ci2-upstream-fs/strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ci2-upstream-fs/syz-executor4113610910 <...> Warning: Permanently added '10.128.0.161' (ED25519) to the list of known hosts. execve("ci2-upstream-fs/syz-executor4113610910", ["ci2-upstream-fs/syz-executor4113610910"], 0x7fffd3bc3b60 /* 10 vars */) = 0 brk(NULL) = 0x555575479000 brk(0x555575479d80) = 0x555575479d80 arch_prctl(ARCH_SET_FS, 0x555575479400) = 0 set_tid_address(0x5555754796d0) = 5603 set_robust_list(0x5555754796e0, 24) = 0 rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlinkat(AT_FDCWD, "/proc/self/exe", "/root/ci2-upstream-fs/syz-executor4113610910", 4096) = 44 getrandom("\x22\x4e\x21\xdd\xd0\xb7\xb0\xcf", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555575479d80 brk(0x55557549ad80) = 0x55557549ad80 brk(0x55557549b000) = 0x55557549b000 mprotect(0x7fc2f7c56000, 20480, PROT_READ) = 0 mmap(0x1ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffffffff000 mmap(0x200000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200000000000 mmap(0x200001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200001000000 getrandom("\xa7\xe8\x13\x05\xbc\x61\xf0\xe7", 8, GRND_NONBLOCK) = 8 mkdir("./syzkaller.jLcm0e", 0700) = 0 chmod("./syzkaller.jLcm0e", 0777) = 0 chdir("./syzkaller.jLcm0e") = 0 mkdir("./0", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5604 attached [pid 5604] set_robust_list(0x5555754796e0, 24 [pid 5603] <... clone resumed>, child_tidptr=0x5555754796d0) = 5604 [pid 5604] <... set_robust_list resumed>) = 0 [pid 5603] rt_sigprocmask(SIG_SETMASK, [] [pid 5604] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5603] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5604] chdir("./0") = 0 [pid 5604] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5604] setpgid(0, 0) = 0 [pid 5604] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5604] write(3, "1000", 4) = 4 [pid 5604] close(3) = 0 [pid 5604] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5604] write(1, "executing program\n", 18) = 18 [pid 5604] futex(0x7fc2f7c5ce2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 executing program [pid 5604] rt_sigaction(SIGRT_1, {sa_handler=0x7fc2f7bc1b90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fc2f7bb3b60}, NULL, 8) = 0 [pid 5604] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5604] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc2f7b5b000 [pid 5604] mprotect(0x7fc2f7b5c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5604] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5604] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc2f7b7b990, parent_tid=0x7fc2f7b7b990, exit_signal=0, stack=0x7fc2f7b5b000, stack_size=0x202c0, tls=0x7fc2f7b7b6c0}ci2-upstream-fs/strace-static-x86_64: Process 5605 attached => {parent_tid=[5605]}, 88) = 5605 [pid 5604] rt_sigprocmask(SIG_SETMASK, [] [pid 5605] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 5604] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5605] <... rseq resumed>) = 0 [pid 5604] futex(0x7fc2f7c5ce28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5605] set_robust_list(0x7fc2f7b7b9a0, 24 [pid 5604] <... futex resumed>) = 0 [pid 5604] futex(0x7fc2f7c5ce2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5605] <... set_robust_list resumed>) = 0 [pid 5605] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5605] memfd_create("syzkaller", 0) = 3 [pid 5605] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fc2ef75b000 [pid 5605] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5605] munmap(0x7fc2ef75b000, 138412032) = 0 [pid 5605] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5605] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5605] close(3) = 0 [pid 5605] close(4) = 0 [pid 5605] mkdir("./file1", 0777) = 0 [ 101.411543][ T5605] loop0: detected capacity change from 0 to 32768 [pid 5605] mount("/dev/loop0", "./file1", "jfs", MS_NODEV|MS_POSIXACL|MS_STRICTATIME, "iocharset=koi8-u,nointegrity,iocharset=iso8859-14,errors=continue,discard,errors=remount-ro,integrit"...) = 0 [pid 5605] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5605] chdir("./file1") = 0 [pid 5605] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5605] ioctl(4, LOOP_CLR_FD) = 0 [pid 5605] close(4) = 0 [pid 5605] futex(0x7fc2f7c5ce2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5604] <... futex resumed>) = 0 [pid 5605] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5604] futex(0x7fc2f7c5ce28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5605] <... openat resumed>) = -1 EFAULT (Bad address) [pid 5604] <... futex resumed>) = 0 [pid 5605] futex(0x7fc2f7c5ce2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5605] futex(0x7fc2f7c5ce28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5604] futex(0x7fc2f7c5ce2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 5604] futex(0x7fc2f7c5ce28, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5604] futex(0x7fc2f7c5ce2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5605] <... futex resumed>) = 0 [pid 5605] mknod(NULL, 0100) = -1 EFAULT (Bad address) [pid 5605] futex(0x7fc2f7c5ce2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5604] <... futex resumed>) = 0 [pid 5605] futex(0x7fc2f7c5ce28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5604] exit_group(0) = ? [pid 5605] <... futex resumed>) = ? [pid 5605] +++ exited with 0 +++ [pid 5604] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5604, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=25 /* 0.25 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x55557547a790 /* 4 entries */, 32768) = 112 umount2("./0/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./0/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./0/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./0/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./0/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x5555754827d0 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555754827d0 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./0/file1") = 0 umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./0/binderfs") = 0 getdents64(3, 0x55557547a790 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./0") = 0 mkdir("./1", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5606 attached [pid 5606] set_robust_list(0x5555754796e0, 24 [pid 5603] <... clone resumed>, child_tidptr=0x5555754796d0) = 5606 [pid 5606] <... set_robust_list resumed>) = 0 [pid 5606] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5603] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5606] chdir("./1") = 0 [pid 5606] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5606] setpgid(0, 0) = 0 [pid 5606] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5606] write(3, "1000", 4) = 4 [pid 5606] close(3) = 0 [pid 5606] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5606] write(1, "executing program\n", 18) = 18 executing program [pid 5606] futex(0x7fc2f7c5ce2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5606] rt_sigaction(SIGRT_1, {sa_handler=0x7fc2f7bc1b90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fc2f7bb3b60}, NULL, 8) = 0 [pid 5606] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5606] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc2f7b5b000 [pid 5606] mprotect(0x7fc2f7b5c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5606] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5606] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc2f7b7b990, parent_tid=0x7fc2f7b7b990, exit_signal=0, stack=0x7fc2f7b5b000, stack_size=0x202c0, tls=0x7fc2f7b7b6c0}ci2-upstream-fs/strace-static-x86_64: Process 5607 attached [pid 5607] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 5606] <... clone3 resumed> => {parent_tid=[5607]}, 88) = 5607 [pid 5607] <... rseq resumed>) = 0 [pid 5606] rt_sigprocmask(SIG_SETMASK, [] [pid 5607] set_robust_list(0x7fc2f7b7b9a0, 24 [pid 5606] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5607] <... set_robust_list resumed>) = 0 [pid 5607] rt_sigprocmask(SIG_SETMASK, [] [pid 5606] futex(0x7fc2f7c5ce28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5607] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5606] <... futex resumed>) = 0 [pid 5607] memfd_create("syzkaller", 0 [pid 5606] futex(0x7fc2f7c5ce2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5607] <... memfd_create resumed>) = 3 [pid 5607] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fc2ef75b000 [pid 5607] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5607] munmap(0x7fc2ef75b000, 138412032) = 0 [pid 5607] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5607] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5607] close(3) = 0 [pid 5607] close(4) = 0 [pid 5607] mkdir("./file1", 0777) = 0 [ 102.059587][ T5607] loop0: detected capacity change from 0 to 32768 [pid 5607] mount("/dev/loop0", "./file1", "jfs", MS_NODEV|MS_POSIXACL|MS_STRICTATIME, "iocharset=koi8-u,nointegrity,iocharset=iso8859-14,errors=continue,discard,errors=remount-ro,integrit"...) = 0 [pid 5607] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5607] chdir("./file1") = 0 [pid 5607] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5607] ioctl(4, LOOP_CLR_FD) = 0 [pid 5607] close(4) = 0 [pid 5607] futex(0x7fc2f7c5ce2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5606] <... futex resumed>) = 0 [pid 5607] futex(0x7fc2f7c5ce28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5606] futex(0x7fc2f7c5ce28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5607] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5606] <... futex resumed>) = 0 [pid 5607] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = -1 EFAULT (Bad address) [pid 5606] futex(0x7fc2f7c5ce2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5607] futex(0x7fc2f7c5ce2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5606] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5607] futex(0x7fc2f7c5ce28, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 5606] futex(0x7fc2f7c5ce28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5607] mknod(NULL, 0100 [pid 5606] <... futex resumed>) = 0 [pid 5607] <... mknod resumed>) = -1 EFAULT (Bad address) [pid 5607] futex(0x7fc2f7c5ce2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5606] futex(0x7fc2f7c5ce2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5607] <... futex resumed>) = 0 [pid 5606] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5607] futex(0x7fc2f7c5ce28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5606] exit_group(0 [pid 5607] <... futex resumed>) = ? [pid 5606] <... exit_group resumed>) = ? [pid 5607] +++ exited with 0 +++ [pid 5606] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5606, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=19 /* 0.19 s */} --- umount2("./1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x55557547a790 /* 4 entries */, 32768) = 112 umount2("./1/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./1/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./1/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./1/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./1/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x5555754827d0 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555754827d0 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./1/file1") = 0 umount2("./1/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./1/binderfs") = 0 getdents64(3, 0x55557547a790 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./1") = 0 mkdir("./2", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5610 attached , child_tidptr=0x5555754796d0) = 5610 [pid 5610] set_robust_list(0x5555754796e0, 24) = 0 [pid 5610] rt_sigprocmask(SIG_SETMASK, [] [pid 5603] rt_sigprocmask(SIG_SETMASK, [] [pid 5610] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5603] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5610] chdir("./2") = 0 [pid 5610] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5610] setpgid(0, 0) = 0 [pid 5610] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5610] write(3, "1000", 4) = 4 [pid 5610] close(3) = 0 [pid 5610] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5610] write(1, "executing program\n", 18) = 18 executing program [pid 5610] futex(0x7fc2f7c5ce2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5610] rt_sigaction(SIGRT_1, {sa_handler=0x7fc2f7bc1b90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fc2f7bb3b60}, NULL, 8) = 0 [pid 5610] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5610] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc2f7b5b000 [pid 5610] mprotect(0x7fc2f7b5c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5610] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5610] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc2f7b7b990, parent_tid=0x7fc2f7b7b990, exit_signal=0, stack=0x7fc2f7b5b000, stack_size=0x202c0, tls=0x7fc2f7b7b6c0} => {parent_tid=[5611]}, 88) = 5611 ci2-upstream-fs/strace-static-x86_64: Process 5611 attached [pid 5610] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5611] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053) = 0 [pid 5610] futex(0x7fc2f7c5ce28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5611] set_robust_list(0x7fc2f7b7b9a0, 24) = 0 [pid 5611] rt_sigprocmask(SIG_SETMASK, [] [pid 5610] futex(0x7fc2f7c5ce2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5611] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5611] memfd_create("syzkaller", 0) = 3 [pid 5611] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fc2ef75b000 [pid 5611] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5611] munmap(0x7fc2ef75b000, 138412032) = 0 [pid 5611] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5611] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5611] close(3) = 0 [pid 5611] close(4) = 0 [pid 5611] mkdir("./file1", 0777) = 0 [pid 5611] mount("/dev/loop0", "./file1", "jfs", MS_NODEV|MS_POSIXACL|MS_STRICTATIME, "iocharset=koi8-u,nointegrity,iocharset=iso8859-14,errors=continue,discard,errors=remount-ro,integrit"...) = 0 [pid 5611] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5611] chdir("./file1") = 0 [pid 5611] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5611] ioctl(4, LOOP_CLR_FD) = 0 [pid 5611] close(4) = 0 [pid 5611] futex(0x7fc2f7c5ce2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5610] <... futex resumed>) = 0 [pid 5611] futex(0x7fc2f7c5ce28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5610] futex(0x7fc2f7c5ce28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5611] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5610] <... futex resumed>) = 0 [pid 5611] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5610] futex(0x7fc2f7c5ce2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5611] <... openat resumed>) = -1 EFAULT (Bad address) [pid 5611] futex(0x7fc2f7c5ce2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5610] <... futex resumed>) = 0 [pid 5611] futex(0x7fc2f7c5ce28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5610] futex(0x7fc2f7c5ce28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5611] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5610] <... futex resumed>) = 0 [pid 5611] mknod(NULL, 0100 [pid 5610] futex(0x7fc2f7c5ce2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5611] <... mknod resumed>) = -1 EFAULT (Bad address) [pid 5611] futex(0x7fc2f7c5ce2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5610] <... futex resumed>) = 0 [pid 5611] futex(0x7fc2f7c5ce28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5610] exit_group(0 [pid 5611] <... futex resumed>) = ? [pid 5610] <... exit_group resumed>) = ? [pid 5611] +++ exited with 0 +++ [pid 5610] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5610, si_uid=0, si_status=0, si_utime=0, si_stime=25 /* 0.25 s */} --- [ 102.700516][ T5611] loop0: detected capacity change from 0 to 32768 restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 umount2("./2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x55557547a790 /* 4 entries */, 32768) = 112 umount2("./2/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./2/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./2/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./2/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./2/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x5555754827d0 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555754827d0 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./2/file1") = 0 umount2("./2/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./2/binderfs") = 0 getdents64(3, 0x55557547a790 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./2") = 0 mkdir("./3", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 ioctl(3, LOOP_CLR_FD) = 0 close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5614 attached [pid 5614] set_robust_list(0x5555754796e0, 24 [pid 5603] <... clone resumed>, child_tidptr=0x5555754796d0) = 5614 [pid 5614] <... set_robust_list resumed>) = 0 [pid 5603] rt_sigprocmask(SIG_SETMASK, [] [pid 5614] rt_sigprocmask(SIG_SETMASK, [] [pid 5603] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5614] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5614] chdir("./3") = 0 [pid 5614] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5614] setpgid(0, 0) = 0 [pid 5614] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5614] write(3, "1000", 4) = 4 [pid 5614] close(3) = 0 [pid 5614] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5614] write(1, "executing program\n", 18) = 18 [pid 5614] futex(0x7fc2f7c5ce2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5614] rt_sigaction(SIGRT_1, {sa_handler=0x7fc2f7bc1b90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fc2f7bb3b60}, NULL, 8) = 0 [pid 5614] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 executing program [pid 5614] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc2f7b5b000 [pid 5614] mprotect(0x7fc2f7b5c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5614] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5614] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc2f7b7b990, parent_tid=0x7fc2f7b7b990, exit_signal=0, stack=0x7fc2f7b5b000, stack_size=0x202c0, tls=0x7fc2f7b7b6c0}ci2-upstream-fs/strace-static-x86_64: Process 5615 attached [pid 5615] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053) = 0 [pid 5614] <... clone3 resumed> => {parent_tid=[5615]}, 88) = 5615 [pid 5615] set_robust_list(0x7fc2f7b7b9a0, 24) = 0 [pid 5614] rt_sigprocmask(SIG_SETMASK, [] [pid 5615] rt_sigprocmask(SIG_SETMASK, [] [pid 5614] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5615] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5615] memfd_create("syzkaller", 0 [pid 5614] futex(0x7fc2f7c5ce28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5614] futex(0x7fc2f7c5ce2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5615] <... memfd_create resumed>) = 3 [pid 5615] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fc2ef75b000 [pid 5615] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5615] munmap(0x7fc2ef75b000, 138412032) = 0 [pid 5615] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5615] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5615] close(3) = 0 [pid 5615] close(4) = 0 [pid 5615] mkdir("./file1", 0777) = 0 [pid 5615] mount("/dev/loop0", "./file1", "jfs", MS_NODEV|MS_POSIXACL|MS_STRICTATIME, "iocharset=koi8-u,nointegrity,iocharset=iso8859-14,errors=continue,discard,errors=remount-ro,integrit"...) = 0 [pid 5615] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5615] chdir("./file1") = 0 [pid 5615] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5615] ioctl(4, LOOP_CLR_FD) = 0 [pid 5615] close(4) = 0 [pid 5615] futex(0x7fc2f7c5ce2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5615] futex(0x7fc2f7c5ce28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5614] <... futex resumed>) = 0 [ 103.242649][ T5615] loop0: detected capacity change from 0 to 32768 [pid 5614] futex(0x7fc2f7c5ce28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5615] <... futex resumed>) = 0 [pid 5614] <... futex resumed>) = 1 [pid 5615] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5614] futex(0x7fc2f7c5ce2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5615] <... openat resumed>) = -1 EFAULT (Bad address) [pid 5615] futex(0x7fc2f7c5ce2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5614] <... futex resumed>) = 0 [pid 5615] mknod(NULL, 0100 [pid 5614] futex(0x7fc2f7c5ce28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5615] <... mknod resumed>) = -1 EFAULT (Bad address) [pid 5614] <... futex resumed>) = 0 [pid 5615] futex(0x7fc2f7c5ce2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5614] futex(0x7fc2f7c5ce2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5615] <... futex resumed>) = 0 [pid 5614] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5615] futex(0x7fc2f7c5ce28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5614] exit_group(0 [pid 5615] <... futex resumed>) = ? [pid 5614] <... exit_group resumed>) = ? [pid 5615] +++ exited with 0 +++ [pid 5614] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5614, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=23 /* 0.23 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 umount2("./3", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./3", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x55557547a790 /* 4 entries */, 32768) = 112 umount2("./3/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./3/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./3/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./3/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./3/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x5555754827d0 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555754827d0 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./3/file1") = 0 umount2("./3/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./3/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./3/binderfs") = 0 getdents64(3, 0x55557547a790 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./3") = 0 mkdir("./4", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5617 attached , child_tidptr=0x5555754796d0) = 5617 [pid 5617] set_robust_list(0x5555754796e0, 24) = 0 [pid 5617] rt_sigprocmask(SIG_SETMASK, [] [pid 5603] rt_sigprocmask(SIG_SETMASK, [] [pid 5617] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5603] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5617] chdir("./4") = 0 [pid 5617] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5617] setpgid(0, 0) = 0 [pid 5617] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5617] write(3, "1000", 4) = 4 [pid 5617] close(3) = 0 [pid 5617] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5617] write(1, "executing program\n", 18) = 18 executing program [pid 5617] futex(0x7fc2f7c5ce2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5617] rt_sigaction(SIGRT_1, {sa_handler=0x7fc2f7bc1b90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fc2f7bb3b60}, NULL, 8) = 0 [pid 5617] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5617] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc2f7b5b000 [pid 5617] mprotect(0x7fc2f7b5c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5617] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5617] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc2f7b7b990, parent_tid=0x7fc2f7b7b990, exit_signal=0, stack=0x7fc2f7b5b000, stack_size=0x202c0, tls=0x7fc2f7b7b6c0}ci2-upstream-fs/strace-static-x86_64: Process 5618 attached [pid 5618] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053) = 0 [pid 5617] <... clone3 resumed> => {parent_tid=[5618]}, 88) = 5618 [pid 5618] set_robust_list(0x7fc2f7b7b9a0, 24 [pid 5617] rt_sigprocmask(SIG_SETMASK, [] [pid 5618] <... set_robust_list resumed>) = 0 [pid 5617] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5618] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5617] futex(0x7fc2f7c5ce28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5618] memfd_create("syzkaller", 0 [pid 5617] <... futex resumed>) = 0 [pid 5617] futex(0x7fc2f7c5ce2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5618] <... memfd_create resumed>) = 3 [pid 5618] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fc2ef75b000 [pid 5618] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5618] munmap(0x7fc2ef75b000, 138412032) = 0 [pid 5618] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5618] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5618] close(3) = 0 [pid 5618] close(4) = 0 [pid 5618] mkdir("./file1", 0777) = 0 [pid 5618] mount("/dev/loop0", "./file1", "jfs", MS_NODEV|MS_POSIXACL|MS_STRICTATIME, "iocharset=koi8-u,nointegrity,iocharset=iso8859-14,errors=continue,discard,errors=remount-ro,integrit"...) = 0 [pid 5618] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5618] chdir("./file1") = 0 [pid 5618] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5618] ioctl(4, LOOP_CLR_FD) = 0 [pid 5618] close(4) = 0 [pid 5618] futex(0x7fc2f7c5ce2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5617] <... futex resumed>) = 0 [pid 5618] futex(0x7fc2f7c5ce28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5617] futex(0x7fc2f7c5ce28, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5617] futex(0x7fc2f7c5ce2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5618] <... futex resumed>) = 0 [pid 5618] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = -1 EFAULT (Bad address) [pid 5618] futex(0x7fc2f7c5ce2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5617] <... futex resumed>) = 0 [pid 5618] futex(0x7fc2f7c5ce28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5617] futex(0x7fc2f7c5ce28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5618] <... futex resumed>) = 0 [pid 5617] <... futex resumed>) = 1 [pid 5618] mknod(NULL, 0100 [pid 5617] futex(0x7fc2f7c5ce2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5618] <... mknod resumed>) = -1 EFAULT (Bad address) [pid 5618] futex(0x7fc2f7c5ce2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5617] <... futex resumed>) = 0 [ 103.832063][ T5618] loop0: detected capacity change from 0 to 32768 [pid 5618] futex(0x7fc2f7c5ce28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5617] exit_group(0 [pid 5618] <... futex resumed>) = ? [pid 5617] <... exit_group resumed>) = ? [pid 5618] +++ exited with 0 +++ [pid 5617] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5617, si_uid=0, si_status=0, si_utime=0, si_stime=20 /* 0.20 s */} --- umount2("./4", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./4", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x55557547a790 /* 4 entries */, 32768) = 112 umount2("./4/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./4/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./4/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./4/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./4/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x5555754827d0 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555754827d0 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./4/file1") = 0 umount2("./4/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./4/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./4/binderfs") = 0 getdents64(3, 0x55557547a790 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./4") = 0 mkdir("./5", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5620 attached , child_tidptr=0x5555754796d0) = 5620 [pid 5620] set_robust_list(0x5555754796e0, 24 [pid 5603] rt_sigprocmask(SIG_SETMASK, [] [pid 5620] <... set_robust_list resumed>) = 0 [pid 5603] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5620] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5620] chdir("./5") = 0 [pid 5620] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5620] setpgid(0, 0) = 0 [pid 5620] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5620] write(3, "1000", 4) = 4 [pid 5620] close(3) = 0 [pid 5620] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5620] write(1, "executing program\n", 18) = 18 [pid 5620] futex(0x7fc2f7c5ce2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5620] rt_sigaction(SIGRT_1, {sa_handler=0x7fc2f7bc1b90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fc2f7bb3b60}, NULL, 8) = 0 [pid 5620] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5620] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc2f7b5b000 [pid 5620] mprotect(0x7fc2f7b5c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5620] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5620] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc2f7b7b990, parent_tid=0x7fc2f7b7b990, exit_signal=0, stack=0x7fc2f7b5b000, stack_size=0x202c0, tls=0x7fc2f7b7b6c0}ci2-upstream-fs/strace-static-x86_64: Process 5621 attached [pid 5621] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 5620] <... clone3 resumed> => {parent_tid=[5621]}, 88) = 5621 [pid 5621] <... rseq resumed>) = 0 [pid 5620] rt_sigprocmask(SIG_SETMASK, [] [pid 5621] set_robust_list(0x7fc2f7b7b9a0, 24 [pid 5620] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5621] <... set_robust_list resumed>) = 0 [pid 5620] futex(0x7fc2f7c5ce28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5621] rt_sigprocmask(SIG_SETMASK, [] [pid 5620] <... futex resumed>) = 0 [pid 5621] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5621] memfd_create("syzkaller", 0 [pid 5620] futex(0x7fc2f7c5ce2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5621] <... memfd_create resumed>) = 3 [pid 5621] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fc2ef75b000 [pid 5621] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5621] munmap(0x7fc2ef75b000, 138412032) = 0 [pid 5621] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5621] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5621] close(3) = 0 [pid 5621] close(4) = 0 [pid 5621] mkdir("./file1", 0777) = 0 [pid 5621] mount("/dev/loop0", "./file1", "jfs", MS_NODEV|MS_POSIXACL|MS_STRICTATIME, "iocharset=koi8-u,nointegrity,iocharset=iso8859-14,errors=continue,discard,errors=remount-ro,integrit"...) = 0 [pid 5621] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5621] chdir("./file1") = 0 [pid 5621] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5621] ioctl(4, LOOP_CLR_FD) = 0 [pid 5621] close(4) = 0 [pid 5621] futex(0x7fc2f7c5ce2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5620] <... futex resumed>) = 0 [pid 5621] futex(0x7fc2f7c5ce28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5620] futex(0x7fc2f7c5ce28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5621] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5620] <... futex resumed>) = 0 [pid 5621] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5620] futex(0x7fc2f7c5ce2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5621] <... openat resumed>) = -1 EFAULT (Bad address) [pid 5621] futex(0x7fc2f7c5ce2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5620] <... futex resumed>) = 0 [pid 5621] futex(0x7fc2f7c5ce28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5620] futex(0x7fc2f7c5ce28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5621] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5620] <... futex resumed>) = 0 [pid 5620] futex(0x7fc2f7c5ce2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5621] mknod(NULL, 0100) = -1 EFAULT (Bad address) [pid 5621] futex(0x7fc2f7c5ce2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5620] <... futex resumed>) = 0 [pid 5621] futex(0x7fc2f7c5ce28, FUTEX_WAIT_PRIVATE, 0, NULL [ 104.354920][ T5621] loop0: detected capacity change from 0 to 32768 [pid 5620] exit_group(0 [pid 5621] <... futex resumed>) = ? [pid 5620] <... exit_group resumed>) = ? [pid 5621] +++ exited with 0 +++ [pid 5620] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5620, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=22 /* 0.22 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 umount2("./5", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./5", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x55557547a790 /* 4 entries */, 32768) = 112 umount2("./5/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./5/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./5/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./5/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./5/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x5555754827d0 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555754827d0 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./5/file1") = 0 umount2("./5/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./5/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./5/binderfs") = 0 getdents64(3, 0x55557547a790 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./5") = 0 mkdir("./6", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5622 attached , child_tidptr=0x5555754796d0) = 5622 [pid 5622] set_robust_list(0x5555754796e0, 24) = 0 [pid 5622] rt_sigprocmask(SIG_SETMASK, [] [pid 5603] rt_sigprocmask(SIG_SETMASK, [] [pid 5622] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5603] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5622] chdir("./6") = 0 [pid 5622] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5622] setpgid(0, 0) = 0 [pid 5622] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5622] write(3, "1000", 4) = 4 [pid 5622] close(3) = 0 [pid 5622] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5622] write(1, "executing program\n", 18) = 18 executing program [pid 5622] futex(0x7fc2f7c5ce2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5622] rt_sigaction(SIGRT_1, {sa_handler=0x7fc2f7bc1b90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fc2f7bb3b60}, NULL, 8) = 0 [pid 5622] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5622] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc2f7b5b000 [pid 5622] mprotect(0x7fc2f7b5c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5622] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5622] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc2f7b7b990, parent_tid=0x7fc2f7b7b990, exit_signal=0, stack=0x7fc2f7b5b000, stack_size=0x202c0, tls=0x7fc2f7b7b6c0}ci2-upstream-fs/strace-static-x86_64: Process 5623 attached [pid 5623] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 5622] <... clone3 resumed> => {parent_tid=[5623]}, 88) = 5623 [pid 5623] <... rseq resumed>) = 0 [pid 5623] set_robust_list(0x7fc2f7b7b9a0, 24 [pid 5622] rt_sigprocmask(SIG_SETMASK, [] [pid 5623] <... set_robust_list resumed>) = 0 [pid 5622] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5623] rt_sigprocmask(SIG_SETMASK, [] [pid 5622] futex(0x7fc2f7c5ce28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5623] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5623] memfd_create("syzkaller", 0 [pid 5622] <... futex resumed>) = 0 [pid 5622] futex(0x7fc2f7c5ce2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5623] <... memfd_create resumed>) = 3 [pid 5623] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fc2ef75b000 [pid 5623] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5623] munmap(0x7fc2ef75b000, 138412032) = 0 [pid 5623] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5623] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5623] close(3) = 0 [pid 5623] close(4) = 0 [pid 5623] mkdir("./file1", 0777) = 0 [pid 5623] mount("/dev/loop0", "./file1", "jfs", MS_NODEV|MS_POSIXACL|MS_STRICTATIME, "iocharset=koi8-u,nointegrity,iocharset=iso8859-14,errors=continue,discard,errors=remount-ro,integrit"...) = 0 [pid 5623] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5623] chdir("./file1") = 0 [pid 5623] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5623] ioctl(4, LOOP_CLR_FD) = 0 [pid 5623] close(4) = 0 [pid 5623] futex(0x7fc2f7c5ce2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5622] <... futex resumed>) = 0 [pid 5622] futex(0x7fc2f7c5ce28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5623] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5622] <... futex resumed>) = 0 [pid 5623] <... openat resumed>) = -1 EFAULT (Bad address) [pid 5622] futex(0x7fc2f7c5ce2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5623] futex(0x7fc2f7c5ce2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5622] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5622] futex(0x7fc2f7c5ce28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5622] futex(0x7fc2f7c5ce2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5623] mknod(NULL, 0100) = -1 EFAULT (Bad address) [pid 5623] futex(0x7fc2f7c5ce2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5622] <... futex resumed>) = 0 [pid 5622] exit_group(0) = ? [pid 5623] +++ exited with 0 +++ [pid 5622] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5622, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=20 /* 0.20 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 umount2("./6", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./6", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x55557547a790 /* 4 entries */, 32768) = 112 [ 104.902536][ T5623] loop0: detected capacity change from 0 to 32768 umount2("./6/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./6/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./6/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./6/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./6/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x5555754827d0 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555754827d0 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./6/file1") = 0 umount2("./6/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./6/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./6/binderfs") = 0 getdents64(3, 0x55557547a790 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./6") = 0 mkdir("./7", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5625 attached , child_tidptr=0x5555754796d0) = 5625 [pid 5625] set_robust_list(0x5555754796e0, 24 [pid 5603] rt_sigprocmask(SIG_SETMASK, [] [pid 5625] <... set_robust_list resumed>) = 0 [pid 5603] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5625] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5625] chdir("./7") = 0 [pid 5625] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5625] setpgid(0, 0) = 0 [pid 5625] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5625] write(3, "1000", 4) = 4 [pid 5625] close(3) = 0 [pid 5625] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5625] write(1, "executing program\n", 18) = 18 executing program [pid 5625] futex(0x7fc2f7c5ce2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5625] rt_sigaction(SIGRT_1, {sa_handler=0x7fc2f7bc1b90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fc2f7bb3b60}, NULL, 8) = 0 [pid 5625] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5625] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc2f7b5b000 [pid 5625] mprotect(0x7fc2f7b5c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5625] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5625] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc2f7b7b990, parent_tid=0x7fc2f7b7b990, exit_signal=0, stack=0x7fc2f7b5b000, stack_size=0x202c0, tls=0x7fc2f7b7b6c0}ci2-upstream-fs/strace-static-x86_64: Process 5626 attached [pid 5626] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053) = 0 [pid 5625] <... clone3 resumed> => {parent_tid=[5626]}, 88) = 5626 [pid 5626] set_robust_list(0x7fc2f7b7b9a0, 24) = 0 [pid 5626] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5626] futex(0x7fc2f7c5ce28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5625] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5625] futex(0x7fc2f7c5ce28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5626] <... futex resumed>) = 0 [pid 5625] <... futex resumed>) = 1 [pid 5625] futex(0x7fc2f7c5ce2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5626] memfd_create("syzkaller", 0) = 3 [pid 5626] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fc2ef75b000 [pid 5626] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5626] munmap(0x7fc2ef75b000, 138412032) = 0 [pid 5626] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5626] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5626] close(3) = 0 [pid 5626] close(4) = 0 [pid 5626] mkdir("./file1", 0777) = 0 [pid 5626] mount("/dev/loop0", "./file1", "jfs", MS_NODEV|MS_POSIXACL|MS_STRICTATIME, "iocharset=koi8-u,nointegrity,iocharset=iso8859-14,errors=continue,discard,errors=remount-ro,integrit"...) = 0 [pid 5626] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5626] chdir("./file1") = 0 [pid 5626] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5626] ioctl(4, LOOP_CLR_FD) = 0 [pid 5626] close(4) = 0 [pid 5626] futex(0x7fc2f7c5ce2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5625] <... futex resumed>) = 0 [pid 5626] futex(0x7fc2f7c5ce28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5625] futex(0x7fc2f7c5ce28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5626] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5625] <... futex resumed>) = 0 [pid 5626] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5625] futex(0x7fc2f7c5ce2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5626] <... openat resumed>) = -1 EFAULT (Bad address) [pid 5626] futex(0x7fc2f7c5ce2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5625] <... futex resumed>) = 0 [pid 5626] futex(0x7fc2f7c5ce28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5625] futex(0x7fc2f7c5ce28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5626] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5625] <... futex resumed>) = 0 [ 105.379483][ T5626] loop0: detected capacity change from 0 to 32768 [pid 5626] mknod(NULL, 0100 [pid 5625] futex(0x7fc2f7c5ce2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5626] <... mknod resumed>) = -1 EFAULT (Bad address) [pid 5626] futex(0x7fc2f7c5ce2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5625] <... futex resumed>) = 0 [pid 5626] futex(0x7fc2f7c5ce28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5625] exit_group(0) = ? [pid 5626] <... futex resumed>) = ? [pid 5626] +++ exited with 0 +++ [pid 5625] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5625, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=22 /* 0.22 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 umount2("./7", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./7", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x55557547a790 /* 4 entries */, 32768) = 112 umount2("./7/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./7/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./7/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./7/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./7/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x5555754827d0 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555754827d0 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./7/file1") = 0 umount2("./7/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./7/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./7/binderfs") = 0 getdents64(3, 0x55557547a790 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./7") = 0 mkdir("./8", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555754796d0) = 5627 ci2-upstream-fs/strace-static-x86_64: Process 5627 attached [pid 5627] set_robust_list(0x5555754796e0, 24 [pid 5603] rt_sigprocmask(SIG_SETMASK, [] [pid 5627] <... set_robust_list resumed>) = 0 [pid 5603] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5627] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5627] chdir("./8") = 0 [pid 5627] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5627] setpgid(0, 0) = 0 [pid 5627] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5627] write(3, "1000", 4) = 4 [pid 5627] close(3) = 0 [pid 5627] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5627] write(1, "executing program\n", 18) = 18 executing program [pid 5627] futex(0x7fc2f7c5ce2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5627] rt_sigaction(SIGRT_1, {sa_handler=0x7fc2f7bc1b90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fc2f7bb3b60}, NULL, 8) = 0 [pid 5627] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5627] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc2f7b5b000 [pid 5627] mprotect(0x7fc2f7b5c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5627] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5627] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc2f7b7b990, parent_tid=0x7fc2f7b7b990, exit_signal=0, stack=0x7fc2f7b5b000, stack_size=0x202c0, tls=0x7fc2f7b7b6c0}ci2-upstream-fs/strace-static-x86_64: Process 5628 attached [pid 5628] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053) = 0 [pid 5627] <... clone3 resumed> => {parent_tid=[5628]}, 88) = 5628 [pid 5628] set_robust_list(0x7fc2f7b7b9a0, 24 [pid 5627] rt_sigprocmask(SIG_SETMASK, [] [pid 5628] <... set_robust_list resumed>) = 0 [pid 5627] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5628] rt_sigprocmask(SIG_SETMASK, [] [pid 5627] futex(0x7fc2f7c5ce28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5628] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5628] memfd_create("syzkaller", 0 [pid 5627] <... futex resumed>) = 0 [pid 5627] futex(0x7fc2f7c5ce2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5628] <... memfd_create resumed>) = 3 [pid 5628] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fc2ef75b000 [pid 5628] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5628] munmap(0x7fc2ef75b000, 138412032) = 0 [pid 5628] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5628] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5628] close(3) = 0 [pid 5628] close(4) = 0 [pid 5628] mkdir("./file1", 0777) = 0 [pid 5628] mount("/dev/loop0", "./file1", "jfs", MS_NODEV|MS_POSIXACL|MS_STRICTATIME, "iocharset=koi8-u,nointegrity,iocharset=iso8859-14,errors=continue,discard,errors=remount-ro,integrit"...) = 0 [pid 5628] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5628] chdir("./file1") = 0 [pid 5628] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5628] ioctl(4, LOOP_CLR_FD) = 0 [pid 5628] close(4) = 0 [pid 5628] futex(0x7fc2f7c5ce2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5627] <... futex resumed>) = 0 [pid 5627] futex(0x7fc2f7c5ce28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5628] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5627] <... futex resumed>) = 0 [pid 5627] futex(0x7fc2f7c5ce2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5628] <... openat resumed>) = -1 EFAULT (Bad address) [pid 5628] futex(0x7fc2f7c5ce2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5627] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5628] mknod(NULL, 0100 [pid 5627] futex(0x7fc2f7c5ce28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5628] <... mknod resumed>) = -1 EFAULT (Bad address) [pid 5627] <... futex resumed>) = 0 [pid 5628] futex(0x7fc2f7c5ce2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5627] futex(0x7fc2f7c5ce2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 5628] <... futex resumed>) = 0 [ 105.921139][ T5628] loop0: detected capacity change from 0 to 32768 [pid 5628] futex(0x7fc2f7c5ce28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5627] exit_group(0 [pid 5628] <... futex resumed>) = ? [pid 5627] <... exit_group resumed>) = ? [pid 5628] +++ exited with 0 +++ [pid 5627] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5627, si_uid=0, si_status=0, si_utime=0, si_stime=20 /* 0.20 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 umount2("./8", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./8", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x55557547a790 /* 4 entries */, 32768) = 112 umount2("./8/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./8/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./8/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./8/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./8/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x5555754827d0 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555754827d0 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./8/file1") = 0 umount2("./8/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./8/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./8/binderfs") = 0 getdents64(3, 0x55557547a790 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./8") = 0 mkdir("./9", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5629 attached [pid 5629] set_robust_list(0x5555754796e0, 24 [pid 5603] <... clone resumed>, child_tidptr=0x5555754796d0) = 5629 [pid 5603] rt_sigprocmask(SIG_SETMASK, [] [pid 5629] <... set_robust_list resumed>) = 0 [pid 5603] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5629] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5629] chdir("./9") = 0 [pid 5629] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5629] setpgid(0, 0) = 0 [pid 5629] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5629] write(3, "1000", 4) = 4 [pid 5629] close(3) = 0 [pid 5629] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5629] write(1, "executing program\n", 18) = 18 [pid 5629] futex(0x7fc2f7c5ce2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5629] rt_sigaction(SIGRT_1, {sa_handler=0x7fc2f7bc1b90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fc2f7bb3b60}, NULL, 8) = 0 [pid 5629] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5629] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc2f7b5b000 [pid 5629] mprotect(0x7fc2f7b5c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5629] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5629] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc2f7b7b990, parent_tid=0x7fc2f7b7b990, exit_signal=0, stack=0x7fc2f7b5b000, stack_size=0x202c0, tls=0x7fc2f7b7b6c0}ci2-upstream-fs/strace-static-x86_64: Process 5630 attached => {parent_tid=[5630]}, 88) = 5630 [pid 5630] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 5629] rt_sigprocmask(SIG_SETMASK, [] [pid 5630] <... rseq resumed>) = 0 [pid 5629] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5630] set_robust_list(0x7fc2f7b7b9a0, 24 [pid 5629] futex(0x7fc2f7c5ce28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5630] <... set_robust_list resumed>) = 0 [pid 5629] <... futex resumed>) = 0 [pid 5630] rt_sigprocmask(SIG_SETMASK, [] [pid 5629] futex(0x7fc2f7c5ce2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5630] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5630] memfd_create("syzkaller", 0) = 3 [pid 5630] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fc2ef75b000 [pid 5630] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5630] munmap(0x7fc2ef75b000, 138412032) = 0 [pid 5630] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5630] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5630] close(3) = 0 [pid 5630] close(4) = 0 [pid 5630] mkdir("./file1", 0777) = 0 [pid 5630] mount("/dev/loop0", "./file1", "jfs", MS_NODEV|MS_POSIXACL|MS_STRICTATIME, "iocharset=koi8-u,nointegrity,iocharset=iso8859-14,errors=continue,discard,errors=remount-ro,integrit"...) = 0 [pid 5630] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [ 106.486577][ T5630] loop0: detected capacity change from 0 to 32768 [pid 5630] chdir("./file1") = 0 [pid 5630] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5630] ioctl(4, LOOP_CLR_FD) = 0 [pid 5630] close(4) = 0 [pid 5630] futex(0x7fc2f7c5ce2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5629] <... futex resumed>) = 0 [pid 5630] futex(0x7fc2f7c5ce28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5629] futex(0x7fc2f7c5ce28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5630] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5629] <... futex resumed>) = 0 [pid 5630] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5629] futex(0x7fc2f7c5ce2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5630] <... openat resumed>) = -1 EFAULT (Bad address) [pid 5630] futex(0x7fc2f7c5ce2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5629] <... futex resumed>) = 0 [pid 5630] futex(0x7fc2f7c5ce28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5629] futex(0x7fc2f7c5ce28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5630] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5629] <... futex resumed>) = 0 [pid 5630] mknod(NULL, 0100 [pid 5629] futex(0x7fc2f7c5ce2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5630] <... mknod resumed>) = -1 EFAULT (Bad address) [pid 5630] futex(0x7fc2f7c5ce2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5629] <... futex resumed>) = 0 [pid 5630] futex(0x7fc2f7c5ce28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5629] exit_group(0 [pid 5630] <... futex resumed>) = ? [pid 5629] <... exit_group resumed>) = ? [pid 5630] +++ exited with 0 +++ [pid 5629] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5629, si_uid=0, si_status=0, si_utime=0, si_stime=21 /* 0.21 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 umount2("./9", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./9", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x55557547a790 /* 4 entries */, 32768) = 112 umount2("./9/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./9/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./9/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./9/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./9/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x5555754827d0 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555754827d0 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./9/file1") = 0 umount2("./9/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./9/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./9/binderfs") = 0 getdents64(3, 0x55557547a790 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./9") = 0 mkdir("./10", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5631 attached [pid 5631] set_robust_list(0x5555754796e0, 24 [pid 5603] <... clone resumed>, child_tidptr=0x5555754796d0) = 5631 [pid 5631] <... set_robust_list resumed>) = 0 [pid 5603] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5631] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5631] chdir("./10") = 0 [pid 5631] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5631] setpgid(0, 0) = 0 [pid 5631] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5631] write(3, "1000", 4) = 4 [pid 5631] close(3) = 0 [pid 5631] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5631] write(1, "executing program\n", 18) = 18 [pid 5631] futex(0x7fc2f7c5ce2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5631] rt_sigaction(SIGRT_1, {sa_handler=0x7fc2f7bc1b90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fc2f7bb3b60}, NULL, 8) = 0 [pid 5631] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5631] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc2f7b5b000 [pid 5631] mprotect(0x7fc2f7b5c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5631] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5631] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc2f7b7b990, parent_tid=0x7fc2f7b7b990, exit_signal=0, stack=0x7fc2f7b5b000, stack_size=0x202c0, tls=0x7fc2f7b7b6c0}ci2-upstream-fs/strace-static-x86_64: Process 5632 attached [pid 5632] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 5631] <... clone3 resumed> => {parent_tid=[5632]}, 88) = 5632 [pid 5632] <... rseq resumed>) = 0 [pid 5631] rt_sigprocmask(SIG_SETMASK, [] [pid 5632] set_robust_list(0x7fc2f7b7b9a0, 24 [pid 5631] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5632] <... set_robust_list resumed>) = 0 [pid 5631] futex(0x7fc2f7c5ce28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5632] rt_sigprocmask(SIG_SETMASK, [] [pid 5631] <... futex resumed>) = 0 [pid 5632] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5631] futex(0x7fc2f7c5ce2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5632] memfd_create("syzkaller", 0) = 3 [pid 5632] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fc2ef75b000 [pid 5632] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5632] munmap(0x7fc2ef75b000, 138412032) = 0 [pid 5632] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5632] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5632] close(3) = 0 [pid 5632] close(4) = 0 [pid 5632] mkdir("./file1", 0777) = 0 [pid 5632] mount("/dev/loop0", "./file1", "jfs", MS_NODEV|MS_POSIXACL|MS_STRICTATIME, "iocharset=koi8-u,nointegrity,iocharset=iso8859-14,errors=continue,discard,errors=remount-ro,integrit"...) = 0 [pid 5632] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5632] chdir("./file1") = 0 [pid 5632] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [ 107.043271][ T5632] loop0: detected capacity change from 0 to 32768 [pid 5632] ioctl(4, LOOP_CLR_FD) = 0 [pid 5632] close(4) = 0 [pid 5632] futex(0x7fc2f7c5ce2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5631] <... futex resumed>) = 0 [pid 5631] futex(0x7fc2f7c5ce28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5631] futex(0x7fc2f7c5ce2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5632] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = -1 EFAULT (Bad address) [pid 5632] futex(0x7fc2f7c5ce2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5631] <... futex resumed>) = 0 [pid 5632] futex(0x7fc2f7c5ce28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5631] futex(0x7fc2f7c5ce28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5632] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5632] mknod(NULL, 0100 [pid 5631] <... futex resumed>) = 0 [pid 5632] <... mknod resumed>) = -1 EFAULT (Bad address) [pid 5631] futex(0x7fc2f7c5ce2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5632] futex(0x7fc2f7c5ce2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5631] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5632] futex(0x7fc2f7c5ce28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5631] exit_group(0) = ? [pid 5632] <... futex resumed>) = ? [pid 5632] +++ exited with 0 +++ [pid 5631] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5631, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=17 /* 0.17 s */} --- umount2("./10", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./10", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x55557547a790 /* 4 entries */, 32768) = 112 umount2("./10/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./10/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./10/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./10/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./10/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x5555754827d0 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555754827d0 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./10/file1") = 0 umount2("./10/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./10/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./10/binderfs") = 0 getdents64(3, 0x55557547a790 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./10") = 0 mkdir("./11", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5633 attached , child_tidptr=0x5555754796d0) = 5633 [pid 5603] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5633] set_robust_list(0x5555754796e0, 24) = 0 [pid 5633] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5633] chdir("./11") = 0 [pid 5633] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5633] setpgid(0, 0) = 0 [pid 5633] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5633] write(3, "1000", 4) = 4 [pid 5633] close(3) = 0 [pid 5633] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5633] write(1, "executing program\n", 18) = 18 executing program [pid 5633] futex(0x7fc2f7c5ce2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5633] rt_sigaction(SIGRT_1, {sa_handler=0x7fc2f7bc1b90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fc2f7bb3b60}, NULL, 8) = 0 [pid 5633] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5633] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc2f7b5b000 [pid 5633] mprotect(0x7fc2f7b5c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5633] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5633] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc2f7b7b990, parent_tid=0x7fc2f7b7b990, exit_signal=0, stack=0x7fc2f7b5b000, stack_size=0x202c0, tls=0x7fc2f7b7b6c0}ci2-upstream-fs/strace-static-x86_64: Process 5634 attached => {parent_tid=[5634]}, 88) = 5634 [pid 5633] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5634] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 5633] futex(0x7fc2f7c5ce28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5634] <... rseq resumed>) = 0 [pid 5633] futex(0x7fc2f7c5ce2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5634] set_robust_list(0x7fc2f7b7b9a0, 24) = 0 [pid 5634] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5634] memfd_create("syzkaller", 0) = 3 [pid 5634] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fc2ef75b000 [pid 5634] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5634] munmap(0x7fc2ef75b000, 138412032) = 0 [pid 5634] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5634] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5634] close(3) = 0 [pid 5634] close(4) = 0 [pid 5634] mkdir("./file1", 0777) = 0 [pid 5634] mount("/dev/loop0", "./file1", "jfs", MS_NODEV|MS_POSIXACL|MS_STRICTATIME, "iocharset=koi8-u,nointegrity,iocharset=iso8859-14,errors=continue,discard,errors=remount-ro,integrit"...) = 0 [ 107.578656][ T5634] loop0: detected capacity change from 0 to 32768 [pid 5634] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5634] chdir("./file1") = 0 [pid 5634] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5634] ioctl(4, LOOP_CLR_FD) = 0 [pid 5634] close(4) = 0 [pid 5634] futex(0x7fc2f7c5ce2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5634] futex(0x7fc2f7c5ce28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5633] <... futex resumed>) = 0 [pid 5634] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5633] futex(0x7fc2f7c5ce28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5634] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5633] <... futex resumed>) = 0 [pid 5634] <... openat resumed>) = -1 EFAULT (Bad address) [pid 5633] futex(0x7fc2f7c5ce2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5634] futex(0x7fc2f7c5ce2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5633] <... futex resumed>) = 0 [pid 5634] mknod(NULL, 0100 [pid 5633] futex(0x7fc2f7c5ce28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5634] <... mknod resumed>) = -1 EFAULT (Bad address) [pid 5634] futex(0x7fc2f7c5ce2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5634] futex(0x7fc2f7c5ce28, FUTEX_WAIT_PRIVATE, 0, NULL) = 0 [pid 5633] <... futex resumed>) = 1 [pid 5634] futex(0x7fc2f7c5ce28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5633] futex(0x7fc2f7c5ce2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 5633] exit_group(0 [pid 5634] <... futex resumed>) = ? [pid 5633] <... exit_group resumed>) = ? [pid 5634] +++ exited with 0 +++ [pid 5633] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5633, si_uid=0, si_status=0, si_utime=5 /* 0.05 s */, si_stime=15 /* 0.15 s */} --- umount2("./11", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./11", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x55557547a790 /* 4 entries */, 32768) = 112 umount2("./11/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./11/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./11/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./11/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./11/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x5555754827d0 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555754827d0 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./11/file1") = 0 umount2("./11/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./11/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./11/binderfs") = 0 getdents64(3, 0x55557547a790 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./11") = 0 mkdir("./12", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5635 attached , child_tidptr=0x5555754796d0) = 5635 [pid 5603] rt_sigprocmask(SIG_SETMASK, [] [pid 5635] set_robust_list(0x5555754796e0, 24 [pid 5603] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5635] <... set_robust_list resumed>) = 0 [pid 5635] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5635] chdir("./12") = 0 [pid 5635] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5635] setpgid(0, 0) = 0 [pid 5635] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5635] write(3, "1000", 4) = 4 [pid 5635] close(3) = 0 [pid 5635] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5635] write(1, "executing program\n", 18) = 18 executing program [pid 5635] futex(0x7fc2f7c5ce2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5635] rt_sigaction(SIGRT_1, {sa_handler=0x7fc2f7bc1b90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fc2f7bb3b60}, NULL, 8) = 0 [pid 5635] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5635] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc2f7b5b000 [pid 5635] mprotect(0x7fc2f7b5c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5635] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5635] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc2f7b7b990, parent_tid=0x7fc2f7b7b990, exit_signal=0, stack=0x7fc2f7b5b000, stack_size=0x202c0, tls=0x7fc2f7b7b6c0}ci2-upstream-fs/strace-static-x86_64: Process 5636 attached => {parent_tid=[5636]}, 88) = 5636 [pid 5635] rt_sigprocmask(SIG_SETMASK, [] [pid 5636] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 5635] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5636] <... rseq resumed>) = 0 [pid 5635] futex(0x7fc2f7c5ce28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5636] set_robust_list(0x7fc2f7b7b9a0, 24 [pid 5635] <... futex resumed>) = 0 [pid 5635] futex(0x7fc2f7c5ce2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5636] <... set_robust_list resumed>) = 0 [pid 5636] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5636] memfd_create("syzkaller", 0) = 3 [pid 5636] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fc2ef75b000 [pid 5636] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5636] munmap(0x7fc2ef75b000, 138412032) = 0 [pid 5636] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5636] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5636] close(3) = 0 [pid 5636] close(4) = 0 [pid 5636] mkdir("./file1", 0777) = 0 [pid 5636] mount("/dev/loop0", "./file1", "jfs", MS_NODEV|MS_POSIXACL|MS_STRICTATIME, "iocharset=koi8-u,nointegrity,iocharset=iso8859-14,errors=continue,discard,errors=remount-ro,integrit"...) = 0 [pid 5636] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5636] chdir("./file1") = 0 [pid 5636] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5636] ioctl(4, LOOP_CLR_FD) = 0 [pid 5636] close(4) = 0 [pid 5636] futex(0x7fc2f7c5ce2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5635] <... futex resumed>) = 0 [pid 5636] futex(0x7fc2f7c5ce28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5635] futex(0x7fc2f7c5ce28, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5635] futex(0x7fc2f7c5ce2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5636] <... futex resumed>) = 0 [pid 5636] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = -1 EFAULT (Bad address) [pid 5636] futex(0x7fc2f7c5ce2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5635] <... futex resumed>) = 0 [pid 5636] futex(0x7fc2f7c5ce28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5635] futex(0x7fc2f7c5ce28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5636] <... futex resumed>) = 0 [pid 5635] <... futex resumed>) = 1 [pid 5636] mknod(NULL, 0100 [pid 5635] futex(0x7fc2f7c5ce2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5636] <... mknod resumed>) = -1 EFAULT (Bad address) [pid 5636] futex(0x7fc2f7c5ce2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [ 108.046303][ T5636] loop0: detected capacity change from 0 to 32768 [pid 5636] futex(0x7fc2f7c5ce28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5635] <... futex resumed>) = 0 [pid 5635] exit_group(0 [pid 5636] <... futex resumed>) = ? [pid 5635] <... exit_group resumed>) = ? [pid 5636] +++ exited with 0 +++ [pid 5635] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5635, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=19 /* 0.19 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 umount2("./12", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./12", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x55557547a790 /* 4 entries */, 32768) = 112 umount2("./12/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./12/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./12/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./12/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./12/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x5555754827d0 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555754827d0 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./12/file1") = 0 umount2("./12/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./12/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./12/binderfs") = 0 getdents64(3, 0x55557547a790 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./12") = 0 mkdir("./13", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5637 attached , child_tidptr=0x5555754796d0) = 5637 [pid 5603] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5637] set_robust_list(0x5555754796e0, 24) = 0 [pid 5637] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5637] chdir("./13") = 0 [pid 5637] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5637] setpgid(0, 0) = 0 [pid 5637] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5637] write(3, "1000", 4) = 4 [pid 5637] close(3) = 0 [pid 5637] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5637] write(1, "executing program\n", 18) = 18 [pid 5637] futex(0x7fc2f7c5ce2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5637] rt_sigaction(SIGRT_1, {sa_handler=0x7fc2f7bc1b90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fc2f7bb3b60}, NULL, 8) = 0 [pid 5637] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5637] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc2f7b5b000 [pid 5637] mprotect(0x7fc2f7b5c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5637] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5637] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc2f7b7b990, parent_tid=0x7fc2f7b7b990, exit_signal=0, stack=0x7fc2f7b5b000, stack_size=0x202c0, tls=0x7fc2f7b7b6c0}ci2-upstream-fs/strace-static-x86_64: Process 5638 attached => {parent_tid=[5638]}, 88) = 5638 [pid 5638] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053) = 0 [pid 5637] rt_sigprocmask(SIG_SETMASK, [] [pid 5638] set_robust_list(0x7fc2f7b7b9a0, 24 [pid 5637] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5638] <... set_robust_list resumed>) = 0 [pid 5637] futex(0x7fc2f7c5ce28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5638] rt_sigprocmask(SIG_SETMASK, [] [pid 5637] <... futex resumed>) = 0 [pid 5638] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5637] futex(0x7fc2f7c5ce2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5638] memfd_create("syzkaller", 0) = 3 [pid 5638] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fc2ef75b000 [pid 5638] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5638] munmap(0x7fc2ef75b000, 138412032) = 0 [pid 5638] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5638] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5638] close(3) = 0 [pid 5638] close(4) = 0 [pid 5638] mkdir("./file1", 0777) = 0 [ 108.704235][ T5638] loop0: detected capacity change from 0 to 32768 [pid 5638] mount("/dev/loop0", "./file1", "jfs", MS_NODEV|MS_POSIXACL|MS_STRICTATIME, "iocharset=koi8-u,nointegrity,iocharset=iso8859-14,errors=continue,discard,errors=remount-ro,integrit"...) = 0 [pid 5638] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5638] chdir("./file1") = 0 [pid 5638] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5638] ioctl(4, LOOP_CLR_FD) = 0 [pid 5638] close(4) = 0 [pid 5638] futex(0x7fc2f7c5ce2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5637] <... futex resumed>) = 0 [pid 5638] futex(0x7fc2f7c5ce28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5637] futex(0x7fc2f7c5ce28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5638] <... futex resumed>) = 0 [pid 5637] <... futex resumed>) = 1 [pid 5638] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5637] futex(0x7fc2f7c5ce2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5638] <... openat resumed>) = -1 EFAULT (Bad address) [pid 5638] futex(0x7fc2f7c5ce2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5638] futex(0x7fc2f7c5ce28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5637] <... futex resumed>) = 0 [pid 5637] futex(0x7fc2f7c5ce28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5638] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5637] <... futex resumed>) = 0 [pid 5638] mknod(NULL, 0100 [pid 5637] futex(0x7fc2f7c5ce2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5638] <... mknod resumed>) = -1 EFAULT (Bad address) [pid 5638] futex(0x7fc2f7c5ce2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5638] futex(0x7fc2f7c5ce28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5637] <... futex resumed>) = 0 [pid 5637] exit_group(0) = ? [pid 5638] <... futex resumed>) = ? [pid 5638] +++ exited with 0 +++ [pid 5637] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5637, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=28 /* 0.28 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 umount2("./13", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./13", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x55557547a790 /* 4 entries */, 32768) = 112 umount2("./13/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./13/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./13/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./13/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./13/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x5555754827d0 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555754827d0 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./13/file1") = 0 umount2("./13/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./13/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./13/binderfs") = 0 getdents64(3, 0x55557547a790 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./13") = 0 mkdir("./14", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5639 attached , child_tidptr=0x5555754796d0) = 5639 [pid 5603] rt_sigprocmask(SIG_SETMASK, [] [pid 5639] set_robust_list(0x5555754796e0, 24 [pid 5603] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5639] <... set_robust_list resumed>) = 0 [pid 5639] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5639] chdir("./14") = 0 [pid 5639] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5639] setpgid(0, 0) = 0 [pid 5639] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5639] write(3, "1000", 4) = 4 [pid 5639] close(3) = 0 [pid 5639] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5639] write(1, "executing program\n", 18) = 18 [pid 5639] futex(0x7fc2f7c5ce2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5639] rt_sigaction(SIGRT_1, {sa_handler=0x7fc2f7bc1b90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fc2f7bb3b60}, NULL, 8) = 0 [pid 5639] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5639] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc2f7b5b000 [pid 5639] mprotect(0x7fc2f7b5c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5639] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5639] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc2f7b7b990, parent_tid=0x7fc2f7b7b990, exit_signal=0, stack=0x7fc2f7b5b000, stack_size=0x202c0, tls=0x7fc2f7b7b6c0}ci2-upstream-fs/strace-static-x86_64: Process 5640 attached [pid 5640] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053) = 0 [pid 5639] <... clone3 resumed> => {parent_tid=[5640]}, 88) = 5640 [pid 5640] set_robust_list(0x7fc2f7b7b9a0, 24 [pid 5639] rt_sigprocmask(SIG_SETMASK, [] [pid 5640] <... set_robust_list resumed>) = 0 [pid 5639] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5640] rt_sigprocmask(SIG_SETMASK, [] [pid 5639] futex(0x7fc2f7c5ce28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5640] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5639] <... futex resumed>) = 0 [pid 5640] memfd_create("syzkaller", 0 [pid 5639] futex(0x7fc2f7c5ce2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5640] <... memfd_create resumed>) = 3 [pid 5640] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fc2ef75b000 [pid 5640] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5640] munmap(0x7fc2ef75b000, 138412032) = 0 [pid 5640] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5640] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5640] close(3) = 0 [pid 5640] close(4) = 0 [pid 5640] mkdir("./file1", 0777) = 0 [pid 5640] mount("/dev/loop0", "./file1", "jfs", MS_NODEV|MS_POSIXACL|MS_STRICTATIME, "iocharset=koi8-u,nointegrity,iocharset=iso8859-14,errors=continue,discard,errors=remount-ro,integrit"...) = 0 [pid 5640] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5640] chdir("./file1") = 0 [pid 5640] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5640] ioctl(4, LOOP_CLR_FD) = 0 [pid 5640] close(4) = 0 [pid 5640] futex(0x7fc2f7c5ce2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5639] <... futex resumed>) = 0 [pid 5640] futex(0x7fc2f7c5ce28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5639] futex(0x7fc2f7c5ce28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5640] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5639] <... futex resumed>) = 0 [pid 5640] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5639] futex(0x7fc2f7c5ce2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5640] <... openat resumed>) = -1 EFAULT (Bad address) [ 109.301929][ T5640] loop0: detected capacity change from 0 to 32768 [pid 5640] futex(0x7fc2f7c5ce2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5639] <... futex resumed>) = 0 [pid 5640] futex(0x7fc2f7c5ce28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5639] futex(0x7fc2f7c5ce28, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5640] <... futex resumed>) = 0 [pid 5640] mknod(NULL, 0100 [pid 5639] futex(0x7fc2f7c5ce2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5640] <... mknod resumed>) = -1 EFAULT (Bad address) [pid 5640] futex(0x7fc2f7c5ce2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5639] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5640] <... futex resumed>) = 0 [pid 5639] exit_group(0 [pid 5640] futex(0x7fc2f7c5ce28, FUTEX_WAIT_PRIVATE, 0, NULL) = ? [pid 5639] <... exit_group resumed>) = ? [pid 5640] +++ exited with 0 +++ [pid 5639] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5639, si_uid=0, si_status=0, si_utime=0, si_stime=21 /* 0.21 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 umount2("./14", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./14", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x55557547a790 /* 4 entries */, 32768) = 112 umount2("./14/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./14/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./14/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./14/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./14/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x5555754827d0 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555754827d0 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./14/file1") = 0 umount2("./14/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./14/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./14/binderfs") = 0 getdents64(3, 0x55557547a790 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./14") = 0 mkdir("./15", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5641 attached [pid 5641] set_robust_list(0x5555754796e0, 24 [pid 5603] <... clone resumed>, child_tidptr=0x5555754796d0) = 5641 [pid 5641] <... set_robust_list resumed>) = 0 [pid 5603] rt_sigprocmask(SIG_SETMASK, [] [pid 5641] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5603] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5641] chdir("./15") = 0 [pid 5641] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5641] setpgid(0, 0) = 0 [pid 5641] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5641] write(3, "1000", 4) = 4 [pid 5641] close(3) = 0 [pid 5641] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5641] write(1, "executing program\n", 18) = 18 [pid 5641] futex(0x7fc2f7c5ce2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5641] rt_sigaction(SIGRT_1, {sa_handler=0x7fc2f7bc1b90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fc2f7bb3b60}, NULL, 8) = 0 [pid 5641] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5641] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc2f7b5b000 [pid 5641] mprotect(0x7fc2f7b5c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5641] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5641] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc2f7b7b990, parent_tid=0x7fc2f7b7b990, exit_signal=0, stack=0x7fc2f7b5b000, stack_size=0x202c0, tls=0x7fc2f7b7b6c0}ci2-upstream-fs/strace-static-x86_64: Process 5642 attached => {parent_tid=[5642]}, 88) = 5642 [pid 5642] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 5641] rt_sigprocmask(SIG_SETMASK, [] [pid 5642] <... rseq resumed>) = 0 [pid 5641] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5642] set_robust_list(0x7fc2f7b7b9a0, 24 [pid 5641] futex(0x7fc2f7c5ce28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5642] <... set_robust_list resumed>) = 0 [pid 5641] <... futex resumed>) = 0 [pid 5641] futex(0x7fc2f7c5ce2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5642] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5642] memfd_create("syzkaller", 0) = 3 [pid 5642] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fc2ef75b000 [pid 5642] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5642] munmap(0x7fc2ef75b000, 138412032) = 0 [pid 5642] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5642] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5642] close(3) = 0 [pid 5642] close(4) = 0 [pid 5642] mkdir("./file1", 0777) = 0 [pid 5642] mount("/dev/loop0", "./file1", "jfs", MS_NODEV|MS_POSIXACL|MS_STRICTATIME, "iocharset=koi8-u,nointegrity,iocharset=iso8859-14,errors=continue,discard,errors=remount-ro,integrit"...) = 0 [pid 5642] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5642] chdir("./file1") = 0 [pid 5642] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5642] ioctl(4, LOOP_CLR_FD) = 0 [pid 5642] close(4) = 0 [pid 5642] futex(0x7fc2f7c5ce2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5642] futex(0x7fc2f7c5ce28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5641] <... futex resumed>) = 0 [pid 5641] futex(0x7fc2f7c5ce28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5642] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5641] <... futex resumed>) = 0 [pid 5642] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5641] futex(0x7fc2f7c5ce2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5642] <... openat resumed>) = -1 EFAULT (Bad address) [pid 5642] futex(0x7fc2f7c5ce2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5641] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5642] <... futex resumed>) = 0 [pid 5641] futex(0x7fc2f7c5ce28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5642] mknod(NULL, 0100 [pid 5641] <... futex resumed>) = 0 [pid 5642] <... mknod resumed>) = -1 EFAULT (Bad address) [pid 5641] futex(0x7fc2f7c5ce2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5642] futex(0x7fc2f7c5ce2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5641] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5642] <... futex resumed>) = 0 [pid 5641] exit_group(0 [pid 5642] futex(0x7fc2f7c5ce28, FUTEX_WAIT_PRIVATE, 0, NULL) = ? [pid 5641] <... exit_group resumed>) = ? [pid 5642] +++ exited with 0 +++ [pid 5641] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5641, si_uid=0, si_status=0, si_utime=0, si_stime=22 /* 0.22 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 umount2("./15", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./15", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x55557547a790 /* 4 entries */, 32768) = 112 [ 109.858587][ T5642] loop0: detected capacity change from 0 to 32768 umount2("./15/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./15/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./15/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./15/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./15/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x5555754827d0 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555754827d0 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./15/file1") = 0 umount2("./15/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./15/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./15/binderfs") = 0 getdents64(3, 0x55557547a790 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./15") = 0 mkdir("./16", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5643 attached , child_tidptr=0x5555754796d0) = 5643 [pid 5643] set_robust_list(0x5555754796e0, 24 [pid 5603] rt_sigprocmask(SIG_SETMASK, [] [pid 5643] <... set_robust_list resumed>) = 0 [pid 5603] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5643] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5643] chdir("./16") = 0 [pid 5643] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5643] setpgid(0, 0) = 0 [pid 5643] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5643] write(3, "1000", 4) = 4 [pid 5643] close(3) = 0 [pid 5643] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5643] write(1, "executing program\n", 18) = 18 executing program [pid 5643] futex(0x7fc2f7c5ce2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5643] rt_sigaction(SIGRT_1, {sa_handler=0x7fc2f7bc1b90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fc2f7bb3b60}, NULL, 8) = 0 [pid 5643] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5643] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc2f7b5b000 [pid 5643] mprotect(0x7fc2f7b5c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5643] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5643] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc2f7b7b990, parent_tid=0x7fc2f7b7b990, exit_signal=0, stack=0x7fc2f7b5b000, stack_size=0x202c0, tls=0x7fc2f7b7b6c0}ci2-upstream-fs/strace-static-x86_64: Process 5644 attached [pid 5644] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 5643] <... clone3 resumed> => {parent_tid=[5644]}, 88) = 5644 [pid 5644] <... rseq resumed>) = 0 [pid 5643] rt_sigprocmask(SIG_SETMASK, [] [pid 5644] set_robust_list(0x7fc2f7b7b9a0, 24) = 0 [pid 5643] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5644] rt_sigprocmask(SIG_SETMASK, [] [pid 5643] futex(0x7fc2f7c5ce28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5644] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5643] <... futex resumed>) = 0 [pid 5644] memfd_create("syzkaller", 0 [pid 5643] futex(0x7fc2f7c5ce2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5644] <... memfd_create resumed>) = 3 [pid 5644] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fc2ef75b000 [pid 5644] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5644] munmap(0x7fc2ef75b000, 138412032) = 0 [pid 5644] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5644] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5644] close(3) = 0 [pid 5644] close(4) = 0 [pid 5644] mkdir("./file1", 0777) = 0 [pid 5644] mount("/dev/loop0", "./file1", "jfs", MS_NODEV|MS_POSIXACL|MS_STRICTATIME, "iocharset=koi8-u,nointegrity,iocharset=iso8859-14,errors=continue,discard,errors=remount-ro,integrit"...) = 0 [pid 5644] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5644] chdir("./file1") = 0 [pid 5644] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5644] ioctl(4, LOOP_CLR_FD) = 0 [pid 5644] close(4) = 0 [pid 5644] futex(0x7fc2f7c5ce2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5644] futex(0x7fc2f7c5ce28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5643] <... futex resumed>) = 0 [pid 5643] futex(0x7fc2f7c5ce28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5644] <... futex resumed>) = 0 [pid 5643] <... futex resumed>) = 1 [pid 5644] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5643] futex(0x7fc2f7c5ce2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5644] <... openat resumed>) = -1 EFAULT (Bad address) [pid 5644] futex(0x7fc2f7c5ce2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5643] <... futex resumed>) = 0 [ 110.314376][ T5644] loop0: detected capacity change from 0 to 32768 [pid 5644] futex(0x7fc2f7c5ce28, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 5643] futex(0x7fc2f7c5ce28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5644] mknod(NULL, 0100 [pid 5643] <... futex resumed>) = 0 [pid 5644] <... mknod resumed>) = -1 EFAULT (Bad address) [pid 5643] futex(0x7fc2f7c5ce2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5644] futex(0x7fc2f7c5ce2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5643] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5644] <... futex resumed>) = 0 [pid 5643] exit_group(0 [pid 5644] futex(0x7fc2f7c5ce28, FUTEX_WAIT_PRIVATE, 0, NULL) = ? [pid 5643] <... exit_group resumed>) = ? [pid 5644] +++ exited with 0 +++ [pid 5643] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5643, si_uid=0, si_status=0, si_utime=4 /* 0.04 s */, si_stime=22 /* 0.22 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 umount2("./16", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./16", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x55557547a790 /* 4 entries */, 32768) = 112 umount2("./16/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./16/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./16/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./16/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./16/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x5555754827d0 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555754827d0 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./16/file1") = 0 umount2("./16/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./16/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./16/binderfs") = 0 getdents64(3, 0x55557547a790 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./16") = 0 mkdir("./17", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5645 attached , child_tidptr=0x5555754796d0) = 5645 [pid 5603] rt_sigprocmask(SIG_SETMASK, [] [pid 5645] set_robust_list(0x5555754796e0, 24) = 0 [pid 5603] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5645] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5645] chdir("./17") = 0 [pid 5645] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5645] setpgid(0, 0) = 0 [pid 5645] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5645] write(3, "1000", 4) = 4 [pid 5645] close(3) = 0 [pid 5645] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5645] write(1, "executing program\n", 18) = 18 [pid 5645] futex(0x7fc2f7c5ce2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5645] rt_sigaction(SIGRT_1, {sa_handler=0x7fc2f7bc1b90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fc2f7bb3b60}, NULL, 8) = 0 [pid 5645] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5645] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc2f7b5b000 [pid 5645] mprotect(0x7fc2f7b5c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5645] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5645] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc2f7b7b990, parent_tid=0x7fc2f7b7b990, exit_signal=0, stack=0x7fc2f7b5b000, stack_size=0x202c0, tls=0x7fc2f7b7b6c0}ci2-upstream-fs/strace-static-x86_64: Process 5646 attached [pid 5646] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 5645] <... clone3 resumed> => {parent_tid=[5646]}, 88) = 5646 [pid 5646] <... rseq resumed>) = 0 [pid 5645] rt_sigprocmask(SIG_SETMASK, [] [pid 5646] set_robust_list(0x7fc2f7b7b9a0, 24 [pid 5645] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5646] <... set_robust_list resumed>) = 0 [pid 5645] futex(0x7fc2f7c5ce28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5646] rt_sigprocmask(SIG_SETMASK, [] [pid 5645] <... futex resumed>) = 0 [pid 5646] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5646] memfd_create("syzkaller", 0 [pid 5645] futex(0x7fc2f7c5ce2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5646] <... memfd_create resumed>) = 3 [pid 5646] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fc2ef75b000 [pid 5646] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5646] munmap(0x7fc2ef75b000, 138412032) = 0 [pid 5646] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5646] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5646] close(3) = 0 [pid 5646] close(4) = 0 [pid 5646] mkdir("./file1", 0777) = 0 [pid 5646] mount("/dev/loop0", "./file1", "jfs", MS_NODEV|MS_POSIXACL|MS_STRICTATIME, "iocharset=koi8-u,nointegrity,iocharset=iso8859-14,errors=continue,discard,errors=remount-ro,integrit"...) = 0 [pid 5646] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5646] chdir("./file1") = 0 [pid 5646] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5646] ioctl(4, LOOP_CLR_FD) = 0 [pid 5646] close(4) = 0 [pid 5646] futex(0x7fc2f7c5ce2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5646] futex(0x7fc2f7c5ce28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5645] <... futex resumed>) = 0 [pid 5645] futex(0x7fc2f7c5ce28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5646] <... futex resumed>) = 0 [pid 5645] <... futex resumed>) = 1 [pid 5646] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = -1 EFAULT (Bad address) [pid 5645] futex(0x7fc2f7c5ce2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5646] futex(0x7fc2f7c5ce2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5645] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5646] <... futex resumed>) = 0 [pid 5645] futex(0x7fc2f7c5ce28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5646] mknod(NULL, 0100 [pid 5645] <... futex resumed>) = 0 [pid 5646] <... mknod resumed>) = -1 EFAULT (Bad address) [pid 5646] futex(0x7fc2f7c5ce2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5645] futex(0x7fc2f7c5ce2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5646] <... futex resumed>) = 0 [pid 5645] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5646] futex(0x7fc2f7c5ce28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5645] exit_group(0 [pid 5646] <... futex resumed>) = ? [pid 5646] +++ exited with 0 +++ [pid 5645] <... exit_group resumed>) = ? [pid 5645] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5645, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=20 /* 0.20 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [ 110.827470][ T5646] loop0: detected capacity change from 0 to 32768 umount2("./17", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./17", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x55557547a790 /* 4 entries */, 32768) = 112 umount2("./17/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./17/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./17/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./17/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./17/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x5555754827d0 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555754827d0 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./17/file1") = 0 umount2("./17/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./17/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./17/binderfs") = 0 getdents64(3, 0x55557547a790 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./17") = 0 mkdir("./18", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5647 attached , child_tidptr=0x5555754796d0) = 5647 [pid 5603] rt_sigprocmask(SIG_SETMASK, [] [pid 5647] set_robust_list(0x5555754796e0, 24 [pid 5603] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5647] <... set_robust_list resumed>) = 0 [pid 5647] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5647] chdir("./18") = 0 [pid 5647] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5647] setpgid(0, 0) = 0 [pid 5647] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5647] write(3, "1000", 4) = 4 [pid 5647] close(3) = 0 [pid 5647] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5647] write(1, "executing program\n", 18) = 18 [pid 5647] futex(0x7fc2f7c5ce2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5647] rt_sigaction(SIGRT_1, {sa_handler=0x7fc2f7bc1b90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fc2f7bb3b60}, NULL, 8) = 0 [pid 5647] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5647] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc2f7b5b000 [pid 5647] mprotect(0x7fc2f7b5c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5647] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5647] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc2f7b7b990, parent_tid=0x7fc2f7b7b990, exit_signal=0, stack=0x7fc2f7b5b000, stack_size=0x202c0, tls=0x7fc2f7b7b6c0}ci2-upstream-fs/strace-static-x86_64: Process 5648 attached [pid 5648] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053) = 0 [pid 5647] <... clone3 resumed> => {parent_tid=[5648]}, 88) = 5648 [pid 5648] set_robust_list(0x7fc2f7b7b9a0, 24 [pid 5647] rt_sigprocmask(SIG_SETMASK, [] [pid 5648] <... set_robust_list resumed>) = 0 [pid 5648] rt_sigprocmask(SIG_SETMASK, [] [pid 5647] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5648] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5648] futex(0x7fc2f7c5ce28, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 5647] futex(0x7fc2f7c5ce28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5647] futex(0x7fc2f7c5ce2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5648] memfd_create("syzkaller", 0) = 3 [pid 5648] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fc2ef75b000 [pid 5648] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5648] munmap(0x7fc2ef75b000, 138412032) = 0 [pid 5648] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5648] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5648] close(3) = 0 [pid 5648] close(4) = 0 [pid 5648] mkdir("./file1", 0777) = 0 [pid 5648] mount("/dev/loop0", "./file1", "jfs", MS_NODEV|MS_POSIXACL|MS_STRICTATIME, "iocharset=koi8-u,nointegrity,iocharset=iso8859-14,errors=continue,discard,errors=remount-ro,integrit"...) = 0 [pid 5648] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5648] chdir("./file1") = 0 [pid 5648] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5648] ioctl(4, LOOP_CLR_FD) = 0 [pid 5648] close(4) = 0 [pid 5648] futex(0x7fc2f7c5ce2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [ 111.337437][ T5648] loop0: detected capacity change from 0 to 32768 [pid 5647] <... futex resumed>) = 0 [pid 5648] futex(0x7fc2f7c5ce28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5647] futex(0x7fc2f7c5ce28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5648] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5648] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5647] <... futex resumed>) = 0 [pid 5648] <... openat resumed>) = -1 EFAULT (Bad address) [pid 5647] futex(0x7fc2f7c5ce2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5648] futex(0x7fc2f7c5ce2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5647] <... futex resumed>) = 0 [pid 5648] mknod(NULL, 0100 [pid 5647] futex(0x7fc2f7c5ce28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5648] <... mknod resumed>) = -1 EFAULT (Bad address) [pid 5647] <... futex resumed>) = 0 [pid 5648] futex(0x7fc2f7c5ce2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5648] futex(0x7fc2f7c5ce28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5647] futex(0x7fc2f7c5ce2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 5647] exit_group(0 [pid 5648] <... futex resumed>) = ? [pid 5647] <... exit_group resumed>) = ? [pid 5648] +++ exited with 0 +++ [pid 5647] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5647, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=17 /* 0.17 s */} --- umount2("./18", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./18", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x55557547a790 /* 4 entries */, 32768) = 112 umount2("./18/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./18/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./18/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./18/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./18/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x5555754827d0 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555754827d0 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./18/file1") = 0 umount2("./18/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./18/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./18/binderfs") = 0 getdents64(3, 0x55557547a790 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./18") = 0 mkdir("./19", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5649 attached [pid 5649] set_robust_list(0x5555754796e0, 24 [pid 5603] <... clone resumed>, child_tidptr=0x5555754796d0) = 5649 [pid 5649] <... set_robust_list resumed>) = 0 [pid 5603] rt_sigprocmask(SIG_SETMASK, [] [pid 5649] rt_sigprocmask(SIG_SETMASK, [] [pid 5603] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5649] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5649] chdir("./19") = 0 [pid 5649] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5649] setpgid(0, 0) = 0 [pid 5649] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5649] write(3, "1000", 4) = 4 [pid 5649] close(3) = 0 [pid 5649] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5649] write(1, "executing program\n", 18) = 18 executing program [pid 5649] futex(0x7fc2f7c5ce2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5649] rt_sigaction(SIGRT_1, {sa_handler=0x7fc2f7bc1b90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fc2f7bb3b60}, NULL, 8) = 0 [pid 5649] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5649] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc2f7b5b000 [pid 5649] mprotect(0x7fc2f7b5c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5649] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5649] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc2f7b7b990, parent_tid=0x7fc2f7b7b990, exit_signal=0, stack=0x7fc2f7b5b000, stack_size=0x202c0, tls=0x7fc2f7b7b6c0}ci2-upstream-fs/strace-static-x86_64: Process 5650 attached [pid 5650] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053) = 0 [pid 5649] <... clone3 resumed> => {parent_tid=[5650]}, 88) = 5650 [pid 5650] set_robust_list(0x7fc2f7b7b9a0, 24) = 0 [pid 5649] rt_sigprocmask(SIG_SETMASK, [] [pid 5650] rt_sigprocmask(SIG_SETMASK, [] [pid 5649] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5650] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5649] futex(0x7fc2f7c5ce28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5650] memfd_create("syzkaller", 0 [pid 5649] <... futex resumed>) = 0 [pid 5649] futex(0x7fc2f7c5ce2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5650] <... memfd_create resumed>) = 3 [pid 5650] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fc2ef75b000 [pid 5650] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5650] munmap(0x7fc2ef75b000, 138412032) = 0 [pid 5650] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5650] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5650] close(3) = 0 [pid 5650] close(4) = 0 [pid 5650] mkdir("./file1", 0777) = 0 [pid 5650] mount("/dev/loop0", "./file1", "jfs", MS_NODEV|MS_POSIXACL|MS_STRICTATIME, "iocharset=koi8-u,nointegrity,iocharset=iso8859-14,errors=continue,discard,errors=remount-ro,integrit"...) = 0 [pid 5650] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5650] chdir("./file1") = 0 [pid 5650] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5650] ioctl(4, LOOP_CLR_FD) = 0 [pid 5650] close(4) = 0 [pid 5650] futex(0x7fc2f7c5ce2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5649] <... futex resumed>) = 0 [pid 5650] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5649] futex(0x7fc2f7c5ce28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5650] <... openat resumed>) = -1 EFAULT (Bad address) [pid 5649] <... futex resumed>) = 0 [pid 5649] futex(0x7fc2f7c5ce2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5650] futex(0x7fc2f7c5ce2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5649] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5650] futex(0x7fc2f7c5ce28, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 5649] futex(0x7fc2f7c5ce28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5650] mknod(NULL, 0100 [pid 5649] <... futex resumed>) = 0 [pid 5650] <... mknod resumed>) = -1 EFAULT (Bad address) [pid 5650] futex(0x7fc2f7c5ce2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5649] futex(0x7fc2f7c5ce2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5650] <... futex resumed>) = 0 [pid 5650] futex(0x7fc2f7c5ce28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5649] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5649] exit_group(0 [pid 5650] <... futex resumed>) = ? [pid 5649] <... exit_group resumed>) = ? [pid 5650] +++ exited with 0 +++ [pid 5649] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5649, si_uid=0, si_status=0, si_utime=0, si_stime=21 /* 0.21 s */} --- [ 111.877380][ T5650] loop0: detected capacity change from 0 to 32768 restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 umount2("./19", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./19", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x55557547a790 /* 4 entries */, 32768) = 112 umount2("./19/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./19/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./19/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./19/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./19/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x5555754827d0 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555754827d0 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./19/file1") = 0 umount2("./19/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./19/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./19/binderfs") = 0 getdents64(3, 0x55557547a790 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./19") = 0 mkdir("./20", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5651 attached , child_tidptr=0x5555754796d0) = 5651 [pid 5603] rt_sigprocmask(SIG_SETMASK, [] [pid 5651] set_robust_list(0x5555754796e0, 24 [pid 5603] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5651] <... set_robust_list resumed>) = 0 [pid 5651] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5651] chdir("./20") = 0 [pid 5651] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5651] setpgid(0, 0) = 0 [pid 5651] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5651] write(3, "1000", 4) = 4 [pid 5651] close(3) = 0 [pid 5651] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5651] write(1, "executing program\n", 18) = 18 [pid 5651] futex(0x7fc2f7c5ce2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 executing program [pid 5651] rt_sigaction(SIGRT_1, {sa_handler=0x7fc2f7bc1b90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fc2f7bb3b60}, NULL, 8) = 0 [pid 5651] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5651] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc2f7b5b000 [pid 5651] mprotect(0x7fc2f7b5c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5651] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5651] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc2f7b7b990, parent_tid=0x7fc2f7b7b990, exit_signal=0, stack=0x7fc2f7b5b000, stack_size=0x202c0, tls=0x7fc2f7b7b6c0}ci2-upstream-fs/strace-static-x86_64: Process 5652 attached => {parent_tid=[5652]}, 88) = 5652 [pid 5652] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053) = 0 [pid 5651] rt_sigprocmask(SIG_SETMASK, [] [pid 5652] set_robust_list(0x7fc2f7b7b9a0, 24) = 0 [pid 5651] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5652] rt_sigprocmask(SIG_SETMASK, [] [pid 5651] futex(0x7fc2f7c5ce28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5652] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5652] memfd_create("syzkaller", 0 [pid 5651] <... futex resumed>) = 0 [pid 5651] futex(0x7fc2f7c5ce2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5652] <... memfd_create resumed>) = 3 [pid 5652] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fc2ef75b000 [pid 5652] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5652] munmap(0x7fc2ef75b000, 138412032) = 0 [pid 5652] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5652] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5652] close(3) = 0 [pid 5652] close(4) = 0 [pid 5652] mkdir("./file1", 0777) = 0 [pid 5652] mount("/dev/loop0", "./file1", "jfs", MS_NODEV|MS_POSIXACL|MS_STRICTATIME, "iocharset=koi8-u,nointegrity,iocharset=iso8859-14,errors=continue,discard,errors=remount-ro,integrit"...) = 0 [ 112.355305][ T5652] loop0: detected capacity change from 0 to 32768 [pid 5652] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5652] chdir("./file1") = 0 [pid 5652] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5652] ioctl(4, LOOP_CLR_FD) = 0 [pid 5652] close(4) = 0 [pid 5652] futex(0x7fc2f7c5ce2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5651] <... futex resumed>) = 0 [pid 5652] futex(0x7fc2f7c5ce28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5651] futex(0x7fc2f7c5ce28, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5652] <... futex resumed>) = 0 [pid 5652] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5651] futex(0x7fc2f7c5ce2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5652] <... openat resumed>) = -1 EFAULT (Bad address) [pid 5652] futex(0x7fc2f7c5ce2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5651] <... futex resumed>) = 0 [pid 5652] futex(0x7fc2f7c5ce28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5651] futex(0x7fc2f7c5ce28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5652] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5651] <... futex resumed>) = 0 [pid 5652] mknod(NULL, 0100 [pid 5651] futex(0x7fc2f7c5ce2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5652] <... mknod resumed>) = -1 EFAULT (Bad address) [pid 5652] futex(0x7fc2f7c5ce2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5651] <... futex resumed>) = 0 [pid 5652] futex(0x7fc2f7c5ce28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5651] exit_group(0 [pid 5652] <... futex resumed>) = ? [pid 5651] <... exit_group resumed>) = ? [pid 5652] +++ exited with 0 +++ [pid 5651] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5651, si_uid=0, si_status=0, si_utime=6 /* 0.06 s */, si_stime=18 /* 0.18 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 umount2("./20", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./20", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x55557547a790 /* 4 entries */, 32768) = 112 umount2("./20/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./20/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./20/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./20/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./20/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x5555754827d0 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555754827d0 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./20/file1") = 0 umount2("./20/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./20/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./20/binderfs") = 0 getdents64(3, 0x55557547a790 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./20") = 0 mkdir("./21", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5653 attached , child_tidptr=0x5555754796d0) = 5653 [pid 5603] rt_sigprocmask(SIG_SETMASK, [] [pid 5653] set_robust_list(0x5555754796e0, 24 [pid 5603] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5653] <... set_robust_list resumed>) = 0 [pid 5653] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5653] chdir("./21") = 0 [pid 5653] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5653] setpgid(0, 0) = 0 [pid 5653] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5653] write(3, "1000", 4) = 4 [pid 5653] close(3) = 0 [pid 5653] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5653] write(1, "executing program\n", 18) = 18 executing program [pid 5653] futex(0x7fc2f7c5ce2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5653] rt_sigaction(SIGRT_1, {sa_handler=0x7fc2f7bc1b90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fc2f7bb3b60}, NULL, 8) = 0 [pid 5653] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5653] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc2f7b5b000 [pid 5653] mprotect(0x7fc2f7b5c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5653] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5653] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc2f7b7b990, parent_tid=0x7fc2f7b7b990, exit_signal=0, stack=0x7fc2f7b5b000, stack_size=0x202c0, tls=0x7fc2f7b7b6c0}ci2-upstream-fs/strace-static-x86_64: Process 5654 attached => {parent_tid=[5654]}, 88) = 5654 [pid 5654] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 5653] rt_sigprocmask(SIG_SETMASK, [] [pid 5654] <... rseq resumed>) = 0 [pid 5653] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5653] futex(0x7fc2f7c5ce28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5654] set_robust_list(0x7fc2f7b7b9a0, 24) = 0 [pid 5653] <... futex resumed>) = 0 [pid 5654] rt_sigprocmask(SIG_SETMASK, [] [pid 5653] futex(0x7fc2f7c5ce2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5654] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5654] memfd_create("syzkaller", 0) = 3 [pid 5654] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fc2ef75b000 [pid 5654] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5654] munmap(0x7fc2ef75b000, 138412032) = 0 [pid 5654] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5654] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5654] close(3) = 0 [pid 5654] close(4) = 0 [pid 5654] mkdir("./file1", 0777) = 0 [pid 5654] mount("/dev/loop0", "./file1", "jfs", MS_NODEV|MS_POSIXACL|MS_STRICTATIME, "iocharset=koi8-u,nointegrity,iocharset=iso8859-14,errors=continue,discard,errors=remount-ro,integrit"...) = 0 [pid 5654] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5654] chdir("./file1") = 0 [pid 5654] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [ 112.893181][ T5654] loop0: detected capacity change from 0 to 32768 [pid 5654] ioctl(4, LOOP_CLR_FD) = 0 [pid 5654] close(4) = 0 [pid 5654] futex(0x7fc2f7c5ce2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5653] <... futex resumed>) = 0 [pid 5654] <... futex resumed>) = 1 [pid 5653] futex(0x7fc2f7c5ce28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5654] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5653] <... futex resumed>) = 0 [pid 5654] <... openat resumed>) = -1 EFAULT (Bad address) [pid 5653] futex(0x7fc2f7c5ce2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5654] futex(0x7fc2f7c5ce2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5653] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5654] <... futex resumed>) = 0 [pid 5654] mknod(NULL, 0100 [pid 5653] futex(0x7fc2f7c5ce28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5654] <... mknod resumed>) = -1 EFAULT (Bad address) [pid 5653] <... futex resumed>) = 0 [pid 5654] futex(0x7fc2f7c5ce2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5653] futex(0x7fc2f7c5ce2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5654] <... futex resumed>) = 0 [pid 5653] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5654] futex(0x7fc2f7c5ce28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5653] exit_group(0 [pid 5654] <... futex resumed>) = ? [pid 5653] <... exit_group resumed>) = ? [pid 5654] +++ exited with 0 +++ [pid 5653] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5653, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=19 /* 0.19 s */} --- umount2("./21", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./21", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x55557547a790 /* 4 entries */, 32768) = 112 umount2("./21/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./21/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./21/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./21/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./21/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x5555754827d0 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555754827d0 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./21/file1") = 0 umount2("./21/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./21/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./21/binderfs") = 0 getdents64(3, 0x55557547a790 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./21") = 0 mkdir("./22", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5655 attached , child_tidptr=0x5555754796d0) = 5655 [pid 5603] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5655] set_robust_list(0x5555754796e0, 24) = 0 [pid 5655] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5655] chdir("./22") = 0 [pid 5655] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5655] setpgid(0, 0) = 0 [pid 5655] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5655] write(3, "1000", 4) = 4 [pid 5655] close(3) = 0 [pid 5655] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5655] write(1, "executing program\n", 18) = 18 executing program [pid 5655] futex(0x7fc2f7c5ce2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5655] rt_sigaction(SIGRT_1, {sa_handler=0x7fc2f7bc1b90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fc2f7bb3b60}, NULL, 8) = 0 [pid 5655] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5655] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc2f7b5b000 [pid 5655] mprotect(0x7fc2f7b5c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5655] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5655] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc2f7b7b990, parent_tid=0x7fc2f7b7b990, exit_signal=0, stack=0x7fc2f7b5b000, stack_size=0x202c0, tls=0x7fc2f7b7b6c0}ci2-upstream-fs/strace-static-x86_64: Process 5656 attached => {parent_tid=[5656]}, 88) = 5656 [pid 5656] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 5655] rt_sigprocmask(SIG_SETMASK, [] [pid 5656] <... rseq resumed>) = 0 [pid 5656] set_robust_list(0x7fc2f7b7b9a0, 24 [pid 5655] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5656] <... set_robust_list resumed>) = 0 [pid 5655] futex(0x7fc2f7c5ce28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5656] rt_sigprocmask(SIG_SETMASK, [] [pid 5655] <... futex resumed>) = 0 [pid 5656] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5655] futex(0x7fc2f7c5ce2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5656] memfd_create("syzkaller", 0) = 3 [pid 5656] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fc2ef75b000 [pid 5656] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5656] munmap(0x7fc2ef75b000, 138412032) = 0 [pid 5656] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5656] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5656] close(3) = 0 [pid 5656] close(4) = 0 [pid 5656] mkdir("./file1", 0777) = 0 [pid 5656] mount("/dev/loop0", "./file1", "jfs", MS_NODEV|MS_POSIXACL|MS_STRICTATIME, "iocharset=koi8-u,nointegrity,iocharset=iso8859-14,errors=continue,discard,errors=remount-ro,integrit"...) = 0 [pid 5656] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5656] chdir("./file1") = 0 [pid 5656] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [ 113.410643][ T5656] loop0: detected capacity change from 0 to 32768 [pid 5656] ioctl(4, LOOP_CLR_FD) = 0 [pid 5656] close(4) = 0 [pid 5656] futex(0x7fc2f7c5ce2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5655] <... futex resumed>) = 0 [pid 5656] <... futex resumed>) = 1 [pid 5655] futex(0x7fc2f7c5ce28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5656] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = -1 EFAULT (Bad address) [pid 5655] <... futex resumed>) = 0 [pid 5656] futex(0x7fc2f7c5ce2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5655] futex(0x7fc2f7c5ce2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5656] <... futex resumed>) = 0 [pid 5655] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5656] futex(0x7fc2f7c5ce28, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 5655] futex(0x7fc2f7c5ce28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5656] mknod(NULL, 0100 [pid 5655] <... futex resumed>) = 0 [pid 5656] <... mknod resumed>) = -1 EFAULT (Bad address) [pid 5655] futex(0x7fc2f7c5ce2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5656] futex(0x7fc2f7c5ce2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5655] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5656] <... futex resumed>) = 0 [pid 5655] exit_group(0 [pid 5656] futex(0x7fc2f7c5ce28, FUTEX_WAIT_PRIVATE, 0, NULL) = ? [pid 5655] <... exit_group resumed>) = ? [pid 5656] +++ exited with 0 +++ [pid 5655] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5655, si_uid=0, si_status=0, si_utime=0, si_stime=23 /* 0.23 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 umount2("./22", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./22", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x55557547a790 /* 4 entries */, 32768) = 112 umount2("./22/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./22/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./22/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./22/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./22/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x5555754827d0 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555754827d0 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./22/file1") = 0 umount2("./22/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./22/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./22/binderfs") = 0 getdents64(3, 0x55557547a790 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./22") = 0 mkdir("./23", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5657 attached , child_tidptr=0x5555754796d0) = 5657 [pid 5603] rt_sigprocmask(SIG_SETMASK, [] [pid 5657] set_robust_list(0x5555754796e0, 24 [pid 5603] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5657] <... set_robust_list resumed>) = 0 [pid 5657] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5657] chdir("./23") = 0 [pid 5657] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5657] setpgid(0, 0) = 0 [pid 5657] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5657] write(3, "1000", 4) = 4 [pid 5657] close(3) = 0 [pid 5657] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5657] write(1, "executing program\n", 18) = 18 [pid 5657] futex(0x7fc2f7c5ce2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5657] rt_sigaction(SIGRT_1, {sa_handler=0x7fc2f7bc1b90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fc2f7bb3b60}, NULL, 8) = 0 [pid 5657] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5657] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc2f7b5b000 [pid 5657] mprotect(0x7fc2f7b5c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5657] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5657] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc2f7b7b990, parent_tid=0x7fc2f7b7b990, exit_signal=0, stack=0x7fc2f7b5b000, stack_size=0x202c0, tls=0x7fc2f7b7b6c0}ci2-upstream-fs/strace-static-x86_64: Process 5658 attached [pid 5658] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 5657] <... clone3 resumed> => {parent_tid=[5658]}, 88) = 5658 [pid 5658] <... rseq resumed>) = 0 [pid 5658] set_robust_list(0x7fc2f7b7b9a0, 24) = 0 [pid 5657] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5658] rt_sigprocmask(SIG_SETMASK, [] [pid 5657] futex(0x7fc2f7c5ce28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5658] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5658] memfd_create("syzkaller", 0 [pid 5657] <... futex resumed>) = 0 [pid 5657] futex(0x7fc2f7c5ce2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5658] <... memfd_create resumed>) = 3 [pid 5658] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fc2ef75b000 [pid 5658] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5658] munmap(0x7fc2ef75b000, 138412032) = 0 [pid 5658] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5658] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5658] close(3) = 0 [pid 5658] close(4) = 0 [pid 5658] mkdir("./file1", 0777) = 0 [pid 5658] mount("/dev/loop0", "./file1", "jfs", MS_NODEV|MS_POSIXACL|MS_STRICTATIME, "iocharset=koi8-u,nointegrity,iocharset=iso8859-14,errors=continue,discard,errors=remount-ro,integrit"...) = 0 [pid 5658] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5658] chdir("./file1") = 0 [pid 5658] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5658] ioctl(4, LOOP_CLR_FD) = 0 [pid 5658] close(4) = 0 [pid 5658] futex(0x7fc2f7c5ce2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5657] <... futex resumed>) = 0 [pid 5658] futex(0x7fc2f7c5ce28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5657] futex(0x7fc2f7c5ce28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5658] <... futex resumed>) = 0 [pid 5657] <... futex resumed>) = 1 [pid 5658] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5657] futex(0x7fc2f7c5ce2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5658] <... openat resumed>) = -1 EFAULT (Bad address) [pid 5658] futex(0x7fc2f7c5ce2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5657] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [ 113.918634][ T5658] loop0: detected capacity change from 0 to 32768 [pid 5657] futex(0x7fc2f7c5ce28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5658] <... futex resumed>) = 0 [pid 5658] mknod(NULL, 0100 [pid 5657] <... futex resumed>) = 0 [pid 5658] <... mknod resumed>) = -1 EFAULT (Bad address) [pid 5657] futex(0x7fc2f7c5ce2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5658] futex(0x7fc2f7c5ce2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5657] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5658] <... futex resumed>) = 0 [pid 5657] exit_group(0 [pid 5658] futex(0x7fc2f7c5ce28, FUTEX_WAIT_PRIVATE, 0, NULL) = ? [pid 5657] <... exit_group resumed>) = ? [pid 5658] +++ exited with 0 +++ [pid 5657] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5657, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=18 /* 0.18 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 umount2("./23", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./23", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x55557547a790 /* 4 entries */, 32768) = 112 umount2("./23/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./23/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./23/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./23/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./23/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x5555754827d0 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555754827d0 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./23/file1") = 0 umount2("./23/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./23/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./23/binderfs") = 0 getdents64(3, 0x55557547a790 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./23") = 0 mkdir("./24", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5659 attached , child_tidptr=0x5555754796d0) = 5659 [pid 5659] set_robust_list(0x5555754796e0, 24 [pid 5603] rt_sigprocmask(SIG_SETMASK, [] [pid 5659] <... set_robust_list resumed>) = 0 [pid 5603] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5659] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5659] chdir("./24") = 0 [pid 5659] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5659] setpgid(0, 0) = 0 [pid 5659] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5659] write(3, "1000", 4) = 4 [pid 5659] close(3) = 0 [pid 5659] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5659] write(1, "executing program\n", 18) = 18 executing program [pid 5659] futex(0x7fc2f7c5ce2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5659] rt_sigaction(SIGRT_1, {sa_handler=0x7fc2f7bc1b90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fc2f7bb3b60}, NULL, 8) = 0 [pid 5659] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5659] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc2f7b5b000 [pid 5659] mprotect(0x7fc2f7b5c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5659] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5659] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc2f7b7b990, parent_tid=0x7fc2f7b7b990, exit_signal=0, stack=0x7fc2f7b5b000, stack_size=0x202c0, tls=0x7fc2f7b7b6c0}ci2-upstream-fs/strace-static-x86_64: Process 5660 attached [pid 5660] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 5659] <... clone3 resumed> => {parent_tid=[5660]}, 88) = 5660 [pid 5660] <... rseq resumed>) = 0 [pid 5660] set_robust_list(0x7fc2f7b7b9a0, 24 [pid 5659] rt_sigprocmask(SIG_SETMASK, [] [pid 5660] <... set_robust_list resumed>) = 0 [pid 5659] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5660] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5659] futex(0x7fc2f7c5ce28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5660] memfd_create("syzkaller", 0 [pid 5659] <... futex resumed>) = 0 [pid 5659] futex(0x7fc2f7c5ce2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5660] <... memfd_create resumed>) = 3 [pid 5660] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fc2ef75b000 [pid 5660] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5660] munmap(0x7fc2ef75b000, 138412032) = 0 [pid 5660] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5660] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5660] close(3) = 0 [pid 5660] close(4) = 0 [pid 5660] mkdir("./file1", 0777) = 0 [pid 5660] mount("/dev/loop0", "./file1", "jfs", MS_NODEV|MS_POSIXACL|MS_STRICTATIME, "iocharset=koi8-u,nointegrity,iocharset=iso8859-14,errors=continue,discard,errors=remount-ro,integrit"...) = 0 [pid 5660] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5660] chdir("./file1") = 0 [pid 5660] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5660] ioctl(4, LOOP_CLR_FD) = 0 [pid 5660] close(4) = 0 [pid 5660] futex(0x7fc2f7c5ce2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5659] <... futex resumed>) = 0 [pid 5660] futex(0x7fc2f7c5ce28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5659] futex(0x7fc2f7c5ce28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5660] <... futex resumed>) = 0 [pid 5659] <... futex resumed>) = 1 [pid 5659] futex(0x7fc2f7c5ce2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5660] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = -1 EFAULT (Bad address) [pid 5660] futex(0x7fc2f7c5ce2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5659] <... futex resumed>) = 0 [pid 5660] futex(0x7fc2f7c5ce28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5659] futex(0x7fc2f7c5ce28, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5659] futex(0x7fc2f7c5ce2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5660] <... futex resumed>) = 0 [ 114.490332][ T5660] loop0: detected capacity change from 0 to 32768 [pid 5660] mknod(NULL, 0100) = -1 EFAULT (Bad address) [pid 5660] futex(0x7fc2f7c5ce2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5659] <... futex resumed>) = 0 [pid 5660] futex(0x7fc2f7c5ce28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5659] exit_group(0) = ? [pid 5660] <... futex resumed>) = ? [pid 5660] +++ exited with 0 +++ [pid 5659] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5659, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=18 /* 0.18 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 umount2("./24", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./24", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x55557547a790 /* 4 entries */, 32768) = 112 umount2("./24/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./24/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./24/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./24/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./24/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x5555754827d0 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555754827d0 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./24/file1") = 0 umount2("./24/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./24/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./24/binderfs") = 0 getdents64(3, 0x55557547a790 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./24") = 0 mkdir("./25", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5661 attached , child_tidptr=0x5555754796d0) = 5661 [pid 5603] rt_sigprocmask(SIG_SETMASK, [] [pid 5661] set_robust_list(0x5555754796e0, 24 [pid 5603] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5661] <... set_robust_list resumed>) = 0 [pid 5661] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5661] chdir("./25") = 0 [pid 5661] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5661] setpgid(0, 0) = 0 [pid 5661] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5661] write(3, "1000", 4) = 4 [pid 5661] close(3) = 0 [pid 5661] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5661] write(1, "executing program\n", 18) = 18 [pid 5661] futex(0x7fc2f7c5ce2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 executing program [pid 5661] rt_sigaction(SIGRT_1, {sa_handler=0x7fc2f7bc1b90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fc2f7bb3b60}, NULL, 8) = 0 [pid 5661] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5661] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc2f7b5b000 [pid 5661] mprotect(0x7fc2f7b5c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5661] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5661] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc2f7b7b990, parent_tid=0x7fc2f7b7b990, exit_signal=0, stack=0x7fc2f7b5b000, stack_size=0x202c0, tls=0x7fc2f7b7b6c0}ci2-upstream-fs/strace-static-x86_64: Process 5662 attached [pid 5662] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053) = 0 [pid 5662] set_robust_list(0x7fc2f7b7b9a0, 24) = 0 [pid 5661] <... clone3 resumed> => {parent_tid=[5662]}, 88) = 5662 [pid 5662] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5661] rt_sigprocmask(SIG_SETMASK, [] [pid 5662] futex(0x7fc2f7c5ce28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5661] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5661] futex(0x7fc2f7c5ce28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5662] <... futex resumed>) = 0 [pid 5661] <... futex resumed>) = 1 [pid 5662] memfd_create("syzkaller", 0 [pid 5661] futex(0x7fc2f7c5ce2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5662] <... memfd_create resumed>) = 3 [pid 5662] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fc2ef75b000 [pid 5662] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5662] munmap(0x7fc2ef75b000, 138412032) = 0 [pid 5662] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5662] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5662] close(3) = 0 [pid 5662] close(4) = 0 [pid 5662] mkdir("./file1", 0777) = 0 [pid 5662] mount("/dev/loop0", "./file1", "jfs", MS_NODEV|MS_POSIXACL|MS_STRICTATIME, "iocharset=koi8-u,nointegrity,iocharset=iso8859-14,errors=continue,discard,errors=remount-ro,integrit"...) = 0 [pid 5662] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5662] chdir("./file1") = 0 [pid 5662] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5662] ioctl(4, LOOP_CLR_FD) = 0 [pid 5662] close(4) = 0 [pid 5662] futex(0x7fc2f7c5ce2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5661] <... futex resumed>) = 0 [pid 5662] futex(0x7fc2f7c5ce28, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 5661] futex(0x7fc2f7c5ce28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5662] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = -1 EFAULT (Bad address) [pid 5662] futex(0x7fc2f7c5ce2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5662] futex(0x7fc2f7c5ce28, FUTEX_WAIT_PRIVATE, 0, NULL) = 0 [pid 5661] <... futex resumed>) = 1 [ 114.992976][ T5662] loop0: detected capacity change from 0 to 32768 [pid 5661] futex(0x7fc2f7c5ce2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5662] futex(0x7fc2f7c5ce28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5661] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5661] futex(0x7fc2f7c5ce28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5662] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5661] <... futex resumed>) = 0 [pid 5662] mknod(NULL, 0100 [pid 5661] futex(0x7fc2f7c5ce2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5662] <... mknod resumed>) = -1 EFAULT (Bad address) [pid 5662] futex(0x7fc2f7c5ce2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5661] <... futex resumed>) = 0 [pid 5662] futex(0x7fc2f7c5ce28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5661] exit_group(0 [pid 5662] <... futex resumed>) = ? [pid 5661] <... exit_group resumed>) = ? [pid 5662] +++ exited with 0 +++ [pid 5661] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5661, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=16 /* 0.16 s */} --- umount2("./25", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./25", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x55557547a790 /* 4 entries */, 32768) = 112 umount2("./25/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./25/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./25/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./25/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./25/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x5555754827d0 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555754827d0 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./25/file1") = 0 umount2("./25/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./25/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./25/binderfs") = 0 getdents64(3, 0x55557547a790 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./25") = 0 mkdir("./26", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5663 attached [pid 5663] set_robust_list(0x5555754796e0, 24 [pid 5603] <... clone resumed>, child_tidptr=0x5555754796d0) = 5663 [pid 5663] <... set_robust_list resumed>) = 0 [pid 5663] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5603] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5663] chdir("./26") = 0 [pid 5663] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5663] setpgid(0, 0) = 0 [pid 5663] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5663] write(3, "1000", 4) = 4 [pid 5663] close(3) = 0 [pid 5663] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5663] write(1, "executing program\n", 18) = 18 [pid 5663] futex(0x7fc2f7c5ce2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 executing program [pid 5663] rt_sigaction(SIGRT_1, {sa_handler=0x7fc2f7bc1b90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fc2f7bb3b60}, NULL, 8) = 0 [pid 5663] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5663] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc2f7b5b000 [pid 5663] mprotect(0x7fc2f7b5c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5663] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5663] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc2f7b7b990, parent_tid=0x7fc2f7b7b990, exit_signal=0, stack=0x7fc2f7b5b000, stack_size=0x202c0, tls=0x7fc2f7b7b6c0}ci2-upstream-fs/strace-static-x86_64: Process 5664 attached [pid 5664] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 5663] <... clone3 resumed> => {parent_tid=[5664]}, 88) = 5664 [pid 5664] <... rseq resumed>) = 0 [pid 5664] set_robust_list(0x7fc2f7b7b9a0, 24 [pid 5663] rt_sigprocmask(SIG_SETMASK, [] [pid 5664] <... set_robust_list resumed>) = 0 [pid 5663] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5664] rt_sigprocmask(SIG_SETMASK, [] [pid 5663] futex(0x7fc2f7c5ce28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5664] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5663] <... futex resumed>) = 0 [pid 5664] memfd_create("syzkaller", 0 [pid 5663] futex(0x7fc2f7c5ce2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5664] <... memfd_create resumed>) = 3 [pid 5664] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fc2ef75b000 [pid 5664] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5664] munmap(0x7fc2ef75b000, 138412032) = 0 [pid 5664] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5664] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5664] close(3) = 0 [pid 5664] close(4) = 0 [pid 5664] mkdir("./file1", 0777) = 0 [pid 5664] mount("/dev/loop0", "./file1", "jfs", MS_NODEV|MS_POSIXACL|MS_STRICTATIME, "iocharset=koi8-u,nointegrity,iocharset=iso8859-14,errors=continue,discard,errors=remount-ro,integrit"...) = 0 [pid 5664] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5664] chdir("./file1") = 0 [pid 5664] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5664] ioctl(4, LOOP_CLR_FD) = 0 [pid 5664] close(4) = 0 [pid 5664] futex(0x7fc2f7c5ce2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5663] <... futex resumed>) = 0 [pid 5664] futex(0x7fc2f7c5ce28, FUTEX_WAIT_PRIVATE, 0, NULL) = -1 EAGAIN (Resource temporarily unavailable) [pid 5663] futex(0x7fc2f7c5ce28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5664] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5663] <... futex resumed>) = 0 [pid 5664] <... openat resumed>) = -1 EFAULT (Bad address) [pid 5663] futex(0x7fc2f7c5ce2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5664] futex(0x7fc2f7c5ce2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5663] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5664] <... futex resumed>) = 0 [pid 5664] futex(0x7fc2f7c5ce28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5663] futex(0x7fc2f7c5ce28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5664] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5663] <... futex resumed>) = 0 [pid 5664] mknod(NULL, 0100 [pid 5663] futex(0x7fc2f7c5ce2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5664] <... mknod resumed>) = -1 EFAULT (Bad address) [pid 5664] futex(0x7fc2f7c5ce2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5663] <... futex resumed>) = 0 [pid 5664] futex(0x7fc2f7c5ce28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5663] exit_group(0) = ? [pid 5664] <... futex resumed>) = ? [ 115.515086][ T5664] loop0: detected capacity change from 0 to 32768 [pid 5664] +++ exited with 0 +++ [pid 5663] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5663, si_uid=0, si_status=0, si_utime=1 /* 0.01 s */, si_stime=18 /* 0.18 s */} --- umount2("./26", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./26", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x55557547a790 /* 4 entries */, 32768) = 112 umount2("./26/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./26/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./26/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./26/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./26/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x5555754827d0 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555754827d0 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./26/file1") = 0 umount2("./26/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./26/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./26/binderfs") = 0 getdents64(3, 0x55557547a790 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./26") = 0 mkdir("./27", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5665 attached , child_tidptr=0x5555754796d0) = 5665 [pid 5665] set_robust_list(0x5555754796e0, 24 [pid 5603] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5665] <... set_robust_list resumed>) = 0 [pid 5665] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5665] chdir("./27") = 0 [pid 5665] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5665] setpgid(0, 0) = 0 [pid 5665] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5665] write(3, "1000", 4) = 4 [pid 5665] close(3) = 0 [pid 5665] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5665] write(1, "executing program\n", 18) = 18 executing program [pid 5665] futex(0x7fc2f7c5ce2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5665] rt_sigaction(SIGRT_1, {sa_handler=0x7fc2f7bc1b90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fc2f7bb3b60}, NULL, 8) = 0 [pid 5665] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5665] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc2f7b5b000 [pid 5665] mprotect(0x7fc2f7b5c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5665] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5665] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc2f7b7b990, parent_tid=0x7fc2f7b7b990, exit_signal=0, stack=0x7fc2f7b5b000, stack_size=0x202c0, tls=0x7fc2f7b7b6c0}ci2-upstream-fs/strace-static-x86_64: Process 5666 attached [pid 5666] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053) = 0 [pid 5666] set_robust_list(0x7fc2f7b7b9a0, 24 [pid 5665] <... clone3 resumed> => {parent_tid=[5666]}, 88) = 5666 [pid 5666] <... set_robust_list resumed>) = 0 [pid 5665] rt_sigprocmask(SIG_SETMASK, [] [pid 5666] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5665] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5666] memfd_create("syzkaller", 0 [pid 5665] futex(0x7fc2f7c5ce28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5665] futex(0x7fc2f7c5ce2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5666] <... memfd_create resumed>) = 3 [pid 5666] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fc2ef75b000 [pid 5666] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5666] munmap(0x7fc2ef75b000, 138412032) = 0 [pid 5666] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5666] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5666] close(3) = 0 [pid 5666] close(4) = 0 [pid 5666] mkdir("./file1", 0777) = 0 [pid 5666] mount("/dev/loop0", "./file1", "jfs", MS_NODEV|MS_POSIXACL|MS_STRICTATIME, "iocharset=koi8-u,nointegrity,iocharset=iso8859-14,errors=continue,discard,errors=remount-ro,integrit"...) = 0 [pid 5666] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5666] chdir("./file1") = 0 [pid 5666] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5666] ioctl(4, LOOP_CLR_FD) = 0 [pid 5666] close(4) = 0 [pid 5666] futex(0x7fc2f7c5ce2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5665] <... futex resumed>) = 0 [pid 5666] futex(0x7fc2f7c5ce28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5665] futex(0x7fc2f7c5ce28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5666] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5665] <... futex resumed>) = 0 [pid 5666] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = -1 EFAULT (Bad address) [pid 5665] futex(0x7fc2f7c5ce2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5666] futex(0x7fc2f7c5ce2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5665] <... futex resumed>) = 0 [pid 5666] futex(0x7fc2f7c5ce28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5665] futex(0x7fc2f7c5ce28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5666] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5665] <... futex resumed>) = 0 [pid 5666] mknod(NULL, 0100 [pid 5665] futex(0x7fc2f7c5ce2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5666] <... mknod resumed>) = -1 EFAULT (Bad address) [ 116.027153][ T5666] loop0: detected capacity change from 0 to 32768 [pid 5666] futex(0x7fc2f7c5ce2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5665] <... futex resumed>) = 0 [pid 5666] futex(0x7fc2f7c5ce28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5665] exit_group(0 [pid 5666] <... futex resumed>) = ? [pid 5665] <... exit_group resumed>) = ? [pid 5666] +++ exited with 0 +++ [pid 5665] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5665, si_uid=0, si_status=0, si_utime=0, si_stime=22 /* 0.22 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 umount2("./27", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./27", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x55557547a790 /* 4 entries */, 32768) = 112 umount2("./27/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./27/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./27/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./27/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./27/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x5555754827d0 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555754827d0 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./27/file1") = 0 umount2("./27/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./27/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./27/binderfs") = 0 getdents64(3, 0x55557547a790 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./27") = 0 mkdir("./28", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5667 attached , child_tidptr=0x5555754796d0) = 5667 [pid 5667] set_robust_list(0x5555754796e0, 24 [pid 5603] rt_sigprocmask(SIG_SETMASK, [] [pid 5667] <... set_robust_list resumed>) = 0 [pid 5603] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5667] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5667] chdir("./28") = 0 [pid 5667] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5667] setpgid(0, 0) = 0 [pid 5667] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5667] write(3, "1000", 4) = 4 [pid 5667] close(3) = 0 [pid 5667] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5667] write(1, "executing program\n", 18) = 18 executing program [pid 5667] futex(0x7fc2f7c5ce2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5667] rt_sigaction(SIGRT_1, {sa_handler=0x7fc2f7bc1b90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fc2f7bb3b60}, NULL, 8) = 0 [pid 5667] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5667] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc2f7b5b000 [pid 5667] mprotect(0x7fc2f7b5c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5667] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5667] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc2f7b7b990, parent_tid=0x7fc2f7b7b990, exit_signal=0, stack=0x7fc2f7b5b000, stack_size=0x202c0, tls=0x7fc2f7b7b6c0}ci2-upstream-fs/strace-static-x86_64: Process 5668 attached [pid 5668] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053) = 0 [pid 5668] set_robust_list(0x7fc2f7b7b9a0, 24 [pid 5667] <... clone3 resumed> => {parent_tid=[5668]}, 88) = 5668 [pid 5668] <... set_robust_list resumed>) = 0 [pid 5668] rt_sigprocmask(SIG_SETMASK, [] [pid 5667] rt_sigprocmask(SIG_SETMASK, [] [pid 5668] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5668] futex(0x7fc2f7c5ce28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5667] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5667] futex(0x7fc2f7c5ce28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5668] <... futex resumed>) = 0 [pid 5667] <... futex resumed>) = 1 [pid 5668] memfd_create("syzkaller", 0 [pid 5667] futex(0x7fc2f7c5ce2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5668] <... memfd_create resumed>) = 3 [pid 5668] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fc2ef75b000 [pid 5668] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5668] munmap(0x7fc2ef75b000, 138412032) = 0 [pid 5668] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5668] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5668] close(3) = 0 [pid 5668] close(4) = 0 [pid 5668] mkdir("./file1", 0777) = 0 [pid 5668] mount("/dev/loop0", "./file1", "jfs", MS_NODEV|MS_POSIXACL|MS_STRICTATIME, "iocharset=koi8-u,nointegrity,iocharset=iso8859-14,errors=continue,discard,errors=remount-ro,integrit"...) = 0 [pid 5668] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5668] chdir("./file1") = 0 [pid 5668] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5668] ioctl(4, LOOP_CLR_FD) = 0 [pid 5668] close(4) = 0 [pid 5668] futex(0x7fc2f7c5ce2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5668] futex(0x7fc2f7c5ce28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5667] <... futex resumed>) = 0 [pid 5667] futex(0x7fc2f7c5ce28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5668] <... futex resumed>) = 0 [pid 5667] <... futex resumed>) = 1 [pid 5668] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5667] futex(0x7fc2f7c5ce2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5668] <... openat resumed>) = -1 EFAULT (Bad address) [pid 5668] futex(0x7fc2f7c5ce2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5667] <... futex resumed>) = 0 [pid 5668] mknod(NULL, 0100 [pid 5667] futex(0x7fc2f7c5ce28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5668] <... mknod resumed>) = -1 EFAULT (Bad address) [pid 5667] <... futex resumed>) = 0 [pid 5668] futex(0x7fc2f7c5ce2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5668] futex(0x7fc2f7c5ce28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5667] futex(0x7fc2f7c5ce2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 5667] exit_group(0 [pid 5668] <... futex resumed>) = ? [pid 5667] <... exit_group resumed>) = ? [pid 5668] +++ exited with 0 +++ [pid 5667] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5667, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=18 /* 0.18 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 umount2("./28", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./28", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x55557547a790 /* 4 entries */, 32768) = 112 [ 116.537109][ T5668] loop0: detected capacity change from 0 to 32768 umount2("./28/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./28/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./28/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./28/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./28/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x5555754827d0 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555754827d0 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./28/file1") = 0 umount2("./28/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./28/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./28/binderfs") = 0 getdents64(3, 0x55557547a790 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./28") = 0 mkdir("./29", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5669 attached , child_tidptr=0x5555754796d0) = 5669 [pid 5603] rt_sigprocmask(SIG_SETMASK, [] [pid 5669] set_robust_list(0x5555754796e0, 24 [pid 5603] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5669] <... set_robust_list resumed>) = 0 [pid 5669] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5669] chdir("./29") = 0 [pid 5669] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5669] setpgid(0, 0) = 0 [pid 5669] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5669] write(3, "1000", 4) = 4 [pid 5669] close(3) = 0 [pid 5669] symlink("/dev/binderfs", "./binderfs") = 0 executing program [pid 5669] write(1, "executing program\n", 18) = 18 [pid 5669] futex(0x7fc2f7c5ce2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5669] rt_sigaction(SIGRT_1, {sa_handler=0x7fc2f7bc1b90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fc2f7bb3b60}, NULL, 8) = 0 [pid 5669] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5669] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc2f7b5b000 [pid 5669] mprotect(0x7fc2f7b5c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5669] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5669] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc2f7b7b990, parent_tid=0x7fc2f7b7b990, exit_signal=0, stack=0x7fc2f7b5b000, stack_size=0x202c0, tls=0x7fc2f7b7b6c0}ci2-upstream-fs/strace-static-x86_64: Process 5670 attached => {parent_tid=[5670]}, 88) = 5670 [pid 5669] rt_sigprocmask(SIG_SETMASK, [] [pid 5670] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053) = 0 [pid 5669] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5670] set_robust_list(0x7fc2f7b7b9a0, 24 [pid 5669] futex(0x7fc2f7c5ce28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5670] <... set_robust_list resumed>) = 0 [pid 5669] futex(0x7fc2f7c5ce2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5670] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5670] memfd_create("syzkaller", 0) = 3 [pid 5670] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fc2ef75b000 [pid 5670] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5670] munmap(0x7fc2ef75b000, 138412032) = 0 [pid 5670] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5670] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5670] close(3) = 0 [pid 5670] close(4) = 0 [pid 5670] mkdir("./file1", 0777) = 0 [pid 5670] mount("/dev/loop0", "./file1", "jfs", MS_NODEV|MS_POSIXACL|MS_STRICTATIME, "iocharset=koi8-u,nointegrity,iocharset=iso8859-14,errors=continue,discard,errors=remount-ro,integrit"...) = 0 [pid 5670] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5670] chdir("./file1") = 0 [pid 5670] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5670] ioctl(4, LOOP_CLR_FD) = 0 [pid 5670] close(4) = 0 [pid 5670] futex(0x7fc2f7c5ce2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5669] <... futex resumed>) = 0 [pid 5670] futex(0x7fc2f7c5ce28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5669] futex(0x7fc2f7c5ce28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5670] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5669] <... futex resumed>) = 0 [pid 5669] futex(0x7fc2f7c5ce2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5670] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000) = -1 EFAULT (Bad address) [pid 5670] futex(0x7fc2f7c5ce2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5669] <... futex resumed>) = 0 [pid 5670] futex(0x7fc2f7c5ce28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5669] futex(0x7fc2f7c5ce28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5670] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5669] <... futex resumed>) = 0 [pid 5670] mknod(NULL, 0100 [pid 5669] futex(0x7fc2f7c5ce2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5670] <... mknod resumed>) = -1 EFAULT (Bad address) [pid 5670] futex(0x7fc2f7c5ce2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5670] futex(0x7fc2f7c5ce28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5669] <... futex resumed>) = 0 [pid 5669] exit_group(0 [pid 5670] <... futex resumed>) = ? [pid 5669] <... exit_group resumed>) = ? [pid 5670] +++ exited with 0 +++ [pid 5669] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5669, si_uid=0, si_status=0, si_utime=3 /* 0.03 s */, si_stime=18 /* 0.18 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 [ 117.013683][ T5670] loop0: detected capacity change from 0 to 32768 umount2("./29", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./29", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x55557547a790 /* 4 entries */, 32768) = 112 umount2("./29/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = 0 umount2("./29/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./29/file1", {st_mode=S_IFDIR|0700, st_size=4096, ...}, AT_SYMLINK_NOFOLLOW) = 0 umount2("./29/file1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./29/file1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 4 fstat(4, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(4, 0x5555754827d0 /* 2 entries */, 32768) = 48 getdents64(4, 0x5555754827d0 /* 0 entries */, 32768) = 0 close(4) = 0 rmdir("./29/file1") = 0 umount2("./29/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) newfstatat(AT_FDCWD, "./29/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 unlink("./29/binderfs") = 0 getdents64(3, 0x55557547a790 /* 0 entries */, 32768) = 0 close(3) = 0 rmdir("./29") = 0 mkdir("./30", 0777) = 0 openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 3 ioctl(3, LOOP_CLR_FD) = -1 ENXIO (No such device or address) close(3) = 0 rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLDci2-upstream-fs/strace-static-x86_64: Process 5671 attached , child_tidptr=0x5555754796d0) = 5671 [pid 5671] set_robust_list(0x5555754796e0, 24 [pid 5603] rt_sigprocmask(SIG_SETMASK, [] [pid 5671] <... set_robust_list resumed>) = 0 [pid 5603] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5671] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5671] chdir("./30") = 0 [pid 5671] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5671] setpgid(0, 0) = 0 [pid 5671] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5671] write(3, "1000", 4) = 4 [pid 5671] close(3) = 0 [pid 5671] symlink("/dev/binderfs", "./binderfs") = 0 [pid 5671] write(1, "executing program\n", 18) = 18 executing program [pid 5671] futex(0x7fc2f7c5ce2c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5671] rt_sigaction(SIGRT_1, {sa_handler=0x7fc2f7bc1b90, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fc2f7bb3b60}, NULL, 8) = 0 [pid 5671] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 5671] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fc2f7b5b000 [pid 5671] mprotect(0x7fc2f7b5c000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 5671] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 5671] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fc2f7b7b990, parent_tid=0x7fc2f7b7b990, exit_signal=0, stack=0x7fc2f7b5b000, stack_size=0x202c0, tls=0x7fc2f7b7b6c0} => {parent_tid=[5672]}, 88) = 5672 ci2-upstream-fs/strace-static-x86_64: Process 5672 attached [pid 5671] rt_sigprocmask(SIG_SETMASK, [] [pid 5672] rseq({cpu_id_start=0, cpu_id=RSEQ_CPU_ID_UNINITIALIZED, rseq_cs=NULL, flags=0, node_id=0, mm_cid=0, slice_ctrl={request=0, granted=0, __reserved=0}, __reserved=0}, 33, 0, 0x53053053 [pid 5671] <... rt_sigprocmask resumed>, NULL, 8) = 0 [pid 5671] futex(0x7fc2f7c5ce28, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 5672] <... rseq resumed>) = 0 [pid 5671] futex(0x7fc2f7c5ce2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=4, tv_nsec=50000000} [pid 5672] set_robust_list(0x7fc2f7b7b9a0, 24) = 0 [pid 5672] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 5672] memfd_create("syzkaller", 0) = 3 [pid 5672] mmap(NULL, 138412032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fc2ef75b000 [pid 5672] write(3, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"..., 16777216) = 16777216 [pid 5672] munmap(0x7fc2ef75b000, 138412032) = 0 [pid 5672] openat(AT_FDCWD, "/dev/loop0", O_RDWR) = 4 [pid 5672] ioctl(4, LOOP_SET_FD, 3) = 0 [pid 5672] close(3) = 0 [pid 5672] close(4) = 0 [pid 5672] mkdir("./file1", 0777) = 0 [pid 5672] mount("/dev/loop0", "./file1", "jfs", MS_NODEV|MS_POSIXACL|MS_STRICTATIME, "iocharset=koi8-u,nointegrity,iocharset=iso8859-14,errors=continue,discard,errors=remount-ro,integrit"...) = 0 [pid 5672] openat(AT_FDCWD, "./file1", O_RDONLY|O_DIRECTORY) = 3 [pid 5672] chdir("./file1") = 0 [pid 5672] openat(AT_FDCWD, "/dev/loop0", O_RDONLY) = 4 [pid 5672] ioctl(4, LOOP_CLR_FD) = 0 [pid 5672] close(4) = 0 [pid 5672] futex(0x7fc2f7c5ce2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5671] <... futex resumed>) = 0 [pid 5672] futex(0x7fc2f7c5ce28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5671] futex(0x7fc2f7c5ce28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5672] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 5671] <... futex resumed>) = 0 [pid 5672] openat(AT_FDCWD, NULL, O_RDWR|O_CREAT|O_NONBLOCK|O_SYNC|O_NOATIME, 000 [pid 5671] futex(0x7fc2f7c5ce2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5672] <... openat resumed>) = -1 EFAULT (Bad address) [pid 5672] futex(0x7fc2f7c5ce2c, FUTEX_WAKE_PRIVATE, 1000000 [pid 5671] <... futex resumed>) = 0 [pid 5672] <... futex resumed>) = 1 [pid 5671] futex(0x7fc2f7c5ce28, FUTEX_WAKE_PRIVATE, 1000000 [pid 5672] mknod(NULL, 0100 [pid 5671] <... futex resumed>) = 0 [pid 5672] <... mknod resumed>) = -1 EFAULT (Bad address) [pid 5671] futex(0x7fc2f7c5ce2c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 5672] futex(0x7fc2f7c5ce2c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 5671] <... futex resumed>) = 0 [pid 5672] futex(0x7fc2f7c5ce28, FUTEX_WAIT_PRIVATE, 0, NULL [pid 5671] exit_group(0 [pid 5672] <... futex resumed>) = ? [pid 5671] <... exit_group resumed>) = ? [pid 5672] +++ exited with 0 +++ [ 117.536423][ T5672] loop0: detected capacity change from 0 to 32768 [pid 5671] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5671, si_uid=0, si_status=0, si_utime=2 /* 0.02 s */, si_stime=19 /* 0.19 s */} --- restart_syscall(<... resuming interrupted rt_sigprocmask ...>) = 0 umount2("./30", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) openat(AT_FDCWD, "./30", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 fstat(3, {st_mode=S_IFDIR|0700, st_size=4096, ...}) = 0 getdents64(3, 0x55557547a790 /* 4 entries */, 32768) = 112 [ 117.681568][ T1314] ================================================================== [ 117.681588][ T1314] BUG: KASAN: use-after-free in copy_folio_from_iter_atomic+0xbbf/0x1a30 [ 117.681657][ T1314] Read of size 4096 at addr ffff8880335dd000 by task kworker/u8:13/1314 [ 117.681677][ T1314] [ 117.681700][ T1314] CPU: 1 UID: 0 PID: 1314 Comm: kworker/u8:13 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 117.681730][ T1314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 117.681744][ T1314] Workqueue: loop0 loop_rootcg_workfn [ 117.681794][ T1314] Call Trace: [ 117.681803][ T1314] [ 117.681813][ T1314] dump_stack_lvl+0xe8/0x150 [ 117.681846][ T1314] print_address_description+0x55/0x1e0 [ 117.681879][ T1314] ? copy_folio_from_iter_atomic+0xbbf/0x1a30 [ 117.681910][ T1314] print_report+0x58/0x70 [ 117.681938][ T1314] kasan_report+0x117/0x150 [ 117.681961][ T1314] ? copy_folio_from_iter_atomic+0xbbf/0x1a30 [ 117.681997][ T1314] kasan_check_range+0x264/0x2c0 [ 117.682018][ T1314] ? copy_folio_from_iter_atomic+0xbbf/0x1a30 [ 117.682049][ T1314] __asan_memcpy+0x29/0x70 [ 117.682078][ T1314] copy_folio_from_iter_atomic+0xbbf/0x1a30 [ 117.682122][ T1314] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 117.682164][ T1314] ? rcu_is_watching+0x16/0xb0 [ 117.682202][ T1314] ? shmem_write_begin+0x1ce/0x320 [ 117.682235][ T1314] generic_perform_write+0x5a8/0x8b0 [ 117.682270][ T1314] ? __pfx_generic_perform_write+0x10/0x10 [ 117.682297][ T1314] ? __mark_inode_dirty+0x4e7/0x13b0 [ 117.682328][ T1314] ? preempt_count_add+0x6a/0x140 [ 117.682359][ T1314] ? mnt_put_write_access_file+0xc2/0x100 [ 117.682392][ T1314] ? file_update_time_flags+0x3b1/0x450 [ 117.682424][ T1314] shmem_file_write_iter+0xfb/0x120 [ 117.682461][ T1314] lo_rw_aio+0xc78/0xf30 [ 117.682492][ T1314] ? reacquire_held_locks+0x117/0x1a0 [ 117.682527][ T1314] ? __pfx_lo_rw_aio+0x10/0x10 [ 117.682554][ T1314] ? rt_spin_unlock+0x159/0x200 [ 117.682593][ T1314] ? kthread_associate_blkcg+0x359/0x600 [ 117.682618][ T1314] ? rt_spin_unlock+0x165/0x200 [ 117.682649][ T1314] loop_process_work+0x638/0x11d0 [ 117.682684][ T1314] ? __pfx_loop_process_work+0x10/0x10 [ 117.682709][ T1314] ? look_up_lock_class+0x57/0x110 [ 117.682731][ T1314] ? register_lock_class+0x31/0x2e0 [ 117.682765][ T1314] ? __lock_acquire+0x747/0x2de0 [ 117.682796][ T1314] ? trace_hrtimer_start+0x82/0x200 [ 117.682827][ T1314] ? do_raw_spin_lock+0x12b/0x2f0 [ 117.682857][ T1314] ? lock_acquire+0x115/0x350 [ 117.682890][ T1314] ? rcu_is_watching+0x16/0xb0 [ 117.682925][ T1314] ? process_scheduled_works+0x97a/0x1630 [ 117.682957][ T1314] process_scheduled_works+0xc3d/0x1630 [ 117.683003][ T1314] ? __pfx_process_scheduled_works+0x10/0x10 [ 117.683037][ T1314] ? assign_work+0x3cf/0x5d0 [ 117.683069][ T1314] worker_thread+0xa47/0xfb0 [ 117.683108][ T1314] ? __kthread_parkme+0x71/0x1f0 [ 117.683152][ T1314] kthread+0x38b/0x470 [ 117.683174][ T1314] ? __pfx_worker_thread+0x10/0x10 [ 117.683204][ T1314] ? __pfx_kthread+0x10/0x10 [ 117.683226][ T1314] ret_from_fork+0x514/0xb70 [ 117.683249][ T1314] ? __pfx_ret_from_fork+0x10/0x10 [ 117.683270][ T1314] ? __switch_to+0xc89/0x1420 [ 117.683303][ T1314] ? __pfx_kthread+0x10/0x10 [ 117.683325][ T1314] ret_from_fork_asm+0x1a/0x30 [ 117.683354][ T1314] [ 117.683362][ T1314] [ 117.683368][ T1314] The buggy address belongs to the physical page: [ 117.683386][ T1314] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x2b pfn:0x335dd [ 117.683406][ T1314] flags: 0x80000000000000(node=0|zone=1) [ 117.683437][ T1314] raw: 0080000000000000 ffffea0000dfed08 ffffea0000d62808 0000000000000000 [ 117.683455][ T1314] raw: 000000000000002b 0000000000000000 00000000ffffffff 0000000000000000 [ 117.683466][ T1314] page dumped because: kasan: bad access detected [ 117.683481][ T1314] page_owner tracks the page as freed [ 117.683489][ T1314] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xdc0(GFP_KERNEL|__GFP_ZERO), pid 5672, tgid 5671 (syz-executor411), ts 117567666890 [ 117.683520][ T1314] post_alloc_hook+0x1f9/0x250 [ 117.683546][ T1314] get_page_from_freelist+0x2591/0x2600 [ 117.683577][ T1314] __alloc_frozen_pages_noprof+0x230/0x5c0 [ 117.683608][ T1314] alloc_pages_mpol+0xd4/0x280 [ 117.683627][ T1314] alloc_pages_noprof+0xd2/0x2f0 [ 117.683647][ T1314] lmLogInit+0x357/0x1a20 [ 117.683677][ T1314] lmLogOpen+0x4e3/0xf90 [ 117.683706][ T1314] jfs_mount_rw+0xf3/0x670 [ 117.683733][ T1314] jfs_fill_super+0x769/0xda0 [ 117.683755][ T1314] get_tree_bdev_flags+0x430/0x4f0 [ 117.683781][ T1314] vfs_get_tree+0x92/0x2a0 [ 117.683805][ T1314] do_new_mount+0x319/0xdc0 [ 117.683825][ T1314] __se_sys_mount+0x31d/0x420 [ 117.683845][ T1314] do_syscall_64+0x166/0x520 [ 117.683865][ T1314] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.683886][ T1314] page last free pid 5603 tgid 5603 ts 117679257061 stack trace: [ 117.683902][ T1314] __free_frozen_pages+0xf8e/0x1070 [ 117.683929][ T1314] lmLogShutdown+0x44e/0x850 [ 117.683947][ T1314] lmLogClose+0x28c/0x530 [ 117.683964][ T1314] jfs_umount+0x2da/0x3b0 [ 117.683993][ T1314] jfs_put_super+0x8c/0x190 [ 117.684017][ T1314] generic_shutdown_super+0x13d/0x2d0 [ 117.684038][ T1314] kill_block_super+0x44/0xa0 [ 117.684064][ T1314] deactivate_locked_super+0xbe/0x110 [ 117.684097][ T1314] cleanup_mnt+0x3d3/0x460 [ 117.684122][ T1314] task_work_run+0x1d9/0x270 [ 117.684152][ T1314] ptrace_notify+0x27c/0x2b0 [ 117.684178][ T1314] ptrace_report_syscall_exit+0x2d/0x50 [ 117.684198][ T1314] do_syscall_64+0x4a0/0x520 [ 117.684218][ T1314] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.684238][ T1314] [ 117.684242][ T1314] Memory state around the buggy address: [ 117.684254][ T1314] ffff8880335dcf00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 117.684267][ T1314] ffff8880335dcf80: fb fb fb fb fb fb fc fc fc fc fc fc fc fc fc fc [ 117.684281][ T1314] >ffff8880335dd000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 117.684291][ T1314] ^ [ 117.684302][ T1314] ffff8880335dd080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 117.684317][ T1314] ffff8880335dd100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 117.684327][ T1314] ================================================================== [ 117.684489][ T1314] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 118.281218][ T1314] CPU: 1 UID: 0 PID: 1314 Comm: kworker/u8:13 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 118.291329][ T1314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 118.301416][ T1314] Workqueue: loop0 loop_rootcg_workfn [ 118.306847][ T1314] Call Trace: [ 118.310158][ T1314] [ 118.313115][ T1314] vpanic+0x56d/0xa60 [ 118.317130][ T1314] ? rcu_is_watching+0x16/0xb0 [ 118.322091][ T1314] ? __pfx_vpanic+0x10/0x10 [ 118.326662][ T1314] panic+0xc5/0xd0 [ 118.330418][ T1314] ? __pfx_panic+0x10/0x10 [ 118.334856][ T1314] ? preempt_schedule_thunk+0x16/0x40 [ 118.340280][ T1314] ? copy_folio_from_iter_atomic+0xbbf/0x1a30 [ 118.346380][ T1314] ? preempt_schedule_thunk+0x16/0x40 [ 118.351793][ T1314] ? copy_folio_from_iter_atomic+0xbbf/0x1a30 [ 118.357888][ T1314] check_panic_on_warn+0x89/0xb0 [ 118.362852][ T1314] ? copy_folio_from_iter_atomic+0xbbf/0x1a30 [ 118.368949][ T1314] end_report+0x73/0x170 [ 118.373219][ T1314] ? copy_folio_from_iter_atomic+0xbbf/0x1a30 [ 118.379338][ T1314] kasan_report+0x128/0x150 [ 118.383864][ T1314] ? copy_folio_from_iter_atomic+0xbbf/0x1a30 [ 118.389963][ T1314] kasan_check_range+0x264/0x2c0 [ 118.394934][ T1314] ? copy_folio_from_iter_atomic+0xbbf/0x1a30 [ 118.401073][ T1314] __asan_memcpy+0x29/0x70 [ 118.405550][ T1314] copy_folio_from_iter_atomic+0xbbf/0x1a30 [ 118.411502][ T1314] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 118.417875][ T1314] ? rcu_is_watching+0x16/0xb0 [ 118.422681][ T1314] ? shmem_write_begin+0x1ce/0x320 [ 118.427828][ T1314] generic_perform_write+0x5a8/0x8b0 [ 118.433147][ T1314] ? __pfx_generic_perform_write+0x10/0x10 [ 118.438985][ T1314] ? __mark_inode_dirty+0x4e7/0x13b0 [ 118.444308][ T1314] ? preempt_count_add+0x6a/0x140 [ 118.449368][ T1314] ? mnt_put_write_access_file+0xc2/0x100 [ 118.455215][ T1314] ? file_update_time_flags+0x3b1/0x450 [ 118.460811][ T1314] shmem_file_write_iter+0xfb/0x120 [ 118.466050][ T1314] lo_rw_aio+0xc78/0xf30 [ 118.470331][ T1314] ? reacquire_held_locks+0x117/0x1a0 [ 118.475759][ T1314] ? __pfx_lo_rw_aio+0x10/0x10 [ 118.480553][ T1314] ? rt_spin_unlock+0x159/0x200 [ 118.485444][ T1314] ? kthread_associate_blkcg+0x359/0x600 [ 118.491104][ T1314] ? rt_spin_unlock+0x165/0x200 [ 118.495996][ T1314] loop_process_work+0x638/0x11d0 [ 118.501059][ T1314] ? __pfx_loop_process_work+0x10/0x10 [ 118.506548][ T1314] ? look_up_lock_class+0x57/0x110 [ 118.511681][ T1314] ? register_lock_class+0x31/0x2e0 [ 118.516914][ T1314] ? __lock_acquire+0x747/0x2de0 [ 118.521876][ T1314] ? trace_hrtimer_start+0x82/0x200 [ 118.527143][ T1314] ? do_raw_spin_lock+0x12b/0x2f0 [ 118.532193][ T1314] ? lock_acquire+0x115/0x350 [ 118.536905][ T1314] ? rcu_is_watching+0x16/0xb0 [ 118.541701][ T1314] ? process_scheduled_works+0x97a/0x1630 [ 118.547458][ T1314] process_scheduled_works+0xc3d/0x1630 [ 118.553096][ T1314] ? __pfx_process_scheduled_works+0x10/0x10 [ 118.559123][ T1314] ? assign_work+0x3cf/0x5d0 [ 118.563745][ T1314] worker_thread+0xa47/0xfb0 [ 118.568389][ T1314] ? __kthread_parkme+0x71/0x1f0 [ 118.573358][ T1314] kthread+0x38b/0x470 [ 118.577457][ T1314] ? __pfx_worker_thread+0x10/0x10 [ 118.582592][ T1314] ? __pfx_kthread+0x10/0x10 [ 118.587203][ T1314] ret_from_fork+0x514/0xb70 [ 118.591822][ T1314] ? __pfx_ret_from_fork+0x10/0x10 [ 118.596961][ T1314] ? __switch_to+0xc89/0x1420 [ 118.601676][ T1314] ? __pfx_kthread+0x10/0x10 [ 118.606289][ T1314] ret_from_fork_asm+0x1a/0x30 [ 118.611091][ T1314] [ 118.614776][ T1314] Kernel Offset: disabled [ 118.619142][ T1314] Rebooting in 86400 seconds..