ci2-upstream-fs/strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ci2-upstream-fs/syz-executor1753643724 <...> no interfaces have a carrier [ 67.024610][ T5248] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.079480][ T5248] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: OK Starting sshd: OK syzkaller syzkaller login: [ 92.023601][ T9] cfg80211: failed to load regulatory.db Warning: Permanently added '10.128.0.241' (ED25519) to the list of known hosts. execve("ci2-upstream-fs/syz-executor1753643724", ["ci2-upstream-fs/syz-executor1753643724"], 0x7fff695aca30 /* 10 vars */) = 0 brk(NULL) = 0x555579654000 brk(0x555579654d80) = 0x555579654d80 arch_prctl(ARCH_SET_FS, 0x555579654400) = 0 set_tid_address(0x5555796546d0) = 5608 set_robust_list(0x5555796546e0, 24) = 0 rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlinkat(AT_FDCWD, "/proc/self/exe", "/root/ci2-upstream-fs/syz-executor1753643724", 4096) = 44 getrandom("\x4a\x29\xfc\x14\x92\x00\xd2\xad", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555579654d80 brk(0x555579675d80) = 0x555579675d80 brk(0x555579676000) = 0x555579676000 mprotect(0x7ffa7341e000, 20480, PROT_READ) = 0 mmap(0x1ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffffffff000 mmap(0x200000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200000000000 mmap(0x200001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200001000000 mount(NULL, "/proc/sys/fs/binfmt_misc", "binfmt_misc", 0, NULL) = -1 EBUSY (Device or resource busy) openat(AT_FDCWD, "/proc/sys/fs/binfmt_misc/register", O_WRONLY|O_CLOEXEC) = 3 write(3, "\x3a\x73\x79\x7a\x30\x3a\x4d\x3a\x30\x3a\x01\x3a\x3a\x2e\x2f\x66\x69\x6c\x65\x30\x3a", 21) = 21 close(3) = 0 openat(AT_FDCWD, "/proc/sys/fs/binfmt_misc/register", O_WRONLY|O_CLOEXEC) = 3 write(3, "\x3a\x73\x79\x7a\x31\x3a\x4d\x3a\x31\x3a\x02\x3a\x3a\x2f\x70\x72\x6f\x63\x2f\x74\x68\x72\x65\x61\x64\x2d\x73\x65\x6c\x66\x2f\x63\x77\x64\x2f\x66\x69\x6c\x65\x30\x3a\x50\x4f\x43", 44) = 44 close(3) = 0 getrandom("\xef\x17\xed\x85\x0f\xc8\x74\x84", 8, GRND_NONBLOCK) = 8 mkdir("./syzkaller.nv9Lm8", 0700) = 0 chmod("./syzkaller.nv9Lm8", 0777) = 0 chdir("./syzkaller.nv9Lm8") = 0 unshare(CLONE_NEWPID) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5609 attached [pid 5609] set_robust_list(0x5555796546e0, 24 [pid 5608] <... clone resumed>, child_tidptr=0x5555796546d0) = 5609 [pid 5609] <... set_robust_list resumed>) = 0 [pid 5608] rt_sigprocmask(SIG_SETMASK, [] [pid 5609] rt_sigprocmask(SIG_SETMASK, [] [pid 5608] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5609] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5609] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5609] getppid() = 0 [pid 5609] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0 [pid 5609] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0 [pid 5609] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0 [pid 5609] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 5609] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, NULL) = 0 [pid 5609] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0 [pid 5609] unshare(CLONE_NEWNS) = 0 [pid 5609] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0 [pid 5609] unshare(CLONE_NEWIPC) = 0 [pid 5609] unshare(CLONE_NEWCGROUP) = 0 [pid 5609] unshare(CLONE_NEWUTS) = 0 [pid 5609] unshare(CLONE_SYSVSEM) = 0 [pid 5609] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5609] write(3, "16777216", 8) = 8 [pid 5609] close(3) = 0 [pid 5609] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = 3 [pid 5609] write(3, "536870912", 9) = 9 [pid 5609] close(3) = 0 [pid 5609] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5609] write(3, "1024", 4) = 4 [pid 5609] close(3) = 0 [pid 5609] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = 3 [pid 5609] write(3, "8192", 4) = 4 [pid 5609] close(3) = 0 [pid 5609] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = 3 [pid 5609] write(3, "1024", 4) = 4 [pid 5609] close(3) = 0 [pid 5609] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = 3 [pid 5609] write(3, "1024", 4) = 4 [pid 5609] close(3) = 0 [pid 5609] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = 3 [pid 5609] write(3, "1024 1048576 500 1024", 21) = 21 [pid 5609] close(3) = 0 [pid 5609] getpid() = 1 [pid 5609] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< [pid 5640] set_robust_list(0x5555796546e0, 24) = 0 [pid 5609] <... clone resumed>, child_tidptr=0x5555796546d0) = 2 [pid 5640] rt_sigprocmask(SIG_SETMASK, [] [pid 5609] rt_sigprocmask(SIG_SETMASK, [] [pid 5640] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5609] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5640] chdir("./0") = 0 [pid 5640] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5640] setpgid(0, 0) = 0 [pid 5640] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5640] write(3, "1000", 4) = 4 [pid 5640] close(3) = 0 [pid 5640] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5640] write(1, "executing program\n", 18) = 18 [pid 5640] memfd_create("syzkaller", 0) = 3 [pid 5640] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5640] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5640] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5640] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5640] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5640] close(3) = 0 [pid 5640] close(4) = 0 [pid 5640] mkdir("./file2", 0777) = 0 [ 107.152961][ T5640] loop0: detected capacity change from 0 to 32768 [pid 5640] mount("/dev/loop0", "./file2", "jfs", MS_NOEXEC|MS_NOATIME|MS_NODIRATIME|MS_I_VERSION, ",umask=0") = 0 [pid 5640] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5640] chdir("./file2") = 0 [pid 5640] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5640] ioctl(4, LOOP_CLR_FD) = 0 [pid 5640] close(4) = 0 [pid 5640] memfd_create("syzkaller", 0) = 4 [pid 5640] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5640] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8192) = 8192 [pid 5640] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5640] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5640] close(4) = 0 [pid 5640] memfd_create("syzkaller", 0) = 4 [pid 5640] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5640] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 83968) = 83968 [pid 5640] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5640] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5640] close(4) = 0 [pid 5640] fchown(-1, -1, 0) = -1 EBADF (Bad file descriptor) [pid 5640] open_by_handle_at(-100, NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5640] close(3) = 0 [pid 5640] close(4) = -1 EBADF (Bad file descriptor) [pid 5640] close(5) = -1 EBADF (Bad file descriptor) [pid 5640] close(6) = -1 EBADF (Bad file descriptor) [pid 5640] close(7) = -1 EBADF (Bad file descriptor) [pid 5640] close(8) = -1 EBADF (Bad file descriptor) [pid 5640] close(9) = -1 EBADF (Bad file descriptor) [pid 5640] close(10) = -1 EBADF (Bad file descriptor) [pid 5640] close(11) = -1 EBADF (Bad file descriptor) [pid 5640] close(12) = -1 EBADF (Bad file descriptor) [pid 5640] close(13) = -1 EBADF (Bad file descriptor) [pid 5640] close(14) = -1 EBADF (Bad file descriptor) [pid 5640] close(15) = -1 EBADF (Bad file descriptor) [pid 5640] close(16) = -1 EBADF (Bad file descriptor) [pid 5640] close(17) = -1 EBADF (Bad file descriptor) [pid 5640] close(18) = -1 EBADF (Bad file descriptor) [pid 5640] close(19) = -1 EBADF (Bad file descriptor) [pid 5640] close(20) = -1 EBADF (Bad file descriptor) [pid 5640] close(21) = -1 EBADF (Bad file descriptor) [pid 5640] close(22) = -1 EBADF (Bad file descriptor) [pid 5640] close(23) = -1 EBADF (Bad file descriptor) [pid 5640] close(24) = -1 EBADF (Bad file descriptor) [pid 5640] close(25) = -1 EBADF (Bad file descriptor) [pid 5640] close(26) = -1 EBADF (Bad file descriptor) [pid 5640] close(27) = -1 EBADF (Bad file descriptor) [pid 5640] close(28) = -1 EBADF (Bad file descriptor) [pid 5640] close(29) = -1 EBADF (Bad file descriptor) [pid 5640] exit_group(0) = ? [pid 5640] +++ exited with 0 +++ [pid 5609] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=27 /* 0.27 s */} --- [pid 5609] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5609] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5609] fstat(3, {st_mode=S_IFDIR|0700, st_size=80, ...}) = 0 [pid 5609] getdents64(3, 0x555579655790 /* 4 entries */, 32768) = 112 [pid 5609] umount2("./0/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5609] umount2("./0/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] newfstatat(AT_FDCWD, "./0/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] umount2("./0/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] openat(AT_FDCWD, "./0/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5609] fstat(4, {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0 [pid 5609] getdents64(4, 0x55557965d7d0 /* 2 entries */, 32768) = 48 [pid 5609] getdents64(4, 0x55557965d7d0 /* 0 entries */, 32768) = 0 [pid 5609] close(4) = 0 [pid 5609] rmdir("./0/file2") = 0 [pid 5609] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] newfstatat(AT_FDCWD, "./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] unlink("./0/binderfs") = 0 [pid 5609] getdents64(3, 0x555579655790 /* 0 entries */, 32768) = 0 [pid 5609] close(3) = 0 [pid 5609] rmdir("./0") = 0 [pid 5609] mkdir("./1", 0777) = 0 [pid 5609] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 [pid 5609] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5609] close(3) = 0 [pid 5609] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5609] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5641 attached , child_tidptr=0x5555796546d0) = 3 [pid 5641] set_robust_list(0x5555796546e0, 24) = 0 [pid 5641] rt_sigprocmask(SIG_SETMASK, [] [pid 5609] rt_sigprocmask(SIG_SETMASK, [] [pid 5641] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5609] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5641] chdir("./1") = 0 [pid 5641] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5641] setpgid(0, 0) = 0 [pid 5641] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5641] write(3, "1000", 4) = 4 [pid 5641] close(3) = 0 [pid 5641] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5641] write(1, "executing program\n", 18) = 18 executing program [pid 5641] memfd_create("syzkaller", 0) = 3 [pid 5641] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5641] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5641] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5641] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5641] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5641] close(3) = 0 [pid 5641] close(4) = 0 [pid 5641] mkdir("./file2", 0777) = 0 [pid 5641] mount("/dev/loop0", "./file2", "jfs", MS_NOEXEC|MS_NOATIME|MS_NODIRATIME|MS_I_VERSION, ",umask=0") = 0 [pid 5641] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5641] chdir("./file2") = 0 [pid 5641] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5641] ioctl(4, LOOP_CLR_FD) = 0 [pid 5641] close(4) = 0 [pid 5641] memfd_create("syzkaller", 0) = 4 [pid 5641] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5641] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8192) = 8192 [pid 5641] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5641] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 107.957687][ T5641] loop0: detected capacity change from 0 to 32768 [pid 5641] close(4) = 0 [pid 5641] memfd_create("syzkaller", 0) = 4 [pid 5641] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5641] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 83968) = 83968 [pid 5641] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5641] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5641] close(4) = 0 [pid 5641] fchown(-1, -1, 0) = -1 EBADF (Bad file descriptor) [pid 5641] open_by_handle_at(-100, NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5641] close(3) = 0 [pid 5641] close(4) = -1 EBADF (Bad file descriptor) [pid 5641] close(5) = -1 EBADF (Bad file descriptor) [pid 5641] close(6) = -1 EBADF (Bad file descriptor) [pid 5641] close(7) = -1 EBADF (Bad file descriptor) [pid 5641] close(8) = -1 EBADF (Bad file descriptor) [pid 5641] close(9) = -1 EBADF (Bad file descriptor) [pid 5641] close(10) = -1 EBADF (Bad file descriptor) [pid 5641] close(11) = -1 EBADF (Bad file descriptor) [pid 5641] close(12) = -1 EBADF (Bad file descriptor) [pid 5641] close(13) = -1 EBADF (Bad file descriptor) [pid 5641] close(14) = -1 EBADF (Bad file descriptor) [pid 5641] close(15) = -1 EBADF (Bad file descriptor) [pid 5641] close(16) = -1 EBADF (Bad file descriptor) [pid 5641] close(17) = -1 EBADF (Bad file descriptor) [pid 5641] close(18) = -1 EBADF (Bad file descriptor) [pid 5641] close(19) = -1 EBADF (Bad file descriptor) [pid 5641] close(20) = -1 EBADF (Bad file descriptor) [pid 5641] close(21) = -1 EBADF (Bad file descriptor) [pid 5641] close(22) = -1 EBADF (Bad file descriptor) [pid 5641] close(23) = -1 EBADF (Bad file descriptor) [pid 5641] close(24) = -1 EBADF (Bad file descriptor) [pid 5641] close(25) = -1 EBADF (Bad file descriptor) [pid 5641] close(26) = -1 EBADF (Bad file descriptor) [pid 5641] close(27) = -1 EBADF (Bad file descriptor) [pid 5641] close(28) = -1 EBADF (Bad file descriptor) [pid 5641] close(29) = -1 EBADF (Bad file descriptor) [pid 5641] exit_group(0) = ? [pid 5641] +++ exited with 0 +++ [pid 5609] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=18 /* 0.18 s */} --- [pid 5609] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5609] umount2("./1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5609] fstat(3, {st_mode=S_IFDIR|0700, st_size=80, ...}) = 0 [pid 5609] getdents64(3, 0x555579655790 /* 4 entries */, 32768) = 112 [pid 5609] umount2("./1/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5609] umount2("./1/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] newfstatat(AT_FDCWD, "./1/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] umount2("./1/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] openat(AT_FDCWD, "./1/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5609] fstat(4, {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0 [pid 5609] getdents64(4, 0x55557965d7d0 /* 2 entries */, 32768) = 48 [pid 5609] getdents64(4, 0x55557965d7d0 /* 0 entries */, 32768) = 0 [pid 5609] close(4) = 0 [pid 5609] rmdir("./1/file2") = 0 [pid 5609] umount2("./1/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] newfstatat(AT_FDCWD, "./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] unlink("./1/binderfs") = 0 [pid 5609] getdents64(3, 0x555579655790 /* 0 entries */, 32768) = 0 [pid 5609] close(3) = 0 [pid 5609] rmdir("./1") = 0 [pid 5609] mkdir("./2", 0777) = 0 [pid 5609] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 [pid 5609] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5609] close(3) = 0 [pid 5609] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5609] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5643 attached , child_tidptr=0x5555796546d0) = 4 [pid 5609] rt_sigprocmask(SIG_SETMASK, [] [pid 5643] set_robust_list(0x5555796546e0, 24) = 0 [pid 5609] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5643] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5643] chdir("./2") = 0 [pid 5643] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5643] setpgid(0, 0) = 0 [pid 5643] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5643] write(3, "1000", 4) = 4 [pid 5643] close(3) = 0 [pid 5643] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5643] write(1, "executing program\n", 18) = 18 executing program [pid 5643] memfd_create("syzkaller", 0) = 3 [pid 5643] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5643] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5643] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5643] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5643] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5643] close(3) = 0 [pid 5643] close(4) = 0 [pid 5643] mkdir("./file2", 0777) = 0 [pid 5643] mount("/dev/loop0", "./file2", "jfs", MS_NOEXEC|MS_NOATIME|MS_NODIRATIME|MS_I_VERSION, ",umask=0") = 0 [pid 5643] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5643] chdir("./file2") = 0 [pid 5643] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5643] ioctl(4, LOOP_CLR_FD) = 0 [pid 5643] close(4) = 0 [pid 5643] memfd_create("syzkaller", 0) = 4 [pid 5643] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5643] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8192) = 8192 [pid 5643] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5643] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5643] close(4) = 0 [ 108.510215][ T5643] loop0: detected capacity change from 0 to 32768 [pid 5643] memfd_create("syzkaller", 0) = 4 [pid 5643] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5643] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 83968) = 83968 [pid 5643] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5643] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5643] close(4) = 0 [pid 5643] fchown(-1, -1, 0) = -1 EBADF (Bad file descriptor) [pid 5643] open_by_handle_at(-100, NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5643] close(3) = 0 [pid 5643] close(4) = -1 EBADF (Bad file descriptor) [pid 5643] close(5) = -1 EBADF (Bad file descriptor) [pid 5643] close(6) = -1 EBADF (Bad file descriptor) [pid 5643] close(7) = -1 EBADF (Bad file descriptor) [pid 5643] close(8) = -1 EBADF (Bad file descriptor) [pid 5643] close(9) = -1 EBADF (Bad file descriptor) [pid 5643] close(10) = -1 EBADF (Bad file descriptor) [pid 5643] close(11) = -1 EBADF (Bad file descriptor) [pid 5643] close(12) = -1 EBADF (Bad file descriptor) [pid 5643] close(13) = -1 EBADF (Bad file descriptor) [pid 5643] close(14) = -1 EBADF (Bad file descriptor) [pid 5643] close(15) = -1 EBADF (Bad file descriptor) [pid 5643] close(16) = -1 EBADF (Bad file descriptor) [pid 5643] close(17) = -1 EBADF (Bad file descriptor) [pid 5643] close(18) = -1 EBADF (Bad file descriptor) [pid 5643] close(19) = -1 EBADF (Bad file descriptor) [pid 5643] close(20) = -1 EBADF (Bad file descriptor) [pid 5643] close(21) = -1 EBADF (Bad file descriptor) [pid 5643] close(22) = -1 EBADF (Bad file descriptor) [pid 5643] close(23) = -1 EBADF (Bad file descriptor) [pid 5643] close(24) = -1 EBADF (Bad file descriptor) [pid 5643] close(25) = -1 EBADF (Bad file descriptor) [pid 5643] close(26) = -1 EBADF (Bad file descriptor) [pid 5643] close(27) = -1 EBADF (Bad file descriptor) [pid 5643] close(28) = -1 EBADF (Bad file descriptor) [pid 5643] close(29) = -1 EBADF (Bad file descriptor) [pid 5643] exit_group(0) = ? [pid 5643] +++ exited with 0 +++ [pid 5609] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=18 /* 0.18 s */} --- [pid 5609] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5609] umount2("./2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5609] fstat(3, {st_mode=S_IFDIR|0700, st_size=80, ...}) = 0 [pid 5609] getdents64(3, 0x555579655790 /* 4 entries */, 32768) = 112 [pid 5609] umount2("./2/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5609] umount2("./2/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] newfstatat(AT_FDCWD, "./2/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] umount2("./2/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] openat(AT_FDCWD, "./2/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5609] fstat(4, {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0 [pid 5609] getdents64(4, 0x55557965d7d0 /* 2 entries */, 32768) = 48 [pid 5609] getdents64(4, 0x55557965d7d0 /* 0 entries */, 32768) = 0 [pid 5609] close(4) = 0 [pid 5609] rmdir("./2/file2") = 0 [pid 5609] umount2("./2/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] newfstatat(AT_FDCWD, "./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] unlink("./2/binderfs") = 0 [pid 5609] getdents64(3, 0x555579655790 /* 0 entries */, 32768) = 0 [pid 5609] close(3) = 0 [pid 5609] rmdir("./2") = 0 [pid 5609] mkdir("./3", 0777) = 0 [pid 5609] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 [pid 5609] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5609] close(3) = 0 [pid 5609] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5609] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5644 attached , child_tidptr=0x5555796546d0) = 5 [pid 5644] set_robust_list(0x5555796546e0, 24 [pid 5609] rt_sigprocmask(SIG_SETMASK, [] [pid 5644] <... set_robust_list resumed>) = 0 [pid 5644] rt_sigprocmask(SIG_SETMASK, [] [pid 5609] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5644] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5644] chdir("./3") = 0 [pid 5644] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5644] setpgid(0, 0) = 0 [pid 5644] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5644] write(3, "1000", 4) = 4 [pid 5644] close(3) = 0 [pid 5644] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5644] write(1, "executing program\n", 18) = 18 executing program [pid 5644] memfd_create("syzkaller", 0) = 3 [pid 5644] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5644] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5644] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5644] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5644] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5644] close(3) = 0 [pid 5644] close(4) = 0 [pid 5644] mkdir("./file2", 0777) = 0 [pid 5644] mount("/dev/loop0", "./file2", "jfs", MS_NOEXEC|MS_NOATIME|MS_NODIRATIME|MS_I_VERSION, ",umask=0") = 0 [pid 5644] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5644] chdir("./file2") = 0 [pid 5644] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5644] ioctl(4, LOOP_CLR_FD) = 0 [pid 5644] close(4) = 0 [pid 5644] memfd_create("syzkaller", 0) = 4 [pid 5644] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5644] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8192) = 8192 [pid 5644] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5644] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5644] close(4) = 0 [pid 5644] memfd_create("syzkaller", 0) = 4 [ 109.053649][ T5644] loop0: detected capacity change from 0 to 32768 [pid 5644] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5644] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 83968) = 83968 [pid 5644] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5644] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5644] close(4) = 0 [pid 5644] fchown(-1, -1, 0) = -1 EBADF (Bad file descriptor) [pid 5644] open_by_handle_at(-100, NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5644] close(3) = 0 [pid 5644] close(4) = -1 EBADF (Bad file descriptor) [pid 5644] close(5) = -1 EBADF (Bad file descriptor) [pid 5644] close(6) = -1 EBADF (Bad file descriptor) [pid 5644] close(7) = -1 EBADF (Bad file descriptor) [pid 5644] close(8) = -1 EBADF (Bad file descriptor) [pid 5644] close(9) = -1 EBADF (Bad file descriptor) [pid 5644] close(10) = -1 EBADF (Bad file descriptor) [pid 5644] close(11) = -1 EBADF (Bad file descriptor) [pid 5644] close(12) = -1 EBADF (Bad file descriptor) [pid 5644] close(13) = -1 EBADF (Bad file descriptor) [pid 5644] close(14) = -1 EBADF (Bad file descriptor) [pid 5644] close(15) = -1 EBADF (Bad file descriptor) [pid 5644] close(16) = -1 EBADF (Bad file descriptor) [pid 5644] close(17) = -1 EBADF (Bad file descriptor) [pid 5644] close(18) = -1 EBADF (Bad file descriptor) [pid 5644] close(19) = -1 EBADF (Bad file descriptor) [pid 5644] close(20) = -1 EBADF (Bad file descriptor) [pid 5644] close(21) = -1 EBADF (Bad file descriptor) [pid 5644] close(22) = -1 EBADF (Bad file descriptor) [pid 5644] close(23) = -1 EBADF (Bad file descriptor) [pid 5644] close(24) = -1 EBADF (Bad file descriptor) [pid 5644] close(25) = -1 EBADF (Bad file descriptor) [pid 5644] close(26) = -1 EBADF (Bad file descriptor) [pid 5644] close(27) = -1 EBADF (Bad file descriptor) [pid 5644] close(28) = -1 EBADF (Bad file descriptor) [pid 5644] close(29) = -1 EBADF (Bad file descriptor) [pid 5644] exit_group(0) = ? [pid 5644] +++ exited with 0 +++ [pid 5609] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=21 /* 0.21 s */} --- [pid 5609] umount2("./3", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5609] fstat(3, {st_mode=S_IFDIR|0700, st_size=80, ...}) = 0 [pid 5609] getdents64(3, 0x555579655790 /* 4 entries */, 32768) = 112 [pid 5609] umount2("./3/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5609] umount2("./3/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] newfstatat(AT_FDCWD, "./3/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] umount2("./3/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] openat(AT_FDCWD, "./3/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5609] fstat(4, {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0 [pid 5609] getdents64(4, 0x55557965d7d0 /* 2 entries */, 32768) = 48 [pid 5609] getdents64(4, 0x55557965d7d0 /* 0 entries */, 32768) = 0 [pid 5609] close(4) = 0 [pid 5609] rmdir("./3/file2") = 0 [pid 5609] umount2("./3/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] newfstatat(AT_FDCWD, "./3/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] unlink("./3/binderfs") = 0 [pid 5609] getdents64(3, 0x555579655790 /* 0 entries */, 32768) = 0 [pid 5609] close(3) = 0 [pid 5609] rmdir("./3") = 0 [pid 5609] mkdir("./4", 0777) = 0 [pid 5609] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 [pid 5609] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5609] close(3) = 0 [pid 5609] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5609] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555796546d0) = 6 [pid 5609] rt_sigprocmask(SIG_SETMASK, []ci2-upstream-fs/strace-static-x86_64: Process 5645 attached [pid 5645] set_robust_list(0x5555796546e0, 24) = 0 [pid 5645] rt_sigprocmask(SIG_SETMASK, [] [pid 5609] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5645] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5645] chdir("./4") = 0 [pid 5645] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5645] setpgid(0, 0) = 0 [pid 5645] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5645] write(3, "1000", 4) = 4 [pid 5645] close(3) = 0 [pid 5645] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5645] write(1, "executing program\n", 18) = 18 [pid 5645] memfd_create("syzkaller", 0) = 3 [pid 5645] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5645] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5645] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5645] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5645] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5645] close(3) = 0 [pid 5645] close(4) = 0 [pid 5645] mkdir("./file2", 0777) = 0 [pid 5645] mount("/dev/loop0", "./file2", "jfs", MS_NOEXEC|MS_NOATIME|MS_NODIRATIME|MS_I_VERSION, ",umask=0") = 0 [pid 5645] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5645] chdir("./file2") = 0 [pid 5645] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5645] ioctl(4, LOOP_CLR_FD) = 0 [pid 5645] close(4) = 0 [pid 5645] memfd_create("syzkaller", 0) = 4 [pid 5645] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5645] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8192) = 8192 [ 109.599019][ T5645] loop0: detected capacity change from 0 to 32768 [pid 5645] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5645] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5645] close(4) = 0 [pid 5645] memfd_create("syzkaller", 0) = 4 [pid 5645] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5645] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 83968) = 83968 [pid 5645] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5645] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5645] close(4) = 0 [pid 5645] fchown(-1, -1, 0) = -1 EBADF (Bad file descriptor) [pid 5645] open_by_handle_at(-100, NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5645] close(3) = 0 [pid 5645] close(4) = -1 EBADF (Bad file descriptor) [pid 5645] close(5) = -1 EBADF (Bad file descriptor) [pid 5645] close(6) = -1 EBADF (Bad file descriptor) [pid 5645] close(7) = -1 EBADF (Bad file descriptor) [pid 5645] close(8) = -1 EBADF (Bad file descriptor) [pid 5645] close(9) = -1 EBADF (Bad file descriptor) [pid 5645] close(10) = -1 EBADF (Bad file descriptor) [pid 5645] close(11) = -1 EBADF (Bad file descriptor) [pid 5645] close(12) = -1 EBADF (Bad file descriptor) [pid 5645] close(13) = -1 EBADF (Bad file descriptor) [pid 5645] close(14) = -1 EBADF (Bad file descriptor) [pid 5645] close(15) = -1 EBADF (Bad file descriptor) [pid 5645] close(16) = -1 EBADF (Bad file descriptor) [pid 5645] close(17) = -1 EBADF (Bad file descriptor) [pid 5645] close(18) = -1 EBADF (Bad file descriptor) [pid 5645] close(19) = -1 EBADF (Bad file descriptor) [pid 5645] close(20) = -1 EBADF (Bad file descriptor) [pid 5645] close(21) = -1 EBADF (Bad file descriptor) [pid 5645] close(22) = -1 EBADF (Bad file descriptor) [pid 5645] close(23) = -1 EBADF (Bad file descriptor) [pid 5645] close(24) = -1 EBADF (Bad file descriptor) [pid 5645] close(25) = -1 EBADF (Bad file descriptor) [pid 5645] close(26) = -1 EBADF (Bad file descriptor) [pid 5645] close(27) = -1 EBADF (Bad file descriptor) [pid 5645] close(28) = -1 EBADF (Bad file descriptor) [pid 5645] close(29) = -1 EBADF (Bad file descriptor) [pid 5645] exit_group(0) = ? [pid 5645] +++ exited with 0 +++ [pid 5609] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=6, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=23 /* 0.23 s */} --- [pid 5609] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5609] umount2("./4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5609] fstat(3, {st_mode=S_IFDIR|0700, st_size=80, ...}) = 0 [pid 5609] getdents64(3, 0x555579655790 /* 4 entries */, 32768) = 112 [pid 5609] umount2("./4/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5609] umount2("./4/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] newfstatat(AT_FDCWD, "./4/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] umount2("./4/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] openat(AT_FDCWD, "./4/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5609] fstat(4, {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0 [pid 5609] getdents64(4, 0x55557965d7d0 /* 2 entries */, 32768) = 48 [pid 5609] getdents64(4, 0x55557965d7d0 /* 0 entries */, 32768) = 0 [pid 5609] close(4) = 0 [pid 5609] rmdir("./4/file2") = 0 [pid 5609] umount2("./4/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] newfstatat(AT_FDCWD, "./4/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] unlink("./4/binderfs") = 0 [pid 5609] getdents64(3, 0x555579655790 /* 0 entries */, 32768) = 0 [pid 5609] close(3) = 0 [pid 5609] rmdir("./4") = 0 [pid 5609] mkdir("./5", 0777) = 0 [pid 5609] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 [pid 5609] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5609] close(3) = 0 [pid 5609] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5609] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5646 attached [pid 5646] set_robust_list(0x5555796546e0, 24 [pid 5609] <... clone resumed>, child_tidptr=0x5555796546d0) = 7 [pid 5646] <... set_robust_list resumed>) = 0 [pid 5646] rt_sigprocmask(SIG_SETMASK, [] [pid 5609] rt_sigprocmask(SIG_SETMASK, [] [pid 5646] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5646] chdir("./5" [pid 5609] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5646] <... chdir resumed>) = 0 [pid 5646] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5646] setpgid(0, 0) = 0 [pid 5646] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5646] write(3, "1000", 4) = 4 [pid 5646] close(3) = 0 [pid 5646] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5646] write(1, "executing program\n", 18) = 18 [pid 5646] memfd_create("syzkaller", 0) = 3 [pid 5646] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5646] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5646] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5646] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5646] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5646] close(3) = 0 [pid 5646] close(4) = 0 [pid 5646] mkdir("./file2", 0777) = 0 [pid 5646] mount("/dev/loop0", "./file2", "jfs", MS_NOEXEC|MS_NOATIME|MS_NODIRATIME|MS_I_VERSION, ",umask=0") = 0 [pid 5646] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5646] chdir("./file2") = 0 [pid 5646] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5646] ioctl(4, LOOP_CLR_FD) = 0 [pid 5646] close(4) = 0 [pid 5646] memfd_create("syzkaller", 0) = 4 [pid 5646] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5646] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8192) = 8192 [pid 5646] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5646] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5646] close(4) = 0 [pid 5646] memfd_create("syzkaller", 0) = 4 [pid 5646] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5646] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 83968) = 83968 [ 110.234130][ T5646] loop0: detected capacity change from 0 to 32768 [pid 5646] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5646] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5646] close(4) = 0 [pid 5646] fchown(-1, -1, 0) = -1 EBADF (Bad file descriptor) [pid 5646] open_by_handle_at(-100, NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5646] close(3) = 0 [pid 5646] close(4) = -1 EBADF (Bad file descriptor) [pid 5646] close(5) = -1 EBADF (Bad file descriptor) [pid 5646] close(6) = -1 EBADF (Bad file descriptor) [pid 5646] close(7) = -1 EBADF (Bad file descriptor) [pid 5646] close(8) = -1 EBADF (Bad file descriptor) [pid 5646] close(9) = -1 EBADF (Bad file descriptor) [pid 5646] close(10) = -1 EBADF (Bad file descriptor) [pid 5646] close(11) = -1 EBADF (Bad file descriptor) [pid 5646] close(12) = -1 EBADF (Bad file descriptor) [pid 5646] close(13) = -1 EBADF (Bad file descriptor) [pid 5646] close(14) = -1 EBADF (Bad file descriptor) [pid 5646] close(15) = -1 EBADF (Bad file descriptor) [pid 5646] close(16) = -1 EBADF (Bad file descriptor) [pid 5646] close(17) = -1 EBADF (Bad file descriptor) [pid 5646] close(18) = -1 EBADF (Bad file descriptor) [pid 5646] close(19) = -1 EBADF (Bad file descriptor) [pid 5646] close(20) = -1 EBADF (Bad file descriptor) [pid 5646] close(21) = -1 EBADF (Bad file descriptor) [pid 5646] close(22) = -1 EBADF (Bad file descriptor) [pid 5646] close(23) = -1 EBADF (Bad file descriptor) [pid 5646] close(24) = -1 EBADF (Bad file descriptor) [pid 5646] close(25) = -1 EBADF (Bad file descriptor) [pid 5646] close(26) = -1 EBADF (Bad file descriptor) [pid 5646] close(27) = -1 EBADF (Bad file descriptor) [pid 5646] close(28) = -1 EBADF (Bad file descriptor) [pid 5646] close(29) = -1 EBADF (Bad file descriptor) [pid 5646] exit_group(0) = ? [pid 5646] +++ exited with 0 +++ [pid 5609] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=20 /* 0.20 s */} --- [pid 5609] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5609] umount2("./5", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5609] fstat(3, {st_mode=S_IFDIR|0700, st_size=80, ...}) = 0 [pid 5609] getdents64(3, 0x555579655790 /* 4 entries */, 32768) = 112 [pid 5609] umount2("./5/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5609] umount2("./5/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] newfstatat(AT_FDCWD, "./5/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] umount2("./5/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] openat(AT_FDCWD, "./5/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5609] fstat(4, {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0 [pid 5609] getdents64(4, 0x55557965d7d0 /* 2 entries */, 32768) = 48 [pid 5609] getdents64(4, 0x55557965d7d0 /* 0 entries */, 32768) = 0 [pid 5609] close(4) = 0 [pid 5609] rmdir("./5/file2") = 0 [pid 5609] umount2("./5/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] newfstatat(AT_FDCWD, "./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] unlink("./5/binderfs") = 0 [pid 5609] getdents64(3, 0x555579655790 /* 0 entries */, 32768) = 0 [pid 5609] close(3) = 0 [pid 5609] rmdir("./5") = 0 [pid 5609] mkdir("./6", 0777) = 0 [pid 5609] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 [pid 5609] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5609] close(3) = 0 [pid 5609] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5609] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5647 attached [pid 5647] set_robust_list(0x5555796546e0, 24 [pid 5609] <... clone resumed>, child_tidptr=0x5555796546d0) = 8 [pid 5647] <... set_robust_list resumed>) = 0 [pid 5647] rt_sigprocmask(SIG_SETMASK, [] [pid 5609] rt_sigprocmask(SIG_SETMASK, [] [pid 5647] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5609] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5647] chdir("./6") = 0 [pid 5647] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5647] setpgid(0, 0) = 0 [pid 5647] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5647] write(3, "1000", 4) = 4 [pid 5647] close(3) = 0 [pid 5647] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5647] write(1, "executing program\n", 18) = 18 executing program [pid 5647] memfd_create("syzkaller", 0) = 3 [pid 5647] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5647] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5647] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5647] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5647] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5647] close(3) = 0 [pid 5647] close(4) = 0 [pid 5647] mkdir("./file2", 0777) = 0 [pid 5647] mount("/dev/loop0", "./file2", "jfs", MS_NOEXEC|MS_NOATIME|MS_NODIRATIME|MS_I_VERSION, ",umask=0") = 0 [pid 5647] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5647] chdir("./file2") = 0 [pid 5647] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5647] ioctl(4, LOOP_CLR_FD) = 0 [pid 5647] close(4) = 0 [pid 5647] memfd_create("syzkaller", 0) = 4 [pid 5647] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5647] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8192) = 8192 [pid 5647] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5647] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 110.864824][ T5647] loop0: detected capacity change from 0 to 32768 [pid 5647] close(4) = 0 [pid 5647] memfd_create("syzkaller", 0) = 4 [pid 5647] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5647] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 83968) = 83968 [pid 5647] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5647] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5647] close(4) = 0 [pid 5647] fchown(-1, -1, 0) = -1 EBADF (Bad file descriptor) [pid 5647] open_by_handle_at(-100, NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5647] close(3) = 0 [pid 5647] close(4) = -1 EBADF (Bad file descriptor) [pid 5647] close(5) = -1 EBADF (Bad file descriptor) [pid 5647] close(6) = -1 EBADF (Bad file descriptor) [pid 5647] close(7) = -1 EBADF (Bad file descriptor) [pid 5647] close(8) = -1 EBADF (Bad file descriptor) [pid 5647] close(9) = -1 EBADF (Bad file descriptor) [pid 5647] close(10) = -1 EBADF (Bad file descriptor) [pid 5647] close(11) = -1 EBADF (Bad file descriptor) [pid 5647] close(12) = -1 EBADF (Bad file descriptor) [pid 5647] close(13) = -1 EBADF (Bad file descriptor) [pid 5647] close(14) = -1 EBADF (Bad file descriptor) [pid 5647] close(15) = -1 EBADF (Bad file descriptor) [pid 5647] close(16) = -1 EBADF (Bad file descriptor) [pid 5647] close(17) = -1 EBADF (Bad file descriptor) [pid 5647] close(18) = -1 EBADF (Bad file descriptor) [pid 5647] close(19) = -1 EBADF (Bad file descriptor) [pid 5647] close(20) = -1 EBADF (Bad file descriptor) [pid 5647] close(21) = -1 EBADF (Bad file descriptor) [pid 5647] close(22) = -1 EBADF (Bad file descriptor) [pid 5647] close(23) = -1 EBADF (Bad file descriptor) [pid 5647] close(24) = -1 EBADF (Bad file descriptor) [pid 5647] close(25) = -1 EBADF (Bad file descriptor) [pid 5647] close(26) = -1 EBADF (Bad file descriptor) [pid 5647] close(27) = -1 EBADF (Bad file descriptor) [pid 5647] close(28) = -1 EBADF (Bad file descriptor) [pid 5647] close(29) = -1 EBADF (Bad file descriptor) [pid 5647] exit_group(0) = ? [pid 5647] +++ exited with 0 +++ [pid 5609] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=8, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=18 /* 0.18 s */} --- [pid 5609] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5609] umount2("./6", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5609] fstat(3, {st_mode=S_IFDIR|0700, st_size=80, ...}) = 0 [pid 5609] getdents64(3, 0x555579655790 /* 4 entries */, 32768) = 112 [pid 5609] umount2("./6/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5609] umount2("./6/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] newfstatat(AT_FDCWD, "./6/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] umount2("./6/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] openat(AT_FDCWD, "./6/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5609] fstat(4, {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0 [pid 5609] getdents64(4, 0x55557965d7d0 /* 2 entries */, 32768) = 48 [pid 5609] getdents64(4, 0x55557965d7d0 /* 0 entries */, 32768) = 0 [pid 5609] close(4) = 0 [pid 5609] rmdir("./6/file2") = 0 [pid 5609] umount2("./6/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] newfstatat(AT_FDCWD, "./6/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] unlink("./6/binderfs") = 0 [pid 5609] getdents64(3, 0x555579655790 /* 0 entries */, 32768) = 0 [pid 5609] close(3) = 0 [pid 5609] rmdir("./6") = 0 [pid 5609] mkdir("./7", 0777) = 0 [pid 5609] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 [pid 5609] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5609] close(3) = 0 [pid 5609] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5609] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5648 attached [pid 5648] set_robust_list(0x5555796546e0, 24 [pid 5609] <... clone resumed>, child_tidptr=0x5555796546d0) = 9 [pid 5648] <... set_robust_list resumed>) = 0 [pid 5648] rt_sigprocmask(SIG_SETMASK, [] [pid 5609] rt_sigprocmask(SIG_SETMASK, [] [pid 5648] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5609] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5648] chdir("./7") = 0 [pid 5648] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5648] setpgid(0, 0) = 0 [pid 5648] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5648] write(3, "1000", 4) = 4 [pid 5648] close(3) = 0 [pid 5648] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5648] write(1, "executing program\n", 18) = 18 [pid 5648] memfd_create("syzkaller", 0) = 3 [pid 5648] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5648] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5648] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5648] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5648] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5648] close(3) = 0 [pid 5648] close(4) = 0 [pid 5648] mkdir("./file2", 0777) = 0 [pid 5648] mount("/dev/loop0", "./file2", "jfs", MS_NOEXEC|MS_NOATIME|MS_NODIRATIME|MS_I_VERSION, ",umask=0") = 0 [pid 5648] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5648] chdir("./file2") = 0 [pid 5648] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5648] ioctl(4, LOOP_CLR_FD) = 0 [pid 5648] close(4) = 0 [ 111.437316][ T5648] loop0: detected capacity change from 0 to 32768 [pid 5648] memfd_create("syzkaller", 0) = 4 [pid 5648] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5648] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8192) = 8192 [pid 5648] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5648] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5648] close(4) = 0 [pid 5648] memfd_create("syzkaller", 0) = 4 [pid 5648] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5648] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 83968) = 83968 [pid 5648] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5648] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5648] close(4) = 0 [pid 5648] fchown(-1, -1, 0) = -1 EBADF (Bad file descriptor) [pid 5648] open_by_handle_at(-100, NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5648] close(3) = 0 [pid 5648] close(4) = -1 EBADF (Bad file descriptor) [pid 5648] close(5) = -1 EBADF (Bad file descriptor) [pid 5648] close(6) = -1 EBADF (Bad file descriptor) [pid 5648] close(7) = -1 EBADF (Bad file descriptor) [pid 5648] close(8) = -1 EBADF (Bad file descriptor) [pid 5648] close(9) = -1 EBADF (Bad file descriptor) [pid 5648] close(10) = -1 EBADF (Bad file descriptor) [pid 5648] close(11) = -1 EBADF (Bad file descriptor) [pid 5648] close(12) = -1 EBADF (Bad file descriptor) [pid 5648] close(13) = -1 EBADF (Bad file descriptor) [pid 5648] close(14) = -1 EBADF (Bad file descriptor) [pid 5648] close(15) = -1 EBADF (Bad file descriptor) [pid 5648] close(16) = -1 EBADF (Bad file descriptor) [pid 5648] close(17) = -1 EBADF (Bad file descriptor) [pid 5648] close(18) = -1 EBADF (Bad file descriptor) [pid 5648] close(19) = -1 EBADF (Bad file descriptor) [pid 5648] close(20) = -1 EBADF (Bad file descriptor) [pid 5648] close(21) = -1 EBADF (Bad file descriptor) [pid 5648] close(22) = -1 EBADF (Bad file descriptor) [pid 5648] close(23) = -1 EBADF (Bad file descriptor) [pid 5648] close(24) = -1 EBADF (Bad file descriptor) [pid 5648] close(25) = -1 EBADF (Bad file descriptor) [pid 5648] close(26) = -1 EBADF (Bad file descriptor) [pid 5648] close(27) = -1 EBADF (Bad file descriptor) [pid 5648] close(28) = -1 EBADF (Bad file descriptor) [pid 5648] close(29) = -1 EBADF (Bad file descriptor) [pid 5648] exit_group(0) = ? [pid 5648] +++ exited with 0 +++ [pid 5609] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=9, si_uid=0, si_status=0, si_utime=0, si_stime=20 /* 0.20 s */} --- [pid 5609] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5609] umount2("./7", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5609] fstat(3, {st_mode=S_IFDIR|0700, st_size=80, ...}) = 0 [pid 5609] getdents64(3, 0x555579655790 /* 4 entries */, 32768) = 112 [pid 5609] umount2("./7/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5609] umount2("./7/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] newfstatat(AT_FDCWD, "./7/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] umount2("./7/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] openat(AT_FDCWD, "./7/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5609] fstat(4, {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0 [pid 5609] getdents64(4, 0x55557965d7d0 /* 2 entries */, 32768) = 48 [pid 5609] getdents64(4, 0x55557965d7d0 /* 0 entries */, 32768) = 0 [pid 5609] close(4) = 0 [pid 5609] rmdir("./7/file2") = 0 [pid 5609] umount2("./7/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] newfstatat(AT_FDCWD, "./7/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] unlink("./7/binderfs") = 0 [pid 5609] getdents64(3, 0x555579655790 /* 0 entries */, 32768) = 0 [pid 5609] close(3) = 0 [pid 5609] rmdir("./7") = 0 [pid 5609] mkdir("./8", 0777) = 0 [pid 5609] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 [pid 5609] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5609] close(3) = 0 [pid 5609] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5609] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5649 attached [pid 5649] set_robust_list(0x5555796546e0, 24 [pid 5609] <... clone resumed>, child_tidptr=0x5555796546d0) = 10 [pid 5649] <... set_robust_list resumed>) = 0 [pid 5649] rt_sigprocmask(SIG_SETMASK, [] [pid 5609] rt_sigprocmask(SIG_SETMASK, [] [pid 5649] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5609] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5649] chdir("./8") = 0 [pid 5649] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5649] setpgid(0, 0) = 0 [pid 5649] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5649] write(3, "1000", 4) = 4 [pid 5649] close(3) = 0 [pid 5649] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5649] write(1, "executing program\n", 18) = 18 [pid 5649] memfd_create("syzkaller", 0) = 3 [pid 5649] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5649] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5649] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5649] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5649] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5649] close(3) = 0 [pid 5649] close(4) = 0 [pid 5649] mkdir("./file2", 0777) = 0 [pid 5649] mount("/dev/loop0", "./file2", "jfs", MS_NOEXEC|MS_NOATIME|MS_NODIRATIME|MS_I_VERSION, ",umask=0") = 0 [pid 5649] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5649] chdir("./file2") = 0 [pid 5649] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5649] ioctl(4, LOOP_CLR_FD) = 0 [pid 5649] close(4) = 0 [pid 5649] memfd_create("syzkaller", 0) = 4 [pid 5649] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5649] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8192) = 8192 [pid 5649] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5649] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 112.055615][ T5649] loop0: detected capacity change from 0 to 32768 [pid 5649] close(4) = 0 [pid 5649] memfd_create("syzkaller", 0) = 4 [pid 5649] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5649] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 83968) = 83968 [pid 5649] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5649] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5649] close(4) = 0 [pid 5649] fchown(-1, -1, 0) = -1 EBADF (Bad file descriptor) [pid 5649] open_by_handle_at(-100, NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5649] close(3) = 0 [pid 5649] close(4) = -1 EBADF (Bad file descriptor) [pid 5649] close(5) = -1 EBADF (Bad file descriptor) [pid 5649] close(6) = -1 EBADF (Bad file descriptor) [pid 5649] close(7) = -1 EBADF (Bad file descriptor) [pid 5649] close(8) = -1 EBADF (Bad file descriptor) [pid 5649] close(9) = -1 EBADF (Bad file descriptor) [pid 5649] close(10) = -1 EBADF (Bad file descriptor) [pid 5649] close(11) = -1 EBADF (Bad file descriptor) [pid 5649] close(12) = -1 EBADF (Bad file descriptor) [pid 5649] close(13) = -1 EBADF (Bad file descriptor) [pid 5649] close(14) = -1 EBADF (Bad file descriptor) [pid 5649] close(15) = -1 EBADF (Bad file descriptor) [pid 5649] close(16) = -1 EBADF (Bad file descriptor) [pid 5649] close(17) = -1 EBADF (Bad file descriptor) [pid 5649] close(18) = -1 EBADF (Bad file descriptor) [pid 5649] close(19) = -1 EBADF (Bad file descriptor) [pid 5649] close(20) = -1 EBADF (Bad file descriptor) [pid 5649] close(21) = -1 EBADF (Bad file descriptor) [pid 5649] close(22) = -1 EBADF (Bad file descriptor) [pid 5649] close(23) = -1 EBADF (Bad file descriptor) [pid 5649] close(24) = -1 EBADF (Bad file descriptor) [pid 5649] close(25) = -1 EBADF (Bad file descriptor) [pid 5649] close(26) = -1 EBADF (Bad file descriptor) [pid 5649] close(27) = -1 EBADF (Bad file descriptor) [pid 5649] close(28) = -1 EBADF (Bad file descriptor) [pid 5649] close(29) = -1 EBADF (Bad file descriptor) [pid 5649] exit_group(0) = ? [pid 5649] +++ exited with 0 +++ [pid 5609] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=23 /* 0.23 s */} --- [pid 5609] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5609] umount2("./8", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5609] fstat(3, {st_mode=S_IFDIR|0700, st_size=80, ...}) = 0 [pid 5609] getdents64(3, 0x555579655790 /* 4 entries */, 32768) = 112 [pid 5609] umount2("./8/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5609] umount2("./8/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] newfstatat(AT_FDCWD, "./8/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] umount2("./8/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] openat(AT_FDCWD, "./8/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5609] fstat(4, {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0 [pid 5609] getdents64(4, 0x55557965d7d0 /* 2 entries */, 32768) = 48 [pid 5609] getdents64(4, 0x55557965d7d0 /* 0 entries */, 32768) = 0 [pid 5609] close(4) = 0 [pid 5609] rmdir("./8/file2") = 0 [pid 5609] umount2("./8/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] newfstatat(AT_FDCWD, "./8/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] unlink("./8/binderfs") = 0 [pid 5609] getdents64(3, 0x555579655790 /* 0 entries */, 32768) = 0 [pid 5609] close(3) = 0 [pid 5609] rmdir("./8") = 0 [pid 5609] mkdir("./9", 0777) = 0 [pid 5609] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 [pid 5609] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5609] close(3) = 0 [pid 5609] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5609] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5650 attached , child_tidptr=0x5555796546d0) = 11 [pid 5650] set_robust_list(0x5555796546e0, 24) = 0 [pid 5650] rt_sigprocmask(SIG_SETMASK, [] [pid 5609] rt_sigprocmask(SIG_SETMASK, [] [pid 5650] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5609] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5650] chdir("./9") = 0 [pid 5650] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5650] setpgid(0, 0) = 0 [pid 5650] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5650] write(3, "1000", 4) = 4 [pid 5650] close(3) = 0 [pid 5650] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5650] write(1, "executing program\n", 18) = 18 executing program [pid 5650] memfd_create("syzkaller", 0) = 3 [pid 5650] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5650] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5650] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5650] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5650] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5650] close(3) = 0 [pid 5650] close(4) = 0 [pid 5650] mkdir("./file2", 0777) = 0 [pid 5650] mount("/dev/loop0", "./file2", "jfs", MS_NOEXEC|MS_NOATIME|MS_NODIRATIME|MS_I_VERSION, ",umask=0") = 0 [pid 5650] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5650] chdir("./file2") = 0 [pid 5650] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5650] ioctl(4, LOOP_CLR_FD) = 0 [pid 5650] close(4) = 0 [pid 5650] memfd_create("syzkaller", 0) = 4 [pid 5650] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5650] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8192) = 8192 [pid 5650] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5650] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5650] close(4) = 0 [pid 5650] memfd_create("syzkaller", 0) = 4 [pid 5650] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [ 112.706654][ T5650] loop0: detected capacity change from 0 to 32768 [pid 5650] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 83968) = 83968 [pid 5650] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5650] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5650] close(4) = 0 [pid 5650] fchown(-1, -1, 0) = -1 EBADF (Bad file descriptor) [pid 5650] open_by_handle_at(-100, NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5650] close(3) = 0 [pid 5650] close(4) = -1 EBADF (Bad file descriptor) [pid 5650] close(5) = -1 EBADF (Bad file descriptor) [pid 5650] close(6) = -1 EBADF (Bad file descriptor) [pid 5650] close(7) = -1 EBADF (Bad file descriptor) [pid 5650] close(8) = -1 EBADF (Bad file descriptor) [pid 5650] close(9) = -1 EBADF (Bad file descriptor) [pid 5650] close(10) = -1 EBADF (Bad file descriptor) [pid 5650] close(11) = -1 EBADF (Bad file descriptor) [pid 5650] close(12) = -1 EBADF (Bad file descriptor) [pid 5650] close(13) = -1 EBADF (Bad file descriptor) [pid 5650] close(14) = -1 EBADF (Bad file descriptor) [pid 5650] close(15) = -1 EBADF (Bad file descriptor) [pid 5650] close(16) = -1 EBADF (Bad file descriptor) [pid 5650] close(17) = -1 EBADF (Bad file descriptor) [pid 5650] close(18) = -1 EBADF (Bad file descriptor) [pid 5650] close(19) = -1 EBADF (Bad file descriptor) [pid 5650] close(20) = -1 EBADF (Bad file descriptor) [pid 5650] close(21) = -1 EBADF (Bad file descriptor) [pid 5650] close(22) = -1 EBADF (Bad file descriptor) [pid 5650] close(23) = -1 EBADF (Bad file descriptor) [pid 5650] close(24) = -1 EBADF (Bad file descriptor) [pid 5650] close(25) = -1 EBADF (Bad file descriptor) [pid 5650] close(26) = -1 EBADF (Bad file descriptor) [pid 5650] close(27) = -1 EBADF (Bad file descriptor) [pid 5650] close(28) = -1 EBADF (Bad file descriptor) [pid 5650] close(29) = -1 EBADF (Bad file descriptor) [pid 5650] exit_group(0) = ? [pid 5650] +++ exited with 0 +++ [pid 5609] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=11, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=26 /* 0.26 s */} --- [pid 5609] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5609] umount2("./9", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5609] fstat(3, {st_mode=S_IFDIR|0700, st_size=80, ...}) = 0 [pid 5609] getdents64(3, 0x555579655790 /* 4 entries */, 32768) = 112 [pid 5609] umount2("./9/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5609] umount2("./9/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] newfstatat(AT_FDCWD, "./9/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] umount2("./9/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] openat(AT_FDCWD, "./9/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5609] fstat(4, {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0 [pid 5609] getdents64(4, 0x55557965d7d0 /* 2 entries */, 32768) = 48 [pid 5609] getdents64(4, 0x55557965d7d0 /* 0 entries */, 32768) = 0 [pid 5609] close(4) = 0 [pid 5609] rmdir("./9/file2") = 0 [pid 5609] umount2("./9/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] newfstatat(AT_FDCWD, "./9/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] unlink("./9/binderfs") = 0 [pid 5609] getdents64(3, 0x555579655790 /* 0 entries */, 32768) = 0 [pid 5609] close(3) = 0 [pid 5609] rmdir("./9") = 0 [pid 5609] mkdir("./10", 0777) = 0 [pid 5609] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 [pid 5609] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5609] close(3) = 0 [pid 5609] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5609] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5651 attached [pid 5651] set_robust_list(0x5555796546e0, 24) = 0 [pid 5651] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5651] chdir("./10" [pid 5609] <... clone resumed>, child_tidptr=0x5555796546d0) = 12 [pid 5651] <... chdir resumed>) = 0 [pid 5651] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5609] rt_sigprocmask(SIG_SETMASK, [] [pid 5651] <... prctl resumed>) = 0 [pid 5651] setpgid(0, 0 [pid 5609] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5651] <... setpgid resumed>) = 0 [pid 5651] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5651] write(3, "1000", 4) = 4 [pid 5651] close(3) = 0 [pid 5651] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5651] write(1, "executing program\n", 18) = 18 [pid 5651] memfd_create("syzkaller", 0) = 3 [pid 5651] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 executing program [pid 5651] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5651] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5651] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5651] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5651] close(3) = 0 [pid 5651] close(4) = 0 [pid 5651] mkdir("./file2", 0777) = 0 [pid 5651] mount("/dev/loop0", "./file2", "jfs", MS_NOEXEC|MS_NOATIME|MS_NODIRATIME|MS_I_VERSION, ",umask=0") = 0 [pid 5651] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5651] chdir("./file2") = 0 [pid 5651] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5651] ioctl(4, LOOP_CLR_FD) = 0 [pid 5651] close(4) = 0 [pid 5651] memfd_create("syzkaller", 0) = 4 [pid 5651] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5651] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8192) = 8192 [pid 5651] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5651] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5651] close(4) = 0 [pid 5651] memfd_create("syzkaller", 0) = 4 [pid 5651] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5651] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 83968) = 83968 [ 113.450634][ T5651] loop0: detected capacity change from 0 to 32768 [pid 5651] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5651] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5651] close(4) = 0 [pid 5651] fchown(-1, -1, 0) = -1 EBADF (Bad file descriptor) [pid 5651] open_by_handle_at(-100, NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5651] close(3) = 0 [pid 5651] close(4) = -1 EBADF (Bad file descriptor) [pid 5651] close(5) = -1 EBADF (Bad file descriptor) [pid 5651] close(6) = -1 EBADF (Bad file descriptor) [pid 5651] close(7) = -1 EBADF (Bad file descriptor) [pid 5651] close(8) = -1 EBADF (Bad file descriptor) [pid 5651] close(9) = -1 EBADF (Bad file descriptor) [pid 5651] close(10) = -1 EBADF (Bad file descriptor) [pid 5651] close(11) = -1 EBADF (Bad file descriptor) [pid 5651] close(12) = -1 EBADF (Bad file descriptor) [pid 5651] close(13) = -1 EBADF (Bad file descriptor) [pid 5651] close(14) = -1 EBADF (Bad file descriptor) [pid 5651] close(15) = -1 EBADF (Bad file descriptor) [pid 5651] close(16) = -1 EBADF (Bad file descriptor) [pid 5651] close(17) = -1 EBADF (Bad file descriptor) [pid 5651] close(18) = -1 EBADF (Bad file descriptor) [pid 5651] close(19) = -1 EBADF (Bad file descriptor) [pid 5651] close(20) = -1 EBADF (Bad file descriptor) [pid 5651] close(21) = -1 EBADF (Bad file descriptor) [pid 5651] close(22) = -1 EBADF (Bad file descriptor) [pid 5651] close(23) = -1 EBADF (Bad file descriptor) [pid 5651] close(24) = -1 EBADF (Bad file descriptor) [pid 5651] close(25) = -1 EBADF (Bad file descriptor) [pid 5651] close(26) = -1 EBADF (Bad file descriptor) [pid 5651] close(27) = -1 EBADF (Bad file descriptor) [pid 5651] close(28) = -1 EBADF (Bad file descriptor) [pid 5651] close(29) = -1 EBADF (Bad file descriptor) [pid 5651] exit_group(0) = ? [pid 5651] +++ exited with 0 +++ [pid 5609] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=12, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=20 /* 0.20 s */} --- [pid 5609] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5609] umount2("./10", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5609] fstat(3, {st_mode=S_IFDIR|0700, st_size=80, ...}) = 0 [pid 5609] getdents64(3, 0x555579655790 /* 4 entries */, 32768) = 112 [pid 5609] umount2("./10/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5609] umount2("./10/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] newfstatat(AT_FDCWD, "./10/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] umount2("./10/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] openat(AT_FDCWD, "./10/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5609] fstat(4, {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0 [pid 5609] getdents64(4, 0x55557965d7d0 /* 2 entries */, 32768) = 48 [pid 5609] getdents64(4, 0x55557965d7d0 /* 0 entries */, 32768) = 0 [pid 5609] close(4) = 0 [pid 5609] rmdir("./10/file2") = 0 [pid 5609] umount2("./10/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] newfstatat(AT_FDCWD, "./10/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] unlink("./10/binderfs") = 0 [pid 5609] getdents64(3, 0x555579655790 /* 0 entries */, 32768) = 0 [pid 5609] close(3) = 0 [pid 5609] rmdir("./10") = 0 [pid 5609] mkdir("./11", 0777) = 0 [pid 5609] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 [pid 5609] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5609] close(3) = 0 [pid 5609] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5609] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5652 attached , child_tidptr=0x5555796546d0) = 13 [pid 5609] rt_sigprocmask(SIG_SETMASK, [] [pid 5652] set_robust_list(0x5555796546e0, 24) = 0 [pid 5609] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5652] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5652] chdir("./11") = 0 [pid 5652] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5652] setpgid(0, 0) = 0 [pid 5652] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5652] write(3, "1000", 4) = 4 [pid 5652] close(3) = 0 [pid 5652] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5652] write(1, "executing program\n", 18) = 18 executing program [pid 5652] memfd_create("syzkaller", 0) = 3 [pid 5652] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5652] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5652] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5652] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5652] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5652] close(3) = 0 [pid 5652] close(4) = 0 [pid 5652] mkdir("./file2", 0777) = 0 [pid 5652] mount("/dev/loop0", "./file2", "jfs", MS_NOEXEC|MS_NOATIME|MS_NODIRATIME|MS_I_VERSION, ",umask=0") = 0 [pid 5652] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5652] chdir("./file2") = 0 [pid 5652] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5652] ioctl(4, LOOP_CLR_FD) = 0 [pid 5652] close(4) = 0 [pid 5652] memfd_create("syzkaller", 0) = 4 [pid 5652] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5652] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8192) = 8192 [pid 5652] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5652] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5652] close(4) = 0 [pid 5652] memfd_create("syzkaller", 0) = 4 [ 113.994854][ T5652] loop0: detected capacity change from 0 to 32768 [pid 5652] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5652] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 83968) = 83968 [pid 5652] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5652] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5652] close(4) = 0 [pid 5652] fchown(-1, -1, 0) = -1 EBADF (Bad file descriptor) [pid 5652] open_by_handle_at(-100, NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5652] close(3) = 0 [pid 5652] close(4) = -1 EBADF (Bad file descriptor) [pid 5652] close(5) = -1 EBADF (Bad file descriptor) [pid 5652] close(6) = -1 EBADF (Bad file descriptor) [pid 5652] close(7) = -1 EBADF (Bad file descriptor) [pid 5652] close(8) = -1 EBADF (Bad file descriptor) [pid 5652] close(9) = -1 EBADF (Bad file descriptor) [pid 5652] close(10) = -1 EBADF (Bad file descriptor) [pid 5652] close(11) = -1 EBADF (Bad file descriptor) [pid 5652] close(12) = -1 EBADF (Bad file descriptor) [pid 5652] close(13) = -1 EBADF (Bad file descriptor) [pid 5652] close(14) = -1 EBADF (Bad file descriptor) [pid 5652] close(15) = -1 EBADF (Bad file descriptor) [pid 5652] close(16) = -1 EBADF (Bad file descriptor) [pid 5652] close(17) = -1 EBADF (Bad file descriptor) [pid 5652] close(18) = -1 EBADF (Bad file descriptor) [pid 5652] close(19) = -1 EBADF (Bad file descriptor) [pid 5652] close(20) = -1 EBADF (Bad file descriptor) [pid 5652] close(21) = -1 EBADF (Bad file descriptor) [pid 5652] close(22) = -1 EBADF (Bad file descriptor) [pid 5652] close(23) = -1 EBADF (Bad file descriptor) [pid 5652] close(24) = -1 EBADF (Bad file descriptor) [pid 5652] close(25) = -1 EBADF (Bad file descriptor) [pid 5652] close(26) = -1 EBADF (Bad file descriptor) [pid 5652] close(27) = -1 EBADF (Bad file descriptor) [pid 5652] close(28) = -1 EBADF (Bad file descriptor) [pid 5652] close(29) = -1 EBADF (Bad file descriptor) [pid 5652] exit_group(0) = ? [pid 5652] +++ exited with 0 +++ [pid 5609] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=13, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=20 /* 0.20 s */} --- [pid 5609] umount2("./11", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5609] fstat(3, {st_mode=S_IFDIR|0700, st_size=80, ...}) = 0 [pid 5609] getdents64(3, 0x555579655790 /* 4 entries */, 32768) = 112 [pid 5609] umount2("./11/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5609] umount2("./11/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] newfstatat(AT_FDCWD, "./11/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] umount2("./11/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] openat(AT_FDCWD, "./11/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5609] fstat(4, {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0 [pid 5609] getdents64(4, 0x55557965d7d0 /* 2 entries */, 32768) = 48 [pid 5609] getdents64(4, 0x55557965d7d0 /* 0 entries */, 32768) = 0 [pid 5609] close(4) = 0 [pid 5609] rmdir("./11/file2") = 0 [pid 5609] umount2("./11/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] newfstatat(AT_FDCWD, "./11/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] unlink("./11/binderfs") = 0 [pid 5609] getdents64(3, 0x555579655790 /* 0 entries */, 32768) = 0 [pid 5609] close(3) = 0 [pid 5609] rmdir("./11") = 0 [pid 5609] mkdir("./12", 0777) = 0 [pid 5609] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 [pid 5609] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5609] close(3) = 0 [pid 5609] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5609] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5653 attached , child_tidptr=0x5555796546d0) = 14 [pid 5653] set_robust_list(0x5555796546e0, 24 [pid 5609] rt_sigprocmask(SIG_SETMASK, [] [pid 5653] <... set_robust_list resumed>) = 0 [pid 5609] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5653] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5653] chdir("./12") = 0 [pid 5653] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5653] setpgid(0, 0) = 0 [pid 5653] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5653] write(3, "1000", 4) = 4 [pid 5653] close(3) = 0 [pid 5653] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5653] write(1, "executing program\n", 18) = 18 executing program [pid 5653] memfd_create("syzkaller", 0) = 3 [pid 5653] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5653] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5653] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5653] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5653] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5653] close(3) = 0 [pid 5653] close(4) = 0 [pid 5653] mkdir("./file2", 0777) = 0 [pid 5653] mount("/dev/loop0", "./file2", "jfs", MS_NOEXEC|MS_NOATIME|MS_NODIRATIME|MS_I_VERSION, ",umask=0") = 0 [pid 5653] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5653] chdir("./file2") = 0 [pid 5653] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5653] ioctl(4, LOOP_CLR_FD) = 0 [pid 5653] close(4) = 0 [pid 5653] memfd_create("syzkaller", 0) = 4 [pid 5653] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5653] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8192) = 8192 [pid 5653] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5653] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5653] close(4) = 0 [pid 5653] memfd_create("syzkaller", 0) = 4 [pid 5653] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5653] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 83968) = 83968 [pid 5653] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5653] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5653] close(4) = 0 [pid 5653] fchown(-1, -1, 0) = -1 EBADF (Bad file descriptor) [pid 5653] open_by_handle_at(-100, NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5653] close(3) = 0 [pid 5653] close(4) = -1 EBADF (Bad file descriptor) [pid 5653] close(5) = -1 EBADF (Bad file descriptor) [pid 5653] close(6) = -1 EBADF (Bad file descriptor) [ 114.521652][ T5653] loop0: detected capacity change from 0 to 32768 [pid 5653] close(7) = -1 EBADF (Bad file descriptor) [pid 5653] close(8) = -1 EBADF (Bad file descriptor) [pid 5653] close(9) = -1 EBADF (Bad file descriptor) [pid 5653] close(10) = -1 EBADF (Bad file descriptor) [pid 5653] close(11) = -1 EBADF (Bad file descriptor) [pid 5653] close(12) = -1 EBADF (Bad file descriptor) [pid 5653] close(13) = -1 EBADF (Bad file descriptor) [pid 5653] close(14) = -1 EBADF (Bad file descriptor) [pid 5653] close(15) = -1 EBADF (Bad file descriptor) [pid 5653] close(16) = -1 EBADF (Bad file descriptor) [pid 5653] close(17) = -1 EBADF (Bad file descriptor) [pid 5653] close(18) = -1 EBADF (Bad file descriptor) [pid 5653] close(19) = -1 EBADF (Bad file descriptor) [pid 5653] close(20) = -1 EBADF (Bad file descriptor) [pid 5653] close(21) = -1 EBADF (Bad file descriptor) [pid 5653] close(22) = -1 EBADF (Bad file descriptor) [pid 5653] close(23) = -1 EBADF (Bad file descriptor) [pid 5653] close(24) = -1 EBADF (Bad file descriptor) [pid 5653] close(25) = -1 EBADF (Bad file descriptor) [pid 5653] close(26) = -1 EBADF (Bad file descriptor) [pid 5653] close(27) = -1 EBADF (Bad file descriptor) [pid 5653] close(28) = -1 EBADF (Bad file descriptor) [pid 5653] close(29) = -1 EBADF (Bad file descriptor) [pid 5653] exit_group(0) = ? [pid 5653] +++ exited with 0 +++ [pid 5609] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=14, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=23 /* 0.23 s */} --- [pid 5609] umount2("./12", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5609] fstat(3, {st_mode=S_IFDIR|0700, st_size=80, ...}) = 0 [pid 5609] getdents64(3, 0x555579655790 /* 4 entries */, 32768) = 112 [pid 5609] umount2("./12/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5609] umount2("./12/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] newfstatat(AT_FDCWD, "./12/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] umount2("./12/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] openat(AT_FDCWD, "./12/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5609] fstat(4, {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0 [pid 5609] getdents64(4, 0x55557965d7d0 /* 2 entries */, 32768) = 48 [pid 5609] getdents64(4, 0x55557965d7d0 /* 0 entries */, 32768) = 0 [pid 5609] close(4) = 0 [pid 5609] rmdir("./12/file2") = 0 [pid 5609] umount2("./12/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] newfstatat(AT_FDCWD, "./12/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] unlink("./12/binderfs") = 0 [pid 5609] getdents64(3, 0x555579655790 /* 0 entries */, 32768) = 0 [pid 5609] close(3) = 0 [pid 5609] rmdir("./12") = 0 [pid 5609] mkdir("./13", 0777) = 0 [pid 5609] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 [pid 5609] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5609] close(3) = 0 [pid 5609] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5609] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5654 attached , child_tidptr=0x5555796546d0) = 15 [pid 5609] rt_sigprocmask(SIG_SETMASK, [] [pid 5654] set_robust_list(0x5555796546e0, 24) = 0 [pid 5609] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5654] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5654] chdir("./13") = 0 [pid 5654] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5654] setpgid(0, 0) = 0 [pid 5654] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5654] write(3, "1000", 4) = 4 [pid 5654] close(3) = 0 [pid 5654] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5654] write(1, "executing program\n", 18) = 18 [pid 5654] memfd_create("syzkaller", 0) = 3 [pid 5654] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5654] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5654] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5654] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5654] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5654] close(3) = 0 [pid 5654] close(4) = 0 [pid 5654] mkdir("./file2", 0777) = 0 [pid 5654] mount("/dev/loop0", "./file2", "jfs", MS_NOEXEC|MS_NOATIME|MS_NODIRATIME|MS_I_VERSION, ",umask=0") = 0 [pid 5654] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5654] chdir("./file2") = 0 [pid 5654] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5654] ioctl(4, LOOP_CLR_FD) = 0 [pid 5654] close(4) = 0 [pid 5654] memfd_create("syzkaller", 0) = 4 [pid 5654] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5654] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8192) = 8192 [pid 5654] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5654] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5654] close(4) = 0 [pid 5654] memfd_create("syzkaller", 0) = 4 [pid 5654] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [ 115.047030][ T5654] loop0: detected capacity change from 0 to 32768 [pid 5654] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 83968) = 83968 [pid 5654] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5654] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5654] close(4) = 0 [pid 5654] fchown(-1, -1, 0) = -1 EBADF (Bad file descriptor) [pid 5654] open_by_handle_at(-100, NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5654] close(3) = 0 [pid 5654] close(4) = -1 EBADF (Bad file descriptor) [pid 5654] close(5) = -1 EBADF (Bad file descriptor) [pid 5654] close(6) = -1 EBADF (Bad file descriptor) [pid 5654] close(7) = -1 EBADF (Bad file descriptor) [pid 5654] close(8) = -1 EBADF (Bad file descriptor) [pid 5654] close(9) = -1 EBADF (Bad file descriptor) [pid 5654] close(10) = -1 EBADF (Bad file descriptor) [pid 5654] close(11) = -1 EBADF (Bad file descriptor) [pid 5654] close(12) = -1 EBADF (Bad file descriptor) [pid 5654] close(13) = -1 EBADF (Bad file descriptor) [pid 5654] close(14) = -1 EBADF (Bad file descriptor) [pid 5654] close(15) = -1 EBADF (Bad file descriptor) [pid 5654] close(16) = -1 EBADF (Bad file descriptor) [pid 5654] close(17) = -1 EBADF (Bad file descriptor) [pid 5654] close(18) = -1 EBADF (Bad file descriptor) [pid 5654] close(19) = -1 EBADF (Bad file descriptor) [pid 5654] close(20) = -1 EBADF (Bad file descriptor) [pid 5654] close(21) = -1 EBADF (Bad file descriptor) [pid 5654] close(22) = -1 EBADF (Bad file descriptor) [pid 5654] close(23) = -1 EBADF (Bad file descriptor) [pid 5654] close(24) = -1 EBADF (Bad file descriptor) [pid 5654] close(25) = -1 EBADF (Bad file descriptor) [pid 5654] close(26) = -1 EBADF (Bad file descriptor) [pid 5654] close(27) = -1 EBADF (Bad file descriptor) [pid 5654] close(28) = -1 EBADF (Bad file descriptor) [pid 5654] close(29) = -1 EBADF (Bad file descriptor) [pid 5654] exit_group(0) = ? [pid 5654] +++ exited with 0 +++ [pid 5609] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=15, si_uid=0, si_status=0, si_utime=0, si_stime=21 /* 0.21 s */} --- [pid 5609] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5609] umount2("./13", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] openat(AT_FDCWD, "./13", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5609] fstat(3, {st_mode=S_IFDIR|0700, st_size=80, ...}) = 0 [pid 5609] getdents64(3, 0x555579655790 /* 4 entries */, 32768) = 112 [pid 5609] umount2("./13/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5609] umount2("./13/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] newfstatat(AT_FDCWD, "./13/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] umount2("./13/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] openat(AT_FDCWD, "./13/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5609] fstat(4, {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0 [pid 5609] getdents64(4, 0x55557965d7d0 /* 2 entries */, 32768) = 48 [pid 5609] getdents64(4, 0x55557965d7d0 /* 0 entries */, 32768) = 0 [pid 5609] close(4) = 0 [pid 5609] rmdir("./13/file2") = 0 [pid 5609] umount2("./13/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] newfstatat(AT_FDCWD, "./13/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] unlink("./13/binderfs") = 0 [pid 5609] getdents64(3, 0x555579655790 /* 0 entries */, 32768) = 0 [pid 5609] close(3) = 0 [pid 5609] rmdir("./13") = 0 [pid 5609] mkdir("./14", 0777) = 0 [pid 5609] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 [pid 5609] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5609] close(3) = 0 [pid 5609] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5609] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5655 attached , child_tidptr=0x5555796546d0) = 16 [pid 5609] rt_sigprocmask(SIG_SETMASK, [] [pid 5655] set_robust_list(0x5555796546e0, 24) = 0 [pid 5609] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5655] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5655] chdir("./14") = 0 [pid 5655] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5655] setpgid(0, 0) = 0 [pid 5655] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5655] write(3, "1000", 4) = 4 [pid 5655] close(3) = 0 [pid 5655] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5655] write(1, "executing program\n", 18) = 18 [pid 5655] memfd_create("syzkaller", 0) = 3 [pid 5655] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5655] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5655] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5655] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5655] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5655] close(3) = 0 [pid 5655] close(4) = 0 [pid 5655] mkdir("./file2", 0777) = 0 [pid 5655] mount("/dev/loop0", "./file2", "jfs", MS_NOEXEC|MS_NOATIME|MS_NODIRATIME|MS_I_VERSION, ",umask=0") = 0 [pid 5655] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5655] chdir("./file2") = 0 [pid 5655] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5655] ioctl(4, LOOP_CLR_FD) = 0 [pid 5655] close(4) = 0 [pid 5655] memfd_create("syzkaller", 0) = 4 [pid 5655] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5655] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8192) = 8192 [pid 5655] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5655] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5655] close(4) = 0 [pid 5655] memfd_create("syzkaller", 0) = 4 [pid 5655] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [ 115.580148][ T5655] loop0: detected capacity change from 0 to 32768 [pid 5655] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 83968) = 83968 [pid 5655] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5655] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5655] close(4) = 0 [pid 5655] fchown(-1, -1, 0) = -1 EBADF (Bad file descriptor) [pid 5655] open_by_handle_at(-100, NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5655] close(3) = 0 [pid 5655] close(4) = -1 EBADF (Bad file descriptor) [pid 5655] close(5) = -1 EBADF (Bad file descriptor) [pid 5655] close(6) = -1 EBADF (Bad file descriptor) [pid 5655] close(7) = -1 EBADF (Bad file descriptor) [pid 5655] close(8) = -1 EBADF (Bad file descriptor) [pid 5655] close(9) = -1 EBADF (Bad file descriptor) [pid 5655] close(10) = -1 EBADF (Bad file descriptor) [pid 5655] close(11) = -1 EBADF (Bad file descriptor) [pid 5655] close(12) = -1 EBADF (Bad file descriptor) [pid 5655] close(13) = -1 EBADF (Bad file descriptor) [pid 5655] close(14) = -1 EBADF (Bad file descriptor) [pid 5655] close(15) = -1 EBADF (Bad file descriptor) [pid 5655] close(16) = -1 EBADF (Bad file descriptor) [pid 5655] close(17) = -1 EBADF (Bad file descriptor) [pid 5655] close(18) = -1 EBADF (Bad file descriptor) [pid 5655] close(19) = -1 EBADF (Bad file descriptor) [pid 5655] close(20) = -1 EBADF (Bad file descriptor) [pid 5655] close(21) = -1 EBADF (Bad file descriptor) [pid 5655] close(22) = -1 EBADF (Bad file descriptor) [pid 5655] close(23) = -1 EBADF (Bad file descriptor) [pid 5655] close(24) = -1 EBADF (Bad file descriptor) [pid 5655] close(25) = -1 EBADF (Bad file descriptor) [pid 5655] close(26) = -1 EBADF (Bad file descriptor) [pid 5655] close(27) = -1 EBADF (Bad file descriptor) [pid 5655] close(28) = -1 EBADF (Bad file descriptor) [pid 5655] close(29) = -1 EBADF (Bad file descriptor) [pid 5655] exit_group(0) = ? [pid 5655] +++ exited with 0 +++ [pid 5609] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=16, si_uid=0, si_status=0, si_utime=0, si_stime=22 /* 0.22 s */} --- [pid 5609] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5609] umount2("./14", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] openat(AT_FDCWD, "./14", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5609] fstat(3, {st_mode=S_IFDIR|0700, st_size=80, ...}) = 0 [pid 5609] getdents64(3, 0x555579655790 /* 4 entries */, 32768) = 112 [pid 5609] umount2("./14/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5609] umount2("./14/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] newfstatat(AT_FDCWD, "./14/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] umount2("./14/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] openat(AT_FDCWD, "./14/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5609] fstat(4, {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0 [pid 5609] getdents64(4, 0x55557965d7d0 /* 2 entries */, 32768) = 48 [pid 5609] getdents64(4, 0x55557965d7d0 /* 0 entries */, 32768) = 0 [pid 5609] close(4) = 0 [pid 5609] rmdir("./14/file2") = 0 [pid 5609] umount2("./14/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] newfstatat(AT_FDCWD, "./14/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] unlink("./14/binderfs") = 0 [pid 5609] getdents64(3, 0x555579655790 /* 0 entries */, 32768) = 0 [pid 5609] close(3) = 0 [pid 5609] rmdir("./14") = 0 [pid 5609] mkdir("./15", 0777) = 0 [pid 5609] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 [pid 5609] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5609] close(3) = 0 [pid 5609] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5609] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5656 attached , child_tidptr=0x5555796546d0) = 17 [pid 5609] rt_sigprocmask(SIG_SETMASK, [] [pid 5656] set_robust_list(0x5555796546e0, 24 [pid 5609] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5656] <... set_robust_list resumed>) = 0 [pid 5656] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5656] chdir("./15") = 0 [pid 5656] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5656] setpgid(0, 0) = 0 [pid 5656] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5656] write(3, "1000", 4) = 4 [pid 5656] close(3) = 0 [pid 5656] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5656] write(1, "executing program\n", 18) = 18 executing program [pid 5656] memfd_create("syzkaller", 0) = 3 [pid 5656] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5656] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5656] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5656] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5656] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5656] close(3) = 0 [pid 5656] close(4) = 0 [pid 5656] mkdir("./file2", 0777) = 0 [pid 5656] mount("/dev/loop0", "./file2", "jfs", MS_NOEXEC|MS_NOATIME|MS_NODIRATIME|MS_I_VERSION, ",umask=0") = 0 [pid 5656] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5656] chdir("./file2") = 0 [pid 5656] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5656] ioctl(4, LOOP_CLR_FD) = 0 [pid 5656] close(4) = 0 [pid 5656] memfd_create("syzkaller", 0) = 4 [pid 5656] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5656] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8192) = 8192 [ 116.115879][ T5656] loop0: detected capacity change from 0 to 32768 [pid 5656] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5656] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5656] close(4) = 0 [pid 5656] memfd_create("syzkaller", 0) = 4 [pid 5656] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5656] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 83968) = 83968 [pid 5656] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5656] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5656] close(4) = 0 [pid 5656] fchown(-1, -1, 0) = -1 EBADF (Bad file descriptor) [pid 5656] open_by_handle_at(-100, NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5656] close(3) = 0 [pid 5656] close(4) = -1 EBADF (Bad file descriptor) [pid 5656] close(5) = -1 EBADF (Bad file descriptor) [pid 5656] close(6) = -1 EBADF (Bad file descriptor) [pid 5656] close(7) = -1 EBADF (Bad file descriptor) [pid 5656] close(8) = -1 EBADF (Bad file descriptor) [pid 5656] close(9) = -1 EBADF (Bad file descriptor) [pid 5656] close(10) = -1 EBADF (Bad file descriptor) [pid 5656] close(11) = -1 EBADF (Bad file descriptor) [pid 5656] close(12) = -1 EBADF (Bad file descriptor) [pid 5656] close(13) = -1 EBADF (Bad file descriptor) [pid 5656] close(14) = -1 EBADF (Bad file descriptor) [pid 5656] close(15) = -1 EBADF (Bad file descriptor) [pid 5656] close(16) = -1 EBADF (Bad file descriptor) [pid 5656] close(17) = -1 EBADF (Bad file descriptor) [pid 5656] close(18) = -1 EBADF (Bad file descriptor) [pid 5656] close(19) = -1 EBADF (Bad file descriptor) [pid 5656] close(20) = -1 EBADF (Bad file descriptor) [pid 5656] close(21) = -1 EBADF (Bad file descriptor) [pid 5656] close(22) = -1 EBADF (Bad file descriptor) [pid 5656] close(23) = -1 EBADF (Bad file descriptor) [pid 5656] close(24) = -1 EBADF (Bad file descriptor) [pid 5656] close(25) = -1 EBADF (Bad file descriptor) [pid 5656] close(26) = -1 EBADF (Bad file descriptor) [pid 5656] close(27) = -1 EBADF (Bad file descriptor) [pid 5656] close(28) = -1 EBADF (Bad file descriptor) [pid 5656] close(29) = -1 EBADF (Bad file descriptor) [pid 5656] exit_group(0) = ? [pid 5656] +++ exited with 0 +++ [pid 5609] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=17, si_uid=0, si_status=0, si_utime=0, si_stime=22 /* 0.22 s */} --- [pid 5609] umount2("./15", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] openat(AT_FDCWD, "./15", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5609] fstat(3, {st_mode=S_IFDIR|0700, st_size=80, ...}) = 0 [pid 5609] getdents64(3, 0x555579655790 /* 4 entries */, 32768) = 112 [pid 5609] umount2("./15/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5609] umount2("./15/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] newfstatat(AT_FDCWD, "./15/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] umount2("./15/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] openat(AT_FDCWD, "./15/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5609] fstat(4, {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0 [pid 5609] getdents64(4, 0x55557965d7d0 /* 2 entries */, 32768) = 48 [pid 5609] getdents64(4, 0x55557965d7d0 /* 0 entries */, 32768) = 0 [pid 5609] close(4) = 0 [pid 5609] rmdir("./15/file2") = 0 [pid 5609] umount2("./15/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] newfstatat(AT_FDCWD, "./15/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] unlink("./15/binderfs") = 0 [pid 5609] getdents64(3, 0x555579655790 /* 0 entries */, 32768) = 0 [pid 5609] close(3) = 0 [pid 5609] rmdir("./15") = 0 [pid 5609] mkdir("./16", 0777) = 0 [pid 5609] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 [pid 5609] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5609] close(3) = 0 [pid 5609] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5609] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5657 attached [pid 5657] set_robust_list(0x5555796546e0, 24 [pid 5609] <... clone resumed>, child_tidptr=0x5555796546d0) = 18 [pid 5657] <... set_robust_list resumed>) = 0 [pid 5657] rt_sigprocmask(SIG_SETMASK, [] [pid 5609] rt_sigprocmask(SIG_SETMASK, [] [pid 5657] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5609] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5657] chdir("./16") = 0 [pid 5657] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5657] setpgid(0, 0) = 0 [pid 5657] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5657] write(3, "1000", 4) = 4 [pid 5657] close(3) = 0 [pid 5657] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5657] write(1, "executing program\n", 18) = 18 [pid 5657] memfd_create("syzkaller", 0) = 3 [pid 5657] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5657] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5657] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5657] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5657] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5657] close(3) = 0 [pid 5657] close(4) = 0 [pid 5657] mkdir("./file2", 0777) = 0 [pid 5657] mount("/dev/loop0", "./file2", "jfs", MS_NOEXEC|MS_NOATIME|MS_NODIRATIME|MS_I_VERSION, ",umask=0") = 0 [pid 5657] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5657] chdir("./file2") = 0 [pid 5657] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5657] ioctl(4, LOOP_CLR_FD) = 0 [pid 5657] close(4) = 0 [pid 5657] memfd_create("syzkaller", 0) = 4 [pid 5657] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5657] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8192) = 8192 [pid 5657] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5657] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5657] close(4) = 0 [pid 5657] memfd_create("syzkaller", 0) = 4 [pid 5657] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5657] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 83968) = 83968 [pid 5657] munmap(0x7ffa6af59000, 138412032) = 0 [ 116.702324][ T5657] loop0: detected capacity change from 0 to 32768 [pid 5657] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5657] close(4) = 0 [pid 5657] fchown(-1, -1, 0) = -1 EBADF (Bad file descriptor) [pid 5657] open_by_handle_at(-100, NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5657] close(3) = 0 [pid 5657] close(4) = -1 EBADF (Bad file descriptor) [pid 5657] close(5) = -1 EBADF (Bad file descriptor) [pid 5657] close(6) = -1 EBADF (Bad file descriptor) [pid 5657] close(7) = -1 EBADF (Bad file descriptor) [pid 5657] close(8) = -1 EBADF (Bad file descriptor) [pid 5657] close(9) = -1 EBADF (Bad file descriptor) [pid 5657] close(10) = -1 EBADF (Bad file descriptor) [pid 5657] close(11) = -1 EBADF (Bad file descriptor) [pid 5657] close(12) = -1 EBADF (Bad file descriptor) [pid 5657] close(13) = -1 EBADF (Bad file descriptor) [pid 5657] close(14) = -1 EBADF (Bad file descriptor) [pid 5657] close(15) = -1 EBADF (Bad file descriptor) [pid 5657] close(16) = -1 EBADF (Bad file descriptor) [pid 5657] close(17) = -1 EBADF (Bad file descriptor) [pid 5657] close(18) = -1 EBADF (Bad file descriptor) [pid 5657] close(19) = -1 EBADF (Bad file descriptor) [pid 5657] close(20) = -1 EBADF (Bad file descriptor) [pid 5657] close(21) = -1 EBADF (Bad file descriptor) [pid 5657] close(22) = -1 EBADF (Bad file descriptor) [pid 5657] close(23) = -1 EBADF (Bad file descriptor) [pid 5657] close(24) = -1 EBADF (Bad file descriptor) [pid 5657] close(25) = -1 EBADF (Bad file descriptor) [pid 5657] close(26) = -1 EBADF (Bad file descriptor) [pid 5657] close(27) = -1 EBADF (Bad file descriptor) [pid 5657] close(28) = -1 EBADF (Bad file descriptor) [pid 5657] close(29) = -1 EBADF (Bad file descriptor) [pid 5657] exit_group(0) = ? [pid 5657] +++ exited with 0 +++ [pid 5609] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=18, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=19 /* 0.19 s */} --- [pid 5609] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5609] umount2("./16", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] openat(AT_FDCWD, "./16", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5609] fstat(3, {st_mode=S_IFDIR|0700, st_size=80, ...}) = 0 [pid 5609] getdents64(3, 0x555579655790 /* 4 entries */, 32768) = 112 [pid 5609] umount2("./16/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5609] umount2("./16/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] newfstatat(AT_FDCWD, "./16/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] umount2("./16/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] openat(AT_FDCWD, "./16/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5609] fstat(4, {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0 [pid 5609] getdents64(4, 0x55557965d7d0 /* 2 entries */, 32768) = 48 [pid 5609] getdents64(4, 0x55557965d7d0 /* 0 entries */, 32768) = 0 [pid 5609] close(4) = 0 [pid 5609] rmdir("./16/file2") = 0 [pid 5609] umount2("./16/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] newfstatat(AT_FDCWD, "./16/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] unlink("./16/binderfs") = 0 [pid 5609] getdents64(3, 0x555579655790 /* 0 entries */, 32768) = 0 [pid 5609] close(3) = 0 [pid 5609] rmdir("./16") = 0 [pid 5609] mkdir("./17", 0777) = 0 [pid 5609] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 [pid 5609] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5609] close(3) = 0 [pid 5609] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5609] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5658 attached [pid 5658] set_robust_list(0x5555796546e0, 24) = 0 [pid 5609] <... clone resumed>, child_tidptr=0x5555796546d0) = 19 [pid 5658] rt_sigprocmask(SIG_SETMASK, [] [pid 5609] rt_sigprocmask(SIG_SETMASK, [] [pid 5658] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5609] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5658] chdir("./17") = 0 [pid 5658] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5658] setpgid(0, 0) = 0 [pid 5658] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5658] write(3, "1000", 4) = 4 [pid 5658] close(3) = 0 [pid 5658] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5658] write(1, "executing program\n", 18) = 18 [pid 5658] memfd_create("syzkaller", 0) = 3 [pid 5658] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5658] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5658] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5658] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5658] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5658] close(3) = 0 [pid 5658] close(4) = 0 [pid 5658] mkdir("./file2", 0777) = 0 [pid 5658] mount("/dev/loop0", "./file2", "jfs", MS_NOEXEC|MS_NOATIME|MS_NODIRATIME|MS_I_VERSION, ",umask=0") = 0 [pid 5658] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5658] chdir("./file2") = 0 [pid 5658] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5658] ioctl(4, LOOP_CLR_FD) = 0 [pid 5658] close(4) = 0 [pid 5658] memfd_create("syzkaller", 0) = 4 [pid 5658] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5658] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8192) = 8192 [pid 5658] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5658] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5658] close(4) = 0 [ 117.232009][ T5658] loop0: detected capacity change from 0 to 32768 [pid 5658] memfd_create("syzkaller", 0) = 4 [pid 5658] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5658] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 83968) = 83968 [pid 5658] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5658] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5658] close(4) = 0 [pid 5658] fchown(-1, -1, 0) = -1 EBADF (Bad file descriptor) [pid 5658] open_by_handle_at(-100, NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5658] close(3) = 0 [pid 5658] close(4) = -1 EBADF (Bad file descriptor) [pid 5658] close(5) = -1 EBADF (Bad file descriptor) [pid 5658] close(6) = -1 EBADF (Bad file descriptor) [pid 5658] close(7) = -1 EBADF (Bad file descriptor) [pid 5658] close(8) = -1 EBADF (Bad file descriptor) [pid 5658] close(9) = -1 EBADF (Bad file descriptor) [pid 5658] close(10) = -1 EBADF (Bad file descriptor) [pid 5658] close(11) = -1 EBADF (Bad file descriptor) [pid 5658] close(12) = -1 EBADF (Bad file descriptor) [pid 5658] close(13) = -1 EBADF (Bad file descriptor) [pid 5658] close(14) = -1 EBADF (Bad file descriptor) [pid 5658] close(15) = -1 EBADF (Bad file descriptor) [pid 5658] close(16) = -1 EBADF (Bad file descriptor) [pid 5658] close(17) = -1 EBADF (Bad file descriptor) [pid 5658] close(18) = -1 EBADF (Bad file descriptor) [pid 5658] close(19) = -1 EBADF (Bad file descriptor) [pid 5658] close(20) = -1 EBADF (Bad file descriptor) [pid 5658] close(21) = -1 EBADF (Bad file descriptor) [pid 5658] close(22) = -1 EBADF (Bad file descriptor) [pid 5658] close(23) = -1 EBADF (Bad file descriptor) [pid 5658] close(24) = -1 EBADF (Bad file descriptor) [pid 5658] close(25) = -1 EBADF (Bad file descriptor) [pid 5658] close(26) = -1 EBADF (Bad file descriptor) [pid 5658] close(27) = -1 EBADF (Bad file descriptor) [pid 5658] close(28) = -1 EBADF (Bad file descriptor) [pid 5658] close(29) = -1 EBADF (Bad file descriptor) [pid 5658] exit_group(0) = ? [pid 5658] +++ exited with 0 +++ [pid 5609] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=19, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=21 /* 0.21 s */} --- [pid 5609] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5609] umount2("./17", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] openat(AT_FDCWD, "./17", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5609] fstat(3, {st_mode=S_IFDIR|0700, st_size=80, ...}) = 0 [pid 5609] getdents64(3, 0x555579655790 /* 4 entries */, 32768) = 112 [pid 5609] umount2("./17/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5609] umount2("./17/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] newfstatat(AT_FDCWD, "./17/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] umount2("./17/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] openat(AT_FDCWD, "./17/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5609] fstat(4, {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0 [pid 5609] getdents64(4, 0x55557965d7d0 /* 2 entries */, 32768) = 48 [pid 5609] getdents64(4, 0x55557965d7d0 /* 0 entries */, 32768) = 0 [pid 5609] close(4) = 0 [pid 5609] rmdir("./17/file2") = 0 [pid 5609] umount2("./17/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] newfstatat(AT_FDCWD, "./17/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] unlink("./17/binderfs") = 0 [pid 5609] getdents64(3, 0x555579655790 /* 0 entries */, 32768) = 0 [pid 5609] close(3) = 0 [pid 5609] rmdir("./17") = 0 [pid 5609] mkdir("./18", 0777) = 0 [pid 5609] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 [pid 5609] ioctl(3, LOOP_CLR_FD) = 0 [pid 5609] close(3) = 0 [pid 5609] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5609] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5659 attached , child_tidptr=0x5555796546d0) = 20 [pid 5659] set_robust_list(0x5555796546e0, 24 [pid 5609] rt_sigprocmask(SIG_SETMASK, [] [pid 5659] <... set_robust_list resumed>) = 0 [pid 5609] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5659] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5659] chdir("./18") = 0 [pid 5659] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5659] setpgid(0, 0) = 0 [pid 5659] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5659] write(3, "1000", 4) = 4 [pid 5659] close(3) = 0 [pid 5659] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5659] write(1, "executing program\n", 18) = 18 executing program [pid 5659] memfd_create("syzkaller", 0) = 3 [pid 5659] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5659] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5659] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5659] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5659] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5659] close(3) = 0 [pid 5659] close(4) = 0 [pid 5659] mkdir("./file2", 0777) = 0 [pid 5659] mount("/dev/loop0", "./file2", "jfs", MS_NOEXEC|MS_NOATIME|MS_NODIRATIME|MS_I_VERSION, ",umask=0") = 0 [pid 5659] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5659] chdir("./file2") = 0 [pid 5659] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5659] ioctl(4, LOOP_CLR_FD) = 0 [pid 5659] close(4) = 0 [pid 5659] memfd_create("syzkaller", 0) = 4 [pid 5659] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5659] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8192) = 8192 [pid 5659] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5659] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5659] close(4) = 0 [pid 5659] memfd_create("syzkaller", 0) = 4 [pid 5659] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5659] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 83968) = 83968 [ 117.797288][ T5659] loop0: detected capacity change from 0 to 32768 [pid 5659] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5659] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5659] close(4) = 0 [pid 5659] fchown(-1, -1, 0) = -1 EBADF (Bad file descriptor) [pid 5659] open_by_handle_at(-100, NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5659] close(3) = 0 [pid 5659] close(4) = -1 EBADF (Bad file descriptor) [pid 5659] close(5) = -1 EBADF (Bad file descriptor) [pid 5659] close(6) = -1 EBADF (Bad file descriptor) [pid 5659] close(7) = -1 EBADF (Bad file descriptor) [pid 5659] close(8) = -1 EBADF (Bad file descriptor) [pid 5659] close(9) = -1 EBADF (Bad file descriptor) [pid 5659] close(10) = -1 EBADF (Bad file descriptor) [pid 5659] close(11) = -1 EBADF (Bad file descriptor) [pid 5659] close(12) = -1 EBADF (Bad file descriptor) [pid 5659] close(13) = -1 EBADF (Bad file descriptor) [pid 5659] close(14) = -1 EBADF (Bad file descriptor) [pid 5659] close(15) = -1 EBADF (Bad file descriptor) [pid 5659] close(16) = -1 EBADF (Bad file descriptor) [pid 5659] close(17) = -1 EBADF (Bad file descriptor) [pid 5659] close(18) = -1 EBADF (Bad file descriptor) [pid 5659] close(19) = -1 EBADF (Bad file descriptor) [pid 5659] close(20) = -1 EBADF (Bad file descriptor) [pid 5659] close(21) = -1 EBADF (Bad file descriptor) [pid 5659] close(22) = -1 EBADF (Bad file descriptor) [pid 5659] close(23) = -1 EBADF (Bad file descriptor) [pid 5659] close(24) = -1 EBADF (Bad file descriptor) [pid 5659] close(25) = -1 EBADF (Bad file descriptor) [pid 5659] close(26) = -1 EBADF (Bad file descriptor) [pid 5659] close(27) = -1 EBADF (Bad file descriptor) [pid 5659] close(28) = -1 EBADF (Bad file descriptor) [pid 5659] close(29) = -1 EBADF (Bad file descriptor) [pid 5659] exit_group(0) = ? [pid 5659] +++ exited with 0 +++ [pid 5609] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=20, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=27 /* 0.27 s */} --- [pid 5609] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5609] umount2("./18", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] openat(AT_FDCWD, "./18", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5609] fstat(3, {st_mode=S_IFDIR|0700, st_size=80, ...}) = 0 [pid 5609] getdents64(3, 0x555579655790 /* 4 entries */, 32768) = 112 [pid 5609] umount2("./18/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5609] umount2("./18/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] newfstatat(AT_FDCWD, "./18/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] umount2("./18/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] openat(AT_FDCWD, "./18/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5609] fstat(4, {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0 [pid 5609] getdents64(4, 0x55557965d7d0 /* 2 entries */, 32768) = 48 [pid 5609] getdents64(4, 0x55557965d7d0 /* 0 entries */, 32768) = 0 [pid 5609] close(4) = 0 [pid 5609] rmdir("./18/file2") = 0 [pid 5609] umount2("./18/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] newfstatat(AT_FDCWD, "./18/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] unlink("./18/binderfs") = 0 [pid 5609] getdents64(3, 0x555579655790 /* 0 entries */, 32768) = 0 [pid 5609] close(3) = 0 [pid 5609] rmdir("./18") = 0 [pid 5609] mkdir("./19", 0777) = 0 [pid 5609] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 [pid 5609] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5609] close(3) = 0 [pid 5609] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5609] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5660 attached , child_tidptr=0x5555796546d0) = 21 [pid 5660] set_robust_list(0x5555796546e0, 24) = 0 [pid 5660] rt_sigprocmask(SIG_SETMASK, [] [pid 5609] rt_sigprocmask(SIG_SETMASK, [] [pid 5660] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5609] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5660] chdir("./19") = 0 [pid 5660] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5660] setpgid(0, 0) = 0 [pid 5660] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5660] write(3, "1000", 4) = 4 [pid 5660] close(3) = 0 [pid 5660] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5660] write(1, "executing program\n", 18) = 18 [pid 5660] memfd_create("syzkaller", 0) = 3 [pid 5660] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5660] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5660] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5660] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5660] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5660] close(3) = 0 [pid 5660] close(4) = 0 [pid 5660] mkdir("./file2", 0777) = 0 [pid 5660] mount("/dev/loop0", "./file2", "jfs", MS_NOEXEC|MS_NOATIME|MS_NODIRATIME|MS_I_VERSION, ",umask=0") = 0 [pid 5660] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5660] chdir("./file2") = 0 [pid 5660] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5660] ioctl(4, LOOP_CLR_FD) = 0 [pid 5660] close(4) = 0 [pid 5660] memfd_create("syzkaller", 0) = 4 [pid 5660] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5660] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8192) = 8192 [pid 5660] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5660] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5660] close(4) = 0 [pid 5660] memfd_create("syzkaller", 0) = 4 [pid 5660] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5660] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 83968) = 83968 [pid 5660] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5660] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5660] close(4) = 0 [ 118.427155][ T5660] loop0: detected capacity change from 0 to 32768 [pid 5660] fchown(-1, -1, 0) = -1 EBADF (Bad file descriptor) [pid 5660] open_by_handle_at(-100, NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5660] close(3) = 0 [pid 5660] close(4) = -1 EBADF (Bad file descriptor) [pid 5660] close(5) = -1 EBADF (Bad file descriptor) [pid 5660] close(6) = -1 EBADF (Bad file descriptor) [pid 5660] close(7) = -1 EBADF (Bad file descriptor) [pid 5660] close(8) = -1 EBADF (Bad file descriptor) [pid 5660] close(9) = -1 EBADF (Bad file descriptor) [pid 5660] close(10) = -1 EBADF (Bad file descriptor) [pid 5660] close(11) = -1 EBADF (Bad file descriptor) [pid 5660] close(12) = -1 EBADF (Bad file descriptor) [pid 5660] close(13) = -1 EBADF (Bad file descriptor) [pid 5660] close(14) = -1 EBADF (Bad file descriptor) [pid 5660] close(15) = -1 EBADF (Bad file descriptor) [pid 5660] close(16) = -1 EBADF (Bad file descriptor) [pid 5660] close(17) = -1 EBADF (Bad file descriptor) [pid 5660] close(18) = -1 EBADF (Bad file descriptor) [pid 5660] close(19) = -1 EBADF (Bad file descriptor) [pid 5660] close(20) = -1 EBADF (Bad file descriptor) [pid 5660] close(21) = -1 EBADF (Bad file descriptor) [pid 5660] close(22) = -1 EBADF (Bad file descriptor) [pid 5660] close(23) = -1 EBADF (Bad file descriptor) [pid 5660] close(24) = -1 EBADF (Bad file descriptor) [pid 5660] close(25) = -1 EBADF (Bad file descriptor) [pid 5660] close(26) = -1 EBADF (Bad file descriptor) [pid 5660] close(27) = -1 EBADF (Bad file descriptor) [pid 5660] close(28) = -1 EBADF (Bad file descriptor) [pid 5660] close(29) = -1 EBADF (Bad file descriptor) [pid 5660] exit_group(0) = ? [pid 5660] +++ exited with 0 +++ [pid 5609] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=21, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=24 /* 0.24 s */} --- [pid 5609] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5609] umount2("./19", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] openat(AT_FDCWD, "./19", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5609] fstat(3, {st_mode=S_IFDIR|0700, st_size=80, ...}) = 0 [pid 5609] getdents64(3, 0x555579655790 /* 4 entries */, 32768) = 112 [pid 5609] umount2("./19/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5609] umount2("./19/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] newfstatat(AT_FDCWD, "./19/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] umount2("./19/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] openat(AT_FDCWD, "./19/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5609] fstat(4, {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0 [pid 5609] getdents64(4, 0x55557965d7d0 /* 2 entries */, 32768) = 48 [pid 5609] getdents64(4, 0x55557965d7d0 /* 0 entries */, 32768) = 0 [pid 5609] close(4) = 0 [pid 5609] rmdir("./19/file2") = 0 [pid 5609] umount2("./19/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] newfstatat(AT_FDCWD, "./19/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] unlink("./19/binderfs") = 0 [pid 5609] getdents64(3, 0x555579655790 /* 0 entries */, 32768) = 0 [pid 5609] close(3) = 0 [pid 5609] rmdir("./19") = 0 [pid 5609] mkdir("./20", 0777) = 0 [pid 5609] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 [pid 5609] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5609] close(3) = 0 [pid 5609] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5609] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5661 attached [pid 5661] set_robust_list(0x5555796546e0, 24 [pid 5609] <... clone resumed>, child_tidptr=0x5555796546d0) = 22 [pid 5661] <... set_robust_list resumed>) = 0 [pid 5661] rt_sigprocmask(SIG_SETMASK, [] [pid 5609] rt_sigprocmask(SIG_SETMASK, [] [pid 5661] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5609] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5661] chdir("./20") = 0 [pid 5661] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5661] setpgid(0, 0) = 0 [pid 5661] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5661] write(3, "1000", 4) = 4 [pid 5661] close(3) = 0 [pid 5661] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5661] write(1, "executing program\n", 18) = 18 executing program [pid 5661] memfd_create("syzkaller", 0) = 3 [pid 5661] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5661] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5661] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5661] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5661] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5661] close(3) = 0 [pid 5661] close(4) = 0 [pid 5661] mkdir("./file2", 0777) = 0 [pid 5661] mount("/dev/loop0", "./file2", "jfs", MS_NOEXEC|MS_NOATIME|MS_NODIRATIME|MS_I_VERSION, ",umask=0") = 0 [pid 5661] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5661] chdir("./file2") = 0 [pid 5661] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [ 118.986931][ T5661] loop0: detected capacity change from 0 to 32768 [pid 5661] ioctl(4, LOOP_CLR_FD) = 0 [pid 5661] close(4) = 0 [pid 5661] memfd_create("syzkaller", 0) = 4 [pid 5661] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5661] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8192) = 8192 [pid 5661] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5661] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5661] close(4) = 0 [pid 5661] memfd_create("syzkaller", 0) = 4 [pid 5661] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5661] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 83968) = 83968 [pid 5661] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5661] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5661] close(4) = 0 [pid 5661] fchown(-1, -1, 0) = -1 EBADF (Bad file descriptor) [pid 5661] open_by_handle_at(-100, NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5661] close(3) = 0 [pid 5661] close(4) = -1 EBADF (Bad file descriptor) [pid 5661] close(5) = -1 EBADF (Bad file descriptor) [pid 5661] close(6) = -1 EBADF (Bad file descriptor) [pid 5661] close(7) = -1 EBADF (Bad file descriptor) [pid 5661] close(8) = -1 EBADF (Bad file descriptor) [pid 5661] close(9) = -1 EBADF (Bad file descriptor) [pid 5661] close(10) = -1 EBADF (Bad file descriptor) [pid 5661] close(11) = -1 EBADF (Bad file descriptor) [pid 5661] close(12) = -1 EBADF (Bad file descriptor) [pid 5661] close(13) = -1 EBADF (Bad file descriptor) [pid 5661] close(14) = -1 EBADF (Bad file descriptor) [pid 5661] close(15) = -1 EBADF (Bad file descriptor) [pid 5661] close(16) = -1 EBADF (Bad file descriptor) [pid 5661] close(17) = -1 EBADF (Bad file descriptor) [pid 5661] close(18) = -1 EBADF (Bad file descriptor) [pid 5661] close(19) = -1 EBADF (Bad file descriptor) [pid 5661] close(20) = -1 EBADF (Bad file descriptor) [pid 5661] close(21) = -1 EBADF (Bad file descriptor) [pid 5661] close(22) = -1 EBADF (Bad file descriptor) [pid 5661] close(23) = -1 EBADF (Bad file descriptor) [pid 5661] close(24) = -1 EBADF (Bad file descriptor) [pid 5661] close(25) = -1 EBADF (Bad file descriptor) [pid 5661] close(26) = -1 EBADF (Bad file descriptor) [pid 5661] close(27) = -1 EBADF (Bad file descriptor) [pid 5661] close(28) = -1 EBADF (Bad file descriptor) [pid 5661] close(29) = -1 EBADF (Bad file descriptor) [pid 5661] exit_group(0) = ? [pid 5661] +++ exited with 0 +++ [pid 5609] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=22, si_uid=0, si_status=0, si_utime=0, si_stime=20 /* 0.20 s */} --- [pid 5609] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5609] umount2("./20", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] openat(AT_FDCWD, "./20", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5609] fstat(3, {st_mode=S_IFDIR|0700, st_size=80, ...}) = 0 [pid 5609] getdents64(3, 0x555579655790 /* 4 entries */, 32768) = 112 [pid 5609] umount2("./20/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5609] umount2("./20/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] newfstatat(AT_FDCWD, "./20/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] umount2("./20/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] openat(AT_FDCWD, "./20/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5609] fstat(4, {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0 [pid 5609] getdents64(4, 0x55557965d7d0 /* 2 entries */, 32768) = 48 [pid 5609] getdents64(4, 0x55557965d7d0 /* 0 entries */, 32768) = 0 [pid 5609] close(4) = 0 [pid 5609] rmdir("./20/file2") = 0 [pid 5609] umount2("./20/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] newfstatat(AT_FDCWD, "./20/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] unlink("./20/binderfs") = 0 [pid 5609] getdents64(3, 0x555579655790 /* 0 entries */, 32768) = 0 [pid 5609] close(3) = 0 [pid 5609] rmdir("./20") = 0 [pid 5609] mkdir("./21", 0777) = 0 [pid 5609] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 [pid 5609] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5609] close(3) = 0 [pid 5609] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5609] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5662 attached [pid 5662] set_robust_list(0x5555796546e0, 24 [pid 5609] <... clone resumed>, child_tidptr=0x5555796546d0) = 23 [pid 5662] <... set_robust_list resumed>) = 0 [pid 5662] rt_sigprocmask(SIG_SETMASK, [] [pid 5609] rt_sigprocmask(SIG_SETMASK, [] [pid 5662] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5609] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5662] chdir("./21") = 0 [pid 5662] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5662] setpgid(0, 0) = 0 [pid 5662] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5662] write(3, "1000", 4) = 4 [pid 5662] close(3) = 0 [pid 5662] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5662] write(1, "executing program\n", 18) = 18 executing program [pid 5662] memfd_create("syzkaller", 0) = 3 [pid 5662] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5662] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5662] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5662] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5662] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5662] close(3) = 0 [pid 5662] close(4) = 0 [pid 5662] mkdir("./file2", 0777) = 0 [pid 5662] mount("/dev/loop0", "./file2", "jfs", MS_NOEXEC|MS_NOATIME|MS_NODIRATIME|MS_I_VERSION, ",umask=0") = 0 [pid 5662] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5662] chdir("./file2") = 0 [pid 5662] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5662] ioctl(4, LOOP_CLR_FD) = 0 [pid 5662] close(4) = 0 [pid 5662] memfd_create("syzkaller", 0) = 4 [pid 5662] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5662] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8192) = 8192 [pid 5662] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5662] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5662] close(4) = 0 [pid 5662] memfd_create("syzkaller", 0) = 4 [pid 5662] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [ 119.501463][ T5662] loop0: detected capacity change from 0 to 32768 [pid 5662] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 83968) = 83968 [pid 5662] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5662] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5662] close(4) = 0 [pid 5662] fchown(-1, -1, 0) = -1 EBADF (Bad file descriptor) [pid 5662] open_by_handle_at(-100, NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5662] close(3) = 0 [pid 5662] close(4) = -1 EBADF (Bad file descriptor) [pid 5662] close(5) = -1 EBADF (Bad file descriptor) [pid 5662] close(6) = -1 EBADF (Bad file descriptor) [pid 5662] close(7) = -1 EBADF (Bad file descriptor) [pid 5662] close(8) = -1 EBADF (Bad file descriptor) [pid 5662] close(9) = -1 EBADF (Bad file descriptor) [pid 5662] close(10) = -1 EBADF (Bad file descriptor) [pid 5662] close(11) = -1 EBADF (Bad file descriptor) [pid 5662] close(12) = -1 EBADF (Bad file descriptor) [pid 5662] close(13) = -1 EBADF (Bad file descriptor) [pid 5662] close(14) = -1 EBADF (Bad file descriptor) [pid 5662] close(15) = -1 EBADF (Bad file descriptor) [pid 5662] close(16) = -1 EBADF (Bad file descriptor) [pid 5662] close(17) = -1 EBADF (Bad file descriptor) [pid 5662] close(18) = -1 EBADF (Bad file descriptor) [pid 5662] close(19) = -1 EBADF (Bad file descriptor) [pid 5662] close(20) = -1 EBADF (Bad file descriptor) [pid 5662] close(21) = -1 EBADF (Bad file descriptor) [pid 5662] close(22) = -1 EBADF (Bad file descriptor) [pid 5662] close(23) = -1 EBADF (Bad file descriptor) [pid 5662] close(24) = -1 EBADF (Bad file descriptor) [pid 5662] close(25) = -1 EBADF (Bad file descriptor) [pid 5662] close(26) = -1 EBADF (Bad file descriptor) [pid 5662] close(27) = -1 EBADF (Bad file descriptor) [pid 5662] close(28) = -1 EBADF (Bad file descriptor) [pid 5662] close(29) = -1 EBADF (Bad file descriptor) [pid 5662] exit_group(0) = ? [pid 5662] +++ exited with 0 +++ [pid 5609] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=23, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=23 /* 0.23 s */} --- [pid 5609] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5609] umount2("./21", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] openat(AT_FDCWD, "./21", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5609] fstat(3, {st_mode=S_IFDIR|0700, st_size=80, ...}) = 0 [pid 5609] getdents64(3, 0x555579655790 /* 4 entries */, 32768) = 112 [pid 5609] umount2("./21/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5609] umount2("./21/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] newfstatat(AT_FDCWD, "./21/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] umount2("./21/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] openat(AT_FDCWD, "./21/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5609] fstat(4, {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0 [pid 5609] getdents64(4, 0x55557965d7d0 /* 2 entries */, 32768) = 48 [pid 5609] getdents64(4, 0x55557965d7d0 /* 0 entries */, 32768) = 0 [pid 5609] close(4) = 0 [pid 5609] rmdir("./21/file2") = 0 [pid 5609] umount2("./21/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] newfstatat(AT_FDCWD, "./21/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] unlink("./21/binderfs") = 0 [pid 5609] getdents64(3, 0x555579655790 /* 0 entries */, 32768) = 0 [pid 5609] close(3) = 0 [pid 5609] rmdir("./21") = 0 [pid 5609] mkdir("./22", 0777) = 0 [pid 5609] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 [pid 5609] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5609] close(3) = 0 [pid 5609] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5609] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5663 attached , child_tidptr=0x5555796546d0) = 24 [pid 5663] set_robust_list(0x5555796546e0, 24) = 0 [pid 5609] rt_sigprocmask(SIG_SETMASK, [] [pid 5663] rt_sigprocmask(SIG_SETMASK, [] [pid 5609] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5663] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5663] chdir("./22") = 0 [pid 5663] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5663] setpgid(0, 0) = 0 [pid 5663] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5663] write(3, "1000", 4) = 4 [pid 5663] close(3) = 0 [pid 5663] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5663] write(1, "executing program\n", 18) = 18 executing program [pid 5663] memfd_create("syzkaller", 0) = 3 [pid 5663] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5663] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5663] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5663] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5663] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5663] close(3) = 0 [pid 5663] close(4) = 0 [pid 5663] mkdir("./file2", 0777) = 0 [pid 5663] mount("/dev/loop0", "./file2", "jfs", MS_NOEXEC|MS_NOATIME|MS_NODIRATIME|MS_I_VERSION, ",umask=0") = 0 [pid 5663] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5663] chdir("./file2") = 0 [pid 5663] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5663] ioctl(4, LOOP_CLR_FD) = 0 [pid 5663] close(4) = 0 [pid 5663] memfd_create("syzkaller", 0) = 4 [pid 5663] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [ 120.036638][ T5663] loop0: detected capacity change from 0 to 32768 [pid 5663] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8192) = 8192 [pid 5663] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5663] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5663] close(4) = 0 [pid 5663] memfd_create("syzkaller", 0) = 4 [pid 5663] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5663] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 83968) = 83968 [pid 5663] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5663] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5663] close(4) = 0 [pid 5663] fchown(-1, -1, 0) = -1 EBADF (Bad file descriptor) [pid 5663] open_by_handle_at(-100, NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5663] close(3) = 0 [pid 5663] close(4) = -1 EBADF (Bad file descriptor) [pid 5663] close(5) = -1 EBADF (Bad file descriptor) [pid 5663] close(6) = -1 EBADF (Bad file descriptor) [pid 5663] close(7) = -1 EBADF (Bad file descriptor) [pid 5663] close(8) = -1 EBADF (Bad file descriptor) [pid 5663] close(9) = -1 EBADF (Bad file descriptor) [pid 5663] close(10) = -1 EBADF (Bad file descriptor) [pid 5663] close(11) = -1 EBADF (Bad file descriptor) [pid 5663] close(12) = -1 EBADF (Bad file descriptor) [pid 5663] close(13) = -1 EBADF (Bad file descriptor) [pid 5663] close(14) = -1 EBADF (Bad file descriptor) [pid 5663] close(15) = -1 EBADF (Bad file descriptor) [pid 5663] close(16) = -1 EBADF (Bad file descriptor) [pid 5663] close(17) = -1 EBADF (Bad file descriptor) [pid 5663] close(18) = -1 EBADF (Bad file descriptor) [pid 5663] close(19) = -1 EBADF (Bad file descriptor) [pid 5663] close(20) = -1 EBADF (Bad file descriptor) [pid 5663] close(21) = -1 EBADF (Bad file descriptor) [pid 5663] close(22) = -1 EBADF (Bad file descriptor) [pid 5663] close(23) = -1 EBADF (Bad file descriptor) [pid 5663] close(24) = -1 EBADF (Bad file descriptor) [pid 5663] close(25) = -1 EBADF (Bad file descriptor) [pid 5663] close(26) = -1 EBADF (Bad file descriptor) [pid 5663] close(27) = -1 EBADF (Bad file descriptor) [pid 5663] close(28) = -1 EBADF (Bad file descriptor) [pid 5663] close(29) = -1 EBADF (Bad file descriptor) [pid 5663] exit_group(0) = ? [pid 5663] +++ exited with 0 +++ [pid 5609] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=24, si_uid=0, si_status=0, si_utime=0, si_stime=23 /* 0.23 s */} --- [pid 5609] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5609] umount2("./22", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] openat(AT_FDCWD, "./22", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5609] fstat(3, {st_mode=S_IFDIR|0700, st_size=80, ...}) = 0 [pid 5609] getdents64(3, 0x555579655790 /* 4 entries */, 32768) = 112 [pid 5609] umount2("./22/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5609] umount2("./22/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] newfstatat(AT_FDCWD, "./22/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] umount2("./22/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] openat(AT_FDCWD, "./22/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5609] fstat(4, {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0 [pid 5609] getdents64(4, 0x55557965d7d0 /* 2 entries */, 32768) = 48 [pid 5609] getdents64(4, 0x55557965d7d0 /* 0 entries */, 32768) = 0 [pid 5609] close(4) = 0 [pid 5609] rmdir("./22/file2") = 0 [pid 5609] umount2("./22/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] newfstatat(AT_FDCWD, "./22/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] unlink("./22/binderfs") = 0 [pid 5609] getdents64(3, 0x555579655790 /* 0 entries */, 32768) = 0 [pid 5609] close(3) = 0 [pid 5609] rmdir("./22") = 0 [pid 5609] mkdir("./23", 0777) = 0 [pid 5609] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 [pid 5609] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5609] close(3) = 0 [pid 5609] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5609] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5664 attached , child_tidptr=0x5555796546d0) = 25 [pid 5664] set_robust_list(0x5555796546e0, 24 [pid 5609] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5664] <... set_robust_list resumed>) = 0 [pid 5664] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5664] chdir("./23") = 0 [pid 5664] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5664] setpgid(0, 0) = 0 [pid 5664] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5664] write(3, "1000", 4) = 4 [pid 5664] close(3) = 0 [pid 5664] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5664] write(1, "executing program\n", 18) = 18 executing program [pid 5664] memfd_create("syzkaller", 0) = 3 [pid 5664] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5664] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5664] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5664] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5664] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5664] close(3) = 0 [pid 5664] close(4) = 0 [pid 5664] mkdir("./file2", 0777) = 0 [pid 5664] mount("/dev/loop0", "./file2", "jfs", MS_NOEXEC|MS_NOATIME|MS_NODIRATIME|MS_I_VERSION, ",umask=0") = 0 [pid 5664] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5664] chdir("./file2") = 0 [pid 5664] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5664] ioctl(4, LOOP_CLR_FD) = 0 [pid 5664] close(4) = 0 [pid 5664] memfd_create("syzkaller", 0) = 4 [pid 5664] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5664] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8192) = 8192 [pid 5664] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5664] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5664] close(4) = 0 [pid 5664] memfd_create("syzkaller", 0) = 4 [pid 5664] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5664] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 83968) = 83968 [ 120.607759][ T5664] loop0: detected capacity change from 0 to 32768 [pid 5664] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5664] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5664] close(4) = 0 [pid 5664] fchown(-1, -1, 0) = -1 EBADF (Bad file descriptor) [pid 5664] open_by_handle_at(-100, NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5664] close(3) = 0 [pid 5664] close(4) = -1 EBADF (Bad file descriptor) [pid 5664] close(5) = -1 EBADF (Bad file descriptor) [pid 5664] close(6) = -1 EBADF (Bad file descriptor) [pid 5664] close(7) = -1 EBADF (Bad file descriptor) [pid 5664] close(8) = -1 EBADF (Bad file descriptor) [pid 5664] close(9) = -1 EBADF (Bad file descriptor) [pid 5664] close(10) = -1 EBADF (Bad file descriptor) [pid 5664] close(11) = -1 EBADF (Bad file descriptor) [pid 5664] close(12) = -1 EBADF (Bad file descriptor) [pid 5664] close(13) = -1 EBADF (Bad file descriptor) [pid 5664] close(14) = -1 EBADF (Bad file descriptor) [pid 5664] close(15) = -1 EBADF (Bad file descriptor) [pid 5664] close(16) = -1 EBADF (Bad file descriptor) [pid 5664] close(17) = -1 EBADF (Bad file descriptor) [pid 5664] close(18) = -1 EBADF (Bad file descriptor) [pid 5664] close(19) = -1 EBADF (Bad file descriptor) [pid 5664] close(20) = -1 EBADF (Bad file descriptor) [pid 5664] close(21) = -1 EBADF (Bad file descriptor) [pid 5664] close(22) = -1 EBADF (Bad file descriptor) [pid 5664] close(23) = -1 EBADF (Bad file descriptor) [pid 5664] close(24) = -1 EBADF (Bad file descriptor) [pid 5664] close(25) = -1 EBADF (Bad file descriptor) [pid 5664] close(26) = -1 EBADF (Bad file descriptor) [pid 5664] close(27) = -1 EBADF (Bad file descriptor) [pid 5664] close(28) = -1 EBADF (Bad file descriptor) [pid 5664] close(29) = -1 EBADF (Bad file descriptor) [pid 5664] exit_group(0) = ? [pid 5664] +++ exited with 0 +++ [pid 5609] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=25, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=20 /* 0.20 s */} --- [pid 5609] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5609] umount2("./23", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] openat(AT_FDCWD, "./23", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5609] fstat(3, {st_mode=S_IFDIR|0700, st_size=80, ...}) = 0 [pid 5609] getdents64(3, 0x555579655790 /* 4 entries */, 32768) = 112 [pid 5609] umount2("./23/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5609] umount2("./23/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] newfstatat(AT_FDCWD, "./23/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] umount2("./23/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] openat(AT_FDCWD, "./23/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5609] fstat(4, {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0 [pid 5609] getdents64(4, 0x55557965d7d0 /* 2 entries */, 32768) = 48 [pid 5609] getdents64(4, 0x55557965d7d0 /* 0 entries */, 32768) = 0 [pid 5609] close(4) = 0 [pid 5609] rmdir("./23/file2") = 0 [pid 5609] umount2("./23/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] newfstatat(AT_FDCWD, "./23/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] unlink("./23/binderfs") = 0 [pid 5609] getdents64(3, 0x555579655790 /* 0 entries */, 32768) = 0 [pid 5609] close(3) = 0 [pid 5609] rmdir("./23") = 0 [pid 5609] mkdir("./24", 0777) = 0 [pid 5609] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 [pid 5609] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5609] close(3) = 0 [pid 5609] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5609] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5665 attached , child_tidptr=0x5555796546d0) = 26 [pid 5609] rt_sigprocmask(SIG_SETMASK, [] [pid 5665] set_robust_list(0x5555796546e0, 24) = 0 [pid 5609] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5665] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5665] chdir("./24") = 0 [pid 5665] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5665] setpgid(0, 0) = 0 [pid 5665] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5665] write(3, "1000", 4) = 4 [pid 5665] close(3) = 0 [pid 5665] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5665] write(1, "executing program\n", 18) = 18 executing program [pid 5665] memfd_create("syzkaller", 0) = 3 [pid 5665] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5665] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5665] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5665] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5665] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5665] close(3) = 0 [pid 5665] close(4) = 0 [pid 5665] mkdir("./file2", 0777) = 0 [pid 5665] mount("/dev/loop0", "./file2", "jfs", MS_NOEXEC|MS_NOATIME|MS_NODIRATIME|MS_I_VERSION, ",umask=0") = 0 [pid 5665] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5665] chdir("./file2") = 0 [pid 5665] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5665] ioctl(4, LOOP_CLR_FD) = 0 [pid 5665] close(4) = 0 [pid 5665] memfd_create("syzkaller", 0) = 4 [pid 5665] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5665] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8192) = 8192 [pid 5665] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5665] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5665] close(4) = 0 [pid 5665] memfd_create("syzkaller", 0) = 4 [pid 5665] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5665] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 83968) = 83968 [pid 5665] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5665] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 121.160768][ T5665] loop0: detected capacity change from 0 to 32768 [pid 5665] close(4) = 0 [pid 5665] fchown(-1, -1, 0) = -1 EBADF (Bad file descriptor) [pid 5665] open_by_handle_at(-100, NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5665] close(3) = 0 [pid 5665] close(4) = -1 EBADF (Bad file descriptor) [pid 5665] close(5) = -1 EBADF (Bad file descriptor) [pid 5665] close(6) = -1 EBADF (Bad file descriptor) [pid 5665] close(7) = -1 EBADF (Bad file descriptor) [pid 5665] close(8) = -1 EBADF (Bad file descriptor) [pid 5665] close(9) = -1 EBADF (Bad file descriptor) [pid 5665] close(10) = -1 EBADF (Bad file descriptor) [pid 5665] close(11) = -1 EBADF (Bad file descriptor) [pid 5665] close(12) = -1 EBADF (Bad file descriptor) [pid 5665] close(13) = -1 EBADF (Bad file descriptor) [pid 5665] close(14) = -1 EBADF (Bad file descriptor) [pid 5665] close(15) = -1 EBADF (Bad file descriptor) [pid 5665] close(16) = -1 EBADF (Bad file descriptor) [pid 5665] close(17) = -1 EBADF (Bad file descriptor) [pid 5665] close(18) = -1 EBADF (Bad file descriptor) [pid 5665] close(19) = -1 EBADF (Bad file descriptor) [pid 5665] close(20) = -1 EBADF (Bad file descriptor) [pid 5665] close(21) = -1 EBADF (Bad file descriptor) [pid 5665] close(22) = -1 EBADF (Bad file descriptor) [pid 5665] close(23) = -1 EBADF (Bad file descriptor) [pid 5665] close(24) = -1 EBADF (Bad file descriptor) [pid 5665] close(25) = -1 EBADF (Bad file descriptor) [pid 5665] close(26) = -1 EBADF (Bad file descriptor) [pid 5665] close(27) = -1 EBADF (Bad file descriptor) [pid 5665] close(28) = -1 EBADF (Bad file descriptor) [pid 5665] close(29) = -1 EBADF (Bad file descriptor) [pid 5665] exit_group(0) = ? [pid 5665] +++ exited with 0 +++ [pid 5609] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=26, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=19 /* 0.19 s */} --- [pid 5609] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5609] umount2("./24", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] openat(AT_FDCWD, "./24", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5609] fstat(3, {st_mode=S_IFDIR|0700, st_size=80, ...}) = 0 [pid 5609] getdents64(3, 0x555579655790 /* 4 entries */, 32768) = 112 [pid 5609] umount2("./24/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5609] umount2("./24/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] newfstatat(AT_FDCWD, "./24/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] umount2("./24/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] openat(AT_FDCWD, "./24/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5609] fstat(4, {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0 [pid 5609] getdents64(4, 0x55557965d7d0 /* 2 entries */, 32768) = 48 [pid 5609] getdents64(4, 0x55557965d7d0 /* 0 entries */, 32768) = 0 [pid 5609] close(4) = 0 [pid 5609] rmdir("./24/file2") = 0 [pid 5609] umount2("./24/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] newfstatat(AT_FDCWD, "./24/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] unlink("./24/binderfs") = 0 [pid 5609] getdents64(3, 0x555579655790 /* 0 entries */, 32768) = 0 [pid 5609] close(3) = 0 [pid 5609] rmdir("./24") = 0 [pid 5609] mkdir("./25", 0777) = 0 [pid 5609] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 [pid 5609] ioctl(3, LOOP_CLR_FD) = 0 [pid 5609] close(3) = 0 [pid 5609] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5609] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5666 attached , child_tidptr=0x5555796546d0) = 27 [pid 5666] set_robust_list(0x5555796546e0, 24) = 0 [pid 5609] rt_sigprocmask(SIG_SETMASK, [] [pid 5666] rt_sigprocmask(SIG_SETMASK, [] [pid 5609] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5666] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5666] chdir("./25") = 0 [pid 5666] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5666] setpgid(0, 0) = 0 [pid 5666] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5666] write(3, "1000", 4) = 4 [pid 5666] close(3) = 0 [pid 5666] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5666] write(1, "executing program\n", 18) = 18 executing program [pid 5666] memfd_create("syzkaller", 0) = 3 [pid 5666] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5666] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5666] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5666] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5666] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5666] close(3) = 0 [pid 5666] close(4) = 0 [pid 5666] mkdir("./file2", 0777) = 0 [pid 5666] mount("/dev/loop0", "./file2", "jfs", MS_NOEXEC|MS_NOATIME|MS_NODIRATIME|MS_I_VERSION, ",umask=0") = 0 [pid 5666] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5666] chdir("./file2") = 0 [pid 5666] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5666] ioctl(4, LOOP_CLR_FD) = 0 [pid 5666] close(4) = 0 [ 121.650454][ T5666] loop0: detected capacity change from 0 to 32768 [pid 5666] memfd_create("syzkaller", 0) = 4 [pid 5666] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5666] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8192) = 8192 [pid 5666] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5666] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5666] close(4) = 0 [pid 5666] memfd_create("syzkaller", 0) = 4 [pid 5666] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5666] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 83968) = 83968 [pid 5666] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5666] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5666] close(4) = 0 [pid 5666] fchown(-1, -1, 0) = -1 EBADF (Bad file descriptor) [pid 5666] open_by_handle_at(-100, NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5666] close(3) = 0 [pid 5666] close(4) = -1 EBADF (Bad file descriptor) [pid 5666] close(5) = -1 EBADF (Bad file descriptor) [pid 5666] close(6) = -1 EBADF (Bad file descriptor) [pid 5666] close(7) = -1 EBADF (Bad file descriptor) [pid 5666] close(8) = -1 EBADF (Bad file descriptor) [pid 5666] close(9) = -1 EBADF (Bad file descriptor) [pid 5666] close(10) = -1 EBADF (Bad file descriptor) [pid 5666] close(11) = -1 EBADF (Bad file descriptor) [pid 5666] close(12) = -1 EBADF (Bad file descriptor) [pid 5666] close(13) = -1 EBADF (Bad file descriptor) [pid 5666] close(14) = -1 EBADF (Bad file descriptor) [pid 5666] close(15) = -1 EBADF (Bad file descriptor) [pid 5666] close(16) = -1 EBADF (Bad file descriptor) [pid 5666] close(17) = -1 EBADF (Bad file descriptor) [pid 5666] close(18) = -1 EBADF (Bad file descriptor) [pid 5666] close(19) = -1 EBADF (Bad file descriptor) [pid 5666] close(20) = -1 EBADF (Bad file descriptor) [pid 5666] close(21) = -1 EBADF (Bad file descriptor) [pid 5666] close(22) = -1 EBADF (Bad file descriptor) [pid 5666] close(23) = -1 EBADF (Bad file descriptor) [pid 5666] close(24) = -1 EBADF (Bad file descriptor) [pid 5666] close(25) = -1 EBADF (Bad file descriptor) [pid 5666] close(26) = -1 EBADF (Bad file descriptor) [pid 5666] close(27) = -1 EBADF (Bad file descriptor) [pid 5666] close(28) = -1 EBADF (Bad file descriptor) [pid 5666] close(29) = -1 EBADF (Bad file descriptor) [pid 5666] exit_group(0) = ? [pid 5666] +++ exited with 0 +++ [pid 5609] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=27, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=25 /* 0.25 s */} --- [pid 5609] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5609] umount2("./25", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] openat(AT_FDCWD, "./25", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5609] fstat(3, {st_mode=S_IFDIR|0700, st_size=80, ...}) = 0 [pid 5609] getdents64(3, 0x555579655790 /* 4 entries */, 32768) = 112 [pid 5609] umount2("./25/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5609] umount2("./25/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] newfstatat(AT_FDCWD, "./25/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] umount2("./25/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] openat(AT_FDCWD, "./25/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5609] fstat(4, {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0 [pid 5609] getdents64(4, 0x55557965d7d0 /* 2 entries */, 32768) = 48 [pid 5609] getdents64(4, 0x55557965d7d0 /* 0 entries */, 32768) = 0 [pid 5609] close(4) = 0 [pid 5609] rmdir("./25/file2") = 0 [pid 5609] umount2("./25/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] newfstatat(AT_FDCWD, "./25/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] unlink("./25/binderfs") = 0 [pid 5609] getdents64(3, 0x555579655790 /* 0 entries */, 32768) = 0 [pid 5609] close(3) = 0 [pid 5609] rmdir("./25") = 0 [pid 5609] mkdir("./26", 0777) = 0 [pid 5609] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 [pid 5609] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5609] close(3) = 0 [pid 5609] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5609] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555796546d0) = 28 ci2-upstream-fs/strace-static-x86_64: Process 5667 attached [pid 5609] rt_sigprocmask(SIG_SETMASK, [] [pid 5667] set_robust_list(0x5555796546e0, 24 [pid 5609] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5667] <... set_robust_list resumed>) = 0 [pid 5667] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5667] chdir("./26") = 0 [pid 5667] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5667] setpgid(0, 0) = 0 [pid 5667] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5667] write(3, "1000", 4) = 4 [pid 5667] close(3) = 0 [pid 5667] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5667] write(1, "executing program\n", 18) = 18 executing program [pid 5667] memfd_create("syzkaller", 0) = 3 [pid 5667] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5667] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5667] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5667] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5667] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5667] close(3) = 0 [pid 5667] close(4) = 0 [pid 5667] mkdir("./file2", 0777) = 0 [pid 5667] mount("/dev/loop0", "./file2", "jfs", MS_NOEXEC|MS_NOATIME|MS_NODIRATIME|MS_I_VERSION, ",umask=0") = 0 [pid 5667] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5667] chdir("./file2") = 0 [pid 5667] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5667] ioctl(4, LOOP_CLR_FD) = 0 [pid 5667] close(4) = 0 [pid 5667] memfd_create("syzkaller", 0) = 4 [pid 5667] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5667] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8192) = 8192 [pid 5667] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5667] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5667] close(4) = 0 [pid 5667] memfd_create("syzkaller", 0) = 4 [pid 5667] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [ 122.237903][ T5667] loop0: detected capacity change from 0 to 32768 [pid 5667] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 83968) = 83968 [pid 5667] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5667] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5667] close(4) = 0 [pid 5667] fchown(-1, -1, 0) = -1 EBADF (Bad file descriptor) [pid 5667] open_by_handle_at(-100, NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5667] close(3) = 0 [pid 5667] close(4) = -1 EBADF (Bad file descriptor) [pid 5667] close(5) = -1 EBADF (Bad file descriptor) [pid 5667] close(6) = -1 EBADF (Bad file descriptor) [pid 5667] close(7) = -1 EBADF (Bad file descriptor) [pid 5667] close(8) = -1 EBADF (Bad file descriptor) [pid 5667] close(9) = -1 EBADF (Bad file descriptor) [pid 5667] close(10) = -1 EBADF (Bad file descriptor) [pid 5667] close(11) = -1 EBADF (Bad file descriptor) [pid 5667] close(12) = -1 EBADF (Bad file descriptor) [pid 5667] close(13) = -1 EBADF (Bad file descriptor) [pid 5667] close(14) = -1 EBADF (Bad file descriptor) [pid 5667] close(15) = -1 EBADF (Bad file descriptor) [pid 5667] close(16) = -1 EBADF (Bad file descriptor) [pid 5667] close(17) = -1 EBADF (Bad file descriptor) [pid 5667] close(18) = -1 EBADF (Bad file descriptor) [pid 5667] close(19) = -1 EBADF (Bad file descriptor) [pid 5667] close(20) = -1 EBADF (Bad file descriptor) [pid 5667] close(21) = -1 EBADF (Bad file descriptor) [pid 5667] close(22) = -1 EBADF (Bad file descriptor) [pid 5667] close(23) = -1 EBADF (Bad file descriptor) [pid 5667] close(24) = -1 EBADF (Bad file descriptor) [pid 5667] close(25) = -1 EBADF (Bad file descriptor) [pid 5667] close(26) = -1 EBADF (Bad file descriptor) [pid 5667] close(27) = -1 EBADF (Bad file descriptor) [pid 5667] close(28) = -1 EBADF (Bad file descriptor) [pid 5667] close(29) = -1 EBADF (Bad file descriptor) [pid 5667] exit_group(0) = ? [pid 5667] +++ exited with 0 +++ [pid 5609] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=28, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=20 /* 0.20 s */} --- [pid 5609] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5609] umount2("./26", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] openat(AT_FDCWD, "./26", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5609] fstat(3, {st_mode=S_IFDIR|0700, st_size=80, ...}) = 0 [pid 5609] getdents64(3, 0x555579655790 /* 4 entries */, 32768) = 112 [pid 5609] umount2("./26/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5609] umount2("./26/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] newfstatat(AT_FDCWD, "./26/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] umount2("./26/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] openat(AT_FDCWD, "./26/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5609] fstat(4, {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0 [pid 5609] getdents64(4, 0x55557965d7d0 /* 2 entries */, 32768) = 48 [pid 5609] getdents64(4, 0x55557965d7d0 /* 0 entries */, 32768) = 0 [pid 5609] close(4) = 0 [pid 5609] rmdir("./26/file2") = 0 [pid 5609] umount2("./26/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] newfstatat(AT_FDCWD, "./26/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] unlink("./26/binderfs") = 0 [pid 5609] getdents64(3, 0x555579655790 /* 0 entries */, 32768) = 0 [pid 5609] close(3) = 0 [pid 5609] rmdir("./26") = 0 [pid 5609] mkdir("./27", 0777) = 0 [pid 5609] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 [pid 5609] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5609] close(3) = 0 [pid 5609] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5609] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5668 attached [pid 5668] set_robust_list(0x5555796546e0, 24 [pid 5609] <... clone resumed>, child_tidptr=0x5555796546d0) = 29 [pid 5668] <... set_robust_list resumed>) = 0 [pid 5668] rt_sigprocmask(SIG_SETMASK, [] [pid 5609] rt_sigprocmask(SIG_SETMASK, [] [pid 5668] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5609] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5668] chdir("./27") = 0 [pid 5668] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5668] setpgid(0, 0) = 0 [pid 5668] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5668] write(3, "1000", 4) = 4 [pid 5668] close(3) = 0 [pid 5668] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5668] write(1, "executing program\n", 18) = 18 executing program [pid 5668] memfd_create("syzkaller", 0) = 3 [pid 5668] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5668] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5668] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5668] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5668] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5668] close(3) = 0 [pid 5668] close(4) = 0 [pid 5668] mkdir("./file2", 0777) = 0 [pid 5668] mount("/dev/loop0", "./file2", "jfs", MS_NOEXEC|MS_NOATIME|MS_NODIRATIME|MS_I_VERSION, ",umask=0") = 0 [pid 5668] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5668] chdir("./file2") = 0 [pid 5668] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5668] ioctl(4, LOOP_CLR_FD) = 0 [pid 5668] close(4) = 0 [pid 5668] memfd_create("syzkaller", 0) = 4 [pid 5668] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [ 122.817543][ T5668] loop0: detected capacity change from 0 to 32768 [pid 5668] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8192) = 8192 [pid 5668] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5668] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5668] close(4) = 0 [pid 5668] memfd_create("syzkaller", 0) = 4 [pid 5668] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5668] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 83968) = 83968 [pid 5668] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5668] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5668] close(4) = 0 [pid 5668] fchown(-1, -1, 0) = -1 EBADF (Bad file descriptor) [pid 5668] open_by_handle_at(-100, NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5668] close(3) = 0 [pid 5668] close(4) = -1 EBADF (Bad file descriptor) [pid 5668] close(5) = -1 EBADF (Bad file descriptor) [pid 5668] close(6) = -1 EBADF (Bad file descriptor) [pid 5668] close(7) = -1 EBADF (Bad file descriptor) [pid 5668] close(8) = -1 EBADF (Bad file descriptor) [pid 5668] close(9) = -1 EBADF (Bad file descriptor) [pid 5668] close(10) = -1 EBADF (Bad file descriptor) [pid 5668] close(11) = -1 EBADF (Bad file descriptor) [pid 5668] close(12) = -1 EBADF (Bad file descriptor) [pid 5668] close(13) = -1 EBADF (Bad file descriptor) [pid 5668] close(14) = -1 EBADF (Bad file descriptor) [pid 5668] close(15) = -1 EBADF (Bad file descriptor) [pid 5668] close(16) = -1 EBADF (Bad file descriptor) [pid 5668] close(17) = -1 EBADF (Bad file descriptor) [pid 5668] close(18) = -1 EBADF (Bad file descriptor) [pid 5668] close(19) = -1 EBADF (Bad file descriptor) [pid 5668] close(20) = -1 EBADF (Bad file descriptor) [pid 5668] close(21) = -1 EBADF (Bad file descriptor) [pid 5668] close(22) = -1 EBADF (Bad file descriptor) [pid 5668] close(23) = -1 EBADF (Bad file descriptor) [pid 5668] close(24) = -1 EBADF (Bad file descriptor) [pid 5668] close(25) = -1 EBADF (Bad file descriptor) [pid 5668] close(26) = -1 EBADF (Bad file descriptor) [pid 5668] close(27) = -1 EBADF (Bad file descriptor) [pid 5668] close(28) = -1 EBADF (Bad file descriptor) [pid 5668] close(29) = -1 EBADF (Bad file descriptor) [pid 5668] exit_group(0) = ? [pid 5668] +++ exited with 0 +++ [pid 5609] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=29, si_uid=0, si_status=0, si_utime=0, si_stime=24 /* 0.24 s */} --- [pid 5609] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5609] umount2("./27", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] openat(AT_FDCWD, "./27", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5609] fstat(3, {st_mode=S_IFDIR|0700, st_size=80, ...}) = 0 [pid 5609] getdents64(3, 0x555579655790 /* 4 entries */, 32768) = 112 [pid 5609] umount2("./27/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5609] umount2("./27/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] newfstatat(AT_FDCWD, "./27/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] umount2("./27/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] openat(AT_FDCWD, "./27/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5609] fstat(4, {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0 [pid 5609] getdents64(4, 0x55557965d7d0 /* 2 entries */, 32768) = 48 [pid 5609] getdents64(4, 0x55557965d7d0 /* 0 entries */, 32768) = 0 [pid 5609] close(4) = 0 [pid 5609] rmdir("./27/file2") = 0 [pid 5609] umount2("./27/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] newfstatat(AT_FDCWD, "./27/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] unlink("./27/binderfs") = 0 [pid 5609] getdents64(3, 0x555579655790 /* 0 entries */, 32768) = 0 [pid 5609] close(3) = 0 [pid 5609] rmdir("./27") = 0 [pid 5609] mkdir("./28", 0777) = 0 [pid 5609] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 [pid 5609] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5609] close(3) = 0 [pid 5609] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5609] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5669 attached , child_tidptr=0x5555796546d0) = 30 [pid 5669] set_robust_list(0x5555796546e0, 24) = 0 [pid 5669] rt_sigprocmask(SIG_SETMASK, [] [pid 5609] rt_sigprocmask(SIG_SETMASK, [] [pid 5669] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5609] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5669] chdir("./28") = 0 [pid 5669] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5669] setpgid(0, 0) = 0 [pid 5669] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5669] write(3, "1000", 4) = 4 [pid 5669] close(3) = 0 [pid 5669] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5669] write(1, "executing program\n", 18) = 18 executing program [pid 5669] memfd_create("syzkaller", 0) = 3 [pid 5669] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5669] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5669] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5669] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5669] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5669] close(3) = 0 [pid 5669] close(4) = 0 [pid 5669] mkdir("./file2", 0777) = 0 [pid 5669] mount("/dev/loop0", "./file2", "jfs", MS_NOEXEC|MS_NOATIME|MS_NODIRATIME|MS_I_VERSION, ",umask=0") = 0 [pid 5669] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5669] chdir("./file2") = 0 [pid 5669] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5669] ioctl(4, LOOP_CLR_FD) = 0 [pid 5669] close(4) = 0 [pid 5669] memfd_create("syzkaller", 0) = 4 [pid 5669] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5669] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8192) = 8192 [pid 5669] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5669] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5669] close(4) = 0 [pid 5669] memfd_create("syzkaller", 0) = 4 [ 123.386316][ T5669] loop0: detected capacity change from 0 to 32768 [pid 5669] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5669] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 83968) = 83968 [pid 5669] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5669] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5669] close(4) = 0 [pid 5669] fchown(-1, -1, 0) = -1 EBADF (Bad file descriptor) [pid 5669] open_by_handle_at(-100, NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5669] close(3) = 0 [pid 5669] close(4) = -1 EBADF (Bad file descriptor) [pid 5669] close(5) = -1 EBADF (Bad file descriptor) [pid 5669] close(6) = -1 EBADF (Bad file descriptor) [pid 5669] close(7) = -1 EBADF (Bad file descriptor) [pid 5669] close(8) = -1 EBADF (Bad file descriptor) [pid 5669] close(9) = -1 EBADF (Bad file descriptor) [pid 5669] close(10) = -1 EBADF (Bad file descriptor) [pid 5669] close(11) = -1 EBADF (Bad file descriptor) [pid 5669] close(12) = -1 EBADF (Bad file descriptor) [pid 5669] close(13) = -1 EBADF (Bad file descriptor) [pid 5669] close(14) = -1 EBADF (Bad file descriptor) [pid 5669] close(15) = -1 EBADF (Bad file descriptor) [pid 5669] close(16) = -1 EBADF (Bad file descriptor) [pid 5669] close(17) = -1 EBADF (Bad file descriptor) [pid 5669] close(18) = -1 EBADF (Bad file descriptor) [pid 5669] close(19) = -1 EBADF (Bad file descriptor) [pid 5669] close(20) = -1 EBADF (Bad file descriptor) [pid 5669] close(21) = -1 EBADF (Bad file descriptor) [pid 5669] close(22) = -1 EBADF (Bad file descriptor) [pid 5669] close(23) = -1 EBADF (Bad file descriptor) [pid 5669] close(24) = -1 EBADF (Bad file descriptor) [pid 5669] close(25) = -1 EBADF (Bad file descriptor) [pid 5669] close(26) = -1 EBADF (Bad file descriptor) [pid 5669] close(27) = -1 EBADF (Bad file descriptor) [pid 5669] close(28) = -1 EBADF (Bad file descriptor) [pid 5669] close(29) = -1 EBADF (Bad file descriptor) [pid 5669] exit_group(0) = ? [pid 5669] +++ exited with 0 +++ [pid 5609] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=30, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=21 /* 0.21 s */} --- [pid 5609] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5609] umount2("./28", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] openat(AT_FDCWD, "./28", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5609] fstat(3, {st_mode=S_IFDIR|0700, st_size=80, ...}) = 0 [pid 5609] getdents64(3, 0x555579655790 /* 4 entries */, 32768) = 112 [pid 5609] umount2("./28/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5609] umount2("./28/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] newfstatat(AT_FDCWD, "./28/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] umount2("./28/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] openat(AT_FDCWD, "./28/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5609] fstat(4, {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0 [pid 5609] getdents64(4, 0x55557965d7d0 /* 2 entries */, 32768) = 48 [pid 5609] getdents64(4, 0x55557965d7d0 /* 0 entries */, 32768) = 0 [pid 5609] close(4) = 0 [pid 5609] rmdir("./28/file2") = 0 [pid 5609] umount2("./28/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] newfstatat(AT_FDCWD, "./28/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] unlink("./28/binderfs") = 0 [pid 5609] getdents64(3, 0x555579655790 /* 0 entries */, 32768) = 0 [pid 5609] close(3) = 0 [pid 5609] rmdir("./28") = 0 [pid 5609] mkdir("./29", 0777) = 0 [pid 5609] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 [pid 5609] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5609] close(3) = 0 [pid 5609] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5609] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5670 attached [pid 5670] set_robust_list(0x5555796546e0, 24 [pid 5609] <... clone resumed>, child_tidptr=0x5555796546d0) = 31 [pid 5670] <... set_robust_list resumed>) = 0 [pid 5609] rt_sigprocmask(SIG_SETMASK, [] [pid 5670] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5609] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5670] chdir("./29") = 0 [pid 5670] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5670] setpgid(0, 0) = 0 [pid 5670] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5670] write(3, "1000", 4) = 4 [pid 5670] close(3) = 0 [pid 5670] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5670] write(1, "executing program\n", 18) = 18 executing program [pid 5670] memfd_create("syzkaller", 0) = 3 [pid 5670] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5670] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5670] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5670] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5670] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5670] close(3) = 0 [pid 5670] close(4) = 0 [pid 5670] mkdir("./file2", 0777) = 0 [pid 5670] mount("/dev/loop0", "./file2", "jfs", MS_NOEXEC|MS_NOATIME|MS_NODIRATIME|MS_I_VERSION, ",umask=0") = 0 [pid 5670] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5670] chdir("./file2") = 0 [pid 5670] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5670] ioctl(4, LOOP_CLR_FD) = 0 [pid 5670] close(4) = 0 [pid 5670] memfd_create("syzkaller", 0) = 4 [pid 5670] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5670] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8192) = 8192 [pid 5670] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5670] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 123.949514][ T5670] loop0: detected capacity change from 0 to 32768 [pid 5670] close(4) = 0 [pid 5670] memfd_create("syzkaller", 0) = 4 [pid 5670] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5670] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 83968) = 83968 [pid 5670] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5670] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5670] close(4) = 0 [pid 5670] fchown(-1, -1, 0) = -1 EBADF (Bad file descriptor) [pid 5670] open_by_handle_at(-100, NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5670] close(3) = 0 [pid 5670] close(4) = -1 EBADF (Bad file descriptor) [pid 5670] close(5) = -1 EBADF (Bad file descriptor) [pid 5670] close(6) = -1 EBADF (Bad file descriptor) [pid 5670] close(7) = -1 EBADF (Bad file descriptor) [pid 5670] close(8) = -1 EBADF (Bad file descriptor) [pid 5670] close(9) = -1 EBADF (Bad file descriptor) [pid 5670] close(10) = -1 EBADF (Bad file descriptor) [pid 5670] close(11) = -1 EBADF (Bad file descriptor) [pid 5670] close(12) = -1 EBADF (Bad file descriptor) [pid 5670] close(13) = -1 EBADF (Bad file descriptor) [pid 5670] close(14) = -1 EBADF (Bad file descriptor) [pid 5670] close(15) = -1 EBADF (Bad file descriptor) [pid 5670] close(16) = -1 EBADF (Bad file descriptor) [pid 5670] close(17) = -1 EBADF (Bad file descriptor) [pid 5670] close(18) = -1 EBADF (Bad file descriptor) [pid 5670] close(19) = -1 EBADF (Bad file descriptor) [pid 5670] close(20) = -1 EBADF (Bad file descriptor) [pid 5670] close(21) = -1 EBADF (Bad file descriptor) [pid 5670] close(22) = -1 EBADF (Bad file descriptor) [pid 5670] close(23) = -1 EBADF (Bad file descriptor) [pid 5670] close(24) = -1 EBADF (Bad file descriptor) [pid 5670] close(25) = -1 EBADF (Bad file descriptor) [pid 5670] close(26) = -1 EBADF (Bad file descriptor) [pid 5670] close(27) = -1 EBADF (Bad file descriptor) [pid 5670] close(28) = -1 EBADF (Bad file descriptor) [pid 5670] close(29) = -1 EBADF (Bad file descriptor) [pid 5670] exit_group(0) = ? [pid 5670] +++ exited with 0 +++ [pid 5609] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=31, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=17 /* 0.17 s */} --- [pid 5609] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5609] umount2("./29", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] openat(AT_FDCWD, "./29", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5609] fstat(3, {st_mode=S_IFDIR|0700, st_size=80, ...}) = 0 [pid 5609] getdents64(3, 0x555579655790 /* 4 entries */, 32768) = 112 [pid 5609] umount2("./29/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5609] umount2("./29/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] newfstatat(AT_FDCWD, "./29/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] umount2("./29/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] openat(AT_FDCWD, "./29/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5609] fstat(4, {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0 [pid 5609] getdents64(4, 0x55557965d7d0 /* 2 entries */, 32768) = 48 [pid 5609] getdents64(4, 0x55557965d7d0 /* 0 entries */, 32768) = 0 [pid 5609] close(4) = 0 [pid 5609] rmdir("./29/file2") = 0 [pid 5609] umount2("./29/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] newfstatat(AT_FDCWD, "./29/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] unlink("./29/binderfs") = 0 [pid 5609] getdents64(3, 0x555579655790 /* 0 entries */, 32768) = 0 [pid 5609] close(3) = 0 [pid 5609] rmdir("./29") = 0 [pid 5609] mkdir("./30", 0777) = 0 [pid 5609] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 [pid 5609] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5609] close(3) = 0 [pid 5609] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5609] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5671 attached , child_tidptr=0x5555796546d0) = 32 [pid 5671] set_robust_list(0x5555796546e0, 24 [pid 5609] rt_sigprocmask(SIG_SETMASK, [] [pid 5671] <... set_robust_list resumed>) = 0 [pid 5609] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5671] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5671] chdir("./30") = 0 [pid 5671] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5671] setpgid(0, 0) = 0 [pid 5671] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5671] write(3, "1000", 4) = 4 [pid 5671] close(3) = 0 [pid 5671] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5671] write(1, "executing program\n", 18) = 18 executing program [pid 5671] memfd_create("syzkaller", 0) = 3 [pid 5671] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5671] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5671] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5671] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5671] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5671] close(3) = 0 [pid 5671] close(4) = 0 [pid 5671] mkdir("./file2", 0777) = 0 [pid 5671] mount("/dev/loop0", "./file2", "jfs", MS_NOEXEC|MS_NOATIME|MS_NODIRATIME|MS_I_VERSION, ",umask=0") = 0 [pid 5671] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5671] chdir("./file2") = 0 [pid 5671] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5671] ioctl(4, LOOP_CLR_FD) = 0 [pid 5671] close(4) = 0 [pid 5671] memfd_create("syzkaller", 0) = 4 [pid 5671] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5671] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8192) = 8192 [pid 5671] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5671] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5671] close(4) = 0 [pid 5671] memfd_create("syzkaller", 0) = 4 [pid 5671] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [ 124.515768][ T5671] loop0: detected capacity change from 0 to 32768 [pid 5671] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 83968) = 83968 [pid 5671] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5671] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5671] close(4) = 0 [pid 5671] fchown(-1, -1, 0) = -1 EBADF (Bad file descriptor) [pid 5671] open_by_handle_at(-100, NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5671] close(3) = 0 [pid 5671] close(4) = -1 EBADF (Bad file descriptor) [pid 5671] close(5) = -1 EBADF (Bad file descriptor) [pid 5671] close(6) = -1 EBADF (Bad file descriptor) [pid 5671] close(7) = -1 EBADF (Bad file descriptor) [pid 5671] close(8) = -1 EBADF (Bad file descriptor) [pid 5671] close(9) = -1 EBADF (Bad file descriptor) [pid 5671] close(10) = -1 EBADF (Bad file descriptor) [pid 5671] close(11) = -1 EBADF (Bad file descriptor) [pid 5671] close(12) = -1 EBADF (Bad file descriptor) [pid 5671] close(13) = -1 EBADF (Bad file descriptor) [pid 5671] close(14) = -1 EBADF (Bad file descriptor) [pid 5671] close(15) = -1 EBADF (Bad file descriptor) [pid 5671] close(16) = -1 EBADF (Bad file descriptor) [pid 5671] close(17) = -1 EBADF (Bad file descriptor) [pid 5671] close(18) = -1 EBADF (Bad file descriptor) [pid 5671] close(19) = -1 EBADF (Bad file descriptor) [pid 5671] close(20) = -1 EBADF (Bad file descriptor) [pid 5671] close(21) = -1 EBADF (Bad file descriptor) [pid 5671] close(22) = -1 EBADF (Bad file descriptor) [pid 5671] close(23) = -1 EBADF (Bad file descriptor) [pid 5671] close(24) = -1 EBADF (Bad file descriptor) [pid 5671] close(25) = -1 EBADF (Bad file descriptor) [pid 5671] close(26) = -1 EBADF (Bad file descriptor) [pid 5671] close(27) = -1 EBADF (Bad file descriptor) [pid 5671] close(28) = -1 EBADF (Bad file descriptor) [pid 5671] close(29) = -1 EBADF (Bad file descriptor) [pid 5671] exit_group(0) = ? [pid 5671] +++ exited with 0 +++ [pid 5609] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=32, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=18 /* 0.18 s */} --- [pid 5609] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5609] umount2("./30", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] openat(AT_FDCWD, "./30", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5609] fstat(3, {st_mode=S_IFDIR|0700, st_size=80, ...}) = 0 [pid 5609] getdents64(3, 0x555579655790 /* 4 entries */, 32768) = 112 [pid 5609] umount2("./30/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5609] umount2("./30/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] newfstatat(AT_FDCWD, "./30/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] umount2("./30/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] openat(AT_FDCWD, "./30/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5609] fstat(4, {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0 [pid 5609] getdents64(4, 0x55557965d7d0 /* 2 entries */, 32768) = 48 [pid 5609] getdents64(4, 0x55557965d7d0 /* 0 entries */, 32768) = 0 [pid 5609] close(4) = 0 [pid 5609] rmdir("./30/file2") = 0 [pid 5609] umount2("./30/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] newfstatat(AT_FDCWD, "./30/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] unlink("./30/binderfs") = 0 [pid 5609] getdents64(3, 0x555579655790 /* 0 entries */, 32768) = 0 [pid 5609] close(3) = 0 [pid 5609] rmdir("./30") = 0 [pid 5609] mkdir("./31", 0777) = 0 [pid 5609] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 [pid 5609] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5609] close(3) = 0 [pid 5609] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5609] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5672 attached , child_tidptr=0x5555796546d0) = 33 [pid 5672] set_robust_list(0x5555796546e0, 24) = 0 [pid 5609] rt_sigprocmask(SIG_SETMASK, [] [pid 5672] rt_sigprocmask(SIG_SETMASK, [] [pid 5609] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5672] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5672] chdir("./31") = 0 [pid 5672] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5672] setpgid(0, 0) = 0 [pid 5672] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5672] write(3, "1000", 4) = 4 [pid 5672] close(3) = 0 [pid 5672] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5672] write(1, "executing program\n", 18) = 18 [pid 5672] memfd_create("syzkaller", 0) = 3 [pid 5672] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5672] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5672] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5672] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5672] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5672] close(3) = 0 [pid 5672] close(4) = 0 [pid 5672] mkdir("./file2", 0777) = 0 [pid 5672] mount("/dev/loop0", "./file2", "jfs", MS_NOEXEC|MS_NOATIME|MS_NODIRATIME|MS_I_VERSION, ",umask=0") = 0 [pid 5672] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5672] chdir("./file2") = 0 [pid 5672] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5672] ioctl(4, LOOP_CLR_FD) = 0 [pid 5672] close(4) = 0 [pid 5672] memfd_create("syzkaller", 0) = 4 [pid 5672] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5672] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8192) = 8192 [pid 5672] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5672] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5672] close(4) = 0 [pid 5672] memfd_create("syzkaller", 0) = 4 [pid 5672] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [ 125.036656][ T5672] loop0: detected capacity change from 0 to 32768 [pid 5672] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 83968) = 83968 [pid 5672] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5672] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5672] close(4) = 0 [pid 5672] fchown(-1, -1, 0) = -1 EBADF (Bad file descriptor) [pid 5672] open_by_handle_at(-100, NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5672] close(3) = 0 [pid 5672] close(4) = -1 EBADF (Bad file descriptor) [pid 5672] close(5) = -1 EBADF (Bad file descriptor) [pid 5672] close(6) = -1 EBADF (Bad file descriptor) [pid 5672] close(7) = -1 EBADF (Bad file descriptor) [pid 5672] close(8) = -1 EBADF (Bad file descriptor) [pid 5672] close(9) = -1 EBADF (Bad file descriptor) [pid 5672] close(10) = -1 EBADF (Bad file descriptor) [pid 5672] close(11) = -1 EBADF (Bad file descriptor) [pid 5672] close(12) = -1 EBADF (Bad file descriptor) [pid 5672] close(13) = -1 EBADF (Bad file descriptor) [pid 5672] close(14) = -1 EBADF (Bad file descriptor) [pid 5672] close(15) = -1 EBADF (Bad file descriptor) [pid 5672] close(16) = -1 EBADF (Bad file descriptor) [pid 5672] close(17) = -1 EBADF (Bad file descriptor) [pid 5672] close(18) = -1 EBADF (Bad file descriptor) [pid 5672] close(19) = -1 EBADF (Bad file descriptor) [pid 5672] close(20) = -1 EBADF (Bad file descriptor) [pid 5672] close(21) = -1 EBADF (Bad file descriptor) [pid 5672] close(22) = -1 EBADF (Bad file descriptor) [pid 5672] close(23) = -1 EBADF (Bad file descriptor) [pid 5672] close(24) = -1 EBADF (Bad file descriptor) [pid 5672] close(25) = -1 EBADF (Bad file descriptor) [pid 5672] close(26) = -1 EBADF (Bad file descriptor) [pid 5672] close(27) = -1 EBADF (Bad file descriptor) [pid 5672] close(28) = -1 EBADF (Bad file descriptor) [pid 5672] close(29) = -1 EBADF (Bad file descriptor) [pid 5672] exit_group(0) = ? [pid 5672] +++ exited with 0 +++ [pid 5609] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=33, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=22 /* 0.22 s */} --- [pid 5609] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5609] umount2("./31", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] openat(AT_FDCWD, "./31", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5609] fstat(3, {st_mode=S_IFDIR|0700, st_size=80, ...}) = 0 [pid 5609] getdents64(3, 0x555579655790 /* 4 entries */, 32768) = 112 [pid 5609] umount2("./31/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5609] umount2("./31/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] newfstatat(AT_FDCWD, "./31/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] umount2("./31/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] openat(AT_FDCWD, "./31/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5609] fstat(4, {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0 [pid 5609] getdents64(4, 0x55557965d7d0 /* 2 entries */, 32768) = 48 [pid 5609] getdents64(4, 0x55557965d7d0 /* 0 entries */, 32768) = 0 [pid 5609] close(4) = 0 [pid 5609] rmdir("./31/file2") = 0 [pid 5609] umount2("./31/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] newfstatat(AT_FDCWD, "./31/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] unlink("./31/binderfs") = 0 [pid 5609] getdents64(3, 0x555579655790 /* 0 entries */, 32768) = 0 [pid 5609] close(3) = 0 [pid 5609] rmdir("./31") = 0 [pid 5609] mkdir("./32", 0777) = 0 [pid 5609] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 [pid 5609] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5609] close(3) = 0 [pid 5609] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5609] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5673 attached [pid 5673] set_robust_list(0x5555796546e0, 24 [pid 5609] <... clone resumed>, child_tidptr=0x5555796546d0) = 34 [pid 5673] <... set_robust_list resumed>) = 0 [pid 5609] rt_sigprocmask(SIG_SETMASK, [] [pid 5673] rt_sigprocmask(SIG_SETMASK, [] [pid 5609] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5673] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5673] chdir("./32") = 0 [pid 5673] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5673] setpgid(0, 0) = 0 [pid 5673] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5673] write(3, "1000", 4) = 4 [pid 5673] close(3) = 0 [pid 5673] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5673] write(1, "executing program\n", 18) = 18 executing program [pid 5673] memfd_create("syzkaller", 0) = 3 [pid 5673] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5673] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5673] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5673] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5673] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5673] close(3) = 0 [pid 5673] close(4) = 0 [pid 5673] mkdir("./file2", 0777) = 0 [pid 5673] mount("/dev/loop0", "./file2", "jfs", MS_NOEXEC|MS_NOATIME|MS_NODIRATIME|MS_I_VERSION, ",umask=0") = 0 [pid 5673] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5673] chdir("./file2") = 0 [pid 5673] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5673] ioctl(4, LOOP_CLR_FD) = 0 [pid 5673] close(4) = 0 [pid 5673] memfd_create("syzkaller", 0) = 4 [pid 5673] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [ 125.556755][ T5673] loop0: detected capacity change from 0 to 32768 [pid 5673] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8192) = 8192 [pid 5673] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5673] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5673] close(4) = 0 [pid 5673] memfd_create("syzkaller", 0) = 4 [pid 5673] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5673] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 83968) = 83968 [pid 5673] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5673] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5673] close(4) = 0 [pid 5673] fchown(-1, -1, 0) = -1 EBADF (Bad file descriptor) [pid 5673] open_by_handle_at(-100, NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5673] close(3) = 0 [pid 5673] close(4) = -1 EBADF (Bad file descriptor) [pid 5673] close(5) = -1 EBADF (Bad file descriptor) [pid 5673] close(6) = -1 EBADF (Bad file descriptor) [pid 5673] close(7) = -1 EBADF (Bad file descriptor) [pid 5673] close(8) = -1 EBADF (Bad file descriptor) [pid 5673] close(9) = -1 EBADF (Bad file descriptor) [pid 5673] close(10) = -1 EBADF (Bad file descriptor) [pid 5673] close(11) = -1 EBADF (Bad file descriptor) [pid 5673] close(12) = -1 EBADF (Bad file descriptor) [pid 5673] close(13) = -1 EBADF (Bad file descriptor) [pid 5673] close(14) = -1 EBADF (Bad file descriptor) [pid 5673] close(15) = -1 EBADF (Bad file descriptor) [pid 5673] close(16) = -1 EBADF (Bad file descriptor) [pid 5673] close(17) = -1 EBADF (Bad file descriptor) [pid 5673] close(18) = -1 EBADF (Bad file descriptor) [pid 5673] close(19) = -1 EBADF (Bad file descriptor) [pid 5673] close(20) = -1 EBADF (Bad file descriptor) [pid 5673] close(21) = -1 EBADF (Bad file descriptor) [pid 5673] close(22) = -1 EBADF (Bad file descriptor) [pid 5673] close(23) = -1 EBADF (Bad file descriptor) [pid 5673] close(24) = -1 EBADF (Bad file descriptor) [pid 5673] close(25) = -1 EBADF (Bad file descriptor) [pid 5673] close(26) = -1 EBADF (Bad file descriptor) [pid 5673] close(27) = -1 EBADF (Bad file descriptor) [pid 5673] close(28) = -1 EBADF (Bad file descriptor) [pid 5673] close(29) = -1 EBADF (Bad file descriptor) [pid 5673] exit_group(0) = ? [pid 5673] +++ exited with 0 +++ [pid 5609] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=34, si_uid=0, si_status=0, si_utime=0, si_stime=23 /* 0.23 s */} --- [pid 5609] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5609] umount2("./32", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] openat(AT_FDCWD, "./32", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5609] fstat(3, {st_mode=S_IFDIR|0700, st_size=80, ...}) = 0 [pid 5609] getdents64(3, 0x555579655790 /* 4 entries */, 32768) = 112 [pid 5609] umount2("./32/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5609] umount2("./32/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] newfstatat(AT_FDCWD, "./32/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] umount2("./32/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] openat(AT_FDCWD, "./32/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5609] fstat(4, {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0 [pid 5609] getdents64(4, 0x55557965d7d0 /* 2 entries */, 32768) = 48 [pid 5609] getdents64(4, 0x55557965d7d0 /* 0 entries */, 32768) = 0 [pid 5609] close(4) = 0 [pid 5609] rmdir("./32/file2") = 0 [pid 5609] umount2("./32/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] newfstatat(AT_FDCWD, "./32/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] unlink("./32/binderfs") = 0 [pid 5609] getdents64(3, 0x555579655790 /* 0 entries */, 32768) = 0 [pid 5609] close(3) = 0 [pid 5609] rmdir("./32") = 0 [pid 5609] mkdir("./33", 0777) = 0 [pid 5609] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 [pid 5609] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5609] close(3) = 0 [pid 5609] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5609] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5674 attached , child_tidptr=0x5555796546d0) = 35 [pid 5674] set_robust_list(0x5555796546e0, 24 [pid 5609] rt_sigprocmask(SIG_SETMASK, [] [pid 5674] <... set_robust_list resumed>) = 0 [pid 5609] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5674] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5674] chdir("./33") = 0 [pid 5674] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5674] setpgid(0, 0) = 0 [pid 5674] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5674] write(3, "1000", 4) = 4 [pid 5674] close(3) = 0 [pid 5674] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5674] write(1, "executing program\n", 18) = 18 executing program [pid 5674] memfd_create("syzkaller", 0) = 3 [pid 5674] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5674] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5674] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5674] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5674] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5674] close(3) = 0 [pid 5674] close(4) = 0 [pid 5674] mkdir("./file2", 0777) = 0 [pid 5674] mount("/dev/loop0", "./file2", "jfs", MS_NOEXEC|MS_NOATIME|MS_NODIRATIME|MS_I_VERSION, ",umask=0") = 0 [pid 5674] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5674] chdir("./file2") = 0 [pid 5674] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5674] ioctl(4, LOOP_CLR_FD) = 0 [pid 5674] close(4) = 0 [pid 5674] memfd_create("syzkaller", 0) = 4 [pid 5674] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5674] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8192) = 8192 [pid 5674] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5674] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5674] close(4) = 0 [pid 5674] memfd_create("syzkaller", 0) = 4 [pid 5674] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5674] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 83968) = 83968 [pid 5674] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5674] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5674] close(4) = 0 [ 126.103533][ T5674] loop0: detected capacity change from 0 to 32768 [pid 5674] fchown(-1, -1, 0) = -1 EBADF (Bad file descriptor) [pid 5674] open_by_handle_at(-100, NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5674] close(3) = 0 [pid 5674] close(4) = -1 EBADF (Bad file descriptor) [pid 5674] close(5) = -1 EBADF (Bad file descriptor) [pid 5674] close(6) = -1 EBADF (Bad file descriptor) [pid 5674] close(7) = -1 EBADF (Bad file descriptor) [pid 5674] close(8) = -1 EBADF (Bad file descriptor) [pid 5674] close(9) = -1 EBADF (Bad file descriptor) [pid 5674] close(10) = -1 EBADF (Bad file descriptor) [pid 5674] close(11) = -1 EBADF (Bad file descriptor) [pid 5674] close(12) = -1 EBADF (Bad file descriptor) [pid 5674] close(13) = -1 EBADF (Bad file descriptor) [pid 5674] close(14) = -1 EBADF (Bad file descriptor) [pid 5674] close(15) = -1 EBADF (Bad file descriptor) [pid 5674] close(16) = -1 EBADF (Bad file descriptor) [pid 5674] close(17) = -1 EBADF (Bad file descriptor) [pid 5674] close(18) = -1 EBADF (Bad file descriptor) [pid 5674] close(19) = -1 EBADF (Bad file descriptor) [pid 5674] close(20) = -1 EBADF (Bad file descriptor) [pid 5674] close(21) = -1 EBADF (Bad file descriptor) [pid 5674] close(22) = -1 EBADF (Bad file descriptor) [pid 5674] close(23) = -1 EBADF (Bad file descriptor) [pid 5674] close(24) = -1 EBADF (Bad file descriptor) [pid 5674] close(25) = -1 EBADF (Bad file descriptor) [pid 5674] close(26) = -1 EBADF (Bad file descriptor) [pid 5674] close(27) = -1 EBADF (Bad file descriptor) [pid 5674] close(28) = -1 EBADF (Bad file descriptor) [pid 5674] close(29) = -1 EBADF (Bad file descriptor) [pid 5674] exit_group(0) = ? [pid 5674] +++ exited with 0 +++ [pid 5609] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=35, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=21 /* 0.21 s */} --- [pid 5609] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5609] umount2("./33", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] openat(AT_FDCWD, "./33", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5609] fstat(3, {st_mode=S_IFDIR|0700, st_size=80, ...}) = 0 [pid 5609] getdents64(3, 0x555579655790 /* 4 entries */, 32768) = 112 [pid 5609] umount2("./33/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5609] umount2("./33/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] newfstatat(AT_FDCWD, "./33/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] umount2("./33/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] openat(AT_FDCWD, "./33/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5609] fstat(4, {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0 [pid 5609] getdents64(4, 0x55557965d7d0 /* 2 entries */, 32768) = 48 [pid 5609] getdents64(4, 0x55557965d7d0 /* 0 entries */, 32768) = 0 [pid 5609] close(4) = 0 [pid 5609] rmdir("./33/file2") = 0 [pid 5609] umount2("./33/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] newfstatat(AT_FDCWD, "./33/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] unlink("./33/binderfs") = 0 [pid 5609] getdents64(3, 0x555579655790 /* 0 entries */, 32768) = 0 [pid 5609] close(3) = 0 [pid 5609] rmdir("./33") = 0 [pid 5609] mkdir("./34", 0777) = 0 [pid 5609] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 [pid 5609] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5609] close(3) = 0 [pid 5609] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5609] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5675 attached , child_tidptr=0x5555796546d0) = 36 [pid 5609] rt_sigprocmask(SIG_SETMASK, [] [pid 5675] set_robust_list(0x5555796546e0, 24 [pid 5609] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5675] <... set_robust_list resumed>) = 0 [pid 5675] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5675] chdir("./34") = 0 [pid 5675] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5675] setpgid(0, 0) = 0 [pid 5675] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5675] write(3, "1000", 4) = 4 [pid 5675] close(3) = 0 [pid 5675] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5675] write(1, "executing program\n", 18) = 18 [pid 5675] memfd_create("syzkaller", 0) = 3 [pid 5675] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5675] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5675] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5675] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5675] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5675] close(3) = 0 [pid 5675] close(4) = 0 [pid 5675] mkdir("./file2", 0777) = 0 [pid 5675] mount("/dev/loop0", "./file2", "jfs", MS_NOEXEC|MS_NOATIME|MS_NODIRATIME|MS_I_VERSION, ",umask=0") = 0 [pid 5675] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5675] chdir("./file2") = 0 [pid 5675] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5675] ioctl(4, LOOP_CLR_FD) = 0 [pid 5675] close(4) = 0 [pid 5675] memfd_create("syzkaller", 0) = 4 [pid 5675] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5675] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8192) = 8192 [pid 5675] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5675] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 126.627345][ T5675] loop0: detected capacity change from 0 to 32768 [pid 5675] close(4) = 0 [pid 5675] memfd_create("syzkaller", 0) = 4 [pid 5675] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5675] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 83968) = 83968 [pid 5675] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5675] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5675] close(4) = 0 [pid 5675] fchown(-1, -1, 0) = -1 EBADF (Bad file descriptor) [pid 5675] open_by_handle_at(-100, NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5675] close(3) = 0 [pid 5675] close(4) = -1 EBADF (Bad file descriptor) [pid 5675] close(5) = -1 EBADF (Bad file descriptor) [pid 5675] close(6) = -1 EBADF (Bad file descriptor) [pid 5675] close(7) = -1 EBADF (Bad file descriptor) [pid 5675] close(8) = -1 EBADF (Bad file descriptor) [pid 5675] close(9) = -1 EBADF (Bad file descriptor) [pid 5675] close(10) = -1 EBADF (Bad file descriptor) [pid 5675] close(11) = -1 EBADF (Bad file descriptor) [pid 5675] close(12) = -1 EBADF (Bad file descriptor) [pid 5675] close(13) = -1 EBADF (Bad file descriptor) [pid 5675] close(14) = -1 EBADF (Bad file descriptor) [pid 5675] close(15) = -1 EBADF (Bad file descriptor) [pid 5675] close(16) = -1 EBADF (Bad file descriptor) [pid 5675] close(17) = -1 EBADF (Bad file descriptor) [pid 5675] close(18) = -1 EBADF (Bad file descriptor) [pid 5675] close(19) = -1 EBADF (Bad file descriptor) [pid 5675] close(20) = -1 EBADF (Bad file descriptor) [pid 5675] close(21) = -1 EBADF (Bad file descriptor) [pid 5675] close(22) = -1 EBADF (Bad file descriptor) [pid 5675] close(23) = -1 EBADF (Bad file descriptor) [pid 5675] close(24) = -1 EBADF (Bad file descriptor) [pid 5675] close(25) = -1 EBADF (Bad file descriptor) [pid 5675] close(26) = -1 EBADF (Bad file descriptor) [pid 5675] close(27) = -1 EBADF (Bad file descriptor) [pid 5675] close(28) = -1 EBADF (Bad file descriptor) [pid 5675] close(29) = -1 EBADF (Bad file descriptor) [pid 5675] exit_group(0) = ? [pid 5675] +++ exited with 0 +++ [pid 5609] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=36, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=21 /* 0.21 s */} --- [pid 5609] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5609] umount2("./34", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] openat(AT_FDCWD, "./34", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5609] fstat(3, {st_mode=S_IFDIR|0700, st_size=80, ...}) = 0 [pid 5609] getdents64(3, 0x555579655790 /* 4 entries */, 32768) = 112 [pid 5609] umount2("./34/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5609] umount2("./34/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] newfstatat(AT_FDCWD, "./34/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] umount2("./34/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] openat(AT_FDCWD, "./34/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5609] fstat(4, {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0 [pid 5609] getdents64(4, 0x55557965d7d0 /* 2 entries */, 32768) = 48 [pid 5609] getdents64(4, 0x55557965d7d0 /* 0 entries */, 32768) = 0 [pid 5609] close(4) = 0 [pid 5609] rmdir("./34/file2") = 0 [pid 5609] umount2("./34/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] newfstatat(AT_FDCWD, "./34/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] unlink("./34/binderfs") = 0 [pid 5609] getdents64(3, 0x555579655790 /* 0 entries */, 32768) = 0 [pid 5609] close(3) = 0 [pid 5609] rmdir("./34") = 0 [pid 5609] mkdir("./35", 0777) = 0 [pid 5609] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 [pid 5609] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5609] close(3) = 0 [pid 5609] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5609] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5676 attached , child_tidptr=0x5555796546d0) = 37 [pid 5676] set_robust_list(0x5555796546e0, 24) = 0 [pid 5609] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5676] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5676] chdir("./35") = 0 [pid 5676] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5676] setpgid(0, 0) = 0 [pid 5676] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5676] write(3, "1000", 4) = 4 [pid 5676] close(3) = 0 [pid 5676] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5676] write(1, "executing program\n", 18) = 18 executing program [pid 5676] memfd_create("syzkaller", 0) = 3 [pid 5676] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5676] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5676] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5676] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5676] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5676] close(3) = 0 [pid 5676] close(4) = 0 [pid 5676] mkdir("./file2", 0777) = 0 [pid 5676] mount("/dev/loop0", "./file2", "jfs", MS_NOEXEC|MS_NOATIME|MS_NODIRATIME|MS_I_VERSION, ",umask=0") = 0 [pid 5676] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5676] chdir("./file2") = 0 [pid 5676] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5676] ioctl(4, LOOP_CLR_FD) = 0 [pid 5676] close(4) = 0 [pid 5676] memfd_create("syzkaller", 0) = 4 [pid 5676] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5676] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8192) = 8192 [pid 5676] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5676] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 127.161514][ T5676] loop0: detected capacity change from 0 to 32768 [pid 5676] close(4) = 0 [pid 5676] memfd_create("syzkaller", 0) = 4 [pid 5676] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5676] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 83968) = 83968 [pid 5676] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5676] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5676] close(4) = 0 [pid 5676] fchown(-1, -1, 0) = -1 EBADF (Bad file descriptor) [pid 5676] open_by_handle_at(-100, NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5676] close(3) = 0 [pid 5676] close(4) = -1 EBADF (Bad file descriptor) [pid 5676] close(5) = -1 EBADF (Bad file descriptor) [pid 5676] close(6) = -1 EBADF (Bad file descriptor) [pid 5676] close(7) = -1 EBADF (Bad file descriptor) [pid 5676] close(8) = -1 EBADF (Bad file descriptor) [pid 5676] close(9) = -1 EBADF (Bad file descriptor) [pid 5676] close(10) = -1 EBADF (Bad file descriptor) [pid 5676] close(11) = -1 EBADF (Bad file descriptor) [pid 5676] close(12) = -1 EBADF (Bad file descriptor) [pid 5676] close(13) = -1 EBADF (Bad file descriptor) [pid 5676] close(14) = -1 EBADF (Bad file descriptor) [pid 5676] close(15) = -1 EBADF (Bad file descriptor) [pid 5676] close(16) = -1 EBADF (Bad file descriptor) [pid 5676] close(17) = -1 EBADF (Bad file descriptor) [pid 5676] close(18) = -1 EBADF (Bad file descriptor) [pid 5676] close(19) = -1 EBADF (Bad file descriptor) [pid 5676] close(20) = -1 EBADF (Bad file descriptor) [pid 5676] close(21) = -1 EBADF (Bad file descriptor) [pid 5676] close(22) = -1 EBADF (Bad file descriptor) [pid 5676] close(23) = -1 EBADF (Bad file descriptor) [pid 5676] close(24) = -1 EBADF (Bad file descriptor) [pid 5676] close(25) = -1 EBADF (Bad file descriptor) [pid 5676] close(26) = -1 EBADF (Bad file descriptor) [pid 5676] close(27) = -1 EBADF (Bad file descriptor) [pid 5676] close(28) = -1 EBADF (Bad file descriptor) [pid 5676] close(29) = -1 EBADF (Bad file descriptor) [pid 5676] exit_group(0) = ? [pid 5676] +++ exited with 0 +++ [pid 5609] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=37, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=20 /* 0.20 s */} --- [pid 5609] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5609] umount2("./35", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] openat(AT_FDCWD, "./35", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5609] fstat(3, {st_mode=S_IFDIR|0700, st_size=80, ...}) = 0 [pid 5609] getdents64(3, 0x555579655790 /* 4 entries */, 32768) = 112 [pid 5609] umount2("./35/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5609] umount2("./35/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] newfstatat(AT_FDCWD, "./35/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] umount2("./35/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] openat(AT_FDCWD, "./35/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5609] fstat(4, {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0 [pid 5609] getdents64(4, 0x55557965d7d0 /* 2 entries */, 32768) = 48 [pid 5609] getdents64(4, 0x55557965d7d0 /* 0 entries */, 32768) = 0 [pid 5609] close(4) = 0 [pid 5609] rmdir("./35/file2") = 0 [pid 5609] umount2("./35/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] newfstatat(AT_FDCWD, "./35/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] unlink("./35/binderfs") = 0 [pid 5609] getdents64(3, 0x555579655790 /* 0 entries */, 32768) = 0 [pid 5609] close(3) = 0 [pid 5609] rmdir("./35") = 0 [pid 5609] mkdir("./36", 0777) = 0 [pid 5609] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 [pid 5609] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5609] close(3) = 0 [pid 5609] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5609] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5677 attached [pid 5677] set_robust_list(0x5555796546e0, 24 [pid 5609] <... clone resumed>, child_tidptr=0x5555796546d0) = 38 [pid 5677] <... set_robust_list resumed>) = 0 [pid 5677] rt_sigprocmask(SIG_SETMASK, [] [pid 5609] rt_sigprocmask(SIG_SETMASK, [] [pid 5677] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5677] chdir("./36" [pid 5609] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5677] <... chdir resumed>) = 0 [pid 5677] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5677] setpgid(0, 0) = 0 [pid 5677] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5677] write(3, "1000", 4) = 4 [pid 5677] close(3) = 0 [pid 5677] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5677] write(1, "executing program\n", 18) = 18 executing program [pid 5677] memfd_create("syzkaller", 0) = 3 [pid 5677] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5677] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5677] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5677] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5677] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5677] close(3) = 0 [pid 5677] close(4) = 0 [pid 5677] mkdir("./file2", 0777) = 0 [pid 5677] mount("/dev/loop0", "./file2", "jfs", MS_NOEXEC|MS_NOATIME|MS_NODIRATIME|MS_I_VERSION, ",umask=0") = 0 [pid 5677] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5677] chdir("./file2") = 0 [pid 5677] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5677] ioctl(4, LOOP_CLR_FD) = 0 [pid 5677] close(4) = 0 [pid 5677] memfd_create("syzkaller", 0) = 4 [pid 5677] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5677] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8192) = 8192 [ 127.754286][ T5677] loop0: detected capacity change from 0 to 32768 [pid 5677] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5677] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5677] close(4) = 0 [pid 5677] memfd_create("syzkaller", 0) = 4 [pid 5677] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5677] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 83968) = 83968 [pid 5677] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5677] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5677] close(4) = 0 [pid 5677] fchown(-1, -1, 0) = -1 EBADF (Bad file descriptor) [pid 5677] open_by_handle_at(-100, NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5677] close(3) = 0 [pid 5677] close(4) = -1 EBADF (Bad file descriptor) [pid 5677] close(5) = -1 EBADF (Bad file descriptor) [pid 5677] close(6) = -1 EBADF (Bad file descriptor) [pid 5677] close(7) = -1 EBADF (Bad file descriptor) [pid 5677] close(8) = -1 EBADF (Bad file descriptor) [pid 5677] close(9) = -1 EBADF (Bad file descriptor) [pid 5677] close(10) = -1 EBADF (Bad file descriptor) [pid 5677] close(11) = -1 EBADF (Bad file descriptor) [pid 5677] close(12) = -1 EBADF (Bad file descriptor) [pid 5677] close(13) = -1 EBADF (Bad file descriptor) [pid 5677] close(14) = -1 EBADF (Bad file descriptor) [pid 5677] close(15) = -1 EBADF (Bad file descriptor) [pid 5677] close(16) = -1 EBADF (Bad file descriptor) [pid 5677] close(17) = -1 EBADF (Bad file descriptor) [pid 5677] close(18) = -1 EBADF (Bad file descriptor) [pid 5677] close(19) = -1 EBADF (Bad file descriptor) [pid 5677] close(20) = -1 EBADF (Bad file descriptor) [pid 5677] close(21) = -1 EBADF (Bad file descriptor) [pid 5677] close(22) = -1 EBADF (Bad file descriptor) [pid 5677] close(23) = -1 EBADF (Bad file descriptor) [pid 5677] close(24) = -1 EBADF (Bad file descriptor) [pid 5677] close(25) = -1 EBADF (Bad file descriptor) [pid 5677] close(26) = -1 EBADF (Bad file descriptor) [pid 5677] close(27) = -1 EBADF (Bad file descriptor) [pid 5677] close(28) = -1 EBADF (Bad file descriptor) [pid 5677] close(29) = -1 EBADF (Bad file descriptor) [pid 5677] exit_group(0) = ? [pid 5677] +++ exited with 0 +++ [pid 5609] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=38, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=20 /* 0.20 s */} --- [pid 5609] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5609] umount2("./36", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] openat(AT_FDCWD, "./36", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5609] fstat(3, {st_mode=S_IFDIR|0700, st_size=80, ...}) = 0 [pid 5609] getdents64(3, 0x555579655790 /* 4 entries */, 32768) = 112 [pid 5609] umount2("./36/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5609] umount2("./36/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] newfstatat(AT_FDCWD, "./36/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] umount2("./36/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] openat(AT_FDCWD, "./36/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5609] fstat(4, {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0 [pid 5609] getdents64(4, 0x55557965d7d0 /* 2 entries */, 32768) = 48 [pid 5609] getdents64(4, 0x55557965d7d0 /* 0 entries */, 32768) = 0 [pid 5609] close(4) = 0 [pid 5609] rmdir("./36/file2") = 0 [pid 5609] umount2("./36/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] newfstatat(AT_FDCWD, "./36/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] unlink("./36/binderfs") = 0 [pid 5609] getdents64(3, 0x555579655790 /* 0 entries */, 32768) = 0 [pid 5609] close(3) = 0 [pid 5609] rmdir("./36") = 0 [pid 5609] mkdir("./37", 0777) = 0 [pid 5609] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 [pid 5609] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5609] close(3) = 0 [pid 5609] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5609] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5678 attached [pid 5678] set_robust_list(0x5555796546e0, 24 [pid 5609] <... clone resumed>, child_tidptr=0x5555796546d0) = 39 [pid 5678] <... set_robust_list resumed>) = 0 [pid 5678] rt_sigprocmask(SIG_SETMASK, [] [pid 5609] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5678] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5678] chdir("./37") = 0 [pid 5678] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5678] setpgid(0, 0) = 0 [pid 5678] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5678] write(3, "1000", 4) = 4 [pid 5678] close(3) = 0 [pid 5678] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5678] write(1, "executing program\n", 18) = 18 executing program [pid 5678] memfd_create("syzkaller", 0) = 3 [pid 5678] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5678] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5678] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5678] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5678] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5678] close(3) = 0 [pid 5678] close(4) = 0 [pid 5678] mkdir("./file2", 0777) = 0 [pid 5678] mount("/dev/loop0", "./file2", "jfs", MS_NOEXEC|MS_NOATIME|MS_NODIRATIME|MS_I_VERSION, ",umask=0") = 0 [pid 5678] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5678] chdir("./file2") = 0 [pid 5678] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5678] ioctl(4, LOOP_CLR_FD) = 0 [pid 5678] close(4) = 0 [pid 5678] memfd_create("syzkaller", 0) = 4 [pid 5678] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5678] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8192) = 8192 [pid 5678] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5678] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5678] close(4) = 0 [ 128.334207][ T5678] loop0: detected capacity change from 0 to 32768 [pid 5678] memfd_create("syzkaller", 0) = 4 [pid 5678] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5678] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 83968) = 83968 [pid 5678] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5678] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5678] close(4) = 0 [pid 5678] fchown(-1, -1, 0) = -1 EBADF (Bad file descriptor) [pid 5678] open_by_handle_at(-100, NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5678] close(3) = 0 [pid 5678] close(4) = -1 EBADF (Bad file descriptor) [pid 5678] close(5) = -1 EBADF (Bad file descriptor) [pid 5678] close(6) = -1 EBADF (Bad file descriptor) [pid 5678] close(7) = -1 EBADF (Bad file descriptor) [pid 5678] close(8) = -1 EBADF (Bad file descriptor) [pid 5678] close(9) = -1 EBADF (Bad file descriptor) [pid 5678] close(10) = -1 EBADF (Bad file descriptor) [pid 5678] close(11) = -1 EBADF (Bad file descriptor) [pid 5678] close(12) = -1 EBADF (Bad file descriptor) [pid 5678] close(13) = -1 EBADF (Bad file descriptor) [pid 5678] close(14) = -1 EBADF (Bad file descriptor) [pid 5678] close(15) = -1 EBADF (Bad file descriptor) [pid 5678] close(16) = -1 EBADF (Bad file descriptor) [pid 5678] close(17) = -1 EBADF (Bad file descriptor) [pid 5678] close(18) = -1 EBADF (Bad file descriptor) [pid 5678] close(19) = -1 EBADF (Bad file descriptor) [pid 5678] close(20) = -1 EBADF (Bad file descriptor) [pid 5678] close(21) = -1 EBADF (Bad file descriptor) [pid 5678] close(22) = -1 EBADF (Bad file descriptor) [pid 5678] close(23) = -1 EBADF (Bad file descriptor) [pid 5678] close(24) = -1 EBADF (Bad file descriptor) [pid 5678] close(25) = -1 EBADF (Bad file descriptor) [pid 5678] close(26) = -1 EBADF (Bad file descriptor) [pid 5678] close(27) = -1 EBADF (Bad file descriptor) [pid 5678] close(28) = -1 EBADF (Bad file descriptor) [pid 5678] close(29) = -1 EBADF (Bad file descriptor) [pid 5678] exit_group(0) = ? [pid 5678] +++ exited with 0 +++ [pid 5609] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=39, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=23 /* 0.23 s */} --- [pid 5609] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5609] umount2("./37", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] openat(AT_FDCWD, "./37", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5609] fstat(3, {st_mode=S_IFDIR|0700, st_size=80, ...}) = 0 [pid 5609] getdents64(3, 0x555579655790 /* 4 entries */, 32768) = 112 [pid 5609] umount2("./37/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5609] umount2("./37/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] newfstatat(AT_FDCWD, "./37/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] umount2("./37/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] openat(AT_FDCWD, "./37/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5609] fstat(4, {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0 [pid 5609] getdents64(4, 0x55557965d7d0 /* 2 entries */, 32768) = 48 [pid 5609] getdents64(4, 0x55557965d7d0 /* 0 entries */, 32768) = 0 [pid 5609] close(4) = 0 [pid 5609] rmdir("./37/file2") = 0 [pid 5609] umount2("./37/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] newfstatat(AT_FDCWD, "./37/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] unlink("./37/binderfs") = 0 [pid 5609] getdents64(3, 0x555579655790 /* 0 entries */, 32768) = 0 [pid 5609] close(3) = 0 [pid 5609] rmdir("./37") = 0 [pid 5609] mkdir("./38", 0777) = 0 [pid 5609] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 [pid 5609] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5609] close(3) = 0 [pid 5609] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5609] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555796546d0) = 40 [pid 5609] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-upstream-fs/strace-static-x86_64: Process 5679 attached [pid 5679] set_robust_list(0x5555796546e0, 24) = 0 [pid 5679] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5679] chdir("./38") = 0 [pid 5679] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5679] setpgid(0, 0) = 0 [pid 5679] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5679] write(3, "1000", 4) = 4 [pid 5679] close(3) = 0 [pid 5679] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5679] write(1, "executing program\n", 18) = 18 [pid 5679] memfd_create("syzkaller", 0) = 3 [pid 5679] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5679] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5679] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5679] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5679] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5679] close(3) = 0 [pid 5679] close(4) = 0 [pid 5679] mkdir("./file2", 0777) = 0 [pid 5679] mount("/dev/loop0", "./file2", "jfs", MS_NOEXEC|MS_NOATIME|MS_NODIRATIME|MS_I_VERSION, ",umask=0") = 0 [pid 5679] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5679] chdir("./file2") = 0 [pid 5679] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5679] ioctl(4, LOOP_CLR_FD) = 0 [pid 5679] close(4) = 0 [pid 5679] memfd_create("syzkaller", 0) = 4 [pid 5679] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5679] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8192) = 8192 [pid 5679] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5679] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5679] close(4) = 0 [pid 5679] memfd_create("syzkaller", 0) = 4 [pid 5679] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5679] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 83968) = 83968 [ 128.902019][ T5679] loop0: detected capacity change from 0 to 32768 [pid 5679] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5679] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5679] close(4) = 0 [pid 5679] fchown(-1, -1, 0) = -1 EBADF (Bad file descriptor) [pid 5679] open_by_handle_at(-100, NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5679] close(3) = 0 [pid 5679] close(4) = -1 EBADF (Bad file descriptor) [pid 5679] close(5) = -1 EBADF (Bad file descriptor) [pid 5679] close(6) = -1 EBADF (Bad file descriptor) [pid 5679] close(7) = -1 EBADF (Bad file descriptor) [pid 5679] close(8) = -1 EBADF (Bad file descriptor) [pid 5679] close(9) = -1 EBADF (Bad file descriptor) [pid 5679] close(10) = -1 EBADF (Bad file descriptor) [pid 5679] close(11) = -1 EBADF (Bad file descriptor) [pid 5679] close(12) = -1 EBADF (Bad file descriptor) [pid 5679] close(13) = -1 EBADF (Bad file descriptor) [pid 5679] close(14) = -1 EBADF (Bad file descriptor) [pid 5679] close(15) = -1 EBADF (Bad file descriptor) [pid 5679] close(16) = -1 EBADF (Bad file descriptor) [pid 5679] close(17) = -1 EBADF (Bad file descriptor) [pid 5679] close(18) = -1 EBADF (Bad file descriptor) [pid 5679] close(19) = -1 EBADF (Bad file descriptor) [pid 5679] close(20) = -1 EBADF (Bad file descriptor) [pid 5679] close(21) = -1 EBADF (Bad file descriptor) [pid 5679] close(22) = -1 EBADF (Bad file descriptor) [pid 5679] close(23) = -1 EBADF (Bad file descriptor) [pid 5679] close(24) = -1 EBADF (Bad file descriptor) [pid 5679] close(25) = -1 EBADF (Bad file descriptor) [pid 5679] close(26) = -1 EBADF (Bad file descriptor) [pid 5679] close(27) = -1 EBADF (Bad file descriptor) [pid 5679] close(28) = -1 EBADF (Bad file descriptor) [pid 5679] close(29) = -1 EBADF (Bad file descriptor) [pid 5679] exit_group(0) = ? [pid 5679] +++ exited with 0 +++ [pid 5609] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=40, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=21 /* 0.21 s */} --- [pid 5609] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5609] umount2("./38", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] openat(AT_FDCWD, "./38", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5609] fstat(3, {st_mode=S_IFDIR|0700, st_size=80, ...}) = 0 [pid 5609] getdents64(3, 0x555579655790 /* 4 entries */, 32768) = 112 [pid 5609] umount2("./38/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5609] umount2("./38/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] newfstatat(AT_FDCWD, "./38/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] umount2("./38/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] openat(AT_FDCWD, "./38/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5609] fstat(4, {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0 [pid 5609] getdents64(4, 0x55557965d7d0 /* 2 entries */, 32768) = 48 [pid 5609] getdents64(4, 0x55557965d7d0 /* 0 entries */, 32768) = 0 [pid 5609] close(4) = 0 [pid 5609] rmdir("./38/file2") = 0 [pid 5609] umount2("./38/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] newfstatat(AT_FDCWD, "./38/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] unlink("./38/binderfs") = 0 [pid 5609] getdents64(3, 0x555579655790 /* 0 entries */, 32768) = 0 [pid 5609] close(3) = 0 [pid 5609] rmdir("./38") = 0 [pid 5609] mkdir("./39", 0777) = 0 [pid 5609] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 [pid 5609] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5609] close(3) = 0 [pid 5609] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5609] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5680 attached , child_tidptr=0x5555796546d0) = 41 [pid 5680] set_robust_list(0x5555796546e0, 24) = 0 [pid 5680] rt_sigprocmask(SIG_SETMASK, [] [pid 5609] rt_sigprocmask(SIG_SETMASK, [] [pid 5680] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5609] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5680] chdir("./39") = 0 [pid 5680] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5680] setpgid(0, 0) = 0 [pid 5680] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5680] write(3, "1000", 4) = 4 [pid 5680] close(3) = 0 [pid 5680] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5680] write(1, "executing program\n", 18) = 18 executing program [pid 5680] memfd_create("syzkaller", 0) = 3 [pid 5680] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5680] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5680] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5680] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5680] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5680] close(3) = 0 [pid 5680] close(4) = 0 [pid 5680] mkdir("./file2", 0777) = 0 [pid 5680] mount("/dev/loop0", "./file2", "jfs", MS_NOEXEC|MS_NOATIME|MS_NODIRATIME|MS_I_VERSION, ",umask=0") = 0 [pid 5680] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5680] chdir("./file2") = 0 [pid 5680] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5680] ioctl(4, LOOP_CLR_FD) = 0 [pid 5680] close(4) = 0 [pid 5680] memfd_create("syzkaller", 0) = 4 [pid 5680] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5680] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8192) = 8192 [pid 5680] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5680] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5680] close(4) = 0 [pid 5680] memfd_create("syzkaller", 0) = 4 [pid 5680] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5680] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 83968) = 83968 [pid 5680] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5680] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5680] close(4) = 0 [pid 5680] fchown(-1, -1, 0) = -1 EBADF (Bad file descriptor) [pid 5680] open_by_handle_at(-100, NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5680] close(3) = 0 [pid 5680] close(4) = -1 EBADF (Bad file descriptor) [ 129.438466][ T5680] loop0: detected capacity change from 0 to 32768 [pid 5680] close(5) = -1 EBADF (Bad file descriptor) [pid 5680] close(6) = -1 EBADF (Bad file descriptor) [pid 5680] close(7) = -1 EBADF (Bad file descriptor) [pid 5680] close(8) = -1 EBADF (Bad file descriptor) [pid 5680] close(9) = -1 EBADF (Bad file descriptor) [pid 5680] close(10) = -1 EBADF (Bad file descriptor) [pid 5680] close(11) = -1 EBADF (Bad file descriptor) [pid 5680] close(12) = -1 EBADF (Bad file descriptor) [pid 5680] close(13) = -1 EBADF (Bad file descriptor) [pid 5680] close(14) = -1 EBADF (Bad file descriptor) [pid 5680] close(15) = -1 EBADF (Bad file descriptor) [pid 5680] close(16) = -1 EBADF (Bad file descriptor) [pid 5680] close(17) = -1 EBADF (Bad file descriptor) [pid 5680] close(18) = -1 EBADF (Bad file descriptor) [pid 5680] close(19) = -1 EBADF (Bad file descriptor) [pid 5680] close(20) = -1 EBADF (Bad file descriptor) [pid 5680] close(21) = -1 EBADF (Bad file descriptor) [pid 5680] close(22) = -1 EBADF (Bad file descriptor) [pid 5680] close(23) = -1 EBADF (Bad file descriptor) [pid 5680] close(24) = -1 EBADF (Bad file descriptor) [pid 5680] close(25) = -1 EBADF (Bad file descriptor) [pid 5680] close(26) = -1 EBADF (Bad file descriptor) [pid 5680] close(27) = -1 EBADF (Bad file descriptor) [pid 5680] close(28) = -1 EBADF (Bad file descriptor) [pid 5680] close(29) = -1 EBADF (Bad file descriptor) [pid 5680] exit_group(0) = ? [pid 5680] +++ exited with 0 +++ [pid 5609] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=41, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=20 /* 0.20 s */} --- [pid 5609] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5609] umount2("./39", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] openat(AT_FDCWD, "./39", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5609] fstat(3, {st_mode=S_IFDIR|0700, st_size=80, ...}) = 0 [pid 5609] getdents64(3, 0x555579655790 /* 4 entries */, 32768) = 112 [pid 5609] umount2("./39/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5609] umount2("./39/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] newfstatat(AT_FDCWD, "./39/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] umount2("./39/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] openat(AT_FDCWD, "./39/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5609] fstat(4, {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0 [pid 5609] getdents64(4, 0x55557965d7d0 /* 2 entries */, 32768) = 48 [pid 5609] getdents64(4, 0x55557965d7d0 /* 0 entries */, 32768) = 0 [pid 5609] close(4) = 0 [pid 5609] rmdir("./39/file2") = 0 [pid 5609] umount2("./39/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] newfstatat(AT_FDCWD, "./39/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] unlink("./39/binderfs") = 0 [pid 5609] getdents64(3, 0x555579655790 /* 0 entries */, 32768) = 0 [pid 5609] close(3) = 0 [pid 5609] rmdir("./39") = 0 [pid 5609] mkdir("./40", 0777) = 0 [pid 5609] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 [pid 5609] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5609] close(3) = 0 [pid 5609] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5609] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5681 attached , child_tidptr=0x5555796546d0) = 42 [pid 5609] rt_sigprocmask(SIG_SETMASK, [] [pid 5681] set_robust_list(0x5555796546e0, 24) = 0 [pid 5609] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5681] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5681] chdir("./40") = 0 [pid 5681] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5681] setpgid(0, 0) = 0 [pid 5681] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5681] write(3, "1000", 4) = 4 [pid 5681] close(3) = 0 [pid 5681] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5681] write(1, "executing program\n", 18) = 18 [pid 5681] memfd_create("syzkaller", 0) = 3 [pid 5681] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5681] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5681] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5681] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5681] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5681] close(3) = 0 [pid 5681] close(4) = 0 [pid 5681] mkdir("./file2", 0777) = 0 [pid 5681] mount("/dev/loop0", "./file2", "jfs", MS_NOEXEC|MS_NOATIME|MS_NODIRATIME|MS_I_VERSION, ",umask=0") = 0 [pid 5681] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5681] chdir("./file2") = 0 [pid 5681] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5681] ioctl(4, LOOP_CLR_FD) = 0 [pid 5681] close(4) = 0 [pid 5681] memfd_create("syzkaller", 0) = 4 [pid 5681] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5681] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8192) = 8192 [pid 5681] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5681] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5681] close(4) = 0 [pid 5681] memfd_create("syzkaller", 0) = 4 [ 129.956830][ T5681] loop0: detected capacity change from 0 to 32768 [pid 5681] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5681] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 83968) = 83968 [pid 5681] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5681] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5681] close(4) = 0 [pid 5681] fchown(-1, -1, 0) = -1 EBADF (Bad file descriptor) [pid 5681] open_by_handle_at(-100, NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5681] close(3) = 0 [pid 5681] close(4) = -1 EBADF (Bad file descriptor) [pid 5681] close(5) = -1 EBADF (Bad file descriptor) [pid 5681] close(6) = -1 EBADF (Bad file descriptor) [pid 5681] close(7) = -1 EBADF (Bad file descriptor) [pid 5681] close(8) = -1 EBADF (Bad file descriptor) [pid 5681] close(9) = -1 EBADF (Bad file descriptor) [pid 5681] close(10) = -1 EBADF (Bad file descriptor) [pid 5681] close(11) = -1 EBADF (Bad file descriptor) [pid 5681] close(12) = -1 EBADF (Bad file descriptor) [pid 5681] close(13) = -1 EBADF (Bad file descriptor) [pid 5681] close(14) = -1 EBADF (Bad file descriptor) [pid 5681] close(15) = -1 EBADF (Bad file descriptor) [pid 5681] close(16) = -1 EBADF (Bad file descriptor) [pid 5681] close(17) = -1 EBADF (Bad file descriptor) [pid 5681] close(18) = -1 EBADF (Bad file descriptor) [pid 5681] close(19) = -1 EBADF (Bad file descriptor) [pid 5681] close(20) = -1 EBADF (Bad file descriptor) [pid 5681] close(21) = -1 EBADF (Bad file descriptor) [pid 5681] close(22) = -1 EBADF (Bad file descriptor) [pid 5681] close(23) = -1 EBADF (Bad file descriptor) [pid 5681] close(24) = -1 EBADF (Bad file descriptor) [pid 5681] close(25) = -1 EBADF (Bad file descriptor) [pid 5681] close(26) = -1 EBADF (Bad file descriptor) [pid 5681] close(27) = -1 EBADF (Bad file descriptor) [pid 5681] close(28) = -1 EBADF (Bad file descriptor) [pid 5681] close(29) = -1 EBADF (Bad file descriptor) [pid 5681] exit_group(0) = ? [pid 5681] +++ exited with 0 +++ [pid 5609] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=42, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=20 /* 0.20 s */} --- [pid 5609] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5609] umount2("./40", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] openat(AT_FDCWD, "./40", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5609] fstat(3, {st_mode=S_IFDIR|0700, st_size=80, ...}) = 0 [pid 5609] getdents64(3, 0x555579655790 /* 4 entries */, 32768) = 112 [pid 5609] umount2("./40/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5609] umount2("./40/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] newfstatat(AT_FDCWD, "./40/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] umount2("./40/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] openat(AT_FDCWD, "./40/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5609] fstat(4, {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0 [pid 5609] getdents64(4, 0x55557965d7d0 /* 2 entries */, 32768) = 48 [pid 5609] getdents64(4, 0x55557965d7d0 /* 0 entries */, 32768) = 0 [pid 5609] close(4) = 0 [pid 5609] rmdir("./40/file2") = 0 [pid 5609] umount2("./40/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] newfstatat(AT_FDCWD, "./40/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] unlink("./40/binderfs") = 0 [pid 5609] getdents64(3, 0x555579655790 /* 0 entries */, 32768) = 0 [pid 5609] close(3) = 0 [pid 5609] rmdir("./40") = 0 [pid 5609] mkdir("./41", 0777) = 0 [pid 5609] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 [pid 5609] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5609] close(3) = 0 [pid 5609] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5609] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5683 attached [pid 5683] set_robust_list(0x5555796546e0, 24) = 0 [pid 5683] rt_sigprocmask(SIG_SETMASK, [] [pid 5609] <... clone resumed>, child_tidptr=0x5555796546d0) = 43 [pid 5683] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5683] chdir("./41") = 0 [pid 5683] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5683] setpgid(0, 0) = 0 [pid 5683] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5609] rt_sigprocmask(SIG_SETMASK, [] [pid 5683] write(3, "1000", 4 [pid 5609] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5683] <... write resumed>) = 4 [pid 5683] close(3) = 0 [pid 5683] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5683] write(1, "executing program\n", 18) = 18 executing program [pid 5683] memfd_create("syzkaller", 0) = 3 [pid 5683] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5683] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5683] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5683] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5683] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5683] close(3) = 0 [pid 5683] close(4) = 0 [pid 5683] mkdir("./file2", 0777) = 0 [pid 5683] mount("/dev/loop0", "./file2", "jfs", MS_NOEXEC|MS_NOATIME|MS_NODIRATIME|MS_I_VERSION, ",umask=0") = 0 [pid 5683] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [ 130.477031][ T5683] loop0: detected capacity change from 0 to 32768 [pid 5683] chdir("./file2") = 0 [pid 5683] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5683] ioctl(4, LOOP_CLR_FD) = 0 [pid 5683] close(4) = 0 [pid 5683] memfd_create("syzkaller", 0) = 4 [pid 5683] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5683] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8192) = 8192 [pid 5683] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5683] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5683] close(4) = 0 [pid 5683] memfd_create("syzkaller", 0) = 4 [pid 5683] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5683] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 83968) = 83968 [pid 5683] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5683] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5683] close(4) = 0 [pid 5683] fchown(-1, -1, 0) = -1 EBADF (Bad file descriptor) [pid 5683] open_by_handle_at(-100, NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5683] close(3) = 0 [pid 5683] close(4) = -1 EBADF (Bad file descriptor) [pid 5683] close(5) = -1 EBADF (Bad file descriptor) [pid 5683] close(6) = -1 EBADF (Bad file descriptor) [pid 5683] close(7) = -1 EBADF (Bad file descriptor) [pid 5683] close(8) = -1 EBADF (Bad file descriptor) [pid 5683] close(9) = -1 EBADF (Bad file descriptor) [pid 5683] close(10) = -1 EBADF (Bad file descriptor) [pid 5683] close(11) = -1 EBADF (Bad file descriptor) [pid 5683] close(12) = -1 EBADF (Bad file descriptor) [pid 5683] close(13) = -1 EBADF (Bad file descriptor) [pid 5683] close(14) = -1 EBADF (Bad file descriptor) [pid 5683] close(15) = -1 EBADF (Bad file descriptor) [pid 5683] close(16) = -1 EBADF (Bad file descriptor) [pid 5683] close(17) = -1 EBADF (Bad file descriptor) [pid 5683] close(18) = -1 EBADF (Bad file descriptor) [pid 5683] close(19) = -1 EBADF (Bad file descriptor) [pid 5683] close(20) = -1 EBADF (Bad file descriptor) [pid 5683] close(21) = -1 EBADF (Bad file descriptor) [pid 5683] close(22) = -1 EBADF (Bad file descriptor) [pid 5683] close(23) = -1 EBADF (Bad file descriptor) [pid 5683] close(24) = -1 EBADF (Bad file descriptor) [pid 5683] close(25) = -1 EBADF (Bad file descriptor) [pid 5683] close(26) = -1 EBADF (Bad file descriptor) [pid 5683] close(27) = -1 EBADF (Bad file descriptor) [pid 5683] close(28) = -1 EBADF (Bad file descriptor) [pid 5683] close(29) = -1 EBADF (Bad file descriptor) [pid 5683] exit_group(0) = ? [pid 5683] +++ exited with 0 +++ [pid 5609] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=43, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=18 /* 0.18 s */} --- [pid 5609] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5609] umount2("./41", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] openat(AT_FDCWD, "./41", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5609] fstat(3, {st_mode=S_IFDIR|0700, st_size=80, ...}) = 0 [pid 5609] getdents64(3, 0x555579655790 /* 4 entries */, 32768) = 112 [pid 5609] umount2("./41/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5609] umount2("./41/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] newfstatat(AT_FDCWD, "./41/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] umount2("./41/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] openat(AT_FDCWD, "./41/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5609] fstat(4, {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0 [pid 5609] getdents64(4, 0x55557965d7d0 /* 2 entries */, 32768) = 48 [pid 5609] getdents64(4, 0x55557965d7d0 /* 0 entries */, 32768) = 0 [pid 5609] close(4) = 0 [pid 5609] rmdir("./41/file2") = 0 [pid 5609] umount2("./41/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] newfstatat(AT_FDCWD, "./41/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] unlink("./41/binderfs") = 0 [pid 5609] getdents64(3, 0x555579655790 /* 0 entries */, 32768) = 0 [pid 5609] close(3) = 0 [pid 5609] rmdir("./41") = 0 [pid 5609] mkdir("./42", 0777) = 0 [pid 5609] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 [pid 5609] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5609] close(3) = 0 [pid 5609] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5609] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555796546d0) = 44 [pid 5609] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 ci2-upstream-fs/strace-static-x86_64: Process 5685 attached [pid 5685] set_robust_list(0x5555796546e0, 24) = 0 [pid 5685] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5685] chdir("./42") = 0 [pid 5685] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5685] setpgid(0, 0) = 0 [pid 5685] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5685] write(3, "1000", 4) = 4 [pid 5685] close(3) = 0 [pid 5685] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5685] write(1, "executing program\n", 18) = 18 [pid 5685] memfd_create("syzkaller", 0) = 3 [pid 5685] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 executing program [pid 5685] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5685] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5685] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5685] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5685] close(3) = 0 [pid 5685] close(4) = 0 [pid 5685] mkdir("./file2", 0777) = 0 [pid 5685] mount("/dev/loop0", "./file2", "jfs", MS_NOEXEC|MS_NOATIME|MS_NODIRATIME|MS_I_VERSION, ",umask=0") = 0 [pid 5685] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5685] chdir("./file2") = 0 [pid 5685] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5685] ioctl(4, LOOP_CLR_FD) = 0 [pid 5685] close(4) = 0 [pid 5685] memfd_create("syzkaller", 0) = 4 [pid 5685] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5685] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8192) = 8192 [pid 5685] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5685] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5685] close(4) = 0 [pid 5685] memfd_create("syzkaller", 0) = 4 [pid 5685] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5685] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 83968) = 83968 [pid 5685] munmap(0x7ffa6af59000, 138412032) = 0 [ 131.003468][ T5685] loop0: detected capacity change from 0 to 32768 [pid 5685] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5685] close(4) = 0 [pid 5685] fchown(-1, -1, 0) = -1 EBADF (Bad file descriptor) [pid 5685] open_by_handle_at(-100, NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5685] close(3) = 0 [pid 5685] close(4) = -1 EBADF (Bad file descriptor) [pid 5685] close(5) = -1 EBADF (Bad file descriptor) [pid 5685] close(6) = -1 EBADF (Bad file descriptor) [pid 5685] close(7) = -1 EBADF (Bad file descriptor) [pid 5685] close(8) = -1 EBADF (Bad file descriptor) [pid 5685] close(9) = -1 EBADF (Bad file descriptor) [pid 5685] close(10) = -1 EBADF (Bad file descriptor) [pid 5685] close(11) = -1 EBADF (Bad file descriptor) [pid 5685] close(12) = -1 EBADF (Bad file descriptor) [pid 5685] close(13) = -1 EBADF (Bad file descriptor) [pid 5685] close(14) = -1 EBADF (Bad file descriptor) [pid 5685] close(15) = -1 EBADF (Bad file descriptor) [pid 5685] close(16) = -1 EBADF (Bad file descriptor) [pid 5685] close(17) = -1 EBADF (Bad file descriptor) [pid 5685] close(18) = -1 EBADF (Bad file descriptor) [pid 5685] close(19) = -1 EBADF (Bad file descriptor) [pid 5685] close(20) = -1 EBADF (Bad file descriptor) [pid 5685] close(21) = -1 EBADF (Bad file descriptor) [pid 5685] close(22) = -1 EBADF (Bad file descriptor) [pid 5685] close(23) = -1 EBADF (Bad file descriptor) [pid 5685] close(24) = -1 EBADF (Bad file descriptor) [pid 5685] close(25) = -1 EBADF (Bad file descriptor) [pid 5685] close(26) = -1 EBADF (Bad file descriptor) [pid 5685] close(27) = -1 EBADF (Bad file descriptor) [pid 5685] close(28) = -1 EBADF (Bad file descriptor) [pid 5685] close(29) = -1 EBADF (Bad file descriptor) [pid 5685] exit_group(0) = ? [pid 5685] +++ exited with 0 +++ [pid 5609] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=44, si_uid=0, si_status=0, si_utime=0, si_stime=24 /* 0.24 s */} --- [pid 5609] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5609] umount2("./42", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] openat(AT_FDCWD, "./42", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5609] fstat(3, {st_mode=S_IFDIR|0700, st_size=80, ...}) = 0 [pid 5609] getdents64(3, 0x555579655790 /* 4 entries */, 32768) = 112 [pid 5609] umount2("./42/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5609] umount2("./42/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] newfstatat(AT_FDCWD, "./42/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] umount2("./42/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] openat(AT_FDCWD, "./42/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5609] fstat(4, {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0 [pid 5609] getdents64(4, 0x55557965d7d0 /* 2 entries */, 32768) = 48 [pid 5609] getdents64(4, 0x55557965d7d0 /* 0 entries */, 32768) = 0 [pid 5609] close(4) = 0 [pid 5609] rmdir("./42/file2") = 0 [pid 5609] umount2("./42/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] newfstatat(AT_FDCWD, "./42/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] unlink("./42/binderfs") = 0 [pid 5609] getdents64(3, 0x555579655790 /* 0 entries */, 32768) = 0 [pid 5609] close(3) = 0 [pid 5609] rmdir("./42") = 0 [pid 5609] mkdir("./43", 0777) = 0 [pid 5609] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 [pid 5609] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5609] close(3) = 0 [pid 5609] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5609] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5686 attached , child_tidptr=0x5555796546d0) = 45 [pid 5609] rt_sigprocmask(SIG_SETMASK, [] [pid 5686] set_robust_list(0x5555796546e0, 24) = 0 [pid 5609] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5686] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5686] chdir("./43") = 0 [pid 5686] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5686] setpgid(0, 0) = 0 [pid 5686] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5686] write(3, "1000", 4) = 4 [pid 5686] close(3) = 0 [pid 5686] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5686] write(1, "executing program\n", 18) = 18 executing program [pid 5686] memfd_create("syzkaller", 0) = 3 [pid 5686] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5686] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5686] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5686] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5686] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5686] close(3) = 0 [pid 5686] close(4) = 0 [pid 5686] mkdir("./file2", 0777) = 0 [pid 5686] mount("/dev/loop0", "./file2", "jfs", MS_NOEXEC|MS_NOATIME|MS_NODIRATIME|MS_I_VERSION, ",umask=0") = 0 [pid 5686] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5686] chdir("./file2") = 0 [pid 5686] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5686] ioctl(4, LOOP_CLR_FD) = 0 [pid 5686] close(4) = 0 [pid 5686] memfd_create("syzkaller", 0) = 4 [pid 5686] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5686] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8192) = 8192 [pid 5686] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5686] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5686] close(4) = 0 [pid 5686] memfd_create("syzkaller", 0) = 4 [pid 5686] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5686] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 83968) = 83968 [pid 5686] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5686] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 131.549788][ T5686] loop0: detected capacity change from 0 to 32768 [pid 5686] close(4) = 0 [pid 5686] fchown(-1, -1, 0) = -1 EBADF (Bad file descriptor) [pid 5686] open_by_handle_at(-100, NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5686] close(3) = 0 [pid 5686] close(4) = -1 EBADF (Bad file descriptor) [pid 5686] close(5) = -1 EBADF (Bad file descriptor) [pid 5686] close(6) = -1 EBADF (Bad file descriptor) [pid 5686] close(7) = -1 EBADF (Bad file descriptor) [pid 5686] close(8) = -1 EBADF (Bad file descriptor) [pid 5686] close(9) = -1 EBADF (Bad file descriptor) [pid 5686] close(10) = -1 EBADF (Bad file descriptor) [pid 5686] close(11) = -1 EBADF (Bad file descriptor) [pid 5686] close(12) = -1 EBADF (Bad file descriptor) [pid 5686] close(13) = -1 EBADF (Bad file descriptor) [pid 5686] close(14) = -1 EBADF (Bad file descriptor) [pid 5686] close(15) = -1 EBADF (Bad file descriptor) [pid 5686] close(16) = -1 EBADF (Bad file descriptor) [pid 5686] close(17) = -1 EBADF (Bad file descriptor) [pid 5686] close(18) = -1 EBADF (Bad file descriptor) [pid 5686] close(19) = -1 EBADF (Bad file descriptor) [pid 5686] close(20) = -1 EBADF (Bad file descriptor) [pid 5686] close(21) = -1 EBADF (Bad file descriptor) [pid 5686] close(22) = -1 EBADF (Bad file descriptor) [pid 5686] close(23) = -1 EBADF (Bad file descriptor) [pid 5686] close(24) = -1 EBADF (Bad file descriptor) [pid 5686] close(25) = -1 EBADF (Bad file descriptor) [pid 5686] close(26) = -1 EBADF (Bad file descriptor) [pid 5686] close(27) = -1 EBADF (Bad file descriptor) [pid 5686] close(28) = -1 EBADF (Bad file descriptor) [pid 5686] close(29) = -1 EBADF (Bad file descriptor) [pid 5686] exit_group(0) = ? [pid 5686] +++ exited with 0 +++ [pid 5609] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=45, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=20 /* 0.20 s */} --- [pid 5609] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5609] umount2("./43", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] openat(AT_FDCWD, "./43", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5609] fstat(3, {st_mode=S_IFDIR|0700, st_size=80, ...}) = 0 [pid 5609] getdents64(3, 0x555579655790 /* 4 entries */, 32768) = 112 [pid 5609] umount2("./43/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5609] umount2("./43/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] newfstatat(AT_FDCWD, "./43/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] umount2("./43/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] openat(AT_FDCWD, "./43/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5609] fstat(4, {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0 [pid 5609] getdents64(4, 0x55557965d7d0 /* 2 entries */, 32768) = 48 [pid 5609] getdents64(4, 0x55557965d7d0 /* 0 entries */, 32768) = 0 [pid 5609] close(4) = 0 [pid 5609] rmdir("./43/file2") = 0 [pid 5609] umount2("./43/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] newfstatat(AT_FDCWD, "./43/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] unlink("./43/binderfs") = 0 [pid 5609] getdents64(3, 0x555579655790 /* 0 entries */, 32768) = 0 [pid 5609] close(3) = 0 [pid 5609] rmdir("./43") = 0 [pid 5609] mkdir("./44", 0777) = 0 [pid 5609] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 [pid 5609] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5609] close(3) = 0 [pid 5609] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5609] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5687 attached [pid 5687] set_robust_list(0x5555796546e0, 24 [pid 5609] <... clone resumed>, child_tidptr=0x5555796546d0) = 46 [pid 5609] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5687] <... set_robust_list resumed>) = 0 [pid 5687] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5687] chdir("./44") = 0 [pid 5687] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5687] setpgid(0, 0) = 0 [pid 5687] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5687] write(3, "1000", 4) = 4 [pid 5687] close(3) = 0 [pid 5687] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5687] write(1, "executing program\n", 18) = 18 [pid 5687] memfd_create("syzkaller", 0) = 3 [pid 5687] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5687] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5687] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5687] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5687] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5687] close(3) = 0 [pid 5687] close(4) = 0 [pid 5687] mkdir("./file2", 0777) = 0 [pid 5687] mount("/dev/loop0", "./file2", "jfs", MS_NOEXEC|MS_NOATIME|MS_NODIRATIME|MS_I_VERSION, ",umask=0") = 0 [pid 5687] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5687] chdir("./file2") = 0 [pid 5687] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5687] ioctl(4, LOOP_CLR_FD) = 0 [pid 5687] close(4) = 0 [pid 5687] memfd_create("syzkaller", 0) = 4 [pid 5687] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5687] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8192) = 8192 [pid 5687] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5687] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5687] close(4) = 0 [pid 5687] memfd_create("syzkaller", 0) = 4 [pid 5687] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [ 132.055135][ T5687] loop0: detected capacity change from 0 to 32768 [pid 5687] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 83968) = 83968 [pid 5687] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5687] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5687] close(4) = 0 [pid 5687] fchown(-1, -1, 0) = -1 EBADF (Bad file descriptor) [pid 5687] open_by_handle_at(-100, NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5687] close(3) = 0 [pid 5687] close(4) = -1 EBADF (Bad file descriptor) [pid 5687] close(5) = -1 EBADF (Bad file descriptor) [pid 5687] close(6) = -1 EBADF (Bad file descriptor) [pid 5687] close(7) = -1 EBADF (Bad file descriptor) [pid 5687] close(8) = -1 EBADF (Bad file descriptor) [pid 5687] close(9) = -1 EBADF (Bad file descriptor) [pid 5687] close(10) = -1 EBADF (Bad file descriptor) [pid 5687] close(11) = -1 EBADF (Bad file descriptor) [pid 5687] close(12) = -1 EBADF (Bad file descriptor) [pid 5687] close(13) = -1 EBADF (Bad file descriptor) [pid 5687] close(14) = -1 EBADF (Bad file descriptor) [pid 5687] close(15) = -1 EBADF (Bad file descriptor) [pid 5687] close(16) = -1 EBADF (Bad file descriptor) [pid 5687] close(17) = -1 EBADF (Bad file descriptor) [pid 5687] close(18) = -1 EBADF (Bad file descriptor) [pid 5687] close(19) = -1 EBADF (Bad file descriptor) [pid 5687] close(20) = -1 EBADF (Bad file descriptor) [pid 5687] close(21) = -1 EBADF (Bad file descriptor) [pid 5687] close(22) = -1 EBADF (Bad file descriptor) [pid 5687] close(23) = -1 EBADF (Bad file descriptor) [pid 5687] close(24) = -1 EBADF (Bad file descriptor) [pid 5687] close(25) = -1 EBADF (Bad file descriptor) [pid 5687] close(26) = -1 EBADF (Bad file descriptor) [pid 5687] close(27) = -1 EBADF (Bad file descriptor) [pid 5687] close(28) = -1 EBADF (Bad file descriptor) [pid 5687] close(29) = -1 EBADF (Bad file descriptor) [pid 5687] exit_group(0) = ? [pid 5687] +++ exited with 0 +++ [pid 5609] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=46, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=17 /* 0.17 s */} --- [pid 5609] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5609] umount2("./44", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] openat(AT_FDCWD, "./44", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5609] fstat(3, {st_mode=S_IFDIR|0700, st_size=80, ...}) = 0 [pid 5609] getdents64(3, 0x555579655790 /* 4 entries */, 32768) = 112 [pid 5609] umount2("./44/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5609] umount2("./44/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] newfstatat(AT_FDCWD, "./44/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] umount2("./44/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] openat(AT_FDCWD, "./44/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5609] fstat(4, {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0 [pid 5609] getdents64(4, 0x55557965d7d0 /* 2 entries */, 32768) = 48 [pid 5609] getdents64(4, 0x55557965d7d0 /* 0 entries */, 32768) = 0 [pid 5609] close(4) = 0 [pid 5609] rmdir("./44/file2") = 0 [pid 5609] umount2("./44/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] newfstatat(AT_FDCWD, "./44/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] unlink("./44/binderfs") = 0 [pid 5609] getdents64(3, 0x555579655790 /* 0 entries */, 32768) = 0 [pid 5609] close(3) = 0 [pid 5609] rmdir("./44") = 0 [pid 5609] mkdir("./45", 0777) = 0 [pid 5609] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 [pid 5609] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5609] close(3) = 0 [pid 5609] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5609] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555796546d0) = 47 ci2-upstream-fs/strace-static-x86_64: Process 5688 attached [pid 5609] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5688] set_robust_list(0x5555796546e0, 24) = 0 [pid 5688] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5688] chdir("./45") = 0 [pid 5688] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5688] setpgid(0, 0) = 0 [pid 5688] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5688] write(3, "1000", 4) = 4 [pid 5688] close(3) = 0 [pid 5688] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5688] write(1, "executing program\n", 18) = 18 executing program [pid 5688] memfd_create("syzkaller", 0) = 3 [pid 5688] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5688] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5688] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5688] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5688] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5688] close(3) = 0 [pid 5688] close(4) = 0 [pid 5688] mkdir("./file2", 0777) = 0 [pid 5688] mount("/dev/loop0", "./file2", "jfs", MS_NOEXEC|MS_NOATIME|MS_NODIRATIME|MS_I_VERSION, ",umask=0") = 0 [pid 5688] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5688] chdir("./file2") = 0 [pid 5688] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5688] ioctl(4, LOOP_CLR_FD) = 0 [pid 5688] close(4) = 0 [pid 5688] memfd_create("syzkaller", 0) = 4 [pid 5688] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5688] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8192) = 8192 [pid 5688] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5688] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 132.614209][ T5688] loop0: detected capacity change from 0 to 32768 [pid 5688] close(4) = 0 [pid 5688] memfd_create("syzkaller", 0) = 4 [pid 5688] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5688] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 83968) = 83968 [pid 5688] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5688] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5688] close(4) = 0 [pid 5688] fchown(-1, -1, 0) = -1 EBADF (Bad file descriptor) [pid 5688] open_by_handle_at(-100, NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5688] close(3) = 0 [pid 5688] close(4) = -1 EBADF (Bad file descriptor) [pid 5688] close(5) = -1 EBADF (Bad file descriptor) [pid 5688] close(6) = -1 EBADF (Bad file descriptor) [pid 5688] close(7) = -1 EBADF (Bad file descriptor) [pid 5688] close(8) = -1 EBADF (Bad file descriptor) [pid 5688] close(9) = -1 EBADF (Bad file descriptor) [pid 5688] close(10) = -1 EBADF (Bad file descriptor) [pid 5688] close(11) = -1 EBADF (Bad file descriptor) [pid 5688] close(12) = -1 EBADF (Bad file descriptor) [pid 5688] close(13) = -1 EBADF (Bad file descriptor) [pid 5688] close(14) = -1 EBADF (Bad file descriptor) [pid 5688] close(15) = -1 EBADF (Bad file descriptor) [pid 5688] close(16) = -1 EBADF (Bad file descriptor) [pid 5688] close(17) = -1 EBADF (Bad file descriptor) [pid 5688] close(18) = -1 EBADF (Bad file descriptor) [pid 5688] close(19) = -1 EBADF (Bad file descriptor) [pid 5688] close(20) = -1 EBADF (Bad file descriptor) [pid 5688] close(21) = -1 EBADF (Bad file descriptor) [pid 5688] close(22) = -1 EBADF (Bad file descriptor) [pid 5688] close(23) = -1 EBADF (Bad file descriptor) [pid 5688] close(24) = -1 EBADF (Bad file descriptor) [pid 5688] close(25) = -1 EBADF (Bad file descriptor) [pid 5688] close(26) = -1 EBADF (Bad file descriptor) [pid 5688] close(27) = -1 EBADF (Bad file descriptor) [pid 5688] close(28) = -1 EBADF (Bad file descriptor) [pid 5688] close(29) = -1 EBADF (Bad file descriptor) [pid 5688] exit_group(0) = ? [pid 5688] +++ exited with 0 +++ [pid 5609] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=47, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=23 /* 0.23 s */} --- [pid 5609] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5609] umount2("./45", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] openat(AT_FDCWD, "./45", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5609] fstat(3, {st_mode=S_IFDIR|0700, st_size=80, ...}) = 0 [pid 5609] getdents64(3, 0x555579655790 /* 4 entries */, 32768) = 112 [pid 5609] umount2("./45/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5609] umount2("./45/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] newfstatat(AT_FDCWD, "./45/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] umount2("./45/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] openat(AT_FDCWD, "./45/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5609] fstat(4, {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0 [pid 5609] getdents64(4, 0x55557965d7d0 /* 2 entries */, 32768) = 48 [pid 5609] getdents64(4, 0x55557965d7d0 /* 0 entries */, 32768) = 0 [pid 5609] close(4) = 0 [pid 5609] rmdir("./45/file2") = 0 [pid 5609] umount2("./45/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] newfstatat(AT_FDCWD, "./45/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] unlink("./45/binderfs") = 0 [pid 5609] getdents64(3, 0x555579655790 /* 0 entries */, 32768) = 0 [pid 5609] close(3) = 0 [pid 5609] rmdir("./45") = 0 [pid 5609] mkdir("./46", 0777) = 0 [pid 5609] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 [pid 5609] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5609] close(3) = 0 [pid 5609] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5609] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5691 attached , child_tidptr=0x5555796546d0) = 48 [pid 5609] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5691] set_robust_list(0x5555796546e0, 24) = 0 [pid 5691] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5691] chdir("./46") = 0 [pid 5691] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5691] setpgid(0, 0) = 0 [pid 5691] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5691] write(3, "1000", 4) = 4 [pid 5691] close(3) = 0 [pid 5691] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5691] write(1, "executing program\n", 18) = 18 executing program [pid 5691] memfd_create("syzkaller", 0) = 3 [pid 5691] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5691] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5691] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5691] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5691] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5691] close(3) = 0 [pid 5691] close(4) = 0 [pid 5691] mkdir("./file2", 0777) = 0 [pid 5691] mount("/dev/loop0", "./file2", "jfs", MS_NOEXEC|MS_NOATIME|MS_NODIRATIME|MS_I_VERSION, ",umask=0") = 0 [pid 5691] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5691] chdir("./file2") = 0 [pid 5691] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5691] ioctl(4, LOOP_CLR_FD) = 0 [pid 5691] close(4) = 0 [pid 5691] memfd_create("syzkaller", 0) = 4 [pid 5691] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5691] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8192) = 8192 [pid 5691] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5691] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5691] close(4) = 0 [pid 5691] memfd_create("syzkaller", 0) = 4 [pid 5691] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5691] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 83968) = 83968 [pid 5691] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5691] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 133.168989][ T5691] loop0: detected capacity change from 0 to 32768 [pid 5691] close(4) = 0 [pid 5691] fchown(-1, -1, 0) = -1 EBADF (Bad file descriptor) [pid 5691] open_by_handle_at(-100, NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5691] close(3) = 0 [pid 5691] close(4) = -1 EBADF (Bad file descriptor) [pid 5691] close(5) = -1 EBADF (Bad file descriptor) [pid 5691] close(6) = -1 EBADF (Bad file descriptor) [pid 5691] close(7) = -1 EBADF (Bad file descriptor) [pid 5691] close(8) = -1 EBADF (Bad file descriptor) [pid 5691] close(9) = -1 EBADF (Bad file descriptor) [pid 5691] close(10) = -1 EBADF (Bad file descriptor) [pid 5691] close(11) = -1 EBADF (Bad file descriptor) [pid 5691] close(12) = -1 EBADF (Bad file descriptor) [pid 5691] close(13) = -1 EBADF (Bad file descriptor) [pid 5691] close(14) = -1 EBADF (Bad file descriptor) [pid 5691] close(15) = -1 EBADF (Bad file descriptor) [pid 5691] close(16) = -1 EBADF (Bad file descriptor) [pid 5691] close(17) = -1 EBADF (Bad file descriptor) [pid 5691] close(18) = -1 EBADF (Bad file descriptor) [pid 5691] close(19) = -1 EBADF (Bad file descriptor) [pid 5691] close(20) = -1 EBADF (Bad file descriptor) [pid 5691] close(21) = -1 EBADF (Bad file descriptor) [pid 5691] close(22) = -1 EBADF (Bad file descriptor) [pid 5691] close(23) = -1 EBADF (Bad file descriptor) [pid 5691] close(24) = -1 EBADF (Bad file descriptor) [pid 5691] close(25) = -1 EBADF (Bad file descriptor) [pid 5691] close(26) = -1 EBADF (Bad file descriptor) [pid 5691] close(27) = -1 EBADF (Bad file descriptor) [pid 5691] close(28) = -1 EBADF (Bad file descriptor) [pid 5691] close(29) = -1 EBADF (Bad file descriptor) [pid 5691] exit_group(0) = ? [pid 5691] +++ exited with 0 +++ [pid 5609] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=48, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=22 /* 0.22 s */} --- [pid 5609] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5609] umount2("./46", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] openat(AT_FDCWD, "./46", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5609] fstat(3, {st_mode=S_IFDIR|0700, st_size=80, ...}) = 0 [pid 5609] getdents64(3, 0x555579655790 /* 4 entries */, 32768) = 112 [pid 5609] umount2("./46/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5609] umount2("./46/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] newfstatat(AT_FDCWD, "./46/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] umount2("./46/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] openat(AT_FDCWD, "./46/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5609] fstat(4, {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0 [pid 5609] getdents64(4, 0x55557965d7d0 /* 2 entries */, 32768) = 48 [pid 5609] getdents64(4, 0x55557965d7d0 /* 0 entries */, 32768) = 0 [pid 5609] close(4) = 0 [pid 5609] rmdir("./46/file2") = 0 [pid 5609] umount2("./46/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] newfstatat(AT_FDCWD, "./46/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] unlink("./46/binderfs") = 0 [pid 5609] getdents64(3, 0x555579655790 /* 0 entries */, 32768) = 0 [pid 5609] close(3) = 0 [pid 5609] rmdir("./46") = 0 [pid 5609] mkdir("./47", 0777) = 0 [pid 5609] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 [pid 5609] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5609] close(3) = 0 [pid 5609] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5609] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5694 attached , child_tidptr=0x5555796546d0) = 49 [pid 5694] set_robust_list(0x5555796546e0, 24) = 0 [pid 5609] rt_sigprocmask(SIG_SETMASK, [] [pid 5694] rt_sigprocmask(SIG_SETMASK, [] [pid 5609] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5694] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5694] chdir("./47") = 0 [pid 5694] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5694] setpgid(0, 0) = 0 [pid 5694] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5694] write(3, "1000", 4) = 4 [pid 5694] close(3) = 0 [pid 5694] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5694] write(1, "executing program\n", 18) = 18 executing program [pid 5694] memfd_create("syzkaller", 0) = 3 [pid 5694] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5694] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5694] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5694] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5694] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5694] close(3) = 0 [pid 5694] close(4) = 0 [pid 5694] mkdir("./file2", 0777) = 0 [pid 5694] mount("/dev/loop0", "./file2", "jfs", MS_NOEXEC|MS_NOATIME|MS_NODIRATIME|MS_I_VERSION, ",umask=0") = 0 [pid 5694] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5694] chdir("./file2") = 0 [pid 5694] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5694] ioctl(4, LOOP_CLR_FD) = 0 [pid 5694] close(4) = 0 [pid 5694] memfd_create("syzkaller", 0) = 4 [pid 5694] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5694] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8192) = 8192 [pid 5694] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5694] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5694] close(4) = 0 [ 133.747159][ T5694] loop0: detected capacity change from 0 to 32768 [pid 5694] memfd_create("syzkaller", 0) = 4 [pid 5694] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5694] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 83968) = 83968 [pid 5694] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5694] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5694] close(4) = 0 [pid 5694] fchown(-1, -1, 0) = -1 EBADF (Bad file descriptor) [pid 5694] open_by_handle_at(-100, NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5694] close(3) = 0 [pid 5694] close(4) = -1 EBADF (Bad file descriptor) [pid 5694] close(5) = -1 EBADF (Bad file descriptor) [pid 5694] close(6) = -1 EBADF (Bad file descriptor) [pid 5694] close(7) = -1 EBADF (Bad file descriptor) [pid 5694] close(8) = -1 EBADF (Bad file descriptor) [pid 5694] close(9) = -1 EBADF (Bad file descriptor) [pid 5694] close(10) = -1 EBADF (Bad file descriptor) [pid 5694] close(11) = -1 EBADF (Bad file descriptor) [pid 5694] close(12) = -1 EBADF (Bad file descriptor) [pid 5694] close(13) = -1 EBADF (Bad file descriptor) [pid 5694] close(14) = -1 EBADF (Bad file descriptor) [pid 5694] close(15) = -1 EBADF (Bad file descriptor) [pid 5694] close(16) = -1 EBADF (Bad file descriptor) [pid 5694] close(17) = -1 EBADF (Bad file descriptor) [pid 5694] close(18) = -1 EBADF (Bad file descriptor) [pid 5694] close(19) = -1 EBADF (Bad file descriptor) [pid 5694] close(20) = -1 EBADF (Bad file descriptor) [pid 5694] close(21) = -1 EBADF (Bad file descriptor) [pid 5694] close(22) = -1 EBADF (Bad file descriptor) [pid 5694] close(23) = -1 EBADF (Bad file descriptor) [pid 5694] close(24) = -1 EBADF (Bad file descriptor) [pid 5694] close(25) = -1 EBADF (Bad file descriptor) [pid 5694] close(26) = -1 EBADF (Bad file descriptor) [pid 5694] close(27) = -1 EBADF (Bad file descriptor) [pid 5694] close(28) = -1 EBADF (Bad file descriptor) [pid 5694] close(29) = -1 EBADF (Bad file descriptor) [pid 5694] exit_group(0) = ? [pid 5694] +++ exited with 0 +++ [pid 5609] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=49, si_uid=0, si_status=0, si_utime=0, si_stime=22 /* 0.22 s */} --- [pid 5609] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5609] umount2("./47", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] openat(AT_FDCWD, "./47", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5609] fstat(3, {st_mode=S_IFDIR|0700, st_size=80, ...}) = 0 [pid 5609] getdents64(3, 0x555579655790 /* 4 entries */, 32768) = 112 [pid 5609] umount2("./47/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5609] umount2("./47/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] newfstatat(AT_FDCWD, "./47/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] umount2("./47/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] openat(AT_FDCWD, "./47/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5609] fstat(4, {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0 [pid 5609] getdents64(4, 0x55557965d7d0 /* 2 entries */, 32768) = 48 [pid 5609] getdents64(4, 0x55557965d7d0 /* 0 entries */, 32768) = 0 [pid 5609] close(4) = 0 [pid 5609] rmdir("./47/file2") = 0 [pid 5609] umount2("./47/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] newfstatat(AT_FDCWD, "./47/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] unlink("./47/binderfs") = 0 [pid 5609] getdents64(3, 0x555579655790 /* 0 entries */, 32768) = 0 [pid 5609] close(3) = 0 [pid 5609] rmdir("./47") = 0 [pid 5609] mkdir("./48", 0777) = 0 [pid 5609] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 [pid 5609] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5609] close(3) = 0 [pid 5609] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5609] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5695 attached [pid 5695] set_robust_list(0x5555796546e0, 24 [pid 5609] <... clone resumed>, child_tidptr=0x5555796546d0) = 50 [pid 5695] <... set_robust_list resumed>) = 0 [pid 5695] rt_sigprocmask(SIG_SETMASK, [] [pid 5609] rt_sigprocmask(SIG_SETMASK, [] [pid 5695] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5609] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5695] chdir("./48") = 0 [pid 5695] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5695] setpgid(0, 0) = 0 [pid 5695] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5695] write(3, "1000", 4) = 4 [pid 5695] close(3) = 0 [pid 5695] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5695] write(1, "executing program\n", 18) = 18 [pid 5695] memfd_create("syzkaller", 0) = 3 [pid 5695] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5695] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5695] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5695] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5695] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5695] close(3) = 0 [pid 5695] close(4) = 0 [pid 5695] mkdir("./file2", 0777) = 0 [pid 5695] mount("/dev/loop0", "./file2", "jfs", MS_NOEXEC|MS_NOATIME|MS_NODIRATIME|MS_I_VERSION, ",umask=0") = 0 [pid 5695] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5695] chdir("./file2") = 0 [pid 5695] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5695] ioctl(4, LOOP_CLR_FD) = 0 [pid 5695] close(4) = 0 [pid 5695] memfd_create("syzkaller", 0) = 4 [pid 5695] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5695] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8192) = 8192 [pid 5695] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5695] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5695] close(4) = 0 [pid 5695] memfd_create("syzkaller", 0) = 4 [pid 5695] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [ 134.273231][ T5695] loop0: detected capacity change from 0 to 32768 [pid 5695] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 83968) = 83968 [pid 5695] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5695] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5695] close(4) = 0 [pid 5695] fchown(-1, -1, 0) = -1 EBADF (Bad file descriptor) [pid 5695] open_by_handle_at(-100, NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5695] close(3) = 0 [pid 5695] close(4) = -1 EBADF (Bad file descriptor) [pid 5695] close(5) = -1 EBADF (Bad file descriptor) [pid 5695] close(6) = -1 EBADF (Bad file descriptor) [pid 5695] close(7) = -1 EBADF (Bad file descriptor) [pid 5695] close(8) = -1 EBADF (Bad file descriptor) [pid 5695] close(9) = -1 EBADF (Bad file descriptor) [pid 5695] close(10) = -1 EBADF (Bad file descriptor) [pid 5695] close(11) = -1 EBADF (Bad file descriptor) [pid 5695] close(12) = -1 EBADF (Bad file descriptor) [pid 5695] close(13) = -1 EBADF (Bad file descriptor) [pid 5695] close(14) = -1 EBADF (Bad file descriptor) [pid 5695] close(15) = -1 EBADF (Bad file descriptor) [pid 5695] close(16) = -1 EBADF (Bad file descriptor) [pid 5695] close(17) = -1 EBADF (Bad file descriptor) [pid 5695] close(18) = -1 EBADF (Bad file descriptor) [pid 5695] close(19) = -1 EBADF (Bad file descriptor) [pid 5695] close(20) = -1 EBADF (Bad file descriptor) [pid 5695] close(21) = -1 EBADF (Bad file descriptor) [pid 5695] close(22) = -1 EBADF (Bad file descriptor) [pid 5695] close(23) = -1 EBADF (Bad file descriptor) [pid 5695] close(24) = -1 EBADF (Bad file descriptor) [pid 5695] close(25) = -1 EBADF (Bad file descriptor) [pid 5695] close(26) = -1 EBADF (Bad file descriptor) [pid 5695] close(27) = -1 EBADF (Bad file descriptor) [pid 5695] close(28) = -1 EBADF (Bad file descriptor) [pid 5695] close(29) = -1 EBADF (Bad file descriptor) [pid 5695] exit_group(0) = ? [pid 5695] +++ exited with 0 +++ [pid 5609] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=50, si_uid=0, si_status=0, si_utime=0, si_stime=20 /* 0.20 s */} --- [pid 5609] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5609] umount2("./48", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] openat(AT_FDCWD, "./48", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5609] fstat(3, {st_mode=S_IFDIR|0700, st_size=80, ...}) = 0 [pid 5609] getdents64(3, 0x555579655790 /* 4 entries */, 32768) = 112 [pid 5609] umount2("./48/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5609] umount2("./48/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] newfstatat(AT_FDCWD, "./48/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] umount2("./48/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] openat(AT_FDCWD, "./48/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5609] fstat(4, {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0 [pid 5609] getdents64(4, 0x55557965d7d0 /* 2 entries */, 32768) = 48 [pid 5609] getdents64(4, 0x55557965d7d0 /* 0 entries */, 32768) = 0 [pid 5609] close(4) = 0 [pid 5609] rmdir("./48/file2") = 0 [pid 5609] umount2("./48/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] newfstatat(AT_FDCWD, "./48/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] unlink("./48/binderfs") = 0 [pid 5609] getdents64(3, 0x555579655790 /* 0 entries */, 32768) = 0 [pid 5609] close(3) = 0 [pid 5609] rmdir("./48") = 0 [pid 5609] mkdir("./49", 0777) = 0 [pid 5609] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 [pid 5609] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5609] close(3) = 0 [pid 5609] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5609] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555796546d0) = 51 ci2-upstream-fs/strace-static-x86_64: Process 5696 attached [pid 5609] rt_sigprocmask(SIG_SETMASK, [] [pid 5696] set_robust_list(0x5555796546e0, 24 [pid 5609] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5696] <... set_robust_list resumed>) = 0 [pid 5696] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5696] chdir("./49") = 0 [pid 5696] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5696] setpgid(0, 0) = 0 [pid 5696] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5696] write(3, "1000", 4) = 4 [pid 5696] close(3) = 0 [pid 5696] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5696] write(1, "executing program\n", 18) = 18 executing program [pid 5696] memfd_create("syzkaller", 0) = 3 [pid 5696] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5696] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5696] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5696] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5696] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5696] close(3) = 0 [pid 5696] close(4) = 0 [pid 5696] mkdir("./file2", 0777) = 0 [pid 5696] mount("/dev/loop0", "./file2", "jfs", MS_NOEXEC|MS_NOATIME|MS_NODIRATIME|MS_I_VERSION, ",umask=0") = 0 [pid 5696] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5696] chdir("./file2") = 0 [pid 5696] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5696] ioctl(4, LOOP_CLR_FD) = 0 [pid 5696] close(4) = 0 [pid 5696] memfd_create("syzkaller", 0) = 4 [pid 5696] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5696] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8192) = 8192 [pid 5696] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5696] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5696] close(4) = 0 [pid 5696] memfd_create("syzkaller", 0) = 4 [pid 5696] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [ 134.774349][ T5696] loop0: detected capacity change from 0 to 32768 [pid 5696] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 83968) = 83968 [pid 5696] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5696] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5696] close(4) = 0 [pid 5696] fchown(-1, -1, 0) = -1 EBADF (Bad file descriptor) [pid 5696] open_by_handle_at(-100, NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5696] close(3) = 0 [pid 5696] close(4) = -1 EBADF (Bad file descriptor) [pid 5696] close(5) = -1 EBADF (Bad file descriptor) [pid 5696] close(6) = -1 EBADF (Bad file descriptor) [pid 5696] close(7) = -1 EBADF (Bad file descriptor) [pid 5696] close(8) = -1 EBADF (Bad file descriptor) [pid 5696] close(9) = -1 EBADF (Bad file descriptor) [pid 5696] close(10) = -1 EBADF (Bad file descriptor) [pid 5696] close(11) = -1 EBADF (Bad file descriptor) [pid 5696] close(12) = -1 EBADF (Bad file descriptor) [pid 5696] close(13) = -1 EBADF (Bad file descriptor) [pid 5696] close(14) = -1 EBADF (Bad file descriptor) [pid 5696] close(15) = -1 EBADF (Bad file descriptor) [pid 5696] close(16) = -1 EBADF (Bad file descriptor) [pid 5696] close(17) = -1 EBADF (Bad file descriptor) [pid 5696] close(18) = -1 EBADF (Bad file descriptor) [pid 5696] close(19) = -1 EBADF (Bad file descriptor) [pid 5696] close(20) = -1 EBADF (Bad file descriptor) [pid 5696] close(21) = -1 EBADF (Bad file descriptor) [pid 5696] close(22) = -1 EBADF (Bad file descriptor) [pid 5696] close(23) = -1 EBADF (Bad file descriptor) [pid 5696] close(24) = -1 EBADF (Bad file descriptor) [pid 5696] close(25) = -1 EBADF (Bad file descriptor) [pid 5696] close(26) = -1 EBADF (Bad file descriptor) [pid 5696] close(27) = -1 EBADF (Bad file descriptor) [pid 5696] close(28) = -1 EBADF (Bad file descriptor) [pid 5696] close(29) = -1 EBADF (Bad file descriptor) [pid 5696] exit_group(0) = ? [pid 5696] +++ exited with 0 +++ [pid 5609] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=51, si_uid=0, si_status=0, si_utime=0, si_stime=20 /* 0.20 s */} --- [pid 5609] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5609] umount2("./49", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] openat(AT_FDCWD, "./49", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5609] fstat(3, {st_mode=S_IFDIR|0700, st_size=80, ...}) = 0 [pid 5609] getdents64(3, 0x555579655790 /* 4 entries */, 32768) = 112 [pid 5609] umount2("./49/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5609] umount2("./49/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] newfstatat(AT_FDCWD, "./49/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] umount2("./49/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] openat(AT_FDCWD, "./49/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5609] fstat(4, {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0 [pid 5609] getdents64(4, 0x55557965d7d0 /* 2 entries */, 32768) = 48 [pid 5609] getdents64(4, 0x55557965d7d0 /* 0 entries */, 32768) = 0 [pid 5609] close(4) = 0 [pid 5609] rmdir("./49/file2") = 0 [pid 5609] umount2("./49/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] newfstatat(AT_FDCWD, "./49/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] unlink("./49/binderfs") = 0 [pid 5609] getdents64(3, 0x555579655790 /* 0 entries */, 32768) = 0 [pid 5609] close(3) = 0 [pid 5609] rmdir("./49") = 0 [pid 5609] mkdir("./50", 0777) = 0 [pid 5609] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 [pid 5609] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5609] close(3) = 0 [pid 5609] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5609] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5697 attached [pid 5697] set_robust_list(0x5555796546e0, 24 [pid 5609] <... clone resumed>, child_tidptr=0x5555796546d0) = 52 [pid 5697] <... set_robust_list resumed>) = 0 [pid 5697] rt_sigprocmask(SIG_SETMASK, [] [pid 5609] rt_sigprocmask(SIG_SETMASK, [] [pid 5697] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5697] chdir("./50" [pid 5609] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5697] <... chdir resumed>) = 0 [pid 5697] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5697] setpgid(0, 0) = 0 [pid 5697] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5697] write(3, "1000", 4) = 4 [pid 5697] close(3) = 0 [pid 5697] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5697] write(1, "executing program\n", 18) = 18 [pid 5697] memfd_create("syzkaller", 0) = 3 [pid 5697] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5697] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5697] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5697] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5697] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5697] close(3) = 0 [pid 5697] close(4) = 0 [pid 5697] mkdir("./file2", 0777) = 0 [pid 5697] mount("/dev/loop0", "./file2", "jfs", MS_NOEXEC|MS_NOATIME|MS_NODIRATIME|MS_I_VERSION, ",umask=0") = 0 [pid 5697] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5697] chdir("./file2") = 0 [pid 5697] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5697] ioctl(4, LOOP_CLR_FD) = 0 [pid 5697] close(4) = 0 [pid 5697] memfd_create("syzkaller", 0) = 4 [pid 5697] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5697] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8192) = 8192 [pid 5697] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5697] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5697] close(4) = 0 [ 135.323796][ T5697] loop0: detected capacity change from 0 to 32768 [pid 5697] memfd_create("syzkaller", 0) = 4 [pid 5697] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5697] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 83968) = 83968 [pid 5697] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5697] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5697] close(4) = 0 [pid 5697] fchown(-1, -1, 0) = -1 EBADF (Bad file descriptor) [pid 5697] open_by_handle_at(-100, NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5697] close(3) = 0 [pid 5697] close(4) = -1 EBADF (Bad file descriptor) [pid 5697] close(5) = -1 EBADF (Bad file descriptor) [pid 5697] close(6) = -1 EBADF (Bad file descriptor) [pid 5697] close(7) = -1 EBADF (Bad file descriptor) [pid 5697] close(8) = -1 EBADF (Bad file descriptor) [pid 5697] close(9) = -1 EBADF (Bad file descriptor) [pid 5697] close(10) = -1 EBADF (Bad file descriptor) [pid 5697] close(11) = -1 EBADF (Bad file descriptor) [pid 5697] close(12) = -1 EBADF (Bad file descriptor) [pid 5697] close(13) = -1 EBADF (Bad file descriptor) [pid 5697] close(14) = -1 EBADF (Bad file descriptor) [pid 5697] close(15) = -1 EBADF (Bad file descriptor) [pid 5697] close(16) = -1 EBADF (Bad file descriptor) [pid 5697] close(17) = -1 EBADF (Bad file descriptor) [pid 5697] close(18) = -1 EBADF (Bad file descriptor) [pid 5697] close(19) = -1 EBADF (Bad file descriptor) [pid 5697] close(20) = -1 EBADF (Bad file descriptor) [pid 5697] close(21) = -1 EBADF (Bad file descriptor) [pid 5697] close(22) = -1 EBADF (Bad file descriptor) [pid 5697] close(23) = -1 EBADF (Bad file descriptor) [pid 5697] close(24) = -1 EBADF (Bad file descriptor) [pid 5697] close(25) = -1 EBADF (Bad file descriptor) [pid 5697] close(26) = -1 EBADF (Bad file descriptor) [pid 5697] close(27) = -1 EBADF (Bad file descriptor) [pid 5697] close(28) = -1 EBADF (Bad file descriptor) [pid 5697] close(29) = -1 EBADF (Bad file descriptor) [pid 5697] exit_group(0) = ? [pid 5697] +++ exited with 0 +++ [pid 5609] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=52, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=19 /* 0.19 s */} --- [pid 5609] umount2("./50", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] openat(AT_FDCWD, "./50", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5609] fstat(3, {st_mode=S_IFDIR|0700, st_size=80, ...}) = 0 [pid 5609] getdents64(3, 0x555579655790 /* 4 entries */, 32768) = 112 [pid 5609] umount2("./50/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5609] umount2("./50/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] newfstatat(AT_FDCWD, "./50/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] umount2("./50/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] openat(AT_FDCWD, "./50/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5609] fstat(4, {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0 [pid 5609] getdents64(4, 0x55557965d7d0 /* 2 entries */, 32768) = 48 [pid 5609] getdents64(4, 0x55557965d7d0 /* 0 entries */, 32768) = 0 [pid 5609] close(4) = 0 [pid 5609] rmdir("./50/file2") = 0 [pid 5609] umount2("./50/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] newfstatat(AT_FDCWD, "./50/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] unlink("./50/binderfs") = 0 [pid 5609] getdents64(3, 0x555579655790 /* 0 entries */, 32768) = 0 [pid 5609] close(3) = 0 [pid 5609] rmdir("./50") = 0 [pid 5609] mkdir("./51", 0777) = 0 [pid 5609] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 [pid 5609] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5609] close(3) = 0 [pid 5609] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5609] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5698 attached , child_tidptr=0x5555796546d0) = 53 [pid 5609] rt_sigprocmask(SIG_SETMASK, [] [pid 5698] set_robust_list(0x5555796546e0, 24) = 0 [pid 5609] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5698] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5698] chdir("./51") = 0 [pid 5698] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5698] setpgid(0, 0) = 0 [pid 5698] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5698] write(3, "1000", 4) = 4 [pid 5698] close(3) = 0 [pid 5698] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5698] write(1, "executing program\n", 18) = 18 executing program [pid 5698] memfd_create("syzkaller", 0) = 3 [pid 5698] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5698] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5698] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5698] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5698] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5698] close(3) = 0 [pid 5698] close(4) = 0 [pid 5698] mkdir("./file2", 0777) = 0 [pid 5698] mount("/dev/loop0", "./file2", "jfs", MS_NOEXEC|MS_NOATIME|MS_NODIRATIME|MS_I_VERSION, ",umask=0") = 0 [pid 5698] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5698] chdir("./file2") = 0 [pid 5698] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5698] ioctl(4, LOOP_CLR_FD) = 0 [pid 5698] close(4) = 0 [pid 5698] memfd_create("syzkaller", 0) = 4 [pid 5698] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5698] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8192) = 8192 [pid 5698] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5698] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5698] close(4) = 0 [ 135.895952][ T5698] loop0: detected capacity change from 0 to 32768 [pid 5698] memfd_create("syzkaller", 0) = 4 [pid 5698] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5698] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 83968) = 83968 [pid 5698] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5698] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5698] close(4) = 0 [pid 5698] fchown(-1, -1, 0) = -1 EBADF (Bad file descriptor) [pid 5698] open_by_handle_at(-100, NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5698] close(3) = 0 [pid 5698] close(4) = -1 EBADF (Bad file descriptor) [pid 5698] close(5) = -1 EBADF (Bad file descriptor) [pid 5698] close(6) = -1 EBADF (Bad file descriptor) [pid 5698] close(7) = -1 EBADF (Bad file descriptor) [pid 5698] close(8) = -1 EBADF (Bad file descriptor) [pid 5698] close(9) = -1 EBADF (Bad file descriptor) [pid 5698] close(10) = -1 EBADF (Bad file descriptor) [pid 5698] close(11) = -1 EBADF (Bad file descriptor) [pid 5698] close(12) = -1 EBADF (Bad file descriptor) [pid 5698] close(13) = -1 EBADF (Bad file descriptor) [pid 5698] close(14) = -1 EBADF (Bad file descriptor) [pid 5698] close(15) = -1 EBADF (Bad file descriptor) [pid 5698] close(16) = -1 EBADF (Bad file descriptor) [pid 5698] close(17) = -1 EBADF (Bad file descriptor) [pid 5698] close(18) = -1 EBADF (Bad file descriptor) [pid 5698] close(19) = -1 EBADF (Bad file descriptor) [pid 5698] close(20) = -1 EBADF (Bad file descriptor) [pid 5698] close(21) = -1 EBADF (Bad file descriptor) [pid 5698] close(22) = -1 EBADF (Bad file descriptor) [pid 5698] close(23) = -1 EBADF (Bad file descriptor) [pid 5698] close(24) = -1 EBADF (Bad file descriptor) [pid 5698] close(25) = -1 EBADF (Bad file descriptor) [pid 5698] close(26) = -1 EBADF (Bad file descriptor) [pid 5698] close(27) = -1 EBADF (Bad file descriptor) [pid 5698] close(28) = -1 EBADF (Bad file descriptor) [pid 5698] close(29) = -1 EBADF (Bad file descriptor) [pid 5698] exit_group(0) = ? [pid 5698] +++ exited with 0 +++ [pid 5609] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=53, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=20 /* 0.20 s */} --- [pid 5609] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5609] umount2("./51", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] openat(AT_FDCWD, "./51", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5609] fstat(3, {st_mode=S_IFDIR|0700, st_size=80, ...}) = 0 [pid 5609] getdents64(3, 0x555579655790 /* 4 entries */, 32768) = 112 [pid 5609] umount2("./51/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5609] umount2("./51/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] newfstatat(AT_FDCWD, "./51/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] umount2("./51/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] openat(AT_FDCWD, "./51/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5609] fstat(4, {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0 [pid 5609] getdents64(4, 0x55557965d7d0 /* 2 entries */, 32768) = 48 [pid 5609] getdents64(4, 0x55557965d7d0 /* 0 entries */, 32768) = 0 [pid 5609] close(4) = 0 [pid 5609] rmdir("./51/file2") = 0 [pid 5609] umount2("./51/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] newfstatat(AT_FDCWD, "./51/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] unlink("./51/binderfs") = 0 [pid 5609] getdents64(3, 0x555579655790 /* 0 entries */, 32768) = 0 [pid 5609] close(3) = 0 [pid 5609] rmdir("./51") = 0 [pid 5609] mkdir("./52", 0777) = 0 [pid 5609] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 [pid 5609] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5609] close(3) = 0 [pid 5609] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5609] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5699 attached , child_tidptr=0x5555796546d0) = 54 [pid 5609] rt_sigprocmask(SIG_SETMASK, [] [pid 5699] set_robust_list(0x5555796546e0, 24) = 0 [pid 5609] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5699] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5699] chdir("./52") = 0 [pid 5699] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5699] setpgid(0, 0) = 0 [pid 5699] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5699] write(3, "1000", 4) = 4 [pid 5699] close(3) = 0 [pid 5699] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5699] write(1, "executing program\n", 18) = 18 [pid 5699] memfd_create("syzkaller", 0) = 3 [pid 5699] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 executing program [pid 5699] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5699] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5699] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5699] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5699] close(3) = 0 [pid 5699] close(4) = 0 [pid 5699] mkdir("./file2", 0777) = 0 [pid 5699] mount("/dev/loop0", "./file2", "jfs", MS_NOEXEC|MS_NOATIME|MS_NODIRATIME|MS_I_VERSION, ",umask=0") = 0 [pid 5699] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5699] chdir("./file2") = 0 [pid 5699] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5699] ioctl(4, LOOP_CLR_FD) = 0 [pid 5699] close(4) = 0 [pid 5699] memfd_create("syzkaller", 0) = 4 [pid 5699] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5699] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8192) = 8192 [pid 5699] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5699] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5699] close(4) = 0 [pid 5699] memfd_create("syzkaller", 0) = 4 [pid 5699] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [ 136.465929][ T5699] loop0: detected capacity change from 0 to 32768 [pid 5699] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 83968) = 83968 [pid 5699] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5699] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5699] close(4) = 0 [pid 5699] fchown(-1, -1, 0) = -1 EBADF (Bad file descriptor) [pid 5699] open_by_handle_at(-100, NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5699] close(3) = 0 [pid 5699] close(4) = -1 EBADF (Bad file descriptor) [pid 5699] close(5) = -1 EBADF (Bad file descriptor) [pid 5699] close(6) = -1 EBADF (Bad file descriptor) [pid 5699] close(7) = -1 EBADF (Bad file descriptor) [pid 5699] close(8) = -1 EBADF (Bad file descriptor) [pid 5699] close(9) = -1 EBADF (Bad file descriptor) [pid 5699] close(10) = -1 EBADF (Bad file descriptor) [pid 5699] close(11) = -1 EBADF (Bad file descriptor) [pid 5699] close(12) = -1 EBADF (Bad file descriptor) [pid 5699] close(13) = -1 EBADF (Bad file descriptor) [pid 5699] close(14) = -1 EBADF (Bad file descriptor) [pid 5699] close(15) = -1 EBADF (Bad file descriptor) [pid 5699] close(16) = -1 EBADF (Bad file descriptor) [pid 5699] close(17) = -1 EBADF (Bad file descriptor) [pid 5699] close(18) = -1 EBADF (Bad file descriptor) [pid 5699] close(19) = -1 EBADF (Bad file descriptor) [pid 5699] close(20) = -1 EBADF (Bad file descriptor) [pid 5699] close(21) = -1 EBADF (Bad file descriptor) [pid 5699] close(22) = -1 EBADF (Bad file descriptor) [pid 5699] close(23) = -1 EBADF (Bad file descriptor) [pid 5699] close(24) = -1 EBADF (Bad file descriptor) [pid 5699] close(25) = -1 EBADF (Bad file descriptor) [pid 5699] close(26) = -1 EBADF (Bad file descriptor) [pid 5699] close(27) = -1 EBADF (Bad file descriptor) [pid 5699] close(28) = -1 EBADF (Bad file descriptor) [pid 5699] close(29) = -1 EBADF (Bad file descriptor) [pid 5699] exit_group(0) = ? [pid 5699] +++ exited with 0 +++ [pid 5609] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=54, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=22 /* 0.22 s */} --- [pid 5609] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5609] umount2("./52", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] openat(AT_FDCWD, "./52", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5609] fstat(3, {st_mode=S_IFDIR|0700, st_size=80, ...}) = 0 [pid 5609] getdents64(3, 0x555579655790 /* 4 entries */, 32768) = 112 [pid 5609] umount2("./52/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5609] umount2("./52/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] newfstatat(AT_FDCWD, "./52/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] umount2("./52/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] openat(AT_FDCWD, "./52/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5609] fstat(4, {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0 [pid 5609] getdents64(4, 0x55557965d7d0 /* 2 entries */, 32768) = 48 [pid 5609] getdents64(4, 0x55557965d7d0 /* 0 entries */, 32768) = 0 [pid 5609] close(4) = 0 [pid 5609] rmdir("./52/file2") = 0 [pid 5609] umount2("./52/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] newfstatat(AT_FDCWD, "./52/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] unlink("./52/binderfs") = 0 [pid 5609] getdents64(3, 0x555579655790 /* 0 entries */, 32768) = 0 [pid 5609] close(3) = 0 [pid 5609] rmdir("./52") = 0 [pid 5609] mkdir("./53", 0777) = 0 [pid 5609] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 [pid 5609] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5609] close(3) = 0 [pid 5609] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5609] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5700 attached , child_tidptr=0x5555796546d0) = 55 [pid 5700] set_robust_list(0x5555796546e0, 24 [pid 5609] rt_sigprocmask(SIG_SETMASK, [] [pid 5700] <... set_robust_list resumed>) = 0 [pid 5609] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5700] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5700] chdir("./53") = 0 [pid 5700] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5700] setpgid(0, 0) = 0 [pid 5700] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5700] write(3, "1000", 4) = 4 [pid 5700] close(3) = 0 [pid 5700] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5700] write(1, "executing program\n", 18) = 18 executing program [pid 5700] memfd_create("syzkaller", 0) = 3 [pid 5700] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5700] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5700] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5700] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5700] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5700] close(3) = 0 [pid 5700] close(4) = 0 [pid 5700] mkdir("./file2", 0777) = 0 [pid 5700] mount("/dev/loop0", "./file2", "jfs", MS_NOEXEC|MS_NOATIME|MS_NODIRATIME|MS_I_VERSION, ",umask=0") = 0 [pid 5700] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5700] chdir("./file2") = 0 [pid 5700] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5700] ioctl(4, LOOP_CLR_FD) = 0 [pid 5700] close(4) = 0 [pid 5700] memfd_create("syzkaller", 0) = 4 [pid 5700] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5700] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8192) = 8192 [pid 5700] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5700] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5700] close(4) = 0 [pid 5700] memfd_create("syzkaller", 0) = 4 [pid 5700] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [ 136.993118][ T5700] loop0: detected capacity change from 0 to 32768 [pid 5700] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 83968) = 83968 [pid 5700] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5700] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5700] close(4) = 0 [pid 5700] fchown(-1, -1, 0) = -1 EBADF (Bad file descriptor) [pid 5700] open_by_handle_at(-100, NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5700] close(3) = 0 [pid 5700] close(4) = -1 EBADF (Bad file descriptor) [pid 5700] close(5) = -1 EBADF (Bad file descriptor) [pid 5700] close(6) = -1 EBADF (Bad file descriptor) [pid 5700] close(7) = -1 EBADF (Bad file descriptor) [pid 5700] close(8) = -1 EBADF (Bad file descriptor) [pid 5700] close(9) = -1 EBADF (Bad file descriptor) [pid 5700] close(10) = -1 EBADF (Bad file descriptor) [pid 5700] close(11) = -1 EBADF (Bad file descriptor) [pid 5700] close(12) = -1 EBADF (Bad file descriptor) [pid 5700] close(13) = -1 EBADF (Bad file descriptor) [pid 5700] close(14) = -1 EBADF (Bad file descriptor) [pid 5700] close(15) = -1 EBADF (Bad file descriptor) [pid 5700] close(16) = -1 EBADF (Bad file descriptor) [pid 5700] close(17) = -1 EBADF (Bad file descriptor) [pid 5700] close(18) = -1 EBADF (Bad file descriptor) [pid 5700] close(19) = -1 EBADF (Bad file descriptor) [pid 5700] close(20) = -1 EBADF (Bad file descriptor) [pid 5700] close(21) = -1 EBADF (Bad file descriptor) [pid 5700] close(22) = -1 EBADF (Bad file descriptor) [pid 5700] close(23) = -1 EBADF (Bad file descriptor) [pid 5700] close(24) = -1 EBADF (Bad file descriptor) [pid 5700] close(25) = -1 EBADF (Bad file descriptor) [pid 5700] close(26) = -1 EBADF (Bad file descriptor) [pid 5700] close(27) = -1 EBADF (Bad file descriptor) [pid 5700] close(28) = -1 EBADF (Bad file descriptor) [pid 5700] close(29) = -1 EBADF (Bad file descriptor) [pid 5700] exit_group(0) = ? [pid 5700] +++ exited with 0 +++ [pid 5609] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=55, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=20 /* 0.20 s */} --- [pid 5609] umount2("./53", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] openat(AT_FDCWD, "./53", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5609] fstat(3, {st_mode=S_IFDIR|0700, st_size=80, ...}) = 0 [pid 5609] getdents64(3, 0x555579655790 /* 4 entries */, 32768) = 112 [pid 5609] umount2("./53/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5609] umount2("./53/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] newfstatat(AT_FDCWD, "./53/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] umount2("./53/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] openat(AT_FDCWD, "./53/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5609] fstat(4, {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0 [pid 5609] getdents64(4, 0x55557965d7d0 /* 2 entries */, 32768) = 48 [pid 5609] getdents64(4, 0x55557965d7d0 /* 0 entries */, 32768) = 0 [pid 5609] close(4) = 0 [pid 5609] rmdir("./53/file2") = 0 [pid 5609] umount2("./53/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] newfstatat(AT_FDCWD, "./53/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] unlink("./53/binderfs") = 0 [pid 5609] getdents64(3, 0x555579655790 /* 0 entries */, 32768) = 0 [pid 5609] close(3) = 0 [pid 5609] rmdir("./53") = 0 [pid 5609] mkdir("./54", 0777) = 0 [pid 5609] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 [pid 5609] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5609] close(3) = 0 [pid 5609] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5609] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5701 attached , child_tidptr=0x5555796546d0) = 56 [pid 5701] set_robust_list(0x5555796546e0, 24) = 0 [pid 5701] rt_sigprocmask(SIG_SETMASK, [] [pid 5609] rt_sigprocmask(SIG_SETMASK, [] [pid 5701] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5609] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5701] chdir("./54") = 0 [pid 5701] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5701] setpgid(0, 0) = 0 [pid 5701] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5701] write(3, "1000", 4) = 4 [pid 5701] close(3) = 0 [pid 5701] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5701] write(1, "executing program\n", 18) = 18 executing program [pid 5701] memfd_create("syzkaller", 0) = 3 [pid 5701] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5701] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5701] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5701] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5701] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5701] close(3) = 0 [pid 5701] close(4) = 0 [pid 5701] mkdir("./file2", 0777) = 0 [pid 5701] mount("/dev/loop0", "./file2", "jfs", MS_NOEXEC|MS_NOATIME|MS_NODIRATIME|MS_I_VERSION, ",umask=0") = 0 [pid 5701] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5701] chdir("./file2") = 0 [pid 5701] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5701] ioctl(4, LOOP_CLR_FD) = 0 [pid 5701] close(4) = 0 [pid 5701] memfd_create("syzkaller", 0) = 4 [pid 5701] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5701] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8192) = 8192 [pid 5701] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5701] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5701] close(4) = 0 [pid 5701] memfd_create("syzkaller", 0) = 4 [pid 5701] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5701] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 83968) = 83968 [pid 5701] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5701] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5701] close(4) = 0 [pid 5701] fchown(-1, -1, 0) = -1 EBADF (Bad file descriptor) [pid 5701] open_by_handle_at(-100, NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5701] close(3) = 0 [pid 5701] close(4) = -1 EBADF (Bad file descriptor) [ 137.567526][ T5701] loop0: detected capacity change from 0 to 32768 [pid 5701] close(5) = -1 EBADF (Bad file descriptor) [pid 5701] close(6) = -1 EBADF (Bad file descriptor) [pid 5701] close(7) = -1 EBADF (Bad file descriptor) [pid 5701] close(8) = -1 EBADF (Bad file descriptor) [pid 5701] close(9) = -1 EBADF (Bad file descriptor) [pid 5701] close(10) = -1 EBADF (Bad file descriptor) [pid 5701] close(11) = -1 EBADF (Bad file descriptor) [pid 5701] close(12) = -1 EBADF (Bad file descriptor) [pid 5701] close(13) = -1 EBADF (Bad file descriptor) [pid 5701] close(14) = -1 EBADF (Bad file descriptor) [pid 5701] close(15) = -1 EBADF (Bad file descriptor) [pid 5701] close(16) = -1 EBADF (Bad file descriptor) [pid 5701] close(17) = -1 EBADF (Bad file descriptor) [pid 5701] close(18) = -1 EBADF (Bad file descriptor) [pid 5701] close(19) = -1 EBADF (Bad file descriptor) [pid 5701] close(20) = -1 EBADF (Bad file descriptor) [pid 5701] close(21) = -1 EBADF (Bad file descriptor) [pid 5701] close(22) = -1 EBADF (Bad file descriptor) [pid 5701] close(23) = -1 EBADF (Bad file descriptor) [pid 5701] close(24) = -1 EBADF (Bad file descriptor) [pid 5701] close(25) = -1 EBADF (Bad file descriptor) [pid 5701] close(26) = -1 EBADF (Bad file descriptor) [pid 5701] close(27) = -1 EBADF (Bad file descriptor) [pid 5701] close(28) = -1 EBADF (Bad file descriptor) [pid 5701] close(29) = -1 EBADF (Bad file descriptor) [pid 5701] exit_group(0) = ? [pid 5701] +++ exited with 0 +++ [pid 5609] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=56, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=21 /* 0.21 s */} --- [pid 5609] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5609] umount2("./54", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] openat(AT_FDCWD, "./54", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5609] fstat(3, {st_mode=S_IFDIR|0700, st_size=80, ...}) = 0 [pid 5609] getdents64(3, 0x555579655790 /* 4 entries */, 32768) = 112 [pid 5609] umount2("./54/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5609] umount2("./54/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] newfstatat(AT_FDCWD, "./54/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] umount2("./54/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] openat(AT_FDCWD, "./54/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5609] fstat(4, {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0 [pid 5609] getdents64(4, 0x55557965d7d0 /* 2 entries */, 32768) = 48 [pid 5609] getdents64(4, 0x55557965d7d0 /* 0 entries */, 32768) = 0 [pid 5609] close(4) = 0 [pid 5609] rmdir("./54/file2") = 0 [pid 5609] umount2("./54/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] newfstatat(AT_FDCWD, "./54/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] unlink("./54/binderfs") = 0 [pid 5609] getdents64(3, 0x555579655790 /* 0 entries */, 32768) = 0 [pid 5609] close(3) = 0 [pid 5609] rmdir("./54") = 0 [pid 5609] mkdir("./55", 0777) = 0 [pid 5609] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 [pid 5609] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5609] close(3) = 0 [pid 5609] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5609] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5702 attached [pid 5702] set_robust_list(0x5555796546e0, 24 [pid 5609] <... clone resumed>, child_tidptr=0x5555796546d0) = 57 [pid 5702] <... set_robust_list resumed>) = 0 [pid 5609] rt_sigprocmask(SIG_SETMASK, [] [pid 5702] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5609] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5702] chdir("./55") = 0 [pid 5702] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5702] setpgid(0, 0) = 0 [pid 5702] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5702] write(3, "1000", 4) = 4 [pid 5702] close(3) = 0 [pid 5702] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5702] write(1, "executing program\n", 18) = 18 executing program [pid 5702] memfd_create("syzkaller", 0) = 3 [pid 5702] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5702] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5702] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5702] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5702] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5702] close(3) = 0 [pid 5702] close(4) = 0 [pid 5702] mkdir("./file2", 0777) = 0 [pid 5702] mount("/dev/loop0", "./file2", "jfs", MS_NOEXEC|MS_NOATIME|MS_NODIRATIME|MS_I_VERSION, ",umask=0") = 0 [pid 5702] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5702] chdir("./file2") = 0 [pid 5702] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5702] ioctl(4, LOOP_CLR_FD) = 0 [pid 5702] close(4) = 0 [pid 5702] memfd_create("syzkaller", 0) = 4 [pid 5702] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5702] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8192) = 8192 [pid 5702] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5702] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5702] close(4) = 0 [pid 5702] memfd_create("syzkaller", 0) = 4 [pid 5702] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5702] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 83968) = 83968 [pid 5702] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5702] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 138.071666][ T5702] loop0: detected capacity change from 0 to 32768 [pid 5702] close(4) = 0 [pid 5702] fchown(-1, -1, 0) = -1 EBADF (Bad file descriptor) [pid 5702] open_by_handle_at(-100, NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5702] close(3) = 0 [pid 5702] close(4) = -1 EBADF (Bad file descriptor) [pid 5702] close(5) = -1 EBADF (Bad file descriptor) [pid 5702] close(6) = -1 EBADF (Bad file descriptor) [pid 5702] close(7) = -1 EBADF (Bad file descriptor) [pid 5702] close(8) = -1 EBADF (Bad file descriptor) [pid 5702] close(9) = -1 EBADF (Bad file descriptor) [pid 5702] close(10) = -1 EBADF (Bad file descriptor) [pid 5702] close(11) = -1 EBADF (Bad file descriptor) [pid 5702] close(12) = -1 EBADF (Bad file descriptor) [pid 5702] close(13) = -1 EBADF (Bad file descriptor) [pid 5702] close(14) = -1 EBADF (Bad file descriptor) [pid 5702] close(15) = -1 EBADF (Bad file descriptor) [pid 5702] close(16) = -1 EBADF (Bad file descriptor) [pid 5702] close(17) = -1 EBADF (Bad file descriptor) [pid 5702] close(18) = -1 EBADF (Bad file descriptor) [pid 5702] close(19) = -1 EBADF (Bad file descriptor) [pid 5702] close(20) = -1 EBADF (Bad file descriptor) [pid 5702] close(21) = -1 EBADF (Bad file descriptor) [pid 5702] close(22) = -1 EBADF (Bad file descriptor) [pid 5702] close(23) = -1 EBADF (Bad file descriptor) [pid 5702] close(24) = -1 EBADF (Bad file descriptor) [pid 5702] close(25) = -1 EBADF (Bad file descriptor) [pid 5702] close(26) = -1 EBADF (Bad file descriptor) [pid 5702] close(27) = -1 EBADF (Bad file descriptor) [pid 5702] close(28) = -1 EBADF (Bad file descriptor) [pid 5702] close(29) = -1 EBADF (Bad file descriptor) [pid 5702] exit_group(0) = ? [pid 5702] +++ exited with 0 +++ [pid 5609] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=57, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=22 /* 0.22 s */} --- [pid 5609] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5609] umount2("./55", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] openat(AT_FDCWD, "./55", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5609] fstat(3, {st_mode=S_IFDIR|0700, st_size=80, ...}) = 0 [pid 5609] getdents64(3, 0x555579655790 /* 4 entries */, 32768) = 112 [pid 5609] umount2("./55/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5609] umount2("./55/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] newfstatat(AT_FDCWD, "./55/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] umount2("./55/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] openat(AT_FDCWD, "./55/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5609] fstat(4, {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0 [pid 5609] getdents64(4, 0x55557965d7d0 /* 2 entries */, 32768) = 48 [pid 5609] getdents64(4, 0x55557965d7d0 /* 0 entries */, 32768) = 0 [pid 5609] close(4) = 0 [pid 5609] rmdir("./55/file2") = 0 [pid 5609] umount2("./55/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] newfstatat(AT_FDCWD, "./55/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] unlink("./55/binderfs") = 0 [pid 5609] getdents64(3, 0x555579655790 /* 0 entries */, 32768) = 0 [pid 5609] close(3) = 0 [pid 5609] rmdir("./55") = 0 [pid 5609] mkdir("./56", 0777) = 0 [pid 5609] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 [pid 5609] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5609] close(3) = 0 [pid 5609] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5609] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5703 attached , child_tidptr=0x5555796546d0) = 58 [pid 5609] rt_sigprocmask(SIG_SETMASK, [] [pid 5703] set_robust_list(0x5555796546e0, 24) = 0 [pid 5609] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5703] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5703] chdir("./56") = 0 [pid 5703] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5703] setpgid(0, 0) = 0 [pid 5703] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5703] write(3, "1000", 4) = 4 [pid 5703] close(3) = 0 [pid 5703] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5703] write(1, "executing program\n", 18) = 18 executing program [pid 5703] memfd_create("syzkaller", 0) = 3 [pid 5703] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5703] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5703] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5703] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5703] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5703] close(3) = 0 [pid 5703] close(4) = 0 [pid 5703] mkdir("./file2", 0777) = 0 [pid 5703] mount("/dev/loop0", "./file2", "jfs", MS_NOEXEC|MS_NOATIME|MS_NODIRATIME|MS_I_VERSION, ",umask=0") = 0 [pid 5703] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5703] chdir("./file2") = 0 [pid 5703] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5703] ioctl(4, LOOP_CLR_FD) = 0 [pid 5703] close(4) = 0 [pid 5703] memfd_create("syzkaller", 0) = 4 [pid 5703] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5703] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8192) = 8192 [pid 5703] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5703] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5703] close(4) = 0 [pid 5703] memfd_create("syzkaller", 0) = 4 [ 138.583379][ T5703] loop0: detected capacity change from 0 to 32768 [pid 5703] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5703] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 83968) = 83968 [pid 5703] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5703] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5703] close(4) = 0 [pid 5703] fchown(-1, -1, 0) = -1 EBADF (Bad file descriptor) [pid 5703] open_by_handle_at(-100, NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5703] close(3) = 0 [pid 5703] close(4) = -1 EBADF (Bad file descriptor) [pid 5703] close(5) = -1 EBADF (Bad file descriptor) [pid 5703] close(6) = -1 EBADF (Bad file descriptor) [pid 5703] close(7) = -1 EBADF (Bad file descriptor) [pid 5703] close(8) = -1 EBADF (Bad file descriptor) [pid 5703] close(9) = -1 EBADF (Bad file descriptor) [pid 5703] close(10) = -1 EBADF (Bad file descriptor) [pid 5703] close(11) = -1 EBADF (Bad file descriptor) [pid 5703] close(12) = -1 EBADF (Bad file descriptor) [pid 5703] close(13) = -1 EBADF (Bad file descriptor) [pid 5703] close(14) = -1 EBADF (Bad file descriptor) [pid 5703] close(15) = -1 EBADF (Bad file descriptor) [pid 5703] close(16) = -1 EBADF (Bad file descriptor) [pid 5703] close(17) = -1 EBADF (Bad file descriptor) [pid 5703] close(18) = -1 EBADF (Bad file descriptor) [pid 5703] close(19) = -1 EBADF (Bad file descriptor) [pid 5703] close(20) = -1 EBADF (Bad file descriptor) [pid 5703] close(21) = -1 EBADF (Bad file descriptor) [pid 5703] close(22) = -1 EBADF (Bad file descriptor) [pid 5703] close(23) = -1 EBADF (Bad file descriptor) [pid 5703] close(24) = -1 EBADF (Bad file descriptor) [pid 5703] close(25) = -1 EBADF (Bad file descriptor) [pid 5703] close(26) = -1 EBADF (Bad file descriptor) [pid 5703] close(27) = -1 EBADF (Bad file descriptor) [pid 5703] close(28) = -1 EBADF (Bad file descriptor) [pid 5703] close(29) = -1 EBADF (Bad file descriptor) [pid 5703] exit_group(0) = ? [pid 5703] +++ exited with 0 +++ [pid 5609] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=58, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=18 /* 0.18 s */} --- [pid 5609] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5609] umount2("./56", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] openat(AT_FDCWD, "./56", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5609] fstat(3, {st_mode=S_IFDIR|0700, st_size=80, ...}) = 0 [pid 5609] getdents64(3, 0x555579655790 /* 4 entries */, 32768) = 112 [pid 5609] umount2("./56/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5609] umount2("./56/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] newfstatat(AT_FDCWD, "./56/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] umount2("./56/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] openat(AT_FDCWD, "./56/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5609] fstat(4, {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0 [pid 5609] getdents64(4, 0x55557965d7d0 /* 2 entries */, 32768) = 48 [pid 5609] getdents64(4, 0x55557965d7d0 /* 0 entries */, 32768) = 0 [pid 5609] close(4) = 0 [pid 5609] rmdir("./56/file2") = 0 [pid 5609] umount2("./56/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] newfstatat(AT_FDCWD, "./56/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] unlink("./56/binderfs") = 0 [pid 5609] getdents64(3, 0x555579655790 /* 0 entries */, 32768) = 0 [pid 5609] close(3) = 0 [pid 5609] rmdir("./56") = 0 [pid 5609] mkdir("./57", 0777) = 0 [pid 5609] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 [pid 5609] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5609] close(3) = 0 [pid 5609] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5609] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5704 attached [pid 5704] set_robust_list(0x5555796546e0, 24 [pid 5609] <... clone resumed>, child_tidptr=0x5555796546d0) = 59 [pid 5704] <... set_robust_list resumed>) = 0 [pid 5704] rt_sigprocmask(SIG_SETMASK, [] [pid 5609] rt_sigprocmask(SIG_SETMASK, [] [pid 5704] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5609] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5704] chdir("./57") = 0 [pid 5704] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5704] setpgid(0, 0) = 0 [pid 5704] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5704] write(3, "1000", 4) = 4 [pid 5704] close(3) = 0 [pid 5704] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5704] write(1, "executing program\n", 18) = 18 executing program [pid 5704] memfd_create("syzkaller", 0) = 3 [pid 5704] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5704] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5704] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5704] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5704] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5704] close(3) = 0 [pid 5704] close(4) = 0 [pid 5704] mkdir("./file2", 0777) = 0 [pid 5704] mount("/dev/loop0", "./file2", "jfs", MS_NOEXEC|MS_NOATIME|MS_NODIRATIME|MS_I_VERSION, ",umask=0") = 0 [pid 5704] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5704] chdir("./file2") = 0 [pid 5704] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5704] ioctl(4, LOOP_CLR_FD) = 0 [pid 5704] close(4) = 0 [pid 5704] memfd_create("syzkaller", 0) = 4 [pid 5704] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [ 139.173128][ T5704] loop0: detected capacity change from 0 to 32768 [pid 5704] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8192) = 8192 [pid 5704] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5704] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5704] close(4) = 0 [pid 5704] memfd_create("syzkaller", 0) = 4 [pid 5704] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5704] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 83968) = 83968 [pid 5704] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5704] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5704] close(4) = 0 [pid 5704] fchown(-1, -1, 0) = -1 EBADF (Bad file descriptor) [pid 5704] open_by_handle_at(-100, NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5704] close(3) = 0 [pid 5704] close(4) = -1 EBADF (Bad file descriptor) [pid 5704] close(5) = -1 EBADF (Bad file descriptor) [pid 5704] close(6) = -1 EBADF (Bad file descriptor) [pid 5704] close(7) = -1 EBADF (Bad file descriptor) [pid 5704] close(8) = -1 EBADF (Bad file descriptor) [pid 5704] close(9) = -1 EBADF (Bad file descriptor) [pid 5704] close(10) = -1 EBADF (Bad file descriptor) [pid 5704] close(11) = -1 EBADF (Bad file descriptor) [pid 5704] close(12) = -1 EBADF (Bad file descriptor) [pid 5704] close(13) = -1 EBADF (Bad file descriptor) [pid 5704] close(14) = -1 EBADF (Bad file descriptor) [pid 5704] close(15) = -1 EBADF (Bad file descriptor) [pid 5704] close(16) = -1 EBADF (Bad file descriptor) [pid 5704] close(17) = -1 EBADF (Bad file descriptor) [pid 5704] close(18) = -1 EBADF (Bad file descriptor) [pid 5704] close(19) = -1 EBADF (Bad file descriptor) [pid 5704] close(20) = -1 EBADF (Bad file descriptor) [pid 5704] close(21) = -1 EBADF (Bad file descriptor) [pid 5704] close(22) = -1 EBADF (Bad file descriptor) [pid 5704] close(23) = -1 EBADF (Bad file descriptor) [pid 5704] close(24) = -1 EBADF (Bad file descriptor) [pid 5704] close(25) = -1 EBADF (Bad file descriptor) [pid 5704] close(26) = -1 EBADF (Bad file descriptor) [pid 5704] close(27) = -1 EBADF (Bad file descriptor) [pid 5704] close(28) = -1 EBADF (Bad file descriptor) [pid 5704] close(29) = -1 EBADF (Bad file descriptor) [pid 5704] exit_group(0) = ? [pid 5704] +++ exited with 0 +++ [pid 5609] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=59, si_uid=0, si_status=0, si_utime=0, si_stime=22 /* 0.22 s */} --- [pid 5609] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5609] umount2("./57", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] openat(AT_FDCWD, "./57", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5609] fstat(3, {st_mode=S_IFDIR|0700, st_size=80, ...}) = 0 [pid 5609] getdents64(3, 0x555579655790 /* 4 entries */, 32768) = 112 [pid 5609] umount2("./57/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5609] umount2("./57/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] newfstatat(AT_FDCWD, "./57/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] umount2("./57/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] openat(AT_FDCWD, "./57/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5609] fstat(4, {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0 [pid 5609] getdents64(4, 0x55557965d7d0 /* 2 entries */, 32768) = 48 [pid 5609] getdents64(4, 0x55557965d7d0 /* 0 entries */, 32768) = 0 [pid 5609] close(4) = 0 [pid 5609] rmdir("./57/file2") = 0 [pid 5609] umount2("./57/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] newfstatat(AT_FDCWD, "./57/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] unlink("./57/binderfs") = 0 [pid 5609] getdents64(3, 0x555579655790 /* 0 entries */, 32768) = 0 [pid 5609] close(3) = 0 [pid 5609] rmdir("./57") = 0 [pid 5609] mkdir("./58", 0777) = 0 [pid 5609] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 [pid 5609] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5609] close(3) = 0 [pid 5609] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5609] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555796546d0) = 60 [pid 5609] rt_sigprocmask(SIG_SETMASK, []ci2-upstream-fs/strace-static-x86_64: Process 5705 attached , NULL, 8) = 0 [pid 5705] set_robust_list(0x5555796546e0, 24) = 0 [pid 5705] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5705] chdir("./58") = 0 [pid 5705] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5705] setpgid(0, 0) = 0 [pid 5705] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5705] write(3, "1000", 4) = 4 [pid 5705] close(3) = 0 [pid 5705] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5705] write(1, "executing program\n", 18) = 18 executing program [pid 5705] memfd_create("syzkaller", 0) = 3 [pid 5705] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5705] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5705] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5705] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5705] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5705] close(3) = 0 [pid 5705] close(4) = 0 [pid 5705] mkdir("./file2", 0777) = 0 [pid 5705] mount("/dev/loop0", "./file2", "jfs", MS_NOEXEC|MS_NOATIME|MS_NODIRATIME|MS_I_VERSION, ",umask=0") = 0 [pid 5705] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5705] chdir("./file2") = 0 [pid 5705] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5705] ioctl(4, LOOP_CLR_FD) = 0 [pid 5705] close(4) = 0 [pid 5705] memfd_create("syzkaller", 0) = 4 [pid 5705] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5705] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8192) = 8192 [pid 5705] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5705] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5705] close(4) = 0 [pid 5705] memfd_create("syzkaller", 0) = 4 [pid 5705] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5705] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 83968) = 83968 [pid 5705] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5705] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5705] close(4) = 0 [pid 5705] fchown(-1, -1, 0) = -1 EBADF (Bad file descriptor) [pid 5705] open_by_handle_at(-100, NULL, O_RDONLY) = -1 EFAULT (Bad address) [ 139.740687][ T5705] loop0: detected capacity change from 0 to 32768 [pid 5705] close(3) = 0 [pid 5705] close(4) = -1 EBADF (Bad file descriptor) [pid 5705] close(5) = -1 EBADF (Bad file descriptor) [pid 5705] close(6) = -1 EBADF (Bad file descriptor) [pid 5705] close(7) = -1 EBADF (Bad file descriptor) [pid 5705] close(8) = -1 EBADF (Bad file descriptor) [pid 5705] close(9) = -1 EBADF (Bad file descriptor) [pid 5705] close(10) = -1 EBADF (Bad file descriptor) [pid 5705] close(11) = -1 EBADF (Bad file descriptor) [pid 5705] close(12) = -1 EBADF (Bad file descriptor) [pid 5705] close(13) = -1 EBADF (Bad file descriptor) [pid 5705] close(14) = -1 EBADF (Bad file descriptor) [pid 5705] close(15) = -1 EBADF (Bad file descriptor) [pid 5705] close(16) = -1 EBADF (Bad file descriptor) [pid 5705] close(17) = -1 EBADF (Bad file descriptor) [pid 5705] close(18) = -1 EBADF (Bad file descriptor) [pid 5705] close(19) = -1 EBADF (Bad file descriptor) [pid 5705] close(20) = -1 EBADF (Bad file descriptor) [pid 5705] close(21) = -1 EBADF (Bad file descriptor) [pid 5705] close(22) = -1 EBADF (Bad file descriptor) [pid 5705] close(23) = -1 EBADF (Bad file descriptor) [pid 5705] close(24) = -1 EBADF (Bad file descriptor) [pid 5705] close(25) = -1 EBADF (Bad file descriptor) [pid 5705] close(26) = -1 EBADF (Bad file descriptor) [pid 5705] close(27) = -1 EBADF (Bad file descriptor) [pid 5705] close(28) = -1 EBADF (Bad file descriptor) [pid 5705] close(29) = -1 EBADF (Bad file descriptor) [pid 5705] exit_group(0) = ? [pid 5705] +++ exited with 0 +++ [pid 5609] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=60, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=18 /* 0.18 s */} --- [pid 5609] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5609] umount2("./58", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] openat(AT_FDCWD, "./58", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5609] fstat(3, {st_mode=S_IFDIR|0700, st_size=80, ...}) = 0 [pid 5609] getdents64(3, 0x555579655790 /* 4 entries */, 32768) = 112 [pid 5609] umount2("./58/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5609] umount2("./58/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] newfstatat(AT_FDCWD, "./58/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] umount2("./58/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] openat(AT_FDCWD, "./58/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5609] fstat(4, {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0 [pid 5609] getdents64(4, 0x55557965d7d0 /* 2 entries */, 32768) = 48 [pid 5609] getdents64(4, 0x55557965d7d0 /* 0 entries */, 32768) = 0 [pid 5609] close(4) = 0 [pid 5609] rmdir("./58/file2") = 0 [pid 5609] umount2("./58/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] newfstatat(AT_FDCWD, "./58/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] unlink("./58/binderfs") = 0 [pid 5609] getdents64(3, 0x555579655790 /* 0 entries */, 32768) = 0 [pid 5609] close(3) = 0 [pid 5609] rmdir("./58") = 0 [pid 5609] mkdir("./59", 0777) = 0 [pid 5609] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 [pid 5609] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5609] close(3) = 0 [pid 5609] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5609] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5706 attached , child_tidptr=0x5555796546d0) = 61 [pid 5706] set_robust_list(0x5555796546e0, 24 [pid 5609] rt_sigprocmask(SIG_SETMASK, [] [pid 5706] <... set_robust_list resumed>) = 0 [pid 5706] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5609] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5706] chdir("./59") = 0 [pid 5706] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5706] setpgid(0, 0) = 0 [pid 5706] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5706] write(3, "1000", 4) = 4 [pid 5706] close(3) = 0 [pid 5706] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5706] write(1, "executing program\n", 18) = 18 executing program [pid 5706] memfd_create("syzkaller", 0) = 3 [pid 5706] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5706] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5706] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5706] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5706] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5706] close(3) = 0 [pid 5706] close(4) = 0 [pid 5706] mkdir("./file2", 0777) = 0 [pid 5706] mount("/dev/loop0", "./file2", "jfs", MS_NOEXEC|MS_NOATIME|MS_NODIRATIME|MS_I_VERSION, ",umask=0") = 0 [pid 5706] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5706] chdir("./file2") = 0 [pid 5706] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5706] ioctl(4, LOOP_CLR_FD) = 0 [pid 5706] close(4) = 0 [pid 5706] memfd_create("syzkaller", 0) = 4 [pid 5706] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5706] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8192) = 8192 [pid 5706] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5706] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5706] close(4) = 0 [pid 5706] memfd_create("syzkaller", 0) = 4 [pid 5706] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [ 140.304193][ T5706] loop0: detected capacity change from 0 to 32768 [pid 5706] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 83968) = 83968 [pid 5706] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5706] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5706] close(4) = 0 [pid 5706] fchown(-1, -1, 0) = -1 EBADF (Bad file descriptor) [pid 5706] open_by_handle_at(-100, NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5706] close(3) = 0 [pid 5706] close(4) = -1 EBADF (Bad file descriptor) [pid 5706] close(5) = -1 EBADF (Bad file descriptor) [pid 5706] close(6) = -1 EBADF (Bad file descriptor) [pid 5706] close(7) = -1 EBADF (Bad file descriptor) [pid 5706] close(8) = -1 EBADF (Bad file descriptor) [pid 5706] close(9) = -1 EBADF (Bad file descriptor) [pid 5706] close(10) = -1 EBADF (Bad file descriptor) [pid 5706] close(11) = -1 EBADF (Bad file descriptor) [pid 5706] close(12) = -1 EBADF (Bad file descriptor) [pid 5706] close(13) = -1 EBADF (Bad file descriptor) [pid 5706] close(14) = -1 EBADF (Bad file descriptor) [pid 5706] close(15) = -1 EBADF (Bad file descriptor) [pid 5706] close(16) = -1 EBADF (Bad file descriptor) [pid 5706] close(17) = -1 EBADF (Bad file descriptor) [pid 5706] close(18) = -1 EBADF (Bad file descriptor) [pid 5706] close(19) = -1 EBADF (Bad file descriptor) [pid 5706] close(20) = -1 EBADF (Bad file descriptor) [pid 5706] close(21) = -1 EBADF (Bad file descriptor) [pid 5706] close(22) = -1 EBADF (Bad file descriptor) [pid 5706] close(23) = -1 EBADF (Bad file descriptor) [pid 5706] close(24) = -1 EBADF (Bad file descriptor) [pid 5706] close(25) = -1 EBADF (Bad file descriptor) [pid 5706] close(26) = -1 EBADF (Bad file descriptor) [pid 5706] close(27) = -1 EBADF (Bad file descriptor) [pid 5706] close(28) = -1 EBADF (Bad file descriptor) [pid 5706] close(29) = -1 EBADF (Bad file descriptor) [pid 5706] exit_group(0) = ? [pid 5706] +++ exited with 0 +++ [pid 5609] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=61, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=19 /* 0.19 s */} --- [pid 5609] umount2("./59", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] openat(AT_FDCWD, "./59", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5609] fstat(3, {st_mode=S_IFDIR|0700, st_size=80, ...}) = 0 [pid 5609] getdents64(3, 0x555579655790 /* 4 entries */, 32768) = 112 [pid 5609] umount2("./59/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5609] umount2("./59/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] newfstatat(AT_FDCWD, "./59/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] umount2("./59/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] openat(AT_FDCWD, "./59/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5609] fstat(4, {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0 [pid 5609] getdents64(4, 0x55557965d7d0 /* 2 entries */, 32768) = 48 [pid 5609] getdents64(4, 0x55557965d7d0 /* 0 entries */, 32768) = 0 [pid 5609] close(4) = 0 [pid 5609] rmdir("./59/file2") = 0 [pid 5609] umount2("./59/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] newfstatat(AT_FDCWD, "./59/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] unlink("./59/binderfs") = 0 [pid 5609] getdents64(3, 0x555579655790 /* 0 entries */, 32768) = 0 [pid 5609] close(3) = 0 [pid 5609] rmdir("./59") = 0 [pid 5609] mkdir("./60", 0777) = 0 [pid 5609] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 [pid 5609] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5609] close(3) = 0 [pid 5609] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5609] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5707 attached , child_tidptr=0x5555796546d0) = 62 [pid 5609] rt_sigprocmask(SIG_SETMASK, [] [pid 5707] set_robust_list(0x5555796546e0, 24) = 0 [pid 5609] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5707] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5707] chdir("./60") = 0 [pid 5707] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5707] setpgid(0, 0) = 0 [pid 5707] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5707] write(3, "1000", 4) = 4 [pid 5707] close(3) = 0 [pid 5707] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5707] write(1, "executing program\n", 18) = 18 [pid 5707] memfd_create("syzkaller", 0) = 3 [pid 5707] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5707] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5707] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5707] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5707] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5707] close(3) = 0 [pid 5707] close(4) = 0 [pid 5707] mkdir("./file2", 0777) = 0 [pid 5707] mount("/dev/loop0", "./file2", "jfs", MS_NOEXEC|MS_NOATIME|MS_NODIRATIME|MS_I_VERSION, ",umask=0") = 0 [pid 5707] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5707] chdir("./file2") = 0 [pid 5707] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5707] ioctl(4, LOOP_CLR_FD) = 0 [pid 5707] close(4) = 0 [pid 5707] memfd_create("syzkaller", 0) = 4 [pid 5707] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5707] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8192) = 8192 [pid 5707] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5707] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 140.797629][ T5707] loop0: detected capacity change from 0 to 32768 [pid 5707] close(4) = 0 [pid 5707] memfd_create("syzkaller", 0) = 4 [pid 5707] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5707] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 83968) = 83968 [pid 5707] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5707] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5707] close(4) = 0 [pid 5707] fchown(-1, -1, 0) = -1 EBADF (Bad file descriptor) [pid 5707] open_by_handle_at(-100, NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5707] close(3) = 0 [pid 5707] close(4) = -1 EBADF (Bad file descriptor) [pid 5707] close(5) = -1 EBADF (Bad file descriptor) [pid 5707] close(6) = -1 EBADF (Bad file descriptor) [pid 5707] close(7) = -1 EBADF (Bad file descriptor) [pid 5707] close(8) = -1 EBADF (Bad file descriptor) [pid 5707] close(9) = -1 EBADF (Bad file descriptor) [pid 5707] close(10) = -1 EBADF (Bad file descriptor) [pid 5707] close(11) = -1 EBADF (Bad file descriptor) [pid 5707] close(12) = -1 EBADF (Bad file descriptor) [pid 5707] close(13) = -1 EBADF (Bad file descriptor) [pid 5707] close(14) = -1 EBADF (Bad file descriptor) [pid 5707] close(15) = -1 EBADF (Bad file descriptor) [pid 5707] close(16) = -1 EBADF (Bad file descriptor) [pid 5707] close(17) = -1 EBADF (Bad file descriptor) [pid 5707] close(18) = -1 EBADF (Bad file descriptor) [pid 5707] close(19) = -1 EBADF (Bad file descriptor) [pid 5707] close(20) = -1 EBADF (Bad file descriptor) [pid 5707] close(21) = -1 EBADF (Bad file descriptor) [pid 5707] close(22) = -1 EBADF (Bad file descriptor) [pid 5707] close(23) = -1 EBADF (Bad file descriptor) [pid 5707] close(24) = -1 EBADF (Bad file descriptor) [pid 5707] close(25) = -1 EBADF (Bad file descriptor) [pid 5707] close(26) = -1 EBADF (Bad file descriptor) [pid 5707] close(27) = -1 EBADF (Bad file descriptor) [pid 5707] close(28) = -1 EBADF (Bad file descriptor) [pid 5707] close(29) = -1 EBADF (Bad file descriptor) [pid 5707] exit_group(0) = ? [pid 5707] +++ exited with 0 +++ [pid 5609] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=62, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=19 /* 0.19 s */} --- [pid 5609] umount2("./60", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] openat(AT_FDCWD, "./60", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5609] fstat(3, {st_mode=S_IFDIR|0700, st_size=80, ...}) = 0 [pid 5609] getdents64(3, 0x555579655790 /* 4 entries */, 32768) = 112 [pid 5609] umount2("./60/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5609] umount2("./60/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] newfstatat(AT_FDCWD, "./60/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] umount2("./60/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] openat(AT_FDCWD, "./60/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5609] fstat(4, {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0 [pid 5609] getdents64(4, 0x55557965d7d0 /* 2 entries */, 32768) = 48 [pid 5609] getdents64(4, 0x55557965d7d0 /* 0 entries */, 32768) = 0 [pid 5609] close(4) = 0 [pid 5609] rmdir("./60/file2") = 0 [pid 5609] umount2("./60/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] newfstatat(AT_FDCWD, "./60/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] unlink("./60/binderfs") = 0 [pid 5609] getdents64(3, 0x555579655790 /* 0 entries */, 32768) = 0 [pid 5609] close(3) = 0 [pid 5609] rmdir("./60") = 0 [pid 5609] mkdir("./61", 0777) = 0 [pid 5609] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 [pid 5609] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5609] close(3) = 0 [pid 5609] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5609] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5708 attached , child_tidptr=0x5555796546d0) = 63 [pid 5609] rt_sigprocmask(SIG_SETMASK, [] [pid 5708] set_robust_list(0x5555796546e0, 24) = 0 [pid 5609] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5708] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5708] chdir("./61") = 0 [pid 5708] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5708] setpgid(0, 0) = 0 [pid 5708] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5708] write(3, "1000", 4) = 4 [pid 5708] close(3) = 0 [pid 5708] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5708] write(1, "executing program\n", 18) = 18 executing program [pid 5708] memfd_create("syzkaller", 0) = 3 [pid 5708] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5708] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5708] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5708] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5708] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5708] close(3) = 0 [pid 5708] close(4) = 0 [pid 5708] mkdir("./file2", 0777) = 0 [pid 5708] mount("/dev/loop0", "./file2", "jfs", MS_NOEXEC|MS_NOATIME|MS_NODIRATIME|MS_I_VERSION, ",umask=0") = 0 [pid 5708] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5708] chdir("./file2") = 0 [pid 5708] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5708] ioctl(4, LOOP_CLR_FD) = 0 [pid 5708] close(4) = 0 [pid 5708] memfd_create("syzkaller", 0) = 4 [pid 5708] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5708] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8192) = 8192 [pid 5708] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5708] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5708] close(4) = 0 [pid 5708] memfd_create("syzkaller", 0) = 4 [pid 5708] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5708] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 83968) = 83968 [pid 5708] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5708] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5708] close(4) = 0 [pid 5708] fchown(-1, -1, 0) = -1 EBADF (Bad file descriptor) [ 141.370222][ T5708] loop0: detected capacity change from 0 to 32768 [pid 5708] open_by_handle_at(-100, NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5708] close(3) = 0 [pid 5708] close(4) = -1 EBADF (Bad file descriptor) [pid 5708] close(5) = -1 EBADF (Bad file descriptor) [pid 5708] close(6) = -1 EBADF (Bad file descriptor) [pid 5708] close(7) = -1 EBADF (Bad file descriptor) [pid 5708] close(8) = -1 EBADF (Bad file descriptor) [pid 5708] close(9) = -1 EBADF (Bad file descriptor) [pid 5708] close(10) = -1 EBADF (Bad file descriptor) [pid 5708] close(11) = -1 EBADF (Bad file descriptor) [pid 5708] close(12) = -1 EBADF (Bad file descriptor) [pid 5708] close(13) = -1 EBADF (Bad file descriptor) [pid 5708] close(14) = -1 EBADF (Bad file descriptor) [pid 5708] close(15) = -1 EBADF (Bad file descriptor) [pid 5708] close(16) = -1 EBADF (Bad file descriptor) [pid 5708] close(17) = -1 EBADF (Bad file descriptor) [pid 5708] close(18) = -1 EBADF (Bad file descriptor) [pid 5708] close(19) = -1 EBADF (Bad file descriptor) [pid 5708] close(20) = -1 EBADF (Bad file descriptor) [pid 5708] close(21) = -1 EBADF (Bad file descriptor) [pid 5708] close(22) = -1 EBADF (Bad file descriptor) [pid 5708] close(23) = -1 EBADF (Bad file descriptor) [pid 5708] close(24) = -1 EBADF (Bad file descriptor) [pid 5708] close(25) = -1 EBADF (Bad file descriptor) [pid 5708] close(26) = -1 EBADF (Bad file descriptor) [pid 5708] close(27) = -1 EBADF (Bad file descriptor) [pid 5708] close(28) = -1 EBADF (Bad file descriptor) [pid 5708] close(29) = -1 EBADF (Bad file descriptor) [pid 5708] exit_group(0) = ? [pid 5708] +++ exited with 0 +++ [pid 5609] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=63, si_uid=0, si_status=0, si_utime=0, si_stime=24 /* 0.24 s */} --- [pid 5609] umount2("./61", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] openat(AT_FDCWD, "./61", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5609] fstat(3, {st_mode=S_IFDIR|0700, st_size=80, ...}) = 0 [pid 5609] getdents64(3, 0x555579655790 /* 4 entries */, 32768) = 112 [pid 5609] umount2("./61/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5609] umount2("./61/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] newfstatat(AT_FDCWD, "./61/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] umount2("./61/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] openat(AT_FDCWD, "./61/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5609] fstat(4, {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0 [pid 5609] getdents64(4, 0x55557965d7d0 /* 2 entries */, 32768) = 48 [pid 5609] getdents64(4, 0x55557965d7d0 /* 0 entries */, 32768) = 0 [pid 5609] close(4) = 0 [pid 5609] rmdir("./61/file2") = 0 [pid 5609] umount2("./61/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] newfstatat(AT_FDCWD, "./61/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] unlink("./61/binderfs") = 0 [pid 5609] getdents64(3, 0x555579655790 /* 0 entries */, 32768) = 0 [pid 5609] close(3) = 0 [pid 5609] rmdir("./61") = 0 [pid 5609] mkdir("./62", 0777) = 0 [pid 5609] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 [pid 5609] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5609] close(3) = 0 [pid 5609] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5609] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555796546d0) = 64 ci2-upstream-fs/strace-static-x86_64: Process 5709 attached [pid 5609] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5709] set_robust_list(0x5555796546e0, 24) = 0 [pid 5709] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5709] chdir("./62") = 0 [pid 5709] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5709] setpgid(0, 0) = 0 [pid 5709] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5709] write(3, "1000", 4) = 4 [pid 5709] close(3) = 0 [pid 5709] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5709] write(1, "executing program\n", 18) = 18 [pid 5709] memfd_create("syzkaller", 0) = 3 [pid 5709] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5709] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5709] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5709] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5709] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5709] close(3) = 0 [pid 5709] close(4) = 0 [pid 5709] mkdir("./file2", 0777) = 0 [pid 5709] mount("/dev/loop0", "./file2", "jfs", MS_NOEXEC|MS_NOATIME|MS_NODIRATIME|MS_I_VERSION, ",umask=0") = 0 [pid 5709] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5709] chdir("./file2") = 0 [pid 5709] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5709] ioctl(4, LOOP_CLR_FD) = 0 [pid 5709] close(4) = 0 [pid 5709] memfd_create("syzkaller", 0) = 4 [pid 5709] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5709] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8192) = 8192 [pid 5709] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5709] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5709] close(4) = 0 [pid 5709] memfd_create("syzkaller", 0) = 4 [pid 5709] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5709] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 83968) = 83968 [pid 5709] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5709] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5709] close(4) = 0 [pid 5709] fchown(-1, -1, 0) = -1 EBADF (Bad file descriptor) [pid 5709] open_by_handle_at(-100, NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5709] close(3) = 0 [pid 5709] close(4) = -1 EBADF (Bad file descriptor) [pid 5709] close(5) = -1 EBADF (Bad file descriptor) [pid 5709] close(6) = -1 EBADF (Bad file descriptor) [pid 5709] close(7) = -1 EBADF (Bad file descriptor) [pid 5709] close(8) = -1 EBADF (Bad file descriptor) [pid 5709] close(9) = -1 EBADF (Bad file descriptor) [pid 5709] close(10) = -1 EBADF (Bad file descriptor) [pid 5709] close(11) = -1 EBADF (Bad file descriptor) [pid 5709] close(12) = -1 EBADF (Bad file descriptor) [pid 5709] close(13) = -1 EBADF (Bad file descriptor) [pid 5709] close(14) = -1 EBADF (Bad file descriptor) [ 141.921616][ T5709] loop0: detected capacity change from 0 to 32768 [pid 5709] close(15) = -1 EBADF (Bad file descriptor) [pid 5709] close(16) = -1 EBADF (Bad file descriptor) [pid 5709] close(17) = -1 EBADF (Bad file descriptor) [pid 5709] close(18) = -1 EBADF (Bad file descriptor) [pid 5709] close(19) = -1 EBADF (Bad file descriptor) [pid 5709] close(20) = -1 EBADF (Bad file descriptor) [pid 5709] close(21) = -1 EBADF (Bad file descriptor) [pid 5709] close(22) = -1 EBADF (Bad file descriptor) [pid 5709] close(23) = -1 EBADF (Bad file descriptor) [pid 5709] close(24) = -1 EBADF (Bad file descriptor) [pid 5709] close(25) = -1 EBADF (Bad file descriptor) [pid 5709] close(26) = -1 EBADF (Bad file descriptor) [pid 5709] close(27) = -1 EBADF (Bad file descriptor) [pid 5709] close(28) = -1 EBADF (Bad file descriptor) [pid 5709] close(29) = -1 EBADF (Bad file descriptor) [pid 5709] exit_group(0) = ? [pid 5709] +++ exited with 0 +++ [pid 5609] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=64, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=18 /* 0.18 s */} --- [pid 5609] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5609] umount2("./62", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] openat(AT_FDCWD, "./62", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5609] fstat(3, {st_mode=S_IFDIR|0700, st_size=80, ...}) = 0 [pid 5609] getdents64(3, 0x555579655790 /* 4 entries */, 32768) = 112 [pid 5609] umount2("./62/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5609] umount2("./62/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] newfstatat(AT_FDCWD, "./62/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] umount2("./62/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] openat(AT_FDCWD, "./62/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5609] fstat(4, {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0 [pid 5609] getdents64(4, 0x55557965d7d0 /* 2 entries */, 32768) = 48 [pid 5609] getdents64(4, 0x55557965d7d0 /* 0 entries */, 32768) = 0 [pid 5609] close(4) = 0 [pid 5609] rmdir("./62/file2") = 0 [pid 5609] umount2("./62/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] newfstatat(AT_FDCWD, "./62/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] unlink("./62/binderfs") = 0 [pid 5609] getdents64(3, 0x555579655790 /* 0 entries */, 32768) = 0 [pid 5609] close(3) = 0 [pid 5609] rmdir("./62") = 0 [pid 5609] mkdir("./63", 0777) = 0 [pid 5609] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 [pid 5609] ioctl(3, LOOP_CLR_FD) = 0 [pid 5609] close(3) = 0 [pid 5609] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5609] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5710 attached , child_tidptr=0x5555796546d0) = 65 [pid 5609] rt_sigprocmask(SIG_SETMASK, [] [pid 5710] set_robust_list(0x5555796546e0, 24 [pid 5609] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5710] <... set_robust_list resumed>) = 0 [pid 5710] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5710] chdir("./63") = 0 [pid 5710] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5710] setpgid(0, 0) = 0 [pid 5710] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5710] write(3, "1000", 4) = 4 [pid 5710] close(3) = 0 [pid 5710] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5710] write(1, "executing program\n", 18) = 18 executing program [pid 5710] memfd_create("syzkaller", 0) = 3 [pid 5710] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5710] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5710] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5710] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5710] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5710] close(3) = 0 [pid 5710] close(4) = 0 [pid 5710] mkdir("./file2", 0777) = 0 [pid 5710] mount("/dev/loop0", "./file2", "jfs", MS_NOEXEC|MS_NOATIME|MS_NODIRATIME|MS_I_VERSION, ",umask=0") = 0 [pid 5710] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5710] chdir("./file2") = 0 [pid 5710] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5710] ioctl(4, LOOP_CLR_FD) = 0 [pid 5710] close(4) = 0 [pid 5710] memfd_create("syzkaller", 0) = 4 [pid 5710] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5710] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8192) = 8192 [pid 5710] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5710] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5710] close(4) = 0 [ 142.459667][ T5710] loop0: detected capacity change from 0 to 32768 [pid 5710] memfd_create("syzkaller", 0) = 4 [pid 5710] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5710] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 83968) = 83968 [pid 5710] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5710] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5710] close(4) = 0 [pid 5710] fchown(-1, -1, 0) = -1 EBADF (Bad file descriptor) [pid 5710] open_by_handle_at(-100, NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5710] close(3) = 0 [pid 5710] close(4) = -1 EBADF (Bad file descriptor) [pid 5710] close(5) = -1 EBADF (Bad file descriptor) [pid 5710] close(6) = -1 EBADF (Bad file descriptor) [pid 5710] close(7) = -1 EBADF (Bad file descriptor) [pid 5710] close(8) = -1 EBADF (Bad file descriptor) [pid 5710] close(9) = -1 EBADF (Bad file descriptor) [pid 5710] close(10) = -1 EBADF (Bad file descriptor) [pid 5710] close(11) = -1 EBADF (Bad file descriptor) [pid 5710] close(12) = -1 EBADF (Bad file descriptor) [pid 5710] close(13) = -1 EBADF (Bad file descriptor) [pid 5710] close(14) = -1 EBADF (Bad file descriptor) [pid 5710] close(15) = -1 EBADF (Bad file descriptor) [pid 5710] close(16) = -1 EBADF (Bad file descriptor) [pid 5710] close(17) = -1 EBADF (Bad file descriptor) [pid 5710] close(18) = -1 EBADF (Bad file descriptor) [pid 5710] close(19) = -1 EBADF (Bad file descriptor) [pid 5710] close(20) = -1 EBADF (Bad file descriptor) [pid 5710] close(21) = -1 EBADF (Bad file descriptor) [pid 5710] close(22) = -1 EBADF (Bad file descriptor) [pid 5710] close(23) = -1 EBADF (Bad file descriptor) [pid 5710] close(24) = -1 EBADF (Bad file descriptor) [pid 5710] close(25) = -1 EBADF (Bad file descriptor) [pid 5710] close(26) = -1 EBADF (Bad file descriptor) [pid 5710] close(27) = -1 EBADF (Bad file descriptor) [pid 5710] close(28) = -1 EBADF (Bad file descriptor) [pid 5710] close(29) = -1 EBADF (Bad file descriptor) [pid 5710] exit_group(0) = ? [pid 5710] +++ exited with 0 +++ [pid 5609] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=65, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=21 /* 0.21 s */} --- [pid 5609] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5609] umount2("./63", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] openat(AT_FDCWD, "./63", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5609] fstat(3, {st_mode=S_IFDIR|0700, st_size=80, ...}) = 0 [pid 5609] getdents64(3, 0x555579655790 /* 4 entries */, 32768) = 112 [pid 5609] umount2("./63/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5609] umount2("./63/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] newfstatat(AT_FDCWD, "./63/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] umount2("./63/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] openat(AT_FDCWD, "./63/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5609] fstat(4, {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0 [pid 5609] getdents64(4, 0x55557965d7d0 /* 2 entries */, 32768) = 48 [pid 5609] getdents64(4, 0x55557965d7d0 /* 0 entries */, 32768) = 0 [pid 5609] close(4) = 0 [pid 5609] rmdir("./63/file2") = 0 [pid 5609] umount2("./63/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] newfstatat(AT_FDCWD, "./63/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] unlink("./63/binderfs") = 0 [pid 5609] getdents64(3, 0x555579655790 /* 0 entries */, 32768) = 0 [pid 5609] close(3) = 0 [pid 5609] rmdir("./63") = 0 [pid 5609] mkdir("./64", 0777) = 0 [pid 5609] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 [pid 5609] ioctl(3, LOOP_CLR_FD) = 0 [pid 5609] close(3) = 0 [pid 5609] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5609] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5711 attached , child_tidptr=0x5555796546d0) = 66 [pid 5711] set_robust_list(0x5555796546e0, 24 [pid 5609] rt_sigprocmask(SIG_SETMASK, [] [pid 5711] <... set_robust_list resumed>) = 0 [pid 5609] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5711] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5711] chdir("./64") = 0 [pid 5711] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5711] setpgid(0, 0) = 0 [pid 5711] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5711] write(3, "1000", 4) = 4 [pid 5711] close(3) = 0 [pid 5711] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5711] write(1, "executing program\n", 18) = 18 [pid 5711] memfd_create("syzkaller", 0) = 3 [pid 5711] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5711] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5711] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5711] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5711] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5711] close(3) = 0 [pid 5711] close(4) = 0 [pid 5711] mkdir("./file2", 0777) = 0 [pid 5711] mount("/dev/loop0", "./file2", "jfs", MS_NOEXEC|MS_NOATIME|MS_NODIRATIME|MS_I_VERSION, ",umask=0") = 0 [pid 5711] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5711] chdir("./file2") = 0 [pid 5711] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5711] ioctl(4, LOOP_CLR_FD) = 0 [pid 5711] close(4) = 0 [pid 5711] memfd_create("syzkaller", 0) = 4 [ 142.967912][ T5711] loop0: detected capacity change from 0 to 32768 [pid 5711] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5711] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8192) = 8192 [pid 5711] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5711] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5711] close(4) = 0 [pid 5711] memfd_create("syzkaller", 0) = 4 [pid 5711] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5711] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 83968) = 83968 [pid 5711] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5711] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5711] close(4) = 0 [pid 5711] fchown(-1, -1, 0) = -1 EBADF (Bad file descriptor) [pid 5711] open_by_handle_at(-100, NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5711] close(3) = 0 [pid 5711] close(4) = -1 EBADF (Bad file descriptor) [pid 5711] close(5) = -1 EBADF (Bad file descriptor) [pid 5711] close(6) = -1 EBADF (Bad file descriptor) [pid 5711] close(7) = -1 EBADF (Bad file descriptor) [pid 5711] close(8) = -1 EBADF (Bad file descriptor) [pid 5711] close(9) = -1 EBADF (Bad file descriptor) [pid 5711] close(10) = -1 EBADF (Bad file descriptor) [pid 5711] close(11) = -1 EBADF (Bad file descriptor) [pid 5711] close(12) = -1 EBADF (Bad file descriptor) [pid 5711] close(13) = -1 EBADF (Bad file descriptor) [pid 5711] close(14) = -1 EBADF (Bad file descriptor) [pid 5711] close(15) = -1 EBADF (Bad file descriptor) [pid 5711] close(16) = -1 EBADF (Bad file descriptor) [pid 5711] close(17) = -1 EBADF (Bad file descriptor) [pid 5711] close(18) = -1 EBADF (Bad file descriptor) [pid 5711] close(19) = -1 EBADF (Bad file descriptor) [pid 5711] close(20) = -1 EBADF (Bad file descriptor) [pid 5711] close(21) = -1 EBADF (Bad file descriptor) [pid 5711] close(22) = -1 EBADF (Bad file descriptor) [pid 5711] close(23) = -1 EBADF (Bad file descriptor) [pid 5711] close(24) = -1 EBADF (Bad file descriptor) [pid 5711] close(25) = -1 EBADF (Bad file descriptor) [pid 5711] close(26) = -1 EBADF (Bad file descriptor) [pid 5711] close(27) = -1 EBADF (Bad file descriptor) [pid 5711] close(28) = -1 EBADF (Bad file descriptor) [pid 5711] close(29) = -1 EBADF (Bad file descriptor) [pid 5711] exit_group(0) = ? [pid 5711] +++ exited with 0 +++ [pid 5609] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=66, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=18 /* 0.18 s */} --- [pid 5609] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5609] umount2("./64", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] openat(AT_FDCWD, "./64", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5609] fstat(3, {st_mode=S_IFDIR|0700, st_size=80, ...}) = 0 [pid 5609] getdents64(3, 0x555579655790 /* 4 entries */, 32768) = 112 [pid 5609] umount2("./64/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5609] umount2("./64/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] newfstatat(AT_FDCWD, "./64/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] umount2("./64/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] openat(AT_FDCWD, "./64/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5609] fstat(4, {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0 [pid 5609] getdents64(4, 0x55557965d7d0 /* 2 entries */, 32768) = 48 [pid 5609] getdents64(4, 0x55557965d7d0 /* 0 entries */, 32768) = 0 [pid 5609] close(4) = 0 [pid 5609] rmdir("./64/file2") = 0 [pid 5609] umount2("./64/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] newfstatat(AT_FDCWD, "./64/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] unlink("./64/binderfs") = 0 [pid 5609] getdents64(3, 0x555579655790 /* 0 entries */, 32768) = 0 [pid 5609] close(3) = 0 [pid 5609] rmdir("./64") = 0 [pid 5609] mkdir("./65", 0777) = 0 [pid 5609] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 [pid 5609] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5609] close(3) = 0 [pid 5609] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5609] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5712 attached [pid 5712] set_robust_list(0x5555796546e0, 24 [pid 5609] <... clone resumed>, child_tidptr=0x5555796546d0) = 67 [pid 5712] <... set_robust_list resumed>) = 0 [pid 5712] rt_sigprocmask(SIG_SETMASK, [] [pid 5609] rt_sigprocmask(SIG_SETMASK, [] [pid 5712] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5609] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5712] chdir("./65") = 0 [pid 5712] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5712] setpgid(0, 0) = 0 [pid 5712] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5712] write(3, "1000", 4) = 4 [pid 5712] close(3) = 0 [pid 5712] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5712] write(1, "executing program\n", 18) = 18 executing program [pid 5712] memfd_create("syzkaller", 0) = 3 [pid 5712] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5712] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5712] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5712] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5712] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5712] close(3) = 0 [pid 5712] close(4) = 0 [pid 5712] mkdir("./file2", 0777) = 0 [pid 5712] mount("/dev/loop0", "./file2", "jfs", MS_NOEXEC|MS_NOATIME|MS_NODIRATIME|MS_I_VERSION, ",umask=0") = 0 [pid 5712] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5712] chdir("./file2") = 0 [pid 5712] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5712] ioctl(4, LOOP_CLR_FD) = 0 [pid 5712] close(4) = 0 [pid 5712] memfd_create("syzkaller", 0) = 4 [pid 5712] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5712] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8192) = 8192 [pid 5712] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5712] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5712] close(4) = 0 [pid 5712] memfd_create("syzkaller", 0) = 4 [pid 5712] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5712] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 83968) = 83968 [ 143.557869][ T5712] loop0: detected capacity change from 0 to 32768 [pid 5712] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5712] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5712] close(4) = 0 [pid 5712] fchown(-1, -1, 0) = -1 EBADF (Bad file descriptor) [pid 5712] open_by_handle_at(-100, NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5712] close(3) = 0 [pid 5712] close(4) = -1 EBADF (Bad file descriptor) [pid 5712] close(5) = -1 EBADF (Bad file descriptor) [pid 5712] close(6) = -1 EBADF (Bad file descriptor) [pid 5712] close(7) = -1 EBADF (Bad file descriptor) [pid 5712] close(8) = -1 EBADF (Bad file descriptor) [pid 5712] close(9) = -1 EBADF (Bad file descriptor) [pid 5712] close(10) = -1 EBADF (Bad file descriptor) [pid 5712] close(11) = -1 EBADF (Bad file descriptor) [pid 5712] close(12) = -1 EBADF (Bad file descriptor) [pid 5712] close(13) = -1 EBADF (Bad file descriptor) [pid 5712] close(14) = -1 EBADF (Bad file descriptor) [pid 5712] close(15) = -1 EBADF (Bad file descriptor) [pid 5712] close(16) = -1 EBADF (Bad file descriptor) [pid 5712] close(17) = -1 EBADF (Bad file descriptor) [pid 5712] close(18) = -1 EBADF (Bad file descriptor) [pid 5712] close(19) = -1 EBADF (Bad file descriptor) [pid 5712] close(20) = -1 EBADF (Bad file descriptor) [pid 5712] close(21) = -1 EBADF (Bad file descriptor) [pid 5712] close(22) = -1 EBADF (Bad file descriptor) [pid 5712] close(23) = -1 EBADF (Bad file descriptor) [pid 5712] close(24) = -1 EBADF (Bad file descriptor) [pid 5712] close(25) = -1 EBADF (Bad file descriptor) [pid 5712] close(26) = -1 EBADF (Bad file descriptor) [pid 5712] close(27) = -1 EBADF (Bad file descriptor) [pid 5712] close(28) = -1 EBADF (Bad file descriptor) [pid 5712] close(29) = -1 EBADF (Bad file descriptor) [pid 5712] exit_group(0) = ? [pid 5712] +++ exited with 0 +++ [pid 5609] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=67, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=20 /* 0.20 s */} --- [pid 5609] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5609] umount2("./65", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] openat(AT_FDCWD, "./65", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5609] fstat(3, {st_mode=S_IFDIR|0700, st_size=80, ...}) = 0 [pid 5609] getdents64(3, 0x555579655790 /* 4 entries */, 32768) = 112 [pid 5609] umount2("./65/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5609] umount2("./65/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] newfstatat(AT_FDCWD, "./65/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] umount2("./65/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] openat(AT_FDCWD, "./65/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5609] fstat(4, {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0 [pid 5609] getdents64(4, 0x55557965d7d0 /* 2 entries */, 32768) = 48 [pid 5609] getdents64(4, 0x55557965d7d0 /* 0 entries */, 32768) = 0 [pid 5609] close(4) = 0 [pid 5609] rmdir("./65/file2") = 0 [pid 5609] umount2("./65/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] newfstatat(AT_FDCWD, "./65/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] unlink("./65/binderfs") = 0 [pid 5609] getdents64(3, 0x555579655790 /* 0 entries */, 32768) = 0 [pid 5609] close(3) = 0 [pid 5609] rmdir("./65") = 0 [pid 5609] mkdir("./66", 0777) = 0 [pid 5609] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 [pid 5609] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5609] close(3) = 0 [pid 5609] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5609] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5713 attached [pid 5713] set_robust_list(0x5555796546e0, 24 [pid 5609] <... clone resumed>, child_tidptr=0x5555796546d0) = 68 [pid 5713] <... set_robust_list resumed>) = 0 [pid 5713] rt_sigprocmask(SIG_SETMASK, [] [pid 5609] rt_sigprocmask(SIG_SETMASK, [] [pid 5713] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5609] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5713] chdir("./66") = 0 [pid 5713] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5713] setpgid(0, 0) = 0 [pid 5713] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5713] write(3, "1000", 4) = 4 [pid 5713] close(3) = 0 [pid 5713] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5713] write(1, "executing program\n", 18) = 18 [pid 5713] memfd_create("syzkaller", 0) = 3 [pid 5713] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5713] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5713] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5713] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5713] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5713] close(3) = 0 [pid 5713] close(4) = 0 [pid 5713] mkdir("./file2", 0777) = 0 [pid 5713] mount("/dev/loop0", "./file2", "jfs", MS_NOEXEC|MS_NOATIME|MS_NODIRATIME|MS_I_VERSION, ",umask=0") = 0 [pid 5713] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5713] chdir("./file2") = 0 [pid 5713] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5713] ioctl(4, LOOP_CLR_FD) = 0 [ 144.091428][ T5713] loop0: detected capacity change from 0 to 32768 [pid 5713] close(4) = 0 [pid 5713] memfd_create("syzkaller", 0) = 4 [pid 5713] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5713] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8192) = 8192 [pid 5713] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5713] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5713] close(4) = 0 [pid 5713] memfd_create("syzkaller", 0) = 4 [pid 5713] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5713] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 83968) = 83968 [pid 5713] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5713] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5713] close(4) = 0 [pid 5713] fchown(-1, -1, 0) = -1 EBADF (Bad file descriptor) [pid 5713] open_by_handle_at(-100, NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5713] close(3) = 0 [pid 5713] close(4) = -1 EBADF (Bad file descriptor) [pid 5713] close(5) = -1 EBADF (Bad file descriptor) [pid 5713] close(6) = -1 EBADF (Bad file descriptor) [pid 5713] close(7) = -1 EBADF (Bad file descriptor) [pid 5713] close(8) = -1 EBADF (Bad file descriptor) [pid 5713] close(9) = -1 EBADF (Bad file descriptor) [pid 5713] close(10) = -1 EBADF (Bad file descriptor) [pid 5713] close(11) = -1 EBADF (Bad file descriptor) [pid 5713] close(12) = -1 EBADF (Bad file descriptor) [pid 5713] close(13) = -1 EBADF (Bad file descriptor) [pid 5713] close(14) = -1 EBADF (Bad file descriptor) [pid 5713] close(15) = -1 EBADF (Bad file descriptor) [pid 5713] close(16) = -1 EBADF (Bad file descriptor) [pid 5713] close(17) = -1 EBADF (Bad file descriptor) [pid 5713] close(18) = -1 EBADF (Bad file descriptor) [pid 5713] close(19) = -1 EBADF (Bad file descriptor) [pid 5713] close(20) = -1 EBADF (Bad file descriptor) [pid 5713] close(21) = -1 EBADF (Bad file descriptor) [pid 5713] close(22) = -1 EBADF (Bad file descriptor) [pid 5713] close(23) = -1 EBADF (Bad file descriptor) [pid 5713] close(24) = -1 EBADF (Bad file descriptor) [pid 5713] close(25) = -1 EBADF (Bad file descriptor) [pid 5713] close(26) = -1 EBADF (Bad file descriptor) [pid 5713] close(27) = -1 EBADF (Bad file descriptor) [pid 5713] close(28) = -1 EBADF (Bad file descriptor) [pid 5713] close(29) = -1 EBADF (Bad file descriptor) [pid 5713] exit_group(0) = ? [pid 5713] +++ exited with 0 +++ [pid 5609] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=68, si_uid=0, si_status=0, si_utime=0, si_stime=17 /* 0.17 s */} --- [pid 5609] umount2("./66", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] openat(AT_FDCWD, "./66", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5609] fstat(3, {st_mode=S_IFDIR|0700, st_size=80, ...}) = 0 [pid 5609] getdents64(3, 0x555579655790 /* 4 entries */, 32768) = 112 [pid 5609] umount2("./66/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5609] umount2("./66/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] newfstatat(AT_FDCWD, "./66/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] umount2("./66/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] openat(AT_FDCWD, "./66/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5609] fstat(4, {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0 [pid 5609] getdents64(4, 0x55557965d7d0 /* 2 entries */, 32768) = 48 [pid 5609] getdents64(4, 0x55557965d7d0 /* 0 entries */, 32768) = 0 [pid 5609] close(4) = 0 [pid 5609] rmdir("./66/file2") = 0 [pid 5609] umount2("./66/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] newfstatat(AT_FDCWD, "./66/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] unlink("./66/binderfs") = 0 [pid 5609] getdents64(3, 0x555579655790 /* 0 entries */, 32768) = 0 [pid 5609] close(3) = 0 [pid 5609] rmdir("./66") = 0 [pid 5609] mkdir("./67", 0777) = 0 [pid 5609] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 [pid 5609] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5609] close(3) = 0 [pid 5609] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5609] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5714 attached , child_tidptr=0x5555796546d0) = 69 [pid 5609] rt_sigprocmask(SIG_SETMASK, [] [pid 5714] set_robust_list(0x5555796546e0, 24) = 0 [pid 5609] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5714] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5714] chdir("./67") = 0 [pid 5714] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5714] setpgid(0, 0) = 0 [pid 5714] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5714] write(3, "1000", 4) = 4 [pid 5714] close(3) = 0 [pid 5714] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5714] write(1, "executing program\n", 18) = 18 executing program [pid 5714] memfd_create("syzkaller", 0) = 3 [pid 5714] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5714] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5714] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5714] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5714] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5714] close(3) = 0 [pid 5714] close(4) = 0 [pid 5714] mkdir("./file2", 0777) = 0 [pid 5714] mount("/dev/loop0", "./file2", "jfs", MS_NOEXEC|MS_NOATIME|MS_NODIRATIME|MS_I_VERSION, ",umask=0") = 0 [pid 5714] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5714] chdir("./file2") = 0 [pid 5714] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5714] ioctl(4, LOOP_CLR_FD) = 0 [pid 5714] close(4) = 0 [pid 5714] memfd_create("syzkaller", 0) = 4 [pid 5714] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5714] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8192) = 8192 [pid 5714] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5714] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5714] close(4) = 0 [pid 5714] memfd_create("syzkaller", 0) = 4 [pid 5714] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5714] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 83968) = 83968 [pid 5714] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5714] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5714] close(4) = 0 [pid 5714] fchown(-1, -1, 0) = -1 EBADF (Bad file descriptor) [pid 5714] open_by_handle_at(-100, NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5714] close(3) = 0 [ 144.629913][ T5714] loop0: detected capacity change from 0 to 32768 [pid 5714] close(4) = -1 EBADF (Bad file descriptor) [pid 5714] close(5) = -1 EBADF (Bad file descriptor) [pid 5714] close(6) = -1 EBADF (Bad file descriptor) [pid 5714] close(7) = -1 EBADF (Bad file descriptor) [pid 5714] close(8) = -1 EBADF (Bad file descriptor) [pid 5714] close(9) = -1 EBADF (Bad file descriptor) [pid 5714] close(10) = -1 EBADF (Bad file descriptor) [pid 5714] close(11) = -1 EBADF (Bad file descriptor) [pid 5714] close(12) = -1 EBADF (Bad file descriptor) [pid 5714] close(13) = -1 EBADF (Bad file descriptor) [pid 5714] close(14) = -1 EBADF (Bad file descriptor) [pid 5714] close(15) = -1 EBADF (Bad file descriptor) [pid 5714] close(16) = -1 EBADF (Bad file descriptor) [pid 5714] close(17) = -1 EBADF (Bad file descriptor) [pid 5714] close(18) = -1 EBADF (Bad file descriptor) [pid 5714] close(19) = -1 EBADF (Bad file descriptor) [pid 5714] close(20) = -1 EBADF (Bad file descriptor) [pid 5714] close(21) = -1 EBADF (Bad file descriptor) [pid 5714] close(22) = -1 EBADF (Bad file descriptor) [pid 5714] close(23) = -1 EBADF (Bad file descriptor) [pid 5714] close(24) = -1 EBADF (Bad file descriptor) [pid 5714] close(25) = -1 EBADF (Bad file descriptor) [pid 5714] close(26) = -1 EBADF (Bad file descriptor) [pid 5714] close(27) = -1 EBADF (Bad file descriptor) [pid 5714] close(28) = -1 EBADF (Bad file descriptor) [pid 5714] close(29) = -1 EBADF (Bad file descriptor) [pid 5714] exit_group(0) = ? [pid 5714] +++ exited with 0 +++ [pid 5609] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=69, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=17 /* 0.17 s */} --- [pid 5609] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5609] umount2("./67", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] openat(AT_FDCWD, "./67", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5609] fstat(3, {st_mode=S_IFDIR|0700, st_size=80, ...}) = 0 [pid 5609] getdents64(3, 0x555579655790 /* 4 entries */, 32768) = 112 [pid 5609] umount2("./67/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5609] umount2("./67/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] newfstatat(AT_FDCWD, "./67/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] umount2("./67/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] openat(AT_FDCWD, "./67/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5609] fstat(4, {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0 [pid 5609] getdents64(4, 0x55557965d7d0 /* 2 entries */, 32768) = 48 [pid 5609] getdents64(4, 0x55557965d7d0 /* 0 entries */, 32768) = 0 [pid 5609] close(4) = 0 [pid 5609] rmdir("./67/file2") = 0 [pid 5609] umount2("./67/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] newfstatat(AT_FDCWD, "./67/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] unlink("./67/binderfs") = 0 [pid 5609] getdents64(3, 0x555579655790 /* 0 entries */, 32768) = 0 [pid 5609] close(3) = 0 [pid 5609] rmdir("./67") = 0 [pid 5609] mkdir("./68", 0777) = 0 [pid 5609] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 [pid 5609] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5609] close(3) = 0 [pid 5609] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5609] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5715 attached [pid 5715] set_robust_list(0x5555796546e0, 24 [pid 5609] <... clone resumed>, child_tidptr=0x5555796546d0) = 70 [pid 5715] <... set_robust_list resumed>) = 0 [pid 5715] rt_sigprocmask(SIG_SETMASK, [] [pid 5609] rt_sigprocmask(SIG_SETMASK, [] [pid 5715] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5715] chdir("./68" [pid 5609] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5715] <... chdir resumed>) = 0 [pid 5715] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5715] setpgid(0, 0) = 0 [pid 5715] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5715] write(3, "1000", 4) = 4 [pid 5715] close(3) = 0 [pid 5715] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5715] write(1, "executing program\n", 18) = 18 [pid 5715] memfd_create("syzkaller", 0) = 3 [pid 5715] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5715] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5715] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5715] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5715] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5715] close(3) = 0 [pid 5715] close(4) = 0 [pid 5715] mkdir("./file2", 0777) = 0 [pid 5715] mount("/dev/loop0", "./file2", "jfs", MS_NOEXEC|MS_NOATIME|MS_NODIRATIME|MS_I_VERSION, ",umask=0") = 0 [pid 5715] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5715] chdir("./file2") = 0 [pid 5715] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5715] ioctl(4, LOOP_CLR_FD) = 0 [pid 5715] close(4) = 0 [pid 5715] memfd_create("syzkaller", 0) = 4 [pid 5715] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [ 145.160698][ T5715] loop0: detected capacity change from 0 to 32768 [pid 5715] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8192) = 8192 [pid 5715] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5715] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5715] close(4) = 0 [pid 5715] memfd_create("syzkaller", 0) = 4 [pid 5715] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5715] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 83968) = 83968 [pid 5715] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5715] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5715] close(4) = 0 [pid 5715] fchown(-1, -1, 0) = -1 EBADF (Bad file descriptor) [pid 5715] open_by_handle_at(-100, NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5715] close(3) = 0 [pid 5715] close(4) = -1 EBADF (Bad file descriptor) [pid 5715] close(5) = -1 EBADF (Bad file descriptor) [pid 5715] close(6) = -1 EBADF (Bad file descriptor) [pid 5715] close(7) = -1 EBADF (Bad file descriptor) [pid 5715] close(8) = -1 EBADF (Bad file descriptor) [pid 5715] close(9) = -1 EBADF (Bad file descriptor) [pid 5715] close(10) = -1 EBADF (Bad file descriptor) [pid 5715] close(11) = -1 EBADF (Bad file descriptor) [pid 5715] close(12) = -1 EBADF (Bad file descriptor) [pid 5715] close(13) = -1 EBADF (Bad file descriptor) [pid 5715] close(14) = -1 EBADF (Bad file descriptor) [pid 5715] close(15) = -1 EBADF (Bad file descriptor) [pid 5715] close(16) = -1 EBADF (Bad file descriptor) [pid 5715] close(17) = -1 EBADF (Bad file descriptor) [pid 5715] close(18) = -1 EBADF (Bad file descriptor) [pid 5715] close(19) = -1 EBADF (Bad file descriptor) [pid 5715] close(20) = -1 EBADF (Bad file descriptor) [pid 5715] close(21) = -1 EBADF (Bad file descriptor) [pid 5715] close(22) = -1 EBADF (Bad file descriptor) [pid 5715] close(23) = -1 EBADF (Bad file descriptor) [pid 5715] close(24) = -1 EBADF (Bad file descriptor) [pid 5715] close(25) = -1 EBADF (Bad file descriptor) [pid 5715] close(26) = -1 EBADF (Bad file descriptor) [pid 5715] close(27) = -1 EBADF (Bad file descriptor) [pid 5715] close(28) = -1 EBADF (Bad file descriptor) [pid 5715] close(29) = -1 EBADF (Bad file descriptor) [pid 5715] exit_group(0) = ? [pid 5715] +++ exited with 0 +++ [pid 5609] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=70, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=19 /* 0.19 s */} --- [pid 5609] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5609] umount2("./68", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] openat(AT_FDCWD, "./68", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5609] fstat(3, {st_mode=S_IFDIR|0700, st_size=80, ...}) = 0 [pid 5609] getdents64(3, 0x555579655790 /* 4 entries */, 32768) = 112 [pid 5609] umount2("./68/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5609] umount2("./68/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] newfstatat(AT_FDCWD, "./68/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] umount2("./68/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] openat(AT_FDCWD, "./68/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5609] fstat(4, {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0 [pid 5609] getdents64(4, 0x55557965d7d0 /* 2 entries */, 32768) = 48 [pid 5609] getdents64(4, 0x55557965d7d0 /* 0 entries */, 32768) = 0 [pid 5609] close(4) = 0 [pid 5609] rmdir("./68/file2") = 0 [pid 5609] umount2("./68/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] newfstatat(AT_FDCWD, "./68/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] unlink("./68/binderfs") = 0 [pid 5609] getdents64(3, 0x555579655790 /* 0 entries */, 32768) = 0 [pid 5609] close(3) = 0 [pid 5609] rmdir("./68") = 0 [pid 5609] mkdir("./69", 0777) = 0 [pid 5609] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 [pid 5609] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5609] close(3) = 0 [pid 5609] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5609] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5716 attached [pid 5716] set_robust_list(0x5555796546e0, 24) = 0 [pid 5609] <... clone resumed>, child_tidptr=0x5555796546d0) = 71 [pid 5716] rt_sigprocmask(SIG_SETMASK, [] [pid 5609] rt_sigprocmask(SIG_SETMASK, [] [pid 5716] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5609] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5716] chdir("./69") = 0 [pid 5716] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5716] setpgid(0, 0) = 0 [pid 5716] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5716] write(3, "1000", 4) = 4 [pid 5716] close(3) = 0 [pid 5716] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5716] write(1, "executing program\n", 18) = 18 [pid 5716] memfd_create("syzkaller", 0) = 3 [pid 5716] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5716] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5716] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5716] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5716] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5716] close(3) = 0 [pid 5716] close(4) = 0 [pid 5716] mkdir("./file2", 0777) = 0 [pid 5716] mount("/dev/loop0", "./file2", "jfs", MS_NOEXEC|MS_NOATIME|MS_NODIRATIME|MS_I_VERSION, ",umask=0") = 0 [pid 5716] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5716] chdir("./file2") = 0 [pid 5716] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5716] ioctl(4, LOOP_CLR_FD) = 0 [pid 5716] close(4) = 0 [pid 5716] memfd_create("syzkaller", 0) = 4 [pid 5716] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5716] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8192) = 8192 [pid 5716] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5716] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5716] close(4) = 0 [ 145.772945][ T5716] loop0: detected capacity change from 0 to 32768 [pid 5716] memfd_create("syzkaller", 0) = 4 [pid 5716] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5716] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 83968) = 83968 [pid 5716] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5716] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5716] close(4) = 0 [pid 5716] fchown(-1, -1, 0) = -1 EBADF (Bad file descriptor) [pid 5716] open_by_handle_at(-100, NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5716] close(3) = 0 [pid 5716] close(4) = -1 EBADF (Bad file descriptor) [pid 5716] close(5) = -1 EBADF (Bad file descriptor) [pid 5716] close(6) = -1 EBADF (Bad file descriptor) [pid 5716] close(7) = -1 EBADF (Bad file descriptor) [pid 5716] close(8) = -1 EBADF (Bad file descriptor) [pid 5716] close(9) = -1 EBADF (Bad file descriptor) [pid 5716] close(10) = -1 EBADF (Bad file descriptor) [pid 5716] close(11) = -1 EBADF (Bad file descriptor) [pid 5716] close(12) = -1 EBADF (Bad file descriptor) [pid 5716] close(13) = -1 EBADF (Bad file descriptor) [pid 5716] close(14) = -1 EBADF (Bad file descriptor) [pid 5716] close(15) = -1 EBADF (Bad file descriptor) [pid 5716] close(16) = -1 EBADF (Bad file descriptor) [pid 5716] close(17) = -1 EBADF (Bad file descriptor) [pid 5716] close(18) = -1 EBADF (Bad file descriptor) [pid 5716] close(19) = -1 EBADF (Bad file descriptor) [pid 5716] close(20) = -1 EBADF (Bad file descriptor) [pid 5716] close(21) = -1 EBADF (Bad file descriptor) [pid 5716] close(22) = -1 EBADF (Bad file descriptor) [pid 5716] close(23) = -1 EBADF (Bad file descriptor) [pid 5716] close(24) = -1 EBADF (Bad file descriptor) [pid 5716] close(25) = -1 EBADF (Bad file descriptor) [pid 5716] close(26) = -1 EBADF (Bad file descriptor) [pid 5716] close(27) = -1 EBADF (Bad file descriptor) [pid 5716] close(28) = -1 EBADF (Bad file descriptor) [pid 5716] close(29) = -1 EBADF (Bad file descriptor) [pid 5716] exit_group(0) = ? [pid 5716] +++ exited with 0 +++ [pid 5609] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=71, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=21 /* 0.21 s */} --- [pid 5609] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5609] umount2("./69", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] openat(AT_FDCWD, "./69", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5609] fstat(3, {st_mode=S_IFDIR|0700, st_size=80, ...}) = 0 [pid 5609] getdents64(3, 0x555579655790 /* 4 entries */, 32768) = 112 [pid 5609] umount2("./69/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5609] umount2("./69/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] newfstatat(AT_FDCWD, "./69/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] umount2("./69/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] openat(AT_FDCWD, "./69/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5609] fstat(4, {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0 [pid 5609] getdents64(4, 0x55557965d7d0 /* 2 entries */, 32768) = 48 [pid 5609] getdents64(4, 0x55557965d7d0 /* 0 entries */, 32768) = 0 [pid 5609] close(4) = 0 [pid 5609] rmdir("./69/file2") = 0 [pid 5609] umount2("./69/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] newfstatat(AT_FDCWD, "./69/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] unlink("./69/binderfs") = 0 [pid 5609] getdents64(3, 0x555579655790 /* 0 entries */, 32768) = 0 [pid 5609] close(3) = 0 [pid 5609] rmdir("./69") = 0 [pid 5609] mkdir("./70", 0777) = 0 [pid 5609] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 [pid 5609] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5609] close(3) = 0 [pid 5609] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5609] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5717 attached , child_tidptr=0x5555796546d0) = 72 [pid 5609] rt_sigprocmask(SIG_SETMASK, [] [pid 5717] set_robust_list(0x5555796546e0, 24 [pid 5609] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5717] <... set_robust_list resumed>) = 0 [pid 5717] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5717] chdir("./70") = 0 [pid 5717] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5717] setpgid(0, 0) = 0 [pid 5717] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5717] write(3, "1000", 4) = 4 [pid 5717] close(3) = 0 [pid 5717] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5717] write(1, "executing program\n", 18) = 18 executing program [pid 5717] memfd_create("syzkaller", 0) = 3 [pid 5717] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5717] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5717] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5717] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5717] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5717] close(3) = 0 [pid 5717] close(4) = 0 [pid 5717] mkdir("./file2", 0777) = 0 [pid 5717] mount("/dev/loop0", "./file2", "jfs", MS_NOEXEC|MS_NOATIME|MS_NODIRATIME|MS_I_VERSION, ",umask=0") = 0 [pid 5717] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5717] chdir("./file2") = 0 [pid 5717] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [ 146.334650][ T5717] loop0: detected capacity change from 0 to 32768 [pid 5717] ioctl(4, LOOP_CLR_FD) = 0 [pid 5717] close(4) = 0 [pid 5717] memfd_create("syzkaller", 0) = 4 [pid 5717] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5717] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8192) = 8192 [pid 5717] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5717] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5717] close(4) = 0 [pid 5717] memfd_create("syzkaller", 0) = 4 [pid 5717] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5717] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 83968) = 83968 [pid 5717] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5717] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5717] close(4) = 0 [pid 5717] fchown(-1, -1, 0) = -1 EBADF (Bad file descriptor) [pid 5717] open_by_handle_at(-100, NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5717] close(3) = 0 [pid 5717] close(4) = -1 EBADF (Bad file descriptor) [pid 5717] close(5) = -1 EBADF (Bad file descriptor) [pid 5717] close(6) = -1 EBADF (Bad file descriptor) [pid 5717] close(7) = -1 EBADF (Bad file descriptor) [pid 5717] close(8) = -1 EBADF (Bad file descriptor) [pid 5717] close(9) = -1 EBADF (Bad file descriptor) [pid 5717] close(10) = -1 EBADF (Bad file descriptor) [pid 5717] close(11) = -1 EBADF (Bad file descriptor) [pid 5717] close(12) = -1 EBADF (Bad file descriptor) [pid 5717] close(13) = -1 EBADF (Bad file descriptor) [pid 5717] close(14) = -1 EBADF (Bad file descriptor) [pid 5717] close(15) = -1 EBADF (Bad file descriptor) [pid 5717] close(16) = -1 EBADF (Bad file descriptor) [pid 5717] close(17) = -1 EBADF (Bad file descriptor) [pid 5717] close(18) = -1 EBADF (Bad file descriptor) [pid 5717] close(19) = -1 EBADF (Bad file descriptor) [pid 5717] close(20) = -1 EBADF (Bad file descriptor) [pid 5717] close(21) = -1 EBADF (Bad file descriptor) [pid 5717] close(22) = -1 EBADF (Bad file descriptor) [pid 5717] close(23) = -1 EBADF (Bad file descriptor) [pid 5717] close(24) = -1 EBADF (Bad file descriptor) [pid 5717] close(25) = -1 EBADF (Bad file descriptor) [pid 5717] close(26) = -1 EBADF (Bad file descriptor) [pid 5717] close(27) = -1 EBADF (Bad file descriptor) [pid 5717] close(28) = -1 EBADF (Bad file descriptor) [pid 5717] close(29) = -1 EBADF (Bad file descriptor) [pid 5717] exit_group(0) = ? [pid 5717] +++ exited with 0 +++ [pid 5609] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=72, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=21 /* 0.21 s */} --- [pid 5609] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5609] umount2("./70", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] openat(AT_FDCWD, "./70", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5609] fstat(3, {st_mode=S_IFDIR|0700, st_size=80, ...}) = 0 [pid 5609] getdents64(3, 0x555579655790 /* 4 entries */, 32768) = 112 [pid 5609] umount2("./70/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5609] umount2("./70/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] newfstatat(AT_FDCWD, "./70/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] umount2("./70/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] openat(AT_FDCWD, "./70/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5609] fstat(4, {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0 [pid 5609] getdents64(4, 0x55557965d7d0 /* 2 entries */, 32768) = 48 [pid 5609] getdents64(4, 0x55557965d7d0 /* 0 entries */, 32768) = 0 [pid 5609] close(4) = 0 [pid 5609] rmdir("./70/file2") = 0 [pid 5609] umount2("./70/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] newfstatat(AT_FDCWD, "./70/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] unlink("./70/binderfs") = 0 [pid 5609] getdents64(3, 0x555579655790 /* 0 entries */, 32768) = 0 [pid 5609] close(3) = 0 [pid 5609] rmdir("./70") = 0 [pid 5609] mkdir("./71", 0777) = 0 [pid 5609] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 [pid 5609] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5609] close(3) = 0 [pid 5609] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5609] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5718 attached , child_tidptr=0x5555796546d0) = 73 [pid 5718] set_robust_list(0x5555796546e0, 24 [pid 5609] rt_sigprocmask(SIG_SETMASK, [] [pid 5718] <... set_robust_list resumed>) = 0 [pid 5609] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5718] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5718] chdir("./71") = 0 [pid 5718] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5718] setpgid(0, 0) = 0 [pid 5718] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5718] write(3, "1000", 4) = 4 [pid 5718] close(3) = 0 [pid 5718] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5718] write(1, "executing program\n", 18) = 18 [pid 5718] memfd_create("syzkaller", 0) = 3 executing program [pid 5718] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5718] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5718] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5718] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5718] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5718] close(3) = 0 [pid 5718] close(4) = 0 [pid 5718] mkdir("./file2", 0777) = 0 [pid 5718] mount("/dev/loop0", "./file2", "jfs", MS_NOEXEC|MS_NOATIME|MS_NODIRATIME|MS_I_VERSION, ",umask=0") = 0 [pid 5718] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5718] chdir("./file2") = 0 [pid 5718] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5718] ioctl(4, LOOP_CLR_FD) = 0 [pid 5718] close(4) = 0 [pid 5718] memfd_create("syzkaller", 0) = 4 [pid 5718] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5718] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8192) = 8192 [pid 5718] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5718] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5718] close(4) = 0 [pid 5718] memfd_create("syzkaller", 0) = 4 [pid 5718] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5718] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 83968) = 83968 [pid 5718] munmap(0x7ffa6af59000, 138412032) = 0 [ 146.918645][ T5718] loop0: detected capacity change from 0 to 32768 [pid 5718] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5718] close(4) = 0 [pid 5718] fchown(-1, -1, 0) = -1 EBADF (Bad file descriptor) [pid 5718] open_by_handle_at(-100, NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5718] close(3) = 0 [pid 5718] close(4) = -1 EBADF (Bad file descriptor) [pid 5718] close(5) = -1 EBADF (Bad file descriptor) [pid 5718] close(6) = -1 EBADF (Bad file descriptor) [pid 5718] close(7) = -1 EBADF (Bad file descriptor) [pid 5718] close(8) = -1 EBADF (Bad file descriptor) [pid 5718] close(9) = -1 EBADF (Bad file descriptor) [pid 5718] close(10) = -1 EBADF (Bad file descriptor) [pid 5718] close(11) = -1 EBADF (Bad file descriptor) [pid 5718] close(12) = -1 EBADF (Bad file descriptor) [pid 5718] close(13) = -1 EBADF (Bad file descriptor) [pid 5718] close(14) = -1 EBADF (Bad file descriptor) [pid 5718] close(15) = -1 EBADF (Bad file descriptor) [pid 5718] close(16) = -1 EBADF (Bad file descriptor) [pid 5718] close(17) = -1 EBADF (Bad file descriptor) [pid 5718] close(18) = -1 EBADF (Bad file descriptor) [pid 5718] close(19) = -1 EBADF (Bad file descriptor) [pid 5718] close(20) = -1 EBADF (Bad file descriptor) [pid 5718] close(21) = -1 EBADF (Bad file descriptor) [pid 5718] close(22) = -1 EBADF (Bad file descriptor) [pid 5718] close(23) = -1 EBADF (Bad file descriptor) [pid 5718] close(24) = -1 EBADF (Bad file descriptor) [pid 5718] close(25) = -1 EBADF (Bad file descriptor) [pid 5718] close(26) = -1 EBADF (Bad file descriptor) [pid 5718] close(27) = -1 EBADF (Bad file descriptor) [pid 5718] close(28) = -1 EBADF (Bad file descriptor) [pid 5718] close(29) = -1 EBADF (Bad file descriptor) [pid 5718] exit_group(0) = ? [pid 5718] +++ exited with 0 +++ [pid 5609] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=73, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=20 /* 0.20 s */} --- [pid 5609] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5609] umount2("./71", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] openat(AT_FDCWD, "./71", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5609] fstat(3, {st_mode=S_IFDIR|0700, st_size=80, ...}) = 0 [pid 5609] getdents64(3, 0x555579655790 /* 4 entries */, 32768) = 112 [pid 5609] umount2("./71/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5609] umount2("./71/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] newfstatat(AT_FDCWD, "./71/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] umount2("./71/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] openat(AT_FDCWD, "./71/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5609] fstat(4, {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0 [pid 5609] getdents64(4, 0x55557965d7d0 /* 2 entries */, 32768) = 48 [pid 5609] getdents64(4, 0x55557965d7d0 /* 0 entries */, 32768) = 0 [pid 5609] close(4) = 0 [pid 5609] rmdir("./71/file2") = 0 [pid 5609] umount2("./71/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] newfstatat(AT_FDCWD, "./71/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] unlink("./71/binderfs") = 0 [pid 5609] getdents64(3, 0x555579655790 /* 0 entries */, 32768) = 0 [pid 5609] close(3) = 0 [pid 5609] rmdir("./71") = 0 [pid 5609] mkdir("./72", 0777) = 0 [pid 5609] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 [pid 5609] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5609] close(3) = 0 [pid 5609] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5609] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5719 attached [pid 5719] set_robust_list(0x5555796546e0, 24 [pid 5609] <... clone resumed>, child_tidptr=0x5555796546d0) = 74 [pid 5719] <... set_robust_list resumed>) = 0 [pid 5719] rt_sigprocmask(SIG_SETMASK, [] [pid 5609] rt_sigprocmask(SIG_SETMASK, [] [pid 5719] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5609] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5719] chdir("./72") = 0 [pid 5719] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5719] setpgid(0, 0) = 0 [pid 5719] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5719] write(3, "1000", 4) = 4 [pid 5719] close(3) = 0 [pid 5719] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5719] write(1, "executing program\n", 18) = 18 executing program [pid 5719] memfd_create("syzkaller", 0) = 3 [pid 5719] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5719] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5719] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5719] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5719] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5719] close(3) = 0 [pid 5719] close(4) = 0 [pid 5719] mkdir("./file2", 0777) = 0 [pid 5719] mount("/dev/loop0", "./file2", "jfs", MS_NOEXEC|MS_NOATIME|MS_NODIRATIME|MS_I_VERSION, ",umask=0") = 0 [pid 5719] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5719] chdir("./file2") = 0 [pid 5719] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5719] ioctl(4, LOOP_CLR_FD) = 0 [pid 5719] close(4) = 0 [pid 5719] memfd_create("syzkaller", 0) = 4 [pid 5719] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5719] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8192) = 8192 [pid 5719] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5719] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5719] close(4) = 0 [pid 5719] memfd_create("syzkaller", 0) = 4 [pid 5719] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5719] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 83968) = 83968 [pid 5719] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5719] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5719] close(4) = 0 [pid 5719] fchown(-1, -1, 0) = -1 EBADF (Bad file descriptor) [ 147.483387][ T5719] loop0: detected capacity change from 0 to 32768 [pid 5719] open_by_handle_at(-100, NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5719] close(3) = 0 [pid 5719] close(4) = -1 EBADF (Bad file descriptor) [pid 5719] close(5) = -1 EBADF (Bad file descriptor) [pid 5719] close(6) = -1 EBADF (Bad file descriptor) [pid 5719] close(7) = -1 EBADF (Bad file descriptor) [pid 5719] close(8) = -1 EBADF (Bad file descriptor) [pid 5719] close(9) = -1 EBADF (Bad file descriptor) [pid 5719] close(10) = -1 EBADF (Bad file descriptor) [pid 5719] close(11) = -1 EBADF (Bad file descriptor) [pid 5719] close(12) = -1 EBADF (Bad file descriptor) [pid 5719] close(13) = -1 EBADF (Bad file descriptor) [pid 5719] close(14) = -1 EBADF (Bad file descriptor) [pid 5719] close(15) = -1 EBADF (Bad file descriptor) [pid 5719] close(16) = -1 EBADF (Bad file descriptor) [pid 5719] close(17) = -1 EBADF (Bad file descriptor) [pid 5719] close(18) = -1 EBADF (Bad file descriptor) [pid 5719] close(19) = -1 EBADF (Bad file descriptor) [pid 5719] close(20) = -1 EBADF (Bad file descriptor) [pid 5719] close(21) = -1 EBADF (Bad file descriptor) [pid 5719] close(22) = -1 EBADF (Bad file descriptor) [pid 5719] close(23) = -1 EBADF (Bad file descriptor) [pid 5719] close(24) = -1 EBADF (Bad file descriptor) [pid 5719] close(25) = -1 EBADF (Bad file descriptor) [pid 5719] close(26) = -1 EBADF (Bad file descriptor) [pid 5719] close(27) = -1 EBADF (Bad file descriptor) [pid 5719] close(28) = -1 EBADF (Bad file descriptor) [pid 5719] close(29) = -1 EBADF (Bad file descriptor) [pid 5719] exit_group(0) = ? [pid 5719] +++ exited with 0 +++ [pid 5609] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=74, si_uid=0, si_status=0, si_utime=0, si_stime=25 /* 0.25 s */} --- [pid 5609] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5609] umount2("./72", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] openat(AT_FDCWD, "./72", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5609] fstat(3, {st_mode=S_IFDIR|0700, st_size=80, ...}) = 0 [pid 5609] getdents64(3, 0x555579655790 /* 4 entries */, 32768) = 112 [pid 5609] umount2("./72/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5609] umount2("./72/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] newfstatat(AT_FDCWD, "./72/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] umount2("./72/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] openat(AT_FDCWD, "./72/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5609] fstat(4, {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0 [pid 5609] getdents64(4, 0x55557965d7d0 /* 2 entries */, 32768) = 48 [pid 5609] getdents64(4, 0x55557965d7d0 /* 0 entries */, 32768) = 0 [pid 5609] close(4) = 0 [pid 5609] rmdir("./72/file2") = 0 [pid 5609] umount2("./72/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] newfstatat(AT_FDCWD, "./72/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] unlink("./72/binderfs") = 0 [pid 5609] getdents64(3, 0x555579655790 /* 0 entries */, 32768) = 0 [pid 5609] close(3) = 0 [pid 5609] rmdir("./72") = 0 [pid 5609] mkdir("./73", 0777) = 0 [pid 5609] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 [pid 5609] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5609] close(3) = 0 [pid 5609] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5609] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5720 attached , child_tidptr=0x5555796546d0) = 75 [pid 5609] rt_sigprocmask(SIG_SETMASK, [] [pid 5720] set_robust_list(0x5555796546e0, 24 [pid 5609] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5720] <... set_robust_list resumed>) = 0 [pid 5720] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5720] chdir("./73") = 0 [pid 5720] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5720] setpgid(0, 0) = 0 [pid 5720] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5720] write(3, "1000", 4) = 4 [pid 5720] close(3) = 0 [pid 5720] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5720] write(1, "executing program\n", 18) = 18 [pid 5720] memfd_create("syzkaller", 0) = 3 [pid 5720] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5720] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5720] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5720] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5720] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5720] close(3) = 0 [pid 5720] close(4) = 0 [pid 5720] mkdir("./file2", 0777) = 0 [pid 5720] mount("/dev/loop0", "./file2", "jfs", MS_NOEXEC|MS_NOATIME|MS_NODIRATIME|MS_I_VERSION, ",umask=0") = 0 [pid 5720] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5720] chdir("./file2") = 0 [pid 5720] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5720] ioctl(4, LOOP_CLR_FD) = 0 [pid 5720] close(4) = 0 [pid 5720] memfd_create("syzkaller", 0) = 4 [pid 5720] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5720] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8192) = 8192 [pid 5720] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5720] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5720] close(4) = 0 [pid 5720] memfd_create("syzkaller", 0) = 4 [pid 5720] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5720] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 83968) = 83968 [ 148.031222][ T5720] loop0: detected capacity change from 0 to 32768 [pid 5720] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5720] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5720] close(4) = 0 [pid 5720] fchown(-1, -1, 0) = -1 EBADF (Bad file descriptor) [pid 5720] open_by_handle_at(-100, NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5720] close(3) = 0 [pid 5720] close(4) = -1 EBADF (Bad file descriptor) [pid 5720] close(5) = -1 EBADF (Bad file descriptor) [pid 5720] close(6) = -1 EBADF (Bad file descriptor) [pid 5720] close(7) = -1 EBADF (Bad file descriptor) [pid 5720] close(8) = -1 EBADF (Bad file descriptor) [pid 5720] close(9) = -1 EBADF (Bad file descriptor) [pid 5720] close(10) = -1 EBADF (Bad file descriptor) [pid 5720] close(11) = -1 EBADF (Bad file descriptor) [pid 5720] close(12) = -1 EBADF (Bad file descriptor) [pid 5720] close(13) = -1 EBADF (Bad file descriptor) [pid 5720] close(14) = -1 EBADF (Bad file descriptor) [pid 5720] close(15) = -1 EBADF (Bad file descriptor) [pid 5720] close(16) = -1 EBADF (Bad file descriptor) [pid 5720] close(17) = -1 EBADF (Bad file descriptor) [pid 5720] close(18) = -1 EBADF (Bad file descriptor) [pid 5720] close(19) = -1 EBADF (Bad file descriptor) [pid 5720] close(20) = -1 EBADF (Bad file descriptor) [pid 5720] close(21) = -1 EBADF (Bad file descriptor) [pid 5720] close(22) = -1 EBADF (Bad file descriptor) [pid 5720] close(23) = -1 EBADF (Bad file descriptor) [pid 5720] close(24) = -1 EBADF (Bad file descriptor) [pid 5720] close(25) = -1 EBADF (Bad file descriptor) [pid 5720] close(26) = -1 EBADF (Bad file descriptor) [pid 5720] close(27) = -1 EBADF (Bad file descriptor) [pid 5720] close(28) = -1 EBADF (Bad file descriptor) [pid 5720] close(29) = -1 EBADF (Bad file descriptor) [pid 5720] exit_group(0) = ? [pid 5720] +++ exited with 0 +++ [pid 5609] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=75, si_uid=0, si_status=0, si_utime=0, si_stime=22 /* 0.22 s */} --- [pid 5609] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5609] umount2("./73", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] openat(AT_FDCWD, "./73", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5609] fstat(3, {st_mode=S_IFDIR|0700, st_size=80, ...}) = 0 [pid 5609] getdents64(3, 0x555579655790 /* 4 entries */, 32768) = 112 [pid 5609] umount2("./73/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5609] umount2("./73/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] newfstatat(AT_FDCWD, "./73/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] umount2("./73/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] openat(AT_FDCWD, "./73/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5609] fstat(4, {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0 [pid 5609] getdents64(4, 0x55557965d7d0 /* 2 entries */, 32768) = 48 [pid 5609] getdents64(4, 0x55557965d7d0 /* 0 entries */, 32768) = 0 [pid 5609] close(4) = 0 [pid 5609] rmdir("./73/file2") = 0 [pid 5609] umount2("./73/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] newfstatat(AT_FDCWD, "./73/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] unlink("./73/binderfs") = 0 [pid 5609] getdents64(3, 0x555579655790 /* 0 entries */, 32768) = 0 [pid 5609] close(3) = 0 [pid 5609] rmdir("./73") = 0 [pid 5609] mkdir("./74", 0777) = 0 [pid 5609] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 [pid 5609] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5609] close(3) = 0 [pid 5609] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5609] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5721 attached , child_tidptr=0x5555796546d0) = 76 [pid 5721] set_robust_list(0x5555796546e0, 24 [pid 5609] rt_sigprocmask(SIG_SETMASK, [] [pid 5721] <... set_robust_list resumed>) = 0 [pid 5721] rt_sigprocmask(SIG_SETMASK, [] [pid 5609] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5721] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5721] chdir("./74") = 0 [pid 5721] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5721] setpgid(0, 0) = 0 [pid 5721] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5721] write(3, "1000", 4) = 4 [pid 5721] close(3) = 0 [pid 5721] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5721] write(1, "executing program\n", 18) = 18 [pid 5721] memfd_create("syzkaller", 0) = 3 [pid 5721] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5721] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5721] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5721] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5721] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5721] close(3) = 0 [pid 5721] close(4) = 0 [pid 5721] mkdir("./file2", 0777) = 0 [pid 5721] mount("/dev/loop0", "./file2", "jfs", MS_NOEXEC|MS_NOATIME|MS_NODIRATIME|MS_I_VERSION, ",umask=0") = 0 [pid 5721] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5721] chdir("./file2") = 0 [pid 5721] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5721] ioctl(4, LOOP_CLR_FD) = 0 [pid 5721] close(4) = 0 [pid 5721] memfd_create("syzkaller", 0) = 4 [pid 5721] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5721] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8192) = 8192 [pid 5721] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5721] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5721] close(4) = 0 [pid 5721] memfd_create("syzkaller", 0) = 4 [pid 5721] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5721] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 83968) = 83968 [pid 5721] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5721] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5721] close(4) = 0 [pid 5721] fchown(-1, -1, 0) = -1 EBADF (Bad file descriptor) [pid 5721] open_by_handle_at(-100, NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5721] close(3) = 0 [pid 5721] close(4) = -1 EBADF (Bad file descriptor) [pid 5721] close(5) = -1 EBADF (Bad file descriptor) [pid 5721] close(6) = -1 EBADF (Bad file descriptor) [pid 5721] close(7) = -1 EBADF (Bad file descriptor) [pid 5721] close(8) = -1 EBADF (Bad file descriptor) [pid 5721] close(9) = -1 EBADF (Bad file descriptor) [ 148.549972][ T5721] loop0: detected capacity change from 0 to 32768 [pid 5721] close(10) = -1 EBADF (Bad file descriptor) [pid 5721] close(11) = -1 EBADF (Bad file descriptor) [pid 5721] close(12) = -1 EBADF (Bad file descriptor) [pid 5721] close(13) = -1 EBADF (Bad file descriptor) [pid 5721] close(14) = -1 EBADF (Bad file descriptor) [pid 5721] close(15) = -1 EBADF (Bad file descriptor) [pid 5721] close(16) = -1 EBADF (Bad file descriptor) [pid 5721] close(17) = -1 EBADF (Bad file descriptor) [pid 5721] close(18) = -1 EBADF (Bad file descriptor) [pid 5721] close(19) = -1 EBADF (Bad file descriptor) [pid 5721] close(20) = -1 EBADF (Bad file descriptor) [pid 5721] close(21) = -1 EBADF (Bad file descriptor) [pid 5721] close(22) = -1 EBADF (Bad file descriptor) [pid 5721] close(23) = -1 EBADF (Bad file descriptor) [pid 5721] close(24) = -1 EBADF (Bad file descriptor) [pid 5721] close(25) = -1 EBADF (Bad file descriptor) [pid 5721] close(26) = -1 EBADF (Bad file descriptor) [pid 5721] close(27) = -1 EBADF (Bad file descriptor) [pid 5721] close(28) = -1 EBADF (Bad file descriptor) [pid 5721] close(29) = -1 EBADF (Bad file descriptor) [pid 5721] exit_group(0) = ? [pid 5721] +++ exited with 0 +++ [pid 5609] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=76, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=19 /* 0.19 s */} --- [pid 5609] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5609] umount2("./74", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] openat(AT_FDCWD, "./74", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5609] fstat(3, {st_mode=S_IFDIR|0700, st_size=80, ...}) = 0 [pid 5609] getdents64(3, 0x555579655790 /* 4 entries */, 32768) = 112 [pid 5609] umount2("./74/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5609] umount2("./74/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] newfstatat(AT_FDCWD, "./74/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] umount2("./74/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] openat(AT_FDCWD, "./74/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5609] fstat(4, {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0 [pid 5609] getdents64(4, 0x55557965d7d0 /* 2 entries */, 32768) = 48 [pid 5609] getdents64(4, 0x55557965d7d0 /* 0 entries */, 32768) = 0 [pid 5609] close(4) = 0 [pid 5609] rmdir("./74/file2") = 0 [pid 5609] umount2("./74/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] newfstatat(AT_FDCWD, "./74/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] unlink("./74/binderfs") = 0 [pid 5609] getdents64(3, 0x555579655790 /* 0 entries */, 32768) = 0 [pid 5609] close(3) = 0 [pid 5609] rmdir("./74") = 0 [pid 5609] mkdir("./75", 0777) = 0 [pid 5609] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 [pid 5609] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5609] close(3) = 0 [pid 5609] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5609] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5722 attached , child_tidptr=0x5555796546d0) = 77 [pid 5609] rt_sigprocmask(SIG_SETMASK, [] [pid 5722] set_robust_list(0x5555796546e0, 24) = 0 [pid 5609] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5722] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5722] chdir("./75") = 0 [pid 5722] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5722] setpgid(0, 0) = 0 [pid 5722] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5722] write(3, "1000", 4) = 4 [pid 5722] close(3) = 0 [pid 5722] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5722] write(1, "executing program\n", 18) = 18 [pid 5722] memfd_create("syzkaller", 0) = 3 [pid 5722] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5722] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5722] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5722] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5722] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5722] close(3) = 0 [pid 5722] close(4) = 0 [pid 5722] mkdir("./file2", 0777) = 0 [pid 5722] mount("/dev/loop0", "./file2", "jfs", MS_NOEXEC|MS_NOATIME|MS_NODIRATIME|MS_I_VERSION, ",umask=0") = 0 [pid 5722] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5722] chdir("./file2") = 0 [pid 5722] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5722] ioctl(4, LOOP_CLR_FD) = 0 [pid 5722] close(4) = 0 [pid 5722] memfd_create("syzkaller", 0) = 4 [pid 5722] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5722] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8192) = 8192 [pid 5722] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5722] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5722] close(4) = 0 [pid 5722] memfd_create("syzkaller", 0) = 4 [ 149.056588][ T5722] loop0: detected capacity change from 0 to 32768 [pid 5722] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5722] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 83968) = 83968 [pid 5722] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5722] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5722] close(4) = 0 [pid 5722] fchown(-1, -1, 0) = -1 EBADF (Bad file descriptor) [pid 5722] open_by_handle_at(-100, NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5722] close(3) = 0 [pid 5722] close(4) = -1 EBADF (Bad file descriptor) [pid 5722] close(5) = -1 EBADF (Bad file descriptor) [pid 5722] close(6) = -1 EBADF (Bad file descriptor) [pid 5722] close(7) = -1 EBADF (Bad file descriptor) [pid 5722] close(8) = -1 EBADF (Bad file descriptor) [pid 5722] close(9) = -1 EBADF (Bad file descriptor) [pid 5722] close(10) = -1 EBADF (Bad file descriptor) [pid 5722] close(11) = -1 EBADF (Bad file descriptor) [pid 5722] close(12) = -1 EBADF (Bad file descriptor) [pid 5722] close(13) = -1 EBADF (Bad file descriptor) [pid 5722] close(14) = -1 EBADF (Bad file descriptor) [pid 5722] close(15) = -1 EBADF (Bad file descriptor) [pid 5722] close(16) = -1 EBADF (Bad file descriptor) [pid 5722] close(17) = -1 EBADF (Bad file descriptor) [pid 5722] close(18) = -1 EBADF (Bad file descriptor) [pid 5722] close(19) = -1 EBADF (Bad file descriptor) [pid 5722] close(20) = -1 EBADF (Bad file descriptor) [pid 5722] close(21) = -1 EBADF (Bad file descriptor) [pid 5722] close(22) = -1 EBADF (Bad file descriptor) [pid 5722] close(23) = -1 EBADF (Bad file descriptor) [pid 5722] close(24) = -1 EBADF (Bad file descriptor) [pid 5722] close(25) = -1 EBADF (Bad file descriptor) [pid 5722] close(26) = -1 EBADF (Bad file descriptor) [pid 5722] close(27) = -1 EBADF (Bad file descriptor) [pid 5722] close(28) = -1 EBADF (Bad file descriptor) [pid 5722] close(29) = -1 EBADF (Bad file descriptor) [pid 5722] exit_group(0) = ? [pid 5722] +++ exited with 0 +++ [pid 5609] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=77, si_uid=0, si_status=0, si_utime=0, si_stime=21 /* 0.21 s */} --- [pid 5609] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5609] umount2("./75", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] openat(AT_FDCWD, "./75", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5609] fstat(3, {st_mode=S_IFDIR|0700, st_size=80, ...}) = 0 [pid 5609] getdents64(3, 0x555579655790 /* 4 entries */, 32768) = 112 [pid 5609] umount2("./75/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5609] umount2("./75/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] newfstatat(AT_FDCWD, "./75/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] umount2("./75/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] openat(AT_FDCWD, "./75/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5609] fstat(4, {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0 [pid 5609] getdents64(4, 0x55557965d7d0 /* 2 entries */, 32768) = 48 [pid 5609] getdents64(4, 0x55557965d7d0 /* 0 entries */, 32768) = 0 [pid 5609] close(4) = 0 [pid 5609] rmdir("./75/file2") = 0 [pid 5609] umount2("./75/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] newfstatat(AT_FDCWD, "./75/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] unlink("./75/binderfs") = 0 [pid 5609] getdents64(3, 0x555579655790 /* 0 entries */, 32768) = 0 [pid 5609] close(3) = 0 [pid 5609] rmdir("./75") = 0 [pid 5609] mkdir("./76", 0777) = 0 [pid 5609] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 [pid 5609] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5609] close(3) = 0 [pid 5609] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5609] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5723 attached , child_tidptr=0x5555796546d0) = 78 [pid 5609] rt_sigprocmask(SIG_SETMASK, [] [pid 5723] set_robust_list(0x5555796546e0, 24 [pid 5609] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5723] <... set_robust_list resumed>) = 0 [pid 5723] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5723] chdir("./76") = 0 [pid 5723] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5723] setpgid(0, 0) = 0 [pid 5723] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5723] write(3, "1000", 4) = 4 [pid 5723] close(3) = 0 [pid 5723] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5723] write(1, "executing program\n", 18) = 18 executing program [pid 5723] memfd_create("syzkaller", 0) = 3 [pid 5723] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5723] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5723] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5723] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5723] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5723] close(3) = 0 [pid 5723] close(4) = 0 [pid 5723] mkdir("./file2", 0777) = 0 [pid 5723] mount("/dev/loop0", "./file2", "jfs", MS_NOEXEC|MS_NOATIME|MS_NODIRATIME|MS_I_VERSION, ",umask=0") = 0 [pid 5723] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5723] chdir("./file2") = 0 [pid 5723] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5723] ioctl(4, LOOP_CLR_FD) = 0 [pid 5723] close(4) = 0 [pid 5723] memfd_create("syzkaller", 0) = 4 [pid 5723] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5723] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8192) = 8192 [pid 5723] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5723] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5723] close(4) = 0 [pid 5723] memfd_create("syzkaller", 0) = 4 [pid 5723] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5723] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 83968) = 83968 [pid 5723] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5723] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 149.574912][ T5723] loop0: detected capacity change from 0 to 32768 [pid 5723] close(4) = 0 [pid 5723] fchown(-1, -1, 0) = -1 EBADF (Bad file descriptor) [pid 5723] open_by_handle_at(-100, NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5723] close(3) = 0 [pid 5723] close(4) = -1 EBADF (Bad file descriptor) [pid 5723] close(5) = -1 EBADF (Bad file descriptor) [pid 5723] close(6) = -1 EBADF (Bad file descriptor) [pid 5723] close(7) = -1 EBADF (Bad file descriptor) [pid 5723] close(8) = -1 EBADF (Bad file descriptor) [pid 5723] close(9) = -1 EBADF (Bad file descriptor) [pid 5723] close(10) = -1 EBADF (Bad file descriptor) [pid 5723] close(11) = -1 EBADF (Bad file descriptor) [pid 5723] close(12) = -1 EBADF (Bad file descriptor) [pid 5723] close(13) = -1 EBADF (Bad file descriptor) [pid 5723] close(14) = -1 EBADF (Bad file descriptor) [pid 5723] close(15) = -1 EBADF (Bad file descriptor) [pid 5723] close(16) = -1 EBADF (Bad file descriptor) [pid 5723] close(17) = -1 EBADF (Bad file descriptor) [pid 5723] close(18) = -1 EBADF (Bad file descriptor) [pid 5723] close(19) = -1 EBADF (Bad file descriptor) [pid 5723] close(20) = -1 EBADF (Bad file descriptor) [pid 5723] close(21) = -1 EBADF (Bad file descriptor) [pid 5723] close(22) = -1 EBADF (Bad file descriptor) [pid 5723] close(23) = -1 EBADF (Bad file descriptor) [pid 5723] close(24) = -1 EBADF (Bad file descriptor) [pid 5723] close(25) = -1 EBADF (Bad file descriptor) [pid 5723] close(26) = -1 EBADF (Bad file descriptor) [pid 5723] close(27) = -1 EBADF (Bad file descriptor) [pid 5723] close(28) = -1 EBADF (Bad file descriptor) [pid 5723] close(29) = -1 EBADF (Bad file descriptor) [pid 5723] exit_group(0) = ? [pid 5723] +++ exited with 0 +++ [pid 5609] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=78, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=21 /* 0.21 s */} --- [pid 5609] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5609] umount2("./76", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] openat(AT_FDCWD, "./76", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5609] fstat(3, {st_mode=S_IFDIR|0700, st_size=80, ...}) = 0 [pid 5609] getdents64(3, 0x555579655790 /* 4 entries */, 32768) = 112 [pid 5609] umount2("./76/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5609] umount2("./76/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] newfstatat(AT_FDCWD, "./76/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] umount2("./76/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] openat(AT_FDCWD, "./76/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5609] fstat(4, {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0 [pid 5609] getdents64(4, 0x55557965d7d0 /* 2 entries */, 32768) = 48 [pid 5609] getdents64(4, 0x55557965d7d0 /* 0 entries */, 32768) = 0 [pid 5609] close(4) = 0 [pid 5609] rmdir("./76/file2") = 0 [pid 5609] umount2("./76/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] newfstatat(AT_FDCWD, "./76/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] unlink("./76/binderfs") = 0 [pid 5609] getdents64(3, 0x555579655790 /* 0 entries */, 32768) = 0 [pid 5609] close(3) = 0 [pid 5609] rmdir("./76") = 0 [pid 5609] mkdir("./77", 0777) = 0 [pid 5609] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 [pid 5609] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5609] close(3) = 0 [pid 5609] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5609] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5724 attached , child_tidptr=0x5555796546d0) = 79 [pid 5724] set_robust_list(0x5555796546e0, 24 [pid 5609] rt_sigprocmask(SIG_SETMASK, [] [pid 5724] <... set_robust_list resumed>) = 0 [pid 5609] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5724] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5724] chdir("./77") = 0 [pid 5724] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5724] setpgid(0, 0) = 0 [pid 5724] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5724] write(3, "1000", 4) = 4 [pid 5724] close(3) = 0 [pid 5724] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5724] write(1, "executing program\n", 18) = 18 [pid 5724] memfd_create("syzkaller", 0) = 3 [pid 5724] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5724] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5724] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5724] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5724] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5724] close(3) = 0 [pid 5724] close(4) = 0 [pid 5724] mkdir("./file2", 0777) = 0 [pid 5724] mount("/dev/loop0", "./file2", "jfs", MS_NOEXEC|MS_NOATIME|MS_NODIRATIME|MS_I_VERSION, ",umask=0") = 0 [pid 5724] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5724] chdir("./file2") = 0 [pid 5724] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5724] ioctl(4, LOOP_CLR_FD) = 0 [pid 5724] close(4) = 0 [pid 5724] memfd_create("syzkaller", 0) = 4 [pid 5724] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5724] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8192) = 8192 [pid 5724] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5724] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5724] close(4) = 0 [pid 5724] memfd_create("syzkaller", 0) = 4 [pid 5724] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5724] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 83968) = 83968 [pid 5724] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5724] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5724] close(4) = 0 [pid 5724] fchown(-1, -1, 0) = -1 EBADF (Bad file descriptor) [pid 5724] open_by_handle_at(-100, NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5724] close(3) = 0 [pid 5724] close(4) = -1 EBADF (Bad file descriptor) [ 150.109664][ T5724] loop0: detected capacity change from 0 to 32768 [pid 5724] close(5) = -1 EBADF (Bad file descriptor) [pid 5724] close(6) = -1 EBADF (Bad file descriptor) [pid 5724] close(7) = -1 EBADF (Bad file descriptor) [pid 5724] close(8) = -1 EBADF (Bad file descriptor) [pid 5724] close(9) = -1 EBADF (Bad file descriptor) [pid 5724] close(10) = -1 EBADF (Bad file descriptor) [pid 5724] close(11) = -1 EBADF (Bad file descriptor) [pid 5724] close(12) = -1 EBADF (Bad file descriptor) [pid 5724] close(13) = -1 EBADF (Bad file descriptor) [pid 5724] close(14) = -1 EBADF (Bad file descriptor) [pid 5724] close(15) = -1 EBADF (Bad file descriptor) [pid 5724] close(16) = -1 EBADF (Bad file descriptor) [pid 5724] close(17) = -1 EBADF (Bad file descriptor) [pid 5724] close(18) = -1 EBADF (Bad file descriptor) [pid 5724] close(19) = -1 EBADF (Bad file descriptor) [pid 5724] close(20) = -1 EBADF (Bad file descriptor) [pid 5724] close(21) = -1 EBADF (Bad file descriptor) [pid 5724] close(22) = -1 EBADF (Bad file descriptor) [pid 5724] close(23) = -1 EBADF (Bad file descriptor) [pid 5724] close(24) = -1 EBADF (Bad file descriptor) [pid 5724] close(25) = -1 EBADF (Bad file descriptor) [pid 5724] close(26) = -1 EBADF (Bad file descriptor) [pid 5724] close(27) = -1 EBADF (Bad file descriptor) [pid 5724] close(28) = -1 EBADF (Bad file descriptor) [pid 5724] close(29) = -1 EBADF (Bad file descriptor) [pid 5724] exit_group(0) = ? [pid 5724] +++ exited with 0 +++ [pid 5609] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=79, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=19 /* 0.19 s */} --- [pid 5609] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5609] umount2("./77", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] openat(AT_FDCWD, "./77", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5609] fstat(3, {st_mode=S_IFDIR|0700, st_size=80, ...}) = 0 [pid 5609] getdents64(3, 0x555579655790 /* 4 entries */, 32768) = 112 [pid 5609] umount2("./77/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5609] umount2("./77/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] newfstatat(AT_FDCWD, "./77/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] umount2("./77/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] openat(AT_FDCWD, "./77/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5609] fstat(4, {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0 [pid 5609] getdents64(4, 0x55557965d7d0 /* 2 entries */, 32768) = 48 [pid 5609] getdents64(4, 0x55557965d7d0 /* 0 entries */, 32768) = 0 [pid 5609] close(4) = 0 [pid 5609] rmdir("./77/file2") = 0 [pid 5609] umount2("./77/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] newfstatat(AT_FDCWD, "./77/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] unlink("./77/binderfs") = 0 [pid 5609] getdents64(3, 0x555579655790 /* 0 entries */, 32768) = 0 [pid 5609] close(3) = 0 [pid 5609] rmdir("./77") = 0 [pid 5609] mkdir("./78", 0777) = 0 [pid 5609] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 [pid 5609] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5609] close(3) = 0 [pid 5609] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5609] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5725 attached , child_tidptr=0x5555796546d0) = 80 [pid 5609] rt_sigprocmask(SIG_SETMASK, [] [pid 5725] set_robust_list(0x5555796546e0, 24) = 0 [pid 5609] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5725] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5725] chdir("./78") = 0 [pid 5725] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5725] setpgid(0, 0) = 0 [pid 5725] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5725] write(3, "1000", 4) = 4 [pid 5725] close(3) = 0 [pid 5725] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5725] write(1, "executing program\n", 18) = 18 [pid 5725] memfd_create("syzkaller", 0) = 3 [pid 5725] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5725] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5725] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5725] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5725] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5725] close(3) = 0 [pid 5725] close(4) = 0 [pid 5725] mkdir("./file2", 0777) = 0 [pid 5725] mount("/dev/loop0", "./file2", "jfs", MS_NOEXEC|MS_NOATIME|MS_NODIRATIME|MS_I_VERSION, ",umask=0") = 0 [pid 5725] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5725] chdir("./file2") = 0 [pid 5725] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5725] ioctl(4, LOOP_CLR_FD) = 0 [pid 5725] close(4) = 0 [pid 5725] memfd_create("syzkaller", 0) = 4 [pid 5725] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5725] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8192) = 8192 [pid 5725] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5725] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 150.620350][ T5725] loop0: detected capacity change from 0 to 32768 [pid 5725] close(4) = 0 [pid 5725] memfd_create("syzkaller", 0) = 4 [pid 5725] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5725] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 83968) = 83968 [pid 5725] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5725] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5725] close(4) = 0 [pid 5725] fchown(-1, -1, 0) = -1 EBADF (Bad file descriptor) [pid 5725] open_by_handle_at(-100, NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5725] close(3) = 0 [pid 5725] close(4) = -1 EBADF (Bad file descriptor) [pid 5725] close(5) = -1 EBADF (Bad file descriptor) [pid 5725] close(6) = -1 EBADF (Bad file descriptor) [pid 5725] close(7) = -1 EBADF (Bad file descriptor) [pid 5725] close(8) = -1 EBADF (Bad file descriptor) [pid 5725] close(9) = -1 EBADF (Bad file descriptor) [pid 5725] close(10) = -1 EBADF (Bad file descriptor) [pid 5725] close(11) = -1 EBADF (Bad file descriptor) [pid 5725] close(12) = -1 EBADF (Bad file descriptor) [pid 5725] close(13) = -1 EBADF (Bad file descriptor) [pid 5725] close(14) = -1 EBADF (Bad file descriptor) [pid 5725] close(15) = -1 EBADF (Bad file descriptor) [pid 5725] close(16) = -1 EBADF (Bad file descriptor) [pid 5725] close(17) = -1 EBADF (Bad file descriptor) [pid 5725] close(18) = -1 EBADF (Bad file descriptor) [pid 5725] close(19) = -1 EBADF (Bad file descriptor) [pid 5725] close(20) = -1 EBADF (Bad file descriptor) [pid 5725] close(21) = -1 EBADF (Bad file descriptor) [pid 5725] close(22) = -1 EBADF (Bad file descriptor) [pid 5725] close(23) = -1 EBADF (Bad file descriptor) [pid 5725] close(24) = -1 EBADF (Bad file descriptor) [pid 5725] close(25) = -1 EBADF (Bad file descriptor) [pid 5725] close(26) = -1 EBADF (Bad file descriptor) [pid 5725] close(27) = -1 EBADF (Bad file descriptor) [pid 5725] close(28) = -1 EBADF (Bad file descriptor) [pid 5725] close(29) = -1 EBADF (Bad file descriptor) [pid 5725] exit_group(0) = ? [pid 5725] +++ exited with 0 +++ [pid 5609] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=80, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=20 /* 0.20 s */} --- [pid 5609] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5609] umount2("./78", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] openat(AT_FDCWD, "./78", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5609] fstat(3, {st_mode=S_IFDIR|0700, st_size=80, ...}) = 0 [pid 5609] getdents64(3, 0x555579655790 /* 4 entries */, 32768) = 112 [pid 5609] umount2("./78/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5609] umount2("./78/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] newfstatat(AT_FDCWD, "./78/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] umount2("./78/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] openat(AT_FDCWD, "./78/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5609] fstat(4, {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0 [pid 5609] getdents64(4, 0x55557965d7d0 /* 2 entries */, 32768) = 48 [pid 5609] getdents64(4, 0x55557965d7d0 /* 0 entries */, 32768) = 0 [pid 5609] close(4) = 0 [pid 5609] rmdir("./78/file2") = 0 [pid 5609] umount2("./78/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] newfstatat(AT_FDCWD, "./78/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] unlink("./78/binderfs") = 0 [pid 5609] getdents64(3, 0x555579655790 /* 0 entries */, 32768) = 0 [pid 5609] close(3) = 0 [pid 5609] rmdir("./78") = 0 [pid 5609] mkdir("./79", 0777) = 0 [pid 5609] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 [pid 5609] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5609] close(3) = 0 [pid 5609] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5609] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5726 attached , child_tidptr=0x5555796546d0) = 81 [pid 5609] rt_sigprocmask(SIG_SETMASK, [] [pid 5726] set_robust_list(0x5555796546e0, 24) = 0 [pid 5609] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5726] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5726] chdir("./79") = 0 [pid 5726] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5726] setpgid(0, 0) = 0 [pid 5726] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5726] write(3, "1000", 4) = 4 [pid 5726] close(3) = 0 [pid 5726] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5726] write(1, "executing program\n", 18) = 18 executing program [pid 5726] memfd_create("syzkaller", 0) = 3 [pid 5726] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5726] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5726] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5726] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5726] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5726] close(3) = 0 [pid 5726] close(4) = 0 [pid 5726] mkdir("./file2", 0777) = 0 [pid 5726] mount("/dev/loop0", "./file2", "jfs", MS_NOEXEC|MS_NOATIME|MS_NODIRATIME|MS_I_VERSION, ",umask=0") = 0 [pid 5726] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5726] chdir("./file2") = 0 [pid 5726] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5726] ioctl(4, LOOP_CLR_FD) = 0 [pid 5726] close(4) = 0 [pid 5726] memfd_create("syzkaller", 0) = 4 [pid 5726] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5726] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8192) = 8192 [pid 5726] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5726] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5726] close(4) = 0 [pid 5726] memfd_create("syzkaller", 0) = 4 [pid 5726] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5726] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 83968) = 83968 [ 151.144936][ T5726] loop0: detected capacity change from 0 to 32768 [pid 5726] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5726] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5726] close(4) = 0 [pid 5726] fchown(-1, -1, 0) = -1 EBADF (Bad file descriptor) [pid 5726] open_by_handle_at(-100, NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5726] close(3) = 0 [pid 5726] close(4) = -1 EBADF (Bad file descriptor) [pid 5726] close(5) = -1 EBADF (Bad file descriptor) [pid 5726] close(6) = -1 EBADF (Bad file descriptor) [pid 5726] close(7) = -1 EBADF (Bad file descriptor) [pid 5726] close(8) = -1 EBADF (Bad file descriptor) [pid 5726] close(9) = -1 EBADF (Bad file descriptor) [pid 5726] close(10) = -1 EBADF (Bad file descriptor) [pid 5726] close(11) = -1 EBADF (Bad file descriptor) [pid 5726] close(12) = -1 EBADF (Bad file descriptor) [pid 5726] close(13) = -1 EBADF (Bad file descriptor) [pid 5726] close(14) = -1 EBADF (Bad file descriptor) [pid 5726] close(15) = -1 EBADF (Bad file descriptor) [pid 5726] close(16) = -1 EBADF (Bad file descriptor) [pid 5726] close(17) = -1 EBADF (Bad file descriptor) [pid 5726] close(18) = -1 EBADF (Bad file descriptor) [pid 5726] close(19) = -1 EBADF (Bad file descriptor) [pid 5726] close(20) = -1 EBADF (Bad file descriptor) [pid 5726] close(21) = -1 EBADF (Bad file descriptor) [pid 5726] close(22) = -1 EBADF (Bad file descriptor) [pid 5726] close(23) = -1 EBADF (Bad file descriptor) [pid 5726] close(24) = -1 EBADF (Bad file descriptor) [pid 5726] close(25) = -1 EBADF (Bad file descriptor) [pid 5726] close(26) = -1 EBADF (Bad file descriptor) [pid 5726] close(27) = -1 EBADF (Bad file descriptor) [pid 5726] close(28) = -1 EBADF (Bad file descriptor) [pid 5726] close(29) = -1 EBADF (Bad file descriptor) [pid 5726] exit_group(0) = ? [pid 5726] +++ exited with 0 +++ [pid 5609] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=81, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=20 /* 0.20 s */} --- [pid 5609] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5609] umount2("./79", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] openat(AT_FDCWD, "./79", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5609] fstat(3, {st_mode=S_IFDIR|0700, st_size=80, ...}) = 0 [pid 5609] getdents64(3, 0x555579655790 /* 4 entries */, 32768) = 112 [pid 5609] umount2("./79/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5609] umount2("./79/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] newfstatat(AT_FDCWD, "./79/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] umount2("./79/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] openat(AT_FDCWD, "./79/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5609] fstat(4, {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0 [pid 5609] getdents64(4, 0x55557965d7d0 /* 2 entries */, 32768) = 48 [pid 5609] getdents64(4, 0x55557965d7d0 /* 0 entries */, 32768) = 0 [pid 5609] close(4) = 0 [pid 5609] rmdir("./79/file2") = 0 [pid 5609] umount2("./79/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] newfstatat(AT_FDCWD, "./79/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] unlink("./79/binderfs") = 0 [pid 5609] getdents64(3, 0x555579655790 /* 0 entries */, 32768) = 0 [pid 5609] close(3) = 0 [pid 5609] rmdir("./79") = 0 [pid 5609] mkdir("./80", 0777) = 0 [pid 5609] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 [pid 5609] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5609] close(3) = 0 [pid 5609] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5609] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5727 attached [pid 5727] set_robust_list(0x5555796546e0, 24 [pid 5609] <... clone resumed>, child_tidptr=0x5555796546d0) = 82 [pid 5727] <... set_robust_list resumed>) = 0 [pid 5609] rt_sigprocmask(SIG_SETMASK, [] [pid 5727] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5609] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5727] chdir("./80") = 0 [pid 5727] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5727] setpgid(0, 0) = 0 [pid 5727] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5727] write(3, "1000", 4) = 4 [pid 5727] close(3) = 0 [pid 5727] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5727] write(1, "executing program\n", 18) = 18 executing program [pid 5727] memfd_create("syzkaller", 0) = 3 [pid 5727] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5727] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5727] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5727] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5727] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5727] close(3) = 0 [pid 5727] close(4) = 0 [pid 5727] mkdir("./file2", 0777) = 0 [pid 5727] mount("/dev/loop0", "./file2", "jfs", MS_NOEXEC|MS_NOATIME|MS_NODIRATIME|MS_I_VERSION, ",umask=0") = 0 [pid 5727] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5727] chdir("./file2") = 0 [pid 5727] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5727] ioctl(4, LOOP_CLR_FD) = 0 [pid 5727] close(4) = 0 [pid 5727] memfd_create("syzkaller", 0) = 4 [pid 5727] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5727] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8192) = 8192 [pid 5727] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5727] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5727] close(4) = 0 [pid 5727] memfd_create("syzkaller", 0) = 4 [pid 5727] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5727] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 83968) = 83968 [pid 5727] munmap(0x7ffa6af59000, 138412032) = 0 [ 151.662484][ T5727] loop0: detected capacity change from 0 to 32768 [pid 5727] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5727] close(4) = 0 [pid 5727] fchown(-1, -1, 0) = -1 EBADF (Bad file descriptor) [pid 5727] open_by_handle_at(-100, NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5727] close(3) = 0 [pid 5727] close(4) = -1 EBADF (Bad file descriptor) [pid 5727] close(5) = -1 EBADF (Bad file descriptor) [pid 5727] close(6) = -1 EBADF (Bad file descriptor) [pid 5727] close(7) = -1 EBADF (Bad file descriptor) [pid 5727] close(8) = -1 EBADF (Bad file descriptor) [pid 5727] close(9) = -1 EBADF (Bad file descriptor) [pid 5727] close(10) = -1 EBADF (Bad file descriptor) [pid 5727] close(11) = -1 EBADF (Bad file descriptor) [pid 5727] close(12) = -1 EBADF (Bad file descriptor) [pid 5727] close(13) = -1 EBADF (Bad file descriptor) [pid 5727] close(14) = -1 EBADF (Bad file descriptor) [pid 5727] close(15) = -1 EBADF (Bad file descriptor) [pid 5727] close(16) = -1 EBADF (Bad file descriptor) [pid 5727] close(17) = -1 EBADF (Bad file descriptor) [pid 5727] close(18) = -1 EBADF (Bad file descriptor) [pid 5727] close(19) = -1 EBADF (Bad file descriptor) [pid 5727] close(20) = -1 EBADF (Bad file descriptor) [pid 5727] close(21) = -1 EBADF (Bad file descriptor) [pid 5727] close(22) = -1 EBADF (Bad file descriptor) [pid 5727] close(23) = -1 EBADF (Bad file descriptor) [pid 5727] close(24) = -1 EBADF (Bad file descriptor) [pid 5727] close(25) = -1 EBADF (Bad file descriptor) [pid 5727] close(26) = -1 EBADF (Bad file descriptor) [pid 5727] close(27) = -1 EBADF (Bad file descriptor) [pid 5727] close(28) = -1 EBADF (Bad file descriptor) [pid 5727] close(29) = -1 EBADF (Bad file descriptor) [pid 5727] exit_group(0) = ? [pid 5727] +++ exited with 0 +++ [pid 5609] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=82, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=24 /* 0.24 s */} --- [pid 5609] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5609] umount2("./80", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] openat(AT_FDCWD, "./80", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5609] fstat(3, {st_mode=S_IFDIR|0700, st_size=80, ...}) = 0 [pid 5609] getdents64(3, 0x555579655790 /* 4 entries */, 32768) = 112 [pid 5609] umount2("./80/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5609] umount2("./80/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] newfstatat(AT_FDCWD, "./80/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] umount2("./80/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] openat(AT_FDCWD, "./80/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5609] fstat(4, {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0 [pid 5609] getdents64(4, 0x55557965d7d0 /* 2 entries */, 32768) = 48 [pid 5609] getdents64(4, 0x55557965d7d0 /* 0 entries */, 32768) = 0 [pid 5609] close(4) = 0 [pid 5609] rmdir("./80/file2") = 0 [pid 5609] umount2("./80/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] newfstatat(AT_FDCWD, "./80/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] unlink("./80/binderfs") = 0 [pid 5609] getdents64(3, 0x555579655790 /* 0 entries */, 32768) = 0 [pid 5609] close(3) = 0 [pid 5609] rmdir("./80") = 0 [pid 5609] mkdir("./81", 0777) = 0 [pid 5609] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 [pid 5609] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5609] close(3) = 0 [pid 5609] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5609] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5728 attached , child_tidptr=0x5555796546d0) = 83 [pid 5609] rt_sigprocmask(SIG_SETMASK, [] [pid 5728] set_robust_list(0x5555796546e0, 24) = 0 [pid 5609] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5728] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5728] chdir("./81") = 0 [pid 5728] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5728] setpgid(0, 0) = 0 [pid 5728] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5728] write(3, "1000", 4) = 4 [pid 5728] close(3) = 0 [pid 5728] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5728] write(1, "executing program\n", 18) = 18 executing program [pid 5728] memfd_create("syzkaller", 0) = 3 [pid 5728] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5728] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5728] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5728] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5728] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5728] close(3) = 0 [pid 5728] close(4) = 0 [pid 5728] mkdir("./file2", 0777) = 0 [pid 5728] mount("/dev/loop0", "./file2", "jfs", MS_NOEXEC|MS_NOATIME|MS_NODIRATIME|MS_I_VERSION, ",umask=0") = 0 [pid 5728] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5728] chdir("./file2") = 0 [pid 5728] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5728] ioctl(4, LOOP_CLR_FD) = 0 [pid 5728] close(4) = 0 [pid 5728] memfd_create("syzkaller", 0) = 4 [pid 5728] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [ 152.175476][ T5728] loop0: detected capacity change from 0 to 32768 [pid 5728] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8192) = 8192 [pid 5728] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5728] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5728] close(4) = 0 [pid 5728] memfd_create("syzkaller", 0) = 4 [pid 5728] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5728] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 83968) = 83968 [pid 5728] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5728] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5728] close(4) = 0 [pid 5728] fchown(-1, -1, 0) = -1 EBADF (Bad file descriptor) [pid 5728] open_by_handle_at(-100, NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5728] close(3) = 0 [pid 5728] close(4) = -1 EBADF (Bad file descriptor) [pid 5728] close(5) = -1 EBADF (Bad file descriptor) [pid 5728] close(6) = -1 EBADF (Bad file descriptor) [pid 5728] close(7) = -1 EBADF (Bad file descriptor) [pid 5728] close(8) = -1 EBADF (Bad file descriptor) [pid 5728] close(9) = -1 EBADF (Bad file descriptor) [pid 5728] close(10) = -1 EBADF (Bad file descriptor) [pid 5728] close(11) = -1 EBADF (Bad file descriptor) [pid 5728] close(12) = -1 EBADF (Bad file descriptor) [pid 5728] close(13) = -1 EBADF (Bad file descriptor) [pid 5728] close(14) = -1 EBADF (Bad file descriptor) [pid 5728] close(15) = -1 EBADF (Bad file descriptor) [pid 5728] close(16) = -1 EBADF (Bad file descriptor) [pid 5728] close(17) = -1 EBADF (Bad file descriptor) [pid 5728] close(18) = -1 EBADF (Bad file descriptor) [pid 5728] close(19) = -1 EBADF (Bad file descriptor) [pid 5728] close(20) = -1 EBADF (Bad file descriptor) [pid 5728] close(21) = -1 EBADF (Bad file descriptor) [pid 5728] close(22) = -1 EBADF (Bad file descriptor) [pid 5728] close(23) = -1 EBADF (Bad file descriptor) [pid 5728] close(24) = -1 EBADF (Bad file descriptor) [pid 5728] close(25) = -1 EBADF (Bad file descriptor) [pid 5728] close(26) = -1 EBADF (Bad file descriptor) [pid 5728] close(27) = -1 EBADF (Bad file descriptor) [pid 5728] close(28) = -1 EBADF (Bad file descriptor) [pid 5728] close(29) = -1 EBADF (Bad file descriptor) [pid 5728] exit_group(0) = ? [pid 5728] +++ exited with 0 +++ [pid 5609] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=83, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=18 /* 0.18 s */} --- [pid 5609] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5609] umount2("./81", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] openat(AT_FDCWD, "./81", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5609] fstat(3, {st_mode=S_IFDIR|0700, st_size=80, ...}) = 0 [pid 5609] getdents64(3, 0x555579655790 /* 4 entries */, 32768) = 112 [pid 5609] umount2("./81/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5609] umount2("./81/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] newfstatat(AT_FDCWD, "./81/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] umount2("./81/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] openat(AT_FDCWD, "./81/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5609] fstat(4, {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0 [pid 5609] getdents64(4, 0x55557965d7d0 /* 2 entries */, 32768) = 48 [pid 5609] getdents64(4, 0x55557965d7d0 /* 0 entries */, 32768) = 0 [pid 5609] close(4) = 0 [pid 5609] rmdir("./81/file2") = 0 [pid 5609] umount2("./81/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] newfstatat(AT_FDCWD, "./81/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] unlink("./81/binderfs") = 0 [pid 5609] getdents64(3, 0x555579655790 /* 0 entries */, 32768) = 0 [pid 5609] close(3) = 0 [pid 5609] rmdir("./81") = 0 [pid 5609] mkdir("./82", 0777) = 0 [pid 5609] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 [pid 5609] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5609] close(3) = 0 [pid 5609] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5609] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5729 attached , child_tidptr=0x5555796546d0) = 84 [pid 5609] rt_sigprocmask(SIG_SETMASK, [] [pid 5729] set_robust_list(0x5555796546e0, 24) = 0 [pid 5609] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5729] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5729] chdir("./82") = 0 [pid 5729] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5729] setpgid(0, 0) = 0 [pid 5729] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5729] write(3, "1000", 4) = 4 [pid 5729] close(3) = 0 [pid 5729] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5729] write(1, "executing program\n", 18) = 18 [pid 5729] memfd_create("syzkaller", 0) = 3 executing program [pid 5729] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5729] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5729] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5729] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5729] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5729] close(3) = 0 [pid 5729] close(4) = 0 [pid 5729] mkdir("./file2", 0777) = 0 [pid 5729] mount("/dev/loop0", "./file2", "jfs", MS_NOEXEC|MS_NOATIME|MS_NODIRATIME|MS_I_VERSION, ",umask=0") = 0 [pid 5729] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5729] chdir("./file2") = 0 [pid 5729] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5729] ioctl(4, LOOP_CLR_FD) = 0 [pid 5729] close(4) = 0 [pid 5729] memfd_create("syzkaller", 0) = 4 [pid 5729] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5729] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8192) = 8192 [pid 5729] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5729] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5729] close(4) = 0 [pid 5729] memfd_create("syzkaller", 0) = 4 [pid 5729] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5729] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 83968) = 83968 [pid 5729] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5729] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5729] close(4) = 0 [pid 5729] fchown(-1, -1, 0) = -1 EBADF (Bad file descriptor) [pid 5729] open_by_handle_at(-100, NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5729] close(3) = 0 [pid 5729] close(4) = -1 EBADF (Bad file descriptor) [pid 5729] close(5) = -1 EBADF (Bad file descriptor) [pid 5729] close(6) = -1 EBADF (Bad file descriptor) [pid 5729] close(7) = -1 EBADF (Bad file descriptor) [pid 5729] close(8) = -1 EBADF (Bad file descriptor) [pid 5729] close(9) = -1 EBADF (Bad file descriptor) [ 152.700843][ T5729] loop0: detected capacity change from 0 to 32768 [pid 5729] close(10) = -1 EBADF (Bad file descriptor) [pid 5729] close(11) = -1 EBADF (Bad file descriptor) [pid 5729] close(12) = -1 EBADF (Bad file descriptor) [pid 5729] close(13) = -1 EBADF (Bad file descriptor) [pid 5729] close(14) = -1 EBADF (Bad file descriptor) [pid 5729] close(15) = -1 EBADF (Bad file descriptor) [pid 5729] close(16) = -1 EBADF (Bad file descriptor) [pid 5729] close(17) = -1 EBADF (Bad file descriptor) [pid 5729] close(18) = -1 EBADF (Bad file descriptor) [pid 5729] close(19) = -1 EBADF (Bad file descriptor) [pid 5729] close(20) = -1 EBADF (Bad file descriptor) [pid 5729] close(21) = -1 EBADF (Bad file descriptor) [pid 5729] close(22) = -1 EBADF (Bad file descriptor) [pid 5729] close(23) = -1 EBADF (Bad file descriptor) [pid 5729] close(24) = -1 EBADF (Bad file descriptor) [pid 5729] close(25) = -1 EBADF (Bad file descriptor) [pid 5729] close(26) = -1 EBADF (Bad file descriptor) [pid 5729] close(27) = -1 EBADF (Bad file descriptor) [pid 5729] close(28) = -1 EBADF (Bad file descriptor) [pid 5729] close(29) = -1 EBADF (Bad file descriptor) [pid 5729] exit_group(0) = ? [pid 5729] +++ exited with 0 +++ [pid 5609] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=84, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=17 /* 0.17 s */} --- [pid 5609] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5609] umount2("./82", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] openat(AT_FDCWD, "./82", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5609] fstat(3, {st_mode=S_IFDIR|0700, st_size=80, ...}) = 0 [pid 5609] getdents64(3, 0x555579655790 /* 4 entries */, 32768) = 112 [pid 5609] umount2("./82/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5609] umount2("./82/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] newfstatat(AT_FDCWD, "./82/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] umount2("./82/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] openat(AT_FDCWD, "./82/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5609] fstat(4, {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0 [pid 5609] getdents64(4, 0x55557965d7d0 /* 2 entries */, 32768) = 48 [pid 5609] getdents64(4, 0x55557965d7d0 /* 0 entries */, 32768) = 0 [pid 5609] close(4) = 0 [pid 5609] rmdir("./82/file2") = 0 [pid 5609] umount2("./82/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] newfstatat(AT_FDCWD, "./82/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] unlink("./82/binderfs") = 0 [pid 5609] getdents64(3, 0x555579655790 /* 0 entries */, 32768) = 0 [pid 5609] close(3) = 0 [pid 5609] rmdir("./82") = 0 [pid 5609] mkdir("./83", 0777) = 0 [pid 5609] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 [pid 5609] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5609] close(3) = 0 [pid 5609] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5609] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5730 attached [pid 5730] set_robust_list(0x5555796546e0, 24 [pid 5609] <... clone resumed>, child_tidptr=0x5555796546d0) = 85 [pid 5730] <... set_robust_list resumed>) = 0 [pid 5730] rt_sigprocmask(SIG_SETMASK, [] [pid 5609] rt_sigprocmask(SIG_SETMASK, [] [pid 5730] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5609] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5730] chdir("./83") = 0 [pid 5730] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5730] setpgid(0, 0) = 0 [pid 5730] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5730] write(3, "1000", 4) = 4 [pid 5730] close(3) = 0 [pid 5730] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5730] write(1, "executing program\n", 18) = 18 executing program [pid 5730] memfd_create("syzkaller", 0) = 3 [pid 5730] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5730] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5730] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5730] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5730] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5730] close(3) = 0 [pid 5730] close(4) = 0 [pid 5730] mkdir("./file2", 0777) = 0 [pid 5730] mount("/dev/loop0", "./file2", "jfs", MS_NOEXEC|MS_NOATIME|MS_NODIRATIME|MS_I_VERSION, ",umask=0") = 0 [pid 5730] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5730] chdir("./file2") = 0 [pid 5730] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5730] ioctl(4, LOOP_CLR_FD) = 0 [pid 5730] close(4) = 0 [pid 5730] memfd_create("syzkaller", 0) = 4 [pid 5730] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5730] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8192) = 8192 [pid 5730] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5730] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5730] close(4) = 0 [pid 5730] memfd_create("syzkaller", 0) = 4 [pid 5730] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5730] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 83968) = 83968 [pid 5730] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5730] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5730] close(4) = 0 [pid 5730] fchown(-1, -1, 0) = -1 EBADF (Bad file descriptor) [ 153.228822][ T5730] loop0: detected capacity change from 0 to 32768 [pid 5730] open_by_handle_at(-100, NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5730] close(3) = 0 [pid 5730] close(4) = -1 EBADF (Bad file descriptor) [pid 5730] close(5) = -1 EBADF (Bad file descriptor) [pid 5730] close(6) = -1 EBADF (Bad file descriptor) [pid 5730] close(7) = -1 EBADF (Bad file descriptor) [pid 5730] close(8) = -1 EBADF (Bad file descriptor) [pid 5730] close(9) = -1 EBADF (Bad file descriptor) [pid 5730] close(10) = -1 EBADF (Bad file descriptor) [pid 5730] close(11) = -1 EBADF (Bad file descriptor) [pid 5730] close(12) = -1 EBADF (Bad file descriptor) [pid 5730] close(13) = -1 EBADF (Bad file descriptor) [pid 5730] close(14) = -1 EBADF (Bad file descriptor) [pid 5730] close(15) = -1 EBADF (Bad file descriptor) [pid 5730] close(16) = -1 EBADF (Bad file descriptor) [pid 5730] close(17) = -1 EBADF (Bad file descriptor) [pid 5730] close(18) = -1 EBADF (Bad file descriptor) [pid 5730] close(19) = -1 EBADF (Bad file descriptor) [pid 5730] close(20) = -1 EBADF (Bad file descriptor) [pid 5730] close(21) = -1 EBADF (Bad file descriptor) [pid 5730] close(22) = -1 EBADF (Bad file descriptor) [pid 5730] close(23) = -1 EBADF (Bad file descriptor) [pid 5730] close(24) = -1 EBADF (Bad file descriptor) [pid 5730] close(25) = -1 EBADF (Bad file descriptor) [pid 5730] close(26) = -1 EBADF (Bad file descriptor) [pid 5730] close(27) = -1 EBADF (Bad file descriptor) [pid 5730] close(28) = -1 EBADF (Bad file descriptor) [pid 5730] close(29) = -1 EBADF (Bad file descriptor) [pid 5730] exit_group(0) = ? [pid 5730] +++ exited with 0 +++ [pid 5609] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=85, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=19 /* 0.19 s */} --- [pid 5609] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5609] umount2("./83", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] openat(AT_FDCWD, "./83", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5609] fstat(3, {st_mode=S_IFDIR|0700, st_size=80, ...}) = 0 [pid 5609] getdents64(3, 0x555579655790 /* 4 entries */, 32768) = 112 [pid 5609] umount2("./83/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5609] umount2("./83/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] newfstatat(AT_FDCWD, "./83/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] umount2("./83/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] openat(AT_FDCWD, "./83/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5609] fstat(4, {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0 [pid 5609] getdents64(4, 0x55557965d7d0 /* 2 entries */, 32768) = 48 [pid 5609] getdents64(4, 0x55557965d7d0 /* 0 entries */, 32768) = 0 [pid 5609] close(4) = 0 [pid 5609] rmdir("./83/file2") = 0 [pid 5609] umount2("./83/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] newfstatat(AT_FDCWD, "./83/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] unlink("./83/binderfs") = 0 [pid 5609] getdents64(3, 0x555579655790 /* 0 entries */, 32768) = 0 [pid 5609] close(3) = 0 [pid 5609] rmdir("./83") = 0 [pid 5609] mkdir("./84", 0777) = 0 [pid 5609] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 [pid 5609] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5609] close(3) = 0 [pid 5609] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5609] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5731 attached , child_tidptr=0x5555796546d0) = 86 [pid 5731] set_robust_list(0x5555796546e0, 24 [pid 5609] rt_sigprocmask(SIG_SETMASK, [] [pid 5731] <... set_robust_list resumed>) = 0 [pid 5609] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5731] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5731] chdir("./84") = 0 [pid 5731] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5731] setpgid(0, 0) = 0 [pid 5731] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5731] write(3, "1000", 4) = 4 [pid 5731] close(3) = 0 [pid 5731] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5731] write(1, "executing program\n", 18) = 18 executing program [pid 5731] memfd_create("syzkaller", 0) = 3 [pid 5731] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5731] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5731] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5731] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5731] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5731] close(3) = 0 [pid 5731] close(4) = 0 [pid 5731] mkdir("./file2", 0777) = 0 [pid 5731] mount("/dev/loop0", "./file2", "jfs", MS_NOEXEC|MS_NOATIME|MS_NODIRATIME|MS_I_VERSION, ",umask=0") = 0 [pid 5731] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5731] chdir("./file2") = 0 [pid 5731] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5731] ioctl(4, LOOP_CLR_FD) = 0 [pid 5731] close(4) = 0 [pid 5731] memfd_create("syzkaller", 0) = 4 [pid 5731] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5731] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8192) = 8192 [pid 5731] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5731] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5731] close(4) = 0 [pid 5731] memfd_create("syzkaller", 0) = 4 [pid 5731] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [ 153.922139][ T5731] loop0: detected capacity change from 0 to 32768 [pid 5731] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 83968) = 83968 [pid 5731] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5731] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5731] close(4) = 0 [pid 5731] fchown(-1, -1, 0) = -1 EBADF (Bad file descriptor) [pid 5731] open_by_handle_at(-100, NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5731] close(3) = 0 [pid 5731] close(4) = -1 EBADF (Bad file descriptor) [pid 5731] close(5) = -1 EBADF (Bad file descriptor) [pid 5731] close(6) = -1 EBADF (Bad file descriptor) [pid 5731] close(7) = -1 EBADF (Bad file descriptor) [pid 5731] close(8) = -1 EBADF (Bad file descriptor) [pid 5731] close(9) = -1 EBADF (Bad file descriptor) [pid 5731] close(10) = -1 EBADF (Bad file descriptor) [pid 5731] close(11) = -1 EBADF (Bad file descriptor) [pid 5731] close(12) = -1 EBADF (Bad file descriptor) [pid 5731] close(13) = -1 EBADF (Bad file descriptor) [pid 5731] close(14) = -1 EBADF (Bad file descriptor) [pid 5731] close(15) = -1 EBADF (Bad file descriptor) [pid 5731] close(16) = -1 EBADF (Bad file descriptor) [pid 5731] close(17) = -1 EBADF (Bad file descriptor) [pid 5731] close(18) = -1 EBADF (Bad file descriptor) [pid 5731] close(19) = -1 EBADF (Bad file descriptor) [pid 5731] close(20) = -1 EBADF (Bad file descriptor) [pid 5731] close(21) = -1 EBADF (Bad file descriptor) [pid 5731] close(22) = -1 EBADF (Bad file descriptor) [pid 5731] close(23) = -1 EBADF (Bad file descriptor) [pid 5731] close(24) = -1 EBADF (Bad file descriptor) [pid 5731] close(25) = -1 EBADF (Bad file descriptor) [pid 5731] close(26) = -1 EBADF (Bad file descriptor) [pid 5731] close(27) = -1 EBADF (Bad file descriptor) [pid 5731] close(28) = -1 EBADF (Bad file descriptor) [pid 5731] close(29) = -1 EBADF (Bad file descriptor) [pid 5731] exit_group(0) = ? [pid 5731] +++ exited with 0 +++ [pid 5609] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=86, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=21 /* 0.21 s */} --- [pid 5609] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5609] umount2("./84", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] openat(AT_FDCWD, "./84", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5609] fstat(3, {st_mode=S_IFDIR|0700, st_size=80, ...}) = 0 [pid 5609] getdents64(3, 0x555579655790 /* 4 entries */, 32768) = 112 [pid 5609] umount2("./84/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5609] umount2("./84/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] newfstatat(AT_FDCWD, "./84/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] umount2("./84/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] openat(AT_FDCWD, "./84/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5609] fstat(4, {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0 [pid 5609] getdents64(4, 0x55557965d7d0 /* 2 entries */, 32768) = 48 [pid 5609] getdents64(4, 0x55557965d7d0 /* 0 entries */, 32768) = 0 [pid 5609] close(4) = 0 [pid 5609] rmdir("./84/file2") = 0 [pid 5609] umount2("./84/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] newfstatat(AT_FDCWD, "./84/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] unlink("./84/binderfs") = 0 [pid 5609] getdents64(3, 0x555579655790 /* 0 entries */, 32768) = 0 [pid 5609] close(3) = 0 [pid 5609] rmdir("./84") = 0 [pid 5609] mkdir("./85", 0777) = 0 [pid 5609] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 [pid 5609] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5609] close(3) = 0 [pid 5609] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5609] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5732 attached , child_tidptr=0x5555796546d0) = 87 [pid 5732] set_robust_list(0x5555796546e0, 24 [pid 5609] rt_sigprocmask(SIG_SETMASK, [] [pid 5732] <... set_robust_list resumed>) = 0 [pid 5609] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5732] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5732] chdir("./85") = 0 [pid 5732] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5732] setpgid(0, 0) = 0 [pid 5732] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5732] write(3, "1000", 4) = 4 [pid 5732] close(3) = 0 [pid 5732] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5732] write(1, "executing program\n", 18) = 18 [pid 5732] memfd_create("syzkaller", 0) = 3 [pid 5732] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5732] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5732] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5732] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5732] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5732] close(3) = 0 [pid 5732] close(4) = 0 [pid 5732] mkdir("./file2", 0777) = 0 [pid 5732] mount("/dev/loop0", "./file2", "jfs", MS_NOEXEC|MS_NOATIME|MS_NODIRATIME|MS_I_VERSION, ",umask=0") = 0 [pid 5732] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5732] chdir("./file2") = 0 [pid 5732] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5732] ioctl(4, LOOP_CLR_FD) = 0 [pid 5732] close(4) = 0 [pid 5732] memfd_create("syzkaller", 0) = 4 [pid 5732] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5732] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8192) = 8192 [pid 5732] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5732] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5732] close(4) = 0 [ 154.493002][ T5732] loop0: detected capacity change from 0 to 32768 [pid 5732] memfd_create("syzkaller", 0) = 4 [pid 5732] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5732] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 83968) = 83968 [pid 5732] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5732] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5732] close(4) = 0 [pid 5732] fchown(-1, -1, 0) = -1 EBADF (Bad file descriptor) [pid 5732] open_by_handle_at(-100, NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5732] close(3) = 0 [pid 5732] close(4) = -1 EBADF (Bad file descriptor) [pid 5732] close(5) = -1 EBADF (Bad file descriptor) [pid 5732] close(6) = -1 EBADF (Bad file descriptor) [pid 5732] close(7) = -1 EBADF (Bad file descriptor) [pid 5732] close(8) = -1 EBADF (Bad file descriptor) [pid 5732] close(9) = -1 EBADF (Bad file descriptor) [pid 5732] close(10) = -1 EBADF (Bad file descriptor) [pid 5732] close(11) = -1 EBADF (Bad file descriptor) [pid 5732] close(12) = -1 EBADF (Bad file descriptor) [pid 5732] close(13) = -1 EBADF (Bad file descriptor) [pid 5732] close(14) = -1 EBADF (Bad file descriptor) [pid 5732] close(15) = -1 EBADF (Bad file descriptor) [pid 5732] close(16) = -1 EBADF (Bad file descriptor) [pid 5732] close(17) = -1 EBADF (Bad file descriptor) [pid 5732] close(18) = -1 EBADF (Bad file descriptor) [pid 5732] close(19) = -1 EBADF (Bad file descriptor) [pid 5732] close(20) = -1 EBADF (Bad file descriptor) [pid 5732] close(21) = -1 EBADF (Bad file descriptor) [pid 5732] close(22) = -1 EBADF (Bad file descriptor) [pid 5732] close(23) = -1 EBADF (Bad file descriptor) [pid 5732] close(24) = -1 EBADF (Bad file descriptor) [pid 5732] close(25) = -1 EBADF (Bad file descriptor) [pid 5732] close(26) = -1 EBADF (Bad file descriptor) [pid 5732] close(27) = -1 EBADF (Bad file descriptor) [pid 5732] close(28) = -1 EBADF (Bad file descriptor) [pid 5732] close(29) = -1 EBADF (Bad file descriptor) [pid 5732] exit_group(0) = ? [pid 5732] +++ exited with 0 +++ [pid 5609] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=87, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=20 /* 0.20 s */} --- [pid 5609] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5609] umount2("./85", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] openat(AT_FDCWD, "./85", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5609] fstat(3, {st_mode=S_IFDIR|0700, st_size=80, ...}) = 0 [pid 5609] getdents64(3, 0x555579655790 /* 4 entries */, 32768) = 112 [pid 5609] umount2("./85/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5609] umount2("./85/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] newfstatat(AT_FDCWD, "./85/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] umount2("./85/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] openat(AT_FDCWD, "./85/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5609] fstat(4, {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0 [pid 5609] getdents64(4, 0x55557965d7d0 /* 2 entries */, 32768) = 48 [pid 5609] getdents64(4, 0x55557965d7d0 /* 0 entries */, 32768) = 0 [pid 5609] close(4) = 0 [pid 5609] rmdir("./85/file2") = 0 [pid 5609] umount2("./85/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] newfstatat(AT_FDCWD, "./85/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] unlink("./85/binderfs") = 0 [pid 5609] getdents64(3, 0x555579655790 /* 0 entries */, 32768) = 0 [pid 5609] close(3) = 0 [pid 5609] rmdir("./85") = 0 [pid 5609] mkdir("./86", 0777) = 0 [pid 5609] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 [pid 5609] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5609] close(3) = 0 [pid 5609] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5609] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5733 attached , child_tidptr=0x5555796546d0) = 88 [pid 5733] set_robust_list(0x5555796546e0, 24) = 0 [pid 5733] rt_sigprocmask(SIG_SETMASK, [] [pid 5609] rt_sigprocmask(SIG_SETMASK, [] [pid 5733] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5609] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5733] chdir("./86") = 0 [pid 5733] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5733] setpgid(0, 0) = 0 [pid 5733] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5733] write(3, "1000", 4) = 4 [pid 5733] close(3) = 0 [pid 5733] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5733] write(1, "executing program\n", 18) = 18 executing program [pid 5733] memfd_create("syzkaller", 0) = 3 [pid 5733] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5733] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5733] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5733] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5733] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5733] close(3) = 0 [pid 5733] close(4) = 0 [pid 5733] mkdir("./file2", 0777) = 0 [pid 5733] mount("/dev/loop0", "./file2", "jfs", MS_NOEXEC|MS_NOATIME|MS_NODIRATIME|MS_I_VERSION, ",umask=0") = 0 [pid 5733] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5733] chdir("./file2") = 0 [pid 5733] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5733] ioctl(4, LOOP_CLR_FD) = 0 [pid 5733] close(4) = 0 [pid 5733] memfd_create("syzkaller", 0) = 4 [pid 5733] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5733] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8192) = 8192 [pid 5733] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5733] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5733] close(4) = 0 [pid 5733] memfd_create("syzkaller", 0) = 4 [pid 5733] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [ 155.079953][ T5733] loop0: detected capacity change from 0 to 32768 [pid 5733] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 83968) = 83968 [pid 5733] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5733] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5733] close(4) = 0 [pid 5733] fchown(-1, -1, 0) = -1 EBADF (Bad file descriptor) [pid 5733] open_by_handle_at(-100, NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5733] close(3) = 0 [pid 5733] close(4) = -1 EBADF (Bad file descriptor) [pid 5733] close(5) = -1 EBADF (Bad file descriptor) [pid 5733] close(6) = -1 EBADF (Bad file descriptor) [pid 5733] close(7) = -1 EBADF (Bad file descriptor) [pid 5733] close(8) = -1 EBADF (Bad file descriptor) [pid 5733] close(9) = -1 EBADF (Bad file descriptor) [pid 5733] close(10) = -1 EBADF (Bad file descriptor) [pid 5733] close(11) = -1 EBADF (Bad file descriptor) [pid 5733] close(12) = -1 EBADF (Bad file descriptor) [pid 5733] close(13) = -1 EBADF (Bad file descriptor) [pid 5733] close(14) = -1 EBADF (Bad file descriptor) [pid 5733] close(15) = -1 EBADF (Bad file descriptor) [pid 5733] close(16) = -1 EBADF (Bad file descriptor) [pid 5733] close(17) = -1 EBADF (Bad file descriptor) [pid 5733] close(18) = -1 EBADF (Bad file descriptor) [pid 5733] close(19) = -1 EBADF (Bad file descriptor) [pid 5733] close(20) = -1 EBADF (Bad file descriptor) [pid 5733] close(21) = -1 EBADF (Bad file descriptor) [pid 5733] close(22) = -1 EBADF (Bad file descriptor) [pid 5733] close(23) = -1 EBADF (Bad file descriptor) [pid 5733] close(24) = -1 EBADF (Bad file descriptor) [pid 5733] close(25) = -1 EBADF (Bad file descriptor) [pid 5733] close(26) = -1 EBADF (Bad file descriptor) [pid 5733] close(27) = -1 EBADF (Bad file descriptor) [pid 5733] close(28) = -1 EBADF (Bad file descriptor) [pid 5733] close(29) = -1 EBADF (Bad file descriptor) [pid 5733] exit_group(0) = ? [pid 5733] +++ exited with 0 +++ [pid 5609] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=88, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=22 /* 0.22 s */} --- [pid 5609] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5609] umount2("./86", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] openat(AT_FDCWD, "./86", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5609] fstat(3, {st_mode=S_IFDIR|0700, st_size=80, ...}) = 0 [pid 5609] getdents64(3, 0x555579655790 /* 4 entries */, 32768) = 112 [pid 5609] umount2("./86/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5609] umount2("./86/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] newfstatat(AT_FDCWD, "./86/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] umount2("./86/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] openat(AT_FDCWD, "./86/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5609] fstat(4, {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0 [pid 5609] getdents64(4, 0x55557965d7d0 /* 2 entries */, 32768) = 48 [pid 5609] getdents64(4, 0x55557965d7d0 /* 0 entries */, 32768) = 0 [pid 5609] close(4) = 0 [pid 5609] rmdir("./86/file2") = 0 [pid 5609] umount2("./86/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] newfstatat(AT_FDCWD, "./86/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] unlink("./86/binderfs") = 0 [pid 5609] getdents64(3, 0x555579655790 /* 0 entries */, 32768) = 0 [pid 5609] close(3) = 0 [pid 5609] rmdir("./86") = 0 [pid 5609] mkdir("./87", 0777) = 0 [pid 5609] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 [pid 5609] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5609] close(3) = 0 [pid 5609] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5609] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5734 attached , child_tidptr=0x5555796546d0) = 89 [pid 5734] set_robust_list(0x5555796546e0, 24) = 0 [pid 5609] rt_sigprocmask(SIG_SETMASK, [] [pid 5734] rt_sigprocmask(SIG_SETMASK, [] [pid 5609] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5734] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5734] chdir("./87") = 0 [pid 5734] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5734] setpgid(0, 0) = 0 [pid 5734] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5734] write(3, "1000", 4) = 4 [pid 5734] close(3) = 0 [pid 5734] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5734] write(1, "executing program\n", 18) = 18 executing program [pid 5734] memfd_create("syzkaller", 0) = 3 [pid 5734] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5734] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5734] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5734] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5734] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5734] close(3) = 0 [pid 5734] close(4) = 0 [pid 5734] mkdir("./file2", 0777) = 0 [pid 5734] mount("/dev/loop0", "./file2", "jfs", MS_NOEXEC|MS_NOATIME|MS_NODIRATIME|MS_I_VERSION, ",umask=0") = 0 [pid 5734] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5734] chdir("./file2") = 0 [pid 5734] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5734] ioctl(4, LOOP_CLR_FD) = 0 [pid 5734] close(4) = 0 [pid 5734] memfd_create("syzkaller", 0) = 4 [pid 5734] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5734] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8192) = 8192 [pid 5734] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5734] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5734] close(4) = 0 [pid 5734] memfd_create("syzkaller", 0) = 4 [pid 5734] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5734] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 83968) = 83968 [ 155.641070][ T5734] loop0: detected capacity change from 0 to 32768 [pid 5734] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5734] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5734] close(4) = 0 [pid 5734] fchown(-1, -1, 0) = -1 EBADF (Bad file descriptor) [pid 5734] open_by_handle_at(-100, NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5734] close(3) = 0 [pid 5734] close(4) = -1 EBADF (Bad file descriptor) [pid 5734] close(5) = -1 EBADF (Bad file descriptor) [pid 5734] close(6) = -1 EBADF (Bad file descriptor) [pid 5734] close(7) = -1 EBADF (Bad file descriptor) [pid 5734] close(8) = -1 EBADF (Bad file descriptor) [pid 5734] close(9) = -1 EBADF (Bad file descriptor) [pid 5734] close(10) = -1 EBADF (Bad file descriptor) [pid 5734] close(11) = -1 EBADF (Bad file descriptor) [pid 5734] close(12) = -1 EBADF (Bad file descriptor) [pid 5734] close(13) = -1 EBADF (Bad file descriptor) [pid 5734] close(14) = -1 EBADF (Bad file descriptor) [pid 5734] close(15) = -1 EBADF (Bad file descriptor) [pid 5734] close(16) = -1 EBADF (Bad file descriptor) [pid 5734] close(17) = -1 EBADF (Bad file descriptor) [pid 5734] close(18) = -1 EBADF (Bad file descriptor) [pid 5734] close(19) = -1 EBADF (Bad file descriptor) [pid 5734] close(20) = -1 EBADF (Bad file descriptor) [pid 5734] close(21) = -1 EBADF (Bad file descriptor) [pid 5734] close(22) = -1 EBADF (Bad file descriptor) [pid 5734] close(23) = -1 EBADF (Bad file descriptor) [pid 5734] close(24) = -1 EBADF (Bad file descriptor) [pid 5734] close(25) = -1 EBADF (Bad file descriptor) [pid 5734] close(26) = -1 EBADF (Bad file descriptor) [pid 5734] close(27) = -1 EBADF (Bad file descriptor) [pid 5734] close(28) = -1 EBADF (Bad file descriptor) [pid 5734] close(29) = -1 EBADF (Bad file descriptor) [pid 5734] exit_group(0) = ? [pid 5734] +++ exited with 0 +++ [pid 5609] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=89, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=19 /* 0.19 s */} --- [pid 5609] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5609] umount2("./87", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] openat(AT_FDCWD, "./87", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5609] fstat(3, {st_mode=S_IFDIR|0700, st_size=80, ...}) = 0 [pid 5609] getdents64(3, 0x555579655790 /* 4 entries */, 32768) = 112 [pid 5609] umount2("./87/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5609] umount2("./87/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] newfstatat(AT_FDCWD, "./87/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] umount2("./87/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] openat(AT_FDCWD, "./87/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5609] fstat(4, {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0 [pid 5609] getdents64(4, 0x55557965d7d0 /* 2 entries */, 32768) = 48 [pid 5609] getdents64(4, 0x55557965d7d0 /* 0 entries */, 32768) = 0 [pid 5609] close(4) = 0 [pid 5609] rmdir("./87/file2") = 0 [pid 5609] umount2("./87/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] newfstatat(AT_FDCWD, "./87/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] unlink("./87/binderfs") = 0 [pid 5609] getdents64(3, 0x555579655790 /* 0 entries */, 32768) = 0 [pid 5609] close(3) = 0 [pid 5609] rmdir("./87") = 0 [pid 5609] mkdir("./88", 0777) = 0 [pid 5609] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 [pid 5609] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5609] close(3) = 0 [pid 5609] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5609] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5735 attached , child_tidptr=0x5555796546d0) = 90 [pid 5609] rt_sigprocmask(SIG_SETMASK, [] [pid 5735] set_robust_list(0x5555796546e0, 24) = 0 [pid 5609] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5735] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5735] chdir("./88") = 0 [pid 5735] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5735] setpgid(0, 0) = 0 [pid 5735] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5735] write(3, "1000", 4) = 4 [pid 5735] close(3) = 0 [pid 5735] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5735] write(1, "executing program\n", 18) = 18 executing program [pid 5735] memfd_create("syzkaller", 0) = 3 [pid 5735] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5735] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5735] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5735] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5735] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5735] close(3) = 0 [pid 5735] close(4) = 0 [pid 5735] mkdir("./file2", 0777) = 0 [pid 5735] mount("/dev/loop0", "./file2", "jfs", MS_NOEXEC|MS_NOATIME|MS_NODIRATIME|MS_I_VERSION, ",umask=0") = 0 [pid 5735] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5735] chdir("./file2") = 0 [pid 5735] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5735] ioctl(4, LOOP_CLR_FD) = 0 [pid 5735] close(4) = 0 [pid 5735] memfd_create("syzkaller", 0) = 4 [pid 5735] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5735] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8192) = 8192 [pid 5735] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5735] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5735] close(4) = 0 [ 156.220703][ T5735] loop0: detected capacity change from 0 to 32768 [pid 5735] memfd_create("syzkaller", 0) = 4 [pid 5735] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5735] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 83968) = 83968 [pid 5735] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5735] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5735] close(4) = 0 [pid 5735] fchown(-1, -1, 0) = -1 EBADF (Bad file descriptor) [pid 5735] open_by_handle_at(-100, NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5735] close(3) = 0 [pid 5735] close(4) = -1 EBADF (Bad file descriptor) [pid 5735] close(5) = -1 EBADF (Bad file descriptor) [pid 5735] close(6) = -1 EBADF (Bad file descriptor) [pid 5735] close(7) = -1 EBADF (Bad file descriptor) [pid 5735] close(8) = -1 EBADF (Bad file descriptor) [pid 5735] close(9) = -1 EBADF (Bad file descriptor) [pid 5735] close(10) = -1 EBADF (Bad file descriptor) [pid 5735] close(11) = -1 EBADF (Bad file descriptor) [pid 5735] close(12) = -1 EBADF (Bad file descriptor) [pid 5735] close(13) = -1 EBADF (Bad file descriptor) [pid 5735] close(14) = -1 EBADF (Bad file descriptor) [pid 5735] close(15) = -1 EBADF (Bad file descriptor) [pid 5735] close(16) = -1 EBADF (Bad file descriptor) [pid 5735] close(17) = -1 EBADF (Bad file descriptor) [pid 5735] close(18) = -1 EBADF (Bad file descriptor) [pid 5735] close(19) = -1 EBADF (Bad file descriptor) [pid 5735] close(20) = -1 EBADF (Bad file descriptor) [pid 5735] close(21) = -1 EBADF (Bad file descriptor) [pid 5735] close(22) = -1 EBADF (Bad file descriptor) [pid 5735] close(23) = -1 EBADF (Bad file descriptor) [pid 5735] close(24) = -1 EBADF (Bad file descriptor) [pid 5735] close(25) = -1 EBADF (Bad file descriptor) [pid 5735] close(26) = -1 EBADF (Bad file descriptor) [pid 5735] close(27) = -1 EBADF (Bad file descriptor) [pid 5735] close(28) = -1 EBADF (Bad file descriptor) [pid 5735] close(29) = -1 EBADF (Bad file descriptor) [pid 5735] exit_group(0) = ? [pid 5735] +++ exited with 0 +++ [pid 5609] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=90, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=21 /* 0.21 s */} --- [pid 5609] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5609] umount2("./88", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] openat(AT_FDCWD, "./88", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5609] fstat(3, {st_mode=S_IFDIR|0700, st_size=80, ...}) = 0 [pid 5609] getdents64(3, 0x555579655790 /* 4 entries */, 32768) = 112 [pid 5609] umount2("./88/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5609] umount2("./88/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] newfstatat(AT_FDCWD, "./88/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] umount2("./88/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] openat(AT_FDCWD, "./88/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5609] fstat(4, {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0 [pid 5609] getdents64(4, 0x55557965d7d0 /* 2 entries */, 32768) = 48 [pid 5609] getdents64(4, 0x55557965d7d0 /* 0 entries */, 32768) = 0 [pid 5609] close(4) = 0 [pid 5609] rmdir("./88/file2") = 0 [pid 5609] umount2("./88/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] newfstatat(AT_FDCWD, "./88/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] unlink("./88/binderfs") = 0 [pid 5609] getdents64(3, 0x555579655790 /* 0 entries */, 32768) = 0 [pid 5609] close(3) = 0 [pid 5609] rmdir("./88") = 0 [pid 5609] mkdir("./89", 0777) = 0 [pid 5609] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 [pid 5609] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5609] close(3) = 0 [pid 5609] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5609] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5736 attached , child_tidptr=0x5555796546d0) = 91 [pid 5609] rt_sigprocmask(SIG_SETMASK, [] [pid 5736] set_robust_list(0x5555796546e0, 24) = 0 [pid 5609] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5736] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5736] chdir("./89") = 0 [pid 5736] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5736] setpgid(0, 0) = 0 [pid 5736] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5736] write(3, "1000", 4) = 4 [pid 5736] close(3) = 0 [pid 5736] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5736] write(1, "executing program\n", 18) = 18 executing program [pid 5736] memfd_create("syzkaller", 0) = 3 [pid 5736] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5736] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5736] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5736] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5736] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5736] close(3) = 0 [pid 5736] close(4) = 0 [pid 5736] mkdir("./file2", 0777) = 0 [pid 5736] mount("/dev/loop0", "./file2", "jfs", MS_NOEXEC|MS_NOATIME|MS_NODIRATIME|MS_I_VERSION, ",umask=0") = 0 [pid 5736] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5736] chdir("./file2") = 0 [pid 5736] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [ 156.790735][ T5736] loop0: detected capacity change from 0 to 32768 [pid 5736] ioctl(4, LOOP_CLR_FD) = 0 [pid 5736] close(4) = 0 [pid 5736] memfd_create("syzkaller", 0) = 4 [pid 5736] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5736] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8192) = 8192 [pid 5736] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5736] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5736] close(4) = 0 [pid 5736] memfd_create("syzkaller", 0) = 4 [pid 5736] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5736] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 83968) = 83968 [pid 5736] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5736] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5736] close(4) = 0 [pid 5736] fchown(-1, -1, 0) = -1 EBADF (Bad file descriptor) [pid 5736] open_by_handle_at(-100, NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5736] close(3) = 0 [pid 5736] close(4) = -1 EBADF (Bad file descriptor) [pid 5736] close(5) = -1 EBADF (Bad file descriptor) [pid 5736] close(6) = -1 EBADF (Bad file descriptor) [pid 5736] close(7) = -1 EBADF (Bad file descriptor) [pid 5736] close(8) = -1 EBADF (Bad file descriptor) [pid 5736] close(9) = -1 EBADF (Bad file descriptor) [pid 5736] close(10) = -1 EBADF (Bad file descriptor) [pid 5736] close(11) = -1 EBADF (Bad file descriptor) [pid 5736] close(12) = -1 EBADF (Bad file descriptor) [pid 5736] close(13) = -1 EBADF (Bad file descriptor) [pid 5736] close(14) = -1 EBADF (Bad file descriptor) [pid 5736] close(15) = -1 EBADF (Bad file descriptor) [pid 5736] close(16) = -1 EBADF (Bad file descriptor) [pid 5736] close(17) = -1 EBADF (Bad file descriptor) [pid 5736] close(18) = -1 EBADF (Bad file descriptor) [pid 5736] close(19) = -1 EBADF (Bad file descriptor) [pid 5736] close(20) = -1 EBADF (Bad file descriptor) [pid 5736] close(21) = -1 EBADF (Bad file descriptor) [pid 5736] close(22) = -1 EBADF (Bad file descriptor) [pid 5736] close(23) = -1 EBADF (Bad file descriptor) [pid 5736] close(24) = -1 EBADF (Bad file descriptor) [pid 5736] close(25) = -1 EBADF (Bad file descriptor) [pid 5736] close(26) = -1 EBADF (Bad file descriptor) [pid 5736] close(27) = -1 EBADF (Bad file descriptor) [pid 5736] close(28) = -1 EBADF (Bad file descriptor) [pid 5736] close(29) = -1 EBADF (Bad file descriptor) [pid 5736] exit_group(0) = ? [pid 5736] +++ exited with 0 +++ [pid 5609] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=91, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=21 /* 0.21 s */} --- [pid 5609] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5609] umount2("./89", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] openat(AT_FDCWD, "./89", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5609] fstat(3, {st_mode=S_IFDIR|0700, st_size=80, ...}) = 0 [pid 5609] getdents64(3, 0x555579655790 /* 4 entries */, 32768) = 112 [pid 5609] umount2("./89/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5609] umount2("./89/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] newfstatat(AT_FDCWD, "./89/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] umount2("./89/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] openat(AT_FDCWD, "./89/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5609] fstat(4, {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0 [pid 5609] getdents64(4, 0x55557965d7d0 /* 2 entries */, 32768) = 48 [pid 5609] getdents64(4, 0x55557965d7d0 /* 0 entries */, 32768) = 0 [pid 5609] close(4) = 0 [pid 5609] rmdir("./89/file2") = 0 [pid 5609] umount2("./89/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] newfstatat(AT_FDCWD, "./89/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] unlink("./89/binderfs") = 0 [pid 5609] getdents64(3, 0x555579655790 /* 0 entries */, 32768) = 0 [pid 5609] close(3) = 0 [pid 5609] rmdir("./89") = 0 [pid 5609] mkdir("./90", 0777) = 0 [pid 5609] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 [pid 5609] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5609] close(3) = 0 [pid 5609] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5609] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5737 attached , child_tidptr=0x5555796546d0) = 92 [pid 5609] rt_sigprocmask(SIG_SETMASK, [] [pid 5737] set_robust_list(0x5555796546e0, 24 [pid 5609] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5737] <... set_robust_list resumed>) = 0 [pid 5737] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5737] chdir("./90") = 0 [pid 5737] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5737] setpgid(0, 0) = 0 [pid 5737] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5737] write(3, "1000", 4) = 4 [pid 5737] close(3) = 0 [pid 5737] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5737] write(1, "executing program\n", 18) = 18 executing program [pid 5737] memfd_create("syzkaller", 0) = 3 [pid 5737] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5737] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5737] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5737] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5737] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5737] close(3) = 0 [pid 5737] close(4) = 0 [pid 5737] mkdir("./file2", 0777) = 0 [pid 5737] mount("/dev/loop0", "./file2", "jfs", MS_NOEXEC|MS_NOATIME|MS_NODIRATIME|MS_I_VERSION, ",umask=0") = 0 [pid 5737] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5737] chdir("./file2") = 0 [pid 5737] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5737] ioctl(4, LOOP_CLR_FD) = 0 [pid 5737] close(4) = 0 [pid 5737] memfd_create("syzkaller", 0) = 4 [pid 5737] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5737] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8192) = 8192 [pid 5737] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5737] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5737] close(4) = 0 [pid 5737] memfd_create("syzkaller", 0) = 4 [pid 5737] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5737] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 83968) = 83968 [pid 5737] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5737] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [ 157.310954][ T5737] loop0: detected capacity change from 0 to 32768 [pid 5737] close(4) = 0 [pid 5737] fchown(-1, -1, 0) = -1 EBADF (Bad file descriptor) [pid 5737] open_by_handle_at(-100, NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5737] close(3) = 0 [pid 5737] close(4) = -1 EBADF (Bad file descriptor) [pid 5737] close(5) = -1 EBADF (Bad file descriptor) [pid 5737] close(6) = -1 EBADF (Bad file descriptor) [pid 5737] close(7) = -1 EBADF (Bad file descriptor) [pid 5737] close(8) = -1 EBADF (Bad file descriptor) [pid 5737] close(9) = -1 EBADF (Bad file descriptor) [pid 5737] close(10) = -1 EBADF (Bad file descriptor) [pid 5737] close(11) = -1 EBADF (Bad file descriptor) [pid 5737] close(12) = -1 EBADF (Bad file descriptor) [pid 5737] close(13) = -1 EBADF (Bad file descriptor) [pid 5737] close(14) = -1 EBADF (Bad file descriptor) [pid 5737] close(15) = -1 EBADF (Bad file descriptor) [pid 5737] close(16) = -1 EBADF (Bad file descriptor) [pid 5737] close(17) = -1 EBADF (Bad file descriptor) [pid 5737] close(18) = -1 EBADF (Bad file descriptor) [pid 5737] close(19) = -1 EBADF (Bad file descriptor) [pid 5737] close(20) = -1 EBADF (Bad file descriptor) [pid 5737] close(21) = -1 EBADF (Bad file descriptor) [pid 5737] close(22) = -1 EBADF (Bad file descriptor) [pid 5737] close(23) = -1 EBADF (Bad file descriptor) [pid 5737] close(24) = -1 EBADF (Bad file descriptor) [pid 5737] close(25) = -1 EBADF (Bad file descriptor) [pid 5737] close(26) = -1 EBADF (Bad file descriptor) [pid 5737] close(27) = -1 EBADF (Bad file descriptor) [pid 5737] close(28) = -1 EBADF (Bad file descriptor) [pid 5737] close(29) = -1 EBADF (Bad file descriptor) [pid 5737] exit_group(0) = ? [pid 5737] +++ exited with 0 +++ [pid 5609] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=92, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=22 /* 0.22 s */} --- [pid 5609] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5609] umount2("./90", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] openat(AT_FDCWD, "./90", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5609] fstat(3, {st_mode=S_IFDIR|0700, st_size=80, ...}) = 0 [pid 5609] getdents64(3, 0x555579655790 /* 4 entries */, 32768) = 112 [pid 5609] umount2("./90/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 [pid 5609] umount2("./90/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] newfstatat(AT_FDCWD, "./90/file2", {st_mode=S_IFDIR|0700, st_size=40, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] umount2("./90/file2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] openat(AT_FDCWD, "./90/file2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 [pid 5609] fstat(4, {st_mode=S_IFDIR|0700, st_size=40, ...}) = 0 [pid 5609] getdents64(4, 0x55557965d7d0 /* 2 entries */, 32768) = 48 [pid 5609] getdents64(4, 0x55557965d7d0 /* 0 entries */, 32768) = 0 [pid 5609] close(4) = 0 [pid 5609] rmdir("./90/file2") = 0 [pid 5609] umount2("./90/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] newfstatat(AT_FDCWD, "./90/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 5609] unlink("./90/binderfs") = 0 [pid 5609] getdents64(3, 0x555579655790 /* 0 entries */, 32768) = 0 [pid 5609] close(3) = 0 [pid 5609] rmdir("./90") = 0 [pid 5609] mkdir("./91", 0777) = 0 [pid 5609] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 [pid 5609] ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) [pid 5609] close(3) = 0 [pid 5609] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5609] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5738 attached , child_tidptr=0x5555796546d0) = 93 [pid 5738] set_robust_list(0x5555796546e0, 24 [pid 5609] rt_sigprocmask(SIG_SETMASK, [] [pid 5738] <... set_robust_list resumed>) = 0 [pid 5609] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5738] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5738] chdir("./91") = 0 [pid 5738] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5738] setpgid(0, 0) = 0 [pid 5738] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5738] write(3, "1000", 4) = 4 [pid 5738] close(3) = 0 [pid 5738] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5738] write(1, "executing program\n", 18) = 18 [pid 5738] memfd_create("syzkaller", 0) = 3 [pid 5738] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5738] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5738] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5738] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5738] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5738] close(3) = 0 [pid 5738] close(4) = 0 [pid 5738] mkdir("./file2", 0777) = 0 [pid 5738] mount("/dev/loop0", "./file2", "jfs", MS_NOEXEC|MS_NOATIME|MS_NODIRATIME|MS_I_VERSION, ",umask=0") = 0 [pid 5738] openat(AT_FDCWD, "./file2", O_RDONLY|O_DIRECTORY) = 3 [pid 5738] chdir("./file2") = 0 [pid 5738] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5738] ioctl(4, LOOP_CLR_FD) = 0 [pid 5738] close(4) = 0 [pid 5738] memfd_create("syzkaller", 0) = 4 [pid 5738] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5738] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 8192) = 8192 [pid 5738] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5738] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5738] close(4) = 0 [ 157.815943][ T5738] loop0: detected capacity change from 0 to 32768 [pid 5738] memfd_create("syzkaller", 0) = 4 [pid 5738] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffa6af59000 [pid 5738] write(4, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 83968) = 83968 [pid 5738] munmap(0x7ffa6af59000, 138412032) = 0 [pid 5738] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = -1 EBUSY (Device or resource busy) [pid 5738] close(4) = 0 [pid 5738] fchown(-1, -1, 0) = -1 EBADF (Bad file descriptor) [pid 5738] open_by_handle_at(-100, NULL, O_RDONLY) = -1 EFAULT (Bad address) [pid 5738] close(3) = 0 [pid 5738] close(4) = -1 EBADF (Bad file descriptor) [pid 5738] close(5) = -1 EBADF (Bad file descriptor) [pid 5738] close(6) = -1 EBADF (Bad file descriptor) [pid 5738] close(7) = -1 EBADF (Bad file descriptor) [pid 5738] close(8) = -1 EBADF (Bad file descriptor) [pid 5738] close(9) = -1 EBADF (Bad file descriptor) [pid 5738] close(10) = -1 EBADF (Bad file descriptor) [pid 5738] close(11) = -1 EBADF (Bad file descriptor) [pid 5738] close(12) = -1 EBADF (Bad file descriptor) [pid 5738] close(13) = -1 EBADF (Bad file descriptor) [pid 5738] close(14) = -1 EBADF (Bad file descriptor) [pid 5738] close(15) = -1 EBADF (Bad file descriptor) [pid 5738] close(16) = -1 EBADF (Bad file descriptor) [pid 5738] close(17) = -1 EBADF (Bad file descriptor) [pid 5738] close(18) = -1 EBADF (Bad file descriptor) [pid 5738] close(19) = -1 EBADF (Bad file descriptor) [pid 5738] close(20) = -1 EBADF (Bad file descriptor) [pid 5738] close(21) = -1 EBADF (Bad file descriptor) [pid 5738] close(22) = -1 EBADF (Bad file descriptor) [pid 5738] close(23) = -1 EBADF (Bad file descriptor) [pid 5738] close(24) = -1 EBADF (Bad file descriptor) [pid 5738] close(25) = -1 EBADF (Bad file descriptor) [pid 5738] close(26) = -1 EBADF (Bad file descriptor) [pid 5738] close(27) = -1 EBADF (Bad file descriptor) [pid 5738] close(28) = -1 EBADF (Bad file descriptor) [pid 5738] close(29) = -1 EBADF (Bad file descriptor) [pid 5738] exit_group(0) = ? [pid 5738] +++ exited with 0 +++ [pid 5609] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=93, si_uid=0, si_status=0, si_utime=0, si_stime=25 /* 0.25 s */} --- [pid 5609] restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [pid 5609] umount2("./91", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 5609] openat(AT_FDCWD, "./91", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 5609] fstat(3, {st_mode=S_IFDIR|0700, st_size=80, ...}) = 0 [pid 5609] getdents64(3, 0x555579655790 /* 4 entries */, 32768) = 112 [ 158.018879][ C0] ================================================================== [ 158.018900][ C0] BUG: KASAN: slab-use-after-free in lbmIODone+0x130e/0x16b0 [ 158.018957][ C0] Read of size 4 at addr ffff888042606208 by task ktimers/0/16 [ 158.018978][ C0] [ 158.019004][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 158.019036][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 158.019061][ C0] Call Trace: [ 158.019070][ C0] [ 158.019081][ C0] dump_stack_lvl+0xe8/0x150 [ 158.019119][ C0] print_address_description+0x55/0x1e0 [ 158.019155][ C0] ? lbmIODone+0x130e/0x16b0 [ 158.019177][ C0] print_report+0x58/0x70 [ 158.019209][ C0] kasan_report+0x117/0x150 [ 158.019235][ C0] ? lbmIODone+0x130e/0x16b0 [ 158.019262][ C0] lbmIODone+0x130e/0x16b0 [ 158.019284][ C0] ? blkg_put+0x22/0x240 [ 158.019313][ C0] ? blkg_put+0x22/0x240 [ 158.019341][ C0] ? blkg_put+0x18d/0x240 [ 158.019371][ C0] ? bio_endio+0x984/0xac0 [ 158.019406][ C0] blk_update_request+0x57b/0xe50 [ 158.019448][ C0] blk_mq_end_request+0x3e/0x70 [ 158.019484][ C0] blk_done_softirq+0x10a/0x160 [ 158.019519][ C0] handle_softirqs+0x1da/0x6d0 [ 158.019558][ C0] ? smpboot_thread_fn+0x4e/0xa70 [ 158.019594][ C0] run_ktimerd+0x6a/0x100 [ 158.019630][ C0] smpboot_thread_fn+0x565/0xa70 [ 158.019668][ C0] ? smpboot_thread_fn+0x4e/0xa70 [ 158.019709][ C0] kthread+0x38b/0x470 [ 158.019733][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 158.019769][ C0] ? __pfx_kthread+0x10/0x10 [ 158.019794][ C0] ret_from_fork+0x514/0xb70 [ 158.019819][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 158.019854][ C0] ? __switch_to+0xc89/0x1420 [ 158.019891][ C0] ? __pfx_kthread+0x10/0x10 [ 158.019915][ C0] ret_from_fork_asm+0x1a/0x30 [ 158.019946][ C0] [ 158.019954][ C0] [ 158.019960][ C0] Allocated by task 5738: [ 158.019972][ C0] kasan_save_track+0x3e/0x80 [ 158.020005][ C0] __kasan_kmalloc+0x93/0xb0 [ 158.020039][ C0] __kmalloc_cache_noprof+0x3d5/0x680 [ 158.020072][ C0] lmLogInit+0x3e5/0x1a20 [ 158.020106][ C0] lmLogOpen+0x4e3/0xf90 [ 158.020138][ C0] jfs_mount_rw+0xf3/0x670 [ 158.020170][ C0] jfs_fill_super+0x769/0xda0 [ 158.020195][ C0] get_tree_bdev_flags+0x430/0x4f0 [ 158.020225][ C0] vfs_get_tree+0x92/0x2a0 [ 158.020260][ C0] do_new_mount+0x319/0xdc0 [ 158.020283][ C0] __se_sys_mount+0x31d/0x420 [ 158.020306][ C0] do_syscall_64+0x166/0x520 [ 158.020341][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.020364][ C0] [ 158.020369][ C0] Freed by task 5609: [ 158.020380][ C0] kasan_save_track+0x3e/0x80 [ 158.020411][ C0] kasan_save_free_info+0x40/0x50 [ 158.020438][ C0] __kasan_slab_free+0x5c/0x80 [ 158.020471][ C0] kfree+0x1c5/0x6d0 [ 158.020497][ C0] lmLogShutdown+0x456/0x850 [ 158.020516][ C0] lmLogClose+0x28c/0x530 [ 158.020535][ C0] jfs_umount+0x2da/0x3b0 [ 158.020567][ C0] jfs_put_super+0x8c/0x190 [ 158.020592][ C0] generic_shutdown_super+0x13d/0x2d0 [ 158.020617][ C0] kill_block_super+0x44/0xa0 [ 158.020645][ C0] deactivate_locked_super+0xbe/0x110 [ 158.020669][ C0] cleanup_mnt+0x3d3/0x460 [ 158.020697][ C0] task_work_run+0x1d9/0x270 [ 158.020721][ C0] ptrace_notify+0x27c/0x2b0 [ 158.020750][ C0] ptrace_report_syscall_exit+0x2d/0x50 [ 158.020772][ C0] do_syscall_64+0x4a0/0x520 [ 158.020794][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.020817][ C0] [ 158.020822][ C0] The buggy address belongs to the object at ffff888042606200 [ 158.020822][ C0] which belongs to the cache kmalloc-256 of size 256 [ 158.020855][ C0] The buggy address is located 8 bytes inside of [ 158.020855][ C0] freed 256-byte region [ffff888042606200, ffff888042606300) [ 158.020880][ C0] [ 158.020886][ C0] The buggy address belongs to the physical page: [ 158.020905][ C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x42606 [ 158.020927][ C0] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 158.020947][ C0] flags: 0x80000000000040(head|node=0|zone=1) [ 158.020971][ C0] page_type: f5(slab) [ 158.020994][ C0] raw: 0080000000000040 ffff88813ffbdb40 dead000000000100 dead000000000122 [ 158.021015][ C0] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 158.021038][ C0] head: 0080000000000040 ffff88813ffbdb40 dead000000000100 dead000000000122 [ 158.021059][ C0] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 158.021081][ C0] head: 0080000000000001 ffffffffffffff81 00000000ffffffff 00000000ffffffff [ 158.021102][ C0] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000002 [ 158.021114][ C0] page dumped because: kasan: bad access detected [ 158.021131][ C0] page_owner tracks the page as allocated [ 158.021140][ C0] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5610, tgid 5610 (udevd), ts 126719353313 [ 158.021177][ C0] post_alloc_hook+0x1f9/0x250 [ 158.021207][ C0] get_page_from_freelist+0x2591/0x2600 [ 158.021244][ C0] __alloc_frozen_pages_noprof+0x230/0x5c0 [ 158.021279][ C0] allocate_slab+0x7d/0x620 [ 158.021303][ C0] refill_objects+0x2d8/0x350 [ 158.021329][ C0] __pcs_replace_empty_main+0x339/0x690 [ 158.021353][ C0] __kmalloc_noprof+0x54b/0x790 [ 158.021385][ C0] security_inode_init_security+0x102/0x3e0 [ 158.021409][ C0] shmem_mknod+0x1ea/0x340 [ 158.021429][ C0] lookup_open+0xc17/0x1a60 [ 158.021457][ C0] path_openat+0x67c/0x1d60 [ 158.021486][ C0] do_file_open+0x23e/0x4a0 [ 158.021514][ C0] do_sys_openat2+0x115/0x200 [ 158.021535][ C0] __x64_sys_openat+0x138/0x170 [ 158.021556][ C0] do_syscall_64+0x166/0x520 [ 158.021578][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.021601][ C0] page last free pid 28 tgid 28 ts 126710500121 stack trace: [ 158.021617][ C0] __free_frozen_pages+0xf8e/0x1070 [ 158.021648][ C0] rcu_cpu_kthread+0xb2c/0x1740 [ 158.021681][ C0] smpboot_thread_fn+0x565/0xa70 [ 158.021714][ C0] kthread+0x38b/0x470 [ 158.021735][ C0] ret_from_fork+0x514/0xb70 [ 158.021755][ C0] ret_from_fork_asm+0x1a/0x30 [ 158.021775][ C0] [ 158.021781][ C0] Memory state around the buggy address: [ 158.021793][ C0] ffff888042606100: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 158.021810][ C0] ffff888042606180: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 158.021833][ C0] >ffff888042606200: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 158.021852][ C0] ^ [ 158.021864][ C0] ffff888042606280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 158.021881][ C0] ffff888042606300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 158.021893][ C0] ================================================================== [ 158.021931][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 158.691506][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 158.701080][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 158.711196][ C0] Call Trace: [ 158.714497][ C0] [ 158.717447][ C0] vpanic+0x56d/0xa60 [ 158.721453][ C0] ? rcu_is_watching+0x16/0xb0 [ 158.726337][ C0] ? __pfx_vpanic+0x10/0x10 [ 158.730867][ C0] panic+0xc5/0xd0 [ 158.734612][ C0] ? __pfx_panic+0x10/0x10 [ 158.739044][ C0] ? lbmIODone+0x130e/0x16b0 [ 158.743661][ C0] ? lbmIODone+0x130e/0x16b0 [ 158.748274][ C0] check_panic_on_warn+0x89/0xb0 [ 158.753237][ C0] ? lbmIODone+0x130e/0x16b0 [ 158.757849][ C0] end_report+0x73/0x170 [ 158.762141][ C0] ? lbmIODone+0x130e/0x16b0 [ 158.766756][ C0] kasan_report+0x128/0x150 [ 158.771292][ C0] ? lbmIODone+0x130e/0x16b0 [ 158.775923][ C0] lbmIODone+0x130e/0x16b0 [ 158.780365][ C0] ? blkg_put+0x22/0x240 [ 158.784636][ C0] ? blkg_put+0x22/0x240 [ 158.788943][ C0] ? blkg_put+0x18d/0x240 [ 158.793320][ C0] ? bio_endio+0x984/0xac0 [ 158.797800][ C0] blk_update_request+0x57b/0xe50 [ 158.802884][ C0] blk_mq_end_request+0x3e/0x70 [ 158.807780][ C0] blk_done_softirq+0x10a/0x160 [ 158.812765][ C0] handle_softirqs+0x1da/0x6d0 [ 158.817592][ C0] ? smpboot_thread_fn+0x4e/0xa70 [ 158.822670][ C0] run_ktimerd+0x6a/0x100 [ 158.827059][ C0] smpboot_thread_fn+0x565/0xa70 [ 158.832038][ C0] ? smpboot_thread_fn+0x4e/0xa70 [ 158.837107][ C0] kthread+0x38b/0x470 [ 158.841211][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 158.846802][ C0] ? __pfx_kthread+0x10/0x10 [ 158.851425][ C0] ret_from_fork+0x514/0xb70 [ 158.856045][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 158.861186][ C0] ? __switch_to+0xc89/0x1420 [ 158.865900][ C0] ? __pfx_kthread+0x10/0x10 [ 158.870517][ C0] ret_from_fork_asm+0x1a/0x30 [ 158.875349][ C0] [ 158.879010][ C0] Kernel Offset: disabled [ 158.883358][ C0] Rebooting in 86400 seconds..