loop5", "./file0", "jfs", MS_LAZYTIME, "") = 0
[pid  5908] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5908] chdir("./file0")            = 0
[  212.967055][ T5908] loop5: detected capacity change from 0 to 32768
[pid  5908] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy)
[pid  5908] symlink("./file0/file0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0
[  213.033573][ T5851] JFS: metapage_get_blocks failed
[pid  5908] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL) = 0
[pid  5908] exit_group(0)               = ?
[pid  5908] +++ exited with 0 +++
[pid  5853] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5908, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=22 /* 0.22 s */} ---
[pid  5853] umount2("./13", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5853] openat(AT_FDCWD, "./13", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
[pid  5853] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[  213.070172][  T114] blkno = 5002c, nblocks = 1
[  213.074893][  T114] ERROR: (device loop5): dbUpdatePMap: blocks are outside the map
[  213.074893][  T114] 
[  213.085800][  T114] ERROR: (device loop5): remounting filesystem as read-only
[pid  5853] getdents64(3, 0x5555717466f0 /* 4 entries */, 32768) = 112
[pid  5853] umount2("./13/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5853] newfstatat(AT_FDCWD, "./13/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5853] unlink("./13/binderfs")     = 0
[  213.195581][ T5853] JFS: metapage_get_blocks failed
[pid  5853] umount2("./13/file0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5851] <... umount2 resumed>)      = 0
[pid  5851] umount2("./11/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5851] newfstatat(AT_FDCWD, "./11/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5851] umount2("./11/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5851] openat(AT_FDCWD, "./11/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
[pid  5851] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5851] getdents64(4, 0x55557174e730 /* 2 entries */, 32768) = 48
[pid  5851] getdents64(4, 0x55557174e730 /* 0 entries */, 32768) = 0
[pid  5851] close(4)                    = 0
[pid  5851] rmdir("./11/file0")         = 0
[pid  5851] getdents64(3, 0x5555717466f0 /* 0 entries */, 32768) = 0
[pid  5851] close(3)                    = 0
[pid  5851] rmdir("./11")               = 0
[pid  5851] mkdir("./12", 0777)         = 0
[pid  5851] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 3
[pid  5851] ioctl(3, LOOP_CLR_FD <unfinished ...>
[pid  5853] <... umount2 resumed>)      = 0
[pid  5853] umount2("./13/file0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5851] <... ioctl resumed>)        = 0
[pid  5853] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid  5853] newfstatat(AT_FDCWD, "./13/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5851] close(3 <unfinished ...>
[pid  5853] umount2("./13/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5853] openat(AT_FDCWD, "./13/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
[pid  5853] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5853] getdents64(4, 0x55557174e730 /* 2 entries */, 32768) = 48
[pid  5853] getdents64(4, 0x55557174e730 /* 0 entries */, 32768) = 0
[pid  5853] close(4)                    = 0
[pid  5853] rmdir("./13/file0")         = 0
[pid  5853] getdents64(3, 0x5555717466f0 /* 0 entries */, 32768) = 0
[pid  5853] close(3)                    = 0
[pid  5853] rmdir("./13")               = 0
[pid  5853] mkdir("./14", 0777)         = 0
[pid  5853] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3
[pid  5853] ioctl(3, LOOP_CLR_FD)       = 0
[pid  5853] close(3 <unfinished ...>
[pid  5851] <... close resumed>)        = 0
[pid  5851] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5909 attached
, child_tidptr=0x555571745650) = 5909
[pid  5909] set_robust_list(0x555571745660, 24) = 0
[pid  5909] chdir("./12")               = 0
[pid  5909] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5909] setpgid(0, 0)               = 0
[pid  5909] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5909] write(3, "1000", 4)         = 4
[pid  5909] close(3)                    = 0
[pid  5909] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5909] write(1, "executing program\n", 18executing program
) = 18
[pid  5909] memfd_create("syzkaller", 0) = 3
[pid  5909] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7f07800000
[pid  5853] <... close resumed>)        = 0
[pid  5853] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5910 attached
 <unfinished ...>
[pid  5910] set_robust_list(0x555571745660, 24) = 0
[pid  5910] chdir("./14" <unfinished ...>
[pid  5853] <... clone resumed>, child_tidptr=0x555571745650) = 5910
[pid  5910] <... chdir resumed>)        = 0
[pid  5910] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5910] setpgid(0, 0)               = 0
[pid  5910] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5910] write(3, "1000", 4)         = 4
[pid  5910] close(3)                    = 0
[pid  5910] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5910] write(1, "executing program\n", 18executing program
) = 18
[pid  5910] memfd_create("syzkaller", 0) = 3
[pid  5910] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7f07800000
[pid  5909] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 <unfinished ...>
[pid  5910] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 <unfinished ...>
[pid  5909] <... write resumed>)        = 16777216
[pid  5909] munmap(0x7f7f07800000, 138412032) = 0
[pid  5909] openat(AT_FDCWD, "/dev/loop3", O_RDWR) = 4
[pid  5909] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5909] close(3)                    = 0
[pid  5909] close(4)                    = 0
[pid  5909] mkdir("./file0", 0777)      = 0
[pid  5910] <... write resumed>)        = 16777216
[pid  5909] mount("/dev/loop3", "./file0", "jfs", MS_LAZYTIME, "" <unfinished ...>
[pid  5910] munmap(0x7f7f07800000, 138412032 <unfinished ...>
[pid  5909] <... mount resumed>)        = 0
[pid  5909] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5910] <... munmap resumed>)       = 0
[  213.968456][ T5909] loop3: detected capacity change from 0 to 32768
[pid  5909] chdir("./file0" <unfinished ...>
[pid  5910] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4
[pid  5909] <... chdir resumed>)        = 0
[pid  5909] openat(AT_FDCWD, "/dev/loop3", O_RDWR <unfinished ...>
[pid  5910] ioctl(4, LOOP_SET_FD, 3 <unfinished ...>
[pid  5909] <... openat resumed>)       = -1 EBUSY (Device or resource busy)
[pid  5909] symlink("./file0/file0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0
[pid  5909] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL <unfinished ...>
[pid  5910] <... ioctl resumed>)        = 0
[pid  5910] close(3)                    = 0
[pid  5910] close(4)                    = 0
[pid  5910] mkdir("./file0", 0777)      = 0
[pid  5910] mount("/dev/loop5", "./file0", "jfs", MS_LAZYTIME, "" <unfinished ...>
[pid  5909] <... mount resumed>)        = -1 EINVAL (Invalid argument)
[pid  5909] exit_group(0)               = ?
[pid  5910] <... mount resumed>)        = 0
[pid  5909] +++ exited with 0 +++
[pid  5910] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5910] chdir("./file0")            = 0
[pid  5910] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy)
[pid  5910] symlink("./file0/file0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0
[pid  5910] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL <unfinished ...>
[pid  5851] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5909, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=27 /* 0.27 s */} ---
[pid  5851] umount2("./12", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5851] openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
[pid  5851] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5851] getdents64(3, 0x5555717466f0 /* 4 entries */, 32768) = 112
[pid  5851] umount2("./12/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[  214.032541][ T5910] loop5: detected capacity change from 0 to 32768
[  214.036045][  T113] blkno = 5002c, nblocks = 1
[  214.044117][  T113] ERROR: (device loop3): dbUpdatePMap: blocks are outside the map
[  214.044117][  T113] 
[  214.054523][  T113] ERROR: (device loop3): remounting filesystem as read-only
[pid  5851] newfstatat(AT_FDCWD, "./12/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5851] unlink("./12/binderfs")     = 0
[pid  5851] umount2("./12/file0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5910] <... mount resumed>)        = 0
[pid  5910] exit_group(0)               = ?
[pid  5910] +++ exited with 0 +++
[pid  5853] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5910, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=23 /* 0.23 s */} ---
[pid  5853] umount2("./14", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5853] openat(AT_FDCWD, "./14", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
[  214.079309][  T114] blkno = 5002c, nblocks = 1
[  214.084344][  T114] ERROR: (device loop5): dbUpdatePMap: blocks are outside the map
[  214.084344][  T114] 
[  214.095286][  T114] ERROR: (device loop5): remounting filesystem as read-only
[pid  5853] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5853] getdents64(3, 0x5555717466f0 /* 4 entries */, 32768) = 112
[pid  5853] umount2("./14/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5853] newfstatat(AT_FDCWD, "./14/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5853] unlink("./14/binderfs")     = 0
[  214.218090][ T5853] JFS: metapage_get_blocks failed
[pid  5853] umount2("./14/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0
[pid  5853] umount2("./14/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5853] newfstatat(AT_FDCWD, "./14/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5853] umount2("./14/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5853] openat(AT_FDCWD, "./14/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
[pid  5853] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5853] getdents64(4, 0x55557174e730 /* 2 entries */, 32768) = 48
[pid  5853] getdents64(4, 0x55557174e730 /* 0 entries */, 32768) = 0
[pid  5853] close(4)                    = 0
[pid  5853] rmdir("./14/file0")         = 0
[pid  5853] getdents64(3, 0x5555717466f0 /* 0 entries */, 32768) = 0
[pid  5853] close(3)                    = 0
[pid  5853] rmdir("./14")               = 0
[pid  5853] mkdir("./15", 0777)         = 0
[pid  5853] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3
[pid  5853] ioctl(3, LOOP_CLR_FD)       = 0
[pid  5853] close(3)                    = 0
[pid  5853] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5911 attached
, child_tidptr=0x555571745650) = 5911
[pid  5911] set_robust_list(0x555571745660, 24) = 0
[pid  5911] chdir("./15")               = 0
[pid  5911] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5911] setpgid(0, 0)               = 0
[pid  5911] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5911] write(3, "1000", 4)         = 4
[pid  5911] close(3)                    = 0
[pid  5911] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5911] write(1, "executing program\n", 18executing program
) = 18
[pid  5911] memfd_create("syzkaller", 0) = 3
[pid  5911] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7f07800000
[pid  5911] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216
[pid  5911] munmap(0x7f7f07800000, 138412032) = 0
[pid  5911] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4
[pid  5911] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5911] close(3)                    = 0
[pid  5911] close(4)                    = 0
[pid  5911] mkdir("./file0", 0777)      = 0
[pid  5911] mount("/dev/loop5", "./file0", "jfs", MS_LAZYTIME, "") = 0
[pid  5911] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5911] chdir("./file0")            = 0
[pid  5911] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy)
[pid  5911] symlink("./file0/file0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0
[  215.064765][ T5911] loop5: detected capacity change from 0 to 32768
[pid  5911] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL) = 0
[pid  5911] exit_group(0)               = ?
[pid  5911] +++ exited with 0 +++
[pid  5853] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5911, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=21 /* 0.21 s */} ---
[pid  5853] restart_syscall(<... resuming interrupted clone ...>) = 0
[pid  5853] umount2("./15", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[  215.121293][  T113] blkno = 5002c, nblocks = 1
[  215.126054][  T113] ERROR: (device loop5): dbUpdatePMap: blocks are outside the map
[  215.126054][  T113] 
[  215.137533][  T113] ERROR: (device loop5): remounting filesystem as read-only
[pid  5853] openat(AT_FDCWD, "./15", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
[pid  5853] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5853] getdents64(3, 0x5555717466f0 /* 4 entries */, 32768) = 112
[pid  5853] umount2("./15/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5853] newfstatat(AT_FDCWD, "./15/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5853] unlink("./15/binderfs")     = 0
[  215.259498][ T5853] JFS: metapage_get_blocks failed
[pid  5853] umount2("./15/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0
[pid  5853] umount2("./15/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5853] newfstatat(AT_FDCWD, "./15/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5853] umount2("./15/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5853] openat(AT_FDCWD, "./15/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
[pid  5853] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5853] getdents64(4, 0x55557174e730 /* 2 entries */, 32768) = 48
[pid  5853] getdents64(4, 0x55557174e730 /* 0 entries */, 32768) = 0
[pid  5853] close(4)                    = 0
[pid  5853] rmdir("./15/file0")         = 0
[pid  5853] getdents64(3, 0x5555717466f0 /* 0 entries */, 32768) = 0
[pid  5853] close(3)                    = 0
[pid  5853] rmdir("./15")               = 0
[pid  5853] mkdir("./16", 0777)         = 0
[pid  5853] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3
[pid  5853] ioctl(3, LOOP_CLR_FD)       = 0
[pid  5853] close(3)                    = 0
[pid  5853] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5912 attached
, child_tidptr=0x555571745650) = 5912
[pid  5912] set_robust_list(0x555571745660, 24) = 0
[pid  5912] chdir("./16")               = 0
[pid  5912] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5912] setpgid(0, 0)               = 0
[pid  5912] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5912] write(3, "1000", 4)         = 4
[pid  5912] close(3)                    = 0
[pid  5912] symlink("/dev/binderfs", "./binderfs") = 0
executing program
[pid  5912] write(1, "executing program\n", 18) = 18
[pid  5912] memfd_create("syzkaller", 0) = 3
[pid  5912] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7f07800000
[pid  5912] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216
[pid  5912] munmap(0x7f7f07800000, 138412032) = 0
[pid  5912] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4
[pid  5912] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5912] close(3)                    = 0
[pid  5912] close(4)                    = 0
[pid  5912] mkdir("./file0", 0777)      = 0
[pid  5912] mount("/dev/loop5", "./file0", "jfs", MS_LAZYTIME, "") = 0
[pid  5912] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5912] chdir("./file0")            = 0
[  216.171095][ T5912] loop5: detected capacity change from 0 to 32768
[pid  5912] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy)
[pid  5912] symlink("./file0/file0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0
[pid  5912] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL) = -1 EINVAL (Invalid argument)
[pid  5912] exit_group(0)               = ?
[pid  5912] +++ exited with 0 +++
[pid  5853] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5912, si_uid=0, si_status=0, si_utime=0, si_stime=20 /* 0.20 s */} ---
[pid  5853] restart_syscall(<... resuming interrupted clone ...>) = 0
[pid  5853] umount2("./16", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5853] openat(AT_FDCWD, "./16", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
[pid  5853] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[  216.236635][  T114] blkno = 5002c, nblocks = 1
[  216.241267][  T114] ERROR: (device loop5): dbUpdatePMap: blocks are outside the map
[  216.241267][  T114] 
[  216.252108][  T114] ERROR: (device loop5): remounting filesystem as read-only
[  216.260531][ T5912] JFS: metapage_get_blocks failed
[pid  5853] getdents64(3, 0x5555717466f0 /* 4 entries */, 32768) = 112
[pid  5853] umount2("./16/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5853] newfstatat(AT_FDCWD, "./16/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5853] unlink("./16/binderfs")     = 0
[pid  5853] umount2("./16/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0
[pid  5853] umount2("./16/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5853] newfstatat(AT_FDCWD, "./16/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5853] umount2("./16/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5853] openat(AT_FDCWD, "./16/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
[pid  5853] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5853] getdents64(4, 0x55557174e730 /* 2 entries */, 32768) = 48
[pid  5853] getdents64(4, 0x55557174e730 /* 0 entries */, 32768) = 0
[pid  5853] close(4)                    = 0
[pid  5853] rmdir("./16/file0")         = 0
[pid  5853] getdents64(3, 0x5555717466f0 /* 0 entries */, 32768) = 0
[pid  5853] close(3)                    = 0
[pid  5853] rmdir("./16")               = 0
[pid  5853] mkdir("./17", 0777)         = 0
[pid  5853] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3
[pid  5853] ioctl(3, LOOP_CLR_FD)       = 0
[pid  5853] close(3)                    = 0
[pid  5853] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5913 attached
, child_tidptr=0x555571745650) = 5913
[pid  5913] set_robust_list(0x555571745660, 24) = 0
[pid  5913] chdir("./17")               = 0
[pid  5913] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5913] setpgid(0, 0)               = 0
[pid  5913] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5913] write(3, "1000", 4)         = 4
[pid  5913] close(3)                    = 0
[pid  5913] symlink("/dev/binderfs", "./binderfs") = 0
executing program
[pid  5913] write(1, "executing program\n", 18) = 18
[pid  5913] memfd_create("syzkaller", 0) = 3
[pid  5913] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7f07800000
[pid  5913] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216
[pid  5913] munmap(0x7f7f07800000, 138412032) = 0
[pid  5913] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4
[pid  5913] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5913] close(3)                    = 0
[pid  5913] close(4)                    = 0
[pid  5913] mkdir("./file0", 0777)      = 0
[pid  5913] mount("/dev/loop5", "./file0", "jfs", MS_LAZYTIME, "") = 0
[pid  5913] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5913] chdir("./file0")            = 0
[pid  5913] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy)
[pid  5913] symlink("./file0/file0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0
[  216.950836][ T5913] loop5: detected capacity change from 0 to 32768
[pid  5913] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL) = 0
[pid  5913] exit_group(0)               = ?
[pid  5913] +++ exited with 0 +++
[pid  5853] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5913, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=21 /* 0.21 s */} ---
[pid  5853] restart_syscall(<... resuming interrupted clone ...>) = 0
[pid  5853] umount2("./17", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5853] openat(AT_FDCWD, "./17", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
[  217.008426][  T113] blkno = 5002c, nblocks = 1
[  217.013666][  T113] ERROR: (device loop5): dbUpdatePMap: blocks are outside the map
[  217.013666][  T113] 
[  217.025718][  T113] ERROR: (device loop5): remounting filesystem as read-only
[pid  5853] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5853] getdents64(3, 0x5555717466f0 /* 4 entries */, 32768) = 112
[pid  5853] umount2("./17/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5853] newfstatat(AT_FDCWD, "./17/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5853] unlink("./17/binderfs")     = 0
[  217.142614][ T5853] JFS: metapage_get_blocks failed
[pid  5853] umount2("./17/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0
[pid  5853] umount2("./17/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5853] newfstatat(AT_FDCWD, "./17/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5853] umount2("./17/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5853] openat(AT_FDCWD, "./17/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
[pid  5853] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5853] getdents64(4, 0x55557174e730 /* 2 entries */, 32768) = 48
[pid  5853] getdents64(4, 0x55557174e730 /* 0 entries */, 32768) = 0
[pid  5853] close(4)                    = 0
[pid  5853] rmdir("./17/file0")         = 0
[pid  5853] getdents64(3, 0x5555717466f0 /* 0 entries */, 32768) = 0
[pid  5853] close(3)                    = 0
[pid  5853] rmdir("./17")               = 0
[pid  5853] mkdir("./18", 0777)         = 0
[pid  5853] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3
[pid  5853] ioctl(3, LOOP_CLR_FD)       = 0
[pid  5853] close(3)                    = 0
[pid  5853] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5914 attached
, child_tidptr=0x555571745650) = 5914
[pid  5914] set_robust_list(0x555571745660, 24) = 0
[pid  5914] chdir("./18")               = 0
[pid  5914] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5914] setpgid(0, 0)               = 0
[pid  5914] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5914] write(3, "1000", 4)         = 4
[pid  5914] close(3)                    = 0
[pid  5914] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5914] write(1, "executing program\n", 18executing program
) = 18
[pid  5914] memfd_create("syzkaller", 0) = 3
[pid  5914] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7f07800000
[pid  5914] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216
[pid  5914] munmap(0x7f7f07800000, 138412032) = 0
[pid  5914] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4
[pid  5914] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5914] close(3)                    = 0
[pid  5914] close(4)                    = 0
[pid  5914] mkdir("./file0", 0777)      = 0
[pid  5914] mount("/dev/loop5", "./file0", "jfs", MS_LAZYTIME, "") = 0
[pid  5914] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5914] chdir("./file0")            = 0
[pid  5914] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy)
[pid  5914] symlink("./file0/file0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0
[  218.006189][ T5914] loop5: detected capacity change from 0 to 32768
[pid  5914] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL) = 0
[pid  5914] exit_group(0)               = ?
[pid  5914] +++ exited with 0 +++
[pid  5853] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5914, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=19 /* 0.19 s */} ---
[pid  5853] restart_syscall(<... resuming interrupted clone ...>) = 0
[pid  5853] umount2("./18", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5853] openat(AT_FDCWD, "./18", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
[pid  5853] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[  218.063548][  T114] blkno = 5002c, nblocks = 1
[  218.069200][  T114] ERROR: (device loop5): dbUpdatePMap: blocks are outside the map
[  218.069200][  T114] 
[  218.080003][  T114] ERROR: (device loop5): remounting filesystem as read-only
[pid  5853] getdents64(3, 0x5555717466f0 /* 4 entries */, 32768) = 112
[pid  5853] umount2("./18/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5853] newfstatat(AT_FDCWD, "./18/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5853] unlink("./18/binderfs")     = 0
[  218.177003][ T5853] JFS: metapage_get_blocks failed
[pid  5853] umount2("./18/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0
[pid  5853] umount2("./18/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5853] newfstatat(AT_FDCWD, "./18/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5853] umount2("./18/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5853] openat(AT_FDCWD, "./18/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
[pid  5853] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5853] getdents64(4, 0x55557174e730 /* 2 entries */, 32768) = 48
[pid  5853] getdents64(4, 0x55557174e730 /* 0 entries */, 32768) = 0
[pid  5853] close(4)                    = 0
[pid  5853] rmdir("./18/file0")         = 0
[pid  5853] getdents64(3, 0x5555717466f0 /* 0 entries */, 32768) = 0
[pid  5853] close(3)                    = 0
[pid  5853] rmdir("./18")               = 0
[pid  5853] mkdir("./19", 0777)         = 0
[pid  5853] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3
[pid  5853] ioctl(3, LOOP_CLR_FD)       = 0
[pid  5853] close(3)                    = 0
[pid  5853] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5915 attached
, child_tidptr=0x555571745650) = 5915
[pid  5915] set_robust_list(0x555571745660, 24) = 0
[pid  5915] chdir("./19")               = 0
[pid  5915] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5915] setpgid(0, 0)               = 0
[pid  5915] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5915] write(3, "1000", 4)         = 4
[pid  5915] close(3)                    = 0
[pid  5915] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5915] write(1, "executing program\n", 18executing program
) = 18
[pid  5915] memfd_create("syzkaller", 0) = 3
[pid  5915] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7f07800000
[pid  5915] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216
[pid  5915] munmap(0x7f7f07800000, 138412032) = 0
[pid  5915] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4
[pid  5915] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5915] close(3)                    = 0
[pid  5915] close(4)                    = 0
[pid  5915] mkdir("./file0", 0777)      = 0
[pid  5915] mount("/dev/loop5", "./file0", "jfs", MS_LAZYTIME, "") = 0
[pid  5915] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[  219.037012][ T5915] loop5: detected capacity change from 0 to 32768
[pid  5915] chdir("./file0")            = 0
[pid  5915] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy)
[pid  5915] symlink("./file0/file0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0
[pid  5915] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL) = 0
[pid  5915] exit_group(0)               = ?
[pid  5915] +++ exited with 0 +++
[pid  5853] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5915, si_uid=0, si_status=0, si_utime=0, si_stime=25 /* 0.25 s */} ---
[pid  5853] restart_syscall(<... resuming interrupted clone ...>) = 0
[pid  5853] umount2("./19", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5853] openat(AT_FDCWD, "./19", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
[pid  5853] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5853] getdents64(3, 0x5555717466f0 /* 4 entries */, 32768) = 112
[pid  5853] umount2("./19/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5853] newfstatat(AT_FDCWD, "./19/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5853] unlink("./19/binderfs")     = 0
[  219.136297][  T114] blkno = 5002c, nblocks = 1
[  219.141228][  T114] ERROR: (device loop5): dbUpdatePMap: blocks are outside the map
[  219.141228][  T114] 
[  219.151981][  T114] ERROR: (device loop5): remounting filesystem as read-only
[  219.167158][ T5853] JFS: metapage_get_blocks failed
[pid  5853] umount2("./19/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0
[pid  5853] umount2("./19/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5853] newfstatat(AT_FDCWD, "./19/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5853] umount2("./19/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5853] openat(AT_FDCWD, "./19/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
[pid  5853] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5853] getdents64(4, 0x55557174e730 /* 2 entries */, 32768) = 48
[pid  5853] getdents64(4, 0x55557174e730 /* 0 entries */, 32768) = 0
[pid  5853] close(4)                    = 0
[pid  5853] rmdir("./19/file0")         = 0
[pid  5853] getdents64(3, 0x5555717466f0 /* 0 entries */, 32768) = 0
[pid  5853] close(3)                    = 0
[pid  5853] rmdir("./19")               = 0
[pid  5853] mkdir("./20", 0777)         = 0
[pid  5853] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3
[pid  5853] ioctl(3, LOOP_CLR_FD)       = 0
[pid  5853] close(3)                    = 0
[pid  5853] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5916 attached
, child_tidptr=0x555571745650) = 5916
[pid  5916] set_robust_list(0x555571745660, 24) = 0
[pid  5916] chdir("./20")               = 0
[pid  5916] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5916] setpgid(0, 0)               = 0
[pid  5916] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5916] write(3, "1000", 4)         = 4
[pid  5916] close(3)                    = 0
[pid  5916] symlink("/dev/binderfs", "./binderfs") = 0
executing program
[pid  5916] write(1, "executing program\n", 18) = 18
[pid  5916] memfd_create("syzkaller", 0) = 3
[pid  5916] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7f07800000
[pid  5916] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216
[pid  5916] munmap(0x7f7f07800000, 138412032) = 0
[pid  5916] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4
[pid  5916] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5916] close(3)                    = 0
[pid  5916] close(4)                    = 0
[pid  5916] mkdir("./file0", 0777)      = 0
[pid  5916] mount("/dev/loop5", "./file0", "jfs", MS_LAZYTIME, "") = 0
[pid  5916] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5916] chdir("./file0")            = 0
[pid  5916] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy)
[pid  5916] symlink("./file0/file0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0
[  220.018723][ T5916] loop5: detected capacity change from 0 to 32768
[pid  5916] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL) = 0
[pid  5916] exit_group(0)               = ?
[pid  5916] +++ exited with 0 +++
[pid  5853] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5916, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=21 /* 0.21 s */} ---
[pid  5853] umount2("./20", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5853] openat(AT_FDCWD, "./20", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
[  220.072537][  T113] blkno = 5002c, nblocks = 1
[  220.079053][  T113] ERROR: (device loop5): dbUpdatePMap: blocks are outside the map
[  220.079053][  T113] 
[  220.089945][  T113] ERROR: (device loop5): remounting filesystem as read-only
[pid  5853] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5853] getdents64(3, 0x5555717466f0 /* 4 entries */, 32768) = 112
[pid  5853] umount2("./20/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5853] newfstatat(AT_FDCWD, "./20/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5853] unlink("./20/binderfs")     = 0
[  220.205201][ T5853] JFS: metapage_get_blocks failed
[pid  5853] umount2("./20/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0
[pid  5853] umount2("./20/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5853] newfstatat(AT_FDCWD, "./20/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5853] umount2("./20/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5853] openat(AT_FDCWD, "./20/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
[pid  5853] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5853] getdents64(4, 0x55557174e730 /* 2 entries */, 32768) = 48
[pid  5853] getdents64(4, 0x55557174e730 /* 0 entries */, 32768) = 0
[pid  5853] close(4)                    = 0
[pid  5853] rmdir("./20/file0")         = 0
[pid  5853] getdents64(3, 0x5555717466f0 /* 0 entries */, 32768) = 0
[pid  5853] close(3)                    = 0
[pid  5853] rmdir("./20")               = 0
[pid  5853] mkdir("./21", 0777)         = 0
[pid  5853] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3
[pid  5853] ioctl(3, LOOP_CLR_FD)       = 0
[pid  5853] close(3)                    = 0
[pid  5853] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5917 attached
, child_tidptr=0x555571745650) = 5917
[pid  5917] set_robust_list(0x555571745660, 24) = 0
[pid  5917] chdir("./21")               = 0
[pid  5917] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5917] setpgid(0, 0)               = 0
[pid  5917] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5917] write(3, "1000", 4)         = 4
[pid  5917] close(3)                    = 0
[pid  5917] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5917] write(1, "executing program\n", 18executing program
) = 18
[pid  5917] memfd_create("syzkaller", 0) = 3
[pid  5917] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7f07800000
[pid  5917] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216
[pid  5917] munmap(0x7f7f07800000, 138412032) = 0
[pid  5917] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4
[pid  5917] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5917] close(3)                    = 0
[pid  5917] close(4)                    = 0
[pid  5917] mkdir("./file0", 0777)      = 0
[pid  5917] mount("/dev/loop5", "./file0", "jfs", MS_LAZYTIME, "") = 0
[pid  5917] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5917] chdir("./file0")            = 0
[pid  5917] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy)
[  221.060067][ T5917] loop5: detected capacity change from 0 to 32768
[pid  5917] symlink("./file0/file0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0
[pid  5917] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL) = 0
[pid  5917] exit_group(0)               = ?
[pid  5917] +++ exited with 0 +++
[pid  5853] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5917, si_uid=0, si_status=0, si_utime=0, si_stime=21 /* 0.21 s */} ---
[pid  5853] restart_syscall(<... resuming interrupted clone ...>) = 0
[pid  5853] umount2("./21", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[  221.125373][  T114] blkno = 5002c, nblocks = 1
[  221.130020][  T114] ERROR: (device loop5): dbUpdatePMap: blocks are outside the map
[  221.130020][  T114] 
[  221.140511][  T114] ERROR: (device loop5): remounting filesystem as read-only
[pid  5853] openat(AT_FDCWD, "./21", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
[pid  5853] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5853] getdents64(3, 0x5555717466f0 /* 4 entries */, 32768) = 112
[pid  5853] umount2("./21/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5853] newfstatat(AT_FDCWD, "./21/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5853] unlink("./21/binderfs")     = 0
[  221.280017][ T5853] JFS: metapage_get_blocks failed
[pid  5853] umount2("./21/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0
[pid  5853] umount2("./21/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5853] newfstatat(AT_FDCWD, "./21/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5853] umount2("./21/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5853] openat(AT_FDCWD, "./21/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
[pid  5853] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5853] getdents64(4, 0x55557174e730 /* 2 entries */, 32768) = 48
[pid  5853] getdents64(4, 0x55557174e730 /* 0 entries */, 32768) = 0
[pid  5853] close(4)                    = 0
[pid  5853] rmdir("./21/file0")         = 0
[pid  5853] getdents64(3, 0x5555717466f0 /* 0 entries */, 32768) = 0
[pid  5853] close(3)                    = 0
[pid  5853] rmdir("./21")               = 0
[pid  5853] mkdir("./22", 0777)         = 0
[pid  5853] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3
[pid  5853] ioctl(3, LOOP_CLR_FD)       = 0
[pid  5853] close(3)                    = 0
[pid  5853] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5918 attached
, child_tidptr=0x555571745650) = 5918
[pid  5918] set_robust_list(0x555571745660, 24) = 0
[pid  5918] chdir("./22")               = 0
[pid  5918] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5918] setpgid(0, 0)               = 0
[pid  5918] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5918] write(3, "1000", 4)         = 4
[pid  5918] close(3)                    = 0
[pid  5918] symlink("/dev/binderfs", "./binderfs") = 0
executing program
[pid  5918] write(1, "executing program\n", 18) = 18
[pid  5918] memfd_create("syzkaller", 0) = 3
[pid  5918] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7f07800000
[pid  5918] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216
[pid  5918] munmap(0x7f7f07800000, 138412032) = 0
[pid  5918] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4
[pid  5918] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5918] close(3)                    = 0
[pid  5918] close(4)                    = 0
[pid  5918] mkdir("./file0", 0777)      = 0
[pid  5918] mount("/dev/loop5", "./file0", "jfs", MS_LAZYTIME, "") = 0
[pid  5918] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[  222.139328][ T5918] loop5: detected capacity change from 0 to 32768
[pid  5918] chdir("./file0")            = 0
[pid  5918] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy)
[pid  5918] symlink("./file0/file0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0
[pid  5918] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL) = -1 EINVAL (Invalid argument)
[pid  5918] exit_group(0)               = ?
[pid  5918] +++ exited with 0 +++
[pid  5853] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5918, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=20 /* 0.20 s */} ---
[pid  5853] restart_syscall(<... resuming interrupted clone ...>) = 0
[pid  5853] umount2("./22", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5853] openat(AT_FDCWD, "./22", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
[  222.230477][  T113] blkno = 5002c, nblocks = 1
[  222.235200][  T113] ERROR: (device loop5): dbUpdatePMap: blocks are outside the map
[  222.235200][  T113] 
[  222.245489][  T113] ERROR: (device loop5): remounting filesystem as read-only
[  222.253579][ T5918] JFS: metapage_get_blocks failed
[pid  5853] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5853] getdents64(3, 0x5555717466f0 /* 4 entries */, 32768) = 112
[pid  5853] umount2("./22/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5853] newfstatat(AT_FDCWD, "./22/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5853] unlink("./22/binderfs")     = 0
[pid  5853] umount2("./22/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0
[pid  5853] umount2("./22/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5853] newfstatat(AT_FDCWD, "./22/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5853] umount2("./22/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5853] openat(AT_FDCWD, "./22/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
[pid  5853] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5853] getdents64(4, 0x55557174e730 /* 2 entries */, 32768) = 48
[pid  5853] getdents64(4, 0x55557174e730 /* 0 entries */, 32768) = 0
[pid  5853] close(4)                    = 0
[pid  5853] rmdir("./22/file0")         = 0
[pid  5853] getdents64(3, 0x5555717466f0 /* 0 entries */, 32768) = 0
[pid  5853] close(3)                    = 0
[pid  5853] rmdir("./22")               = 0
[pid  5853] mkdir("./23", 0777)         = 0
[pid  5853] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3
[pid  5853] ioctl(3, LOOP_CLR_FD)       = 0
[pid  5853] close(3)                    = 0
[pid  5853] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5919 attached
, child_tidptr=0x555571745650) = 5919
[pid  5919] set_robust_list(0x555571745660, 24) = 0
[pid  5919] chdir("./23")               = 0
[pid  5919] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5919] setpgid(0, 0)               = 0
[pid  5919] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5919] write(3, "1000", 4)         = 4
[pid  5919] close(3)                    = 0
[pid  5919] symlink("/dev/binderfs", "./binderfs") = 0
executing program
[pid  5919] write(1, "executing program\n", 18) = 18
[pid  5919] memfd_create("syzkaller", 0) = 3
[pid  5919] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7f07800000
[pid  5919] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216
[pid  5919] munmap(0x7f7f07800000, 138412032) = 0
[pid  5919] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4
[pid  5919] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5919] close(3)                    = 0
[pid  5919] close(4)                    = 0
[pid  5919] mkdir("./file0", 0777)      = 0
[pid  5919] mount("/dev/loop5", "./file0", "jfs", MS_LAZYTIME, "") = 0
[  222.851690][ T5919] loop5: detected capacity change from 0 to 32768
[pid  5919] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5919] chdir("./file0")            = 0
[pid  5919] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy)
[pid  5919] symlink("./file0/file0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0
[pid  5919] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL) = -1 EINVAL (Invalid argument)
[pid  5919] exit_group(0)               = ?
[pid  5919] +++ exited with 0 +++
[pid  5853] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5919, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=21 /* 0.21 s */} ---
[pid  5853] restart_syscall(<... resuming interrupted clone ...>) = 0
[pid  5853] umount2("./23", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5853] openat(AT_FDCWD, "./23", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
[pid  5853] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5853] getdents64(3, 0x5555717466f0 /* 4 entries */, 32768) = 112
[  222.957022][  T114] blkno = 5002c, nblocks = 1
[  222.961675][  T114] ERROR: (device loop5): dbUpdatePMap: blocks are outside the map
[  222.961675][  T114] 
[  222.972115][  T114] ERROR: (device loop5): remounting filesystem as read-only
[  222.979914][ T5919] JFS: metapage_get_blocks failed
[pid  5853] umount2("./23/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5853] newfstatat(AT_FDCWD, "./23/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5853] unlink("./23/binderfs")     = 0
[pid  5853] umount2("./23/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0
[pid  5853] umount2("./23/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5853] newfstatat(AT_FDCWD, "./23/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5853] umount2("./23/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5853] openat(AT_FDCWD, "./23/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
[pid  5853] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5853] getdents64(4, 0x55557174e730 /* 2 entries */, 32768) = 48
[pid  5853] getdents64(4, 0x55557174e730 /* 0 entries */, 32768) = 0
[pid  5853] close(4)                    = 0
[pid  5853] rmdir("./23/file0")         = 0
[pid  5853] getdents64(3, 0x5555717466f0 /* 0 entries */, 32768) = 0
[pid  5853] close(3)                    = 0
[pid  5853] rmdir("./23")               = 0
[pid  5853] mkdir("./24", 0777)         = 0
[pid  5853] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3
[pid  5853] ioctl(3, LOOP_CLR_FD)       = 0
[pid  5853] close(3)                    = 0
[pid  5853] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5920 attached
, child_tidptr=0x555571745650) = 5920
[pid  5920] set_robust_list(0x555571745660, 24) = 0
[pid  5920] chdir("./24")               = 0
[pid  5920] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5920] setpgid(0, 0)               = 0
[pid  5920] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5920] write(3, "1000", 4)         = 4
[pid  5920] close(3)                    = 0
[pid  5920] symlink("/dev/binderfs", "./binderfs") = 0
executing program
[pid  5920] write(1, "executing program\n", 18) = 18
[pid  5920] memfd_create("syzkaller", 0) = 3
[pid  5920] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7f07800000
[pid  5920] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216
[pid  5920] munmap(0x7f7f07800000, 138412032) = 0
[pid  5920] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4
[pid  5920] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5920] close(3)                    = 0
[pid  5920] close(4)                    = 0
[pid  5920] mkdir("./file0", 0777)      = 0
[pid  5920] mount("/dev/loop5", "./file0", "jfs", MS_LAZYTIME, "") = 0
[pid  5920] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5920] chdir("./file0")            = 0
[pid  5920] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy)
[pid  5920] symlink("./file0/file0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0
[  223.495396][ T5920] loop5: detected capacity change from 0 to 32768
[  223.533660][  T113] blkno = 5002c, nblocks = 1
[pid  5920] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL) = 0
[pid  5920] exit_group(0)               = ?
[pid  5920] +++ exited with 0 +++
[pid  5853] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5920, si_uid=0, si_status=0, si_utime=0, si_stime=23 /* 0.23 s */} ---
[pid  5853] restart_syscall(<... resuming interrupted clone ...>) = 0
[pid  5853] umount2("./24", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5853] openat(AT_FDCWD, "./24", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
[pid  5853] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5853] getdents64(3, 0x5555717466f0 /* 4 entries */, 32768) = 112
[pid  5853] umount2("./24/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5853] newfstatat(AT_FDCWD, "./24/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5853] unlink("./24/binderfs")     = 0
[  223.538336][  T113] ERROR: (device loop5): dbUpdatePMap: blocks are outside the map
[  223.538336][  T113] 
[  223.550191][  T113] ERROR: (device loop5): remounting filesystem as read-only
[  223.572091][ T5853] JFS: metapage_get_blocks failed
[pid  5853] umount2("./24/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0
[pid  5853] umount2("./24/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5853] newfstatat(AT_FDCWD, "./24/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5853] umount2("./24/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5853] openat(AT_FDCWD, "./24/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
[pid  5853] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5853] getdents64(4, 0x55557174e730 /* 2 entries */, 32768) = 48
[pid  5853] getdents64(4, 0x55557174e730 /* 0 entries */, 32768) = 0
[pid  5853] close(4)                    = 0
[pid  5853] rmdir("./24/file0")         = 0
[pid  5853] getdents64(3, 0x5555717466f0 /* 0 entries */, 32768) = 0
[pid  5853] close(3)                    = 0
[pid  5853] rmdir("./24")               = 0
[pid  5853] mkdir("./25", 0777)         = 0
[pid  5853] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3
[pid  5853] ioctl(3, LOOP_CLR_FD)       = 0
[pid  5853] close(3)                    = 0
[pid  5853] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5921 attached
, child_tidptr=0x555571745650) = 5921
[pid  5921] set_robust_list(0x555571745660, 24) = 0
[pid  5921] chdir("./25")               = 0
[pid  5921] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5921] setpgid(0, 0)               = 0
[pid  5921] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5921] write(3, "1000", 4)         = 4
[pid  5921] close(3)                    = 0
[pid  5921] symlink("/dev/binderfs", "./binderfs") = 0
executing program
[pid  5921] write(1, "executing program\n", 18) = 18
[pid  5921] memfd_create("syzkaller", 0) = 3
[pid  5921] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7f07800000
[pid  5921] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216
[pid  5921] munmap(0x7f7f07800000, 138412032) = 0
[pid  5921] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4
[pid  5921] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5921] close(3)                    = 0
[pid  5921] close(4)                    = 0
[pid  5921] mkdir("./file0", 0777)      = 0
[pid  5921] mount("/dev/loop5", "./file0", "jfs", MS_LAZYTIME, "") = 0
[pid  5921] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5921] chdir("./file0")            = 0
[pid  5921] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy)
[  224.417009][ T5921] loop5: detected capacity change from 0 to 32768
[pid  5921] symlink("./file0/file0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0
[pid  5921] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL) = 0
[pid  5921] exit_group(0)               = ?
[pid  5921] +++ exited with 0 +++
[pid  5853] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5921, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=20 /* 0.20 s */} ---
[pid  5853] restart_syscall(<... resuming interrupted clone ...>) = 0
[pid  5853] umount2("./25", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5853] openat(AT_FDCWD, "./25", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
[pid  5853] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5853] getdents64(3, 0x5555717466f0 /* 4 entries */, 32768) = 112
[  224.480864][  T114] blkno = 5002c, nblocks = 1
[  224.489092][  T114] ERROR: (device loop5): dbUpdatePMap: blocks are outside the map
[  224.489092][  T114] 
[  224.500037][  T114] ERROR: (device loop5): remounting filesystem as read-only
[pid  5853] umount2("./25/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5853] newfstatat(AT_FDCWD, "./25/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5853] unlink("./25/binderfs")     = 0
[  224.592900][ T5853] JFS: metapage_get_blocks failed
[pid  5853] umount2("./25/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0
[pid  5853] umount2("./25/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5853] newfstatat(AT_FDCWD, "./25/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5853] umount2("./25/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5853] openat(AT_FDCWD, "./25/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
[pid  5853] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5853] getdents64(4, 0x55557174e730 /* 2 entries */, 32768) = 48
[pid  5853] getdents64(4, 0x55557174e730 /* 0 entries */, 32768) = 0
[pid  5853] close(4)                    = 0
[pid  5853] rmdir("./25/file0")         = 0
[pid  5853] getdents64(3, 0x5555717466f0 /* 0 entries */, 32768) = 0
[pid  5853] close(3)                    = 0
[pid  5853] rmdir("./25")               = 0
[pid  5853] mkdir("./26", 0777)         = 0
[pid  5853] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3
[pid  5853] ioctl(3, LOOP_CLR_FD)       = 0
[pid  5853] close(3)                    = 0
[pid  5853] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5922 attached
, child_tidptr=0x555571745650) = 5922
[pid  5922] set_robust_list(0x555571745660, 24) = 0
[pid  5922] chdir("./26")               = 0
[pid  5922] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5922] setpgid(0, 0)               = 0
[pid  5922] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5922] write(3, "1000", 4)         = 4
[pid  5922] close(3)                    = 0
[pid  5922] symlink("/dev/binderfs", "./binderfs") = 0
executing program
[pid  5922] write(1, "executing program\n", 18) = 18
[pid  5922] memfd_create("syzkaller", 0) = 3
[pid  5922] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7f07800000
[pid  5922] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216
[pid  5922] munmap(0x7f7f07800000, 138412032) = 0
[pid  5922] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4
[pid  5922] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5922] close(3)                    = 0
[pid  5922] close(4)                    = 0
[pid  5922] mkdir("./file0", 0777)      = 0
[pid  5922] mount("/dev/loop5", "./file0", "jfs", MS_LAZYTIME, "") = 0
[pid  5922] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5922] chdir("./file0")            = 0
[pid  5922] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy)
[pid  5922] symlink("./file0/file0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0
[  225.482013][ T5922] loop5: detected capacity change from 0 to 32768
[pid  5922] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL) = 0
[pid  5922] exit_group(0)               = ?
[pid  5922] +++ exited with 0 +++
[pid  5853] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5922, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=18 /* 0.18 s */} ---
[pid  5853] restart_syscall(<... resuming interrupted clone ...>) = 0
[pid  5853] umount2("./26", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5853] openat(AT_FDCWD, "./26", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
[  225.537321][  T113] blkno = 5002c, nblocks = 1
[  225.542149][  T113] ERROR: (device loop5): dbUpdatePMap: blocks are outside the map
[  225.542149][  T113] 
[  225.552975][  T113] ERROR: (device loop5): remounting filesystem as read-only
[pid  5853] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5853] getdents64(3, 0x5555717466f0 /* 4 entries */, 32768) = 112
[pid  5853] umount2("./26/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5853] newfstatat(AT_FDCWD, "./26/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5853] unlink("./26/binderfs")     = 0
[  225.670925][ T5853] JFS: metapage_get_blocks failed
[pid  5853] umount2("./26/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0
[pid  5853] umount2("./26/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5853] newfstatat(AT_FDCWD, "./26/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5853] umount2("./26/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5853] openat(AT_FDCWD, "./26/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
[pid  5853] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5853] getdents64(4, 0x55557174e730 /* 2 entries */, 32768) = 48
[pid  5853] getdents64(4, 0x55557174e730 /* 0 entries */, 32768) = 0
[pid  5853] close(4)                    = 0
[pid  5853] rmdir("./26/file0")         = 0
[pid  5853] getdents64(3, 0x5555717466f0 /* 0 entries */, 32768) = 0
[pid  5853] close(3)                    = 0
[pid  5853] rmdir("./26")               = 0
[pid  5853] mkdir("./27", 0777)         = 0
[pid  5853] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3
[pid  5853] ioctl(3, LOOP_CLR_FD)       = 0
[pid  5853] close(3)                    = 0
[pid  5853] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5923 attached
, child_tidptr=0x555571745650) = 5923
[pid  5923] set_robust_list(0x555571745660, 24) = 0
[pid  5923] chdir("./27")               = 0
[pid  5923] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5923] setpgid(0, 0)               = 0
[pid  5923] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5923] write(3, "1000", 4)         = 4
[pid  5923] close(3)                    = 0
[pid  5923] symlink("/dev/binderfs", "./binderfs") = 0
executing program
[pid  5923] write(1, "executing program\n", 18) = 18
[pid  5923] memfd_create("syzkaller", 0) = 3
[pid  5923] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7f07800000
[pid  5923] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216
[pid  5923] munmap(0x7f7f07800000, 138412032) = 0
[pid  5923] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4
[pid  5923] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5923] close(3)                    = 0
[pid  5923] close(4)                    = 0
[pid  5923] mkdir("./file0", 0777)      = 0
[pid  5923] mount("/dev/loop5", "./file0", "jfs", MS_LAZYTIME, "") = 0
[pid  5923] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[  226.530988][ T5923] loop5: detected capacity change from 0 to 32768
[pid  5923] chdir("./file0")            = 0
[pid  5923] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy)
[pid  5923] symlink("./file0/file0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0
[pid  5923] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL) = 0
[pid  5923] exit_group(0)               = ?
[pid  5923] +++ exited with 0 +++
[pid  5853] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5923, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=18 /* 0.18 s */} ---
[pid  5853] restart_syscall(<... resuming interrupted clone ...>) = 0
[pid  5853] umount2("./27", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5853] openat(AT_FDCWD, "./27", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
[pid  5853] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5853] getdents64(3, 0x5555717466f0 /* 4 entries */, 32768) = 112
[  226.596947][  T113] blkno = 5002c, nblocks = 1
[  226.601589][  T113] ERROR: (device loop5): dbUpdatePMap: blocks are outside the map
[  226.601589][  T113] 
[  226.612582][  T113] ERROR: (device loop5): remounting filesystem as read-only
[pid  5853] umount2("./27/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5853] newfstatat(AT_FDCWD, "./27/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5853] unlink("./27/binderfs")     = 0
[  226.700477][ T5853] JFS: metapage_get_blocks failed
[pid  5853] umount2("./27/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0
[pid  5853] umount2("./27/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5853] newfstatat(AT_FDCWD, "./27/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5853] umount2("./27/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5853] openat(AT_FDCWD, "./27/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
[pid  5853] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5853] getdents64(4, 0x55557174e730 /* 2 entries */, 32768) = 48
[pid  5853] getdents64(4, 0x55557174e730 /* 0 entries */, 32768) = 0
[pid  5853] close(4)                    = 0
[pid  5853] rmdir("./27/file0")         = 0
[pid  5853] getdents64(3, 0x5555717466f0 /* 0 entries */, 32768) = 0
[pid  5853] close(3)                    = 0
[pid  5853] rmdir("./27")               = 0
[pid  5853] mkdir("./28", 0777)         = 0
[pid  5853] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3
[pid  5853] ioctl(3, LOOP_CLR_FD)       = 0
[pid  5853] close(3)                    = 0
[pid  5853] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5924 attached
, child_tidptr=0x555571745650) = 5924
[pid  5924] set_robust_list(0x555571745660, 24) = 0
[pid  5924] chdir("./28")               = 0
[pid  5924] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5924] setpgid(0, 0)               = 0
[pid  5924] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5924] write(3, "1000", 4)         = 4
[pid  5924] close(3)                    = 0
[pid  5924] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5924] write(1, "executing program\n", 18executing program
) = 18
[pid  5924] memfd_create("syzkaller", 0) = 3
[pid  5924] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7f07800000
[pid  5924] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216
[pid  5924] munmap(0x7f7f07800000, 138412032) = 0
[pid  5924] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4
[pid  5924] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5924] close(3)                    = 0
[pid  5924] close(4)                    = 0
[pid  5924] mkdir("./file0", 0777)      = 0
[pid  5924] mount("/dev/loop5", "./file0", "jfs", MS_LAZYTIME, "") = 0
[pid  5924] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5924] chdir("./file0")            = 0
[pid  5924] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy)
[pid  5924] symlink("./file0/file0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0
[  227.421713][ T5924] loop5: detected capacity change from 0 to 32768
[pid  5924] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL) = 0
[pid  5924] exit_group(0)               = ?
[pid  5924] +++ exited with 0 +++
[pid  5853] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5924, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=21 /* 0.21 s */} ---
[pid  5853] restart_syscall(<... resuming interrupted clone ...>) = 0
[pid  5853] umount2("./28", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5853] openat(AT_FDCWD, "./28", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
[  227.484282][  T113] blkno = 5002c, nblocks = 1
[  227.488971][  T113] ERROR: (device loop5): dbUpdatePMap: blocks are outside the map
[  227.488971][  T113] 
[  227.499790][  T113] ERROR: (device loop5): remounting filesystem as read-only
[pid  5853] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5853] getdents64(3, 0x5555717466f0 /* 4 entries */, 32768) = 112
[pid  5853] umount2("./28/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5853] newfstatat(AT_FDCWD, "./28/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5853] unlink("./28/binderfs")     = 0
[  227.624465][ T5853] JFS: metapage_get_blocks failed
[pid  5853] umount2("./28/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0
[pid  5853] umount2("./28/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5853] newfstatat(AT_FDCWD, "./28/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5853] umount2("./28/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5853] openat(AT_FDCWD, "./28/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
[pid  5853] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5853] getdents64(4, 0x55557174e730 /* 2 entries */, 32768) = 48
[pid  5853] getdents64(4, 0x55557174e730 /* 0 entries */, 32768) = 0
[pid  5853] close(4)                    = 0
[pid  5853] rmdir("./28/file0")         = 0
[pid  5853] getdents64(3, 0x5555717466f0 /* 0 entries */, 32768) = 0
[pid  5853] close(3)                    = 0
[pid  5853] rmdir("./28")               = 0
[pid  5853] mkdir("./29", 0777)         = 0
[pid  5853] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3
[pid  5853] ioctl(3, LOOP_CLR_FD)       = 0
[pid  5853] close(3)                    = 0
[pid  5853] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5925 attached
, child_tidptr=0x555571745650) = 5925
[pid  5925] set_robust_list(0x555571745660, 24) = 0
[pid  5925] chdir("./29")               = 0
[pid  5925] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5925] setpgid(0, 0)               = 0
[pid  5925] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5925] write(3, "1000", 4)         = 4
[pid  5925] close(3)                    = 0
[pid  5925] symlink("/dev/binderfs", "./binderfs") = 0
executing program
[pid  5925] write(1, "executing program\n", 18) = 18
[pid  5925] memfd_create("syzkaller", 0) = 3
[pid  5925] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7f07800000
[pid  5925] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216
[pid  5925] munmap(0x7f7f07800000, 138412032) = 0
[pid  5925] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4
[pid  5925] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5925] close(3)                    = 0
[pid  5925] close(4)                    = 0
[pid  5925] mkdir("./file0", 0777)      = 0
[pid  5925] mount("/dev/loop5", "./file0", "jfs", MS_LAZYTIME, "") = 0
[  228.349089][ T5925] loop5: detected capacity change from 0 to 32768
[pid  5925] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5925] chdir("./file0")            = 0
[pid  5925] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy)
[pid  5925] symlink("./file0/file0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0
[pid  5925] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL) = 0
[pid  5925] exit_group(0)               = ?
[pid  5925] +++ exited with 0 +++
[pid  5853] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5925, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=19 /* 0.19 s */} ---
[pid  5853] restart_syscall(<... resuming interrupted clone ...>) = 0
[pid  5853] umount2("./29", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5853] openat(AT_FDCWD, "./29", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
[pid  5853] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[  228.456094][  T114] blkno = 5002c, nblocks = 1
[  228.460790][  T114] ERROR: (device loop5): dbUpdatePMap: blocks are outside the map
[  228.460790][  T114] 
[  228.471152][  T114] ERROR: (device loop5): remounting filesystem as read-only
[pid  5853] getdents64(3, 0x5555717466f0 /* 4 entries */, 32768) = 112
[pid  5853] umount2("./29/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5853] newfstatat(AT_FDCWD, "./29/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5853] unlink("./29/binderfs")     = 0
[  228.579410][ T5853] JFS: metapage_get_blocks failed
[pid  5853] umount2("./29/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0
[pid  5853] umount2("./29/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5853] newfstatat(AT_FDCWD, "./29/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5853] umount2("./29/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5853] openat(AT_FDCWD, "./29/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
[pid  5853] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5853] getdents64(4, 0x55557174e730 /* 2 entries */, 32768) = 48
[pid  5853] getdents64(4, 0x55557174e730 /* 0 entries */, 32768) = 0
[pid  5853] close(4)                    = 0
[pid  5853] rmdir("./29/file0")         = 0
[pid  5853] getdents64(3, 0x5555717466f0 /* 0 entries */, 32768) = 0
[pid  5853] close(3)                    = 0
[pid  5853] rmdir("./29")               = 0
[pid  5853] mkdir("./30", 0777)         = 0
[pid  5853] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3
[pid  5853] ioctl(3, LOOP_CLR_FD)       = 0
[pid  5853] close(3)                    = 0
[pid  5853] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5926 attached
, child_tidptr=0x555571745650) = 5926
[pid  5926] set_robust_list(0x555571745660, 24) = 0
[pid  5926] chdir("./30")               = 0
[pid  5926] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5926] setpgid(0, 0)               = 0
[pid  5926] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5926] write(3, "1000", 4)         = 4
[pid  5926] close(3)                    = 0
[pid  5926] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5926] write(1, "executing program\n", 18executing program
) = 18
[pid  5926] memfd_create("syzkaller", 0) = 3
[pid  5926] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7f07800000
[pid  5926] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216
[pid  5926] munmap(0x7f7f07800000, 138412032) = 0
[pid  5926] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4
[pid  5926] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5926] close(3)                    = 0
[pid  5926] close(4)                    = 0
[pid  5926] mkdir("./file0", 0777)      = 0
[pid  5926] mount("/dev/loop5", "./file0", "jfs", MS_LAZYTIME, "") = 0
[pid  5926] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5926] chdir("./file0")            = 0
[pid  5926] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy)
[pid  5926] symlink("./file0/file0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0
[  229.449079][ T5926] loop5: detected capacity change from 0 to 32768
[pid  5926] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL) = 0
[pid  5926] exit_group(0)               = ?
[pid  5926] +++ exited with 0 +++
[pid  5853] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5926, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=19 /* 0.19 s */} ---
[pid  5853] umount2("./30", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5853] openat(AT_FDCWD, "./30", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
[pid  5853] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[  229.513977][  T114] blkno = 5002c, nblocks = 1
[  229.518788][  T114] ERROR: (device loop5): dbUpdatePMap: blocks are outside the map
[  229.518788][  T114] 
[  229.530248][  T114] ERROR: (device loop5): remounting filesystem as read-only
[pid  5853] getdents64(3, 0x5555717466f0 /* 4 entries */, 32768) = 112
[pid  5853] umount2("./30/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5853] newfstatat(AT_FDCWD, "./30/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5853] unlink("./30/binderfs")     = 0
[  229.628415][ T5853] JFS: metapage_get_blocks failed
[pid  5853] umount2("./30/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0
[pid  5853] umount2("./30/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5853] newfstatat(AT_FDCWD, "./30/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5853] umount2("./30/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5853] openat(AT_FDCWD, "./30/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
[pid  5853] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5853] getdents64(4, 0x55557174e730 /* 2 entries */, 32768) = 48
[pid  5853] getdents64(4, 0x55557174e730 /* 0 entries */, 32768) = 0
[pid  5853] close(4)                    = 0
[pid  5853] rmdir("./30/file0")         = 0
[pid  5853] getdents64(3, 0x5555717466f0 /* 0 entries */, 32768) = 0
[pid  5853] close(3)                    = 0
[pid  5853] rmdir("./30")               = 0
[pid  5853] mkdir("./31", 0777)         = 0
[pid  5853] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3
[pid  5853] ioctl(3, LOOP_CLR_FD)       = 0
[pid  5853] close(3)                    = 0
[pid  5853] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5927 attached
, child_tidptr=0x555571745650) = 5927
[pid  5927] set_robust_list(0x555571745660, 24) = 0
[pid  5927] chdir("./31")               = 0
[pid  5927] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5927] setpgid(0, 0)               = 0
[pid  5927] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5927] write(3, "1000", 4)         = 4
[pid  5927] close(3)                    = 0
[pid  5927] symlink("/dev/binderfs", "./binderfs") = 0
executing program
[pid  5927] write(1, "executing program\n", 18) = 18
[pid  5927] memfd_create("syzkaller", 0) = 3
[pid  5927] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7f07800000
[pid  5927] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216
[pid  5927] munmap(0x7f7f07800000, 138412032) = 0
[pid  5927] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4
[pid  5927] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5927] close(3)                    = 0
[pid  5927] close(4)                    = 0
[pid  5927] mkdir("./file0", 0777)      = 0
[pid  5927] mount("/dev/loop5", "./file0", "jfs", MS_LAZYTIME, "") = 0
[pid  5927] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5927] chdir("./file0")            = 0
[pid  5927] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy)
[pid  5927] symlink("./file0/file0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0
[  230.498481][ T5927] loop5: detected capacity change from 0 to 32768
[pid  5927] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL) = 0
[pid  5927] exit_group(0)               = ?
[pid  5927] +++ exited with 0 +++
[pid  5853] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5927, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=19 /* 0.19 s */} ---
[  230.550821][  T113] blkno = 5002c, nblocks = 1
[  230.555661][  T113] ERROR: (device loop5): dbUpdatePMap: blocks are outside the map
[  230.555661][  T113] 
[  230.566560][  T113] ERROR: (device loop5): remounting filesystem as read-only
[pid  5853] restart_syscall(<... resuming interrupted clone ...>) = 0
[pid  5853] umount2("./31", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5853] openat(AT_FDCWD, "./31", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
[pid  5853] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5853] getdents64(3, 0x5555717466f0 /* 4 entries */, 32768) = 112
[pid  5853] umount2("./31/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5853] newfstatat(AT_FDCWD, "./31/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5853] unlink("./31/binderfs")     = 0
[  230.715867][ T5853] JFS: metapage_get_blocks failed
[pid  5853] umount2("./31/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0
[pid  5853] umount2("./31/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5853] newfstatat(AT_FDCWD, "./31/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5853] umount2("./31/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5853] openat(AT_FDCWD, "./31/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
[pid  5853] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5853] getdents64(4, 0x55557174e730 /* 2 entries */, 32768) = 48
[pid  5853] getdents64(4, 0x55557174e730 /* 0 entries */, 32768) = 0
[pid  5853] close(4)                    = 0
[pid  5853] rmdir("./31/file0")         = 0
[pid  5853] getdents64(3, 0x5555717466f0 /* 0 entries */, 32768) = 0
[pid  5853] close(3)                    = 0
[pid  5853] rmdir("./31")               = 0
[pid  5853] mkdir("./32", 0777)         = 0
[pid  5853] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3
[pid  5853] ioctl(3, LOOP_CLR_FD)       = 0
[pid  5853] close(3)                    = 0
[pid  5853] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5928 attached
, child_tidptr=0x555571745650) = 5928
[pid  5928] set_robust_list(0x555571745660, 24) = 0
[pid  5928] chdir("./32")               = 0
[pid  5928] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5928] setpgid(0, 0)               = 0
[pid  5928] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5928] write(3, "1000", 4)         = 4
[pid  5928] close(3)                    = 0
[pid  5928] symlink("/dev/binderfs", "./binderfs") = 0
executing program
[pid  5928] write(1, "executing program\n", 18) = 18
[pid  5928] memfd_create("syzkaller", 0) = 3
[pid  5928] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7f07800000
[pid  5928] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216
[pid  5928] munmap(0x7f7f07800000, 138412032) = 0
[pid  5928] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4
[pid  5928] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5928] close(3)                    = 0
[pid  5928] close(4)                    = 0
[pid  5928] mkdir("./file0", 0777)      = 0
[  231.531263][ T5928] loop5: detected capacity change from 0 to 32768
[pid  5928] mount("/dev/loop5", "./file0", "jfs", MS_LAZYTIME, "") = 0
[pid  5928] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5928] chdir("./file0")            = 0
[pid  5928] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy)
[pid  5928] symlink("./file0/file0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0
[pid  5928] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL) = -1 EINVAL (Invalid argument)
[pid  5928] exit_group(0)               = ?
[pid  5928] +++ exited with 0 +++
[pid  5853] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5928, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=21 /* 0.21 s */} ---
[pid  5853] umount2("./32", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[  231.650508][  T114] blkno = 5002c, nblocks = 1
[  231.655228][  T114] ERROR: (device loop5): dbUpdatePMap: blocks are outside the map
[  231.655228][  T114] 
[  231.666094][  T114] ERROR: (device loop5): remounting filesystem as read-only
[  231.673973][ T5928] JFS: metapage_get_blocks failed
[pid  5853] openat(AT_FDCWD, "./32", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
[pid  5853] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5853] getdents64(3, 0x5555717466f0 /* 4 entries */, 32768) = 112
[pid  5853] umount2("./32/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5853] newfstatat(AT_FDCWD, "./32/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5853] unlink("./32/binderfs")     = 0
[pid  5853] umount2("./32/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0
[pid  5853] umount2("./32/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5853] newfstatat(AT_FDCWD, "./32/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5853] umount2("./32/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5853] openat(AT_FDCWD, "./32/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
[pid  5853] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5853] getdents64(4, 0x55557174e730 /* 2 entries */, 32768) = 48
[pid  5853] getdents64(4, 0x55557174e730 /* 0 entries */, 32768) = 0
[pid  5853] close(4)                    = 0
[pid  5853] rmdir("./32/file0")         = 0
[pid  5853] getdents64(3, 0x5555717466f0 /* 0 entries */, 32768) = 0
[pid  5853] close(3)                    = 0
[pid  5853] rmdir("./32")               = 0
[pid  5853] mkdir("./33", 0777)         = 0
[pid  5853] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3
[pid  5853] ioctl(3, LOOP_CLR_FD)       = 0
[pid  5853] close(3)                    = 0
[pid  5853] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5929 attached
, child_tidptr=0x555571745650) = 5929
[pid  5929] set_robust_list(0x555571745660, 24) = 0
[pid  5929] chdir("./33")               = 0
[pid  5929] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5929] setpgid(0, 0)               = 0
[pid  5929] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5929] write(3, "1000", 4)         = 4
[pid  5929] close(3)                    = 0
[pid  5929] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5929] write(1, "executing program\n", 18executing program
) = 18
[pid  5929] memfd_create("syzkaller", 0) = 3
[pid  5929] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7f07800000
[pid  5929] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216
[pid  5929] munmap(0x7f7f07800000, 138412032) = 0
[pid  5929] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4
[pid  5929] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5929] close(3)                    = 0
[pid  5929] close(4)                    = 0
[pid  5929] mkdir("./file0", 0777)      = 0
[pid  5929] mount("/dev/loop5", "./file0", "jfs", MS_LAZYTIME, "") = 0
[pid  5929] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5929] chdir("./file0")            = 0
[pid  5929] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy)
[pid  5929] symlink("./file0/file0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0
[pid  5929] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL) = 0
[  232.233078][ T5929] loop5: detected capacity change from 0 to 32768
[pid  5929] exit_group(0)               = ?
[pid  5929] +++ exited with 0 +++
[pid  5853] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5929, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=20 /* 0.20 s */} ---
[pid  5853] umount2("./33", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5853] openat(AT_FDCWD, "./33", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
[pid  5853] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5853] getdents64(3, 0x5555717466f0 /* 4 entries */, 32768) = 112
[pid  5853] umount2("./33/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5853] newfstatat(AT_FDCWD, "./33/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5853] unlink("./33/binderfs")     = 0
[  232.292487][  T113] blkno = 5002c, nblocks = 1
[  232.297271][  T113] ERROR: (device loop5): dbUpdatePMap: blocks are outside the map
[  232.297271][  T113] 
[  232.308214][  T113] ERROR: (device loop5): remounting filesystem as read-only
[  232.325598][ T5853] JFS: metapage_get_blocks failed
[pid  5853] umount2("./33/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0
[pid  5853] umount2("./33/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5853] newfstatat(AT_FDCWD, "./33/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5853] umount2("./33/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5853] openat(AT_FDCWD, "./33/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
[pid  5853] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5853] getdents64(4, 0x55557174e730 /* 2 entries */, 32768) = 48
[pid  5853] getdents64(4, 0x55557174e730 /* 0 entries */, 32768) = 0
[pid  5853] close(4)                    = 0
[pid  5853] rmdir("./33/file0")         = 0
[pid  5853] getdents64(3, 0x5555717466f0 /* 0 entries */, 32768) = 0
[pid  5853] close(3)                    = 0
[pid  5853] rmdir("./33")               = 0
[pid  5853] mkdir("./34", 0777)         = 0
[pid  5853] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3
[pid  5853] ioctl(3, LOOP_CLR_FD)       = 0
[pid  5853] close(3)                    = 0
[pid  5853] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5930 attached
, child_tidptr=0x555571745650) = 5930
[pid  5930] set_robust_list(0x555571745660, 24) = 0
[pid  5930] chdir("./34")               = 0
[pid  5930] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5930] setpgid(0, 0)               = 0
[pid  5930] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5930] write(3, "1000", 4)         = 4
[pid  5930] close(3)                    = 0
[pid  5930] symlink("/dev/binderfs", "./binderfs") = 0
executing program
[pid  5930] write(1, "executing program\n", 18) = 18
[pid  5930] memfd_create("syzkaller", 0) = 3
[pid  5930] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7f07800000
[pid  5930] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216
[pid  5930] munmap(0x7f7f07800000, 138412032) = 0
[pid  5930] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4
[pid  5930] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5930] close(3)                    = 0
[pid  5930] close(4)                    = 0
[pid  5930] mkdir("./file0", 0777)      = 0
[  233.182878][ T5930] loop5: detected capacity change from 0 to 32768
[pid  5930] mount("/dev/loop5", "./file0", "jfs", MS_LAZYTIME, "") = 0
[pid  5930] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5930] chdir("./file0")            = 0
[pid  5930] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy)
[pid  5930] symlink("./file0/file0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0
[pid  5930] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL) = 0
[pid  5930] exit_group(0)               = ?
[pid  5930] +++ exited with 0 +++
[pid  5853] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5930, si_uid=0, si_status=0, si_utime=0, si_stime=20 /* 0.20 s */} ---
[pid  5853] restart_syscall(<... resuming interrupted clone ...>) = 0
[pid  5853] umount2("./34", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5853] openat(AT_FDCWD, "./34", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
[  233.280235][  T114] blkno = 5002c, nblocks = 1
[  233.285290][  T114] ERROR: (device loop5): dbUpdatePMap: blocks are outside the map
[  233.285290][  T114] 
[  233.296222][  T114] ERROR: (device loop5): remounting filesystem as read-only
[pid  5853] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5853] getdents64(3, 0x5555717466f0 /* 4 entries */, 32768) = 112
[pid  5853] umount2("./34/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5853] newfstatat(AT_FDCWD, "./34/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5853] unlink("./34/binderfs")     = 0
[  233.406752][ T5853] JFS: metapage_get_blocks failed
[pid  5853] umount2("./34/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0
[pid  5853] umount2("./34/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5853] newfstatat(AT_FDCWD, "./34/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5853] umount2("./34/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5853] openat(AT_FDCWD, "./34/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
[pid  5853] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5853] getdents64(4, 0x55557174e730 /* 2 entries */, 32768) = 48
[pid  5853] getdents64(4, 0x55557174e730 /* 0 entries */, 32768) = 0
[pid  5853] close(4)                    = 0
[pid  5853] rmdir("./34/file0")         = 0
[pid  5853] getdents64(3, 0x5555717466f0 /* 0 entries */, 32768) = 0
[pid  5853] close(3)                    = 0
[pid  5853] rmdir("./34")               = 0
[pid  5853] mkdir("./35", 0777)         = 0
[pid  5853] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3
[pid  5853] ioctl(3, LOOP_CLR_FD)       = 0
[pid  5853] close(3)                    = 0
[pid  5853] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5931 attached
, child_tidptr=0x555571745650) = 5931
[pid  5931] set_robust_list(0x555571745660, 24) = 0
[pid  5931] chdir("./35")               = 0
[pid  5931] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5931] setpgid(0, 0)               = 0
[pid  5931] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5931] write(3, "1000", 4)         = 4
[pid  5931] close(3)                    = 0
[pid  5931] symlink("/dev/binderfs", "./binderfs") = 0
executing program
[pid  5931] write(1, "executing program\n", 18) = 18
[pid  5931] memfd_create("syzkaller", 0) = 3
[pid  5931] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7f07800000
[pid  5931] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216
[pid  5931] munmap(0x7f7f07800000, 138412032) = 0
[pid  5931] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4
[pid  5931] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5931] close(3)                    = 0
[pid  5931] close(4)                    = 0
[pid  5931] mkdir("./file0", 0777)      = 0
[pid  5931] mount("/dev/loop5", "./file0", "jfs", MS_LAZYTIME, "") = 0
[pid  5931] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5931] chdir("./file0")            = 0
[  234.270140][ T5931] loop5: detected capacity change from 0 to 32768
[pid  5931] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy)
[pid  5931] symlink("./file0/file0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0
[pid  5931] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL) = 0
[pid  5931] exit_group(0)               = ?
[pid  5931] +++ exited with 0 +++
[pid  5853] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5931, si_uid=0, si_status=0, si_utime=0, si_stime=21 /* 0.21 s */} ---
[pid  5853] restart_syscall(<... resuming interrupted clone ...>) = 0
[pid  5853] umount2("./35", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5853] openat(AT_FDCWD, "./35", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
[pid  5853] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[  234.348141][  T113] blkno = 5002c, nblocks = 1
[  234.352846][  T113] ERROR: (device loop5): dbUpdatePMap: blocks are outside the map
[  234.352846][  T113] 
[  234.365007][  T113] ERROR: (device loop5): remounting filesystem as read-only
[pid  5853] getdents64(3, 0x5555717466f0 /* 4 entries */, 32768) = 112
[pid  5853] umount2("./35/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5853] newfstatat(AT_FDCWD, "./35/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5853] unlink("./35/binderfs")     = 0
[  234.471954][ T5853] JFS: metapage_get_blocks failed
[pid  5853] umount2("./35/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0
[pid  5853] umount2("./35/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5853] newfstatat(AT_FDCWD, "./35/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5853] umount2("./35/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5853] openat(AT_FDCWD, "./35/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
[pid  5853] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5853] getdents64(4, 0x55557174e730 /* 2 entries */, 32768) = 48
[pid  5853] getdents64(4, 0x55557174e730 /* 0 entries */, 32768) = 0
[pid  5853] close(4)                    = 0
[pid  5853] rmdir("./35/file0")         = 0
[pid  5853] getdents64(3, 0x5555717466f0 /* 0 entries */, 32768) = 0
[pid  5853] close(3)                    = 0
[pid  5853] rmdir("./35")               = 0
[pid  5853] mkdir("./36", 0777)         = 0
[pid  5853] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3
[pid  5853] ioctl(3, LOOP_CLR_FD)       = 0
[pid  5853] close(3)                    = 0
[pid  5853] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5932 attached
, child_tidptr=0x555571745650) = 5932
[pid  5932] set_robust_list(0x555571745660, 24) = 0
[pid  5932] chdir("./36")               = 0
[pid  5932] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5932] setpgid(0, 0)               = 0
[pid  5932] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5932] write(3, "1000", 4)         = 4
[pid  5932] close(3)                    = 0
[pid  5932] symlink("/dev/binderfs", "./binderfs") = 0
executing program
[pid  5932] write(1, "executing program\n", 18) = 18
[pid  5932] memfd_create("syzkaller", 0) = 3
[pid  5932] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7f07800000
[pid  5932] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216
[pid  5932] munmap(0x7f7f07800000, 138412032) = 0
[pid  5932] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4
[pid  5932] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5932] close(3)                    = 0
[pid  5932] close(4)                    = 0
[pid  5932] mkdir("./file0", 0777)      = 0
[pid  5932] mount("/dev/loop5", "./file0", "jfs", MS_LAZYTIME, "") = 0
[pid  5932] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5932] chdir("./file0")            = 0
[pid  5932] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy)
[  235.320903][ T5932] loop5: detected capacity change from 0 to 32768
[pid  5932] symlink("./file0/file0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0
[pid  5932] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL) = 0
[pid  5932] exit_group(0)               = ?
[pid  5932] +++ exited with 0 +++
[pid  5853] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5932, si_uid=0, si_status=0, si_utime=0, si_stime=22 /* 0.22 s */} ---
[pid  5853] restart_syscall(<... resuming interrupted clone ...>) = 0
[pid  5853] umount2("./36", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5853] openat(AT_FDCWD, "./36", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
[pid  5853] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[  235.384673][  T114] blkno = 5002c, nblocks = 1
[  235.389352][  T114] ERROR: (device loop5): dbUpdatePMap: blocks are outside the map
[  235.389352][  T114] 
[  235.400251][  T114] ERROR: (device loop5): remounting filesystem as read-only
[pid  5853] getdents64(3, 0x5555717466f0 /* 4 entries */, 32768) = 112
[pid  5853] umount2("./36/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5853] newfstatat(AT_FDCWD, "./36/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5853] unlink("./36/binderfs")     = 0
[  235.508355][ T5853] JFS: metapage_get_blocks failed
[pid  5853] umount2("./36/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0
[pid  5853] umount2("./36/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5853] newfstatat(AT_FDCWD, "./36/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5853] umount2("./36/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5853] openat(AT_FDCWD, "./36/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
[pid  5853] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5853] getdents64(4, 0x55557174e730 /* 2 entries */, 32768) = 48
[pid  5853] getdents64(4, 0x55557174e730 /* 0 entries */, 32768) = 0
[pid  5853] close(4)                    = 0
[pid  5853] rmdir("./36/file0")         = 0
[pid  5853] getdents64(3, 0x5555717466f0 /* 0 entries */, 32768) = 0
[pid  5853] close(3)                    = 0
[pid  5853] rmdir("./36")               = 0
[pid  5853] mkdir("./37", 0777)         = 0
[pid  5853] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3
[pid  5853] ioctl(3, LOOP_CLR_FD)       = 0
[pid  5853] close(3)                    = 0
[pid  5853] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5933 attached
, child_tidptr=0x555571745650) = 5933
[pid  5933] set_robust_list(0x555571745660, 24) = 0
[pid  5933] chdir("./37")               = 0
[pid  5933] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5933] setpgid(0, 0)               = 0
[pid  5933] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5933] write(3, "1000", 4)         = 4
[pid  5933] close(3)                    = 0
[pid  5933] symlink("/dev/binderfs", "./binderfs") = 0
executing program
[pid  5933] write(1, "executing program\n", 18) = 18
[pid  5933] memfd_create("syzkaller", 0) = 3
[pid  5933] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7f07800000
[pid  5933] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216
[pid  5933] munmap(0x7f7f07800000, 138412032) = 0
[pid  5933] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4
[pid  5933] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5933] close(3)                    = 0
[pid  5933] close(4)                    = 0
[pid  5933] mkdir("./file0", 0777)      = 0
[pid  5933] mount("/dev/loop5", "./file0", "jfs", MS_LAZYTIME, "") = 0
[pid  5933] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5933] chdir("./file0")            = 0
[pid  5933] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy)
[pid  5933] symlink("./file0/file0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0
[  236.336437][ T5933] loop5: detected capacity change from 0 to 32768
[pid  5933] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL) = 0
[pid  5933] exit_group(0)               = ?
[pid  5933] +++ exited with 0 +++
[pid  5853] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5933, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=19 /* 0.19 s */} ---
[pid  5853] restart_syscall(<... resuming interrupted clone ...>) = 0
[pid  5853] umount2("./37", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5853] openat(AT_FDCWD, "./37", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
[  236.387116][  T113] blkno = 5002c, nblocks = 1
[  236.391858][  T113] ERROR: (device loop5): dbUpdatePMap: blocks are outside the map
[  236.391858][  T113] 
[  236.402905][  T113] ERROR: (device loop5): remounting filesystem as read-only
[pid  5853] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5853] getdents64(3, 0x5555717466f0 /* 4 entries */, 32768) = 112
[pid  5853] umount2("./37/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5853] newfstatat(AT_FDCWD, "./37/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5853] unlink("./37/binderfs")     = 0
[  236.525499][ T5853] JFS: metapage_get_blocks failed
[pid  5853] umount2("./37/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0
[pid  5853] umount2("./37/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5853] newfstatat(AT_FDCWD, "./37/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5853] umount2("./37/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5853] openat(AT_FDCWD, "./37/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
[pid  5853] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5853] getdents64(4, 0x55557174e730 /* 2 entries */, 32768) = 48
[pid  5853] getdents64(4, 0x55557174e730 /* 0 entries */, 32768) = 0
[pid  5853] close(4)                    = 0
[pid  5853] rmdir("./37/file0")         = 0
[pid  5853] getdents64(3, 0x5555717466f0 /* 0 entries */, 32768) = 0
[pid  5853] close(3)                    = 0
[pid  5853] rmdir("./37")               = 0
[pid  5853] mkdir("./38", 0777)         = 0
[pid  5853] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3
[pid  5853] ioctl(3, LOOP_CLR_FD)       = 0
[pid  5853] close(3)                    = 0
[pid  5853] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5934 attached
, child_tidptr=0x555571745650) = 5934
[pid  5934] set_robust_list(0x555571745660, 24) = 0
[pid  5934] chdir("./38")               = 0
[pid  5934] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5934] setpgid(0, 0)               = 0
[pid  5934] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5934] write(3, "1000", 4)         = 4
[pid  5934] close(3)                    = 0
[pid  5934] symlink("/dev/binderfs", "./binderfs") = 0
executing program
[pid  5934] write(1, "executing program\n", 18) = 18
[pid  5934] memfd_create("syzkaller", 0) = 3
[pid  5934] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7f07800000
[pid  5934] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216
[pid  5934] munmap(0x7f7f07800000, 138412032) = 0
[pid  5934] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4
[pid  5934] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5934] close(3)                    = 0
[pid  5934] close(4)                    = 0
[pid  5934] mkdir("./file0", 0777)      = 0
[  237.355612][ T5934] loop5: detected capacity change from 0 to 32768
[pid  5934] mount("/dev/loop5", "./file0", "jfs", MS_LAZYTIME, "") = 0
[pid  5934] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5934] chdir("./file0")            = 0
[pid  5934] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy)
[pid  5934] symlink("./file0/file0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0
[pid  5934] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL) = 0
[pid  5934] exit_group(0)               = ?
[pid  5934] +++ exited with 0 +++
[pid  5853] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5934, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=18 /* 0.18 s */} ---
[pid  5853] restart_syscall(<... resuming interrupted clone ...>) = 0
[pid  5853] umount2("./38", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5853] openat(AT_FDCWD, "./38", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
[  237.468565][  T114] blkno = 5002c, nblocks = 1
[  237.473318][  T114] ERROR: (device loop5): dbUpdatePMap: blocks are outside the map
[  237.473318][  T114] 
[  237.483860][  T114] ERROR: (device loop5): remounting filesystem as read-only
[pid  5853] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5853] getdents64(3, 0x5555717466f0 /* 4 entries */, 32768) = 112
[pid  5853] umount2("./38/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5853] newfstatat(AT_FDCWD, "./38/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5853] unlink("./38/binderfs")     = 0
[  237.602746][ T5853] JFS: metapage_get_blocks failed
[pid  5853] umount2("./38/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0
[pid  5853] umount2("./38/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5853] newfstatat(AT_FDCWD, "./38/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5853] umount2("./38/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5853] openat(AT_FDCWD, "./38/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
[pid  5853] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5853] getdents64(4, 0x55557174e730 /* 2 entries */, 32768) = 48
[pid  5853] getdents64(4, 0x55557174e730 /* 0 entries */, 32768) = 0
[pid  5853] close(4)                    = 0
[pid  5853] rmdir("./38/file0")         = 0
[pid  5853] getdents64(3, 0x5555717466f0 /* 0 entries */, 32768) = 0
[pid  5853] close(3)                    = 0
[pid  5853] rmdir("./38")               = 0
[pid  5853] mkdir("./39", 0777)         = 0
[pid  5853] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3
[pid  5853] ioctl(3, LOOP_CLR_FD)       = 0
[pid  5853] close(3)                    = 0
[pid  5853] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5935 attached
, child_tidptr=0x555571745650) = 5935
[pid  5935] set_robust_list(0x555571745660, 24) = 0
[pid  5935] chdir("./39")               = 0
[pid  5935] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5935] setpgid(0, 0)               = 0
[pid  5935] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5935] write(3, "1000", 4)         = 4
[pid  5935] close(3)                    = 0
[pid  5935] symlink("/dev/binderfs", "./binderfs") = 0
executing program
[pid  5935] write(1, "executing program\n", 18) = 18
[pid  5935] memfd_create("syzkaller", 0) = 3
[pid  5935] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7f07800000
[pid  5935] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216
[pid  5935] munmap(0x7f7f07800000, 138412032) = 0
[pid  5935] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4
[pid  5935] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5935] close(3)                    = 0
[pid  5935] close(4)                    = 0
[pid  5935] mkdir("./file0", 0777)      = 0
[pid  5935] mount("/dev/loop5", "./file0", "jfs", MS_LAZYTIME, "") = 0
[pid  5935] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5935] chdir("./file0")            = 0
[  238.534809][ T5935] loop5: detected capacity change from 0 to 32768
[pid  5935] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy)
[pid  5935] symlink("./file0/file0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0
[pid  5935] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL) = 0
[pid  5935] exit_group(0)               = ?
[pid  5935] +++ exited with 0 +++
[pid  5853] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5935, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=18 /* 0.18 s */} ---
[pid  5853] restart_syscall(<... resuming interrupted clone ...>) = 0
[pid  5853] umount2("./39", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5853] openat(AT_FDCWD, "./39", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
[  238.618204][  T113] blkno = 5002c, nblocks = 1
[  238.622902][  T113] ERROR: (device loop5): dbUpdatePMap: blocks are outside the map
[  238.622902][  T113] 
[  238.634187][  T113] ERROR: (device loop5): remounting filesystem as read-only
[pid  5853] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5853] getdents64(3, 0x5555717466f0 /* 4 entries */, 32768) = 112
[pid  5853] umount2("./39/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5853] newfstatat(AT_FDCWD, "./39/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5853] unlink("./39/binderfs")     = 0
[  238.756373][ T5853] JFS: metapage_get_blocks failed
[pid  5853] umount2("./39/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0
[pid  5853] umount2("./39/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5853] newfstatat(AT_FDCWD, "./39/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5853] umount2("./39/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5853] openat(AT_FDCWD, "./39/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
[pid  5853] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5853] getdents64(4, 0x55557174e730 /* 2 entries */, 32768) = 48
[pid  5853] getdents64(4, 0x55557174e730 /* 0 entries */, 32768) = 0
[pid  5853] close(4)                    = 0
[pid  5853] rmdir("./39/file0")         = 0
[pid  5853] getdents64(3, 0x5555717466f0 /* 0 entries */, 32768) = 0
[pid  5853] close(3)                    = 0
[pid  5853] rmdir("./39")               = 0
[pid  5853] mkdir("./40", 0777)         = 0
[pid  5853] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3
[pid  5853] ioctl(3, LOOP_CLR_FD)       = 0
[pid  5853] close(3)                    = 0
[pid  5853] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5936 attached
, child_tidptr=0x555571745650) = 5936
[pid  5936] set_robust_list(0x555571745660, 24) = 0
[pid  5936] chdir("./40")               = 0
[pid  5936] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5936] setpgid(0, 0)               = 0
[pid  5936] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5936] write(3, "1000", 4)         = 4
[pid  5936] close(3)                    = 0
[pid  5936] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5936] write(1, "executing program\n", 18executing program
) = 18
[pid  5936] memfd_create("syzkaller", 0) = 3
[pid  5936] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7f07800000
[pid  5936] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216
[pid  5936] munmap(0x7f7f07800000, 138412032) = 0
[pid  5936] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4
[pid  5936] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5936] close(3)                    = 0
[pid  5936] close(4)                    = 0
[pid  5936] mkdir("./file0", 0777)      = 0
[pid  5936] mount("/dev/loop5", "./file0", "jfs", MS_LAZYTIME, "") = 0
[pid  5936] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5936] chdir("./file0")            = 0
[  239.541990][ T5936] loop5: detected capacity change from 0 to 32768
[pid  5936] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy)
[pid  5936] symlink("./file0/file0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0
[pid  5936] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL) = 0
[pid  5936] exit_group(0)               = ?
[pid  5936] +++ exited with 0 +++
[pid  5853] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5936, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=21 /* 0.21 s */} ---
[pid  5853] umount2("./40", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5853] openat(AT_FDCWD, "./40", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
[pid  5853] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5853] getdents64(3, 0x5555717466f0 /* 4 entries */, 32768) = 112
[pid  5853] umount2("./40/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[  239.627027][  T114] blkno = 5002c, nblocks = 1
[  239.631695][  T114] ERROR: (device loop5): dbUpdatePMap: blocks are outside the map
[  239.631695][  T114] 
[  239.642055][  T114] ERROR: (device loop5): remounting filesystem as read-only
[pid  5853] newfstatat(AT_FDCWD, "./40/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5853] unlink("./40/binderfs")     = 0
[  239.698698][ T5853] JFS: metapage_get_blocks failed
[pid  5853] umount2("./40/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0
[pid  5853] umount2("./40/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5853] newfstatat(AT_FDCWD, "./40/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5853] umount2("./40/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5853] openat(AT_FDCWD, "./40/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
[pid  5853] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5853] getdents64(4, 0x55557174e730 /* 2 entries */, 32768) = 48
[pid  5853] getdents64(4, 0x55557174e730 /* 0 entries */, 32768) = 0
[pid  5853] close(4)                    = 0
[pid  5853] rmdir("./40/file0")         = 0
[pid  5853] getdents64(3, 0x5555717466f0 /* 0 entries */, 32768) = 0
[pid  5853] close(3)                    = 0
[pid  5853] rmdir("./40")               = 0
[pid  5853] mkdir("./41", 0777)         = 0
[pid  5853] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3
[pid  5853] ioctl(3, LOOP_CLR_FD)       = 0
[pid  5853] close(3)                    = 0
[pid  5853] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5937 attached
, child_tidptr=0x555571745650) = 5937
[pid  5937] set_robust_list(0x555571745660, 24) = 0
[pid  5937] chdir("./41")               = 0
[pid  5937] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5937] setpgid(0, 0)               = 0
[pid  5937] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5937] write(3, "1000", 4)         = 4
[pid  5937] close(3)                    = 0
[pid  5937] symlink("/dev/binderfs", "./binderfs") = 0
executing program
[pid  5937] write(1, "executing program\n", 18) = 18
[pid  5937] memfd_create("syzkaller", 0) = 3
[pid  5937] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7f07800000
[pid  5937] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216
[pid  5937] munmap(0x7f7f07800000, 138412032) = 0
[pid  5937] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4
[pid  5937] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5937] close(3)                    = 0
[pid  5937] close(4)                    = 0
[pid  5937] mkdir("./file0", 0777)      = 0
[pid  5937] mount("/dev/loop5", "./file0", "jfs", MS_LAZYTIME, "") = 0
[  240.547945][ T5937] loop5: detected capacity change from 0 to 32768
[pid  5937] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5937] chdir("./file0")            = 0
[pid  5937] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy)
[pid  5937] symlink("./file0/file0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0
[pid  5937] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL) = 0
[pid  5937] exit_group(0)               = ?
[pid  5937] +++ exited with 0 +++
[pid  5853] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5937, si_uid=0, si_status=0, si_utime=0, si_stime=21 /* 0.21 s */} ---
[pid  5853] restart_syscall(<... resuming interrupted clone ...>) = 0
[pid  5853] umount2("./41", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5853] openat(AT_FDCWD, "./41", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
[  240.651787][  T114] blkno = 5002c, nblocks = 1
[  240.656555][  T114] ERROR: (device loop5): dbUpdatePMap: blocks are outside the map
[  240.656555][  T114] 
[  240.667695][  T114] ERROR: (device loop5): remounting filesystem as read-only
[pid  5853] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5853] getdents64(3, 0x5555717466f0 /* 4 entries */, 32768) = 112
[pid  5853] umount2("./41/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5853] newfstatat(AT_FDCWD, "./41/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5853] unlink("./41/binderfs")     = 0
[  240.771854][ T5853] JFS: metapage_get_blocks failed
[pid  5853] umount2("./41/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0
[pid  5853] umount2("./41/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5853] newfstatat(AT_FDCWD, "./41/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5853] umount2("./41/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5853] openat(AT_FDCWD, "./41/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
[pid  5853] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5853] getdents64(4, 0x55557174e730 /* 2 entries */, 32768) = 48
[pid  5853] getdents64(4, 0x55557174e730 /* 0 entries */, 32768) = 0
[pid  5853] close(4)                    = 0
[pid  5853] rmdir("./41/file0")         = 0
[pid  5853] getdents64(3, 0x5555717466f0 /* 0 entries */, 32768) = 0
[pid  5853] close(3)                    = 0
[pid  5853] rmdir("./41")               = 0
[pid  5853] mkdir("./42", 0777)         = 0
[pid  5853] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3
[pid  5853] ioctl(3, LOOP_CLR_FD)       = 0
[pid  5853] close(3)                    = 0
[pid  5853] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5938 attached
, child_tidptr=0x555571745650) = 5938
[pid  5938] set_robust_list(0x555571745660, 24) = 0
[pid  5938] chdir("./42")               = 0
[pid  5938] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5938] setpgid(0, 0)               = 0
[pid  5938] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5938] write(3, "1000", 4)         = 4
[pid  5938] close(3)                    = 0
[pid  5938] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5938] write(1, "executing program\n", 18) = 18
executing program
[pid  5938] memfd_create("syzkaller", 0) = 3
[pid  5938] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7f07800000
[pid  5938] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216
[pid  5938] munmap(0x7f7f07800000, 138412032) = 0
[pid  5938] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4
[pid  5938] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5938] close(3)                    = 0
[pid  5938] close(4)                    = 0
[pid  5938] mkdir("./file0", 0777)      = 0
[pid  5938] mount("/dev/loop5", "./file0", "jfs", MS_LAZYTIME, "") = 0
[  241.607546][ T5938] loop5: detected capacity change from 0 to 32768
[pid  5938] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5938] chdir("./file0")            = 0
[pid  5938] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy)
[pid  5938] symlink("./file0/file0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0
[pid  5938] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL) = -1 EINVAL (Invalid argument)
[pid  5938] exit_group(0)               = ?
[pid  5938] +++ exited with 0 +++
[pid  5853] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5938, si_uid=0, si_status=0, si_utime=0, si_stime=22 /* 0.22 s */} ---
[pid  5853] umount2("./42", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5853] openat(AT_FDCWD, "./42", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
[  241.710327][  T113] blkno = 5002c, nblocks = 1
[  241.715040][  T113] ERROR: (device loop5): dbUpdatePMap: blocks are outside the map
[  241.715040][  T113] 
[  241.725561][  T113] ERROR: (device loop5): remounting filesystem as read-only
[  241.733710][ T5938] JFS: metapage_get_blocks failed
[pid  5853] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5853] getdents64(3, 0x5555717466f0 /* 4 entries */, 32768) = 112
[pid  5853] umount2("./42/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5853] newfstatat(AT_FDCWD, "./42/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5853] unlink("./42/binderfs")     = 0
[pid  5853] umount2("./42/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0
[pid  5853] umount2("./42/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5853] newfstatat(AT_FDCWD, "./42/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5853] umount2("./42/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5853] openat(AT_FDCWD, "./42/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
[pid  5853] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5853] getdents64(4, 0x55557174e730 /* 2 entries */, 32768) = 48
[pid  5853] getdents64(4, 0x55557174e730 /* 0 entries */, 32768) = 0
[pid  5853] close(4)                    = 0
[pid  5853] rmdir("./42/file0")         = 0
[pid  5853] getdents64(3, 0x5555717466f0 /* 0 entries */, 32768) = 0
[pid  5853] close(3)                    = 0
[pid  5853] rmdir("./42")               = 0
[pid  5853] mkdir("./43", 0777)         = 0
[pid  5853] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3
[pid  5853] ioctl(3, LOOP_CLR_FD)       = 0
[pid  5853] close(3)                    = 0
[pid  5853] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5939 attached
, child_tidptr=0x555571745650) = 5939
[pid  5939] set_robust_list(0x555571745660, 24) = 0
[pid  5939] chdir("./43")               = 0
[pid  5939] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5939] setpgid(0, 0)               = 0
[pid  5939] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5939] write(3, "1000", 4)         = 4
[pid  5939] close(3)                    = 0
[pid  5939] symlink("/dev/binderfs", "./binderfs") = 0
executing program
[pid  5939] write(1, "executing program\n", 18) = 18
[pid  5939] memfd_create("syzkaller", 0) = 3
[pid  5939] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7f07800000
[pid  5939] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216
[pid  5939] munmap(0x7f7f07800000, 138412032) = 0
[pid  5939] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4
[pid  5939] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5939] close(3)                    = 0
[pid  5939] close(4)                    = 0
[pid  5939] mkdir("./file0", 0777)      = 0
[pid  5939] mount("/dev/loop5", "./file0", "jfs", MS_LAZYTIME, "") = 0
[pid  5939] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5939] chdir("./file0")            = 0
[pid  5939] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy)
[pid  5939] symlink("./file0/file0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0
[  242.311995][ T5939] loop5: detected capacity change from 0 to 32768
[pid  5939] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL) = 0
[pid  5939] exit_group(0)               = ?
[pid  5939] +++ exited with 0 +++
[pid  5853] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5939, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=20 /* 0.20 s */} ---
[pid  5853] restart_syscall(<... resuming interrupted clone ...>) = 0
[pid  5853] umount2("./43", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5853] openat(AT_FDCWD, "./43", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
[pid  5853] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5853] getdents64(3, 0x5555717466f0 /* 4 entries */, 32768) = 112
[  242.366461][  T113] blkno = 5002c, nblocks = 1
[  242.371145][  T113] ERROR: (device loop5): dbUpdatePMap: blocks are outside the map
[  242.371145][  T113] 
[  242.384124][  T113] ERROR: (device loop5): remounting filesystem as read-only
[pid  5853] umount2("./43/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5853] newfstatat(AT_FDCWD, "./43/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5853] unlink("./43/binderfs")     = 0
[  242.470049][ T5853] JFS: metapage_get_blocks failed
[pid  5853] umount2("./43/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0
[pid  5853] umount2("./43/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5853] newfstatat(AT_FDCWD, "./43/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5853] umount2("./43/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5853] openat(AT_FDCWD, "./43/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
[pid  5853] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5853] getdents64(4, 0x55557174e730 /* 2 entries */, 32768) = 48
[pid  5853] getdents64(4, 0x55557174e730 /* 0 entries */, 32768) = 0
[pid  5853] close(4)                    = 0
[pid  5853] rmdir("./43/file0")         = 0
[pid  5853] getdents64(3, 0x5555717466f0 /* 0 entries */, 32768) = 0
[pid  5853] close(3)                    = 0
[pid  5853] rmdir("./43")               = 0
[pid  5853] mkdir("./44", 0777)         = 0
[pid  5853] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3
[pid  5853] ioctl(3, LOOP_CLR_FD)       = 0
[pid  5853] close(3)                    = 0
[pid  5853] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5940 attached
, child_tidptr=0x555571745650) = 5940
[pid  5940] set_robust_list(0x555571745660, 24) = 0
[pid  5940] chdir("./44")               = 0
[pid  5940] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5940] setpgid(0, 0)               = 0
[pid  5940] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5940] write(3, "1000", 4)         = 4
[pid  5940] close(3)                    = 0
[pid  5940] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5940] write(1, "executing program\n", 18executing program
) = 18
[pid  5940] memfd_create("syzkaller", 0) = 3
[pid  5940] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7f07800000
[pid  5940] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216
[pid  5940] munmap(0x7f7f07800000, 138412032) = 0
[pid  5940] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4
[pid  5940] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5940] close(3)                    = 0
[pid  5940] close(4)                    = 0
[pid  5940] mkdir("./file0", 0777)      = 0
[pid  5940] mount("/dev/loop5", "./file0", "jfs", MS_LAZYTIME, "") = 0
[pid  5940] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5940] chdir("./file0")            = 0
[  243.310127][ T5940] loop5: detected capacity change from 0 to 32768
[pid  5940] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy)
[pid  5940] symlink("./file0/file0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0
[pid  5940] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL) = 0
[pid  5940] exit_group(0)               = ?
[pid  5940] +++ exited with 0 +++
[pid  5853] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5940, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=19 /* 0.19 s */} ---
[pid  5853] restart_syscall(<... resuming interrupted clone ...>) = 0
[pid  5853] umount2("./44", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5853] openat(AT_FDCWD, "./44", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
[pid  5853] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[  243.388996][  T114] blkno = 5002c, nblocks = 1
[  243.393805][  T114] ERROR: (device loop5): dbUpdatePMap: blocks are outside the map
[  243.393805][  T114] 
[  243.405515][  T114] ERROR: (device loop5): remounting filesystem as read-only
[pid  5853] getdents64(3, 0x5555717466f0 /* 4 entries */, 32768) = 112
[pid  5853] umount2("./44/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5853] newfstatat(AT_FDCWD, "./44/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5853] unlink("./44/binderfs")     = 0
[  243.472981][ T5853] JFS: metapage_get_blocks failed
[pid  5853] umount2("./44/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0
[pid  5853] umount2("./44/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5853] newfstatat(AT_FDCWD, "./44/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5853] umount2("./44/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5853] openat(AT_FDCWD, "./44/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
[pid  5853] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5853] getdents64(4, 0x55557174e730 /* 2 entries */, 32768) = 48
[pid  5853] getdents64(4, 0x55557174e730 /* 0 entries */, 32768) = 0
[pid  5853] close(4)                    = 0
[pid  5853] rmdir("./44/file0")         = 0
[pid  5853] getdents64(3, 0x5555717466f0 /* 0 entries */, 32768) = 0
[pid  5853] close(3)                    = 0
[pid  5853] rmdir("./44")               = 0
[pid  5853] mkdir("./45", 0777)         = 0
[pid  5853] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3
[pid  5853] ioctl(3, LOOP_CLR_FD)       = 0
[pid  5853] close(3)                    = 0
[pid  5853] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5941 attached
, child_tidptr=0x555571745650) = 5941
[pid  5941] set_robust_list(0x555571745660, 24) = 0
[pid  5941] chdir("./45")               = 0
[pid  5941] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5941] setpgid(0, 0)               = 0
[pid  5941] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5941] write(3, "1000", 4)         = 4
[pid  5941] close(3)                    = 0
[pid  5941] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5941] write(1, "executing program\n", 18executing program
) = 18
[pid  5941] memfd_create("syzkaller", 0) = 3
[pid  5941] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7f07800000
[pid  5941] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216
[pid  5941] munmap(0x7f7f07800000, 138412032) = 0
[pid  5941] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4
[pid  5941] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5941] close(3)                    = 0
[pid  5941] close(4)                    = 0
[pid  5941] mkdir("./file0", 0777)      = 0
[pid  5941] mount("/dev/loop5", "./file0", "jfs", MS_LAZYTIME, "") = 0
[pid  5941] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5941] chdir("./file0")            = 0
[pid  5941] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy)
[  244.359525][ T5941] loop5: detected capacity change from 0 to 32768
[pid  5941] symlink("./file0/file0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0
[pid  5941] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL) = 0
[pid  5941] exit_group(0)               = ?
[pid  5941] +++ exited with 0 +++
[pid  5853] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5941, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=20 /* 0.20 s */} ---
[pid  5853] restart_syscall(<... resuming interrupted clone ...>) = 0
[pid  5853] umount2("./45", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5853] openat(AT_FDCWD, "./45", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
[  244.425536][  T114] blkno = 5002c, nblocks = 1
[  244.430178][  T114] ERROR: (device loop5): dbUpdatePMap: blocks are outside the map
[  244.430178][  T114] 
[  244.441956][  T114] ERROR: (device loop5): remounting filesystem as read-only
[pid  5853] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5853] getdents64(3, 0x5555717466f0 /* 4 entries */, 32768) = 112
[pid  5853] umount2("./45/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5853] newfstatat(AT_FDCWD, "./45/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5853] unlink("./45/binderfs")     = 0
[  244.552537][ T5853] JFS: metapage_get_blocks failed
[pid  5853] umount2("./45/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0
[pid  5853] umount2("./45/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5853] newfstatat(AT_FDCWD, "./45/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5853] umount2("./45/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5853] openat(AT_FDCWD, "./45/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
[pid  5853] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5853] getdents64(4, 0x55557174e730 /* 2 entries */, 32768) = 48
[pid  5853] getdents64(4, 0x55557174e730 /* 0 entries */, 32768) = 0
[pid  5853] close(4)                    = 0
[pid  5853] rmdir("./45/file0")         = 0
[pid  5853] getdents64(3, 0x5555717466f0 /* 0 entries */, 32768) = 0
[pid  5853] close(3)                    = 0
[pid  5853] rmdir("./45")               = 0
[pid  5853] mkdir("./46", 0777)         = 0
[pid  5853] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3
[pid  5853] ioctl(3, LOOP_CLR_FD)       = 0
[pid  5853] close(3)                    = 0
[pid  5853] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5942 attached
, child_tidptr=0x555571745650) = 5942
[pid  5942] set_robust_list(0x555571745660, 24) = 0
[pid  5942] chdir("./46")               = 0
[pid  5942] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5942] setpgid(0, 0)               = 0
[pid  5942] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5942] write(3, "1000", 4)         = 4
[pid  5942] close(3)                    = 0
[pid  5942] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5942] write(1, "executing program\n", 18executing program
) = 18
[pid  5942] memfd_create("syzkaller", 0) = 3
[pid  5942] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7f07800000
[pid  5942] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216
[pid  5942] munmap(0x7f7f07800000, 138412032) = 0
[pid  5942] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4
[pid  5942] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5942] close(3)                    = 0
[pid  5942] close(4)                    = 0
[pid  5942] mkdir("./file0", 0777)      = 0
[pid  5942] mount("/dev/loop5", "./file0", "jfs", MS_LAZYTIME, "") = 0
[pid  5942] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5942] chdir("./file0")            = 0
[pid  5942] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy)
[pid  5942] symlink("./file0/file0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0
[  245.380667][ T5942] loop5: detected capacity change from 0 to 32768
[pid  5942] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL) = 0
[pid  5942] exit_group(0)               = ?
[pid  5942] +++ exited with 0 +++
[pid  5853] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5942, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=19 /* 0.19 s */} ---
[pid  5853] restart_syscall(<... resuming interrupted clone ...>) = 0
[pid  5853] umount2("./46", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5853] openat(AT_FDCWD, "./46", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
[  245.443727][  T113] blkno = 5002c, nblocks = 1
[  245.448519][  T113] ERROR: (device loop5): dbUpdatePMap: blocks are outside the map
[  245.448519][  T113] 
[  245.459915][  T113] ERROR: (device loop5): remounting filesystem as read-only
[pid  5853] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5853] getdents64(3, 0x5555717466f0 /* 4 entries */, 32768) = 112
[pid  5853] umount2("./46/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5853] newfstatat(AT_FDCWD, "./46/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5853] unlink("./46/binderfs")     = 0
[  245.574792][ T5853] JFS: metapage_get_blocks failed
[pid  5853] umount2("./46/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0
[pid  5853] umount2("./46/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5853] newfstatat(AT_FDCWD, "./46/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5853] umount2("./46/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5853] openat(AT_FDCWD, "./46/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
[pid  5853] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5853] getdents64(4, 0x55557174e730 /* 2 entries */, 32768) = 48
[pid  5853] getdents64(4, 0x55557174e730 /* 0 entries */, 32768) = 0
[pid  5853] close(4)                    = 0
[pid  5853] rmdir("./46/file0")         = 0
[pid  5853] getdents64(3, 0x5555717466f0 /* 0 entries */, 32768) = 0
[pid  5853] close(3)                    = 0
[pid  5853] rmdir("./46")               = 0
[pid  5853] mkdir("./47", 0777)         = 0
[pid  5853] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3
[pid  5853] ioctl(3, LOOP_CLR_FD)       = 0
[pid  5853] close(3)                    = 0
[pid  5853] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5943 attached
, child_tidptr=0x555571745650) = 5943
[pid  5943] set_robust_list(0x555571745660, 24) = 0
[pid  5943] chdir("./47")               = 0
[pid  5943] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5943] setpgid(0, 0)               = 0
[pid  5943] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5943] write(3, "1000", 4)         = 4
[pid  5943] close(3)                    = 0
[pid  5943] symlink("/dev/binderfs", "./binderfs") = 0
executing program
[pid  5943] write(1, "executing program\n", 18) = 18
[pid  5943] memfd_create("syzkaller", 0) = 3
[pid  5943] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7f07800000
[pid  5943] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216
[pid  5943] munmap(0x7f7f07800000, 138412032) = 0
[pid  5943] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4
[pid  5943] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5943] close(3)                    = 0
[pid  5943] close(4)                    = 0
[pid  5943] mkdir("./file0", 0777)      = 0
[pid  5943] mount("/dev/loop5", "./file0", "jfs", MS_LAZYTIME, "") = 0
[pid  5943] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5943] chdir("./file0")            = 0
[pid  5943] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy)
[  246.441736][ T5943] loop5: detected capacity change from 0 to 32768
[pid  5943] symlink("./file0/file0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0
[pid  5943] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL) = 0
[pid  5943] exit_group(0)               = ?
[pid  5943] +++ exited with 0 +++
[pid  5853] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5943, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=20 /* 0.20 s */} ---
[pid  5853] restart_syscall(<... resuming interrupted clone ...>) = 0
[pid  5853] umount2("./47", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5853] openat(AT_FDCWD, "./47", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
[pid  5853] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[  246.506605][  T114] blkno = 5002c, nblocks = 1
[  246.511266][  T114] ERROR: (device loop5): dbUpdatePMap: blocks are outside the map
[  246.511266][  T114] 
[  246.522173][  T114] ERROR: (device loop5): remounting filesystem as read-only
[pid  5853] getdents64(3, 0x5555717466f0 /* 4 entries */, 32768) = 112
[pid  5853] umount2("./47/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5853] newfstatat(AT_FDCWD, "./47/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5853] unlink("./47/binderfs")     = 0
[  246.625392][ T5853] JFS: metapage_get_blocks failed
[pid  5853] umount2("./47/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0
[pid  5853] umount2("./47/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5853] newfstatat(AT_FDCWD, "./47/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5853] umount2("./47/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5853] openat(AT_FDCWD, "./47/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
[pid  5853] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5853] getdents64(4, 0x55557174e730 /* 2 entries */, 32768) = 48
[pid  5853] getdents64(4, 0x55557174e730 /* 0 entries */, 32768) = 0
[pid  5853] close(4)                    = 0
[pid  5853] rmdir("./47/file0")         = 0
[pid  5853] getdents64(3, 0x5555717466f0 /* 0 entries */, 32768) = 0
[pid  5853] close(3)                    = 0
[pid  5853] rmdir("./47")               = 0
[pid  5853] mkdir("./48", 0777)         = 0
[pid  5853] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3
[pid  5853] ioctl(3, LOOP_CLR_FD)       = 0
[pid  5853] close(3)                    = 0
[pid  5853] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5944 attached
, child_tidptr=0x555571745650) = 5944
[pid  5944] set_robust_list(0x555571745660, 24) = 0
[pid  5944] chdir("./48")               = 0
[pid  5944] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5944] setpgid(0, 0)               = 0
[pid  5944] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5944] write(3, "1000", 4)         = 4
[pid  5944] close(3)                    = 0
[pid  5944] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5944] write(1, "executing program\n", 18executing program
) = 18
[pid  5944] memfd_create("syzkaller", 0) = 3
[pid  5944] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7f07800000
[pid  5944] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216
[pid  5944] munmap(0x7f7f07800000, 138412032) = 0
[pid  5944] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4
[pid  5944] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5944] close(3)                    = 0
[pid  5944] close(4)                    = 0
[pid  5944] mkdir("./file0", 0777)      = 0
[pid  5944] mount("/dev/loop5", "./file0", "jfs", MS_LAZYTIME, "") = 0
[pid  5944] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[  247.492134][ T5944] loop5: detected capacity change from 0 to 32768
[pid  5944] chdir("./file0")            = 0
[pid  5944] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy)
[pid  5944] symlink("./file0/file0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0
[pid  5944] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL) = 0
[pid  5944] exit_group(0)               = ?
[pid  5944] +++ exited with 0 +++
[pid  5853] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5944, si_uid=0, si_status=0, si_utime=0, si_stime=21 /* 0.21 s */} ---
[pid  5853] restart_syscall(<... resuming interrupted clone ...>) = 0
[pid  5853] umount2("./48", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5853] openat(AT_FDCWD, "./48", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
[  247.574361][  T113] blkno = 5002c, nblocks = 1
[  247.579022][  T113] ERROR: (device loop5): dbUpdatePMap: blocks are outside the map
[  247.579022][  T113] 
[  247.590667][  T113] ERROR: (device loop5): remounting filesystem as read-only
[pid  5853] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5853] getdents64(3, 0x5555717466f0 /* 4 entries */, 32768) = 112
[pid  5853] umount2("./48/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5853] newfstatat(AT_FDCWD, "./48/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5853] unlink("./48/binderfs")     = 0
[  247.702763][ T5853] JFS: metapage_get_blocks failed
[pid  5853] umount2("./48/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0
[pid  5853] umount2("./48/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5853] newfstatat(AT_FDCWD, "./48/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5853] umount2("./48/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5853] openat(AT_FDCWD, "./48/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
[pid  5853] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5853] getdents64(4, 0x55557174e730 /* 2 entries */, 32768) = 48
[pid  5853] getdents64(4, 0x55557174e730 /* 0 entries */, 32768) = 0
[pid  5853] close(4)                    = 0
[pid  5853] rmdir("./48/file0")         = 0
[pid  5853] getdents64(3, 0x5555717466f0 /* 0 entries */, 32768) = 0
[pid  5853] close(3)                    = 0
[pid  5853] rmdir("./48")               = 0
[pid  5853] mkdir("./49", 0777)         = 0
[pid  5853] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3
[pid  5853] ioctl(3, LOOP_CLR_FD)       = 0
[pid  5853] close(3)                    = 0
[pid  5853] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5945 attached
 <unfinished ...>
[pid  5945] set_robust_list(0x555571745660, 24 <unfinished ...>
[pid  5853] <... clone resumed>, child_tidptr=0x555571745650) = 5945
[pid  5945] <... set_robust_list resumed>) = 0
[pid  5945] chdir("./49")               = 0
[pid  5945] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5945] setpgid(0, 0)               = 0
[pid  5945] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5945] write(3, "1000", 4)         = 4
[pid  5945] close(3)                    = 0
[pid  5945] symlink("/dev/binderfs", "./binderfs") = 0
executing program
[pid  5945] write(1, "executing program\n", 18) = 18
[pid  5945] memfd_create("syzkaller", 0) = 3
[pid  5945] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7f07800000
[pid  5945] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216
[pid  5945] munmap(0x7f7f07800000, 138412032) = 0
[pid  5945] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4
[pid  5945] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5945] close(3)                    = 0
[pid  5945] close(4)                    = 0
[pid  5945] mkdir("./file0", 0777)      = 0
[pid  5945] mount("/dev/loop5", "./file0", "jfs", MS_LAZYTIME, "") = 0
[pid  5945] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5945] chdir("./file0")            = 0
[pid  5945] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy)
[pid  5945] symlink("./file0/file0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0
[  248.544977][ T5945] loop5: detected capacity change from 0 to 32768
[pid  5945] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL) = -1 EINVAL (Invalid argument)
[pid  5945] exit_group(0)               = ?
[pid  5945] +++ exited with 0 +++
[pid  5853] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5945, si_uid=0, si_status=0, si_utime=0, si_stime=21 /* 0.21 s */} ---
[pid  5853] restart_syscall(<... resuming interrupted clone ...>) = 0
[pid  5853] umount2("./49", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[  248.594510][  T113] blkno = 5002c, nblocks = 1
[  248.599669][  T113] ERROR: (device loop5): dbUpdatePMap: blocks are outside the map
[  248.599669][  T113] 
[  248.610539][  T113] ERROR: (device loop5): remounting filesystem as read-only
[  248.619333][ T5945] JFS: metapage_get_blocks failed
[pid  5853] openat(AT_FDCWD, "./49", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
[pid  5853] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5853] getdents64(3, 0x5555717466f0 /* 4 entries */, 32768) = 112
[pid  5853] umount2("./49/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5853] newfstatat(AT_FDCWD, "./49/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5853] unlink("./49/binderfs")     = 0
[pid  5853] umount2("./49/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0
[pid  5853] umount2("./49/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5853] newfstatat(AT_FDCWD, "./49/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5853] umount2("./49/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5853] openat(AT_FDCWD, "./49/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
[pid  5853] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5853] getdents64(4, 0x55557174e730 /* 2 entries */, 32768) = 48
[pid  5853] getdents64(4, 0x55557174e730 /* 0 entries */, 32768) = 0
[pid  5853] close(4)                    = 0
[pid  5853] rmdir("./49/file0")         = 0
[pid  5853] getdents64(3, 0x5555717466f0 /* 0 entries */, 32768) = 0
[pid  5853] close(3)                    = 0
[pid  5853] rmdir("./49")               = 0
[pid  5853] mkdir("./50", 0777)         = 0
[pid  5853] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3
[pid  5853] ioctl(3, LOOP_CLR_FD)       = 0
[pid  5853] close(3)                    = 0
[pid  5853] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5948 attached
, child_tidptr=0x555571745650) = 5948
[pid  5948] set_robust_list(0x555571745660, 24) = 0
[pid  5948] chdir("./50")               = 0
[pid  5948] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5948] setpgid(0, 0)               = 0
[pid  5948] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5948] write(3, "1000", 4)         = 4
[pid  5948] close(3)                    = 0
[pid  5948] symlink("/dev/binderfs", "./binderfs") = 0
executing program
[pid  5948] write(1, "executing program\n", 18) = 18
[pid  5948] memfd_create("syzkaller", 0) = 3
[pid  5948] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7f07800000
[pid  5948] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216
[pid  5948] munmap(0x7f7f07800000, 138412032) = 0
[pid  5948] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4
[pid  5948] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5948] close(3)                    = 0
[pid  5948] close(4)                    = 0
[pid  5948] mkdir("./file0", 0777)      = 0
[pid  5948] mount("/dev/loop5", "./file0", "jfs", MS_LAZYTIME, "") = 0
[pid  5948] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5948] chdir("./file0")            = 0
[pid  5948] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy)
[pid  5948] symlink("./file0/file0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0
[  249.211074][ T5948] loop5: detected capacity change from 0 to 32768
[pid  5948] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL) = 0
[pid  5948] exit_group(0)               = ?
[pid  5948] +++ exited with 0 +++
[pid  5853] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5948, si_uid=0, si_status=0, si_utime=0, si_stime=21 /* 0.21 s */} ---
[pid  5853] umount2("./50", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5853] openat(AT_FDCWD, "./50", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
[pid  5853] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[  249.272038][  T114] blkno = 5002c, nblocks = 1
[  249.277731][  T114] ERROR: (device loop5): dbUpdatePMap: blocks are outside the map
[  249.277731][  T114] 
[  249.288554][  T114] ERROR: (device loop5): remounting filesystem as read-only
[pid  5853] getdents64(3, 0x5555717466f0 /* 4 entries */, 32768) = 112
[pid  5853] umount2("./50/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5853] newfstatat(AT_FDCWD, "./50/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5853] unlink("./50/binderfs")     = 0
[  249.366123][ T5853] JFS: metapage_get_blocks failed
[pid  5853] umount2("./50/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = 0
[pid  5853] umount2("./50/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5853] newfstatat(AT_FDCWD, "./50/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5853] umount2("./50/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5853] openat(AT_FDCWD, "./50/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
[pid  5853] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5853] getdents64(4, 0x55557174e730 /* 2 entries */, 32768) = 48
[pid  5853] getdents64(4, 0x55557174e730 /* 0 entries */, 32768) = 0
[pid  5853] close(4)                    = 0
[pid  5853] rmdir("./50/file0")         = 0
[pid  5853] getdents64(3, 0x5555717466f0 /* 0 entries */, 32768) = 0
[pid  5853] close(3)                    = 0
[pid  5853] rmdir("./50")               = 0
[pid  5853] mkdir("./51", 0777)         = 0
[pid  5853] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3
[pid  5853] ioctl(3, LOOP_CLR_FD)       = 0
[pid  5853] close(3)                    = 0
[pid  5853] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5951 attached
, child_tidptr=0x555571745650) = 5951
[pid  5951] set_robust_list(0x555571745660, 24) = 0
[pid  5951] chdir("./51")               = 0
[pid  5951] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5951] setpgid(0, 0)               = 0
[pid  5951] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5951] write(3, "1000", 4)         = 4
[pid  5951] close(3)                    = 0
[pid  5951] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5951] write(1, "executing program\n", 18executing program
) = 18
[pid  5951] memfd_create("syzkaller", 0) = 3
[pid  5951] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7f07800000
[  249.993204][ T5852] jfs_flush_journal: synclist not empty
[  249.998835][ T5852] metapage: ffff888077ee8ba0: 00001000 00000000 00003a90 00000000
[  250.007319][ T5852] metapage: ffff888077ee8bb0: 77ee8ca8 ffff8880 277c3a28 ffff8880
[  250.015477][ T5852] metapage: ffff888077ee8bc0: 00000004 00000000 00000000 00000000
[  250.023777][ T5852] metapage: ffff888077ee8bd0: 730b2000 ffff8880 0005002c 00000000
[  250.031735][ T5852] metapage: ffff888077ee8be0: 00000000 dead4ead ffffffff 00000000
[  250.039855][ T5852] metapage: ffff888077ee8bf0: ffffffff ffffffff 9a931580 ffffffff
[  250.048182][ T5852] metapage: ffff888077ee8c00: 96ea4ad0 ffffffff 00000000 00000000
[  250.056832][ T5852] metapage: ffff888077ee8c10: 8bac11a0 ffffffff 00000300 00000000
[  250.065381][ T5852] metapage: ffff888077ee8c20: 77ee8c20 ffff8880 77ee8c20 ffff8880
[  250.074138][ T5852] metapage: ffff888077ee8c30: 01cc2c80 ffffea00 750ba000 ffff8880
[  250.082049][ T5852] metapage: ffff888077ee8c40: 00001000 0000424c 00000000 00000000
[  250.090423][ T5852] metapage: ffff888077ee8c50: 277c3800 ffff8880
[  250.096741][ T5852] page: ffffea0001cc2c80: 00fff4000000403c ffffea0001dc8cc8
[  250.104751][ T5852] page: ffffea0001cc2c90: ffffea0000afbcc8 0000000000000000
[  250.112090][ T5852] page: ffffea0001cc2ca0: 000000000005002c ffff888077ee8ba0
[  250.119792][ T5852] page: ffffea0001cc2cb0: 00000001ffffffff ffff888140ad4000
[  250.127534][ T5852] metapage: ffff888077ee8c98: 00001000 00000000 00003f68 00000000
[  250.135736][ T5852] metapage: ffff888077ee8ca8: 277c3a28 ffff8880 77ee8bb0 ffff8880
[  250.144022][ T5852] metapage: ffff888077ee8cb8: 00000004 00000000 00000000 00000000
[  250.151904][ T5852] metapage: ffff888077ee8cc8: 77c4f000 ffff8880 0000001c 00000000
[  250.160312][ T5852] metapage: ffff888077ee8cd8: 00000000 dead4ead ffffffff 00000000
[  250.168615][ T5852] metapage: ffff888077ee8ce8: ffffffff ffffffff 9a931580 ffffffff
[  250.176838][ T5852] metapage: ffff888077ee8cf8: 96ea4ad0 ffffffff 00000000 00000000
[  250.185875][ T5852] metapage: ffff888077ee8d08: 8bac11a0 ffffffff 00000300 00000000
[  250.194036][ T5852] metapage: ffff888077ee8d18: 77ee8d18 ffff8880 77ee8d18 ffff8880
[  250.202331][ T5852] metapage: ffff888077ee8d28: 01df13c0 ffffea00 750ba000 ffff8880
[  250.210702][ T5852] metapage: ffff888077ee8d38: 00001000 0000424c 00000000 00000000
[  250.218921][ T5852] metapage: ffff888077ee8d48: 277c3800 ffff8880
[  250.225516][ T5852] page: ffffea0001df13c0: 00fff4800000423c ffffea0001df1388
[  250.232844][ T5852] page: ffffea0001df13d0: ffffea0001dc8cc8 0000000000000000
[pid  5951] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216
[pid  5951] munmap(0x7f7f07800000, 138412032) = 0
[pid  5951] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4
[  250.240622][ T5852] page: ffffea0001df13e0: 000000000000001c ffff888077ee8c98
[  250.248310][ T5852] page: ffffea0001df13f0: 00000001ffffffff ffff888140ad4000
[pid  5951] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5951] close(3)                    = 0
[pid  5951] close(4)                    = 0
[pid  5951] mkdir("./file0", 0777)      = 0
[pid  5951] mount("/dev/loop5", "./file0", "jfs", MS_LAZYTIME, "") = 0
[pid  5951] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5951] chdir("./file0")            = 0
[pid  5951] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy)
[pid  5951] symlink("./file0/file0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0
[  250.297107][ T5951] loop5: detected capacity change from 0 to 32768
[pid  5951] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL) = 0
[pid  5951] exit_group(0)               = ?
[pid  5951] +++ exited with 0 +++
[pid  5853] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5951, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=25 /* 0.25 s */} ---
[pid  5853] restart_syscall(<... resuming interrupted clone ...>) = 0
[pid  5853] umount2("./51", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5853] openat(AT_FDCWD, "./51", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
[pid  5853] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5853] getdents64(3, 0x5555717466f0 /* 4 entries */, 32768) = 112
[pid  5853] umount2("./51/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5853] newfstatat(AT_FDCWD, "./51/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
[  250.364156][  T113] blkno = 5002c, nblocks = 1
[  250.369049][  T113] ERROR: (device loop5): dbUpdatePMap: blocks are outside the map
[  250.369049][  T113] 
[  250.380150][  T113] ERROR: (device loop5): remounting filesystem as read-only
[pid  5853] unlink("./51/binderfs")     = 0
[  250.452639][ T5853] JFS: metapage_get_blocks failed
[  251.633262][ T5850] jfs_flush_journal: synclist not empty
[  251.638864][ T5850] metapage: ffff8880291d42e8: 00001000 00000000 00003a90 00000000
[  251.646830][ T5850] metapage: ffff8880291d42f8: 291d43f0 ffff8880 738fb228 ffff8880
[  251.654743][ T5850] metapage: ffff8880291d4308: 00000004 00000000 00000000 00000000
[  251.662642][ T5850] metapage: ffff8880291d4318: 34a3e000 ffff8880 0005002c 00000000
[  251.670620][ T5850] metapage: ffff8880291d4328: 00000000 dead4ead ffffffff 00000000
[  251.678541][ T5850] metapage: ffff8880291d4338: ffffffff ffffffff 9a931580 ffffffff
[  251.686484][ T5850] metapage: ffff8880291d4348: 96ea4ad0 ffffffff 00000000 00000000
[  251.694361][ T5850] metapage: ffff8880291d4358: 8bac11a0 ffffffff 00000300 00000000
[  251.702206][ T5850] metapage: ffff8880291d4368: 291d4368 ffff8880 291d4368 ffff8880
[  251.710118][ T5850] metapage: ffff8880291d4378: 00d28f80 ffffea00 7bac0000 ffff8880
[  251.718001][ T5850] metapage: ffff8880291d4388: 00001000 0000424c 00000000 00000000
[  251.726189][ T5850] metapage: ffff8880291d4398: 738fb000 ffff8880
[  251.733012][ T5850] page: ffffea0000d28f80: 00fff4000000403c ffffea0001dcd488
[  251.740397][ T5850] page: ffffea0000d28f90: ffffea0000969a88 0000000000000000
[  251.747815][ T5850] page: ffffea0000d28fa0: 000000000005002c ffff8880291d42e8
[  251.755628][ T5850] page: ffffea0000d28fb0: 00000001ffffffff ffff888140ad4000
[  251.762987][ T5850] metapage: ffff8880291d43e0: 00001000 00000000 00003f68 00000000
[  251.771034][ T5850] metapage: ffff8880291d43f0: 738fb228 ffff8880 291d42f8 ffff8880
[  251.779009][ T5850] metapage: ffff8880291d4400: 00000004 00000000 00000000 00000000
[  251.787021][ T5850] metapage: ffff8880291d4410: 77f18000 ffff8880 0000001c 00000000
[  251.794960][ T5850] metapage: ffff8880291d4420: 00000000 dead4ead ffffffff 00000000
[  251.802826][ T5850] metapage: ffff8880291d4430: ffffffff ffffffff 9a931580 ffffffff
[  251.810777][ T5850] metapage: ffff8880291d4440: 96ea4ad0 ffffffff 00000000 00000000
[  251.818680][ T5850] metapage: ffff8880291d4450: 8bac11a0 ffffffff 00000300 00000000
[  251.826595][ T5850] metapage: ffff8880291d4460: 291d4460 ffff8880 291d4460 ffff8880
[  251.834921][ T5850] metapage: ffff8880291d4470: 01dfc600 ffffea00 7bac0000 ffff8880
[  251.842757][ T5850] metapage: ffff8880291d4480: 00001000 0000424c 00000000 00000000
[  251.850724][ T5850] metapage: ffff8880291d4490: 738fb000 ffff8880
[  251.857046][ T5850] page: ffffea0001dfc600: 00fff4800000423c ffffea0000935188
[  251.864466][ T5850] page: ffffea0001dfc610: ffffea0000a523c8 0000000000000000
[  251.871814][ T5850] page: ffffea0001dfc620: 000000000000001c ffff8880291d43e0
[  251.879246][ T5850] page: ffffea0001dfc630: 00000001ffffffff ffff888140ad4000
[  261.683255][ T5849] jfs_flush_journal: synclist not empty
[  261.688858][ T5849] metapage: ffff88807c7289b0: 00001000 00000000 00003a90 00000000
[  261.696883][ T5849] metapage: ffff88807c7289c0: 7c728ab8 ffff8880 29f83228 ffff8880
[  261.704781][ T5849] metapage: ffff88807c7289d0: 00000004 00000000 00000000 00000000
[  261.712666][ T5849] metapage: ffff88807c7289e0: 7ed55000 ffff8880 0005002c 00000000
[  261.720974][ T5849] metapage: ffff88807c7289f0: 00000000 dead4ead ffffffff 00000000
[  261.728971][ T5849] metapage: ffff88807c728a00: ffffffff ffffffff 9a931580 ffffffff
[  261.737000][ T5849] metapage: ffff88807c728a10: 96ea4ad0 ffffffff 00000000 00000000
[  261.744960][ T5849] metapage: ffff88807c728a20: 8bac11a0 ffffffff 00000300 00000000
[  261.752799][ T5849] metapage: ffff88807c728a30: 7c728a30 ffff8880 7c728a30 ffff8880
[  261.760775][ T5849] metapage: ffff88807c728a40: 01fb5540 ffffea00 334e8000 ffff8880
[  261.768697][ T5849] metapage: ffff88807c728a50: 00001000 0000424c 00000000 00000000
[  261.776624][ T5849] metapage: ffff88807c728a60: 29f83000 ffff8880
[  261.782905][ T5849] page: ffffea0001fb5540: 00fff4000000403c ffffea0000cd9988
[  261.790297][ T5849] page: ffffea0001fb5550: ffffea000092c888 0000000000000000
[  261.797712][ T5849] page: ffffea0001fb5560: 000000000005002c ffff88807c7289b0
[  261.805120][ T5849] page: ffffea0001fb5570: 00000001ffffffff ffff888140ad4000
[  261.812477][ T5849] metapage: ffff88807c728aa8: 00001000 00000000 00003f68 00000000
[  261.820461][ T5849] metapage: ffff88807c728ab8: 29f83228 ffff8880 7c7289c0 ffff8880
[  261.828384][ T5849] metapage: ffff88807c728ac8: 00000004 00000000 00000000 00000000
[  261.836403][ T5849] metapage: ffff88807c728ad8: 2a04f000 ffff8880 0000001c 00000000
[  261.844296][ T5849] metapage: ffff88807c728ae8: 00000000 dead4ead ffffffff 00000000
[  261.852253][ T5849] metapage: ffff88807c728af8: ffffffff ffffffff 9a931580 ffffffff
[  261.860202][ T5849] metapage: ffff88807c728b08: 96ea4ad0 ffffffff 00000000 00000000
[  261.868128][ T5849] metapage: ffff88807c728b18: 8bac11a0 ffffffff 00000300 00000000
[  261.876042][ T5849] metapage: ffff88807c728b28: 7c728b28 ffff8880 7c728b28 ffff8880
[  261.884027][ T5849] metapage: ffff88807c728b38: 00a813c0 ffffea00 334e8000 ffff8880
[  261.891850][ T5849] metapage: ffff88807c728b48: 00001000 0000424c 00000000 00000000
[  261.900013][ T5849] metapage: ffff88807c728b58: 29f83000 ffff8880
[  261.906433][ T5849] page: ffffea0000a813c0: 00fff4800000423c ffffea0000a81308
[  261.913940][ T5849] page: ffffea0000a813d0: ffffea0000cd9988 0000000000000000
[  261.921279][ T5849] page: ffffea0000a813e0: 000000000000001c ffff88807c728aa8
[  261.928672][ T5849] page: ffffea0000a813f0: 00000001ffffffff ffff888140ad4000
[  264.983326][ T5848] jfs_flush_journal: synclist not empty
[  264.988917][ T5848] metapage: ffff888077ee82e8: 00001000 00000000 00003a90 00000000
[  264.996866][ T5848] metapage: ffff888077ee82f8: 77ee8200 ffff8880 33012228 ffff8880
[  265.005245][ T5848] metapage: ffff888077ee8308: 00000004 00000000 00000000 00000000
[  265.013344][ T5848] metapage: ffff888077ee8318: 34d54000 ffff8880 0005002c 00000000
[  265.021308][ T5848] metapage: ffff888077ee8328: 00000000 dead4ead ffffffff 00000000
[  265.029373][ T5848] metapage: ffff888077ee8338: ffffffff ffffffff 9a931580 ffffffff
[  265.037270][ T5848] metapage: ffff888077ee8348: 96ea4ad0 ffffffff 00000000 00000000
[  265.045240][ T5848] metapage: ffff888077ee8358: 8bac11a0 ffffffff 00000300 00000000
[  265.053183][ T5848] metapage: ffff888077ee8368: 77ee8368 ffff8880 77ee8368 ffff8880
[  265.061045][ T5848] metapage: ffff888077ee8378: 00d35500 ffffea00 74ff4000 ffff8880
[  265.068981][ T5848] metapage: ffff888077ee8388: 00001000 0000424c 00000000 00000000
[  265.076907][ T5848] metapage: ffff888077ee8398: 33012000 ffff8880
[  265.083235][ T5848] page: ffffea0000d35500: 00fff4000000403c ffffea0000afacc8
[  265.090577][ T5848] page: ffffea0000d35510: ffffea0000bf4408 0000000000000000
[  265.097976][ T5848] page: ffffea0000d35520: 000000000005002c ffff888077ee82e8
[  265.105441][ T5848] page: ffffea0000d35530: 00000001ffffffff ffff888140ad4000
[  265.112762][ T5848] metapage: ffff888077ee81f0: 00001000 00000000 00003f68 00000000
[  265.120820][ T5848] metapage: ffff888077ee8200: 33012228 ffff8880 77ee82f8 ffff8880
[  265.128725][ T5848] metapage: ffff888077ee8210: 00000004 00000000 00000000 00000000
[  265.136704][ T5848] metapage: ffff888077ee8220: 2fc3b000 ffff8880 0000001c 00000000
[  265.144605][ T5848] metapage: ffff888077ee8230: 00000000 dead4ead ffffffff 00000000
[  265.152505][ T5848] metapage: ffff888077ee8240: ffffffff ffffffff 9a931580 ffffffff
[  265.160458][ T5848] metapage: ffff888077ee8250: 96ea4ad0 ffffffff 00000000 00000000
[  265.168393][ T5848] metapage: ffff888077ee8260: 8bac11a0 ffffffff 00000300 00000000
[  265.176317][ T5848] metapage: ffff888077ee8270: 77ee8270 ffff8880 77ee8270 ffff8880
[  265.184214][ T5848] metapage: ffff888077ee8280: 00bf0ec0 ffffea00 74ff4000 ffff8880
[  265.192062][ T5848] metapage: ffff888077ee8290: 00001000 0000424c 00000000 00000000
[  265.199952][ T5848] metapage: ffff888077ee82a0: 33012000 ffff8880
[  265.206290][ T5848] page: ffffea0000bf0ec0: 00fff4800000423c ffffea0000ca93c8
[  265.213654][ T5848] page: ffffea0000bf0ed0: ffffea0000b067c8 0000000000000000
[  265.220974][ T5848] page: ffffea0000bf0ee0: 000000000000001c ffff888077ee81f0
[  265.228340][ T5848] page: ffffea0000bf0ef0: 00000001ffffffff ffff888140ad4000
[  266.413301][ T5851] jfs_flush_journal: synclist not empty
[  266.418932][ T5851] metapage: ffff888077ee88b8: 00001000 00000000 00003a90 00000000
[  266.426887][ T5851] metapage: ffff888077ee88c8: 77ee86d8 ffff8880 750a7a28 ffff8880
[  266.434769][ T5851] metapage: ffff888077ee88d8: 00000004 00000000 00000000 00000000
[  266.443066][ T5851] metapage: ffff888077ee88e8: 7157f000 ffff8880 0005002c 00000000
[  266.451004][ T5851] metapage: ffff888077ee88f8: 00000000 dead4ead ffffffff 00000000
[  266.458973][ T5851] metapage: ffff888077ee8908: ffffffff ffffffff 9a931580 ffffffff
[  266.466861][ T5851] metapage: ffff888077ee8918: 96ea4ad0 ffffffff 00000000 00000000
[  266.474754][ T5851] metapage: ffff888077ee8928: 8bac11a0 ffffffff 00000300 00000000
[  266.482625][ T5851] metapage: ffff888077ee8938: 77ee8938 ffff8880 77ee8938 ffff8880
[  266.490555][ T5851] metapage: ffff888077ee8948: 01c55fc0 ffffea00 74cac000 ffff8880
[  266.498480][ T5851] metapage: ffff888077ee8958: 00001000 0000424c 00000000 00000000
[  266.506500][ T5851] metapage: ffff888077ee8968: 750a7800 ffff8880
[  266.512776][ T5851] page: ffffea0001c55fc0: 00fff4000000403c ffffea0001c54808
[  266.520154][ T5851] page: ffffea0001c55fd0: ffffea0001bb3548 0000000000000000
[  266.527584][ T5851] page: ffffea0001c55fe0: 000000000005002c ffff888077ee88b8
[  266.534967][ T5851] page: ffffea0001c55ff0: 00000001ffffffff ffff888140ad4000
[  266.542292][ T5851] metapage: ffff888077ee86c8: 00001000 00000000 00003f68 00000000
[  266.550251][ T5851] metapage: ffff888077ee86d8: 750a7a28 ffff8880 77ee88c8 ffff8880
[  266.558130][ T5851] metapage: ffff888077ee86e8: 00000004 00000000 00000000 00000000
[  266.566052][ T5851] metapage: ffff888077ee86f8: 33b71000 ffff8880 0000001c 00000000
[  266.574024][ T5851] metapage: ffff888077ee8708: 00000000 dead4ead ffffffff 00000000
[  266.581975][ T5851] metapage: ffff888077ee8718: ffffffff ffffffff 9a931580 ffffffff
[  266.589914][ T5851] metapage: ffff888077ee8728: 96ea4ad0 ffffffff 00000000 00000000
[  266.597842][ T5851] metapage: ffff888077ee8738: 8bac11a0 ffffffff 00000300 00000000
[  266.605768][ T5851] metapage: ffff888077ee8748: 77ee8748 ffff8880 77ee8748 ffff8880
[  266.613668][ T5851] metapage: ffff888077ee8758: 00cedc40 ffffea00 74cac000 ffff8880
[  266.621491][ T5851] metapage: ffff888077ee8768: 00001000 0000424c 00000000 00000000
[  266.629411][ T5851] metapage: ffff888077ee8778: 750a7800 ffff8880
[  266.635717][ T5851] page: ffffea0000cedc40: 00fff4800000423c ffffea0000be6088
[  266.643386][ T5851] page: ffffea0000cedc50: ffffea0001c54808 0000000000000000
[  266.650730][ T5851] page: ffffea0000cedc60: 000000000000001c ffff888077ee86c8
[  266.658141][ T5851] page: ffffea0000cedc70: 00000001ffffffff ffff888140ad4000
[  302.263189][ T5852] jfs_flush_journal: synclist not empty
[  302.268919][ T5852] metapage: ffff888077ee8ba0: 00001000 00000000 00003a90 00000000
[  302.276840][ T5852] metapage: ffff888077ee8bb0: 77ee8ca8 ffff8880 277c3a28 ffff8880
[  302.284748][ T5852] metapage: ffff888077ee8bc0: 00000004 00000000 00000000 00000000
[  302.292569][ T5852] metapage: ffff888077ee8bd0: 730b2000 ffff8880 0005002c 00000000
[  302.300450][ T5852] metapage: ffff888077ee8be0: 00000000 dead4ead ffffffff 00000000
[  302.308368][ T5852] metapage: ffff888077ee8bf0: ffffffff ffffffff 9a931580 ffffffff
[  302.316249][ T5852] metapage: ffff888077ee8c00: 96ea4ad0 ffffffff 00000000 00000000
[  302.324182][ T5852] metapage: ffff888077ee8c10: 8bac11a0 ffffffff 00000300 00000000
[  302.332131][ T5852] metapage: ffff888077ee8c20: 77ee8c20 ffff8880 77ee8c20 ffff8880
[  302.340025][ T5852] metapage: ffff888077ee8c30: 01cc2c80 ffffea00 750ba000 ffff8880
[  302.347950][ T5852] metapage: ffff888077ee8c40: 00001000 0000424c 00000000 00000000
[  302.355873][ T5852] metapage: ffff888077ee8c50: 277c3800 ffff8880
[  302.362253][ T5852] page: ffffea0001cc2c80: 00fff4000000403c ffffea0001df13c8
[  302.369632][ T5852] page: ffffea0001cc2c90: ffffea0000afbcc8 0000000000000000
[  302.376997][ T5852] page: ffffea0001cc2ca0: 000000000005002c ffff888077ee8ba0
[  302.384455][ T5852] page: ffffea0001cc2cb0: 00000001ffffffff ffff888140ad4000
[  302.391797][ T5852] metapage: ffff888077ee8c98: 00001000 00000000 00003f68 00000000
[  302.399787][ T5852] metapage: ffff888077ee8ca8: 277c3a28 ffff8880 77ee8bb0 ffff8880
[  302.407718][ T5852] metapage: ffff888077ee8cb8: 00000004 00000000 00000000 00000000
[  302.415619][ T5852] metapage: ffff888077ee8cc8: 77c4f000 ffff8880 0000001c 00000000
[  302.423537][ T5852] metapage: ffff888077ee8cd8: 00000000 dead4ead ffffffff 00000000
[  302.431359][ T5852] metapage: ffff888077ee8ce8: ffffffff ffffffff 9a931580 ffffffff
[  302.439352][ T5852] metapage: ffff888077ee8cf8: 96ea4ad0 ffffffff 00000000 00000000
[  302.447417][ T5852] metapage: ffff888077ee8d08: 8bac11a0 ffffffff 00000300 00000000
[  302.455308][ T5852] metapage: ffff888077ee8d18: 77ee8d18 ffff8880 77ee8d18 ffff8880
[  302.463752][ T5852] metapage: ffff888077ee8d28: 01df13c0 ffffea00 750ba000 ffff8880
[  302.471575][ T5852] metapage: ffff888077ee8d38: 00001000 0000424c 00000000 00000000
[  302.479721][ T5852] metapage: ffff888077ee8d48: 277c3800 ffff8880
[  302.486056][ T5852] page: ffffea0001df13c0: 00fff4800000423c ffffea0001c1d148
[  302.493450][ T5852] page: ffffea0001df13d0: ffffea0001cc2c88 0000000000000000
[  302.500785][ T5852] page: ffffea0001df13e0: 000000000000001c ffff888077ee8c98
[pid  5853] umount2("./51/file0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5852] <... umount2 resumed>)      = 0
[pid  5853] <... umount2 resumed>)      = 0
[pid  5852] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5852] newfstatat(AT_FDCWD, "./0/file0",  <unfinished ...>
[pid  5853] umount2("./51/file0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5852] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5853] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid  5853] newfstatat(AT_FDCWD, "./51/file0",  <unfinished ...>
[pid  5852] umount2("./0/file0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5853] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5853] umount2("./51/file0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5852] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid  5853] <... umount2 resumed>)      = -1 EINVAL (Invalid argument)
[pid  5852] openat(AT_FDCWD, "./0/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY <unfinished ...>
[pid  5853] openat(AT_FDCWD, "./51/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY <unfinished ...>
[pid  5852] <... openat resumed>)       = 4
[pid  5853] <... openat resumed>)       = 4
[pid  5852] newfstatat(4, "",  <unfinished ...>
[pid  5853] newfstatat(4, "",  <unfinished ...>
[pid  5852] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5853] <... newfstatat resumed>{st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[  302.508285][ T5852] page: ffffea0001df13f0: 00000001ffffffff ffff888140ad4000
[pid  5853] getdents64(4,  <unfinished ...>
[pid  5852] getdents64(4,  <unfinished ...>
[pid  5853] <... getdents64 resumed>0x55557174e730 /* 2 entries */, 32768) = 48
[pid  5852] <... getdents64 resumed>0x55557174e730 /* 2 entries */, 32768) = 48
[pid  5853] getdents64(4,  <unfinished ...>
[pid  5852] getdents64(4,  <unfinished ...>
[pid  5853] <... getdents64 resumed>0x55557174e730 /* 0 entries */, 32768) = 0
[pid  5852] <... getdents64 resumed>0x55557174e730 /* 0 entries */, 32768) = 0
[pid  5853] close(4)                    = 0
[pid  5852] close(4 <unfinished ...>
[pid  5853] rmdir("./51/file0" <unfinished ...>
[pid  5852] <... close resumed>)        = 0
[pid  5852] rmdir("./0/file0" <unfinished ...>
[pid  5853] <... rmdir resumed>)        = 0
[pid  5853] getdents64(3, 0x5555717466f0 /* 0 entries */, 32768) = 0
[pid  5853] close(3)                    = 0
[pid  5852] <... rmdir resumed>)        = 0
[pid  5853] rmdir("./51" <unfinished ...>
[pid  5852] getdents64(3,  <unfinished ...>
[pid  5853] <... rmdir resumed>)        = 0
[pid  5852] <... getdents64 resumed>0x5555717466f0 /* 0 entries */, 32768) = 0
[pid  5853] mkdir("./52", 0777 <unfinished ...>
[pid  5852] close(3 <unfinished ...>
[pid  5853] <... mkdir resumed>)        = 0
[pid  5852] <... close resumed>)        = 0
[pid  5852] rmdir("./0" <unfinished ...>
[pid  5853] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 3
[pid  5853] ioctl(3, LOOP_CLR_FD)       = 0
[pid  5852] <... rmdir resumed>)        = 0
[pid  5853] close(3 <unfinished ...>
[pid  5852] mkdir("./1", 0777)          = 0
[pid  5852] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 3
[pid  5852] ioctl(3, LOOP_CLR_FD)       = 0
[pid  5852] close(3 <unfinished ...>
[pid  5853] <... close resumed>)        = 0
[pid  5853] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555571745650) = 5956
./strace-static-x86_64: Process 5956 attached
[pid  5956] set_robust_list(0x555571745660, 24) = 0
[pid  5956] chdir("./52")               = 0
[pid  5956] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
executing program
[pid  5956] setpgid(0, 0)               = 0
[pid  5956] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5956] write(3, "1000", 4)         = 4
[pid  5956] close(3)                    = 0
[pid  5956] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5956] write(1, "executing program\n", 18) = 18
[pid  5956] memfd_create("syzkaller", 0) = 3
[pid  5956] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7f07800000
[pid  5852] <... close resumed>)        = 0
[pid  5852] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5957 attached
, child_tidptr=0x555571745650) = 5957
[pid  5957] set_robust_list(0x555571745660, 24) = 0
[pid  5957] chdir("./1")                = 0
[pid  5957] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5957] setpgid(0, 0)               = 0
[pid  5957] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5957] write(3, "1000", 4)         = 4
[pid  5957] close(3)                    = 0
[pid  5957] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5957] write(1, "executing program\n", 18executing program
) = 18
[pid  5957] memfd_create("syzkaller", 0 <unfinished ...>
[pid  5956] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 <unfinished ...>
[pid  5957] <... memfd_create resumed>) = 3
[pid  5957] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7f07800000
[pid  5957] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216 <unfinished ...>
[pid  5956] <... write resumed>)        = 16777216
[pid  5956] munmap(0x7f7f07800000, 138412032) = 0
[pid  5956] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = 4
[pid  5956] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5956] close(3)                    = 0
[pid  5956] close(4)                    = 0
[pid  5956] mkdir("./file0", 0777)      = 0
[  303.031276][ T5956] loop5: detected capacity change from 0 to 32768
[pid  5956] mount("/dev/loop5", "./file0", "jfs", MS_LAZYTIME, "") = 0
[pid  5956] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5956] chdir("./file0")            = 0
[pid  5956] openat(AT_FDCWD, "/dev/loop5", O_RDWR) = -1 EBUSY (Device or resource busy)
[pid  5956] symlink("./file0/file0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0
[pid  5956] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL) = 0
[pid  5956] exit_group(0)               = ?
[pid  5956] +++ exited with 0 +++
[pid  5853] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5956, si_uid=0, si_status=0, si_utime=0, si_stime=29 /* 0.29 s */} ---
[pid  5853] umount2("./52", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5853] openat(AT_FDCWD, "./52", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
[pid  5853] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5853] getdents64(3, 0x5555717466f0 /* 4 entries */, 32768) = 112
[pid  5853] umount2("./52/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5853] newfstatat(AT_FDCWD, "./52/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5853] unlink("./52/binderfs")     = 0
[pid  5853] umount2("./52/file0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5957] <... write resumed>)        = 16777216
[pid  5957] munmap(0x7f7f07800000, 138412032) = 0
[pid  5957] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = 4
[  303.115260][  T113] blkno = 5002c, nblocks = 1
[  303.119944][  T113] ERROR: (device loop5): dbUpdatePMap: blocks are outside the map
[  303.119944][  T113] 
[  303.140987][  T113] ERROR: (device loop5): remounting filesystem as read-only
[  303.149091][ T5853] JFS: metapage_get_blocks failed
[pid  5957] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5957] close(3)                    = 0
[pid  5957] close(4)                    = 0
[pid  5957] mkdir("./file0", 0777)      = 0
[pid  5957] mount("/dev/loop4", "./file0", "jfs", MS_LAZYTIME, "") = 0
[pid  5957] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5957] chdir("./file0")            = 0
[pid  5957] openat(AT_FDCWD, "/dev/loop4", O_RDWR) = -1 EBUSY (Device or resource busy)
[pid  5957] symlink("./file0/file0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0
[  303.178752][ T5957] loop4: detected capacity change from 0 to 32768
[pid  5957] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL) = -1 EINVAL (Invalid argument)
[pid  5957] exit_group(0)               = ?
[pid  5957] +++ exited with 0 +++
[pid  5852] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5957, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=23 /* 0.23 s */} ---
[pid  5852] restart_syscall(<... resuming interrupted clone ...>) = 0
[pid  5852] umount2("./1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5852] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
[  303.236193][  T114] blkno = 5002c, nblocks = 1
[  303.240858][  T114] ERROR: (device loop4): dbUpdatePMap: blocks are outside the map
[  303.240858][  T114] 
[  303.251263][  T114] ERROR: (device loop4): remounting filesystem as read-only
[  303.259926][ T5957] JFS: metapage_get_blocks failed
[pid  5852] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5852] getdents64(3, 0x5555717466f0 /* 4 entries */, 32768) = 112
[pid  5852] umount2("./1/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5852] newfstatat(AT_FDCWD, "./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5852] unlink("./1/binderfs")      = 0
[  354.513247][ T5850] jfs_flush_journal: synclist not empty
[  354.518844][ T5850] metapage: ffff8880291d42e8: 00001000 00000000 00003a90 00000000
[  354.526795][ T5850] metapage: ffff8880291d42f8: 291d43f0 ffff8880 738fb228 ffff8880
[  354.534886][ T5850] metapage: ffff8880291d4308: 00000004 00000000 00000000 00000000
[  354.542736][ T5850] metapage: ffff8880291d4318: 34a3e000 ffff8880 0005002c 00000000
[  354.550670][ T5850] metapage: ffff8880291d4328: 00000000 dead4ead ffffffff 00000000
[  354.558628][ T5850] metapage: ffff8880291d4338: ffffffff ffffffff 9a931580 ffffffff
[  354.566569][ T5850] metapage: ffff8880291d4348: 96ea4ad0 ffffffff 00000000 00000000
[  354.574443][ T5850] metapage: ffff8880291d4358: 8bac11a0 ffffffff 00000300 00000000
[  354.582269][ T5850] metapage: ffff8880291d4368: 291d4368 ffff8880 291d4368 ffff8880
[  354.590205][ T5850] metapage: ffff8880291d4378: 00d28f80 ffffea00 7bac0000 ffff8880
[  354.598068][ T5850] metapage: ffff8880291d4388: 00001000 0000424c 00000000 00000000
[  354.605971][ T5850] metapage: ffff8880291d4398: 738fb000 ffff8880
[  354.612333][ T5850] page: ffffea0000d28f80: 00fff4000000403c ffffea00009c7748
[  354.619691][ T5850] page: ffffea0000d28f90: ffffea0000969a88 0000000000000000
[  354.627052][ T5850] page: ffffea0000d28fa0: 000000000005002c ffff8880291d42e8
[  354.634483][ T5850] page: ffffea0000d28fb0: 00000001ffffffff ffff888140ad4000
[  354.641824][ T5850] metapage: ffff8880291d43e0: 00001000 00000000 00003f68 00000000
[  354.649779][ T5850] metapage: ffff8880291d43f0: 738fb228 ffff8880 291d42f8 ffff8880
[  354.657694][ T5850] metapage: ffff8880291d4400: 00000004 00000000 00000000 00000000
[  354.665624][ T5850] metapage: ffff8880291d4410: 77f18000 ffff8880 0000001c 00000000
[  354.673522][ T5850] metapage: ffff8880291d4420: 00000000 dead4ead ffffffff 00000000
[  354.681389][ T5850] metapage: ffff8880291d4430: ffffffff ffffffff 9a931580 ffffffff
[  354.689364][ T5850] metapage: ffff8880291d4440: 96ea4ad0 ffffffff 00000000 00000000
[  354.697269][ T5850] metapage: ffff8880291d4450: 8bac11a0 ffffffff 00000300 00000000
[  354.705202][ T5850] metapage: ffff8880291d4460: 291d4460 ffff8880 291d4460 ffff8880
[  354.713026][ T5850] metapage: ffff8880291d4470: 01dfc600 ffffea00 7bac0000 ffff8880
[  354.720929][ T5850] metapage: ffff8880291d4480: 00001000 0000424c 00000000 00000000
[  354.728822][ T5850] metapage: ffff8880291d4490: 738fb000 ffff8880
[  354.735310][ T5850] page: ffffea0001dfc600: 00fff4800000423c ffffea0000a43848
[  354.742636][ T5850] page: ffffea0001dfc610: ffffea0000a523c8 0000000000000000
[  354.750072][ T5850] page: ffffea0001dfc620: 000000000000001c ffff8880291d43e0
[pid  5852] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5850] <... umount2 resumed>)      = 0
[pid  5850] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5850] newfstatat(AT_FDCWD, "./1/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5850] umount2("./1/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[  354.757444][ T5850] page: ffffea0001dfc630: 00000001ffffffff ffff888140ad4000
[pid  5850] openat(AT_FDCWD, "./1/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
[pid  5850] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5850] getdents64(4, 0x55557174e730 /* 2 entries */, 32768) = 48
[pid  5850] getdents64(4, 0x55557174e730 /* 0 entries */, 32768) = 0
[pid  5850] close(4)                    = 0
[pid  5850] rmdir("./1/file0")          = 0
[pid  5850] getdents64(3, 0x5555717466f0 /* 0 entries */, 32768) = 0
[pid  5850] close(3)                    = 0
[pid  5850] rmdir("./1")                = 0
[pid  5850] mkdir("./2", 0777)          = 0
[pid  5850] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 3
[pid  5850] ioctl(3, LOOP_CLR_FD)       = 0
[pid  5850] close(3)                    = 0
[pid  5850] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5959 attached
, child_tidptr=0x555571745650) = 5959
[pid  5959] set_robust_list(0x555571745660, 24) = 0
[pid  5959] chdir("./2")                = 0
[pid  5959] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5959] setpgid(0, 0)               = 0
[pid  5959] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5959] write(3, "1000", 4)         = 4
[pid  5959] close(3)                    = 0
[pid  5959] symlink("/dev/binderfs", "./binderfs") = 0
[pid  5959] write(1, "executing program\n", 18executing program
) = 18
[pid  5959] memfd_create("syzkaller", 0) = 3
[pid  5959] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7f07800000
[pid  5959] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216
[pid  5959] munmap(0x7f7f07800000, 138412032) = 0
[pid  5959] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = 4
[pid  5959] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5959] close(3)                    = 0
[pid  5959] close(4)                    = 0
[pid  5959] mkdir("./file0", 0777)      = 0
[pid  5959] mount("/dev/loop2", "./file0", "jfs", MS_LAZYTIME, "") = 0
[pid  5959] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[  355.369470][ T5959] loop2: detected capacity change from 0 to 32768
[pid  5959] chdir("./file0")            = 0
[pid  5959] openat(AT_FDCWD, "/dev/loop2", O_RDWR) = -1 EBUSY (Device or resource busy)
[pid  5959] symlink("./file0/file0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0
[pid  5959] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL) = -1 EINVAL (Invalid argument)
[pid  5959] exit_group(0)               = ?
[pid  5959] +++ exited with 0 +++
[pid  5850] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5959, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=24 /* 0.24 s */} ---
[pid  5850] umount2("./2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5850] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
[  355.466123][  T113] blkno = 5002c, nblocks = 1
[  355.470794][  T113] ERROR: (device loop2): dbUpdatePMap: blocks are outside the map
[  355.470794][  T113] 
[  355.481577][  T113] ERROR: (device loop2): remounting filesystem as read-only
[  355.489973][ T5959] JFS: metapage_get_blocks failed
[pid  5850] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5850] getdents64(3, 0x5555717466f0 /* 4 entries */, 32768) = 112
[pid  5850] umount2("./2/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5850] newfstatat(AT_FDCWD, "./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5850] unlink("./2/binderfs")      = 0
[  406.783344][ T5849] jfs_flush_journal: synclist not empty
[  406.788952][ T5849] metapage: ffff88807c7289b0: 00001000 00000000 00003a90 00000000
[  406.796911][ T5849] metapage: ffff88807c7289c0: 7c728ab8 ffff8880 29f83228 ffff8880
[  406.804959][ T5849] metapage: ffff88807c7289d0: 00000004 00000000 00000000 00000000
[  406.812818][ T5849] metapage: ffff88807c7289e0: 7ed55000 ffff8880 0005002c 00000000
[  406.820726][ T5849] metapage: ffff88807c7289f0: 00000000 dead4ead ffffffff 00000000
[  406.828633][ T5849] metapage: ffff88807c728a00: ffffffff ffffffff 9a931580 ffffffff
[  406.836516][ T5849] metapage: ffff88807c728a10: 96ea4ad0 ffffffff 00000000 00000000
[  406.844384][ T5849] metapage: ffff88807c728a20: 8bac11a0 ffffffff 00000300 00000000
[  406.852203][ T5849] metapage: ffff88807c728a30: 7c728a30 ffff8880 7c728a30 ffff8880
[  406.860090][ T5849] metapage: ffff88807c728a40: 01fb5540 ffffea00 334e8000 ffff8880
[  406.867975][ T5849] metapage: ffff88807c728a50: 00001000 0000424c 00000000 00000000
[  406.875849][ T5849] metapage: ffff88807c728a60: 29f83000 ffff8880
[  406.882124][ T5849] page: ffffea0001fb5540: 00fff4000000403c ffffea0000a813c8
[  406.889676][ T5849] page: ffffea0001fb5550: ffffea000092c888 0000000000000000
[  406.897033][ T5849] page: ffffea0001fb5560: 000000000005002c ffff88807c7289b0
[  406.904383][ T5849] page: ffffea0001fb5570: 00000001ffffffff ffff888140ad4000
[  406.911733][ T5849] metapage: ffff88807c728aa8: 00001000 00000000 00003f68 00000000
[  406.919662][ T5849] metapage: ffff88807c728ab8: 29f83228 ffff8880 7c7289c0 ffff8880
[  406.927578][ T5849] metapage: ffff88807c728ac8: 00000004 00000000 00000000 00000000
[  406.935533][ T5849] metapage: ffff88807c728ad8: 2a04f000 ffff8880 0000001c 00000000
[  406.943440][ T5849] metapage: ffff88807c728ae8: 00000000 dead4ead ffffffff 00000000
[  406.951310][ T5849] metapage: ffff88807c728af8: ffffffff ffffffff 9a931580 ffffffff
[  406.959220][ T5849] metapage: ffff88807c728b08: 96ea4ad0 ffffffff 00000000 00000000
[  406.967135][ T5849] metapage: ffff88807c728b18: 8bac11a0 ffffffff 00000300 00000000
[  406.975027][ T5849] metapage: ffff88807c728b28: 7c728b28 ffff8880 7c728b28 ffff8880
[  406.982870][ T5849] metapage: ffff88807c728b38: 00a813c0 ffffea00 334e8000 ffff8880
[  406.990769][ T5849] metapage: ffff88807c728b48: 00001000 0000424c 00000000 00000000
[  406.998780][ T5849] metapage: ffff88807c728b58: 29f83000 ffff8880
[  407.005132][ T5849] page: ffffea0000a813c0: 00fff4800000423c ffffea0000c29c88
[  407.012472][ T5849] page: ffffea0000a813d0: ffffea0001fb5548 0000000000000000
[  407.019858][ T5849] page: ffffea0000a813e0: 000000000000001c ffff88807c728aa8
[  407.027245][ T5849] page: ffffea0000a813f0: 00000001ffffffff ffff888140ad4000
[pid  5850] umount2("./2/file0", MNT_FORCE|UMOUNT_NOFOLLOW <unfinished ...>
[pid  5849] <... umount2 resumed>)      = 0
[pid  5849] umount2("./9/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5849] newfstatat(AT_FDCWD, "./9/file0", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5849] umount2("./9/file0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5849] openat(AT_FDCWD, "./9/file0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4
[pid  5849] newfstatat(4, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5849] getdents64(4, 0x55557174e730 /* 2 entries */, 32768) = 48
[pid  5849] getdents64(4, 0x55557174e730 /* 0 entries */, 32768) = 0
[pid  5849] close(4)                    = 0
[pid  5849] rmdir("./9/file0")          = 0
[pid  5849] getdents64(3, 0x5555717466f0 /* 0 entries */, 32768) = 0
[pid  5849] close(3)                    = 0
[pid  5849] rmdir("./9")                = 0
[pid  5849] mkdir("./10", 0777)         = 0
[pid  5849] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 3
[pid  5849] ioctl(3, LOOP_CLR_FD)       = 0
[pid  5849] close(3)                    = 0
[pid  5849] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5968 attached
, child_tidptr=0x555571745650) = 5968
[pid  5968] set_robust_list(0x555571745660, 24) = 0
[pid  5968] chdir("./10")               = 0
[pid  5968] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid  5968] setpgid(0, 0)               = 0
[pid  5968] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid  5968] write(3, "1000", 4)         = 4
[pid  5968] close(3)                    = 0
[pid  5968] symlink("/dev/binderfs", "./binderfs") = 0
executing program
[pid  5968] write(1, "executing program\n", 18) = 18
[pid  5968] memfd_create("syzkaller", 0) = 3
[pid  5968] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f7f07800000
[pid  5968] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216
[pid  5968] munmap(0x7f7f07800000, 138412032) = 0
[pid  5968] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = 4
[pid  5968] ioctl(4, LOOP_SET_FD, 3)    = 0
[pid  5968] close(3)                    = 0
[pid  5968] close(4)                    = 0
[pid  5968] mkdir("./file0", 0777)      = 0
[pid  5968] mount("/dev/loop1", "./file0", "jfs", MS_LAZYTIME, "") = 0
[  407.576898][ T5968] loop1: detected capacity change from 0 to 32768
[pid  5968] openat(AT_FDCWD, "./file0", O_RDONLY|O_DIRECTORY) = 3
[pid  5968] chdir("./file0")            = 0
[pid  5968] openat(AT_FDCWD, "/dev/loop1", O_RDWR) = -1 EBUSY (Device or resource busy)
[pid  5968] symlink("./file0/file0", "./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa") = 0
[pid  5968] mount(NULL, ".", NULL, MS_NOSUID|MS_NOEXEC|MS_REMOUNT|MS_NODIRATIME|MS_REC|MS_POSIXACL|MS_UNBINDABLE|MS_PRIVATE|MS_SLAVE|MS_STRICTATIME, NULL) = -1 EINVAL (Invalid argument)
[pid  5968] exit_group(0)               = ?
[pid  5968] +++ exited with 0 +++
[pid  5849] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5968, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=20 /* 0.20 s */} ---
[pid  5849] restart_syscall(<... resuming interrupted clone ...>) = 0
[pid  5849] umount2("./10", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5849] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3
[pid  5849] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_EMPTY_PATH) = 0
[pid  5849] getdents64(3, 0x5555717466f0 /* 4 entries */, 32768) = 112
[  407.679287][  T113] blkno = 5002c, nblocks = 1
[  407.684071][  T113] ERROR: (device loop1): dbUpdatePMap: blocks are outside the map
[  407.684071][  T113] 
[  407.694659][  T113] ERROR: (device loop1): remounting filesystem as read-only
[  407.702528][ T5968] JFS: metapage_get_blocks failed
[pid  5849] umount2("./10/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument)
[pid  5849] newfstatat(AT_FDCWD, "./10/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0
[pid  5849] unlink("./10/binderfs")     = 0
[  429.373876][   T30] INFO: task syz-executor286:5851 blocked for more than 143 seconds.
[  429.382075][   T30]       Not tainted 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0
[  429.389878][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  429.398746][   T30] task:syz-executor286 state:D stack:25840 pid:5851  tgid:5851  ppid:5847   flags:0x00004002
[  429.409091][   T30] Call Trace:
[  429.412397][   T30]  <TASK>
[  429.415412][   T30]  __schedule+0xe58/0x5ad0
[  429.419987][   T30]  ? __pfx___lock_acquire+0x10/0x10
[  429.425301][   T30]  ? __pfx___lock_acquire+0x10/0x10
[  429.430576][   T30]  ? __pfx___schedule+0x10/0x10
[  429.435504][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  429.441271][   T30]  ? schedule+0x298/0x350
[  429.445693][   T30]  ? __pfx_lock_release+0x10/0x10
[  429.450791][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  429.456643][   T30]  ? __mutex_trylock_common+0x78/0x250
[  429.462186][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  429.467940][   T30]  ? lock_acquire+0x2f/0xb0
[  429.472485][   T30]  ? schedule+0x1fd/0x350
[  429.476915][   T30]  schedule+0xe7/0x350
[  429.481049][   T30]  schedule_preempt_disabled+0x13/0x30
[  429.486598][   T30]  __mutex_lock+0x62b/0xa60
[  429.491167][   T30]  ? lmLogClose+0xc8/0x710
[  429.495673][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  429.500800][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  429.506645][   T30]  ? lmLogClose+0xc8/0x710
[  429.511133][   T30]  lmLogClose+0xc8/0x710
[  429.515470][   T30]  ? filemap_check_errors+0xa9/0x160
[  429.520826][   T30]  jfs_umount+0x2f0/0x440
[  429.525284][   T30]  jfs_put_super+0x88/0x1d0
[  429.529847][   T30]  ? __pfx_jfs_put_super+0x10/0x10
[  429.535063][   T30]  generic_shutdown_super+0x15f/0x3d0
[  429.540494][   T30]  kill_block_super+0x3b/0x90
[  429.545285][   T30]  deactivate_locked_super+0xc1/0x1a0
[  429.550719][   T30]  deactivate_super+0xde/0x100
[  429.555559][   T30]  cleanup_mnt+0x222/0x450
[  429.560037][   T30]  task_work_run+0x151/0x250
[  429.564733][   T30]  ? __pfx_task_work_run+0x10/0x10
[  429.569888][   T30]  ? putname+0x13c/0x180
[  429.574224][   T30]  ptrace_notify+0x10e/0x130
[  429.578899][   T30]  syscall_exit_to_user_mode_prepare+0x126/0x290
[  429.585356][   T30]  syscall_exit_to_user_mode+0x11/0x2a0
[  429.590974][   T30]  do_syscall_64+0xda/0x250
[  429.595570][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  429.601529][   T30] RIP: 0033:0x7f7f0fe1d4b7
[  429.606026][   T30] RSP: 002b:00007fff5f1bf788 EFLAGS: 00000206 ORIG_RAX: 00000000000000a6
[  429.614536][   T30] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f7f0fe1d4b7
[  429.622552][   T30] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff5f1bf840
[  429.630594][   T30] RBP: 00007fff5f1bf840 R08: 0000000000000000 R09: 0000000000000000
[  429.638660][   T30] R10: 00000000ffffffff R11: 0000000000000206 R12: 00007fff5f1c08a0
[  429.646728][   T30] R13: 00005555717466c0 R14: 000000000000000d R15: 431bde82d7b634db
[  429.654799][   T30]  </TASK>
[  429.657881][   T30] 
[  429.657881][   T30] Showing all locks held in the system:
[  429.665677][   T30] 5 locks held by kworker/u8:0/11:
[  429.670811][   T30]  #0: ffff8880b873ed18 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x29/0x130
[  429.680844][   T30]  #1: ffff8880b8728a88 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x2c1/0x8e0
[  429.692448][   T30]  #2: ffff8880b872a898 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x5d/0x220
[  429.701780][   T30]  #3: ffffffff9aa8a618 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0x149/0x4a0
[  429.712389][   T30]  #4: ffffffff8e07c888 (text_mutex){+.+.}-{4:4}, at: arch_jump_label_transform_apply+0x17/0x30
[  429.722973][   T30] 1 lock held by khungtaskd/30:
[  429.727974][   T30]  #0: ffffffff8e1bb900 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x7f/0x390
[  429.737957][   T30] 2 locks held by getty/5589:
[  429.742662][   T30]  #0: ffff8880319660a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80
[  429.752559][   T30]  #1: ffffc90002fde2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0xfba/0x1480
[  429.763009][   T30] 2 locks held by syz-executor286/5848:
[  429.768645][   T30]  #0: ffff888074ff40e0 (&type->s_umount_key#42){+.+.}-{4:4}, at: deactivate_super+0xd6/0x100
[  429.779134][   T30]  #1: ffffffff8e792f48 (jfs_log_mutex){+.+.}-{4:4}, at: lmLogClose+0xc8/0x710
[  429.788289][   T30] 2 locks held by syz-executor286/5849:
[  429.793899][   T30]  #0: ffff888021ec80e0 (&type->s_umount_key#42){+.+.}-{4:4}, at: deactivate_super+0xd6/0x100
[  429.804396][   T30]  #1: ffffffff8e792f48 (jfs_log_mutex){+.+.}-{4:4}, at: lmLogClose+0xc8/0x710
[  429.813523][   T30] 2 locks held by syz-executor286/5850:
[  429.819094][   T30]  #0: ffff88807f8120e0 (&type->s_umount_key#42){+.+.}-{4:4}, at: deactivate_super+0xd6/0x100
[  429.829528][   T30]  #1: ffffffff8e792f48 (jfs_log_mutex){+.+.}-{4:4}, at: lmLogClose+0xc8/0x710
[  429.838669][   T30] 2 locks held by syz-executor286/5851:
[  429.844301][   T30]  #0: ffff888074cac0e0 (&type->s_umount_key#42){+.+.}-{4:4}, at: deactivate_super+0xd6/0x100
[  429.854748][   T30]  #1: ffffffff8e792f48 (jfs_log_mutex){+.+.}-{4:4}, at: lmLogClose+0xc8/0x710
[  429.863839][   T30] 2 locks held by syz-executor286/5852:
[  429.869416][   T30]  #0: ffff88807baae0e0 (&type->s_umount_key#42){+.+.}-{4:4}, at: deactivate_super+0xd6/0x100
[  429.879811][   T30]  #1: ffffffff8e792f48 (jfs_log_mutex){+.+.}-{4:4}, at: lmLogClose+0xc8/0x710
[  429.889044][   T30] 2 locks held by syz-executor286/5853:
[  429.894829][   T30]  #0: ffff888034a100e0 (&type->s_umount_key#42){+.+.}-{4:4}, at: deactivate_super+0xd6/0x100
[  429.905370][   T30]  #1: ffffffff8e792f48 (jfs_log_mutex){+.+.}-{4:4}, at: lmLogClose+0xc8/0x710
[  429.914465][   T30] 
[  429.916807][   T30] =============================================
[  429.916807][   T30] 
[  429.925301][   T30] NMI backtrace for cpu 0
[  429.929738][   T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0
[  429.940273][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  429.950344][   T30] Call Trace:
[  429.953635][   T30]  <TASK>
[  429.956580][   T30]  dump_stack_lvl+0x116/0x1f0
[  429.961309][   T30]  nmi_cpu_backtrace+0x27b/0x390
[  429.966294][   T30]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  429.972316][   T30]  nmi_trigger_cpumask_backtrace+0x29c/0x300
[  429.978340][   T30]  watchdog+0xf14/0x1240
[  429.982628][   T30]  ? __pfx_watchdog+0x10/0x10
[  429.987343][   T30]  ? lockdep_hardirqs_on+0x7c/0x110
[  429.992584][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  429.998259][   T30]  ? __kthread_parkme+0x148/0x220
[  430.003324][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  430.008986][   T30]  ? __pfx_watchdog+0x10/0x10
[  430.013705][   T30]  kthread+0x2c4/0x3a0
[  430.017814][   T30]  ? _raw_spin_unlock_irq+0x23/0x50
[  430.023046][   T30]  ? __pfx_kthread+0x10/0x10
[  430.027682][   T30]  ret_from_fork+0x48/0x80
[  430.032125][   T30]  ? __pfx_kthread+0x10/0x10
[  430.036754][   T30]  ret_from_fork_asm+0x1a/0x30
[  430.041665][   T30]  </TASK>
[  430.044814][   T30] Sending NMI from CPU 0 to CPUs 1:
[  430.050053][    C1] NMI backtrace for cpu 1
[  430.050070][    C1] CPU: 1 UID: 0 PID: 11 Comm: kworker/u8:0 Not tainted 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0
[  430.050112][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  430.050134][    C1] Workqueue: events_unbound toggle_allocation_gate
[  430.050172][    C1] RIP: 0010:write_comp_data+0x42/0x90
[  430.050215][    C1] Code: a9 00 01 ff 00 74 1d f6 c4 01 74 67 a9 00 00 0f 00 75 60 a9 00 00 f0 00 75 59 8b 82 1c 16 00 00 85 c0 74 4f 8b 82 f8 15 00 00 <83> f8 03 75 44 48 8b 82 00 16 00 00 8b 92 fc 15 00 00 48 8b 38 48
[  430.050248][    C1] RSP: 0018:ffffc90000107920 EFLAGS: 00000246
[  430.050275][    C1] RAX: 0000000000000000 RBX: 0000000000000002 RCX: ffffffff8b277684
[  430.050298][    C1] RDX: ffff88801d283c00 RSI: 0000000000000004 RDI: 0000000000000001
[  430.050320][    C1] RBP: ffffffff8ccdc500 R08: 0000000000000001 R09: 0000000000000004
[  430.050342][    C1] R10: 0000000000000008 R11: 0000000000000004 R12: 0000000000000008
[  430.050364][    C1] R13: 0000000000000001 R14: 0000000000000003 R15: ffffffff8db0b160
[  430.050389][    C1] FS:  0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000
[  430.050421][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  430.050447][    C1] CR2: 0000557a4bb13dd8 CR3: 000000000df7e000 CR4: 0000000000350ef0
[  430.050470][    C1] Call Trace:
[  430.050479][    C1]  <NMI>
[  430.050491][    C1]  ? nmi_cpu_backtrace+0x1d8/0x390
[  430.050539][    C1]  ? nmi_cpu_backtrace_handler+0xc/0x20
[  430.050574][    C1]  ? nmi_handle+0x1af/0x5d0
[  430.050613][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  430.050650][    C1]  ? write_comp_data+0x42/0x90
[  430.050690][    C1]  ? default_do_nmi+0x6a/0x160
[  430.050730][    C1]  ? exc_nmi+0x170/0x1e0
[  430.050767][    C1]  ? end_repeat_nmi+0xf/0x53
[  430.050803][    C1]  ? insn_get_immediate+0xec4/0x1dd0
[  430.050855][    C1]  ? write_comp_data+0x42/0x90
[  430.050895][    C1]  ? write_comp_data+0x42/0x90
[  430.050936][    C1]  ? write_comp_data+0x42/0x90
[  430.050976][    C1]  </NMI>
[  430.050987][    C1]  <TASK>
[  430.050998][    C1]  __sanitizer_cov_trace_switch+0x54/0x90
[  430.051044][    C1]  ? kmem_cache_alloc_bulk_noprof+0x16f/0xb10
[  430.051081][    C1]  insn_get_immediate+0xec4/0x1dd0
[  430.051130][    C1]  ? __asan_memset+0x23/0x50
[  430.051182][    C1]  ? kmem_cache_alloc_bulk_noprof+0x16f/0xb10
[  430.051219][    C1]  insn_decode+0x21d/0x320
[  430.051268][    C1]  arch_jump_entry_size+0xb3/0x150
[  430.051321][    C1]  ? __pfx_arch_jump_entry_size+0x10/0x10
[  430.051380][    C1]  ? kmem_cache_alloc_bulk_noprof+0x16f/0xb10
[  430.051416][    C1]  ? kmem_cache_alloc_bulk_noprof+0x17e/0xb10
[  430.051452][    C1]  ? kmem_cache_alloc_bulk_noprof+0x170/0xb10
[  430.051491][    C1]  ? kmem_cache_alloc_bulk_noprof+0x46d/0xb10
[  430.051533][    C1]  __jump_label_patch+0x85/0x400
[  430.051588][    C1]  arch_jump_label_transform_queue+0x7e/0x120
[  430.051647][    C1]  __jump_label_update+0x125/0x420
[  430.051699][    C1]  jump_label_update+0x1d7/0x400
[  430.051747][    C1]  static_key_disable_cpuslocked+0x158/0x1c0
[  430.051799][    C1]  static_key_disable+0x1a/0x20
[  430.051847][    C1]  toggle_allocation_gate+0x147/0x260
[  430.051883][    C1]  ? __pfx_toggle_allocation_gate+0x10/0x10
[  430.051919][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  430.051955][    C1]  ? trace_lock_acquire+0x14e/0x1f0
[  430.052010][    C1]  ? process_one_work+0x921/0x1ba0
[  430.052049][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  430.052086][    C1]  ? lock_acquire+0x2f/0xb0
[  430.052123][    C1]  ? process_one_work+0x921/0x1ba0
[  430.052162][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  430.052200][    C1]  process_one_work+0x9c8/0x1ba0
[  430.052245][    C1]  ? __pfx_lock_acquire.part.0+0x10/0x10
[  430.052287][    C1]  ? __pfx_process_one_work+0x10/0x10
[  430.052325][    C1]  ? rcu_is_watching+0x12/0xc0
[  430.052375][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  430.052416][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  430.052452][    C1]  ? assign_work+0x1a0/0x250
[  430.052489][    C1]  worker_thread+0x6c8/0xf00
[  430.052540][    C1]  ? __pfx_worker_thread+0x10/0x10
[  430.052579][    C1]  kthread+0x2c4/0x3a0
[  430.052625][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  430.052670][    C1]  ? __pfx_kthread+0x10/0x10
[  430.052718][    C1]  ret_from_fork+0x48/0x80
[  430.052753][    C1]  ? __pfx_kthread+0x10/0x10
[  430.052801][    C1]  ret_from_fork_asm+0x1a/0x30
[  430.052862][    C1]  </TASK>
[  430.052875][    C1] INFO: NMI handler (nmi_cpu_backtrace_handler) took too long to run: 2.822 msecs
[  430.053052][   T30] Kernel panic - not syncing: hung_task: blocked tasks
[  430.489257][   T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0
[  430.499788][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  430.509884][   T30] Call Trace:
[  430.513178][   T30]  <TASK>
[  430.516122][   T30]  dump_stack_lvl+0x3d/0x1f0
[  430.520767][   T30]  panic+0x71d/0x800
[  430.524710][   T30]  ? __pfx_panic+0x10/0x10
[  430.529180][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  430.534845][   T30]  ? __irq_work_queue_local+0xdd/0x460
[  430.540345][   T30]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  430.546378][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  430.552037][   T30]  ? irq_work_queue+0x2a/0x80
[  430.556784][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  430.562447][   T30]  ? watchdog+0xd7e/0x1240
[  430.566899][   T30]  ? watchdog+0xd71/0x1240
[  430.571354][   T30]  watchdog+0xd8f/0x1240
[  430.575640][   T30]  ? __pfx_watchdog+0x10/0x10
[  430.580350][   T30]  ? lockdep_hardirqs_on+0x7c/0x110
[  430.585589][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  430.591248][   T30]  ? __kthread_parkme+0x148/0x220
[  430.596319][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  430.601980][   T30]  ? __pfx_watchdog+0x10/0x10
[  430.606692][   T30]  kthread+0x2c4/0x3a0
[  430.610799][   T30]  ? _raw_spin_unlock_irq+0x23/0x50
[  430.616034][   T30]  ? __pfx_kthread+0x10/0x10
[  430.620664][   T30]  ret_from_fork+0x48/0x80
[  430.625105][   T30]  ? __pfx_kthread+0x10/0x10
[  430.629732][   T30]  ret_from_fork_asm+0x1a/0x30
[  430.634557][   T30]  </TASK>
[  430.637822][   T30] Kernel Offset: disabled
[  430.642149][   T30] Rebooting in 86400 seconds..